last executing test programs: 3.535800702s ago: executing program 2 (id=2690): mmap$auto(0x0, 0x61, 0x100001000000004, 0xfa31, 0x400, 0x8000) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x23, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$auto(r0, 0x10e, 0x1, 0x0, 0xe) setreuid$auto(0x3, 0x7) mremap$auto(0x0, 0xffffffffffffffff, 0x3fd6, 0x3, 0x7fffffffb000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) r1 = openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cpu/0/msr\x00', 0xf82, 0x0) write$auto_msr_fops_msr(r1, 0x0, 0x4d) mmap$auto(0x0, 0x2020009, 0x9, 0xeb1, r1, 0x8000) write$auto(0x3, 0x0, 0x100082) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) open(&(0x7f0000000100)='.\x00', 0x40000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x60301, 0x0) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f000000fc00), 0x3, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x1) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_METER_CMD_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x40) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/gre0/gro_flush_timeout\x00', 0x80302, 0x0) sendfile$auto(r3, r3, 0x0, 0x3) setsockopt$auto(0xffffffffffffffff, 0x4, 0x8001, 0x0, 0x2) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) 2.89100575s ago: executing program 2 (id=2695): mmap$auto(0x0, 0x2000d, 0x4000000000df, 0xeb1, 0x404, 0x8000) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder0\x00', 0x1, 0x0) pread64$auto(0xffffffffffffffff, 0x0, 0x100000000008, 0x8) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x2c, 0x940, 0x800, 0x3, 0x6, 0x2, 0x9, 0x5, 0x2, 0x4, 0xb0, 0x7, 0x2, 0x3, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x800, 0x1000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x1fe, 0x81) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) mprotect$auto(0x110c238000, 0x1, 0x3) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x40000, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socket(0x11, 0x80003, 0x300) socket(0x11, 0x80003, 0x300) openat$auto_proc_pid_attr_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/apparmor/prev\x00', 0x1, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptyw5\x00', 0x3e41, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/rpc/auth.unix.ip/channel\x00', 0x141401, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x5a1b02, 0x0) socket(0x2, 0x5, 0x0) socketpair$auto(0x1e, 0x1, 0x0, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) ioctl$auto_TCFLSH2(r0, 0x5411, 0x0) munmap$auto(0x1000000, 0x2000000c) setuid$auto(0x800000000008) landlock_restrict_self$auto(0x5, 0x1b7) madvise$auto(0x0, 0xffffffffffff0001, 0x9) mlockall$auto(0x3) ioctl$auto(0x3, 0x80081270, 0x38) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) socket(0x10, 0x2, 0x0) 2.856462951s ago: executing program 0 (id=2696): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r0 = openat$auto_random_fops_random(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) close_range$auto(r0, r0, 0x3) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'virt_wifi0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x14) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r2 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, 0x0, 0x1541, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) socket(0x18, 0x5, 0x1) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0xa, 0x801, 0x84) (async) socket(0xa, 0x2, 0x0) (async) socket(0x840000000002, 0x3, 0xff) (async, rerun: 32) socket(0xa, 0x3, 0x6) (async, rerun: 32) mq_open$auto(&(0x7f0000000000)='.\xf1e4\xdf\x16\x95kxE\xd9x\x15\xb0\xf6V\x93\xb4E\x06\xc5}l', 0x56a, 0xb275, 0x0) (async, rerun: 32) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) (async, rerun: 32) mq_timedreceive$auto(0x8, 0x0, 0xfffffffd, 0x0, &(0x7f00000000c0)={0x2, 0x1}) (async) io_uring_setup$auto(0x9cb, 0x0) (async) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) (async) ioctl$auto__ctl_fops_dm_ioctl(r2, 0xc040aed4, 0x0) 2.536711877s ago: executing program 3 (id=2697): migrate_pages$auto(0x0, 0xffffffffffffffc0, 0x0, &(0x7f00000001c0)=0x7d) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x0, 0x0) bpf$auto(0x7fb, &(0x7f0000000100)=@bpf_attr_7={@btf_id=0x714, 0x8}, 0xc) mprotect$auto(0x1ffff000, 0x8000000080000001, 0x4) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000000c0)=0x1) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x2) ioctl$auto_SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f00000001c0)) 2.361244506s ago: executing program 3 (id=2699): r0 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000000), 0xc0040, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x5, "36a2662b59209f6bd4aafa4ed15fdb9c791daf044ae6ff089930def80ce28999"}) 2.277473892s ago: executing program 0 (id=2700): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) name_to_handle_at$auto(0xffff, &(0x7f00000001c0)='/\x00', &(0x7f0000000040)={0x0, 0x81}, 0x0, 0x1) r0 = socket(0xa, 0x801, 0x4) socket(0x9, 0x3, 0x4d0b3107) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) io_uring_setup$auto(0x7, 0x0) poll$auto(0x0, 0x0, 0x9) semctl$auto(0x8, 0x804, 0x3, 0x6) setsockopt$auto(0x3, 0x0, 0x40, 0x0, 0x7fff0060) setsockopt$auto(r0, 0x10000000084, 0x0, 0x0, 0x4d19) rt_sigaction$auto(0x18f, &(0x7f0000000100)={&(0x7f0000000040)=&(0x7f0000000000)=0x2, 0x7fffffff, &(0x7f00000000c0)=&(0x7f0000000080)=0x5, {0x3}}, &(0x7f0000000240)={&(0x7f0000000180)=&(0x7f0000000140)=0xf8, 0x0, &(0x7f0000000200)=&(0x7f0000000280)=0x3, {0x9}}, 0x8) 2.250922147s ago: executing program 3 (id=2702): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000080), 0xffffffffffffffff) socket(0x11, 0x3, 0x6) (async) r0 = socket(0x11, 0x3, 0x6) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/gro_flush_timeout\x00', 0x88282, 0x0) write$auto(r1, &(0x7f0000000000)='\x00', 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r2 = socket(0x2, 0x1, 0x0) listen$auto(r2, 0x2) ioctl$auto(0x3, 0x5411, 0x10000000000402) socket(0xa, 0x801, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = open(&(0x7f0000000080)='./file0\x00', 0x22000, 0x50) fsync$auto(r3) write$auto_seq_oss_f_ops_seq_oss(r3, &(0x7f0000000200)="9765ce0f2fc16e5f730ca1b78fd3d407027664049987e379f8c08b13ad69a13af204f4eb262a9222470be1f4ec126f8147f8e22438b7da3daa9143dc18e821063af6b224ff00f8910824846a2f7dfcd530a70ac85b6a4264ed95054b195cf6f772abcfc66216b3710ca9643947a8b7b4c3c4caa2237d9c49177672702386bb7bdb723f525b3b3f07aa21f3f82bdde76856ec35d4e4c8945c050ce6af8bcc2d61b8fb4311724b0fbc10590817", 0xac) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x801, 0x84) (async) socket(0xa, 0x801, 0x84) socketpair$auto(0x1f, 0x4, 0x8000000000000000, 0x0) r4 = getsockopt$auto(0x6, 0x84, 0x81, 0x0, &(0x7f00000000c0)=0x10000) sendmmsg$auto(r0, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5aa, &(0x7f0000000100)={&(0x7f0000000080), 0x49}, 0x5, &(0x7f0000000140), 0xffffffffffffffff, 0x1000}, 0x5}, 0xfffffff3, 0x100) (async) sendmmsg$auto(r0, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5aa, &(0x7f0000000100)={&(0x7f0000000080), 0x49}, 0x5, &(0x7f0000000140), 0xffffffffffffffff, 0x1000}, 0x5}, 0xfffffff3, 0x100) socket(0x2, 0x80805, 0x0) (async) socket(0x2, 0x80805, 0x0) socket(0x2, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) (async) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) openat2$auto(0x6, 0x0, &(0x7f0000000480)={0x42, 0x7fff, 0x25}, 0x27b6) read$auto_blk_mq_debugfs_fops_blk_mq_debugfs(r4, &(0x7f00000002c0)=""/173, 0xad) setsockopt$auto(0x3, 0x10000000084, 0x82, 0x0, 0x8) (async) setsockopt$auto(0x3, 0x10000000084, 0x82, 0x0, 0x8) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) 2.07611326s ago: executing program 0 (id=2703): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) fsopen$auto(&(0x7f0000000000)='nlctrl\x00', 0x3) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x9, 0x400000072, 0x8b72, 0x1000000002, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) rt_sigprocmask$auto(0x6, 0x0, 0x0, 0x8) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1e, 0x5, 0x8, 0x0) r0 = socket(0xa, 0x801, 0x84) getsockopt$auto(r0, 0x84, 0x75, 0x0, &(0x7f0000000000)=0x9000c) r1 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f00000002c0), 0x40000, 0x0) madvise$auto(0x0, 0x54, 0x6) ioctl$auto_DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, 0x0) mmap$auto(0x0, 0x9, 0xfffffffffffffffb, 0x8000000008012, 0x1000000004, 0x0) statx$auto(0xffffff9c, 0x0, 0x1000, 0x1, 0x0) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000010c0), 0xffffffffffffffff) unshare$auto(0x40000080) r2 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x1ff, 0x7, 0x45, 0x4909b6f8, 0x1ffdf, 0x7, 0x200003, 0x2, 0xa121, 0x3, 0x6, 0x4, 0xb4, 0xa, 0x6, 0x10001, 0x80, 0x100000000, 0x0, 0x7, 0x2100, 0x200, 0x0, 0x84, [0x0, 0x0, 0x0, 0x50100000000000, 0x0, 0x2000, 0x0, 0xa, 0x70624ce7, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffbffd, 0xfffffffffffffffd, 0x1, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x2000000000000000, 0x0, 0x0, 0x400000000005b8, 0xc, 0x0, 0x0, 0x0, 0x6, 0xffffffffffffffff, 0x88e, 0x8000000000008, 0xfffffffffffffffc, 0x9, 0xa38, 0x0, 0x3, 0xfffffffffffffffa, 0x8, 0x4000000000, 0x7]}, 0x1fe, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 2.010873925s ago: executing program 1 (id=2704): prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0) (async) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) madvise$auto(0x0, 0x20499d, 0x9) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) fcntl$auto(0x3, 0x400, 0x2) mmap$auto(0x0, 0x636, 0x8, 0xeb1, 0x40000000000a5, 0x7) (async) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/tty18\x00', 0x2e0004, 0x0) ioctl$auto_TIOCGDEV2(r0, 0x5410, 0x0) 1.748023131s ago: executing program 1 (id=2705): mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000) readv$auto(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000100)="45236a9a89fe15a2e01cc122a5661172a0685f7726c9521a42bd"}, 0x8) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004540)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002bbd7000ffdbdf250100000008"], 0x3c}}, 0x22008004) r0 = getpid() process_vm_readv$auto(r0, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f00000000c0), 0xffffffff}, 0x6, 0x0) mmap$auto(0x0, 0x7, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) semctl$auto(0x2, 0x3, 0x13, 0x1) setsockopt$auto(0x3, 0x10000000084, 0xa, 0x0, 0x20) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev5\x00', 0x280, 0x0) bpf$auto(0x8, &(0x7f00000001c0)=@token_create={0x2, r1}, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/v4l-subdev0\x00', 0x8a00, 0x0) ioctl$auto(0x3, 0xc0585605, 0x38) 1.723807922s ago: executing program 2 (id=2706): r0 = prctl$auto(0x53564d41, 0x0, 0x0, 0xd, 0x0) (async) r1 = socket(0x2, 0x801, 0x106) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x0) fanotify_init$auto(0x5, 0x800) poll$auto(&(0x7f0000000080)={0xffffffffffffffff, 0x9, 0x9816}, 0x7f, 0x3) r2 = socket(0xa, 0x1, 0x84) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r2) write$auto_ctl_device_fops_user(r0, &(0x7f0000000200)="17e765d20c2f125e5362540445982c66f8c755bece2d60a406388f961f50b3912201229237fad5235ae93b9a", 0x2c) (async) sendmsg$auto_NL80211_CMD_REQ_SET_REG(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000440)={0x3d8, r3, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x2}, @NL80211_ATTR_STA_WME={0x14, 0x81, 0x0, 0x1, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x4}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x3}]}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0xdd54}, @NL80211_ATTR_SCAN_SSIDS={0x39e, 0x2d, 0x0, 0x1, [@generic="6be950ca968271d11374fe8bda180a974cfe906759b7ca7dd7be987807c84f482d0babdb4e9e24c0d442082ce9c1977e8752e84682185636500879ff6b17965089223b9870e26b8a31b33c12fce7aab549c16ad9d9a4a24acc2433228eeaa47d84781d1236689d1a6ebccaebf992e63f3da2a554cc761574fb67c0092a27ac3f84bd4320bf599db2ec99950365679657aeca336f6d143a3f41c7a052835d4ef269cc2a867a3a3e35f27e331837f7ac4369c7cab94b6d2e261fc53a697ac965961e7691be3a9e2992482695b561400669b8255f97e074f8649ace6c0f41a96e3dcb483501e3caeda9c3215964b1e15697f2bb79c45085b29aa220c872d94cca", @nested={0xf1, 0xfe, 0x0, 0x1, [@nested={0x4, 0x137}, @typed={0x8, 0xa7, 0x0, 0x0, @u32=0x4}, @typed={0x8, 0x12d, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @generic="e38ebcaa4dc95fd87f9ce1c5e0275744c57b690954ac208da5171d96b5f393de06a5e4de3ab6465d2addf12783e247ab832b30d8cdfbd37c1d4c5efa602014fe0a97c8b9bae0cad91235bd421766f75454f115a38b014fb585b96d27831fed823d7b4881313dfcb2918d6394fe2e46e3f08838425f8c30b4baa7130b8f255a06cc2b3c45f5c5deefbc0ccd106780f300ac290bca7ff85778b636f7607b77be321a345286d28372fdfb0d2db3f9eade632d79bde34fa7595d2060cade5a00e52b92fadad607a650cde73d641c4b77c0dbc01fb6213d1e039556"]}, @typed={0x4, 0x6b}, @typed={0x8, 0x88, 0x0, 0x0, @ipv4=@broadcast}, @typed={0xaf, 0x103, 0x0, 0x0, @binary="1228b783f01739cecaef0b8c58b16715bd0407d0e3531547ebfec5d0abbc92c769753efdeb242888eea92af21fb81faf7b2a3847aeb7e2a86eff417bbfb34b7a7906d9a6aecabc701ecea22941e8cb2e47410dc9115c2a8cf39220e0f7bf6c87652cad3ce8256824f858375c007f2425fecbf3a8d68b352fad6122616972da2db5c7d8aa43ea23442e794bf045005f127b82986b33bb3321420cce41fd2bd4d64b4e3c3b78370fd3aa4c14"}, @typed={0xc, 0x2e, 0x0, 0x0, @u64=0x8000000000000000}, @generic="d85b9effd0d833fd6289a61d3fcf700a19546b8b3b11b12a5689854d40b3afc2cff442566f2d8ad2e508c39cdeb59514d36e994d1b72f5e02b584b577ae844df5f55bf9a7402c00ed82f3c4205e33148409dec696d0fd4ff31fd32dc86682a448ee315b53ed2af6daabd89fff544052bbe6ac22af72d147df037aaf3007c0a0f5c97f0fc20dbdd4e84ff0c675e22df69bd1f223dcb7c7c0cd0a4757c11a1e649ae3eef6d1bea64a5722975dc124d3ae2ff42ffd9ecec1563a5630260b41151d2b47c5db390a8cee594a2b3fab19a54c78f481da54e8e49faddc818cc5c4d72"]}]}, 0x3d8}, 0x1, 0x0, 0x0, 0x4004}, 0x20004804) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) socket(0x2, 0x5, 0x3) setsockopt$auto(0x3, 0x10000000084, 0xd, 0x0, 0xb) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) io_uring_setup$auto(0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$auto_TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f0000003940)={0x0, 0x0, &(0x7f0000003900)={&(0x7f0000000000)={0x20, 0x0, 0xf01, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@typed={0x7, 0x2, 0x0, 0x0, @str='@+\x00'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40800}, 0x840) (async) sendmsg$auto_SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010025bd7000f9dbdf25020000000b0001"], 0x20}, 0x1, 0x0, 0x0, 0x4008014}, 0x10) r4 = socket(0x2, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'bond_slave_1\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000021700)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x4004804) (async) write$auto(r1, &(0x7f0000000000)='*\x00', 0xfd) 1.666280796s ago: executing program 3 (id=2707): timer_create$auto(0x9, 0x0, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x8002, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x101080, 0x0) read$auto_snd_rawmidi_f_ops_rawmidi(r0, &(0x7f0000000080)=""/45, 0x2d) close_range$auto(0x2, 0x8, 0x0) openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0x500, 0x0) unshare$auto(0x40000080) read$auto(0xc8, 0x0, 0x200) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) read$auto_tracing_entries_fops_trace(r0, &(0x7f00000001c0)=""/80, 0x50) socket(0x2, 0x3, 0x2) setsockopt$auto(0x3, 0x0, 0xcc, 0xfffffffffffffffc, 0x3c) mmap$auto(0x80000000, 0x3, 0x92, 0x14, r1, 0x1ff) unshare$auto(0x401) r2 = fsopen$auto(&(0x7f0000000000)='\x00', 0x400) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r2) unshare$auto(0x40000080) 1.569680411s ago: executing program 1 (id=2708): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) ppoll$auto(&(0x7f0000000280)={0xffffffffffffffff, 0x6, 0x9}, 0x9, 0x0, &(0x7f0000000300)={0x7ff}, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$auto_MACSEC_CMD_DEL_RXSA(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)={0x164, r3, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@MACSEC_ATTR_RXSC_CONFIG={0x12b, 0x2, 0x0, 0x1, [@nested={0x22, 0xe4, 0x0, 0x1, [@typed={0x8, 0x91, 0x0, 0x0, @fd=r1}, @typed={0x8, 0x65, 0x0, 0x0, @ipv4=@private=0xa010100}, @nested={0x4, 0xe2}, @generic, @nested={0x4, 0xe8}, @generic="850c95f6f8f1", @generic]}, @generic="6f43fd8f5714c1bc6ebec15f4c42ef66a9f4170ca1f22fdfad694124de700ec5dd1f3b6bc09cebc0ca1ef4305d5b8eb91d5636432549d4ea303c4776d056906d7ec5ba4971d0fc3263aa43fb7a5b48da78c7a2d3d190e490e81ecb3748dd1a91c165efb8fffb0df56f13cf111744bd653b3451ef288c4b384009245548af0da25a17ea49fcb4d8882448bbaa43c038a3cae000c573e9c7c37034f2737fb71a1c9e00950bf1b19c356265b4", @nested={0x55, 0x119, 0x0, 0x1, [@typed={0x8, 0x123, 0x0, 0x0, @u32=0x9}, @typed={0x4, 0x55}, @generic="1f0e51db2f79eb6c155b9f04b204055ad97e71a41dd24611099213b09e5c5b9d4dbe9e5c9355960fbce3", @typed={0x8, 0xe3, 0x0, 0x0, @u32=0x2}, @generic="ea82a5a2dac2582d1db2419dd42b9565e622ae"]}]}, @MACSEC_ATTR_IFINDEX={0x8}, @MACSEC_ATTR_SA_CONFIG={0x8, 0x3, 0x0, 0x1, [@nested={0x4, 0xe}]}, @MACSEC_ATTR_SA_CONFIG={0x4}, @MACSEC_ATTR_SA_CONFIG={0x10, 0x3, 0x0, 0x1, [@nested={0x4, 0x49}, @typed={0x8, 0x2c, 0x0, 0x0, @fd=r0}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x844}, 0x80c4) 1.443893599s ago: executing program 2 (id=2709): close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x15, 0x5, 0x0) r1 = socket(0x2, 0x1, 0x106) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) connect$auto(0x3, &(0x7f0000000140), 0x55) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = getpgid$auto(0xffffffffffffffff) fstat$auto(r1, &(0x7f0000000180)={0x2, 0x5, 0x2, 0x5, 0xee01, 0x0, 0x0, 0x3c, 0x1, 0x80, 0x9de, 0x7a331be0, 0x401, 0x6, 0x8, 0x1, 0x800}) sendmsg$auto_NFC_CMD_ENABLE_SE(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000240)={0x337c, 0x0, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x6}, @NFC_ATTR_SE_APDU={0x2f, 0x19, "c9dc40d601587c0fada26f846b1e3094ecde84afa0ab02e5f1f64db3496f1bf85b6c7a112e146ac9b7c422"}, @NFC_ATTR_LLC_SDP={0x32d2, 0x13, 0x0, 0x1, [@generic="3db6ff9d301efec0454d91261ada71f473eba659a51fdf378fc0e3522583dc1f0815753d1eb1e6bd1020224b7903e7772fb7569934cb9b7c1bb71b37b9b5", @typed={0x8, 0x66, 0x0, 0x0, @pid=r3}, @nested={0x97, 0xc9, 0x0, 0x1, [@typed={0x8, 0x81, 0x0, 0x0, @uid=r4}, @typed={0x8, 0x44, 0x0, 0x0, @fd=r0}, @typed={0x6, 0x30, 0x0, 0x0, @str='#\x00'}, @nested={0x4, 0xfe}, @generic="6bb9b69a4b8fcd30d2a3a300ed5e46a46d9d1c8777e6a1661e3c5c2f0e1576240b251626c2eb2c1ac2eb5dd6aaf512f451e889a9167d972e784136e1c3b03e4523261a49f7115a8ce465ac20c8eaf9b9d82a509a1785b13bcc53565bb13a21c9dc57157a25c8b2b0585e7d4b5234a28630bb730c57ae86"]}, @nested={0x93, 0xf, 0x0, 0x1, [@generic="c5124b24eb06f33537624a6c0d8121de0ed43625f4306051c473bf2a12a8727e629da314f0b40e4f230457fc5336562259faa50c3af00787efb13709897ad95b0fcdd874e1d959bf9443b903776ed663a7ea596a4e0375fd5c94679bde7f8d7322892e4b3b0cbcde5181fb1c7745354704b4356ec01f6e6d2061a48633f21c13e871f3536b10a71fa8322b47d75a18"]}, @nested={0x10b8, 0x125, 0x0, 0x1, [@nested={0x4, 0xd3}, @generic="d84d468cc0e07b89129f8a88a08635e8f5a9659957b9ec1c999772cbcea235eee6ce28003bee5e0dd55481a47c35650ae8ed941951dba867642994196b64785f7fdbf445982389f8fdea849825c4281672d614192b36e51569dd9f847d7a2cf35a350739ca174dd5326d6f650adaad671aa105414cbc5b2a8c525dade6006eb2581a9df6fcb634", @typed={0x8, 0xfe, 0x0, 0x0, @fd=r1}, @generic="db2dcbd316d684987e24dadf8476e70d84ac5ebaccfed8ccd85aa0fce47cb6a1e0", @generic="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"]}, @nested={0x20a4, 0x60, 0x0, 0x1, [@generic="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", @generic="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", @typed={0x8, 0x18, 0x0, 0x0, @pid=0xffffffffffffffff}, @nested={0x4, 0xb4}, @typed={0x8f, 0x9, 0x0, 0x0, @binary="5b437171ce515935925d25c02d04f2c5ca5b620c230eb4c12ed42de550d1fb07f8f300e56382352f802f07eff8b4de3ae75754053e2b63ce50f8d03c6b27e721ec3593bd32c86657407c9f0dc947e7eb61687cd8581293419e6f9d9c382a7331ca4a58eb070a884074a5f69417720dcce5a4595e03f48580d005b4babb120bee6b09c639ba909fdeccc74a"}, @nested={0x4, 0x5}]}]}, @NFC_ATTR_LLC_SDP={0x5c, 0x13, 0x0, 0x1, [@typed={0x3c, 0x5b, 0x0, 0x0, @binary="ecea253d663d13f3ce9d67780e33933194591b07cc722a493bb9171164878ff958bd6e21901da28256fc7645beb4fdb2e96f82af5061ca1f"}, @nested={0xc, 0x69, 0x0, 0x1, [@typed={0x8, 0xa3, 0x0, 0x0, @ipv4=@multicast2}]}, @typed={0x8, 0x70, 0x0, 0x0, @fd=r1}, @typed={0x8, 0x14d, 0x0, 0x0, @u32=0x7}]}]}, 0x337c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) 1.405637911s ago: executing program 0 (id=2710): r0 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000000), 0xc0040, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x5, "36a2662b59209f6bd4aafa4ed15fdb9c791daf044ae6ff089930def80ce28999"}) 1.347669963s ago: executing program 2 (id=2711): socket(0x2, 0x3, 0xa) mmap$auto(0x0, 0x4, 0xdf, 0x80000000000eb1, 0x3, 0x0) (async) mmap$auto(0x0, 0x4, 0xdf, 0x80000000000eb1, 0x3, 0x0) socket(0x11, 0x80003, 0x300) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) readv$auto(0x4, &(0x7f0000000100)={0x0, 0x1000}, 0x8) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) modify_ldt$auto(0x1, &(0x7f00000001c0), 0x10) gettid() (async) r0 = gettid() syz_clone(0x300000, &(0x7f0000000140)="8cc14e5d85fb81520f028e9fb8bf0d5c1eb98a39ea710f7ed95ec1b32e90e67c9927e6c64dadcd4b2e5c6751d704e957f942fc2b01451350eb21216814127aeaba597faae35078f7aba18e3b6178c055531c4410d91a9d3c96871da6e1df038a20e2b7d7b1909328846cb96772beef3fcfecf0d01568cb7e639dc0adf23c0753c90e6777c625b132712a935b4b9fa86230b65a50564e618ce54137821acb26f9659a6ec886a0224fb62967feb1596b", 0xaf, &(0x7f00000000c0), &(0x7f0000000200), &(0x7f0000000240)="8ed6b6182d6bec3c3f1b982d3768003d53953b83bcef4f294dae402e96bc57aa92138c4e0c201e974f0396becf60c4ba7d4fd1bdc9fb161c6d9b630a6965a66b6ab2dfa79b5431ca1d26") rt_sigqueueinfo$auto(r0, 0x10, &(0x7f0000000000)={@siginfo_0_0={0x7, 0x7, 0xfffffffa, @_rt={r0, 0x0, @sival_ptr=0x0}}}) clone3$auto(0x0, 0x9) (async) clone3$auto(0x0, 0x9) clone$auto(0x1000, 0x9, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x5) clone$auto(0x3, 0x0, &(0x7f0000000080)=0x100, 0x0, 0x0) 1.29252286s ago: executing program 0 (id=2712): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r0 = prctl$auto(0x1000000003b, 0x1, 0xffffffffffffffff, 0x5, 0x7) (async) madvise$auto(0xfffffffffffffff8, 0xffffffffffff0005, 0x19) (async, rerun: 32) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async, rerun: 32) mmap$auto(0x3, 0x2020008, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socket(0x10, 0x1, 0x1) r2 = socket(0x1a, 0x3, 0x1) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x8000000000000000, 0x15) (async) madvise$auto(0x7fffffffe, 0xfffffffffffffbfa, 0x5) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r3 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000000000), r3) (async) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), r0) (async) io_uring_register$auto(r2, 0x200004, &(0x7f00000002c0)="8417c768565e240fc70800002c62b03e004f26606a79e196de9d64b608a6d6f54e196c48fc1fe8e6ffffff7f00000000aeea328e1d45bf1985e80270d52fafa57e4765002ae67c5dc5f7b97be75b98626aba4ff7bfba272326e1e226fa9eff2948cd0edbc1ddc8b635c608ebe344752a8bc6291a34", 0x5) (async) syz_genetlink_get_family_id$auto_hsr(&(0x7f0000004400), 0xffffffffffffffff) madvise$auto(0x0, 0xffffffffffff0004, 0x19) ioperm$auto(0x4, 0xbc6, 0x81) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0xffffffffffff0008, 0x19) (async) clone$auto(0x3fff, 0xad3, 0x0, 0x0, 0x5) (async) openat$auto_tracing_mark_raw_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/trace_marker_raw\x00', 0x20282, 0x0) (async) socket(0x2, 0x6, 0x0) socket(0xa, 0x801, 0x84) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) mmap$auto(0x0, 0x2000c, 0xdf, 0x1010, 0x40000000000a5, 0x8002) (async) socket(0xa, 0x2, 0x88) (async) recvmmsg$auto(r1, 0x0, 0x5, 0x8, 0x0) (async) pidfd_getfd$auto(0x3, 0x1, 0x100000000) 1.093133443s ago: executing program 3 (id=2713): socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) socket(0xa, 0x5, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_ID(0xffffffffffffffff, 0x0, 0x4000080) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer\x00', 0x2, 0x0) ppoll$auto(&(0x7f0000000000)={r2, 0x2, 0xffff}, 0x5, 0x0, 0x0, 0x8) shmctl$auto(0xffffff81, 0x8, &(0x7f0000000340)={{0x5, 0x0, 0xee00, 0x2, 0x3ff, 0x80000000, 0x6}, 0xb4, 0x3, 0x8000, 0x8, @raw=0x7, @raw=0x8, 0x6, 0x0, &(0x7f0000000140)="2b761c56a1c9577b5a7342a6eec7631a3d780fd2d88724bfb1303f363f9159cd27db80a34e75d5d92af4d4dc2cc6f568826d6fcccf23b3ba9fa5dc4c31600b89771b0259f93ce129476f3094ebbcff401979988cf13c558667b4425a820a8925a57d7d29982f6cd597eebdfd6d8e38d5573093ff6e1a49545669bf9dd540dab18711bc631796c959f38816846b342721793efa5397e3e64016b3e4359035ad407416dff9288bbdc68ff36cc0250437373b8570023c5e8c56d3b76939fadd96ace54068c42f772ec601e6ef55cb69d258", &(0x7f0000000240)="4e8ce1d8eab01ae4f7ffa418f461f9b8c33a81842db01d3410999d2f91f4e72faa4a6d204b7b85230c66a9c012fa88d0706f751eab1656af737e65cd9285fda4da21d8cc886f6d9ce3a85315380cd1e07b8920c75822e4d419c54b8e9e794e891cc8a15e41418ae11aa85790b2463c02d5981df27549455c4645b901c77797815caf461b39d2020e5f705bb6bd5ae957d928a85e7cb9b8b4e8c1d46f1c4dcefe0f679665247b710afb8fc9d443a292c74a0152627dcc452b6b56fe69fbb0901dbfbf138f69120952dea66458eb02f48e737cde1ee657069a"}) setfsgid$auto(0xee01) r4 = getpgrp(0xffffffffffffffff) mmap$auto(0x100, 0x3, 0x6, 0x111, r3, 0xd1) waitid$auto(0xa, r3, &(0x7f0000000580)={@siginfo_0_0={0x8, 0x2, 0x10, @_rt={0xffffffffffffffff, 0xffffffffffffffff, @sival_ptr=&(0x7f0000000480)="4baf8a6fce2073eb6b599ab0e76ccf2217d2f2edb4d8fe789d96934544b44d38bed1fbd2f829b1afcc1e2eeaf7ea28522e3c44284fa15edc6c3e4f7046e62756bf3cc61002931925051c1c7122779db709f272cc9276b9fbf5b9b1813ae6c9626399047c8d1b64b934a54e0b48f576bd0ef4a05a4035601a1d51988d34e00ae8c5414e49f3ac893d31cccc536167dc6af5f057a36937e353e0b2ac658b880f0a887acf9cf0383d38f3184dc36d29148b2d21bf3e98a788eed498dbf72667b0feb3ec6d77d4888c687ccd0f044997"}}}, 0xb, &(0x7f0000000600)={{0x7, 0x9}, {0x80, 0xa}, 0xf, 0x6, 0x8, 0x7, 0x1, 0x7, 0x0, 0x9, 0x10001, 0x9, 0x2, 0x1, 0x800, 0x99}) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002cc0)=ANY=[@ANYBLOB="a0130000", @ANYRES16=r1, @ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="08001b00", @ANYRES32=0x0, @ANYBLOB="08000f00ffffffff14003e00fe8000000000000000000000000000bb04002680000000790158800400008008001400", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0400a08008000600ffffffff0000b40094005647d2c80ae66b007f0dea59acb74f7c5607996293b77262d4250245d24dfac0ee207b5ade1d97bb92d5dfc3c92b170bce2d87c5245bfa2a8be8103c57fa12f1e49052d6317dcda3ccc626cb714f6f26656c37788061ca4b464cd36e298fe9dda4b926874d767d7618c3c3be8f1483944642a9d743d5b23adc8587cb56b609e35a9eee354b9e9416857ab00278241759f0e284c3846ef5f33bca69038c0e173a9e438c37fd748d985e90f3619ec06bad0c00c000000000000000000012000100898288470000000000000000000000000c000b000300000000000000"], 0x13a0}, 0x1, 0x0, 0x0, 0x44040}, 0x20004894) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB='&\x00', @ANYBLOB="5de1"], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, 0x0, 0x400c000) write$auto(0xffffffffffffffff, 0x0, 0x2fb) move_mount$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4) memfd_secret$auto(0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) getsockopt$auto(0x6, 0x84, 0x6, 0x0, &(0x7f0000000080)=0x9c8) 956.015013ms ago: executing program 2 (id=2714): r0 = socket(0x15, 0x5, 0x0) r1 = socket(0x10, 0x2, 0x15) mmap$auto(0xfefffffeffffffff, 0x400004, 0xdf, 0x9b72, r1, 0x7ffe) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/timers\x00', 0x0, 0x0) mlockall$auto(0x7) inotify_rm_watch$auto(0xffffffffffffffff, 0x84e4) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20000, 0x0) madvise$auto(0x0, 0x2000040080000004, 0xe) modify_ldt$auto(0x1, 0x0, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0xfffffffffffffffd, 0xffffffffffff0002, 0x19) fallocate$auto(r2, 0x1, 0x9, 0x80000000) mmap$auto(0x2, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x8000000000000000, 0x15) madvise$auto(0x0, 0x1010001, 0x100000003) setgroups$auto(0xe32, &(0x7f0000000040)=0x9) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = syz_genetlink_get_family_id$auto_taskstats(&(0x7f00000000c0), r0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001d00), r6) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_RINGS_SET(r6, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000001d40)={0x28, r7, 0x23, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_RINGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @ETHTOOL_A_RINGS_RX_PUSH={0x5}]}, 0x4d}, 0x1, 0x0, 0x0, 0x90}, 0x80000) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'veth0_to_hsr\x00', 0x0}) r11 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001480), r5) sendmsg$auto_ETHTOOL_MSG_CHANNELS_SET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f0000000100)={0x28, r11, 0x1, 0x70bd2a, 0x25dfdc00, {}, [@ETHTOOL_A_CHANNELS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x8800}, 0x4) sendmsg$auto_CGROUPSTATS_CMD_GET(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x3c, r4, 0x1, 0x70bd27, 0x25dfdbff, {}, [@CGROUPSTATS_CMD_ATTR_FD={0x8, 0x1, r5}, @CGROUPSTATS_CMD_ATTR_FD={0x8, 0x1, r1}, @CGROUPSTATS_CMD_ATTR_FD={0x8}, @CGROUPSTATS_CMD_ATTR_FD={0x8, 0x1, r3}, @CGROUPSTATS_CMD_ATTR_FD={0x8, 0x1, r1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x16}, 0x20000000) madvise$auto(0x0, 0x200007, 0x19) 628.350925ms ago: executing program 1 (id=2715): timerfd_create$auto(0x78, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0F:03/uid\x00', 0x103080, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000003800)=""/168, 0xa8) close_range$auto(0x2, 0x8, 0x0) personality$auto(0x40004010410ffc) mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x5, 0x0) socket(0xa, 0x801, 0x106) connect$auto(0x3, &(0x7f00000000c0), 0x55) setsockopt$auto(0x3, 0x6, 0x4, 0x0, 0xfb3) io_setup$auto(0x5, &(0x7f0000000000)) socket(0x28, 0x3, 0x100) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/035/001\x00', 0xa901, 0x0) ioctl$auto(0x3, 0x8004550f, 0x1) ioctl$auto(0x3, 0x541b, 0xfffffffffffff4e0) 412.960671ms ago: executing program 1 (id=2716): r0 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f0000004240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x1c, r0, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@HWSIM_ATTR_RADIO_NAME={0x7, 0x11, '..\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40c8}, 0x4048000) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_KEY(r1, &(0x7f0000001100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000010c0)={&(0x7f0000000080)={0x102c, r2, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x8}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x9}, @NL80211_ATTR_CNTDWN_OFFS_PRESP={0x1004, 0xbb, "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"}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x102c}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000444) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x2, 0x5, 0x0) mmap$auto(0xa, 0x400008, 0xde, 0x9b70, r3, 0x800008000) capget$auto(0x0, 0xfffffffffffffffe) lsm_list_modules$auto(0x0, 0x0, 0x0) r4 = socket(0x2, 0x801, 0x106) getsockopt$auto(r4, 0x11c, 0x2, 0x0, 0x0) setsockopt$auto(0x4, 0x84, 0x25, 0xfffffffffffffffe, 0x0) 269.259838ms ago: executing program 1 (id=2717): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) close_range$auto(0x2, 0xa, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) socket(0x2, 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/loop6/queue/discard_max_bytes\x00', 0x1a1842, 0x0) write$auto(0x3, 0x0, 0xfffffdef) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) poll$auto(&(0x7f0000000040)={0x3, 0x1, 0xa}, 0x5, 0x108) 171.041937ms ago: executing program 3 (id=2718): mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x801, 0x106) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004) get_mempolicy$auto(0x0, 0x0, 0x3, 0x1ff, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x0, 0x80805, 0x9) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x9, 0x3e, 0x0, 0x9) write$auto(0x3, 0x0, 0xfdef) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB], 0x14}}, 0x4000000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv6/conf/veth0_to_team/accept_ra_rtr_pref\x00', 0x382, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/bus/sdio/drivers/smssdio/uevent\x00', 0x7956cf7e44942942, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0xa101, 0x0) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/pcmC1D0c\x00', 0x40, 0x0) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x20080, 0x0) select$auto(0x3, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x4, 0x15f4da0a, 0x800000001, 0x3, 0x300000000000000, 0x80000001, 0x7, 0x6d3c, 0xfffffffffffffffd, 0x2]}, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto(0x3, 0x89ed, 0xfffffffffffff4e0) prctl$auto(0x2, 0x300000000000, 0x4, 0x8090, 0x7) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mincore$auto(0x0, 0x9, 0x0) readv$auto(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000100)="45236a9a89fe15a2e01cc122a5661172a0685f7726c9521a42bd"}, 0x8) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004540)={&(0x7f0000000100)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x44}, 0x22008004) r1 = getpid() process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f00000000c0), 0xffffffff}, 0x6, 0x0) 0s ago: executing program 0 (id=2719): r0 = socket(0x11, 0x80003, 0x300) mmap$auto(0x7fff, 0x100008, 0x1000000024, 0x9b72, r0, 0x73a8) (async) r1 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event0\x00', 0x80, 0x0) ioctl$auto_evdev_fops_evdev(r1, 0xffffffff80004535, 0x0) (async) socketpair$auto(0x200, 0x1, 0x2, &(0x7f0000000000)=0xe3) (async) r2 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) flock$auto(r2, 0x5) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8080}, 0x24004805) lstat$auto(0x0, &(0x7f0000000180)={0x7, 0xb, 0x100000002, 0xffffffff, 0x0, 0x0, 0x0, 0x1000000006, 0x6, 0x7, 0x400, 0x7ffffffb, 0x5, 0xffffffff80000000, 0x1, 0x7, 0x107}) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) (async) flock$auto(r2, 0x5) ioctl$auto(0x3, 0x8914, 0x91) (async) unshare$auto(0x40000080) (async) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x18) getrandom$auto(0x0, 0x6000000, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) kernel console output (not intermixed with test programs): T6340] [ 100.753000][ T6340] dump_stack_lvl+0x16c/0x1f0 [ 100.757724][ T6340] should_fail_ex+0x497/0x5b0 [ 100.762440][ T6340] _copy_to_user+0x32/0xd0 [ 100.766902][ T6340] simple_read_from_buffer+0xd0/0x160 [ 100.772311][ T6340] proc_fail_nth_read+0x198/0x270 [ 100.777382][ T6340] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 100.782987][ T6340] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 100.788579][ T6340] vfs_read+0x1df/0xbe0 [ 100.792775][ T6340] ? __fget_files+0x1fc/0x3a0 [ 100.797488][ T6340] ? __pfx___mutex_lock+0x10/0x10 [ 100.802552][ T6340] ? __pfx_vfs_read+0x10/0x10 [ 100.807280][ T6340] ? __fget_files+0x206/0x3a0 [ 100.812019][ T6340] ksys_read+0x12b/0x250 [ 100.816301][ T6340] ? __pfx_ksys_read+0x10/0x10 [ 100.821087][ T6340] do_syscall_64+0xcd/0x250 [ 100.825613][ T6340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.831524][ T6340] RIP: 0033:0x7f1c1c18473c [ 100.835944][ T6340] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 100.855559][ T6340] RSP: 002b:00007f1c1ceea030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 100.863982][ T6340] RAX: ffffffffffffffda RBX: 00007f1c1c375fa0 RCX: 00007f1c1c18473c [ 100.871974][ T6340] RDX: 000000000000000f RSI: 00007f1c1ceea0a0 RDI: 0000000000000006 [ 100.879962][ T6340] RBP: 00007f1c1ceea090 R08: 0000000000000000 R09: 0000000000000000 [ 100.887945][ T6340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 100.895923][ T6340] R13: 0000000000000000 R14: 00007f1c1c375fa0 R15: 00007ffd37268478 [ 100.903914][ T6340] [ 102.036053][ T6367] netlink: 334 bytes leftover after parsing attributes in process `syz.2.132'. [ 103.130476][ T6374] mmap: syz.1.133 (6374) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 103.587328][ T6391] FAULT_INJECTION: forcing a failure. [ 103.587328][ T6391] name failslab, interval 1, probability 0, space 0, times 0 [ 103.625298][ T6391] CPU: 1 UID: 0 PID: 6391 Comm: syz.0.137 Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 [ 103.635956][ T6391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 103.646135][ T6391] Call Trace: [ 103.649434][ T6391] [ 103.652385][ T6391] dump_stack_lvl+0x16c/0x1f0 [ 103.657114][ T6391] should_fail_ex+0x497/0x5b0 [ 103.661842][ T6391] ? fs_reclaim_acquire+0xae/0x150 [ 103.667009][ T6391] should_failslab+0xc2/0x120 [ 103.671737][ T6391] __kmalloc_noprof+0xce/0x4f0 [ 103.676555][ T6391] ? xfrm_hash_alloc+0xd1/0x100 [ 103.681453][ T6391] xfrm_hash_alloc+0xd1/0x100 [ 103.686173][ T6391] xfrm_state_init+0x160/0x630 [ 103.690983][ T6391] ? __pfx_xfrm_net_init+0x10/0x10 [ 103.696141][ T6391] xfrm_net_init+0x211/0xcb0 [ 103.700783][ T6391] ? __pfx_xfrm_net_init+0x10/0x10 [ 103.705941][ T6391] ops_init+0x1df/0x5f0 [ 103.710153][ T6391] setup_net+0x21f/0x860 [ 103.714449][ T6391] ? __pfx_setup_net+0x10/0x10 [ 103.719267][ T6391] ? down_read_killable+0xcc/0x380 [ 103.724436][ T6391] ? __pfx_down_read_killable+0x10/0x10 [ 103.730049][ T6391] ? debug_mutex_init+0x37/0x70 [ 103.734956][ T6391] copy_net_ns+0x2b4/0x6c0 [ 103.739425][ T6391] create_new_namespaces+0x3ea/0xad0 [ 103.744761][ T6391] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 103.750440][ T6391] ksys_unshare+0x45d/0xa40 [ 103.754990][ T6391] ? __pfx_ksys_unshare+0x10/0x10 [ 103.760062][ T6391] ? xfd_validate_state+0x5d/0x180 [ 103.765225][ T6391] __x64_sys_unshare+0x31/0x40 [ 103.770038][ T6391] do_syscall_64+0xcd/0x250 [ 103.774594][ T6391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.780543][ T6391] RIP: 0033:0x7fb07a185d29 [ 103.784991][ T6391] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.804644][ T6391] RSP: 002b:00007fb07b065038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 103.813104][ T6391] RAX: ffffffffffffffda RBX: 00007fb07a375fa0 RCX: 00007fb07a185d29 [ 103.821122][ T6391] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 103.829130][ T6391] RBP: 00007fb07a201b08 R08: 0000000000000000 R09: 0000000000000000 [ 103.837140][ T6391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 103.845154][ T6391] R13: 0000000000000000 R14: 00007fb07a375fa0 R15: 00007fff841c6c78 [ 103.853184][ T6391]                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                             syzkaller syzkaller login: [ 148.299303][ T7551] mkiss: ax0: crc mode is auto. [ 148.392214][ T7549] syz.0.374 (7549): attempted to duplicate a private mapping with mremap. This is not supported. [ 148.780063][ T7570] netlink: 8 bytes leftover after parsing attributes in process `syz.0.379'. [ 149.662320][ T7601] binder: 7600:7601 ioctl 400c620e 9 returned -22 [ 152.329360][ T7696] can: request_module (can-proto-0) failed. [ 152.735588][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 153.005343][ T7716] netlink: 287 bytes leftover after parsing attributes in process `syz.1.413'. [ 153.034973][ T7710] netlink: 28 bytes leftover after parsing attributes in process `syz.2.412'. syzkaller syzkaller login: [ 154.578713][ T7744] ima: Unable to open file: /surit‹¯Ròy/integrity?iqa/policy (-2) [ 154.884093][ T7743] ima: policy update failed [ 154.912977][ T29] audit: type=1802 audit(8277292045.300:29): pid=7743 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.421" res=0 errno=0 [ 155.202572][ T7766] ptrace attach of "./syz-executor exec"[5835] was attempted by "./syz-executor exec"[7766] [ 155.254734][ T7769] netlink: 'syz.2.428': attribute type 4 has an invalid length. [ 155.285298][ T7769] netlink: 314 bytes leftover after parsing attributes in process `syz.2.428'. [ 155.341694][ T7774] netlink: 287 bytes leftover after parsing attributes in process `syz.0.429'. [ 155.475470][ T7779] capability: warning: `syz.2.432' uses 32-bit capabilities (legacy support in use) syzkaller syzkaller login: [ 155.661102][ T7792] device-mapper: ioctl: Invalid ioctl structure: uuid , name , dev 400008000000006 [ 156.068839][ T7808] netlink: 326 bytes leftover after parsing attributes in process `syz.2.438'. [ 156.082031][ T7808] netlink: 28 bytes leftover after parsing attributes in process `syz.2.438'. [ 159.388687][ T7906] netlink: 28 bytes leftover after parsing attributes in process `syz.1.456'. [ 159.624593][ T7908] erspan0: entered allmulticast mode [ 159.956187][ T7920] netlink: 334 bytes leftover after parsing attributes in process `syz.0.463'. [ 160.452974][ T7935] netlink: 28 bytes leftover after parsing attributes in process `syz.3.466'. [ 160.486139][ T7935] netlink: 28 bytes leftover after parsing attributes in process `syz.3.466'. [ 160.995884][ T7955] netlink: zone id is out of range [ 161.015432][ T7955] netlink: zone id is out of range [ 161.021113][ T7955] netlink: zone id is out of range [ 161.055236][ T7955] netlink: zone id is out of range [ 161.076090][ T7955] netlink: zone id is out of range [ 161.103771][ T7955] netlink: zone id is out of range [ 161.117107][ T7955] netlink: zone id is out of range [ 161.158985][ T7955] netlink: zone id is out of range [ 161.164708][ T7955] netlink: zone id is out of range [ 161.193945][ T7955] netlink: zone id is out of range [ 162.898071][ T8005] netlink: 287 bytes leftover after parsing attributes in process `syz.3.483'. [ 163.775040][ T8022] netlink: 338 bytes leftover after parsing attributes in process `syz.3.486'. [ 163.796620][ T8022] netlink: 338 bytes leftover after parsing attributes in process `syz.3.486'. [ 163.815232][ T8022] netlink: 134 bytes leftover after parsing attributes in process `syz.3.486'. [ 164.858209][ T8041] Invalid ELF header magic: != ELF [ 165.244737][ T8060] netlink: 287 bytes leftover after parsing attributes in process `syz.1.495'. [ 167.112070][ T8118] netlink: 4 bytes leftover after parsing attributes in process `syz.0.506'. [ 167.512153][ T8134] netlink: 287 bytes leftover after parsing attributes in process `syz.0.510'. [ 167.904681][ T8148] netlink: 4 bytes leftover after parsing attributes in process `syz.2.514'. [ 169.213397][ T8183] net_ratelimit: 387 callbacks suppressed [ 169.213418][ T8183] openvswitch: netlink: IP tunnel dst address not specified [ 170.043324][ T8213] netlink: 287 bytes leftover after parsing attributes in process `syz.1.528'. [ 172.307312][ T8252] openvswitch: netlink: IP tunnel dst address not specified [ 174.695589][ T8282] nfs: Bad value for 'source' [ 176.007213][ T8326] netlink: 287 bytes leftover after parsing attributes in process `syz.2.560'. [ 178.336936][ T8380] netlink: 287 bytes leftover after parsing attributes in process `syz.2.574'. [ 180.249832][ T8421] netlink: 4 bytes leftover after parsing attributes in process `syz.1.584'. [ 182.372364][ T8448] syz.1.594 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 185.160599][ T8518] netlink: 'syz.2.608': attribute type 22 has an invalid length. [ 185.205716][ T8518] netlink: 334 bytes leftover after parsing attributes in process `syz.2.608'. [ 185.276084][ T8521] netlink: 28 bytes leftover after parsing attributes in process `syz.2.608'. [ 185.313117][ T8521] bridge_slave_1: left allmulticast mode [ 185.360314][ T8521] bridge_slave_1: left promiscuous mode [ 185.386342][ T8521] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.439030][ T8521] bridge_slave_0: left allmulticast mode [ 185.463474][ T8521] bridge_slave_0: left promiscuous mode [ 185.488035][ T8521] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.000093][ T8571] mtrr: base(0x4fd0eb55000) is not aligned on a size(0xa6a8fb81000) boundary [ 189.212530][ T8584] Invalid ELF header magic: != ELF [ 191.980328][ T8645] cifs: Unknown parameter 'T.ŸÜÛæ¨Å¼c[ŸÐê€$âæµÈ)ü±UóÑnEó-Ê™¾l®öÚ-ºŒ -¾_€™¯Ôåáª5Z äoåé¢mžÐfwYÍhº*/ÿxDlÝ©Š×ígÕkÇAí³ùÏ7ÍØØ9’ôXöa/fê_ÿAR£ˆ™‘ÈxM ‚v¬—pÿ±$^;ôØq‡3±«£n졵-6©+e„k„¾ñÇ<°kœcÔ)n.üeMÍ÷Na¨t®ÐSMÎÆ1,' [ 192.005112][ C1] vkms_vblank_simulate: vblank timer overrun [ 193.216983][ T8641] Process accounting resumed [ 195.359585][ T8709] netlink: 'syz.3.655': attribute type 22 has an invalid length. [ 195.398901][ T8709] netlink: 334 bytes leftover after parsing attributes in process `syz.3.655'. [ 195.457073][ T8715] netlink: 28 bytes leftover after parsing attributes in process `syz.3.655'. [ 195.679354][ T8715] bridge_slave_1: left allmulticast mode [ 195.706525][ T8715] bridge_slave_1: left promiscuous mode [ 195.800512][ T8715] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.950339][ T8715] bridge_slave_0: left allmulticast mode [ 196.048983][ T8715] bridge_slave_0: left promiscuous mode [ 196.079527][ T8715] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.116974][ T8738] ======================================================= [ 197.116974][ T8738] WARNING: The mand mount option has been deprecated and [ 197.116974][ T8738] and is ignored by this kernel. Remove the mand [ 197.116974][ T8738] option from the mount to silence this warning. [ 197.116974][ T8738] ======================================================= [ 197.194163][ T8736] devpts: called with bogus options [ 198.377897][ T8752] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.783479][ T8797] ALSA: mixer_oss: invalid OSS volume '' [ 201.196149][ T8822] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input6 [ 209.321384][ T8991] netlink: 28 bytes leftover after parsing attributes in process `syz.2.722'. [ 209.405192][ T8991] gretap0: entered promiscuous mode [ 210.067308][ T9013] block nbd0: not configured, cannot reconfigure [ 211.672462][ T9047] sysfs_service_op_show: Client not running :-5: [ 211.735537][ T9057] random: crng reseeded on system resumption [ 213.395397][ T9114] netlink: 342 bytes leftover after parsing attributes in process `syz.2.753'. [ 213.996098][ T9123] netlink: 28 bytes leftover after parsing attributes in process `syz.1.756'. [ 214.120730][ T9123] netdevsim netdevsim1 netdevsim2: entered allmulticast mode [ 214.334658][ T9135] ALSA: mixer_oss: invalid OSS volume '' [ 215.960251][ T9182] netlink: 342 bytes leftover after parsing attributes in process `syz.0.768'. [ 216.007271][ T9182] netlink: 342 bytes leftover after parsing attributes in process `syz.0.768'. [ 216.755840][ T9204] netlink: 'syz.0.771': attribute type 11 has an invalid length. [ 217.609126][ T9214] HSR: entered promiscuous mode [ 219.066601][ T9264] scsi_dev_info_list_add_str: bad dev info string 'íÙ)&cžÀ~j] ò | [ 219.066601][ T9264] MÅ' '' '' [ 220.030277][ T5840] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 220.097197][ T9278] kAFS: unparsable volume name [ 221.113441][ T9291] debugfs: Directory '!PjE ùrõ£Ò„yù*›"¤l-ý¤ôy–ú„L̓÷ÓÄ]' with parent 'ieee80211' already present! [ 221.243931][ T9297] netlink: 287 bytes leftover after parsing attributes in process `syz.1.788'. [ 223.796365][ T9351] netlink: 4 bytes leftover after parsing attributes in process `syz.3.809'. [ 223.903995][ T9355] netlink: 287 bytes leftover after parsing attributes in process `syz.1.807'. [ 226.397276][ T9394] nfs: Unknown parameter 'w¾Ã`_…à‚ûÏI+;ýá ÑöHYø º†»·«ÏLuõ>>ËÕuh*àéC<+ °ðÀÛ' [ 228.348755][ T9436] netlink: 12 bytes leftover after parsing attributes in process `syz.3.830'. [ 228.794742][ T9449] netlink: 2 bytes leftover after parsing attributes in process `syz.1.836'. [ 229.245444][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 231.810523][ T9501] netlink: 187 bytes leftover after parsing attributes in process `syz.2.848'. [ 232.080227][ T9503] Invalid ELF header magic: != ELF [ 233.195818][ T5831] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 233.655401][ T9537] netlink: 12 bytes leftover after parsing attributes in process `syz.0.857'. [ 234.051443][ T9551] netlink: 187 bytes leftover after parsing attributes in process `syz.2.861'. [ 235.811700][ T9569] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 235.833077][ T9569] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 235.863256][ T9569] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 235.883522][ T9569] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 235.903726][ T9569] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 235.922559][ T9569] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 235.937861][ T9570] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 236.156420][ T5839] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 236.172309][ T9591] Line length is too long: Should be less than 4094 [ 236.239126][ T9591] Line length is too long: Should be less than 4094 [ 236.339434][ T9591] Line length is too long: Should be less than 4094 [ 236.367519][ T9591] Line length is too long: Should be less than 4094 [ 236.386311][ T9591] Line length is too long: Should be less than 4094 [ 236.393682][ T9591] Line length is too long: Should be less than 4094 [ 236.423117][ T9591] Line length is too long: Should be less than 4094 [ 236.445288][ T9591] Line length is too long: Should be less than 4094 [ 236.473538][ T9591] Line length is too long: Should be less than 4094 [ 236.483644][ T9591] Line length is too long: Should be less than 4094 [ 236.514039][ T9591] Line length is too long: Should be less than 4094 [ 236.543863][ T9591] Line length is too long: Should be less than 4094 [ 236.568974][ T9591] Line length is too long: Should be less than 4094 [ 236.586058][ T9591] Line length is too long: Should be less than 4094 [ 236.605906][ T9591] Line length is too long: Should be less than 4094 [ 236.618361][ T9591] Line length is too long: Should be less than 4094 [ 236.655393][ T9591] Line length is too long: Should be less than 4094 [ 236.662757][ T9591] Line length is too long: Should be less than 4094 [ 236.695292][ T9591] Line length is too long: Should be less than 4094 [ 236.702911][ T9591] Line length is too long: Should be less than 4094 [ 236.724970][ T9591] Line length is too long: Should be less than 4094 [ 236.735250][ T9591] Line length is too long: Should be less than 4094 [ 236.742611][ T9591] Line length is too long: Should be less than 4094 [ 236.767591][ T9591] Line length is too long: Should be less than 4094 [ 236.801678][ T9591] Line length is too long: Should be less than 4094 [ 236.825273][ T9591] Line length is too long: Should be less than 4094 [ 236.832921][ T9591] Line length is too long: Should be less than 4094 [ 236.871607][ T9591] Line length is too long: Should be less than 4094 [ 236.906374][ T9591] Line length is too long: Should be less than 4094 [ 236.914247][ T9591] Line length is too long: Should be less than 4094 [ 237.198138][ T5839] Bluetooth: hci0: command 0x0c1a tx timeout [ 237.325726][ T9618] netlink: 8 bytes leftover after parsing attributes in process `syz.0.874'. [ 237.836242][ T5839] Bluetooth: hci2: command 0x0c1a tx timeout [ 237.916066][ T5839] Bluetooth: hci1: command 0x0c1a tx timeout [ 237.922764][ T5839] Bluetooth: hci3: command 0x0c1a tx timeout [ 239.631879][ T9676] netlink: 8 bytes leftover after parsing attributes in process `syz.1.890'. [ 239.998525][ T5839] Bluetooth: hci1: command 0x0c1a tx timeout [ 240.262861][ T9697] netlink: 4 bytes leftover after parsing attributes in process `syz.1.894'. [ 240.306381][ T9697] netlink: 338 bytes leftover after parsing attributes in process `syz.1.894'. [ 240.345999][ T9697] netlink: 338 bytes leftover after parsing attributes in process `syz.1.894'. [ 240.366095][ T9697] netlink: 170 bytes leftover after parsing attributes in process `syz.1.894'. [ 240.531628][ T9705] IPVS: length: 11322 != 24 [ 240.987692][ T9715] netlink: zone id is out of range [ 241.060350][ T9715] netlink: zone id is out of range [ 241.119590][ T9715] netlink: set zone limit has 8 unknown bytes [ 242.075318][ T5839] Bluetooth: hci1: command 0x0c1a tx timeout [ 243.975304][ T9774] netlink: 267 bytes leftover after parsing attributes in process `syz.2.920'. [ 244.371936][ T9778] __vm_enough_memory: pid: 9778, comm: syz.0.922, bytes: 4503599627366400 not enough memory for the allocation [ 246.666962][ T9809] netlink: 267 bytes leftover after parsing attributes in process `syz.2.931'. [ 246.871507][ T9812] Invalid ELF header magic: != ELF [ 247.794970][ T9828] lo: entered allmulticast mode [ 247.810741][ T9827] lo: left allmulticast mode [ 247.875389][ T9833] binder: 9831:9833 ioctl c0306201 9 returned -14 [ 247.901967][ T9832] binder: 9831:9832 ioctl c0306201 9 returned -14 [ 248.853021][ T9861] sd 0:0:1:0: PR command failed: 1026 [ 248.865420][ T9861] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 248.875554][ T9861] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 250.702679][ T9874] Invalid ELF header magic: != ELF [ 253.862413][ T9942] netlink: 4 bytes leftover after parsing attributes in process `syz.2.971'. [ 254.298080][ T9946] netlink: 72 bytes leftover after parsing attributes in process `syz.1.973'. [ 254.395206][ T5839] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 254.619408][ T9969] syz.0.979(9969): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 255.064702][ T9978] netlink: 267 bytes leftover after parsing attributes in process `syz.1.981'. [ 257.890984][T10034] capability: warning: `syz.1.996' uses deprecated v2 capabilities in a way that may be insecure [ 259.076276][T10062] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1002'. [ 259.968071][T10103] netlink: 279 bytes leftover after parsing attributes in process `syz.0.1006'. [ 260.554473][T10125] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1011'. [ 260.672489][T10125] bond0: (slave bond_slave_0): Releasing backup interface [ 262.213968][T10189] netlink: 279 bytes leftover after parsing attributes in process `syz.1.1022'. [ 263.684528][T10216] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1028'. [ 263.747809][T10213] syz.1.1027: vmalloc error: size 4503599627371522, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 263.804223][T10213] CPU: 1 UID: 0 PID: 10213 Comm: syz.1.1027 Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 [ 263.816130][T10213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 263.827230][T10213] Call Trace: [ 263.830855][T10213] [ 263.834096][T10213] dump_stack_lvl+0x16c/0x1f0 [ 263.839282][T10213] warn_alloc+0x24d/0x3a0 [ 263.844087][T10213] ? __pfx_warn_alloc+0x10/0x10 [ 263.849458][T10213] ? __pfx_mark_lock+0x10/0x10 [ 263.854753][T10213] ? lock_acquire.part.0+0x11b/0x380 [ 263.860607][T10213] __vmalloc_node_range_noprof+0x10df/0x1530 [ 263.867234][T10213] ? rcu_is_watching+0x12/0xc0 [ 263.872515][T10213] ? trace_contention_end+0xee/0x140 [ 263.878367][T10213] ? dvb_demux_do_ioctl+0x54d/0x1340 [ 263.884218][T10213] ? dvb_demux_do_ioctl+0x496/0x1340 [ 263.890071][T10213] ? __pfx___mutex_lock+0x10/0x10 [ 263.895648][T10213] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 263.902651][T10213] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 263.909173][T10213] ? dvb_demux_do_ioctl+0x54d/0x1340 [ 263.915029][T10213] vmalloc_noprof+0x6b/0x90 [ 263.920003][T10213] ? dvb_demux_do_ioctl+0x54d/0x1340 [ 263.925865][T10213] dvb_demux_do_ioctl+0x54d/0x1340 [ 263.931540][T10213] dvb_usercopy+0x165/0x320 [ 263.936525][T10213] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 263.942668][T10213] ? __pfx_dvb_usercopy+0x10/0x10 [ 263.948231][T10213] ? __pfx_lock_release+0x10/0x10 [ 263.953798][T10213] ? __fget_files+0x206/0x3a0 [ 263.958988][T10213] dvb_demux_ioctl+0x29/0x40 [ 263.964071][T10213] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 263.969922][T10213] __x64_sys_ioctl+0x190/0x200 [ 263.975192][T10213] do_syscall_64+0xcd/0x250 [ 263.980193][T10213] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.986714][T10213] RIP: 0033:0x7f1c1c185d29 [ 263.991594][T10213] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 264.013192][T10213] RSP: 002b:00007f1c1ceea038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 264.022486][T10213] RAX: ffffffffffffffda RBX: 00007f1c1c375fa0 RCX: 00007f1c1c185d29 [ 264.031274][T10213] RDX: 0010000000000402 RSI: 0000000000006f2d RDI: 0000000000000003 [ 264.040058][T10213] RBP: 00007f1c1c201b08 R08: 0000000000000000 R09: 0000000000000000 [ 264.048854][T10213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 264.057650][T10213] R13: 0000000000000000 R14: 00007f1c1c375fa0 R15: 00007ffd37268478 [ 264.066468][T10213] [ 264.149344][T10213] Mem-Info: [ 264.153076][T10213] active_anon:50592 inactive_anon:16 isolated_anon:0 [ 264.153076][T10213] active_file:2996 inactive_file:51061 isolated_file:0 [ 264.153076][T10213] unevictable:1732 dirty:631 writeback:0 [ 264.153076][T10213] slab_reclaimable:11022 slab_unreclaimable:95899 [ 264.153076][T10213] mapped:37081 shmem:40536 pagetables:826 [ 264.153076][T10213] sec_pagetables:0 bounce:0 [ 264.153076][T10213] kernel_misc_reclaimable:0 [ 264.153076][T10213] free:1285093 free_pcp:13078 free_cma:0 [ 264.209697][T10213] Node 0 active_anon:204860kB inactive_anon:64kB active_file:12584kB inactive_file:204168kB unevictable:5392kB isolated(anon):0kB isolated(file):0kB mapped:149324kB dirty:2520kB writeback:0kB shmem:163108kB shmem_thp:2048kB shmem_pmdmapped:2048kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11336kB pagetables:3404kB sec_pagetables:0kB all_unreclaimable? no [ 264.247161][T10213] Node 1 active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 264.280871][T10213] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 264.326669][T10213] lowmem_reserve[]: 0 2465 2466 0 0 [ 264.332517][T10213] Node 0 DMA32 free:1257956kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:210664kB inactive_anon:64kB active_file:13180kB inactive_file:203308kB unevictable:5424kB writepending:2540kB present:3129332kB managed:2551336kB mlocked:3888kB bounce:0kB free_pcp:4056kB local_pcp:2960kB free_cma:0kB [ 264.367284][T10213] lowmem_reserve[]: 0 0 0 0 0 [ 264.372533][T10213] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:832kB unevictable:0kB writepending:0kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 264.402820][T10213] lowmem_reserve[]: 0 0 0 0 0 [ 264.408109][T10213] Node 1 Normal free:3856784kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:48464kB local_pcp:16060kB free_cma:0kB [ 264.440696][T10213] lowmem_reserve[]: 0 0 0 0 0 [ 264.446182][T10213] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 264.460641][T10213] Node 0 DMA32: 111*4kB (UE) 325*8kB (UM) 169*16kB (UME) 129*32kB (UME) 48*64kB (UE) 4*128kB (UM) 10*256kB (U) 20*512kB (M) 53*1024kB (UME) 28*2048kB (UME) 270*4096kB (UM) = 1243796kB [ 264.481351][T10213] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 264.494190][T10213] Node 1 Normal: 186*4kB (UME) 17*8kB (UME) 20*16kB (UME) 201*32kB (UM) 103*64kB (UME) 34*128kB (UME) 13*256kB (UM) 8*512kB (UME) 5*1024kB (UM) 4*2048kB (UME) 932*4096kB (M) = 3856784kB [ 264.514781][T10213] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 264.525431][T10213] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 264.535785][T10213] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 264.546453][T10213] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 264.556980][T10213] 101034 total pagecache pages [ 264.562730][T10213] 53 pages in swap cache [ 264.567539][T10213] Free swap = 124200kB [ 264.572121][T10213] Total swap = 124996kB [ 264.576767][T10213] 2097051 pages RAM [ 264.581050][T10213] 0 pages HighMem/MovableOnly [ 264.586293][T10213] 427367 pages reserved [ 264.590875][T10213] 0 pages cma reserved [ 265.106482][T10227] netlink: 'syz.0.1032': attribute type 1 has an invalid length. [ 265.307418][T10230] FAULT_INJECTION: forcing a failure. [ 265.307418][T10230] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 265.365243][T10230] CPU: 1 UID: 0 PID: 10230 Comm: syz.1.1033 Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 [ 265.377143][T10230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 265.388226][T10230] Call Trace: [ 265.391848][T10230] [ 265.395088][T10230] dump_stack_lvl+0x16c/0x1f0 [ 265.400269][T10230] should_fail_ex+0x497/0x5b0 [ 265.405447][T10230] _copy_to_user+0x32/0xd0 [ 265.410348][T10230] simple_read_from_buffer+0xd0/0x160 [ 265.416283][T10230] proc_fail_nth_read+0x198/0x270 [ 265.421848][T10230] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 265.427989][T10230] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 265.434122][T10230] vfs_read+0x1df/0xbe0 [ 265.438727][T10230] ? __pfx_vfs_read+0x10/0x10 [ 265.443923][T10230] ksys_read+0x12b/0x250 [ 265.448614][T10230] ? __pfx_ksys_read+0x10/0x10 [ 265.453886][T10230] do_syscall_64+0xcd/0x250 [ 265.458870][T10230] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.465383][T10230] RIP: 0033:0x7f1c1c18473c [ 265.470256][T10230] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 265.491843][T10230] RSP: 002b:00007f1c1ceea030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 265.501097][T10230] RAX: ffffffffffffffda RBX: 00007f1c1c375fa0 RCX: 00007f1c1c18473c [ 265.509860][T10230] RDX: 000000000000000f RSI: 00007f1c1ceea0a0 RDI: 0000000000000004 [ 265.518622][T10230] RBP: 00007f1c1ceea090 R08: 0000000000000000 R09: 0000000000000000 [ 265.527386][T10230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 265.536146][T10230] R13: 0000000000000000 R14: 00007f1c1c375fa0 R15: 00007ffd37268478 [ 265.544922][T10230] [ 265.982466][T10237] tipc: Started in network mode [ 266.029163][T10237] tipc: Node identity ee00, cluster identity 4711 [ 266.051906][T10237] tipc: Node number set to 60928 [ 266.747551][T10258] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1037'. [ 267.642587][T10275] netlink: 283 bytes leftover after parsing attributes in process `syz.0.1046'. [ 269.365348][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 269.374938][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 269.595151][ T5839] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 269.934213][T10307] ecryptfs_miscdev_write: Invalid packet size [192] [ 269.962675][T10309] netlink: 334 bytes leftover after parsing attributes in process `syz.2.1055'. [ 270.207201][T10313] tipc: Started in network mode [ 270.212642][T10313] tipc: Node identity ee00, cluster identity 4711 [ 270.248743][T10313] tipc: Node number set to 60928 [ 271.976374][T10352] bond0: option packets_per_slave: invalid value ( Xµn‘pæ) [ 271.995109][T10352] bond0: option packets_per_slave: allowed values 0 - 65535 [ 274.801937][T10415] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1088'. [ 276.130254][T10442] netlink: 334 bytes leftover after parsing attributes in process `syz.0.1098'. [ 277.066383][T10473] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1105'. [ 277.166685][T10466] HfR: entered promiscuous mode [ 279.094290][T10538] netlink: 'syz.1.1123': attribute type 1 has an invalid length. [ 279.151890][T10543] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1124'. [ 279.229240][T10549] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1124'. [ 280.039299][T10574] netlink: 326 bytes leftover after parsing attributes in process `syz.2.1132'. [ 280.413854][T10585] netlink: 287 bytes leftover after parsing attributes in process `syz.2.1135'. [ 281.382484][T10604] netlink: 338 bytes leftover after parsing attributes in process `syz.1.1142'. [ 281.421538][T10604] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.430956][T10604] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.605358][T10607] random: crng reseeded on system resumption [ 283.017948][T10639] netlink: 287 bytes leftover after parsing attributes in process `syz.0.1150'. [ 286.267882][T10678] netlink: 342 bytes leftover after parsing attributes in process `syz.0.1160'. [ 286.325441][T10678] netlink: 342 bytes leftover after parsing attributes in process `syz.0.1160'. [ 286.766965][T10685] netlink: 338 bytes leftover after parsing attributes in process `syz.0.1162'. [ 286.814282][T10685] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.822489][T10685] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.966061][T10717] netlink: 287 bytes leftover after parsing attributes in process `syz.2.1171'. [ 288.021816][T10719] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 288.060069][T10719] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 290.962662][T10761] netlink: 287 bytes leftover after parsing attributes in process `syz.3.1186'. [ 293.400543][T10841] FAULT_INJECTION: forcing a failure. [ 293.400543][T10841] name failslab, interval 1, probability 0, space 0, times 0 [ 293.425207][T10826] Line length is too long: Should be less than 4094 [ 293.493827][T10841] CPU: 1 UID: 0 PID: 10841 Comm: syz.3.1202 Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 [ 293.505728][T10841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 293.516812][T10841] Call Trace: [ 293.520432][T10841] [ 293.523667][T10841] dump_stack_lvl+0x16c/0x1f0 [ 293.528842][T10841] should_fail_ex+0x497/0x5b0 [ 293.534013][T10841] ? fs_reclaim_acquire+0xae/0x150 [ 293.539665][T10841] should_failslab+0xc2/0x120 [ 293.544847][T10841] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 293.550791][T10841] ? ptlock_alloc+0x1f/0x70 [ 293.555782][T10841] ptlock_alloc+0x1f/0x70 [ 293.560571][T10841] pte_alloc_one+0x74/0x390 [ 293.565548][T10841] do_pte_missing+0x1ae7/0x3e00 [ 293.570932][T10841] __handle_mm_fault+0x103c/0x2a40 [ 293.576594][T10841] ? __pfx___handle_mm_fault+0x10/0x10 [ 293.582618][T10841] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 293.588849][T10841] ? find_vma+0xc0/0x140 [ 293.593543][T10841] ? __pfx_find_vma+0x10/0x10 [ 293.598716][T10841] handle_mm_fault+0x3fa/0xaa0 [ 293.603989][T10841] do_user_addr_fault+0x7a3/0x13f0 [ 293.609639][T10841] exc_page_fault+0x5c/0xc0 [ 293.614618][T10841] asm_exc_page_fault+0x26/0x30 [ 293.619980][T10841] RIP: 0010:rep_movs_alternative+0x13/0x70 [ 293.626386][T10841] Code: cc cc cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 83 f9 40 73 40 83 f9 08 73 21 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 0f [ 293.647977][T10841] RSP: 0018:ffffc9000447fd60 EFLAGS: 00050202 [ 293.654672][T10841] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000004 [ 293.663456][T10841] RDX: fffff5200088ffbc RSI: 0000000000000000 RDI: ffffc9000447fde0 [ 293.672241][T10841] RBP: 0000000000000004 R08: 0000000000000001 R09: fffff5200088ffbc [ 293.681026][T10841] R10: 0000000000000003 R11: 0000000000000000 R12: 0000000000000000 [ 293.689805][T10841] R13: ffffc9000447fde0 R14: 0000000000000000 R15: 0000000000000114 [ 293.698604][T10841] _copy_from_user+0x9a/0xd0 [ 293.703681][T10841] do_sock_getsockopt+0x319/0x870 [ 293.709224][T10841] ? trace_lock_acquire+0x120/0x1f0 [ 293.714969][T10841] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 293.721089][T10841] ? lock_acquire+0x2f/0xb0 [ 293.726061][T10841] ? __fget_files+0x40/0x3a0 [ 293.731135][T10841] ? 0xffffffffff600000 [ 293.735724][T10841] ? __fget_files+0x206/0x3a0 [ 293.740906][T10841] __sys_getsockopt+0x12f/0x260 [ 293.746275][T10841] ? 0xffffffffff600000 [ 293.750864][T10841] __x64_sys_getsockopt+0xbd/0x160 [ 293.756522][T10841] ? do_syscall_64+0x91/0x250 [ 293.761693][T10841] ? lockdep_hardirqs_on+0x7c/0x110 [ 293.767436][T10841] do_syscall_64+0xcd/0x250 [ 293.772408][T10841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.778900][T10841] RIP: 0033:0x7f1465385d29 [ 293.783759][T10841] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 293.805319][T10841] RSP: 002b:00007f14631f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 293.814569][T10841] RAX: ffffffffffffffda RBX: 00007f1465576080 RCX: 00007f1465385d29 [ 293.823332][T10841] RDX: 0000000000002711 RSI: 0000000000000114 RDI: 0000000000000002 [ 293.832094][T10841] RBP: 00007f14631f6090 R08: 0000000000000000 R09: 0000000000000000 [ 293.840855][T10841] R10: ffffffffff600000 R11: 0000000000000246 R12: 0000000000000001 [ 293.849627][T10841] R13: 0000000000000000 R14: 00007f1465576080 R15: 00007fff78acfc98 [ 293.858397][T10841] ? 0xffffffffff600000 [ 293.862968][T10841] [ 294.680311][T10850] nfs: Unknown parameter 'nl80211' [ 295.026002][T10864] netlink: 'syz.0.1208': attribute type 13 has an invalid length. [ 296.435318][T10889] netlink: 'syz.0.1212': attribute type 10 has an invalid length. [ 296.443973][T10889] netlink: 326 bytes leftover after parsing attributes in process `syz.0.1212'. [ 296.936267][T10897] FAULT_INJECTION: forcing a failure. [ 296.936267][T10897] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 296.979932][T10897] CPU: 1 UID: 0 PID: 10897 Comm: syz.1.1215 Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 [ 296.991831][T10897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 297.002919][T10897] Call Trace: [ 297.006545][T10897] [ 297.009787][T10897] dump_stack_lvl+0x16c/0x1f0 [ 297.014965][T10897] should_fail_ex+0x497/0x5b0 [ 297.020139][T10897] ? fs_reclaim_acquire+0xae/0x150 [ 297.025792][T10897] should_fail_alloc_page+0xe7/0x130 [ 297.031644][T10897] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 297.038448][T10897] __alloc_pages_noprof+0x190/0x25b0 [ 297.044309][T10897] ? __pfx_mark_lock+0x10/0x10 [ 297.049592][T10897] ? __pfx___lock_acquire+0x10/0x10 [ 297.055332][T10897] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 297.061666][T10897] ? hlock_class+0x4e/0x130 [ 297.066646][T10897] ? __lock_acquire+0xcc5/0x3c40 [ 297.072107][T10897] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 297.078619][T10897] ? policy_nodemask+0xea/0x4e0 [ 297.083991][T10897] alloc_pages_mpol_noprof+0x2c8/0x620 [ 297.090024][T10897] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 297.096632][T10897] ? find_held_lock+0x2d/0x110 [ 297.101906][T10897] folio_alloc_mpol_noprof+0x36/0xd0 [ 297.107750][T10897] shmem_alloc_folio+0x135/0x160 [ 297.113222][T10897] shmem_alloc_and_add_folio+0x48b/0xc00 [ 297.119456][T10897] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 297.126260][T10897] ? shmem_allowable_huge_orders+0xd0/0x410 [ 297.132771][T10897] shmem_get_folio_gfp+0x689/0x1530 [ 297.138520][T10897] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 297.144757][T10897] ? filemap_map_pages+0xf92/0x16b0 [ 297.150505][T10897] shmem_fault+0x200/0xae0 [ 297.155397][T10897] ? __pfx_shmem_fault+0x10/0x10 [ 297.160860][T10897] ? do_pte_missing+0xdd7/0x3e00 [ 297.166321][T10897] ? __pfx_lock_release+0x10/0x10 [ 297.171875][T10897] __do_fault+0x10a/0x490 [ 297.176665][T10897] do_pte_missing+0xebd/0x3e00 [ 297.181946][T10897] __handle_mm_fault+0x103c/0x2a40 [ 297.187609][T10897] ? __pfx___handle_mm_fault+0x10/0x10 [ 297.193640][T10897] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 297.199875][T10897] ? find_vma+0xc0/0x140 [ 297.204575][T10897] ? __pfx_find_vma+0x10/0x10 [ 297.209743][T10897] handle_mm_fault+0x3fa/0xaa0 [ 297.215012][T10897] do_user_addr_fault+0x7a3/0x13f0 [ 297.220662][T10897] exc_page_fault+0x5c/0xc0 [ 297.225645][T10897] asm_exc_page_fault+0x26/0x30 [ 297.231005][T10897] RIP: 0010:rep_movs_alternative+0x13/0x70 [ 297.237414][T10897] Code: cc cc cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 83 f9 40 73 40 83 f9 08 73 21 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 0f [ 297.259003][T10897] RSP: 0018:ffffc9000b507d60 EFLAGS: 00050202 [ 297.265703][T10897] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000004 [ 297.274490][T10897] RDX: fffff520016a0fbc RSI: 0000000000000000 RDI: ffffc9000b507de0 [ 297.283277][T10897] RBP: 0000000000000004 R08: 0000000000000001 R09: fffff520016a0fbc [ 297.292066][T10897] R10: 0000000000000003 R11: 0000000000000000 R12: 0000000000000000 [ 297.300851][T10897] R13: ffffc9000b507de0 R14: 0000000000000000 R15: 0000000000000114 [ 297.309656][T10897] _copy_from_user+0x9a/0xd0 [ 297.314740][T10897] do_sock_getsockopt+0x319/0x870 [ 297.320290][T10897] ? trace_lock_acquire+0x120/0x1f0 [ 297.326040][T10897] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 297.332168][T10897] ? lock_acquire+0x2f/0xb0 [ 297.337141][T10897] ? __fget_files+0x40/0x3a0 [ 297.342215][T10897] ? 0xffffffffff600000 [ 297.346804][T10897] ? __fget_files+0x206/0x3a0 [ 297.351986][T10897] __sys_getsockopt+0x12f/0x260 [ 297.357355][T10897] ? 0xffffffffff600000 [ 297.361946][T10897] __x64_sys_getsockopt+0xbd/0x160 [ 297.367601][T10897] ? do_syscall_64+0x91/0x250 [ 297.372773][T10897] ? lockdep_hardirqs_on+0x7c/0x110 [ 297.378519][T10897] do_syscall_64+0xcd/0x250 [ 297.383511][T10897] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.390029][T10897] RIP: 0033:0x7f1c1c185d29 [ 297.394903][T10897] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 297.416494][T10897] RSP: 002b:00007f1c19ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 297.425780][T10897] RAX: ffffffffffffffda RBX: 00007f1c1c376080 RCX: 00007f1c1c185d29 [ 297.434574][T10897] RDX: 0000000000002711 RSI: 0000000000000114 RDI: 0000000000000002 [ 297.443363][T10897] RBP: 00007f1c19ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 297.452149][T10897] R10: ffffffffff600000 R11: 0000000000000246 R12: 0000000000000001 [ 297.460939][T10897] R13: 0000000000000000 R14: 00007f1c1c376080 R15: 00007ffd37268478 [ 297.469738][T10897] ? 0xffffffffff600000 [ 297.474338][T10897] syzkaller syzkaller login: [ 301.472607][T10966] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 301.565435][T10966] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 301.770233][T10973] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1235'. [ 303.326210][T11006] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 303.347029][T11006] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 304.629466][T11023] svc: failed to register nfsdv3 RPC service (errno 111). [ 304.653727][T11023] svc: failed to register nfsaclv3 RPC service (errno 111). [ 305.690364][T11045] netlink: 231 bytes leftover after parsing attributes in process `syz.1.1255'. [ 307.325658][T11073] ptrace attach of "./syz-executor exec"[5828] was attempted by "./syz-executor exec"[11073] [ 308.997265][T11100] kAFS: Invalid Command on /proc/fs/afs/cells file [ 311.354040][T11136] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1286'. [ 314.345124][ T29] audit: type=1800 audit(4294967437.900:30): pid=11170 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1288" name="dbroot" dev="configfs" ino=31043 res=0 errno=0 [ 317.926586][T11248] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1311'. [ 318.192272][T11248] veth1_macvtap: left promiscuous mode [ 319.145938][T11277] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1317'. [ 319.210974][T11272] lo: entered allmulticast mode [ 319.674185][T11271] lo: left allmulticast mode [ 320.276504][T11291] netlink: 342 bytes leftover after parsing attributes in process `syz.0.1320'. [ 321.012446][T11316] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1325'. [ 321.159424][T11316] veth1_macvtap: left promiscuous mode [ 322.462869][T11346] mkiss: ax0: crc mode is auto. [ 322.481570][T11352] netlink: 259 bytes leftover after parsing attributes in process `syz.3.1336'. [ 324.596058][T11393] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1348'. [ 325.144496][T11396] netlink: 'syz.1.1350': attribute type 1 has an invalid length. [ 325.965217][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 325.994044][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 326.036452][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 328.905288][T11492] openvswitch: netlink: Flow key attr not present in new flow. [ 329.323033][T11498] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1377'. [ 329.370573][T11498] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 329.382165][T11498] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 329.417334][T11498] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 329.445341][T11498] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 330.410095][T11517] netlink: 93 bytes leftover after parsing attributes in process `syz.2.1382'. [ 331.612620][T11539] Line length is too long: Should be less than 4094 [ 331.640004][T11539] Line length is too long: Should be less than 4094 [ 331.667519][T11539] Line length is too long: Should be less than 4094 [ 331.689008][T11539] Line length is too long: Should be less than 4094 [ 331.713259][T11539] Line length is too long: Should be less than 4094 [ 331.745245][T11539] Line length is too long: Should be less than 4094 [ 331.767897][T11539] Line length is too long: Should be less than 4094 [ 331.796408][T11539] Line length is too long: Should be less than 4094 [ 331.825177][T11539] Line length is too long: Should be less than 4094 [ 331.860698][T11539] Line length is too long: Should be less than 4094 [ 331.923139][T11539] Line length is too long: Should be less than 4094 [ 331.963047][T11539] Line length is too long: Should be less than 4094 [ 332.035237][T11539] Line length is too long: Should be less than 4094 [ 332.085381][T11539] Line length is too long: Should be less than 4094 [ 332.113265][T11539] Line length is too long: Should be less than 4094 [ 332.224595][T11539] Line length is too long: Should be less than 4094 [ 332.260569][T11539] Line length is too long: Should be less than 4094 [ 332.288386][T11539] Line length is too long: Should be less than 4094 [ 332.338978][T11549] netlink: 275 bytes leftover after parsing attributes in process `syz.3.1388'. [ 332.338994][T11539] Line length is too long: Should be less than 4094 [ 332.339031][T11539] Line length is too long: Should be less than 4094 [ 333.230173][T11556] binder: 11554:11556 ioctl c018620b 9 returned -14 [ 334.401623][T11584] netlink: 'syz.3.1397': attribute type 27 has an invalid length. [ 334.411470][T11584] netlink: 334 bytes leftover after parsing attributes in process `syz.3.1397'. [ 335.261713][T11600] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1401'. [ 335.296302][T11600] hsr0: entered allmulticast mode [ 335.301938][T11600] hsr_slave_0: entered allmulticast mode [ 335.320551][T11600] hsr_slave_1: entered allmulticast mode [ 335.696104][T11614] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1405'. [ 336.215580][T11626] FAULT_INJECTION: forcing a failure. [ 336.215580][T11626] name failslab, interval 1, probability 0, space 0, times 0 [ 336.255145][T11626] CPU: 0 UID: 0 PID: 11626 Comm: syz.3.1409 Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 [ 336.267043][T11626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 336.278122][T11626] Call Trace: [ 336.281732][T11626] [ 336.284952][T11626] dump_stack_lvl+0x16c/0x1f0 [ 336.290108][T11626] should_fail_ex+0x497/0x5b0 [ 336.295260][T11626] ? fs_reclaim_acquire+0xae/0x150 [ 336.300886][T11626] should_failslab+0xc2/0x120 [ 336.306038][T11626] __kmalloc_noprof+0xce/0x4f0 [ 336.311286][T11626] ? __blkdev_direct_IO_simple+0x619/0x7c0 [ 336.317683][T11626] __blkdev_direct_IO_simple+0x619/0x7c0 [ 336.323885][T11626] ? __pfx___blkdev_direct_IO_simple+0x10/0x10 [ 336.330679][T11626] ? iov_iter_is_aligned+0xf2/0x5a0 [ 336.336407][T11626] ? iov_iter_npages+0xf0/0x5a0 [ 336.341751][T11626] blkdev_direct_IO+0xa1c/0x1ad0 [ 336.347196][T11626] ? __pfx_blkdev_direct_IO+0x10/0x10 [ 336.353112][T11626] ? rcu_is_watching+0x12/0xc0 [ 336.358358][T11626] ? __mark_inode_dirty+0x2a5/0xe50 [ 336.364082][T11626] ? filemap_check_errors+0xa9/0x160 [ 336.369915][T11626] blkdev_write_iter+0x6f9/0xd40 [ 336.375354][T11626] vfs_write+0x5ae/0x1150 [ 336.380119][T11626] ? __pfx_blkdev_write_iter+0x10/0x10 [ 336.386124][T11626] ? __pfx_vfs_write+0x10/0x10 [ 336.391370][T11626] ? __fget_files+0x40/0x3a0 [ 336.396433][T11626] ksys_write+0x12b/0x250 [ 336.401196][T11626] ? __pfx_ksys_write+0x10/0x10 [ 336.406550][T11626] do_syscall_64+0xcd/0x250 [ 336.411519][T11626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.418007][T11626] RIP: 0033:0x7f1465385d29 [ 336.422860][T11626] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 336.444431][T11626] RSP: 002b:00007f14631f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 336.453690][T11626] RAX: ffffffffffffffda RBX: 00007f1465576080 RCX: 00007f1465385d29 [ 336.462458][T11626] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003 [ 336.471225][T11626] RBP: 00007f14631f6090 R08: 0000000000000000 R09: 0000000000000000 [ 336.479994][T11626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 336.488759][T11626] R13: 0000000000000001 R14: 00007f1465576080 R15: 00007fff78acfc98 [ 336.497539][T11626] [ 337.021109][T11634] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1410'. [ 337.041810][T11634] vxcan1: entered promiscuous mode [ 337.933786][T11659] netlink: 338 bytes leftover after parsing attributes in process `syz.1.1415'. [ 341.966372][T11732] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1432'. [ 342.646744][T11748] Invalid ELF header magic: != ELF [ 346.418119][T11840] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1464'. [ 346.463519][T11839] netlink: 'syz.0.1464': attribute type 21 has an invalid length. [ 346.521216][T11839] netlink: 334 bytes leftover after parsing attributes in process `syz.0.1464'. [ 347.317258][T11854] svc: failed to register nfsdv3 RPC service (errno 22). [ 347.339374][T11854] svc: failed to register nfsaclv3 RPC service (errno 22). [ 348.370756][T11876] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 348.402060][T11876] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 348.724480][T11883] kexec: Could not allocate control_code_buffer [ 350.931419][T11925] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1489'. [ 350.988136][T11925] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1489'. [ 351.783115][T11944] __vm_enough_memory: pid: 11944, comm: syz.3.1493, bytes: 4503599627366400 not enough memory for the allocation [ 352.272808][T11968] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1497'. [ 352.296536][T11968] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1497'. [ 352.817036][T11978] netlink: 338 bytes leftover after parsing attributes in process `syz.2.1500'. [ 353.020795][T11987] kexec: Could not allocate control_code_buffer [ 354.135866][T12016] nfs: Unknown parameter 'PÕ‹XÝÂq 9ãúíŽ/çû‡#–ÄL06ª\càP'¥n@Eãëó‹qÌ-Äã¡0X–Nævl‘¤sÜ4°„ª%' [ 354.462758][T12024] mkiss: ax0: crc mode is auto. [ 360.103387][T12176] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 360.205138][T12176] CIFS mount error: No usable UNC path provided in device string! [ 360.205138][T12176] [ 360.242750][T12176] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 361.159376][T12205] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1542'. [ 362.113123][T12246] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1553'. [ 362.139047][T12246] veth0_macvtap: left promiscuous mode [ 362.519025][T12265] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1556'. [ 362.551498][T12265] vcan0: entered promiscuous mode [ 363.049295][T12277] netlink: 342 bytes leftover after parsing attributes in process `syz.0.1560'. [ 364.043014][T12313] mmap: syz.0.1573 (12313): VmData 20824064 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 364.135716][T12316] nbd: socks must be embedded in a SOCK_ITEM attr [ 364.167260][T12316] block nbd2: shutting down sockets [ 364.888272][T12339] sd 0:0:1:0: PR command failed: 1026 [ 364.950435][T12339] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 365.043559][T12339] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 365.319794][T12347] Process accounting resumed [ 366.427590][T12340] HSR: entered promiscuous mode [ 366.981724][T12380] netlink: 342 bytes leftover after parsing attributes in process `syz.0.1588'. [ 367.101040][T12387] aoe: invalid device specification  [ 367.210732][T12391] netlink: 271 bytes leftover after parsing attributes in process `syz.0.1590'. [ 369.531673][T12454] netlink: 271 bytes leftover after parsing attributes in process `syz.0.1606'. [ 371.789494][T12516] netlink: 271 bytes leftover after parsing attributes in process `syz.3.1622'. [ 373.763181][T12546] vcan0: tx drop: invalid da for name 0x000000000000003f [ 374.411551][T12559] netlink: 271 bytes leftover after parsing attributes in process `syz.3.1633'. [ 378.592954][T12638] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1653'. [ 380.415254][T12678] netlink: 267 bytes leftover after parsing attributes in process `syz.1.1662'. [ 381.041079][T12689] FAULT_INJECTION: forcing a failure. [ 381.041079][T12689] name failslab, interval 1, probability 0, space 0, times 0 [ 381.083310][T12689] CPU: 0 UID: 0 PID: 12689 Comm: syz.3.1666 Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 [ 381.095212][T12689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 381.106309][T12689] Call Trace: [ 381.109930][T12689] [ 381.113176][T12689] dump_stack_lvl+0x16c/0x1f0 [ 381.118356][T12689] should_fail_ex+0x497/0x5b0 [ 381.123531][T12689] ? fs_reclaim_acquire+0xae/0x150 [ 381.129184][T12689] should_failslab+0xc2/0x120 [ 381.134359][T12689] __kmalloc_node_noprof+0xd1/0x520 [ 381.140111][T12689] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 381.146154][T12689] __kvmalloc_node_noprof+0xad/0x1a0 [ 381.152002][T12689] seq_read_iter+0x82a/0x12b0 [ 381.157175][T12689] ? __mutex_trylock_common+0xea/0x250 [ 381.163216][T12689] kernfs_fop_read_iter+0x414/0x580 [ 381.168972][T12689] ? rw_verify_area+0xd0/0x700 [ 381.174245][T12689] vfs_read+0x87f/0xbe0 [ 381.178847][T12689] ? __pfx_vfs_read+0x10/0x10 [ 381.184037][T12689] ksys_read+0x12b/0x250 [ 381.188726][T12689] ? __pfx_ksys_read+0x10/0x10 [ 381.193990][T12689] do_syscall_64+0xcd/0x250 [ 381.198952][T12689] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.205446][T12689] RIP: 0033:0x7f1465385d29 [ 381.210302][T12689] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 381.231870][T12689] RSP: 002b:00007f14660e3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 381.241125][T12689] RAX: ffffffffffffffda RBX: 00007f1465575fa0 RCX: 00007f1465385d29 [ 381.249887][T12689] RDX: 0000000000000040 RSI: 0000000020000080 RDI: 0000000000000003 [ 381.258649][T12689] RBP: 00007f14660e3090 R08: 0000000000000000 R09: 0000000000000000 [ 381.267509][T12689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 381.276273][T12689] R13: 0000000000000000 R14: 00007f1465575fa0 R15: 00007fff78acfc98 [ 381.285058][T12689] [ 382.952767][T12732] netlink: 267 bytes leftover after parsing attributes in process `syz.3.1677'. [ 385.804711][T12786] netlink: 267 bytes leftover after parsing attributes in process `syz.1.1694'. [ 387.684666][T12816] Invalid ELF header magic: != ELF [ 388.789486][T12848] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1709'. [ 390.527347][T12871] netlink: 330 bytes leftover after parsing attributes in process `syz.0.1718'. [ 390.583490][T12871] : renamed from bond0 (while UP) [ 391.709090][T12923] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1727'. [ 391.877464][T12923] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1727'. [ 391.929881][T12923] netdevsim netdevsim0 netdevsim2: entered allmulticast mode [ 393.226877][T12955] can: request_module (can-proto-0) failed. [ 396.625843][T13066] lo: entered allmulticast mode [ 396.697350][T13071] lo: left allmulticast mode [ 398.065892][T13099] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 398.095169][T13099] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 399.703644][T13134] Invalid ELF header magic: != ELF [ 400.496057][T13146] netlink: 338 bytes leftover after parsing attributes in process `syz.0.1781'. [ 404.260980][T13200] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1793'. [ 404.302502][T13200] ipvlan0: entered promiscuous mode [ 404.338645][T13200] ipvlan0: entered allmulticast mode [ 404.359402][T13203] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1793'. [ 404.393103][T13200] veth0_vlan: entered allmulticast mode [ 406.755343][T13256] netlink: 182 bytes leftover after parsing attributes in process `syz.1.1806'. [ 412.931830][T13386] netlink: 229 bytes leftover after parsing attributes in process `syz.3.1836'. [ 413.696083][T13407] openvswitch: netlink: Flow key attr not present in new flow. [ 414.542918][T13413] netlink: 330 bytes leftover after parsing attributes in process `syz.3.1844'. [ 415.813974][T13475] netlink: 330 bytes leftover after parsing attributes in process `syz.3.1859'. [ 416.081564][T13475] syz.3.1859 (13475) used greatest stack depth: 21056 bytes left [ 416.355937][T13490] smc: net device syz_tun applied user defined pnetid ETHTOOL [ 417.793164][T13514] Invalid ELF header magic: != ELF [ 418.117968][T13506] Invalid ELF header magic: != ELF [ 420.258431][T13559] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1880'. [ 421.111129][T13580] do_dccp_setsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 421.175104][T13580] do_dccp_setsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 421.214699][T13580] do_dccp_setsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 421.259796][T13580] do_dccp_setsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 421.314118][T13580] do_dccp_setsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 421.361899][T13580] do_dccp_setsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 421.388402][T13580] do_dccp_setsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 421.446652][T13580] do_dccp_setsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 421.486652][T13580] do_dccp_setsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 421.531695][T13583] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1885'. [ 421.551408][T13580] do_dccp_setsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 423.295847][T13634] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1899'. [ 425.515419][T13680] Invalid ELF header magic: != ELF [ 425.535638][T13685] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1912'. [ 426.948049][T13719] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1922'. [ 428.519498][T13737] Invalid ELF header magic: != ELF [ 429.620815][T13781] netlink: 252 bytes leftover after parsing attributes in process `syz.0.1935'. [ 429.799895][T13774] Invalid ELF header magic: != ELF [ 430.617558][T13805] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1941'. [ 431.637839][T13830] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1948'. [ 432.069894][T13835] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1946'. [ 433.222354][T13881] netlink: 326 bytes leftover after parsing attributes in process `syz.0.1959'. [ 433.257359][T13881] netlink: 326 bytes leftover after parsing attributes in process `syz.0.1959'. [ 433.285484][T13881] netlink: 326 bytes leftover after parsing attributes in process `syz.0.1959'. [ 433.315879][T13881] netlink: 326 bytes leftover after parsing attributes in process `syz.0.1959'. [ 433.345499][T13881] netlink: 326 bytes leftover after parsing attributes in process `syz.0.1959'. [ 433.367777][T13881] netlink: 326 bytes leftover after parsing attributes in process `syz.0.1959'. [ 433.462280][T13881] netlink: 326 bytes leftover after parsing attributes in process `syz.0.1959'. [ 434.877367][ T29] audit: type=1800 audit(4294967600.427:31): pid=13909 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1966" name="dbroot" dev="configfs" ino=41115 res=0 errno=0 [ 435.079120][T13918] futex_wake_op: syz.1.1968 tries to shift op by 64; fix this program [ 435.140030][T13918] loop6: detected capacity change from 0 to 8192 [ 437.979006][T13979] __nla_validate_parse: 58 callbacks suppressed [ 437.979027][T13979] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1984'. [ 439.541735][T14013] futex_wake_op: syz.2.1992 tries to shift op by 64; fix this program [ 440.163838][T14024] netlink: 130 bytes leftover after parsing attributes in process `syz.0.1996'. [ 440.307584][T14032] netlink: 346 bytes leftover after parsing attributes in process `syz.1.1999'. [ 444.536027][T14131] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2022'. [ 444.656666][T14136] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2024'. [ 444.715894][T14139] netlink: 'syz.3.2025': attribute type 1 has an invalid length. [ 444.907861][T14144] netlink: 'syz.1.2027': attribute type 4 has an invalid length. [ 446.387446][T14189] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2039'. [ 446.529332][T14192] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2040'. [ 447.462609][T14219] vcan0: tx drop: invalid da for name 0x000000000000003f [ 448.362854][T14258] netlink: 346 bytes leftover after parsing attributes in process `syz.0.2060'. [ 448.428563][T14262] netlink: 257 bytes leftover after parsing attributes in process `syz.3.2059'. [ 449.358360][T14280] Invalid ELF header magic: != ELF [ 450.142208][T14309] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2073'. [ 454.287532][T14376] Process accounting resumed [ 455.386973][T14409] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2101'. [ 455.411306][T14409] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2101'. [ 455.772901][T14416] netlink: 258 bytes leftover after parsing attributes in process `syz.1.2102'. [ 456.338898][T14426] netlink: 314 bytes leftover after parsing attributes in process `syz.2.2105'. [ 457.634870][T14474] netlink: 259 bytes leftover after parsing attributes in process `syz.2.2117'. [ 460.273689][T14545] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2132'. [ 460.316801][T14545] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2132'. [ 462.158101][ T29] audit: type=1326 audit(4294967627.718:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14583 comm="syz.2.2140" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd38eb85d29 code=0x0 [ 464.899834][ T29] audit: type=1326 audit(4294967630.458:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14629 comm="syz.1.2153" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1c1c185d29 code=0x0 [ 465.843431][T14655] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2159'. [ 465.874182][T14655] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2159'. [ 467.546345][T14694] netlink: 259 bytes leftover after parsing attributes in process `syz.3.2165'. [ 468.571119][T14707] netlink: 259 bytes leftover after parsing attributes in process `syz.1.2177'. [ 468.696916][T14709] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2169'. [ 468.804895][T14709] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2169'. [ 470.654852][T14756] netlink: 259 bytes leftover after parsing attributes in process `syz.2.2183'. [ 471.107405][T14760] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2185'. [ 472.487445][T14804] netlink: 259 bytes leftover after parsing attributes in process `syz.1.2196'. [ 473.364789][T14823] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2201'. [ 473.743243][T14823] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 473.770672][T14823] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 473.810414][T14823] bond0 (unregistering): Released all slaves [ 475.635050][T14876] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2222'. [ 476.411961][T14883] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 476.425512][T14883] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 476.454818][T14883] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 476.482191][T14883] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 476.925744][T14903] netlink: 252 bytes leftover after parsing attributes in process `syz.2.2220'. [ 477.701910][T14920] netlink: 259 bytes leftover after parsing attributes in process `syz.1.2231'. [ 477.752927][T12766] Bluetooth: hci0: command 0x0c1a tx timeout [ 478.014431][T14925] Invalid ELF header magic: != ELF [ 478.472353][T12766] Bluetooth: hci3: command 0x0c1a tx timeout [ 478.472743][ T5836] Bluetooth: hci2: command 0x0c1a tx timeout [ 478.552859][ T5836] Bluetooth: hci1: command 0x0c1a tx timeout [ 479.435995][T14947] smc: net device syz_tun applied user defined pnetid ETHTOOL [ 479.870577][T14961] cifs: Unknown parameter 'à' [ 480.061065][T14972] netlink: 178 bytes leftover after parsing attributes in process `syz.1.2237'. [ 481.382998][T15015] openvswitch: HfR: Dropping previously announced user features [ 481.396754][T15015] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2246'. [ 481.406854][T15015] HfR: left promiscuous mode [ 481.910259][T15029] ptp ptp0: only physical clock in use now [ 483.909895][T15075] HfR: entered promiscuous mode [ 483.941493][T15076] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2258'. [ 484.001743][T15076] HfR: left promiscuous mode [ 484.204582][T15080] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2260'. [ 484.326760][T15080] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 484.361276][T15080] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 484.452311][T15080] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 484.481160][T15080] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 484.651605][T15082] Invalid ELF header magic: != ELF [ 484.843631][T14990] Process accounting paused [ 485.041794][T15091] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2259'. [ 485.355889][T15091] geneve1: entered allmulticast mode [ 486.130398][T15121] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2267'. [ 486.938610][T15139] netlink: 259 bytes leftover after parsing attributes in process `syz.0.2271'. [ 487.208662][T15141] cifs: Unknown parameter 'à' [ 488.814865][T15176] netlink: 259 bytes leftover after parsing attributes in process `syz.3.2280'. [ 489.093593][T15181] cifs: Unknown parameter 'à' [ 491.100250][T15227] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2296'. [ 491.279936][T14933] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 491.290873][T14933] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 491.302805][T14933] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 491.312358][T14933] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 491.337336][T14933] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 491.345818][T14933] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 491.449698][T15230] GUP no longer grows the stack in syz.0.2297 (15230): 1000-401000 (0) [ 491.549855][T15230] CPU: 1 UID: 0 PID: 15230 Comm: syz.0.2297 Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 [ 491.561756][T15230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 491.572849][T15230] Call Trace: [ 491.576483][T15230] [ 491.579729][T15230] dump_stack_lvl+0x16c/0x1f0 [ 491.584921][T15230] gup_vma_lookup+0x1d2/0x220 [ 491.590103][T15230] __get_user_pages+0x236/0x3b50 [ 491.595578][T15230] ? __pfx_rwsem_read_trylock+0x10/0x10 [ 491.601712][T15230] ? __gup_longterm_locked+0x123/0x1870 [ 491.607852][T15230] ? __gup_longterm_locked+0x123/0x1870 [ 491.613998][T15230] ? __pfx___get_user_pages+0x10/0x10 [ 491.619945][T15230] ? down_read_killable+0xcc/0x380 [ 491.625612][T15230] ? __pfx_down_read_killable+0x10/0x10 [ 491.631754][T15230] ? __pfx___lock_acquire+0x10/0x10 [ 491.637508][T15230] __gup_longterm_locked+0x211/0x1870 [ 491.643466][T15230] ? __pfx___gup_longterm_locked+0x10/0x10 [ 491.649891][T15230] ? gup_fast_fallback+0x84c/0x2690 [ 491.655647][T15230] ? __pfx_lock_release+0x10/0x10 [ 491.661206][T15230] ? lock_acquire+0x2f/0xb0 [ 491.666185][T15230] ? ___pte_offset_map+0x42/0x540 [ 491.671752][T15230] gup_fast_fallback+0x1802/0x2690 [ 491.677435][T15230] ? __pfx_gup_fast_fallback+0x10/0x10 [ 491.683476][T15230] ? do_syscall_64+0xcd/0x250 [ 491.688656][T15230] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.695389][T15230] get_user_pages_fast+0xa8/0x100 [ 491.700953][T15230] ? __pfx_get_user_pages_fast+0x10/0x10 [ 491.707202][T15230] get_futex_key+0x1f5/0x1000 [ 491.712385][T15230] ? __pfx_get_futex_key+0x10/0x10 [ 491.718055][T15230] ? kasan_save_track+0x14/0x30 [ 491.723424][T15230] ? __kasan_kmalloc+0xaa/0xb0 [ 491.728699][T15230] futex_lock_pi+0x282/0x7a0 [ 491.733776][T15230] ? preempt_schedule_common+0x44/0xc0 [ 491.739811][T15230] ? __pfx_futex_lock_pi+0x10/0x10 [ 491.745465][T15230] ? try_to_wake_up+0x953/0x1490 [ 491.750931][T15230] ? plist_check_head+0xa3/0x150 [ 491.756401][T15230] ? futex_wake+0x18e/0x4e0 [ 491.761384][T15230] ? __pfx_futex_wake_mark+0x10/0x10 [ 491.767229][T15230] ? find_held_lock+0x2d/0x110 [ 491.772516][T15230] do_futex+0x11b/0x350 [ 491.777130][T15230] ? __pfx_do_futex+0x10/0x10 [ 491.782324][T15230] __x64_sys_futex+0x1e1/0x4c0 [ 491.787602][T15230] ? __pfx___x64_sys_futex+0x10/0x10 [ 491.793448][T15230] ? rcu_is_watching+0x12/0xc0 [ 491.798721][T15230] do_syscall_64+0xcd/0x250 [ 491.803710][T15230] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.810224][T15230] RIP: 0033:0x7fb07a185d29 [ 491.815107][T15230] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 491.836703][T15230] RSP: 002b:00007fb07b065038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 491.845989][T15230] RAX: ffffffffffffffda RBX: 00007fb07a375fa0 RCX: 00007fb07a185d29 [ 491.854785][T15230] RDX: 0000000000000047 RSI: 0000000000000006 RDI: 0000000000000000 [ 491.863574][T15230] RBP: 00007fb07a201b08 R08: 0000000000000000 R09: 0000000000008628 [ 491.872366][T15230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 491.881154][T15230] R13: 0000000000000000 R14: 00007fb07a375fa0 R15: 00007fff841c6c78 [ 491.889967][T15230] [ 491.957106][T15235] chnl_net:caif_netlink_parms(): no params data found [ 492.600876][T15235] bridge0: port 1(bridge_slave_0) entered blocking state [ 492.608814][T15235] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.616767][T15235] bridge_slave_0: entered allmulticast mode [ 492.624465][T15235] bridge_slave_0: entered promiscuous mode [ 492.632704][T15235] bridge0: port 2(bridge_slave_1) entered blocking state [ 492.640530][T15235] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.648405][T15235] bridge_slave_1: entered allmulticast mode [ 492.656079][T15235] bridge_slave_1: entered promiscuous mode [ 492.731439][T15235] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 492.753086][T15235] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 492.886298][T15235] team0: Port device team_slave_0 added [ 492.981905][T15235] team0: Port device team_slave_1 added [ 493.047943][T15235] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 493.066116][T15235] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 493.120423][T15235] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 493.179063][T15275] netlink: 334 bytes leftover after parsing attributes in process `syz.1.2304'. [ 493.236946][T15235] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 493.246276][T15235] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 493.279737][T15235] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 493.390092][T15235] hsr_slave_0: entered promiscuous mode [ 493.408994][T15235] hsr_slave_1: entered promiscuous mode [ 493.430973][ T5836] Bluetooth: hci2: command tx timeout [ 493.452462][T15235] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 493.476585][T15235] Cannot create hsr debugfs directory [ 493.553906][T15279] HfR: entered promiscuous mode [ 493.681322][T15279] openvswitch: HfR: Dropping previously announced user features [ 493.884106][T15235] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.026565][T15235] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.182312][T15235] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.377705][T15235] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.546038][T15235] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 494.583670][T15235] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 494.598522][T15235] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 494.642258][T15235] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 494.773507][T15307] FAULT_INJECTION: forcing a failure. [ 494.773507][T15307] name failslab, interval 1, probability 0, space 0, times 0 [ 494.794436][T15307] CPU: 0 UID: 0 PID: 15307 Comm: syz.3.2313 Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 [ 494.806329][T15307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 494.817418][T15307] Call Trace: [ 494.821045][T15307] [ 494.824290][T15307] dump_stack_lvl+0x16c/0x1f0 [ 494.829475][T15307] should_fail_ex+0x497/0x5b0 [ 494.829563][T15235] 8021q: adding VLAN 0 to HW filter on device bond0 [ 494.834633][T15307] ? fs_reclaim_acquire+0xae/0x150 [ 494.834667][T15307] should_failslab+0xc2/0x120 [ 494.834702][T15307] kmem_cache_alloc_node_noprof+0x72/0x3b0 [ 494.834736][T15307] ? __alloc_skb+0x2b3/0x380 [ 494.864165][T15307] __alloc_skb+0x2b3/0x380 [ 494.869063][T15307] ? __pfx___alloc_skb+0x10/0x10 [ 494.874534][T15307] ? genl_rcv_msg+0x4bd/0x800 [ 494.879723][T15307] netlink_ack+0x164/0xb20 [ 494.884627][T15307] netlink_rcv_skb+0x327/0x410 [ 494.889910][T15307] ? __pfx_genl_rcv_msg+0x10/0x10 [ 494.895467][T15307] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 494.901301][T15307] ? down_read+0xc9/0x330 [ 494.906075][T15307] ? __pfx_down_read+0x10/0x10 [ 494.911326][T15307] ? netlink_deliver_tap+0x1ae/0xca0 [ 494.917150][T15307] genl_rcv+0x28/0x40 [ 494.921556][T15307] netlink_unicast+0x53c/0x7f0 [ 494.926819][T15307] ? __pfx_netlink_unicast+0x10/0x10 [ 494.932645][T15307] ? __phys_addr_symbol+0x30/0x80 [ 494.938202][T15307] ? __check_object_size+0x488/0x710 [ 494.944034][T15307] netlink_sendmsg+0x8b8/0xd70 [ 494.949283][T15307] ? __pfx_netlink_sendmsg+0x10/0x10 [ 494.955108][T15307] __sys_sendto+0x488/0x4f0 [ 494.960078][T15307] ? __pfx___sys_sendto+0x10/0x10 [ 494.965640][T15307] ? __pfx___sys_socket+0x10/0x10 [ 494.971170][T15307] ? rcu_is_watching+0x12/0xc0 [ 494.976416][T15307] __x64_sys_sendto+0xe0/0x1c0 [ 494.981661][T15307] ? do_syscall_64+0x91/0x250 [ 494.986808][T15307] ? lockdep_hardirqs_on+0x7c/0x110 [ 494.992525][T15307] do_syscall_64+0xcd/0x250 [ 494.997480][T15307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.003964][T15307] RIP: 0033:0x7f1465387bbc [ 495.008833][T15307] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 495.030411][T15307] RSP: 002b:00007f14660e1ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 495.039671][T15307] RAX: ffffffffffffffda RBX: 00007f14660e1fc0 RCX: 00007f1465387bbc [ 495.048439][T15307] RDX: 0000000000000020 RSI: 00007f14660e2010 RDI: 0000000000000008 [ 495.057207][T15307] RBP: 0000000000000000 R08: 00007f14660e1f14 R09: 000000000000000c [ 495.065976][T15307] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000008 [ 495.074760][T15307] R13: 00007f14660e1f68 R14: 00007f14660e2010 R15: 0000000000000000 [ 495.083551][T15307] [ 495.105999][T15235] 8021q: adding VLAN 0 to HW filter on device team0 [ 495.118521][T12903] bridge0: port 1(bridge_slave_0) entered blocking state [ 495.126393][T12903] bridge0: port 1(bridge_slave_0) entered forwarding state [ 495.165612][T12903] bridge0: port 2(bridge_slave_1) entered blocking state [ 495.173455][T12903] bridge0: port 2(bridge_slave_1) entered forwarding state [ 495.525138][ T5836] Bluetooth: hci2: command tx timeout [ 495.536644][T15235] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 495.871808][T15235] veth0_vlan: entered promiscuous mode [ 495.933242][T15235] veth1_vlan: entered promiscuous mode [ 496.140712][T15235] veth0_macvtap: entered promiscuous mode [ 496.232784][T15235] veth1_macvtap: entered promiscuous mode [ 496.294073][T15235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 496.326283][T15235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.347463][T15235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 496.379734][T15235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.392819][T15235] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 496.407648][T15235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 496.445751][T15235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.466925][T15235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 496.489439][T15235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.519568][T15235] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 496.533137][T15235] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.543846][T15235] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.553967][T15235] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.565940][T15235] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.897162][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 496.954659][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 497.118620][T11866] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 497.164075][T11866] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 497.589891][ T5836] Bluetooth: hci2: command tx timeout [ 497.658154][T15392] netlink: 326 bytes leftover after parsing attributes in process `syz.0.2326'. [ 497.989431][T15415] vivid-003: ================= START STATUS ================= [ 497.999780][T15415] vivid-003: Radio HW Seek Mode: Bounded [ 498.006290][T15415] vivid-003: Radio Programmable HW Seek: false [ 498.014684][T15415] vivid-003: RDS Rx I/O Mode: Block I/O [ 498.020939][T15415] vivid-003: Generate RBDS Instead of RDS: false [ 498.028336][T15415] vivid-003: RDS Reception: true [ 498.033880][T15415] vivid-003: RDS Program Type: 0 inactive [ 498.040454][T15415] vivid-003: RDS PS Name: inactive [ 498.046510][T15415] vivid-003: RDS Radio Text: inactive [ 498.054078][T15415] vivid-003: RDS Traffic Announcement: false inactive [ 498.061708][T15415] vivid-003: RDS Traffic Program: false inactive [ 498.068810][T15415] vivid-003: RDS Music: false inactive [ 498.079029][T15415] vivid-003: ================== END STATUS ================== [ 499.669703][ T5836] Bluetooth: hci2: command tx timeout [ 501.621826][T15509] net_ratelimit: 55 callbacks suppressed [ 501.621847][T15509] openvswitch: netlink: Duplicate key (type 15). [ 505.469504][T15639] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2378'. [ 505.826773][T15655] netlink: 146 bytes leftover after parsing attributes in process `syz.3.2382'. [ 506.518207][T15676] CIFS mount error: No usable UNC path provided in device string! [ 506.518207][T15676] [ 506.584067][T15676] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 506.667023][T14933] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 506.678767][T14933] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 506.687885][T14933] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 506.696995][T14933] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 506.706258][T14933] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 506.714379][T14933] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 506.749257][T15682] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2387'. [ 506.874940][T15618] smc: removing net device syz_tun with user defined pnetid ETHTOOL [ 507.234819][T15694] netlink: 330 bytes leftover after parsing attributes in process `syz.2.2388'. [ 507.627851][T15684] chnl_net:caif_netlink_parms(): no params data found [ 507.861827][T15684] bridge0: port 1(bridge_slave_0) entered blocking state [ 507.884508][T15684] bridge0: port 1(bridge_slave_0) entered disabled state [ 507.904502][T15684] bridge_slave_0: entered allmulticast mode [ 507.924045][T15684] bridge_slave_0: entered promiscuous mode [ 507.948043][T15684] bridge0: port 2(bridge_slave_1) entered blocking state [ 507.985640][T15684] bridge0: port 2(bridge_slave_1) entered disabled state [ 508.000972][T15684] bridge_slave_1: entered allmulticast mode [ 508.025703][T15684] bridge_slave_1: entered promiscuous mode [ 508.147104][T15684] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 508.194963][T15684] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 508.311258][T15684] team0: Port device team_slave_0 added [ 508.328870][T15684] team0: Port device team_slave_1 added [ 508.388295][T15684] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 508.396776][T15684] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 508.435984][T15684] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 508.488842][T15684] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 508.496820][T15684] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 508.545829][T15684] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 508.652941][T15684] hsr_slave_0: entered promiscuous mode [ 508.669319][T15684] hsr_slave_1: entered promiscuous mode [ 508.676244][T15684] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 508.695821][T15684] Cannot create hsr debugfs directory [ 508.788800][T14933] Bluetooth: hci4: command tx timeout [ 508.921027][T15684] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.005159][T15684] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.158063][T15684] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.324975][T15684] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.624496][T15684] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 509.686329][T15684] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 509.714911][T15684] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 509.744644][T15684] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 509.911570][T15684] 8021q: adding VLAN 0 to HW filter on device bond0 [ 509.947159][T15684] 8021q: adding VLAN 0 to HW filter on device team0 [ 509.966641][T12904] bridge0: port 1(bridge_slave_0) entered blocking state [ 509.974580][T12904] bridge0: port 1(bridge_slave_0) entered forwarding state [ 510.023953][T12079] bridge0: port 2(bridge_slave_1) entered blocking state [ 510.031808][T12079] bridge0: port 2(bridge_slave_1) entered forwarding state [ 510.327001][T15746] netlink: 'syz.3.2400': attribute type 1 has an invalid length. [ 510.406642][T15684] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 510.517758][T15684] veth0_vlan: entered promiscuous mode [ 510.541698][T15684] veth1_vlan: entered promiscuous mode [ 510.607507][T15684] veth0_macvtap: entered promiscuous mode [ 510.645841][T15684] veth1_macvtap: entered promiscuous mode [ 510.694091][T15684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 510.725300][T15684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.748194][T15684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 510.759759][T15684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.778185][T15684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 510.798316][T15684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.819503][T15684] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 510.831807][T15684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 510.857869][T15684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.868283][T14933] Bluetooth: hci4: command tx timeout [ 510.878203][T15684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 510.898173][T15684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.939600][T15684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 510.968192][T15684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.984971][T15684] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 510.995426][T15754] netlink: 342 bytes leftover after parsing attributes in process `syz.0.2401'. [ 511.016777][T15754] IPv6: NLM_F_CREATE should be specified when creating new route [ 511.033338][T15754] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 511.041827][T15754] IPv6: NLM_F_CREATE should be set when creating new route [ 511.049805][T15754] IPv6: NLM_F_CREATE should be set when creating new route [ 511.091577][T15684] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.112783][T15684] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.154836][T15684] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.177797][T15684] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.513311][T15769] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2406'. [ 511.607564][T12905] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 511.637774][T12905] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 511.665006][T11866] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 511.712645][T11866] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 512.950172][T14933] Bluetooth: hci4: command tx timeout [ 513.056856][ T5836] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 513.066836][ T5836] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 513.075831][ T5836] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 513.085294][ T5836] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 513.094178][ T5836] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 513.102821][ T5836] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 513.230939][ T5828] smc: removing net device syz_tun with user defined pnetid ETHTOOL [ 513.601656][T15790] chnl_net:caif_netlink_parms(): no params data found [ 514.024952][T15790] bridge0: port 1(bridge_slave_0) entered blocking state [ 514.033698][T15790] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.045108][T15790] bridge_slave_0: entered allmulticast mode [ 514.094238][T15790] bridge_slave_0: entered promiscuous mode [ 514.142713][T15790] bridge0: port 2(bridge_slave_1) entered blocking state [ 514.177866][T15790] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.185845][T15790] bridge_slave_1: entered allmulticast mode [ 514.208927][T15790] bridge_slave_1: entered promiscuous mode [ 514.341938][T15790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 514.372552][T15790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 514.472650][T15790] team0: Port device team_slave_0 added [ 514.507816][T15790] team0: Port device team_slave_1 added [ 514.703158][T15790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 514.727777][T15790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 514.756269][ C1] vkms_vblank_simulate: vblank timer overrun [ 514.796269][T15790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 514.816718][T15790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 514.825161][T15790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 514.853659][ C1] vkms_vblank_simulate: vblank timer overrun [ 514.884788][T15790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 514.966215][T15841] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2424'. [ 515.001488][T15790] hsr_slave_0: entered promiscuous mode [ 515.025718][T15790] hsr_slave_1: entered promiscuous mode [ 515.036793][ T5836] Bluetooth: hci4: command tx timeout [ 515.047751][T15790] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 515.056093][T15790] Cannot create hsr debugfs directory [ 515.085893][T15841] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 515.148703][T15841] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 515.188254][ T5836] Bluetooth: hci0: command tx timeout [ 515.287092][T15790] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.369198][T15790] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.477372][T15790] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.623692][T15790] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.685524][T15849] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2427'. [ 515.944567][T15790] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 516.014313][T15790] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 516.065256][T15790] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 516.083175][T15790] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 516.369154][T15790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 516.395921][T15790] 8021q: adding VLAN 0 to HW filter on device team0 [ 516.408683][T12904] bridge0: port 1(bridge_slave_0) entered blocking state [ 516.416547][T12904] bridge0: port 1(bridge_slave_0) entered forwarding state [ 516.460623][T12904] bridge0: port 2(bridge_slave_1) entered blocking state [ 516.468482][T12904] bridge0: port 2(bridge_slave_1) entered forwarding state [ 516.815338][T15790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 516.918931][T15790] veth0_vlan: entered promiscuous mode [ 516.959226][T15790] veth1_vlan: entered promiscuous mode [ 517.028875][T15790] veth0_macvtap: entered promiscuous mode [ 517.046822][T15790] veth1_macvtap: entered promiscuous mode [ 517.073093][T15790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 517.095077][T15790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.127090][T15790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 517.171996][T15790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.242997][T15790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 517.267535][ T5836] Bluetooth: hci0: command tx timeout [ 517.277971][T15790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.320593][T15790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 517.373348][T15790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.411633][T15790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 517.436101][T15880] netlink: 'syz.3.2434': attribute type 3 has an invalid length. [ 517.512970][T15790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 517.539606][T15790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.565140][T15790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 517.594368][T15790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.638136][T15790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 517.667359][T15790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.688197][T15790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 517.722555][T15790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.743426][T15790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 517.763056][T15790] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.797324][T15790] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.818117][T15790] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.847402][T15790] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.277007][T12082] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 518.292499][T12082] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 518.514034][T12905] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 518.559837][T12905] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 518.986585][T15909] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 519.098076][T15909] svc: failed to register nfsdv3 RPC service (errno 111). [ 519.120318][T15909] svc: failed to register nfsaclv3 RPC service (errno 111). [ 519.347393][ T5836] Bluetooth: hci0: command tx timeout [ 520.834909][T15945] netlink: 259 bytes leftover after parsing attributes in process `syz.0.2449'. [ 521.437153][ T5836] Bluetooth: hci0: command tx timeout [ 521.737632][T15956] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2452'. [ 521.810928][T15956] lo: entered promiscuous mode [ 521.816230][T15956] lo: entered allmulticast mode [ 524.899925][T16004] netlink: 259 bytes leftover after parsing attributes in process `syz.0.2463'. [ 524.955904][T16005] openvswitch: netlink: Multiple metadata blocks provided [ 526.935938][T16048] netlink: 259 bytes leftover after parsing attributes in process `syz.2.2477'. [ 526.958653][T16039] FAULT_INJECTION: forcing a failure. [ 526.958653][T16039] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 527.006004][T16039] CPU: 0 UID: 0 PID: 16039 Comm: syz.3.2472 Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 [ 527.017894][T16039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 527.028974][T16039] Call Trace: [ 527.032599][T16039] [ 527.035840][T16039] dump_stack_lvl+0x16c/0x1f0 [ 527.041019][T16039] should_fail_ex+0x497/0x5b0 [ 527.046197][T16039] _copy_to_user+0x32/0xd0 [ 527.051089][T16039] video_usercopy+0xe72/0x1520 [ 527.056357][T16039] ? __pfx_subdev_do_ioctl_lock+0x10/0x10 [ 527.062675][T16039] ? __pfx_video_usercopy+0x10/0x10 [ 527.068441][T16039] v4l2_ioctl+0x1ba/0x250 [ 527.073227][T16039] ? __pfx_v4l2_ioctl+0x10/0x10 [ 527.078586][T16039] __x64_sys_ioctl+0x190/0x200 [ 527.083851][T16039] do_syscall_64+0xcd/0x250 [ 527.088837][T16039] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.095348][T16039] RIP: 0033:0x7f1465385d29 [ 527.100221][T16039] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 527.121813][T16039] RSP: 002b:00007f14660e3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 527.131091][T16039] RAX: ffffffffffffffda RBX: 00007f1465575fa0 RCX: 00007f1465385d29 [ 527.139885][T16039] RDX: 0000000000000038 RSI: 00000000c0585605 RDI: 0000000000000003 [ 527.148675][T16039] RBP: 00007f14660e3090 R08: 0000000000000000 R09: 0000000000000000 [ 527.157467][T16039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 527.166251][T16039] R13: 0000000000000000 R14: 00007f1465575fa0 R15: 00007fff78acfc98 [ 527.175054][T16039] [ 528.795967][T16087] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2487'. [ 529.319298][T16100] kAFS: bad VL server IP address [ 533.980514][T16211] netlink: 67 bytes leftover after parsing attributes in process `syz.1.2517'. [ 533.991881][T16211] nbd: socks must be embedded in a SOCK_ITEM attr [ 535.652323][T16260] netlink: 'syz.1.2529': attribute type 33 has an invalid length. [ 535.670776][T16260] netlink: 322 bytes leftover after parsing attributes in process `syz.1.2529'. [ 538.792782][T16327] Invalid ELF header magic: != ELF [ 539.192431][T16342] Process accounting resumed [ 540.867768][T16370] nbd: must specify a device to reconfigure [ 542.491528][T16420] netlink: 259 bytes leftover after parsing attributes in process `syz.0.2568'. [ 543.106706][T16430] FAULT_INJECTION: forcing a failure. [ 543.106706][T16430] name failslab, interval 1, probability 0, space 0, times 0 [ 543.125368][T16430] CPU: 1 UID: 0 PID: 16430 Comm: syz.1.2572 Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 [ 543.137253][T16430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 543.148334][T16430] Call Trace: [ 543.151959][T16430] [ 543.155198][T16430] dump_stack_lvl+0x16c/0x1f0 [ 543.160376][T16430] should_fail_ex+0x497/0x5b0 [ 543.165547][T16430] ? fs_reclaim_acquire+0xae/0x150 [ 543.171196][T16430] should_failslab+0xc2/0x120 [ 543.176375][T16430] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 543.182316][T16430] ? alloc_empty_file+0x73/0x1e0 [ 543.187787][T16430] alloc_empty_file+0x73/0x1e0 [ 543.193071][T16430] alloc_file_pseudo+0x13d/0x200 [ 543.198537][T16430] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 543.204579][T16430] ? alloc_fd+0x41f/0x760 [ 543.209376][T16430] sock_alloc_file+0x50/0x1d0 [ 543.214559][T16430] __sys_socket+0x1c2/0x260 [ 543.219542][T16430] ? __pfx___sys_socket+0x10/0x10 [ 543.225099][T16430] ? rcu_is_watching+0x12/0xc0 [ 543.230374][T16430] __x64_sys_socket+0x72/0xb0 [ 543.235543][T16430] ? lockdep_hardirqs_on+0x7c/0x110 [ 543.241287][T16430] do_syscall_64+0xcd/0x250 [ 543.246268][T16430] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.252780][T16430] RIP: 0033:0x7f2ea4385d29 [ 543.257653][T16430] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 543.279242][T16430] RSP: 002b:00007f2ea511a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 543.288522][T16430] RAX: ffffffffffffffda RBX: 00007f2ea4575fa0 RCX: 00007f2ea4385d29 [ 543.297308][T16430] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000002 [ 543.306192][T16430] RBP: 00007f2ea4401b08 R08: 0000000000000000 R09: 0000000000000000 [ 543.314978][T16430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 543.323765][T16430] R13: 0000000000000000 R14: 00007f2ea4575fa0 R15: 00007ffefec75d28 [ 543.332569][T16430] [ 545.038282][T16482] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2585'. [ 545.118208][T16482] veth0_macvtap: left promiscuous mode [ 545.540126][T16478] binder: 16477:16478 unknown command 0 [ 545.562083][T16478] binder: 16477:16478 ioctl c0306201 9 returned -22 [ 546.387513][T16512] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2595'. [ 546.433327][T16512] veth0_macvtap: left promiscuous mode [ 547.231758][T16532] netlink: 259 bytes leftover after parsing attributes in process `syz.1.2601'. [ 548.558840][T16544] binder: 16543:16544 unknown command 0 [ 548.581035][T16544] binder: 16543:16544 ioctl c0306201 9 returned -22 [ 549.656438][T16572] netlink: 334 bytes leftover after parsing attributes in process `syz.3.2612'. [ 551.447745][T16629] netlink: 259 bytes leftover after parsing attributes in process `syz.1.2627'. [ 551.450300][T16621] FAULT_INJECTION: forcing a failure. [ 551.450300][T16621] name failslab, interval 1, probability 0, space 0, times 0 [ 551.481930][T16621] CPU: 0 UID: 0 PID: 16621 Comm: syz.0.2625 Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 [ 551.493822][T16621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 551.504905][T16621] Call Trace: [ 551.508525][T16621] [ 551.511763][T16621] dump_stack_lvl+0x16c/0x1f0 [ 551.516939][T16621] should_fail_ex+0x497/0x5b0 [ 551.522112][T16621] ? fs_reclaim_acquire+0xae/0x150 [ 551.527764][T16621] should_failslab+0xc2/0x120 [ 551.532947][T16621] kmem_cache_alloc_lru_noprof+0x73/0x3b0 [ 551.539276][T16621] ? find_held_lock+0x2d/0x110 [ 551.544546][T16621] ? __d_alloc+0x35/0x8c0 [ 551.549350][T16621] __d_alloc+0x35/0x8c0 [ 551.553960][T16621] d_alloc_pseudo+0x1c/0xc0 [ 551.558938][T16621] alloc_file_pseudo+0xd2/0x200 [ 551.564314][T16621] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 551.570361][T16621] ? alloc_fd+0x41f/0x760 [ 551.575155][T16621] sock_alloc_file+0x50/0x1d0 [ 551.580339][T16621] __sys_socket+0x1c2/0x260 [ 551.585326][T16621] ? __pfx___sys_socket+0x10/0x10 [ 551.590887][T16621] ? rcu_is_watching+0x12/0xc0 [ 551.596163][T16621] __x64_sys_socket+0x72/0xb0 [ 551.601335][T16621] ? lockdep_hardirqs_on+0x7c/0x110 [ 551.607085][T16621] do_syscall_64+0xcd/0x250 [ 551.612073][T16621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.618586][T16621] RIP: 0033:0x7fc319385d29 [ 551.623458][T16621] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 551.645049][T16621] RSP: 002b:00007fc31a0ed038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 551.654340][T16621] RAX: ffffffffffffffda RBX: 00007fc319575fa0 RCX: 00007fc319385d29 [ 551.663128][T16621] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000002 [ 551.671915][T16621] RBP: 00007fc319401b08 R08: 0000000000000000 R09: 0000000000000000 [ 551.680707][T16621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 551.689503][T16621] R13: 0000000000000000 R14: 00007fc319575fa0 R15: 00007fff87205f18 [ 551.698312][T16621] syzkaller syzkaller login: [ 553.523286][T16686] netlink: 259 bytes leftover after parsing attributes in process `syz.2.2639'. [ 553.905879][T16698] svc: failed to register nfsdv3 RPC service (errno 111). [ 553.924796][T16698] svc: failed to register nfsaclv3 RPC service (errno 512). [ 555.570748][T16772] netlink: 259 bytes leftover after parsing attributes in process `syz.1.2659'. [ 556.473610][T16789] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.487256][T16802] Process accounting resumed [ 557.308995][T16817] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 557.340277][T16817] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 559.148922][T16876] netlink: 'syz.3.2684': attribute type 16 has an invalid length. [ 559.173739][T16876] netlink: 330 bytes leftover after parsing attributes in process `syz.3.2684'. [ 560.682305][T16908] binder: 16907:16908 ioctl 80081270 38 returned -22 [ 561.633923][T16945] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2703'. [ 561.727567][T16945] netdevsim netdevsim0 netdevsim2: entered allmulticast mode [ 561.884928][T16959] netlink: 259 bytes leftover after parsing attributes in process `syz.1.2708'. [ 563.423195][T16992] [ 563.425800][T16992] ====================================================== [ 563.433522][T16992] WARNING: possible circular locking dependency detected [ 563.441251][T16992] 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 Not tainted [ 563.449078][T16992] ------------------------------------------------------ [ 563.456804][T16992] syz.1.2717/16992 is trying to acquire lock: [ 563.463489][T16992] ffff888024d1dde0 (&q->sysfs_lock){+.+.}-{4:4}, at: queue_attr_store+0xe2/0x170 [ 563.473577][T16992] [ 563.473577][T16992] but task is already holding lock: [ 563.481672][T16992] ffff888024d1d8b0 (&q->q_usage_counter(io)#23){++++}-{0:0}, at: queue_attr_store+0xd8/0x170 [ 563.492889][T16992] [ 563.492889][T16992] which lock already depends on the new lock. [ 563.492889][T16992] [ 563.504319][T16992] [ 563.504319][T16992] the existing dependency chain (in reverse order) is: [ 563.514220][T16992] [ 563.514220][T16992] -> #4 (&q->q_usage_counter(io)#23){++++}-{0:0}: [ 563.523683][T16992] blk_mq_submit_bio+0x1fb6/0x24c0 [ 563.529887][T16992] __submit_bio+0x384/0x540 [ 563.535422][T16992] submit_bio_noacct_nocheck+0x698/0xd70 [ 563.542189][T16992] submit_bio_noacct+0x93a/0x1e20 [ 563.548293][T16992] mpage_readahead+0x41d/0x590 [ 563.554109][T16992] read_pages+0x1a8/0xdc0 [ 563.559436][T16992] page_cache_ra_unbounded+0x3dc/0x750 [ 563.566005][T16992] force_page_cache_ra+0x24b/0x340 [ 563.572197][T16992] page_cache_sync_ra+0x110/0x9c0 [ 563.578292][T16992] filemap_get_pages+0xd7b/0x1be0 [ 563.584387][T16992] filemap_read+0x3ca/0xd70 [ 563.589907][T16992] blkdev_read_iter+0x187/0x480 [ 563.595809][T16992] vfs_read+0x87f/0xbe0 [ 563.600942][T16992] ksys_read+0x12b/0x250 [ 563.606171][T16992] do_syscall_64+0xcd/0x250 [ 563.611693][T16992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.618747][T16992] [ 563.618747][T16992] -> #3 (mapping.invalidate_lock#2){++++}-{4:4}: [ 563.628110][T16992] down_read+0x9a/0x330 [ 563.633251][T16992] filemap_fault+0x2e0/0x2820 [ 563.638969][T16992] __do_fault+0x10a/0x490 [ 563.644295][T16992] do_pte_missing+0xebd/0x3e00 [ 563.650106][T16992] __handle_mm_fault+0x103c/0x2a40 [ 563.656293][T16992] handle_mm_fault+0x3fa/0xaa0 [ 563.662102][T16992] do_user_addr_fault+0x7a3/0x13f0 [ 563.668296][T16992] exc_page_fault+0x5c/0xc0 [ 563.673825][T16992] asm_exc_page_fault+0x26/0x30 [ 563.679737][T16992] fault_in_readable+0x160/0x200 [ 563.685739][T16992] fault_in_iov_iter_readable+0x101/0x2c0 [ 563.692601][T16992] iomap_file_buffered_write+0x3e2/0xc70 [ 563.699370][T16992] blkdev_write_iter+0x545/0xd40 [ 563.705363][T16992] vfs_write+0x5ae/0x1150 [ 563.710689][T16992] ksys_write+0x12b/0x250 [ 563.716015][T16992] do_syscall_64+0xcd/0x250 [ 563.721537][T16992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.728588][T16992] [ 563.728588][T16992] -> #2 (&mm->mmap_lock){++++}-{4:4}: [ 563.736894][T16992] __might_fault+0x11b/0x190 [ 563.742512][T16992] _copy_from_user+0x29/0xd0 [ 563.748131][T16992] __blk_trace_setup+0xa8/0x180 [ 563.754032][T16992] blk_trace_ioctl+0x163/0x290 [ 563.759845][T16992] blkdev_ioctl+0x106/0x670 [ 563.765365][T16992] __x64_sys_ioctl+0x190/0x200 [ 563.771188][T16992] do_syscall_64+0xcd/0x250 [ 563.776711][T16992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.783762][T16992] [ 563.783762][T16992] -> #1 (&q->debugfs_mutex){+.+.}-{4:4}: [ 563.792354][T16992] __mutex_lock+0x19b/0xa60 [ 563.797877][T16992] blk_register_queue+0x13c/0x4f0 [ 563.803968][T16992] add_disk_fwnode+0x785/0x1300 [ 563.809862][T16992] brd_alloc.isra.0+0x50a/0x7c0 [ 563.815765][T16992] brd_init+0x12b/0x1d0 [ 563.820897][T16992] do_one_initcall+0x128/0x630 [ 563.826708][T16992] kernel_init_freeable+0x58f/0x8b0 [ 563.832992][T16992] kernel_init+0x1c/0x2b0 [ 563.838322][T16992] ret_from_fork+0x45/0x80 [ 563.843741][T16992] ret_from_fork_asm+0x1a/0x30 [ 563.849551][T16992] [ 563.849551][T16992] -> #0 (&q->sysfs_lock){+.+.}-{4:4}: [ 563.857853][T16992] __lock_acquire+0x249e/0x3c40 [ 563.863748][T16992] lock_acquire.part.0+0x11b/0x380 [ 563.869939][T16992] __mutex_lock+0x19b/0xa60 [ 563.875458][T16992] queue_attr_store+0xe2/0x170 [ 563.881261][T16992] sysfs_kf_write+0x117/0x170 [ 563.886977][T16992] kernfs_fop_write_iter+0x33d/0x500 [ 563.893362][T16992] vfs_write+0x5ae/0x1150 [ 563.898690][T16992] ksys_write+0x12b/0x250 [ 563.904015][T16992] do_syscall_64+0xcd/0x250 [ 563.909547][T16992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.916597][T16992] [ 563.916597][T16992] other info that might help us debug this: [ 563.916597][T16992] [ 563.927831][T16992] Chain exists of: [ 563.927831][T16992] &q->sysfs_lock --> mapping.invalidate_lock#2 --> &q->q_usage_counter(io)#23 [ 563.927831][T16992] [ 563.944085][T16992] Possible unsafe locking scenario: [ 563.944085][T16992] [ 563.952259][T16992] CPU0 CPU1 [ 563.958144][T16992] ---- ---- [ 563.964026][T16992] lock(&q->q_usage_counter(io)#23); [ 563.969933][T16992] lock(mapping.invalidate_lock#2); [ 563.978510][T16992] lock(&q->q_usage_counter(io)#23); [ 563.987188][T16992] lock(&q->sysfs_lock); [ 563.991937][T16992] [ 563.991937][T16992] *** DEADLOCK *** [ 563.991937][T16992] [ 564.000875][T16992] 6 locks held by syz.1.2717/16992: [ 564.006575][T16992] #0: ffff888081043eb8 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x267/0x390 [ 564.016529][T16992] #1: ffff888034f66420 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12b/0x250 [ 564.026391][T16992] #2: ffff888028582888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x27b/0x500 [ 564.037105][T16992] #3: ffff888143f4d878 (kn->active#204){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x29e/0x500 [ 564.048221][T16992] #4: ffff888024d1d8b0 (&q->q_usage_counter(io)#23){++++}-{0:0}, at: queue_attr_store+0xd8/0x170 [ 564.059908][T16992] #5: ffff888024d1d8e8 (&q->q_usage_counter(queue)#7){+.+.}-{0:0}, at: queue_attr_store+0xd8/0x170 [ 564.071779][T16992] [ 564.071779][T16992] stack backtrace: [ 564.078245][T16992] CPU: 0 UID: 0 PID: 16992 Comm: syz.1.2717 Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 [ 564.090074][T16992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 564.101122][T16992] Call Trace: [ 564.104716][T16992] [ 564.107928][T16992] dump_stack_lvl+0x116/0x1f0 [ 564.113072][T16992] print_circular_bug+0x41c/0x610 [ 564.118598][T16992] check_noncircular+0x31a/0x400 [ 564.124025][T16992] ? __pfx_check_noncircular+0x10/0x10 [ 564.130030][T16992] ? save_trace+0x290/0xa10 [ 564.134979][T16992] ? add_lock_to_list+0x17d/0x390 [ 564.140503][T16992] __lock_acquire+0x249e/0x3c40 [ 564.145835][T16992] ? __pfx___lock_acquire+0x10/0x10 [ 564.151544][T16992] ? __pfx___lock_acquire+0x10/0x10 [ 564.157250][T16992] lock_acquire.part.0+0x11b/0x380 [ 564.162860][T16992] ? queue_attr_store+0xe2/0x170 [ 564.168284][T16992] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 564.174468][T16992] ? rcu_is_watching+0x12/0xc0 [ 564.179702][T16992] ? trace_lock_acquire+0x14e/0x1f0 [ 564.185416][T16992] ? find_held_lock+0x2d/0x110 [ 564.190647][T16992] ? queue_attr_store+0xe2/0x170 [ 564.196070][T16992] ? lock_acquire+0x2f/0xb0 [ 564.201014][T16992] ? queue_attr_store+0xe2/0x170 [ 564.206438][T16992] __mutex_lock+0x19b/0xa60 [ 564.211385][T16992] ? queue_attr_store+0xe2/0x170 [ 564.216809][T16992] ? mark_held_locks+0x9f/0xe0 [ 564.222051][T16992] ? queue_attr_store+0xe2/0x170 [ 564.227477][T16992] ? __pfx___mutex_lock+0x10/0x10 [ 564.232999][T16992] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 564.239377][T16992] ? blk_mq_freeze_queue_wait+0xaf/0x190 [ 564.245564][T16992] ? __pfx_autoremove_wake_function+0x10/0x10 [ 564.252237][T16992] ? queue_attr_store+0xd8/0x170 [ 564.257661][T16992] ? queue_attr_store+0xe2/0x170 [ 564.263082][T16992] queue_attr_store+0xe2/0x170 [ 564.268313][T16992] ? __pfx_queue_attr_store+0x10/0x10 [ 564.274212][T16992] sysfs_kf_write+0x117/0x170 [ 564.279355][T16992] kernfs_fop_write_iter+0x33d/0x500 [ 564.285163][T16992] ? __pfx_sysfs_kf_write+0x10/0x10 [ 564.290876][T16992] vfs_write+0x5ae/0x1150 [ 564.295631][T16992] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 564.302013][T16992] ? __pfx___mutex_lock+0x10/0x10 [ 564.307536][T16992] ? __pfx_vfs_write+0x10/0x10 [ 564.312772][T16992] ksys_write+0x12b/0x250 [ 564.317528][T16992] ? __pfx_ksys_write+0x10/0x10 [ 564.322856][T16992] do_syscall_64+0xcd/0x250 [ 564.327810][T16992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.334286][T16992] RIP: 0033:0x7f2ea4385d29 [ 564.339128][T16992] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 564.360687][T16992] RSP: 002b:00007f2ea511a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 564.369932][T16992] RAX: ffffffffffffffda RBX: 00007f2ea4575fa0 RCX: 00007f2ea4385d29 [ 564.378689][T16992] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003 [ 564.387445][T16992] RBP: 00007f2ea4401b08 R08: 0000000000000000 R09: 0000000000000000 [ 564.396200][T16992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 564.404955][T16992] R13: 0000000000000000 R14: 00007f2ea4575fa0 R15: 00007ffefec75d28 [ 564.413717][T16992]