last executing test programs: 9.019524168s ago: executing program 3 (id=1271): mmap$auto(0x0, 0x20009, 0xe, 0xeb1, 0x403, 0x8000) socket(0x11, 0x80003, 0x300) r0 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r0, 0x107, 0x12, 0x0, 0x8) setsockopt$auto(r0, 0x107, 0x12, 0x0, 0x8) close_range$auto(0x2, 0x8, 0x0) 8.739633172s ago: executing program 3 (id=1273): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x2008000) mmap$auto(0x3, 0x2020009, 0x3, 0x8000000000ab2, 0xfffffffffffffffa, 0x8000) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/dummy_hcd.7/usb8/bConfigurationValue\x00', 0x10b042, 0x0) sendfile$auto(r0, r0, 0x0, 0x2) (fail_nth: 10) 8.73888817s ago: executing program 2 (id=1274): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) r1 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x2001, 0x0) ioctl$auto(r1, 0x400454d0, r1) close_range$auto(r0, r1, 0x7) read$auto(r0, 0x0, 0x1f40) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) kill$auto(0x0, 0x11) sendmmsg$auto(r0, 0x0, 0xfffff848, 0xfff) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) 7.946118275s ago: executing program 2 (id=1277): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x0) mmap$auto(0x0, 0x40009, 0xa, 0x9b72, 0x2, 0x28000) getsockopt$auto(0x100000006, 0x11, 0x68, 0xfffffffffffffffc, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/midi2\x00', 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x11, 0x2, 0x73) pipe2$auto(0x0, 0x0) io_uring_setup$auto(0x6, 0x0) open(0x0, 0x22240, 0x155) r1 = io_uring_setup$auto(0x5, 0x0) openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$auto_proc_mounts_operations_mnt_namespace(0xffffffffffffff9c, 0x0, 0x121080, 0x0) socket(0x2, 0x5, 0x0) openat$auto_stat_fops_(0xffffffffffffff9c, 0x0, 0x202802, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0xc2dc0, 0x0) r2 = socket(0x11, 0x2, 0x14) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f0000000040)={@inferred, 0x7ff, 0x4, 0xfffffbff, "a3ec29f218b9ab3a1d84673100d7f4bd3bc1eb0607b755e5e51f3d65f2c4ef94c77decdaafcbcf1d6f42b2e7", @raw=0x2}) close_range$auto(0x2, 0x8, 0x0) setsockopt$auto(r2, 0x200, 0x5f1adba9, &(0x7f0000000080)='/dev/midi2\x00', 0x5) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptya7\x00', 0x101e81, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyde\x00', 0xa0102, 0x0) ioctl$auto_TIOCSETD2(r3, 0x5423, 0x0) ppoll$auto(&(0x7f0000000140)={r0, 0x7, 0x4}, 0x7f, 0x0, 0x0, 0x8) 7.777446605s ago: executing program 3 (id=1279): mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) read$auto_fake_panic_fops_(0xffffffffffffffff, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8ad00, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0xa, 0x5, 0x0) r1 = socket(0xa, 0x801, 0x84) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) msgctl$auto_IPC_INFO(0x100, 0x3, &(0x7f00000012c0)={{0x632, 0xffffffffffffffff, 0xee00, 0x1, 0x5, 0x1, 0x80}, 0x0, 0x0, 0x1b, 0x7, 0x5, 0x7, 0x1, 0xdd34, 0x7, 0x8, @raw=0xffff}) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) msgctl$auto_IPC_RMID(0xffff, 0x0, &(0x7f0000000280)={{0x4, r3, r4, 0xfffffffd, 0x9, 0xd, 0xb}, &(0x7f0000000200)=0x5, &(0x7f0000000240)=0x5, 0x1, 0x1, 0x6e, 0xe811, 0x5, 0x4, 0x5, 0x10, @raw=0x5, @raw=0x7}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000040), r5) sendmsg$auto_IPVS_CMD_SET_SERVICE(r5, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={&(0x7f0000000580)=ANY=[@ANYBLOB=',\x00\x00', @ANYRES16=r6, @ANYBLOB="010028bd7000fcdbdf2502000000180001800800058004007d000c00018002"], 0x2c}, 0x1, 0x0, 0x0, 0x44050}, 0x4008000) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x54) get_robust_list$auto(0x0, 0x0, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) setsockopt$auto(r1, 0x1, 0x3f, 0x0, 0xb) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$auto_proc_timens_offsets_operations_base(0xffffffffffffff9c, 0x0, 0x8a082, 0x0) write$auto(r8, &(0x7f0000000100)='/dev/cec31\x00', 0x200) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000680), r7) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000006c0)={'batadv0\x00', 0x0}) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r7, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x5c, 0x0, 0x300, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_AUTH_DATA={0x36, 0x9c, "79543dbd7b06712e784c528e2ba48634cd6b170b7c9b286f2bfd8e325adbf115aafb2c850c21411700795a250baf19720688"}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x80}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x200408d0}, 0x8000) sendmsg$auto_ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="fc000000", @ANYRES16=0x0, @ANYBLOB="000825bd7000ffdbdf251500000008000600008000004c000180140002006d61637674617030000000000000000008000100", @ANYRES32=r9, @ANYBLOB="080003004b0900000800030001000000140002006272696467655f736c6176655f3000000800030009000000180001801400020076657468305f746f5f626f6e6400000058000180080003000100000008000100", @ANYRES32=r9, @ANYBLOB="08000304000800000800030000080000140002000000000000080003000500000008000100", @ANYRES32=r9], 0xfc}, 0x1, 0x0, 0x0, 0x20000005}, 0x40) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0xffffffff, 0x0, 0x106, 0x0, 0x6c, 0x697c}, 0xed71390}, 0x9a6, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x1102, 0x0) ustat$auto(0x801, 0x0) 7.323497982s ago: executing program 2 (id=1280): gettid() sendmsg$auto_NL802154_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80008000}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="f4130000", @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf2505000000f3122d80e2046aa02470bc99fbc64d6e09cc03137b9485974d125c75e523e96974efdd021d65e600064be77550588427867fa463f26777eb165b3638c3de4c25d8fe2dc700f4d6081c57ea7d06b38f939be71fdbd8f689d982161c1fd1e2702e9f9a55638ddbf8109f43f5b185bc33611a1c598914d7aea47a37ab33215fa6420a790791a9e20b7f84762a1393276d0c2bb1805dd6d8efb8f14ad32d9f5a944cf5c5ac03c89feecf230c203162a008995aaa78ccf2936c00258057004a0043ca747e4ab1df4ff12f2c8b8b7befd5d62b52805f1023ef0193153c0e04c82ccfd2294f17417928e01a6353f4c920763e38d630c18d1c293bfa8f8538e68b3eec79765750684fbdbb77d011924fdc208edf450004001b800c007800010000800000000008008300ac1414bb040042007952453deee784d56dd2a5675bb66dee07a692b9c8902a9436247be14d00730525b9343ee9317135a15e93997dd856c164749d86050ea80b9dfa9bdd6b9a3b3480d6936ae5e90ef1b85190e92562bd2f1a30819ef9333e083f285f766b1c5aaeae08006e000300000014006400fe80000000000000000000000000003e460124800c00640002000000000000000800190004000000a79b3ba501a7d1bd6171a4e7587f6a51f12fea8cd54d80fe844e6969bbbde399b5d517785eed842d1ab9a0683c0fb63cf611b6335fad5a8e8735aa2c9c90a33c526cf339f69d8e8d57f28019b7af908bb696cd8f5a0a92dd71ed106345658ccedac28635ed31e2b8c950c52b5dcb0ac4f8a0c897767bac75d4667487f2aa89ab9bb5d548cd6bda2272e6a3b054ee2b74925c0e2a00f61b004e6cff3622545bae8af3bf6b250dd722725a530258857ebd5c9709d381fdf1ad1ba9cc37770738d566e252c33269ae0f42c4d396d00a1d0f87c3567e6be4d14ff69c914ef9b173b51c61dfc5241618a3f6425534d0aa75d594089389fccbb3687df3de0800f700", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0800270040000000cf0019800c00bc000700000000000000c2fd80b6b8f2e8ba6684ddea3a426d384f5be133e3d9de29a31786a97eeb22d4af1105926bc96e2352746862b9aefb32eb0543c9ffc01c16b3cd36086c731135128a3151b1b28dbe2215128d8f6f24ec710d5910dfed7c748930aa156f888c13ac9e8f5d0e896d0a3b02972710a03b144883c8afd8a6932adea9bba718e898ddb40f38a358dda56b0142f6967d5a0e78987d58105e94f582b0ba7f55db158d968dbcf3954e9bf36bb7742734cb33371bc1f5e9df205a9738434dfb355961d300"], 0x13f4}, 0x1, 0x0, 0x0, 0x4004801}, 0x20004040) sendmsg$auto_NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001180)={&(0x7f0000001680)=ANY=[@ANYBLOB="1c000000197420dfcda09a1b3dcca3bb7fe8cb041387f66b068da112ce894edef23aaad366cdf4bd9755650b2123c8240f1c276de07ec3f6807bae3ff726daa52c59e0e8ab49b31d65f69267e19ae11e79a0cbd962020830ee3cd7dfb0de6d12f3a066bbce0f527a3864d2a880aebd4e2a0c5fe364d227c604b7e2edb042e225efb14ee7c1ad754e864d5a4a829ed075", @ANYRES16=0x0, @ANYBLOB="00012bbd7000fddbdf25120000000500250005000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4105) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x40000, 0x0) gettid() kexec_load$auto(0x5, 0x2, &(0x7f0000000040)={@kbuf=0x0, 0x2aa7, 0x6c0000c000, 0xc000}, 0x4) ppoll$auto(0x0, 0xf732, 0x0, &(0x7f0000000140)={0x9}, 0x8) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @loopback}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x6, 0x0, 0x9, 0x0, 0x0, 0x9}, 0x800009}, 0x3, 0x20000000) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) sendto$auto(0x3, 0x0, 0xe7, 0xfd, 0x0, 0x403) r1 = openat$auto_percpu_stats_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) lseek$auto(r1, 0x1, 0x1) setsockopt$auto(0x3, 0x4, 0x21, 0x0, 0x9) write$auto(0x3, 0x0, 0xfffffdef) recvfrom$auto(0x3, 0x0, 0x800000000e, 0xa00, 0x0, 0xfffffffffffffffd) capget$auto(0x0, 0xfffffffffffffffe) capset$auto(0x0, 0x0) ioperm$auto(0x800, 0x6, 0x43ce6806) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8002) r2 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) sendmsg$auto_ETHTOOL_MSG_RSS_GET(r2, 0x0, 0x8010) close_range$auto(0x2, 0x8, 0x0) futex$auto(0x0, 0x6, 0x9, 0x0, 0x0, 0x6) close_range$auto(0x2, 0x8000, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0xffffffff, 0xfffff7fffffffffd, 0x3, 0x5, 0x7181, 0x4, 0xc8c000, 0x7, 0x9, 0x6, 0x80003, 0x4, 0x1ffffffffffd, 0x8, 0x1006, 0x7, 0x9, 0x80, 0x8000000000000000, 0x0, 0xc, 0x2, 0x200, 0x4, 0x84}, 0x1fe, 0x5) socket(0x10, 0x80000, 0xc) openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, 0x0, 0x80301, 0x0) 6.545403885s ago: executing program 0 (id=1283): mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) read$auto_fake_panic_fops_(0xffffffffffffffff, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8ad00, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0xa, 0x5, 0x0) r1 = socket(0xa, 0x801, 0x84) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) msgctl$auto_IPC_INFO(0x100, 0x3, &(0x7f00000012c0)={{0x632, 0xffffffffffffffff, 0xee00, 0x1, 0x5, 0x1, 0x80}, 0x0, 0x0, 0x1b, 0x7, 0x5, 0x7, 0x1, 0xdd34, 0x7, 0x8, @raw=0xffff}) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) msgctl$auto_IPC_RMID(0xffff, 0x0, &(0x7f0000000280)={{0x4, r2, r3, 0xfffffffd, 0x9, 0xd, 0xb}, 0x0, &(0x7f0000000240)=0x5, 0x1, 0x1, 0x6e, 0xe811, 0x5, 0x4, 0x5, 0x10, @raw=0x5, @raw=0x7}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000040), r4) sendmsg$auto_IPVS_CMD_SET_SERVICE(r4, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={&(0x7f0000000580)=ANY=[@ANYBLOB=',\x00\x00', @ANYRES16=r5, @ANYBLOB="010028bd7000fcdbdf2502000000180001800800058004007d000c00018002"], 0x2c}, 0x1, 0x0, 0x0, 0x44050}, 0x4008000) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x54) get_robust_list$auto(0x0, 0x0, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) setsockopt$auto(r1, 0x1, 0x3f, 0x0, 0xb) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$auto_proc_timens_offsets_operations_base(0xffffffffffffff9c, 0x0, 0x8a082, 0x0) write$auto(r7, &(0x7f0000000100)='/dev/cec31\x00', 0x200) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000680), r6) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000006c0)={'batadv0\x00', 0x0}) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r6, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x5c, 0x0, 0x300, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_AUTH_DATA={0x36, 0x9c, "79543dbd7b06712e784c528e2ba48634cd6b170b7c9b286f2bfd8e325adbf115aafb2c850c21411700795a250baf19720688"}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x80}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x200408d0}, 0x8000) sendmsg$auto_ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="fc000000", @ANYRES16=0x0, @ANYBLOB="000825bd7000ffdbdf251500000008000600008000004c000180140002006d61637674617030000000000000000008000100", @ANYRES32=r8, @ANYBLOB="080003004b0900000800030001000000140002006272696467655f736c6176655f3000000800030009000000180001801400020076657468305f746f5f626f6e6400000058000180080003000100000008000100", @ANYRES32=r8, @ANYBLOB="08000304000800000800030000080000140002000000000000080003000500000008000100", @ANYRES32=r8, @ANYBLOB="0800030009000000040001802000018008000300010000001400020076657468315f6d616376746170000000"], 0xfc}, 0x1, 0x0, 0x0, 0x20000005}, 0x40) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0xffffffff, 0x0, 0x106, 0x0, 0x6c, 0x697c}, 0xed71390}, 0x9a6, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x1102, 0x0) ustat$auto(0x801, 0x0) 6.27091636s ago: executing program 1 (id=1284): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyc4\x00', 0x40000, 0x0) ioctl$auto_TIOCSWINSZ2(r0, 0x5414, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x9) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = socket(0x2, 0x6, 0x0) io_uring_setup$auto(0xa, 0x0) mbind$auto(0xffffffff, 0x10, 0x8, &(0x7f0000000000)=0x2, 0xf, 0xac) getsockopt$auto(r1, 0x10d, 0x2, 0x0, 0x0) socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x7, 0x0, 0x5, 0x3, 0x2000000000010006, 0x0, 0x7, 0x5, 0x2, 0x7, 0xaf, 0x9, 0x2, 0x3, 0x105, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x1fe, 0x81) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NL802154_CMD_SET_CCA_MODE(0xffffffffffffffff, &(0x7f0000001f40)={0x0, 0x0, &(0x7f0000001f00)={&(0x7f0000000180)=ANY=[@ANYBLOB='*', @ANYRES16, @ANYBLOB="010029bd"], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x400c890}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1300"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) write$auto_ocfs2_control_fops_stack_user(0xffffffffffffffff, &(0x7f0000003900)='\t', 0x1) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) unshare$auto(0x20000080) syz_clone3(&(0x7f0000000300)={0x28020000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0}, 0x58) 5.162075627s ago: executing program 1 (id=1285): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) r1 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x2001, 0x0) ioctl$auto(r1, 0x400454d0, r1) close_range$auto(r0, r1, 0x7) read$auto(r0, 0x0, 0x1f40) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) kill$auto(0x0, 0x11) sendmmsg$auto(r0, 0x0, 0xfffff848, 0xfff) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) 5.124453923s ago: executing program 0 (id=1286): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match\x00', 0x20080, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000280)=""/175, 0xaf) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) ustat$auto(0x801, 0x0) sysfs$auto(0x3, 0x23, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x2008000) mmap$auto(0x3, 0x2020009, 0x3, 0x8000000000ab2, 0xfffffffffffffffa, 0x8000) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) r3 = socket(0x10, 0x2, 0xc) sendmsg$auto_TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000003740)={&(0x7f0000000000)=ANY=[@ANYBLOB="b1000000", @ANYRES16, @ANYBLOB="01002dbd7000fddbdf25030000000c0001"], 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x40080) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r3, @ANYRES8=r1], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x4000050) write$auto(r2, &(0x7f0000000000)='-\x00', 0xfdef) 5.083914779s ago: executing program 2 (id=1287): mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) read$auto_fake_panic_fops_(0xffffffffffffffff, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8ad00, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0xa, 0x5, 0x0) r1 = socket(0xa, 0x801, 0x84) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) msgctl$auto_IPC_INFO(0x100, 0x3, &(0x7f00000012c0)={{0x632, 0xffffffffffffffff, 0xee00, 0x1, 0x5, 0x1, 0x80}, 0x0, 0x0, 0x1b, 0x7, 0x5, 0x7, 0x1, 0xdd34, 0x7, 0x8, @raw=0xffff}) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) msgctl$auto_IPC_RMID(0xffff, 0x0, &(0x7f0000000280)={{0x4, r2, r3, 0xfffffffd, 0x9, 0xd, 0xb}, 0x0, &(0x7f0000000240)=0x5, 0x1, 0x1, 0x6e, 0xe811, 0x5, 0x4, 0x5, 0x10, @raw=0x5, @raw=0x7}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000040), r4) sendmsg$auto_IPVS_CMD_SET_SERVICE(r4, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={&(0x7f0000000580)=ANY=[@ANYBLOB=',\x00\x00', @ANYRES16=r5, @ANYBLOB="010028bd7000fcdbdf2502000000180001800800058004007d000c00018002"], 0x2c}, 0x1, 0x0, 0x0, 0x44050}, 0x4008000) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x54) get_robust_list$auto(0x0, 0x0, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) setsockopt$auto(r1, 0x1, 0x3f, 0x0, 0xb) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$auto_proc_timens_offsets_operations_base(0xffffffffffffff9c, 0x0, 0x8a082, 0x0) write$auto(r7, &(0x7f0000000100)='/dev/cec31\x00', 0x200) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000680), r6) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000006c0)={'batadv0\x00', 0x0}) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r6, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x5c, 0x0, 0x300, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_AUTH_DATA={0x36, 0x9c, "79543dbd7b06712e784c528e2ba48634cd6b170b7c9b286f2bfd8e325adbf115aafb2c850c21411700795a250baf19720688"}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x80}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x200408d0}, 0x8000) sendmsg$auto_ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="fc000000", @ANYRES16=0x0, @ANYBLOB="000825bd7000ffdbdf251500000008000600008000004c000180140002006d61637674617030000000000000000008000100", @ANYRES32=r8, @ANYBLOB="080003004b0900000800030001000000140002006272696467655f736c6176655f3000000800030009000000180001801400020076657468305f746f5f626f6e6400000058000180080003000100000008000100", @ANYRES32=r8, @ANYBLOB="08000304000800000800030000080000140002000000000000080003000500000008000100", @ANYRES32=r8, @ANYBLOB="0800030009000000040001802000018008000300010000001400020076657468315f6d616376746170000000"], 0xfc}, 0x1, 0x0, 0x0, 0x20000005}, 0x40) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0xffffffff, 0x0, 0x106, 0x0, 0x6c, 0x697c}, 0xed71390}, 0x9a6, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x1102, 0x0) ustat$auto(0x801, 0x0) 5.037964101s ago: executing program 3 (id=1288): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) fadvise64$auto_POSIX_FADV_NOREUSE(r0, 0x8000000000000001, 0x3, 0x5) get_robust_list$auto(0x0, 0x0, 0x0) r1 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) sendmsg$auto_NL802154_CMD_GET_SEC_DEVKEY(r1, 0x0, 0x4040010) madvise$auto(0x0, 0xffffffffffff0001, 0x15) select$auto(0x804, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x700, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, 0x0, 0x20008810) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) mlock$auto(0x8001, 0xb) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) semctl$auto(0x1ff, 0x2, 0x13, 0x1) 4.523962928s ago: executing program 0 (id=1289): io_uring_setup$auto(0x6, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/ipv6_route\x00', 0x101000, 0x0) sendmsg$auto_NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0xc}, 0x0) ioctl$auto(r0, 0xffffffff, 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$auto_nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000425bd7000fbdbdf250200ecff0f000a002f64650100c1bce3606f31000c0006000900000000000000"], 0x30}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x7, 0xdf, 0x9b72, r3, 0x28000) io_uring_setup$auto(0x800, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000001840), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_SET_MAX_CSMA_BACKOFFS(0xffffffffffffffff, 0x0, 0x8844) pread64$auto(r1, 0x0, 0x8, 0xffff) 3.606654747s ago: executing program 1 (id=1290): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffff7fffff0005, 0x8) madvise$auto(0x0, 0x200007, 0x8) 3.170851126s ago: executing program 3 (id=1291): mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) read$auto_fake_panic_fops_(0xffffffffffffffff, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8ad00, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0xa, 0x5, 0x0) r1 = socket(0xa, 0x801, 0x84) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) msgctl$auto_IPC_INFO(0x100, 0x3, &(0x7f00000012c0)={{0x632, 0xffffffffffffffff, 0xee00, 0x1, 0x5, 0x1, 0x80}, 0x0, 0x0, 0x1b, 0x7, 0x5, 0x7, 0x1, 0xdd34, 0x7, 0x8, @raw=0xffff}) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) msgctl$auto_IPC_RMID(0xffff, 0x0, &(0x7f0000000280)={{0x4, r3, r4, 0xfffffffd, 0x9, 0xd, 0xb}, &(0x7f0000000200)=0x5, &(0x7f0000000240)=0x5, 0x1, 0x1, 0x6e, 0xe811, 0x5, 0x4, 0x5, 0x10, @raw=0x5, @raw=0x7}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000040), r5) sendmsg$auto_IPVS_CMD_SET_SERVICE(r5, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={&(0x7f0000000580)=ANY=[@ANYBLOB=',\x00\x00', @ANYRES16=r6, @ANYBLOB="010028bd7000fcdbdf2502000000180001800800058004007d000c00018002"], 0x2c}, 0x1, 0x0, 0x0, 0x44050}, 0x4008000) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x54) get_robust_list$auto(0x0, 0x0, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) setsockopt$auto(r1, 0x1, 0x3f, 0x0, 0xb) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$auto_proc_timens_offsets_operations_base(0xffffffffffffff9c, 0x0, 0x8a082, 0x0) write$auto(r8, &(0x7f0000000100)='/dev/cec31\x00', 0x200) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000680), r7) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000006c0)={'batadv0\x00'}) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r7, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x5c, 0x0, 0x300, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_AUTH_DATA={0x36, 0x9c, "79543dbd7b06712e784c528e2ba48634cd6b170b7c9b286f2bfd8e325adbf115aafb2c850c21411700795a250baf19720688"}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x80}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x200408d0}, 0x8000) sendmsg$auto_ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[], 0xfc}, 0x1, 0x0, 0x0, 0x20000005}, 0x40) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0xffffffff, 0x0, 0x106, 0x0, 0x6c, 0x697c}, 0xed71390}, 0x9a6, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x1102, 0x0) ustat$auto(0x801, 0x0) 3.169969145s ago: executing program 0 (id=1299): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x2200, 0x0) ioctl$auto_TCFLSH2(r0, 0x540b, 0xfffffffffffffffd) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x18, 0x801, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2711}, 0x51) socket(0xf, 0x3, 0x2) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) io_uring_setup$auto(0x2, 0x0) ioctl$auto_TIOCSETD2(0xffffffffffffffff, 0x5423, 0x0) ioctl$auto_USBDEVFS_CONTROL32(0xffffffffffffffff, 0xc0105500, &(0x7f00000001c0)={0x1, 0x7, 0x200, 0x4, 0x0, 0x9, 0x3}) io_uring_setup$auto(0x1, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS2\x00', 0x101f81, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) 2.675555149s ago: executing program 0 (id=1292): shmat$auto(0x0, &(0x7f0000000340)='\x04\x00\xe0+2bL.Af\x18\x17\xcd@\"\x00\x00\x00\x00\x00\x00\x00\x009\x12\x9e\x11*\x8f\x85;\x05&\xe6?\'P\xcd\x04\f\xc2\x830\xd4G>\x19j\x9c\xb7;\x92F\x01\xd4\x14', 0x5, 0x0) mount$auto(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='nfs4\x00', 0x200, &(0x7f00000001c0)) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) write$auto(0x3, 0x0, 0x7fffffff) write$auto(0x1, 0x0, 0x80000000) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x1082b953, 0x5) r3 = socket(0x2b, 0x1, 0x1) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) madvise$auto(0x0, 0x200007, 0x8) syz_genetlink_get_family_id$auto_nfc(&(0x7f00000000c0), r3) sendmsg$auto_NFC_CMD_STOP_POLL(r3, 0x0, 0x44084) mmap$auto(0x0, 0x2020009, 0x3, 0x400000eb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x10000000000048, 0x0) ioctl$auto_BLKTRACESETUP(r2, 0xc0481273, &(0x7f00000002c0)={"703fdcecd3fd3de939b86c358da618b24e2c95415dc5d33cc5220400", 0x87e6, 0x14, 0x376d, 0x0, 0x40000000000}) shmdt$auto(&(0x7f0000000000)=':-h!/-^@(\']@%]/\x00') 1.557156803s ago: executing program 2 (id=1293): mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) read$auto_fake_panic_fops_(0xffffffffffffffff, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8ad00, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0xa, 0x5, 0x0) r1 = socket(0xa, 0x801, 0x84) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) msgctl$auto_IPC_INFO(0x100, 0x3, &(0x7f00000012c0)={{0x632, 0xffffffffffffffff, 0xee00, 0x1, 0x5, 0x1, 0x80}, 0x0, 0x0, 0x1b, 0x7, 0x5, 0x7, 0x1, 0xdd34, 0x7, 0x8, @raw=0xffff}) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) msgctl$auto_IPC_RMID(0xffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000040), r2) sendmsg$auto_IPVS_CMD_SET_SERVICE(r2, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={&(0x7f0000000580)=ANY=[@ANYBLOB=',\x00\x00', @ANYRES16=r3, @ANYBLOB="010028bd7000fcdbdf2502000000180001800800058004007d000c00018002"], 0x2c}, 0x1, 0x0, 0x0, 0x44050}, 0x4008000) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x54) get_robust_list$auto(0x0, 0x0, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) setsockopt$auto(r1, 0x1, 0x3f, 0x0, 0xb) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$auto_proc_timens_offsets_operations_base(0xffffffffffffff9c, 0x0, 0x8a082, 0x0) write$auto(r5, &(0x7f0000000100)='/dev/cec31\x00', 0x200) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000680), r4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000006c0)={'batadv0\x00', 0x0}) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r4, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x5c, 0x0, 0x300, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_AUTH_DATA={0x36, 0x9c, "79543dbd7b06712e784c528e2ba48634cd6b170b7c9b286f2bfd8e325adbf115aafb2c850c21411700795a250baf19720688"}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x80}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x200408d0}, 0x8000) sendmsg$auto_ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="fc000000", @ANYRES16=0x0, @ANYBLOB="000825bd7000ffdbdf251500000008000600008000004c000180140002006d61637674617030000000000000000008000100", @ANYRES32=r6, @ANYBLOB="080003004b0900000800030001000000140002006272696467655f736c6176655f3000000800030009000000180001801400020076657468305f746f5f626f6e6400000058000180080003000100000008000100", @ANYRES32=r6, @ANYBLOB="08000304000800000800030000080000140002000000000000080003000500000008000100", @ANYRES32=r6, @ANYBLOB="0800030009000000040001802000018008000300010000001400020076657468315f6d616376746170000000"], 0xfc}, 0x1, 0x0, 0x0, 0x20000005}, 0x40) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0xffffffff, 0x0, 0x106, 0x0, 0x6c, 0x697c}, 0xed71390}, 0x9a6, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x1102, 0x0) ustat$auto(0x801, 0x0) 1.553907525s ago: executing program 1 (id=1302): r0 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000f40)={'batadv0\x00'}) keyctl$auto(0xc, 0x0, 0x0, 0x0, 0xa) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000080), r1) sendmsg$auto_NL802154_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000f80)={0x225c, r3, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_TX_POWER={0x8, 0xb, 0xfffffffd}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x53}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x5}, @NL802154_ATTR_WPAN_PHY_CAPS={0x222f, 0x18, 0x0, 0x1, [@generic="5e4cc54f977e56cfea3b297ae517857bb0ae70810703fc200e6107", @nested={0x50, 0x125, 0x0, 0x1, [@typed={0x8, 0x56, 0x0, 0x0, @fd=r2}, @generic="9dfdf17f5b9c89b068cf37caf58a9f9f9bb1b8b80a8d120cae12bc78ff1870bf06216bcc5beed6dd1ca7e13a8076e90c1a97a68f", @typed={0xc, 0x84, 0x0, 0x0, @str='batadv0\x00'}, @nested={0x4, 0x126}]}, @nested={0x78, 0xdc, 0x0, 0x1, [@generic="90de58e6f5598a08b2d748bd86538da0f0e28919fea94abfe81fe7c6c4c9cd2d89b5ade1e4e3f33d4c6a2fab78a156ce994980ac361399611d0642f7ef381b1720aa2041c4ec2b20bd7f472c078129b9dd5a5b7b49a5de1a9668ec3bfcb068f1039300c81b6f4ccaeccf2e53e65b37dc", @nested={0x4, 0x11c}]}, @nested={0xe9, 0x5d, 0x0, 0x1, [@typed={0x4, 0x83}, @generic="d31d96b7e6f1b5a86b989b750c8a13c2b733cf42a91b372927df0540fb75dec5447cda85630769bcaf9db1c20f4330663fc4d5a11ddc56c47ac5a27c9896a6ac86ec188f4fe616a692f399093b0b1d52199ab7f0433d9c9ccaac5659ea02fc3d0ed1e5bb67b947742f56239aef6ac15cd9f7f13365443fb60e8def5a6bcee599bc2ff0429ac67d0e95a6aa7b62c981c9d963a6b587dbbbce3c0ae0cc7e4438f59ed7fd77d3caa945c2c8af29c3afdcee2325c983675d79b5a341cfee17e97c7622c0e4440f6644e6ae906211f41d1dc27263eb7de589dfe04b29ade4c87cd7eada"]}, @generic="be4cda21c9d80ab5f3e4ac5cb70c5ff0ce50e39b38504cd2b2148c3b5ac18dd4d1cd86491cee4b213b5663df12926bd2d1c67c37fc40a11319680ca43a25f3b8b123e78ad2317e710ae0a3c89fd4fb85bf8c9ad9da3cf45bb6e1ef73462224e052e58927aa136b90efd0d1c722ba776f2488da6be21fffb3879ed979d39cca12720cff4a544a6a5d98c7be39b4f331aed113cef1d453a8744f6ee6a503efde445826cd9410c6372ad370994b9823d547f3f8a2c04222f19c0ca70b0298e5566e525dad7eb265bd3064cb3aa846fecb572eaab4316ffeed2fb8452c8fe52710ce0a93fc28c548a2f22f4e6a7d6b989d0735c938aa60bb3edc05e25a29b046b2b76896f80b91c8bbb924540a2d80998d6c9308cd8658dd726cd2fa26a44bf028771078712560247c6d90325bb943dbea47b12c280293c2cc66b7a4439edcc3fa5cd564c644536c8d6c00e9965f8a965dcfc7efb23cefcb4ee1752659f2f831e294aade5294480a5778437a33227d6cacc05dee5efa5b1e044d640d6689ad136f1fdabc2350776d32c26bba6d1b22efd3f43a52123f46c9282fa115a2439dbb5ded5e6fc4910018840eb4144487c2e046a3bf1dc94a2da66de3b0bf88299b7e3a7bd9e791abfc4e4044b6a65ffc45d682f239ffb40769b462fb3e36b0f60fff45408784cd4f21d9c04909af365ff52a67c7dc98835793942d3bae5e3fad183115ac9ddb73b30c2a3c08b669890fb18b0281f37376c489d500b157fb5281004b43d22f5bb7f74a08b9608ff8c3aa0ba96add1a5248603c4aa1f3905016a0c8a920d0f6428e39f6b1df8fd81b8fc08365a2dba8ff11ab0dcf44774781f18e9629911b1ca1117c15fa8142c6228211ff5722b0e58e7a8ae595dc098dd0b58ee30a407e8ee4377be8a7403fa4c7ec791b19e541e557f4209119804c2a775fa84116a7851722dce471c43a331044dd411899411d7af8489ecef5733af0a3888baae6c199884845735d99375db48287aae312ee5f03b45274cafb01c7e28f1f339810e9f4ff384a0852d312fbc3fd6f64ea40ae16545676a2a2ca4d0fb8ef553a4fd36ebfeeaa2c931dcabe00ab48aad7d0ed7809a43f9cb6d6fec649b0c16b22f508fa54dea1f2282a4605657c92a4987fcca2727de38d26f5383772a6bb87a9d21c777471177b0ea8de3cd041fbce813866b155992eeceff5358de57232453f06361c0b71a00aa273c98869cc52af722824962523ea286a598766533dedc6ce0227cf322956b3daaf61026c3be989f96acd52f2abb6e6cb3db40ef7e3e766c83c1576bba5ac9c478d1e868135c0d6e93f9fe66f75ca5eccb0c0a6b05a6937d573fa2decfbcc8c90a8256eb6b424c605f757a71e87e742a09261e79b6b1b0c34bd5332c91b2705cae2fcbe6c8250ab42236c042346117890d17b02b31065410d20472e0c8518e777bb27d90124fd77181b95762eddb7f45a3a8bae6fc0337145560b6951f036ea980416437cef10bdb1f877fb335492a95bdd8c42439b2d89b398c40c29f74b32af00b5824021dc1b7cd339e4530cf46e0ea2d51aea2f81a8e6b24e124f310de2f919323e444ffb42f6cb08b7107ee8659378737ae0651ed3afbd6cf6c580dbe1737213e8f54c0097d2776c04ea8571b7f024505493bd528951a38a9e48343af0dd7c1d44e71273a8e92edff01ebab758a916d296cd02274f6c12d0bb0210874674c631036cd2dd7b362d95ab137a75567225852efb876ab3a90f38d63503bf622a48d2a18b625795274ea39518200f4896e46249e8e3e1f9ed58cbf21c4523f5e9540cae13f8eda759a66264a805cdb7b56c2e61c9a5ac8821ffdc2eff76222b51f371e962f147de5558446a6d0643abb59405de260c0f4355c1e26cfa6c9e9afb2eef8805410b9173f446db607f6deed5794dc53b3076176a5042f9d2fd39888cd960d6c632d95979d42b58b68ecdc3b8f8df7bee05ba1d37fec55d96b270118fda7ed8f77209b7537b60de74a90e01d6acaa858eb1d4a969eeefe07501017f5fcf6021968e8bd3c2b854e038772129e5120a03b61a58b2ae204bea62bec45acb739f3c6320b2997890a8f5dfec39f19ffb2d85405998ab7d5dfcc8d46a2d5006d328f26ae410631d77622a81ece98aa0df57ca8573c820d13dc45f3ac5bc56d6b56ae37ea9bacb388c3e3a67e6a4f0a5aafabc097c30c31a54d44e6074915e60dadbe515ee6bb17f79a6fbb5e7b9c3bdb3da0c547efe7c9ca88a0d86950b0e8db152726076b85166c2c605b30be42e6c7631a3986a8218b2bb2253607967e5a9fc524fe938a78f32ffc770d689f193c21788cf97faa41faf843d7d49ed7966c8cf3b5c6afec26b16aff9f9b2295bccee1c1cc27424fcbd4f18888ad5bfdcbd028c2eeaa76bcd517da3d342ed696f0f2235e94b501736728611caa31146591a4217504e52b25c4e7eb7d75c694a2358d33fee7fa182f36157e4876e76baceac64b2e423d141f16a23e962e64e46211e745628bbb0bc6e6206a816ab5ebbddc607bd233eddf81bb24fb12ee219f21d666da94b38e6a5f826dd0948414aef2c18b7d7ad678fe6f766f0afffe7c8d6cb0484e609d76c80a115c1b84fdcfe7449e40c8f54666fac1325ca3f3da32e96dda1f2f0fa3b56426fa6a932b4e24bd601ce837925449c8611dbbf141fca582e301c52d85e1cf595c0c98e0f2ec6e7f8b443873400ebc1dfd8f977f4efaa838c982efbcead61687942182df81bf36550c457fbdea422037fb66fb196f3e80a43adb2374f51691b1d8337a1c09ca54026f2fbe9820bb07d2a70b047b1698132df0a121322933f540cd0944d43156e0eda5bb3335117e5f2ab3947ddb7c3fc1885bca4580e3873d5a5eb5b5912cad7e74fc680edd578be493b90301a5b884e227fe4c2d912c1da5835abcad39b9c90a1de4de8d90ce5ae58993f70b786fe272e84e1cc14e45cedc1289175c4ed78d451f626d1d7acd874bb7de4bf8c23e2d0c9e8ffeac36359dada38cce5638f9e7868eaedb4565dd479e4100da833e86c1bc8efc6a7787e362ec1cc492c309362803fea8c91f72dbe730b60464043350be3ada1bc72f661415569bf5b74a10102763f8e9a26e04e400ed820cba9daf3feceff4a7f30cd2c813d8c8598682ad3ea5462712857ae899f3aa1c2adb5376831722f32b9b4137251a2aa21492035842eb36eac45d2e24e7efd3d1678e643473dc7976aa64ad04f138b0aee698960654198bbf543be3187f9dfdea2f768fe2c55b741575fe8b5d720c9d680ae1642e4ff9a947c9a27da2a61138cb5832981aaf705dbc4372027c78c86304cfa96553ff575e2fc31457ff9082d2eb293b55f26d4c61a73149b28ff6889302adfeb67a2ce418ca6ae06a7e7a136d3f6eb1c969171b86b85505a5da296bb1fdd37ebb17b2ab70bf4087e7e26e6c514b9333adc307b2b560aee107701042bf4ad7508f892120a57f785c8024bc8b0017de526b4dfa4300c1d2f8d16db89965047c774db8fd54aa5001903aaf3711dc49e61577c4a9e4282928e7a2f0ca594d0628c3bc5652f186be47540e8145d1281821bc015242fb13f07db40a090b0e6777f2fa5df5e3aa3185bc1a1287472160bc05e1a1f534e4cdc69a77a0e82f014fd61da98299ad295de3353486ac1879ef34630f5c8ac6532799e8eae496d69b5205c49d16d971905df37786a713fad7f326a94d84e183b0dfa9ea18a54b76cddd3190dedc829febc15e1f30271a0beb2c4c15af946f0f1f1c17169881969c2fa6b7ec0beb733211297b86e2a674250ef545e4eef71afa2583becc01d62da14a7eda62ef7275404cd227ddcc6bd5075c0a8d86c022bda63dbf257e1492c5b25a2e9ce6248b553580d1bf9d286eaeb546ea75eeffa5d47ab9e3a6ca89281e02233e90dcb91ebdfcadd2d0f2385a8ed80b0f517a2cf70d048ddb928566ca22a69c7d2ddf7bcc2179a6f3fda2ebb8ee19e880742290a99de2d3aed988c8ecea9b2fe9ca32988ee09a8b0bd04c05603adbd92d7aa1711015a0d01c798e866bbbc6431c03c67667af65fd4debf7171fcc76ba7cc98438c18ab5fb06f868148ba85cbb86d9bf3f43d90b1f7023d5dd2114d964b80ca820b191de1401374c9a9da9169943273d79dde468a856e5c9843b27a7c4eafefa84269ae39fdd7ced896f2f3c9813b4ff5a32e662584546c3140166a084359815c8e1efc1a1f40361904c625d9a6ea87c3d4a4fa1cef82a15e8931ce92f898d4eaf9d9270bc3926c54302880a6734bde49a07587feb69242ea26b867a537ec1d47a7c1670a21e81b209b87ac18755d6b1f9a6282daa0d43ff158b76bda6a44b704ac9c6748a78d6f6745961878efd0ceb704996e28d23b079b36823fc7769dfdfaa6d38d4c2a434b7ff063a9428ef463e5dc77307378e53dd9d17a18cfe6b4dbfd7c8aaaa89edcb9ff1201adaee227fb3e23ea534e770c3127a9bd2c9bd679ccb613488cdc8d60a9b86b54026194ac5a63aba6ecb3bf7366bd346a61305dda63699f4944780324fc0ae1b11c309cabf8c016d982b419344f394ad59f72fbebd02744bb6a742023f6f685f78248dc5d666e24b71cb82f0034398aa584d79e6745810ac495ecdd61eb2a77f2f3c8fe775993a22cfb3aa37c0196bb72796ffbd299cdbb5018e03aa253604d01cd0e93dd1b146ffbc5342c9fc4e2ddebfc6dc04eca6d4b75c55ecdf7b6891db4dd0ec339a6ffbafff57463a060f65230eb861f4ec0c8144b440c623ee3991d16a472b184688fe6859e6b793a67d128dde45a38a5963356adc00e2da13ca97bfbe3e0a1c4ac98bf932519e8790a758ef3a036b6255006d701178d3c1098bff5536f2b3879a255a51df03d99922100bb191295393ec46c6505b3ed7a585bcd78f0ce93f19a42c9e396a81957c2966e07a81dc4fd35ef84d9c23933249fb597f3cfa158e096dec565d46c61765d80c808d28ecdc8a7df728742995dcba4cadd131c0e180a113fe25f504e1b5a3af92fdcf26f4277ee209bfc5065f81171549788af3cfaab4ac83dfc22769c35a6d39376b80a1068143aa9336b15e57563b8c8a803c4a35748129e124692b5e06e553fbaeb47d6a798239fd9e10bb807cff5901fd3d75ed2fe97613e9c4afa9fa529095285bcdb5fcecc0f504d90bf53955a0259d5f659b8a3c53195d98861e26c929560e7d64e2458c8583527dccca758e14f0ba76b8f0685dc549f462aeac843accf42351be6c93574482832691b80e5121163655ca0899c24a1e396782cd3b8312d4791c0b548cd97be548d3e47f510c2a86fb45700ebf973126f2c10b03f55c65f54206b77d1ad4df10df2b0fac22016eb1d0a34227a220a8b1974f559d03262fe48754c6cf36e7bdf2ca3c952405744dae1f9230ced70af37757f057e2d60aa9f6d282237e57c720cf8679696c02b9d598bf900e66dcf825e61502445e5aa9d426d2cdb630a9dc91c62a8336f16cc98cd32aeb4464d002bc5ccd41bae340965b0039943d2316ccc53b2567c849df306760b1f944fb97be33b0b1682bd5e187737ee5542b7a7821111a65a38555999f5af493ef59a87ca5882582a9c3f6d074e3380f62e8bddc74ef1a0e4528d29abddc9e6e6a8cc6a31c45acec69de355e8b73aef47bf944620d07b4ea4a4a5cd0f61ad282b716179f46557527aa727c1ff86519b0feb0d253cff4b1487b94dc1d815bcb3c44ba3f17302f20efe2f4a8ce320d1052fa06d603f8f7091cc6170b12cffdaef17093e0635385e75d4bc2015d6", @generic, @nested={0x1051, 0x93, 0x0, 0x1, [@generic="1ee2f89e6e0e8003cec441d7e165c90df440f3a62c19c7c88d4d420aa1fbadefeaaf87b15e7c45e575", @nested={0x4, 0xde}, @typed={0x14, 0x4f, 0x0, 0x0, @ipv6=@local}, @typed={0xc, 0x14f, 0x0, 0x0, @u64=0x6}, @generic="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"]}, @typed={0x8, 0x149, 0x0, 0x0, @ipv4=@private=0xa010100}]}]}, 0x225c}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000024) socketpair$auto(0x200, 0x6, 0x8, &(0x7f0000000180)=0x8) sendmsg$auto_BATADV_CMD_SET_MESH(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="fcdbdf250f000000050033008200000008000b000c000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1.429535397s ago: executing program 0 (id=1294): mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) read$auto_fake_panic_fops_(0xffffffffffffffff, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8ad00, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0xa, 0x5, 0x0) r1 = socket(0xa, 0x801, 0x84) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) msgctl$auto_IPC_INFO(0x100, 0x3, &(0x7f00000012c0)={{0x632, 0xffffffffffffffff, 0xee00, 0x1, 0x5, 0x1, 0x80}, 0x0, 0x0, 0x1b, 0x7, 0x5, 0x7, 0x1, 0xdd34, 0x7, 0x8, @raw=0xffff}) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) msgctl$auto_IPC_RMID(0xffff, 0x0, &(0x7f0000000280)={{0x4, r2, r3, 0xfffffffd, 0x9, 0xd, 0xb}, &(0x7f0000000200)=0x5, 0x0, 0x1, 0x1, 0x6e, 0xe811, 0x5, 0x4, 0x5, 0x10, @raw=0x5, @raw=0x7}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000040), r4) sendmsg$auto_IPVS_CMD_SET_SERVICE(r4, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={&(0x7f0000000580)=ANY=[@ANYBLOB=',\x00\x00', @ANYRES16=r5, @ANYBLOB="010028bd7000fcdbdf2502000000180001800800058004007d000c00018002"], 0x2c}, 0x1, 0x0, 0x0, 0x44050}, 0x4008000) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x54) get_robust_list$auto(0x0, 0x0, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) setsockopt$auto(r1, 0x1, 0x3f, 0x0, 0xb) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$auto_proc_timens_offsets_operations_base(0xffffffffffffff9c, 0x0, 0x8a082, 0x0) write$auto(r7, &(0x7f0000000100)='/dev/cec31\x00', 0x200) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000680), r6) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000006c0)={'batadv0\x00', 0x0}) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r6, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x5c, 0x0, 0x300, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_AUTH_DATA={0x36, 0x9c, "79543dbd7b06712e784c528e2ba48634cd6b170b7c9b286f2bfd8e325adbf115aafb2c850c21411700795a250baf19720688"}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x80}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x200408d0}, 0x8000) sendmsg$auto_ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="fc000000", @ANYRES16=0x0, @ANYBLOB="000825bd7000ffdbdf251500000008000600008000004c000180140002006d61637674617030000000000000000008000100", @ANYRES32=r8, @ANYBLOB="080003004b0900000800030001000000140002006272696467655f736c6176655f3000000800030009000000180001801400020076657468305f746f5f626f6e6400000058000180080003000100000008000100", @ANYRES32=r8, @ANYBLOB="08000304000800000800030000080000140002000000000000080003000500000008000100", @ANYRES32=r8, @ANYBLOB="0800030009000000040001802000018008000300010000001400020076657468315f6d616376746170000000"], 0xfc}, 0x1, 0x0, 0x0, 0x20000005}, 0x40) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0xffffffff, 0x0, 0x106, 0x0, 0x6c, 0x697c}, 0xed71390}, 0x9a6, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x1102, 0x0) ustat$auto(0x801, 0x0) 1.193780611s ago: executing program 1 (id=1295): io_uring_setup$auto(0x6, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/ipv6_route\x00', 0x101000, 0x0) sendmsg$auto_NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0xc}, 0x0) ioctl$auto(r0, 0xffffffff, 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$auto_nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000425bd7000fbdbdf250200ecff0f000a002f64650100c1bce3606f31000c0006000900000000000000"], 0x30}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x7, 0xdf, 0x9b72, r3, 0x28000) r4 = io_uring_setup$auto(0x800, 0x0) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) ioctl$auto(r5, 0x1, r4) r6 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r6, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000001840), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_SET_MAX_CSMA_BACKOFFS(0xffffffffffffffff, 0x0, 0x8844) pread64$auto(r1, 0x0, 0x8, 0xffff) 185.905209ms ago: executing program 3 (id=1296): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) close_range$auto(0x0, 0xfffffffffffff001, 0x2) socket(0x18, 0x4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) memfd_create$auto(&(0x7f0000000000)='\xc4--:\xdd:,./-${\x00', 0x4) memfd_secret$auto(0x0) ftruncate$auto(0x3, 0x700) finit_module$auto(0x3, 0xfffffffffffffffe, 0x400000000004) unshare$auto(0x3) io_uring_setup$auto(0x40000b, 0x0) ioctl$auto(0x4000000000000c8, 0x400454d9, 0x3) 66.854229ms ago: executing program 2 (id=1297): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match\x00', 0x20080, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000280)=""/175, 0xaf) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) ustat$auto(0x801, 0x0) sysfs$auto(0x3, 0x23, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x2008000) mmap$auto(0x3, 0x2020009, 0x3, 0x8000000000ab2, 0xfffffffffffffffa, 0x8000) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) r3 = socket(0x10, 0x2, 0xc) sendmsg$auto_TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000003740)={&(0x7f0000000000)=ANY=[@ANYBLOB="b1000000", @ANYRES16, @ANYBLOB="01002dbd7000fddbdf25030000000c0001"], 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x40080) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r3, @ANYRES8=r1], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x4000050) write$auto(r2, &(0x7f0000000000)='-\x00', 0xfdef) 0s ago: executing program 1 (id=1298): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) r1 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x2001, 0x0) ioctl$auto(r1, 0x400454d0, r1) close_range$auto(r0, r1, 0x7) read$auto(r0, 0x0, 0x1f40) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) kill$auto(0x0, 0x11) sendmmsg$auto(r0, 0x0, 0xfffff848, 0xfff) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) kernel console output (not intermixed with test programs): 6110][ T55] Bluetooth: hci2: command 0x0406 tx timeout [ 227.163844][ T5849] Bluetooth: hci0: command 0x0406 tx timeout [ 227.170065][ T55] Bluetooth: hci1: command 0x0406 tx timeout [ 227.839160][ T7460] netlink: 'syz.0.447': attribute type 11 has an invalid length. [ 227.849745][ T7460] netlink: 'syz.0.447': attribute type 11 has an invalid length. [ 227.857526][ T7460] netlink: 1280 bytes leftover after parsing attributes in process `syz.0.447'. [ 251.395334][ T7659] netlink: 'syz.0.503': attribute type 11 has an invalid length. [ 251.419685][ T7659] netlink: 'syz.0.503': attribute type 11 has an invalid length. [ 251.433691][ T7659] netlink: 1280 bytes leftover after parsing attributes in process `syz.0.503'. [ 255.581842][ T7690] netlink: 'syz.3.511': attribute type 11 has an invalid length. [ 255.629327][ T7690] netlink: 'syz.3.511': attribute type 11 has an invalid length. [ 255.667692][ T7690] netlink: 1280 bytes leftover after parsing attributes in process `syz.3.511'. [ 255.995221][ T7701] netlink: 'syz.2.505': attribute type 11 has an invalid length. [ 256.018268][ T7701] netlink: 'syz.2.505': attribute type 11 has an invalid length. [ 256.028972][ T7701] netlink: 1280 bytes leftover after parsing attributes in process `syz.2.505'. [ 260.915419][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.933394][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 262.999316][ T7760] netlink: 'syz.1.516': attribute type 11 has an invalid length. [ 263.007313][ T7760] netlink: 'syz.1.516': attribute type 11 has an invalid length. [ 263.018455][ T7760] netlink: 1280 bytes leftover after parsing attributes in process `syz.1.516'. [ 267.417288][ T7793] netlink: 'syz.1.527': attribute type 11 has an invalid length. [ 267.438202][ T7793] netlink: 'syz.1.527': attribute type 11 has an invalid length. [ 267.456761][ T7793] netlink: 1280 bytes leftover after parsing attributes in process `syz.1.527'. [ 273.443555][ T7847] netlink: 'syz.3.539': attribute type 11 has an invalid length. [ 273.499673][ T7847] netlink: 'syz.3.539': attribute type 11 has an invalid length. [ 273.551923][ T7847] netlink: 1280 bytes leftover after parsing attributes in process `syz.3.539'. [ 279.527329][ T7882] netlink: 'syz.3.549': attribute type 11 has an invalid length. [ 279.539121][ T7882] netlink: 'syz.3.549': attribute type 11 has an invalid length. [ 279.550299][ T7882] netlink: 1280 bytes leftover after parsing attributes in process `syz.3.549'. [ 286.189487][ T7933] netlink: 'syz.2.559': attribute type 11 has an invalid length. [ 286.223237][ T7933] netlink: 'syz.2.559': attribute type 11 has an invalid length. [ 286.263806][ T7933] netlink: 1280 bytes leftover after parsing attributes in process `syz.2.559'. [ 292.226440][ T7989] netlink: 'syz.2.572': attribute type 11 has an invalid length. [ 292.264630][ T7989] netlink: 'syz.2.572': attribute type 11 has an invalid length. [ 292.312188][ T7989] netlink: 1280 bytes leftover after parsing attributes in process `syz.2.572'. [ 293.919215][ T8002] netlink: 'syz.0.575': attribute type 11 has an invalid length. [ 293.919259][ T8002] netlink: 'syz.0.575': attribute type 11 has an invalid length. [ 293.919276][ T8002] netlink: 1280 bytes leftover after parsing attributes in process `syz.0.575'. [ 294.916253][ T8008] netlink: 'syz.1.578': attribute type 11 has an invalid length. [ 294.941663][ T8008] netlink: 'syz.1.578': attribute type 11 has an invalid length. [ 294.969639][ T8008] netlink: 1280 bytes leftover after parsing attributes in process `syz.1.578'. [ 295.981175][ T8031] netlink: 'syz.0.582': attribute type 11 has an invalid length. [ 296.012575][ T8031] netlink: 'syz.0.582': attribute type 11 has an invalid length. [ 296.025308][ T8031] netlink: 1280 bytes leftover after parsing attributes in process `syz.0.582'. [ 298.463876][ T8058] netlink: 'syz.0.589': attribute type 11 has an invalid length. [ 298.473646][ T8058] netlink: 'syz.0.589': attribute type 11 has an invalid length. [ 298.481518][ T8058] netlink: 1280 bytes leftover after parsing attributes in process `syz.0.589'. [ 299.199772][ T8064] netlink: 'syz.0.599': attribute type 11 has an invalid length. [ 299.207754][ T8064] netlink: 'syz.0.599': attribute type 11 has an invalid length. [ 299.249839][ T8064] netlink: 1280 bytes leftover after parsing attributes in process `syz.0.599'. [ 300.629605][ T8079] netlink: 'syz.0.594': attribute type 11 has an invalid length. [ 300.637502][ T8079] netlink: 'syz.0.594': attribute type 11 has an invalid length. [ 300.675900][ T8079] netlink: 1280 bytes leftover after parsing attributes in process `syz.0.594'. [ 301.115904][ T8088] netlink: 'syz.2.601': attribute type 11 has an invalid length. [ 301.115936][ T8088] netlink: 'syz.2.601': attribute type 11 has an invalid length. [ 301.115957][ T8088] netlink: 1280 bytes leftover after parsing attributes in process `syz.2.601'. [ 303.115234][ T8122] netlink: 'syz.1.610': attribute type 11 has an invalid length. [ 303.115267][ T8122] netlink: 'syz.1.610': attribute type 11 has an invalid length. [ 303.115287][ T8122] netlink: 1280 bytes leftover after parsing attributes in process `syz.1.610'. [ 303.517961][ T8128] netlink: 'syz.2.612': attribute type 11 has an invalid length. [ 303.538833][ T8128] netlink: 'syz.2.612': attribute type 11 has an invalid length. [ 303.555114][ T8128] netlink: 1280 bytes leftover after parsing attributes in process `syz.2.612'. [ 305.061363][ T8158] netlink: 'syz.2.622': attribute type 11 has an invalid length. [ 305.069171][ T8158] netlink: 'syz.2.622': attribute type 11 has an invalid length. [ 305.119878][ T8158] netlink: 1280 bytes leftover after parsing attributes in process `syz.2.622'. [ 305.708425][ T8165] netlink: 'syz.0.625': attribute type 11 has an invalid length. [ 305.743124][ T8165] netlink: 'syz.0.625': attribute type 11 has an invalid length. [ 305.753239][ T8165] netlink: 1280 bytes leftover after parsing attributes in process `syz.0.625'. [ 305.973284][ T8171] netlink: 'syz.3.628': attribute type 11 has an invalid length. [ 305.989860][ T8171] netlink: 'syz.3.628': attribute type 11 has an invalid length. [ 305.989893][ T8171] netlink: 1280 bytes leftover after parsing attributes in process `syz.3.628'. [ 307.422736][ T8196] netlink: 'syz.1.634': attribute type 11 has an invalid length. [ 307.505144][ T8196] netlink: 'syz.1.634': attribute type 11 has an invalid length. [ 307.518561][ T8196] netlink: 1280 bytes leftover after parsing attributes in process `syz.1.634'. [ 316.798310][ T8288] netlink: 'syz.1.660': attribute type 11 has an invalid length. [ 316.832663][ T8288] netlink: 'syz.1.660': attribute type 11 has an invalid length. [ 316.841897][ T8288] netlink: 1280 bytes leftover after parsing attributes in process `syz.1.660'. [ 321.547069][ T8340] netlink: 'syz.0.671': attribute type 11 has an invalid length. [ 321.605513][ T8340] netlink: 'syz.0.671': attribute type 11 has an invalid length. [ 321.617282][ T8340] netlink: 1280 bytes leftover after parsing attributes in process `syz.0.671'. [ 322.354645][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.369650][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 324.113027][ T8362] netlink: 'syz.3.678': attribute type 11 has an invalid length. [ 324.160637][ T8362] netlink: 'syz.3.678': attribute type 11 has an invalid length. [ 324.201782][ T8362] netlink: 1280 bytes leftover after parsing attributes in process `syz.3.678'. [ 324.712261][ T8369] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 324.759173][ T8369] FAULT_INJECTION: forcing a failure. [ 324.759173][ T8369] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 324.793288][ T8369] CPU: 0 UID: 0 PID: 8369 Comm: syz.1.682 Not tainted 6.15.0-rc1-syzkaller-00325-g7cdabafc0012 #0 PREEMPT(full) [ 324.793331][ T8369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 324.793354][ T8369] Call Trace: [ 324.793364][ T8369] [ 324.793380][ T8369] dump_stack_lvl+0x16c/0x1f0 [ 324.793433][ T8369] should_fail_ex+0x512/0x640 [ 324.793475][ T8369] _copy_from_user+0x2e/0xd0 [ 324.793517][ T8369] kvm_vm_ioctl+0x13b5/0x3d40 [ 324.793574][ T8369] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 324.793636][ T8369] ? kasan_quarantine_put+0x10a/0x240 [ 324.793682][ T8369] ? lockdep_hardirqs_on+0x7c/0x110 [ 324.793730][ T8369] ? find_held_lock+0x2b/0x80 [ 324.793770][ T8369] ? tomoyo_path_number_perm+0x295/0x580 [ 324.793823][ T8369] ? tomoyo_path_number_perm+0x18d/0x580 [ 324.793891][ T8369] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 324.793934][ T8369] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 324.793980][ T8369] ? do_vfs_ioctl+0x512/0x1990 [ 324.794018][ T8369] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 324.794093][ T8369] ? find_held_lock+0x2b/0x80 [ 324.794132][ T8369] ? hook_file_ioctl_common+0x145/0x410 [ 324.794176][ T8369] ? __fget_files+0x20e/0x3c0 [ 324.794228][ T8369] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 324.794281][ T8369] __x64_sys_ioctl+0x190/0x200 [ 324.794384][ T8369] do_syscall_64+0xcd/0x260 [ 324.794435][ T8369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.794468][ T8369] RIP: 0033:0x7fa06af8d169 [ 324.794494][ T8369] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 324.794524][ T8369] RSP: 002b:00007fa06be1d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 324.794554][ T8369] RAX: ffffffffffffffda RBX: 00007fa06b1a5fa0 RCX: 00007fa06af8d169 [ 324.794575][ T8369] RDX: 0000000000000038 RSI: 000000004020ae46 RDI: 0000000000000003 [ 324.794594][ T8369] RBP: 00007fa06be1d090 R08: 0000000000000000 R09: 0000000000000000 [ 324.794612][ T8369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 324.794630][ T8369] R13: 0000000000000000 R14: 00007fa06b1a5fa0 R15: 00007ffc6374dd78 [ 324.794670][ T8369] [ 325.766604][ T8377] netlink: 'syz.0.684': attribute type 11 has an invalid length. [ 325.774707][ T8377] netlink: 'syz.0.684': attribute type 11 has an invalid length. [ 325.790526][ T8377] netlink: 1280 bytes leftover after parsing attributes in process `syz.0.684'. [ 326.060545][ T8382] netlink: 'syz.2.686': attribute type 11 has an invalid length. [ 326.082245][ T8382] netlink: 'syz.2.686': attribute type 11 has an invalid length. [ 326.091323][ T8382] netlink: 1280 bytes leftover after parsing attributes in process `syz.2.686'. [ 327.984964][ T8404] netlink: 'syz.1.690': attribute type 11 has an invalid length. [ 328.006696][ T8404] netlink: 'syz.1.690': attribute type 11 has an invalid length. [ 328.026715][ T8404] netlink: 1280 bytes leftover after parsing attributes in process `syz.1.690'. [ 331.128861][ T8432] netlink: 'syz.0.707': attribute type 11 has an invalid length. [ 331.147782][ T8432] netlink: 'syz.0.707': attribute type 11 has an invalid length. [ 331.157607][ T8432] netlink: 1280 bytes leftover after parsing attributes in process `syz.0.707'. [ 331.189888][ T8435] netlink: 'syz.2.697': attribute type 11 has an invalid length. [ 331.220624][ T8435] netlink: 'syz.2.697': attribute type 11 has an invalid length. [ 331.228425][ T8435] netlink: 1280 bytes leftover after parsing attributes in process `syz.2.697'. [ 331.676878][ T8441] netlink: 'syz.2.701': attribute type 11 has an invalid length. [ 331.688898][ T8441] netlink: 'syz.2.701': attribute type 11 has an invalid length. [ 331.696988][ T8441] netlink: 1280 bytes leftover after parsing attributes in process `syz.2.701'. [ 331.778190][ T8442] Invalid ELF header magic: != ELF [ 332.146957][ T8448] netlink: 'syz.2.702': attribute type 11 has an invalid length. [ 332.169110][ T8448] netlink: 'syz.2.702': attribute type 11 has an invalid length. [ 332.177861][ T8448] netlink: 1280 bytes leftover after parsing attributes in process `syz.2.702'. [ 332.795559][ T8456] sysfs_service_op_show: Client not running :-5: [ 332.811809][ T8456] sysfs_service_op_show: Client not running :-5: [ 333.622906][ T8468] netlink: 'syz.0.710': attribute type 11 has an invalid length. [ 333.649638][ T8468] netlink: 'syz.0.710': attribute type 11 has an invalid length. [ 333.688271][ T8468] netlink: 1280 bytes leftover after parsing attributes in process `syz.0.710'. [ 333.746702][ T8472] netlink: 1280 bytes leftover after parsing attributes in process `syz.1.712'. [ 334.291964][ T8486] FAULT_INJECTION: forcing a failure. [ 334.291964][ T8486] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 334.358340][ T8486] CPU: 1 UID: 0 PID: 8486 Comm: syz.1.714 Not tainted 6.15.0-rc1-syzkaller-00325-g7cdabafc0012 #0 PREEMPT(full) [ 334.358384][ T8486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 334.358402][ T8486] Call Trace: [ 334.358412][ T8486] [ 334.358423][ T8486] dump_stack_lvl+0x16c/0x1f0 [ 334.358475][ T8486] should_fail_ex+0x512/0x640 [ 334.358517][ T8486] _copy_from_user+0x2e/0xd0 [ 334.358568][ T8486] copy_msghdr_from_user+0x98/0x160 [ 334.358611][ T8486] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 334.358660][ T8486] ? kfree+0x252/0x4d0 [ 334.358699][ T8486] ? __lock_acquire+0x5ca/0x1ba0 [ 334.358758][ T8486] ___sys_recvmsg+0xdb/0x1a0 [ 334.358800][ T8486] ? __pfx____sys_recvmsg+0x10/0x10 [ 334.358863][ T8486] ? __pfx___might_resched+0x10/0x10 [ 334.358918][ T8486] do_recvmmsg+0x2fe/0x740 [ 334.358965][ T8486] ? __pfx_do_recvmmsg+0x10/0x10 [ 334.359016][ T8486] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 334.359078][ T8486] ? __fget_files+0x20e/0x3c0 [ 334.359133][ T8486] __x64_sys_recvmmsg+0x22a/0x280 [ 334.359180][ T8486] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 334.359221][ T8486] ? rcu_is_watching+0x12/0xc0 [ 334.359271][ T8486] do_syscall_64+0xcd/0x260 [ 334.359322][ T8486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.359353][ T8486] RIP: 0033:0x7fa06af8d169 [ 334.359377][ T8486] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 334.359406][ T8486] RSP: 002b:00007fa06bdfc038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 334.359434][ T8486] RAX: ffffffffffffffda RBX: 00007fa06b1a6080 RCX: 00007fa06af8d169 [ 334.359454][ T8486] RDX: 0000000000010000 RSI: 0000000000000000 RDI: 0000000000000003 [ 334.359472][ T8486] RBP: 00007fa06bdfc090 R08: 0000000000000000 R09: 0000000000000000 [ 334.359493][ T8486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 334.359510][ T8486] R13: 0000000000000000 R14: 00007fa06b1a6080 R15: 00007ffc6374dd78 [ 334.359553][ T8486] [ 335.874175][ T8504] process 'syz.3.719' launched './file0' with NULL argv: empty string added [ 336.651152][ T8513] nla_validate_range_unsigned: 2 callbacks suppressed [ 336.651180][ T8513] netlink: 'syz.1.722': attribute type 11 has an invalid length. [ 336.775282][ T8513] netlink: 'syz.1.722': attribute type 11 has an invalid length. [ 336.849671][ T8513] netlink: 1280 bytes leftover after parsing attributes in process `syz.1.722'. [ 337.016397][ T8518] netlink: 'syz.3.723': attribute type 11 has an invalid length. [ 337.056578][ T8518] netlink: 'syz.3.723': attribute type 11 has an invalid length. [ 337.094590][ T8518] netlink: 1280 bytes leftover after parsing attributes in process `syz.3.723'. [ 339.607077][ T8550] netlink: 'syz.1.733': attribute type 11 has an invalid length. [ 339.653409][ T8550] netlink: 'syz.1.733': attribute type 11 has an invalid length. [ 339.691657][ T8550] netlink: 1280 bytes leftover after parsing attributes in process `syz.1.733'. [ 340.261779][ T8558] netlink: 'syz.1.735': attribute type 11 has an invalid length. [ 340.285957][ T8558] netlink: 'syz.1.735': attribute type 11 has an invalid length. [ 340.325876][ T8558] netlink: 1280 bytes leftover after parsing attributes in process `syz.1.735'. [ 341.239042][ T8572] FAULT_INJECTION: forcing a failure. [ 341.239042][ T8572] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 341.252491][ T8572] CPU: 1 UID: 0 PID: 8572 Comm: syz.3.740 Not tainted 6.15.0-rc1-syzkaller-00325-g7cdabafc0012 #0 PREEMPT(full) [ 341.252531][ T8572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 341.252548][ T8572] Call Trace: [ 341.252558][ T8572] [ 341.252569][ T8572] dump_stack_lvl+0x16c/0x1f0 [ 341.252620][ T8572] should_fail_ex+0x512/0x640 [ 341.252663][ T8572] _copy_to_user+0x32/0xd0 [ 341.252706][ T8572] simple_read_from_buffer+0xcb/0x170 [ 341.252754][ T8572] proc_fail_nth_read+0x197/0x270 [ 341.252799][ T8572] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 341.252846][ T8572] ? rw_verify_area+0xcf/0x680 [ 341.252884][ T8572] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 341.252930][ T8572] vfs_read+0x1de/0xc70 [ 341.252979][ T8572] ? __pfx___mutex_lock+0x10/0x10 [ 341.253026][ T8572] ? __pfx_vfs_read+0x10/0x10 [ 341.253089][ T8572] ? __fget_files+0x20e/0x3c0 [ 341.253147][ T8572] ksys_read+0x12a/0x240 [ 341.253190][ T8572] ? __pfx_ksys_read+0x10/0x10 [ 341.253230][ T8572] ? rcu_is_watching+0x12/0xc0 [ 341.253283][ T8572] do_syscall_64+0xcd/0x260 [ 341.253334][ T8572] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.253366][ T8572] RIP: 0033:0x7f085c38bb7c [ 341.253390][ T8572] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 341.253420][ T8572] RSP: 002b:00007f085d2ab030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 341.253448][ T8572] RAX: ffffffffffffffda RBX: 00007f085c5a5fa0 RCX: 00007f085c38bb7c [ 341.253468][ T8572] RDX: 000000000000000f RSI: 00007f085d2ab0a0 RDI: 0000000000000004 [ 341.253487][ T8572] RBP: 00007f085d2ab090 R08: 0000000000000000 R09: 0000000000000000 [ 341.253504][ T8572] R10: 0000000000000038 R11: 0000000000000246 R12: 0000000000000001 [ 341.253522][ T8572] R13: 0000000000000000 R14: 00007f085c5a5fa0 R15: 00007ffc12bc6a88 [ 341.253562][ T8572] [ 342.363449][ T30] audit: type=1800 audit(1744529597.592:2): pid=8586 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.742" name="dummy_udc" dev="gadgetfs" ino=7181 res=0 errno=0 [ 342.438272][ T8588] netlink: 'syz.3.743': attribute type 11 has an invalid length. [ 342.463644][ T8588] netlink: 'syz.3.743': attribute type 11 has an invalid length. [ 342.483614][ T8588] netlink: 1280 bytes leftover after parsing attributes in process `syz.3.743'. [ 344.254977][ T8609] netlink: 'syz.0.747': attribute type 11 has an invalid length. [ 344.287624][ T8609] netlink: 'syz.0.747': attribute type 11 has an invalid length. [ 344.338959][ T8609] netlink: 1280 bytes leftover after parsing attributes in process `syz.0.747'. [ 345.538889][ T8625] sysfs_service_op_show: Client not running :-5: [ 345.998901][ T8635] netlink: 'syz.0.754': attribute type 11 has an invalid length. [ 346.026060][ T8635] netlink: 'syz.0.754': attribute type 11 has an invalid length. [ 346.045909][ T8635] netlink: 1280 bytes leftover after parsing attributes in process `syz.0.754'. [ 346.694700][ T8646] netlink: 'syz.0.756': attribute type 11 has an invalid length. [ 346.719641][ T8646] netlink: 'syz.0.756': attribute type 11 has an invalid length. [ 346.727443][ T8646] netlink: 1280 bytes leftover after parsing attributes in process `syz.0.756'. [ 347.544501][ T8662] sysfs_service_op_show: Client not running :-5: [ 347.904407][ T8664] ptrace attach of "./syz-executor exec"[5846] was attempted by "./syz-executor exec"[8664] [ 348.765626][ T8676] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 348.783708][ T8676] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 348.820701][ T8676] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 348.848811][ T8676] page_type: f5(slab) [ 348.855898][ T8676] raw: 00fff00000000040 ffff888140408640 dead000000000122 0000000000000000 [ 348.876259][ T8676] raw: 0000000000000000 0000000000070007 00000000f5000000 0000000000000000 [ 348.897777][ T8676] head: 00fff00000000040 ffff888140408640 dead000000000122 0000000000000000 [ 348.937448][ T8676] head: 0000000000000000 0000000000070007 00000000f5000000 0000000000000000 [ 348.978352][ T8676] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 349.019642][ T8676] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 349.073387][ T8676] page dumped because: unmovable page [ 349.095086][ T8676] page_owner tracks the page as allocated [ 349.115200][ T8676] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5211, tgid 5211 (udevd), ts 347733959449, free_ts 347722499915 [ 349.170409][ T8680] netlink: 'syz.3.765': attribute type 11 has an invalid length. [ 349.178221][ T8680] netlink: 'syz.3.765': attribute type 11 has an invalid length. [ 349.180385][ T8676] post_alloc_hook+0x181/0x1b0 [ 349.215404][ T8676] get_page_from_freelist+0x1193/0x39b0 [ 349.225525][ T8680] netlink: 1280 bytes leftover after parsing attributes in process `syz.3.765'. [ 349.246540][ T8676] __alloc_frozen_pages_noprof+0x263/0x23a0 [ 349.266433][ T8676] alloc_pages_mpol+0x1fb/0x550 [ 349.287450][ T8676] new_slab+0x23c/0x330 [ 349.302105][ T8676] ___slab_alloc+0xd9c/0x1940 [ 349.319566][ T8676] __slab_alloc.constprop.0+0x56/0xb0 [ 349.340699][ T8676] kmem_cache_alloc_noprof+0xef/0x3b0 [ 349.366571][ T8676] getname_flags.part.0+0x48/0x540 [ 349.407914][ T8676] getname_flags+0x93/0xf0 [ 349.426542][ T8676] do_sys_openat2+0xb8/0x1d0 [ 349.455745][ T8676] __x64_sys_openat+0x174/0x210 [ 349.470234][ T8676] do_syscall_64+0xcd/0x260 [ 349.518510][ T8676] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.541335][ T8676] page last free pid 5841 tgid 5841 stack trace: [ 349.640601][ T8676] __free_frozen_pages+0x69d/0xff0 [ 349.645823][ T8676] __put_partials+0x16d/0x1c0 [ 349.703960][ T8690] netlink: 'syz.1.768': attribute type 11 has an invalid length. [ 349.726977][ T8690] netlink: 'syz.1.768': attribute type 11 has an invalid length. [ 349.729546][ T8676] qlist_free_all+0x4e/0x120 [ 349.746305][ T8690] netlink: 1280 bytes leftover after parsing attributes in process `syz.1.768'. [ 349.749543][ T8676] kasan_quarantine_reduce+0x195/0x1e0 [ 349.803389][ T8676] __kasan_slab_alloc+0x69/0x90 [ 349.819595][ T8676] kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 349.825160][ T8676] getname_flags.part.0+0x48/0x540 [ 349.889551][ T8676] __x64_sys_unlink+0xb0/0x110 [ 349.894422][ T8676] do_syscall_64+0xcd/0x260 [ 349.899009][ T8676] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.344144][ T30] audit: type=1800 audit(1744529605.582:3): pid=8697 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.770" name="dummy_udc" dev="gadgetfs" ino=7181 res=0 errno=0 [ 350.396957][ T8705] netlink: 8 bytes leftover after parsing attributes in process `syz.0.771'. [ 350.922976][ T8711] svc: failed to register nfsdv3 RPC service (errno 111). [ 350.956598][ T8711] svc: failed to register nfsaclv3 RPC service (errno 111). [ 351.065744][ T8723] netlink: 'syz.1.776': attribute type 11 has an invalid length. [ 351.073933][ T8723] netlink: 'syz.1.776': attribute type 11 has an invalid length. [ 351.082544][ T8723] netlink: 1280 bytes leftover after parsing attributes in process `syz.1.776'. [ 351.586895][ T8726] FAULT_INJECTION: forcing a failure. [ 351.586895][ T8726] name failslab, interval 1, probability 0, space 0, times 0 [ 351.652023][ T8726] CPU: 1 UID: 0 PID: 8726 Comm: syz.3.777 Not tainted 6.15.0-rc1-syzkaller-00325-g7cdabafc0012 #0 PREEMPT(full) [ 351.652067][ T8726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 351.652105][ T8726] Call Trace: [ 351.652115][ T8726] [ 351.652125][ T8726] dump_stack_lvl+0x16c/0x1f0 [ 351.652176][ T8726] should_fail_ex+0x512/0x640 [ 351.652210][ T8726] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 351.652261][ T8726] should_failslab+0xc2/0x120 [ 351.652290][ T8726] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 351.652336][ T8726] ? __alloc_skb+0x2b2/0x380 [ 351.652398][ T8726] __alloc_skb+0x2b2/0x380 [ 351.652437][ T8726] ? __pfx___alloc_skb+0x10/0x10 [ 351.652480][ T8726] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 351.652526][ T8726] ? __lock_acquire+0xaa4/0x1ba0 [ 351.652582][ T8726] netlink_alloc_large_skb+0x69/0x130 [ 351.652632][ T8726] netlink_sendmsg+0x6a1/0xdd0 [ 351.652685][ T8726] ? __pfx_netlink_sendmsg+0x10/0x10 [ 351.652748][ T8726] ____sys_sendmsg+0xa95/0xc70 [ 351.652778][ T8726] ? copy_msghdr_from_user+0x10a/0x160 [ 351.652820][ T8726] ? __pfx_____sys_sendmsg+0x10/0x10 [ 351.652869][ T8726] ___sys_sendmsg+0x134/0x1d0 [ 351.652913][ T8726] ? __pfx____sys_sendmsg+0x10/0x10 [ 351.653004][ T8726] __sys_sendmsg+0x16d/0x220 [ 351.653046][ T8726] ? __pfx___sys_sendmsg+0x10/0x10 [ 351.653105][ T8726] ? rcu_is_watching+0x12/0xc0 [ 351.653156][ T8726] do_syscall_64+0xcd/0x260 [ 351.653206][ T8726] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.653238][ T8726] RIP: 0033:0x7f085c38d169 [ 351.653261][ T8726] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 351.653290][ T8726] RSP: 002b:00007f085d2ab038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 351.653319][ T8726] RAX: ffffffffffffffda RBX: 00007f085c5a5fa0 RCX: 00007f085c38d169 [ 351.653340][ T8726] RDX: 0000000000004000 RSI: 0000200000000480 RDI: 0000000000000003 [ 351.653359][ T8726] RBP: 00007f085d2ab090 R08: 0000000000000000 R09: 0000000000000000 [ 351.653377][ T8726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 351.653395][ T8726] R13: 0000000000000000 R14: 00007f085c5a5fa0 R15: 00007ffc12bc6a88 [ 351.653435][ T8726] [ 352.214020][ T8734] netlink: 'syz.3.781': attribute type 11 has an invalid length. [ 352.214057][ T8734] netlink: 'syz.3.781': attribute type 11 has an invalid length. [ 352.214079][ T8734] netlink: 1280 bytes leftover after parsing attributes in process `syz.3.781'. [ 354.126770][ T8759] netlink: 'syz.0.786': attribute type 11 has an invalid length. [ 354.139657][ T8759] netlink: 'syz.0.786': attribute type 11 has an invalid length. [ 354.157714][ T8759] netlink: 1280 bytes leftover after parsing attributes in process `syz.0.786'. [ 354.654380][ T30] audit: type=1800 audit(1744529609.892:4): pid=8768 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.788" name="dummy_udc" dev="gadgetfs" ino=7181 res=0 errno=0 [ 354.702865][ T8774] netlink: 'syz.3.791': attribute type 11 has an invalid length. [ 354.702900][ T8774] netlink: 'syz.3.791': attribute type 11 has an invalid length. [ 354.702923][ T8774] netlink: 1280 bytes leftover after parsing attributes in process `syz.3.791'. [ 357.065233][ T8798] FAULT_INJECTION: forcing a failure. [ 357.065233][ T8798] name failslab, interval 1, probability 0, space 0, times 0 [ 357.120398][ T8798] CPU: 0 UID: 0 PID: 8798 Comm: syz.1.797 Not tainted 6.15.0-rc1-syzkaller-00325-g7cdabafc0012 #0 PREEMPT(full) [ 357.120441][ T8798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 357.120459][ T8798] Call Trace: [ 357.120469][ T8798] [ 357.120480][ T8798] dump_stack_lvl+0x16c/0x1f0 [ 357.120531][ T8798] should_fail_ex+0x512/0x640 [ 357.120566][ T8798] ? __kvmalloc_node_noprof+0x122/0x600 [ 357.120615][ T8798] should_failslab+0xc2/0x120 [ 357.120644][ T8798] __kvmalloc_node_noprof+0x135/0x600 [ 357.120692][ T8798] ? dm_create+0x9a/0x1160 [ 357.120729][ T8798] ? dm_create+0x9a/0x1160 [ 357.120758][ T8798] dm_create+0x9a/0x1160 [ 357.120792][ T8798] dev_create+0x121/0x290 [ 357.120830][ T8798] ? __pfx_dev_create+0x10/0x10 [ 357.120863][ T8798] ? __might_fault+0x13b/0x190 [ 357.120928][ T8798] ctl_ioctl+0x6e7/0xd70 [ 357.120963][ T8798] ? __pfx_dev_create+0x10/0x10 [ 357.120999][ T8798] ? __pfx_ctl_ioctl+0x10/0x10 [ 357.121073][ T8798] ? __fget_files+0x20e/0x3c0 [ 357.121126][ T8798] dm_ctl_ioctl+0x22/0x30 [ 357.121159][ T8798] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 357.121193][ T8798] __x64_sys_ioctl+0x190/0x200 [ 357.121234][ T8798] do_syscall_64+0xcd/0x260 [ 357.121284][ T8798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.121315][ T8798] RIP: 0033:0x7fa06af8d169 [ 357.121340][ T8798] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 357.121369][ T8798] RSP: 002b:00007fa06be1d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 357.121397][ T8798] RAX: ffffffffffffffda RBX: 00007fa06b1a5fa0 RCX: 00007fa06af8d169 [ 357.121416][ T8798] RDX: 00002000000001c0 RSI: fffffffffffffd03 RDI: 0000000000000002 [ 357.121434][ T8798] RBP: 00007fa06be1d090 R08: 0000000000000000 R09: 0000000000000000 [ 357.121452][ T8798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 357.121469][ T8798] R13: 0000000000000000 R14: 00007fa06b1a5fa0 R15: 00007ffc6374dd78 [ 357.121507][ T8798] [ 357.121529][ T8798] device-mapper: core: unable to allocate device, out of memory. [ 358.013499][ T8808] netlink: 'syz.3.801': attribute type 11 has an invalid length. [ 358.039783][ T8808] netlink: 'syz.3.801': attribute type 11 has an invalid length. [ 358.047589][ T8808] netlink: 1280 bytes leftover after parsing attributes in process `syz.3.801'. [ 358.334525][ T8812] HfR: entered promiscuous mode [ 358.445386][ T8812] svc: failed to register nfsdv3 RPC service (errno 111). [ 358.456991][ T8812] svc: failed to register nfsaclv3 RPC service (errno 111). [ 358.689620][ T8823] netlink: 'syz.3.807': attribute type 11 has an invalid length. [ 358.698633][ T8823] netlink: 'syz.3.807': attribute type 11 has an invalid length. [ 358.707390][ T8823] netlink: 1280 bytes leftover after parsing attributes in process `syz.3.807'. [ 359.159431][ T30] audit: type=1800 audit(1744529614.392:5): pid=8816 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.804" name="SYSV00000400" dev="tmpfs" ino=0 res=0 errno=0 [ 359.636615][ T8849] netlink: 'syz.2.813': attribute type 11 has an invalid length. [ 359.663751][ T8849] netlink: 'syz.2.813': attribute type 11 has an invalid length. [ 359.704207][ T8849] netlink: 1280 bytes leftover after parsing attributes in process `syz.2.813'. [ 360.870300][ T8863] HfR: entered promiscuous mode [ 360.986972][ T8865] netlink: 'syz.1.819': attribute type 11 has an invalid length. [ 360.999246][ T8863] svc: failed to register nfsdv3 RPC service (errno 111). [ 361.004814][ T8865] netlink: 'syz.1.819': attribute type 11 has an invalid length. [ 361.019166][ T8865] netlink: 1280 bytes leftover after parsing attributes in process `syz.1.819'. [ 361.044466][ T8863] svc: failed to register nfsaclv3 RPC service (errno 111). [ 365.410403][ T8931] random: crng reseeded on system resumption [ 367.641236][ T8957] sysfs_service_op_show: Client not running :-5: [ 367.860951][ T8964] FAULT_INJECTION: forcing a failure. [ 367.860951][ T8964] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 367.891008][ T8964] CPU: 0 UID: 0 PID: 8964 Comm: syz.2.846 Not tainted 6.15.0-rc1-syzkaller-00325-g7cdabafc0012 #0 PREEMPT(full) [ 367.891051][ T8964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 367.891069][ T8964] Call Trace: [ 367.891079][ T8964] [ 367.891091][ T8964] dump_stack_lvl+0x16c/0x1f0 [ 367.891143][ T8964] should_fail_ex+0x512/0x640 [ 367.891186][ T8964] _copy_from_user+0x2e/0xd0 [ 367.891235][ T8964] move_addr_to_kernel+0x65/0x170 [ 367.891271][ T8964] __sys_sendto+0x1be/0x510 [ 367.891310][ T8964] ? __pfx___sys_sendto+0x10/0x10 [ 367.891381][ T8964] ? ksys_write+0x1b9/0x240 [ 367.891425][ T8964] ? __pfx_ksys_write+0x10/0x10 [ 367.891467][ T8964] ? rcu_is_watching+0x12/0xc0 [ 367.891512][ T8964] __x64_sys_sendto+0xe0/0x1c0 [ 367.891549][ T8964] ? do_syscall_64+0x91/0x260 [ 367.891598][ T8964] ? lockdep_hardirqs_on+0x7c/0x110 [ 367.891640][ T8964] do_syscall_64+0xcd/0x260 [ 367.891690][ T8964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.891722][ T8964] RIP: 0033:0x7f0f2b18d169 [ 367.891746][ T8964] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 367.891775][ T8964] RSP: 002b:00007f0f2c01f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 367.891804][ T8964] RAX: ffffffffffffffda RBX: 00007f0f2b3a6160 RCX: 00007f0f2b18d169 [ 367.891824][ T8964] RDX: 0000000000000401 RSI: 0000000000000000 RDI: 0000000000000007 [ 367.891842][ T8964] RBP: 00007f0f2c01f090 R08: 0000200000000000 R09: 000000000000001c [ 367.891862][ T8964] R10: 000000000000007f R11: 0000000000000246 R12: 0000000000000001 [ 367.891880][ T8964] R13: 0000000000000000 R14: 00007f0f2b3a6160 R15: 00007ffcf90bdc28 [ 367.891919][ T8964] [ 368.609377][ T30] audit: type=1806 audit(6039496921.848:6): xattr="." res=0 [ 370.016021][ T8998] openvswitch: netlink: Tunnel attr 242 out of range max 16 [ 370.714221][ T9024] sg_write: process 723 (syz.2.859) changed security contexts after opening file descriptor, this is not allowed. [ 372.407013][ T9038] svc: failed to register nfsdv3 RPC service (errno 111). [ 372.440549][ T9038] svc: failed to register nfsaclv3 RPC service (errno 111). [ 372.561547][ T9041] FAULT_INJECTION: forcing a failure. [ 372.561547][ T9041] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 372.592446][ T9041] CPU: 1 UID: 0 PID: 9041 Comm: syz.2.863 Not tainted 6.15.0-rc1-syzkaller-00325-g7cdabafc0012 #0 PREEMPT(full) [ 372.592489][ T9041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 372.592507][ T9041] Call Trace: [ 372.592517][ T9041] [ 372.592529][ T9041] dump_stack_lvl+0x16c/0x1f0 [ 372.592580][ T9041] should_fail_ex+0x512/0x640 [ 372.592623][ T9041] should_fail_alloc_page+0xe7/0x130 [ 372.592656][ T9041] prepare_alloc_pages+0x3c2/0x610 [ 372.592702][ T9041] __alloc_frozen_pages_noprof+0x18f/0x23a0 [ 372.592753][ T9041] ? copy_splice_read+0x1a8/0xba0 [ 372.592794][ T9041] ? stack_trace_save+0x8e/0xc0 [ 372.592844][ T9041] ? __pfx_stack_trace_save+0x10/0x10 [ 372.592885][ T9041] ? stack_depot_save_flags+0x28/0xa50 [ 372.592924][ T9041] ? bpf_ksym_find+0x124/0x1c0 [ 372.592968][ T9041] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 372.593015][ T9041] ? kasan_save_stack+0x33/0x60 [ 372.593059][ T9041] ? __kasan_kmalloc+0xaa/0xb0 [ 372.593102][ T9041] ? copy_splice_read+0x1a8/0xba0 [ 372.593141][ T9041] ? do_splice_read+0x282/0x370 [ 372.593179][ T9041] ? splice_direct_to_actor+0x2a1/0xa30 [ 372.593220][ T9041] ? do_splice_direct+0x174/0x240 [ 372.593259][ T9041] ? do_sendfile+0xafd/0xe50 [ 372.593297][ T9041] ? __x64_sys_sendfile64+0x1d8/0x220 [ 372.593325][ T9041] ? do_syscall_64+0xcd/0x260 [ 372.593400][ T9041] alloc_pages_bulk_noprof+0x703/0x13b0 [ 372.593463][ T9041] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 372.593522][ T9041] ? trace_kmalloc+0x2b/0xd0 [ 372.593552][ T9041] ? __kmalloc_noprof+0x242/0x510 [ 372.593610][ T9041] copy_splice_read+0x1e1/0xba0 [ 372.593662][ T9041] ? __pfx_copy_splice_read+0x10/0x10 [ 372.593709][ T9041] ? look_up_lock_class+0x59/0x150 [ 372.593771][ T9041] ? lockdep_init_map_type+0x5c/0x280 [ 372.593802][ T9041] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 372.593858][ T9041] ? __pfx_copy_splice_read+0x10/0x10 [ 372.593898][ T9041] do_splice_read+0x282/0x370 [ 372.593944][ T9041] splice_direct_to_actor+0x2a1/0xa30 [ 372.593989][ T9041] ? __pfx_direct_splice_actor+0x10/0x10 [ 372.594040][ T9041] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 372.594080][ T9041] ? get_pid_task+0xfc/0x250 [ 372.594119][ T9041] do_splice_direct+0x174/0x240 [ 372.594163][ T9041] ? __pfx_do_splice_direct+0x10/0x10 [ 372.594206][ T9041] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 372.594255][ T9041] ? rw_verify_area+0xcf/0x680 [ 372.594295][ T9041] do_sendfile+0xafd/0xe50 [ 372.594341][ T9041] ? __pfx_do_sendfile+0x10/0x10 [ 372.594382][ T9041] ? __fget_files+0x20e/0x3c0 [ 372.594436][ T9041] __x64_sys_sendfile64+0x1d8/0x220 [ 372.594464][ T9041] ? ksys_write+0x1b9/0x240 [ 372.594505][ T9041] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 372.594532][ T9041] ? rcu_is_watching+0x12/0xc0 [ 372.594580][ T9041] do_syscall_64+0xcd/0x260 [ 372.594633][ T9041] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.594664][ T9041] RIP: 0033:0x7f0f2b18d169 [ 372.594687][ T9041] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 372.594716][ T9041] RSP: 002b:00007f0f2c061038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 372.594742][ T9041] RAX: ffffffffffffffda RBX: 00007f0f2b3a5fa0 RCX: 00007f0f2b18d169 [ 372.594761][ T9041] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 372.594777][ T9041] RBP: 00007f0f2c061090 R08: 0000000000000000 R09: 0000000000000000 [ 372.594793][ T9041] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 372.594810][ T9041] R13: 0000000000000000 R14: 00007f0f2b3a5fa0 R15: 00007ffcf90bdc28 [ 372.594853][ T9041] [ 373.675806][ T9049] mmap: syz.2.866 (9049) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. syzkaller syzkaller login: [ 375.848001][ T9077] svc: failed to register nfsdv3 RPC service (errno 111). [ 375.877109][ T9077] svc: failed to register nfsaclv3 RPC service (errno 111). [ 376.869978][ T9089] ubi0: attaching mtd0 [ 376.876018][ T9089] ubi0 error: ubi_attach_mtd_dev: bad VID header (4198269) or data offsets (4198333) [ 377.234376][ T9094] sysfs_service_op_show: Client not running :-5: [ 377.341690][ T9102] FAULT_INJECTION: forcing a failure. [ 377.341690][ T9102] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 377.387430][ T9102] CPU: 0 UID: 0 PID: 9102 Comm: syz.0.881 Not tainted 6.15.0-rc1-syzkaller-00325-g7cdabafc0012 #0 PREEMPT(full) [ 377.387472][ T9102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 377.387489][ T9102] Call Trace: [ 377.387499][ T9102] [ 377.387510][ T9102] dump_stack_lvl+0x16c/0x1f0 [ 377.387560][ T9102] should_fail_ex+0x512/0x640 [ 377.387620][ T9102] _copy_to_user+0x32/0xd0 [ 377.387662][ T9102] read_page_owner+0x1216/0x1dc0 [ 377.387757][ T9102] ? __pfx_read_page_owner+0x10/0x10 [ 377.387815][ T9102] ? find_held_lock+0x2b/0x80 [ 377.387877][ T9102] full_proxy_read+0x13c/0x200 [ 377.387909][ T9102] ? __pfx_full_proxy_read+0x10/0x10 [ 377.387944][ T9102] vfs_read+0x1de/0xc70 [ 377.387994][ T9102] ? __pfx_vfs_read+0x10/0x10 [ 377.388032][ T9102] ? find_held_lock+0x2b/0x80 [ 377.388070][ T9102] ? __fget_files+0x204/0x3c0 [ 377.388121][ T9102] ? __fget_files+0x20e/0x3c0 [ 377.388163][ T9102] ? __fget_files+0x160/0x3c0 [ 377.388216][ T9102] __x64_sys_pread64+0x1f4/0x250 [ 377.388262][ T9102] ? __pfx___x64_sys_pread64+0x10/0x10 [ 377.388305][ T9102] ? rcu_is_watching+0x12/0xc0 [ 377.388360][ T9102] do_syscall_64+0xcd/0x260 [ 377.388409][ T9102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.388439][ T9102] RIP: 0033:0x7f2415f8d169 [ 377.388463][ T9102] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 377.388492][ T9102] RSP: 002b:00007f2416d59038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 377.388519][ T9102] RAX: ffffffffffffffda RBX: 00007f24161a5fa0 RCX: 00007f2415f8d169 [ 377.388538][ T9102] RDX: 0000020000000001 RSI: 0000000000000000 RDI: 0000000000000003 [ 377.388555][ T9102] RBP: 00007f2416d59090 R08: 0000000000000000 R09: 0000000000000000 [ 377.388579][ T9102] R10: 0000000000007fff R11: 0000000000000246 R12: 0000000000000001 [ 377.388596][ T9102] R13: 0000000000000000 R14: 00007f24161a5fa0 R15: 00007fff06b316f8 [ 377.388652][ T9102] [ 378.808034][ T9126] FAULT_INJECTION: forcing a failure. [ 378.808034][ T9126] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 378.821799][ T9126] CPU: 0 UID: 0 PID: 9126 Comm: syz.2.888 Not tainted 6.15.0-rc1-syzkaller-00325-g7cdabafc0012 #0 PREEMPT(full) [ 378.821839][ T9126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 378.821856][ T9126] Call Trace: [ 378.821866][ T9126] [ 378.821876][ T9126] dump_stack_lvl+0x16c/0x1f0 [ 378.821927][ T9126] should_fail_ex+0x512/0x640 [ 378.821968][ T9126] _copy_to_user+0x32/0xd0 [ 378.822010][ T9126] simple_read_from_buffer+0xcb/0x170 [ 378.822056][ T9126] proc_fail_nth_read+0x197/0x270 [ 378.822099][ T9126] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 378.822145][ T9126] ? rw_verify_area+0xcf/0x680 [ 378.822205][ T9126] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 378.822248][ T9126] vfs_read+0x1de/0xc70 [ 378.822296][ T9126] ? __pfx___mutex_lock+0x10/0x10 [ 378.822342][ T9126] ? __pfx_vfs_read+0x10/0x10 [ 378.822395][ T9126] ? __fget_files+0x20e/0x3c0 [ 378.822472][ T9126] ksys_read+0x12a/0x240 [ 378.822516][ T9126] ? __pfx_ksys_read+0x10/0x10 [ 378.822573][ T9126] do_syscall_64+0xcd/0x260 [ 378.822625][ T9126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.822657][ T9126] RIP: 0033:0x7f0f2b18bb7c [ 378.822681][ T9126] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 378.822710][ T9126] RSP: 002b:00007f0f2c040030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 378.822738][ T9126] RAX: ffffffffffffffda RBX: 00007f0f2b3a6080 RCX: 00007f0f2b18bb7c [ 378.822758][ T9126] RDX: 000000000000000f RSI: 00007f0f2c0400a0 RDI: 0000000000000005 [ 378.822776][ T9126] RBP: 00007f0f2c040090 R08: 0000000000000000 R09: 0000000000000000 [ 378.822794][ T9126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 378.822811][ T9126] R13: 0000000000000000 R14: 00007f0f2b3a6080 R15: 00007ffcf90bdc28 [ 378.822851][ T9126] [ 379.012030][ C0] vkms_vblank_simulate: vblank timer overrun [ 381.307224][ T9146] sysfs_service_op_show: Client not running :-5: [ 383.797299][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.805738][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 385.978367][ T9190] sysfs_service_op_show: Client not running :-5: [ 386.794495][ T9210] FAULT_INJECTION: forcing a failure. [ 386.794495][ T9210] name failslab, interval 1, probability 0, space 0, times 0 [ 386.813904][ T9210] CPU: 1 UID: 0 PID: 9210 Comm: syz.1.908 Not tainted 6.15.0-rc1-syzkaller-00325-g7cdabafc0012 #0 PREEMPT(full) [ 386.813941][ T9210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 386.813960][ T9210] Call Trace: [ 386.813969][ T9210] [ 386.813978][ T9210] dump_stack_lvl+0x16c/0x1f0 [ 386.814026][ T9210] should_fail_ex+0x512/0x640 [ 386.814068][ T9210] ? fs_reclaim_acquire+0xae/0x150 [ 386.814111][ T9210] should_failslab+0xc2/0x120 [ 386.814136][ T9210] __kmalloc_cache_noprof+0x6a/0x3e0 [ 386.814215][ T9210] ? usb_set_configuration+0x2b2/0x1e20 [ 386.814247][ T9210] usb_set_configuration+0x2b2/0x1e20 [ 386.814278][ T9210] ? sscanf+0xc7/0x100 [ 386.814310][ T9210] ? __pfx_sscanf+0x10/0x10 [ 386.814357][ T9210] ? __mutex_lock+0x1ca/0xb90 [ 386.814415][ T9210] bConfigurationValue_store+0x100/0x180 [ 386.814458][ T9210] ? __pfx_bConfigurationValue_store+0x10/0x10 [ 386.814498][ T9210] ? find_held_lock+0x2b/0x80 [ 386.814549][ T9210] ? sysfs_file_kobj+0xe4/0x290 [ 386.814595][ T9210] ? __pfx_bConfigurationValue_store+0x10/0x10 [ 386.814633][ T9210] dev_attr_store+0x55/0x80 [ 386.814663][ T9210] ? __pfx_dev_attr_store+0x10/0x10 [ 386.814715][ T9210] sysfs_kf_write+0xef/0x150 [ 386.814763][ T9210] kernfs_fop_write_iter+0x351/0x510 [ 386.814806][ T9210] ? __pfx_sysfs_kf_write+0x10/0x10 [ 386.814860][ T9210] iter_file_splice_write+0x91c/0x1150 [ 386.814942][ T9210] ? __pfx_iter_file_splice_write+0x10/0x10 [ 386.814998][ T9210] ? __pfx_copy_splice_read+0x10/0x10 [ 386.815069][ T9210] ? __pfx_iter_file_splice_write+0x10/0x10 [ 386.815139][ T9210] direct_splice_actor+0x18f/0x6c0 [ 386.815192][ T9210] splice_direct_to_actor+0x342/0xa30 [ 386.815237][ T9210] ? __pfx_direct_splice_actor+0x10/0x10 [ 386.815293][ T9210] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 386.815338][ T9210] ? get_pid_task+0xfc/0x250 [ 386.815378][ T9210] do_splice_direct+0x174/0x240 [ 386.815422][ T9210] ? __pfx_do_splice_direct+0x10/0x10 [ 386.815474][ T9210] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 386.815529][ T9210] ? rw_verify_area+0xcf/0x680 [ 386.815578][ T9210] do_sendfile+0xafd/0xe50 [ 386.815634][ T9210] ? __pfx_do_sendfile+0x10/0x10 [ 386.815682][ T9210] ? __fget_files+0x20e/0x3c0 [ 386.815739][ T9210] __x64_sys_sendfile64+0x1d8/0x220 [ 386.815774][ T9210] ? ksys_write+0x1b9/0x240 [ 386.815816][ T9210] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 386.815857][ T9210] ? rcu_is_watching+0x12/0xc0 [ 386.815907][ T9210] do_syscall_64+0xcd/0x260 [ 386.815960][ T9210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.815991][ T9210] RIP: 0033:0x7fa06af8d169 [ 386.816021][ T9210] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 386.816073][ T9210] RSP: 002b:00007fa06be1d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 386.816105][ T9210] RAX: ffffffffffffffda RBX: 00007fa06b1a5fa0 RCX: 00007fa06af8d169 [ 386.816125][ T9210] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 386.816142][ T9210] RBP: 00007fa06be1d090 R08: 0000000000000000 R09: 0000000000000000 [ 386.816172][ T9210] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 386.816190][ T9210] R13: 0000000000000000 R14: 00007fa06b1a5fa0 R15: 00007ffc6374dd78 [ 386.816238][ T9210] [ 395.174906][ T9310] FAULT_INJECTION: forcing a failure. [ 395.174906][ T9310] name failslab, interval 1, probability 0, space 0, times 0 [ 395.233562][ T9310] CPU: 1 UID: 0 PID: 9310 Comm: syz.2.935 Not tainted 6.15.0-rc1-syzkaller-00325-g7cdabafc0012 #0 PREEMPT(full) [ 395.233606][ T9310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 395.233625][ T9310] Call Trace: [ 395.233635][ T9310] [ 395.233647][ T9310] dump_stack_lvl+0x16c/0x1f0 [ 395.233699][ T9310] should_fail_ex+0x512/0x640 [ 395.233734][ T9310] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 395.233789][ T9310] should_failslab+0xc2/0x120 [ 395.233831][ T9310] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 395.233880][ T9310] ? __alloc_skb+0x2b2/0x380 [ 395.233924][ T9310] __alloc_skb+0x2b2/0x380 [ 395.233964][ T9310] ? __pfx___alloc_skb+0x10/0x10 [ 395.234010][ T9310] ? __pfx___register_sysctl_table+0x10/0x10 [ 395.234045][ T9310] ? is_module_address+0x69/0xf0 [ 395.234080][ T9310] inet_netconf_notify_devconf+0x8b/0x1f0 [ 395.234133][ T9310] __devinet_sysctl_register+0x227/0x360 [ 395.234187][ T9310] ? __pfx___devinet_sysctl_register+0x10/0x10 [ 395.234240][ T9310] ? trace_kmalloc+0x2b/0xd0 [ 395.234274][ T9310] ? devinet_init_net+0xeb/0x910 [ 395.234324][ T9310] ? __asan_memcpy+0x3c/0x60 [ 395.234370][ T9310] devinet_init_net+0x315/0x910 [ 395.234421][ T9310] ? __pfx_devinet_init_net+0x10/0x10 [ 395.234468][ T9310] ops_init+0x1df/0x5f0 [ 395.234516][ T9310] setup_net+0x21e/0x850 [ 395.234564][ T9310] ? __pfx_setup_net+0x10/0x10 [ 395.234605][ T9310] ? lockdep_init_map_type+0x5c/0x280 [ 395.234635][ T9310] ? __pfx_down_read_killable+0x10/0x10 [ 395.234671][ T9310] ? debug_mutex_init+0x37/0x70 [ 395.234715][ T9310] copy_net_ns+0x2a6/0x5f0 [ 395.234767][ T9310] create_new_namespaces+0x3ea/0xad0 [ 395.234822][ T9310] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 395.234870][ T9310] ksys_unshare+0x45b/0xa40 [ 395.234919][ T9310] ? __pfx_ksys_unshare+0x10/0x10 [ 395.234964][ T9310] ? xfd_validate_state+0x5d/0x180 [ 395.235001][ T9310] ? rcu_is_watching+0x12/0xc0 [ 395.235069][ T9310] __x64_sys_unshare+0x31/0x40 [ 395.235118][ T9310] do_syscall_64+0xcd/0x260 [ 395.235169][ T9310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.235202][ T9310] RIP: 0033:0x7f0f2b18d169 [ 395.235227][ T9310] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 395.235267][ T9310] RSP: 002b:00007f0f2c061038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 395.235296][ T9310] RAX: ffffffffffffffda RBX: 00007f0f2b3a5fa0 RCX: 00007f0f2b18d169 [ 395.235315][ T9310] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 395.235348][ T9310] RBP: 00007f0f2b20e990 R08: 0000000000000000 R09: 0000000000000000 [ 395.235377][ T9310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 395.235397][ T9310] R13: 0000000000000000 R14: 00007f0f2b3a5fa0 R15: 00007ffcf90bdc28 [ 395.235440][ T9310] [ 395.932019][ T9320] sysfs_service_op_show: Client not running :-5: [ 396.888136][ T9337] netlink: 4 bytes leftover after parsing attributes in process `syz.0.942'. [ 396.904084][ T9337] netlink: 13 bytes leftover after parsing attributes in process `syz.0.942'. [ 396.917336][ T9337] busy [ 398.110895][ T9354] sysfs_service_op_show: Client not running :-5: [ 398.945638][ T9367] sysfs_service_op_show: Client not running :-5: [ 399.090163][ T9375] FAULT_INJECTION: forcing a failure. [ 399.090163][ T9375] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 399.165762][ T9375] CPU: 1 UID: 0 PID: 9375 Comm: syz.0.954 Not tainted 6.15.0-rc1-syzkaller-00325-g7cdabafc0012 #0 PREEMPT(full) [ 399.165804][ T9375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 399.165822][ T9375] Call Trace: [ 399.165832][ T9375] [ 399.165844][ T9375] dump_stack_lvl+0x16c/0x1f0 [ 399.165893][ T9375] should_fail_ex+0x512/0x640 [ 399.165933][ T9375] _copy_from_user+0x2e/0xd0 [ 399.165980][ T9375] copy_msghdr_from_user+0x98/0x160 [ 399.166021][ T9375] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 399.166069][ T9375] ? kfree+0x252/0x4d0 [ 399.166104][ T9375] ? __pfx__kstrtoull+0x10/0x10 [ 399.166159][ T9375] ___sys_sendmsg+0xfe/0x1d0 [ 399.166200][ T9375] ? __pfx____sys_sendmsg+0x10/0x10 [ 399.166272][ T9375] ? __pfx___might_resched+0x10/0x10 [ 399.166322][ T9375] __sys_sendmmsg+0x200/0x420 [ 399.166367][ T9375] ? __pfx___sys_sendmmsg+0x10/0x10 [ 399.166422][ T9375] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 399.166486][ T9375] ? fput+0x70/0xf0 [ 399.166515][ T9375] ? ksys_write+0x1b9/0x240 [ 399.166556][ T9375] ? __pfx_ksys_write+0x10/0x10 [ 399.166596][ T9375] ? rcu_is_watching+0x12/0xc0 [ 399.166639][ T9375] __x64_sys_sendmmsg+0x9c/0x100 [ 399.166680][ T9375] ? lockdep_hardirqs_on+0x7c/0x110 [ 399.166723][ T9375] do_syscall_64+0xcd/0x260 [ 399.166771][ T9375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.166802][ T9375] RIP: 0033:0x7f2415f8d169 [ 399.166825][ T9375] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 399.166854][ T9375] RSP: 002b:00007f2416d38038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 399.166882][ T9375] RAX: ffffffffffffffda RBX: 00007f24161a6080 RCX: 00007f2415f8d169 [ 399.166902][ T9375] RDX: 00000000000009a6 RSI: 0000000000000000 RDI: 0000000000000003 [ 399.166919][ T9375] RBP: 00007f2416d38090 R08: 0000000000000000 R09: 0000000000000000 [ 399.166938][ T9375] R10: 0000000007000000 R11: 0000000000000246 R12: 0000000000000002 [ 399.166962][ T9375] R13: 0000000000000000 R14: 00007f24161a6080 R15: 00007fff06b316f8 [ 399.167001][ T9375] [ 399.643187][ T9383] sysfs_service_op_show: Client not running :-5: [ 399.815792][ T9387] netlink: 'syz.0.957': attribute type 11 has an invalid length. [ 399.859049][ T9387] netlink: 'syz.0.957': attribute type 11 has an invalid length. [ 399.889574][ T9387] netlink: 1280 bytes leftover after parsing attributes in process `syz.0.957'. [ 400.508235][ T9407] netlink: 28 bytes leftover after parsing attributes in process `syz.3.964'. [ 400.586521][ T9407] team0: Port device team_slave_0 removed [ 401.575338][ T9426] sysfs_service_op_show: Client not running :-5: [ 402.266762][ T9439] netlink: 'syz.0.971': attribute type 11 has an invalid length. [ 402.282195][ T9439] netlink: 'syz.0.971': attribute type 11 has an invalid length. [ 402.306198][ T9439] netlink: 1280 bytes leftover after parsing attributes in process `syz.0.971'. [ 403.004530][ T9451] netlink: 28 bytes leftover after parsing attributes in process `syz.0.974'. [ 403.050917][ T9451] team0: Port device team_slave_0 removed [ 403.292958][ T9458] sysfs_service_op_show: Client not running :-5: [ 403.509014][ T9460] program syz.3.977 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 404.784951][ T9483] netlink: 'syz.2.983': attribute type 11 has an invalid length. [ 404.799584][ T9483] netlink: 'syz.2.983': attribute type 11 has an invalid length. [ 404.817726][ T9483] netlink: 1280 bytes leftover after parsing attributes in process `syz.2.983'. [ 405.222081][ T9491] sysfs_service_op_show: Client not running :-5: [ 405.480288][ T9496] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 405.584595][ T9503] syz.0.987 uses obsolete (PF_INET,SOCK_PACKET) [ 405.737836][ T9509] openvswitch: netlink: Message has 8 unknown bytes. [ 405.910665][ T9498] netlink: 20 bytes leftover after parsing attributes in process `syz.2.988'. [ 405.957710][ T9515] netlink: 28 bytes leftover after parsing attributes in process `syz.1.990'. [ 406.033151][ T9515] team0: Port device team_slave_0 removed [ 407.115086][ T9548] netlink: 'syz.2.995': attribute type 11 has an invalid length. [ 407.165249][ T9548] netlink: 'syz.2.995': attribute type 11 has an invalid length. [ 407.259641][ T9548] netlink: 1280 bytes leftover after parsing attributes in process `syz.2.995'. [ 407.793052][ T9564] sysfs_service_op_show: Client not running :-5: [ 408.657297][ T9586] netlink: 'syz.1.1007': attribute type 11 has an invalid length. [ 408.671239][ T9586] netlink: 'syz.1.1007': attribute type 11 has an invalid length. [ 408.696783][ T9586] netlink: 1280 bytes leftover after parsing attributes in process `syz.1.1007'. [ 408.713428][ T9591] FAULT_INJECTION: forcing a failure. [ 408.713428][ T9591] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 408.734017][ T9591] CPU: 1 UID: 0 PID: 9591 Comm: syz.3.1016 Not tainted 6.15.0-rc1-syzkaller-00325-g7cdabafc0012 #0 PREEMPT(full) [ 408.734063][ T9591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 408.734080][ T9591] Call Trace: [ 408.734090][ T9591] [ 408.734100][ T9591] dump_stack_lvl+0x16c/0x1f0 [ 408.734169][ T9591] should_fail_ex+0x512/0x640 [ 408.734211][ T9591] _copy_from_user+0x2e/0xd0 [ 408.734250][ T9591] copy_msghdr_from_user+0x98/0x160 [ 408.734301][ T9591] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 408.734350][ T9591] ? __pfx__kstrtoull+0x10/0x10 [ 408.734408][ T9591] ___sys_sendmsg+0xfe/0x1d0 [ 408.734450][ T9591] ? __pfx____sys_sendmsg+0x10/0x10 [ 408.734511][ T9591] ? find_held_lock+0x2b/0x80 [ 408.734576][ T9591] __sys_sendmmsg+0x200/0x420 [ 408.734623][ T9591] ? __pfx___sys_sendmmsg+0x10/0x10 [ 408.734678][ T9591] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 408.734743][ T9591] ? fput+0x70/0xf0 [ 408.734773][ T9591] ? ksys_write+0x1b9/0x240 [ 408.734815][ T9591] ? __pfx_ksys_write+0x10/0x10 [ 408.734856][ T9591] ? rcu_is_watching+0x12/0xc0 [ 408.734902][ T9591] __x64_sys_sendmmsg+0x9c/0x100 [ 408.734943][ T9591] ? lockdep_hardirqs_on+0x7c/0x110 [ 408.734986][ T9591] do_syscall_64+0xcd/0x260 [ 408.735035][ T9591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.735066][ T9591] RIP: 0033:0x7f085c38d169 [ 408.735091][ T9591] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 408.735119][ T9591] RSP: 002b:00007f085d2ab038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 408.735147][ T9591] RAX: ffffffffffffffda RBX: 00007f085c5a5fa0 RCX: 00007f085c38d169 [ 408.735166][ T9591] RDX: 0000000000000007 RSI: 0000200000000200 RDI: 0000000000000003 [ 408.735184][ T9591] RBP: 00007f085d2ab090 R08: 0000000000000000 R09: 0000000000000000 [ 408.735201][ T9591] R10: 0000000000004008 R11: 0000000000000246 R12: 0000000000000001 [ 408.735218][ T9591] R13: 0000000000000000 R14: 00007f085c5a5fa0 R15: 00007ffc12bc6a88 [ 408.735256][ T9591] [ 409.068655][ T9598] netlink: 'syz.1.1019': attribute type 11 has an invalid length. [ 409.076829][ T9598] netlink: 'syz.1.1019': attribute type 11 has an invalid length. [ 409.087568][ T9598] netlink: 1280 bytes leftover after parsing attributes in process `syz.1.1019'. [ 409.218281][ T9602] sysfs_service_op_show: Client not running :-5: [ 409.225456][ T9603] FAULT_INJECTION: forcing a failure. [ 409.225456][ T9603] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 409.265268][ T9603] CPU: 1 UID: 0 PID: 9603 Comm: syz.3.1010 Not tainted 6.15.0-rc1-syzkaller-00325-g7cdabafc0012 #0 PREEMPT(full) [ 409.265309][ T9603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 409.265326][ T9603] Call Trace: [ 409.265335][ T9603] [ 409.265346][ T9603] dump_stack_lvl+0x16c/0x1f0 [ 409.265396][ T9603] should_fail_ex+0x512/0x640 [ 409.265436][ T9603] _copy_from_user+0x2e/0xd0 [ 409.265475][ T9603] __x64_sys_sendfile64+0x120/0x220 [ 409.265504][ T9603] ? ksys_write+0x1b9/0x240 [ 409.265546][ T9603] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 409.265575][ T9603] ? rcu_is_watching+0x12/0xc0 [ 409.265623][ T9603] do_syscall_64+0xcd/0x260 [ 409.265673][ T9603] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.265704][ T9603] RIP: 0033:0x7f085c38d169 [ 409.265728][ T9603] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 409.265756][ T9603] RSP: 002b:00007f085d2ab038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 409.265783][ T9603] RAX: ffffffffffffffda RBX: 00007f085c5a5fa0 RCX: 00007f085c38d169 [ 409.265802][ T9603] RDX: 0000200000000040 RSI: 0000000000000003 RDI: 0000000000000003 [ 409.265820][ T9603] RBP: 00007f085d2ab090 R08: 0000000000000000 R09: 0000000000000000 [ 409.265839][ T9603] R10: 000000000000788b R11: 0000000000000246 R12: 0000000000000001 [ 409.265857][ T9603] R13: 0000000000000000 R14: 00007f085c5a5fa0 R15: 00007ffc12bc6a88 [ 409.265895][ T9603] [ 409.633704][ T9607] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1012'. [ 409.654708][ T9607] netlink: 13 bytes leftover after parsing attributes in process `syz.2.1012'. [ 409.836539][ T9616] program syz.1.1015 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 413.628158][ T9671] program syz.2.1034 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 415.108625][ T9697] FAULT_INJECTION: forcing a failure. [ 415.108625][ T9697] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 415.159717][ T9697] CPU: 0 UID: 0 PID: 9697 Comm: syz.3.1042 Not tainted 6.15.0-rc1-syzkaller-00325-g7cdabafc0012 #0 PREEMPT(full) [ 415.159760][ T9697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 415.159778][ T9697] Call Trace: [ 415.159788][ T9697] [ 415.159799][ T9697] dump_stack_lvl+0x16c/0x1f0 [ 415.159851][ T9697] should_fail_ex+0x512/0x640 [ 415.159893][ T9697] _copy_from_user+0x2e/0xd0 [ 415.159932][ T9697] copy_msghdr_from_user+0x98/0x160 [ 415.159975][ T9697] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 415.160024][ T9697] ? __pfx__kstrtoull+0x10/0x10 [ 415.160081][ T9697] ___sys_sendmsg+0xfe/0x1d0 [ 415.160124][ T9697] ? __pfx____sys_sendmsg+0x10/0x10 [ 415.160185][ T9697] ? find_held_lock+0x2b/0x80 [ 415.160250][ T9697] __sys_sendmmsg+0x200/0x420 [ 415.160296][ T9697] ? __pfx___sys_sendmmsg+0x10/0x10 [ 415.160352][ T9697] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 415.160416][ T9697] ? fput+0x70/0xf0 [ 415.160446][ T9697] ? ksys_write+0x1b9/0x240 [ 415.160489][ T9697] ? __pfx_ksys_write+0x10/0x10 [ 415.160530][ T9697] ? rcu_is_watching+0x12/0xc0 [ 415.160581][ T9697] __x64_sys_sendmmsg+0x9c/0x100 [ 415.160622][ T9697] ? lockdep_hardirqs_on+0x7c/0x110 [ 415.160666][ T9697] do_syscall_64+0xcd/0x260 [ 415.160717][ T9697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.160752][ T9697] RIP: 0033:0x7f085c38d169 [ 415.160776][ T9697] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 415.160805][ T9697] RSP: 002b:00007f085d28a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 415.160833][ T9697] RAX: ffffffffffffffda RBX: 00007f085c5a6080 RCX: 00007f085c38d169 [ 415.160853][ T9697] RDX: 00000000000009a6 RSI: 0000000000000000 RDI: 0000000000000003 [ 415.160870][ T9697] RBP: 00007f085d28a090 R08: 0000000000000000 R09: 0000000000000000 [ 415.160888][ T9697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 415.160905][ T9697] R13: 0000000000000000 R14: 00007f085c5a6080 R15: 00007ffc12bc6a88 [ 415.160943][ T9697] [ 415.372032][ C0] vkms_vblank_simulate: vblank timer overrun [ 416.234511][ T30] audit: type=1800 audit(6039496969.478:7): pid=9719 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1050" name="discovery_nqn" dev="configfs" ino=19390 res=0 errno=0 [ 416.625288][ T9730] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1052'. [ 416.652207][ T9731] FAULT_INJECTION: forcing a failure. [ 416.652207][ T9731] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 416.725819][ T9731] CPU: 1 UID: 0 PID: 9731 Comm: syz.3.1049 Not tainted 6.15.0-rc1-syzkaller-00325-g7cdabafc0012 #0 PREEMPT(full) [ 416.725856][ T9731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 416.725869][ T9731] Call Trace: [ 416.725877][ T9731] [ 416.725885][ T9731] dump_stack_lvl+0x16c/0x1f0 [ 416.725927][ T9731] should_fail_ex+0x512/0x640 [ 416.725962][ T9731] _copy_from_user+0x2e/0xd0 [ 416.725996][ T9731] move_addr_to_kernel+0x65/0x170 [ 416.726024][ T9731] __sys_connect+0xaf/0x170 [ 416.726050][ T9731] ? __pfx___sys_connect+0x10/0x10 [ 416.726087][ T9731] ? __pfx_ksys_write+0x10/0x10 [ 416.726130][ T9731] __x64_sys_connect+0x72/0xb0 [ 416.726154][ T9731] ? lockdep_hardirqs_on+0x7c/0x110 [ 416.726188][ T9731] do_syscall_64+0xcd/0x260 [ 416.726229][ T9731] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.726259][ T9731] RIP: 0033:0x7f085c38d169 [ 416.726281][ T9731] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 416.726320][ T9731] RSP: 002b:00007f085d269038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 416.726343][ T9731] RAX: ffffffffffffffda RBX: 00007f085c5a6160 RCX: 00007f085c38d169 [ 416.726378][ T9731] RDX: 0000000000000054 RSI: 0000200000000080 RDI: 0000000000000003 [ 416.726394][ T9731] RBP: 00007f085d269090 R08: 0000000000000000 R09: 0000000000000000 [ 416.726409][ T9731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 416.726424][ T9731] R13: 0000000000000001 R14: 00007f085c5a6160 R15: 00007ffc12bc6a88 [ 416.726460][ T9731] [ 417.463877][ T9744] FAULT_INJECTION: forcing a failure. [ 417.463877][ T9744] name failslab, interval 1, probability 0, space 0, times 0 [ 417.477570][ T9744] CPU: 1 UID: 0 PID: 9744 Comm: syz.3.1056 Not tainted 6.15.0-rc1-syzkaller-00325-g7cdabafc0012 #0 PREEMPT(full) [ 417.477605][ T9744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 417.477620][ T9744] Call Trace: [ 417.477629][ T9744] [ 417.477649][ T9744] dump_stack_lvl+0x16c/0x1f0 [ 417.477697][ T9744] should_fail_ex+0x512/0x640 [ 417.477728][ T9744] ? fs_reclaim_acquire+0xae/0x150 [ 417.477766][ T9744] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 417.477807][ T9744] should_failslab+0xc2/0x120 [ 417.477834][ T9744] __kmalloc_noprof+0xd2/0x510 [ 417.477887][ T9744] tomoyo_realpath_from_path+0xc2/0x6e0 [ 417.477940][ T9744] tomoyo_get_exe+0x63/0xa0 [ 417.477969][ T9744] tomoyo_write_control+0x689/0x1430 [ 417.478033][ T9744] ? __pfx_tomoyo_write_control+0x10/0x10 [ 417.478092][ T9744] vfs_write+0x25c/0x1180 [ 417.478130][ T9744] ? __pfx_tomoyo_write+0x10/0x10 [ 417.478177][ T9744] ? __pfx___mutex_lock+0x10/0x10 [ 417.478220][ T9744] ? __pfx_vfs_write+0x10/0x10 [ 417.478270][ T9744] ? __fget_files+0x20e/0x3c0 [ 417.478324][ T9744] ksys_write+0x12a/0x240 [ 417.478364][ T9744] ? __pfx_ksys_write+0x10/0x10 [ 417.478403][ T9744] ? rcu_is_watching+0x12/0xc0 [ 417.478452][ T9744] do_syscall_64+0xcd/0x260 [ 417.478500][ T9744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.478529][ T9744] RIP: 0033:0x7f085c38d169 [ 417.478553][ T9744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 417.478580][ T9744] RSP: 002b:00007f085d2ab038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 417.478607][ T9744] RAX: ffffffffffffffda RBX: 00007f085c5a5fa0 RCX: 00007f085c38d169 [ 417.478626][ T9744] RDX: 0000000000000308 RSI: 0000200000000300 RDI: 0000000000000003 [ 417.478648][ T9744] RBP: 00007f085d2ab090 R08: 0000000000000000 R09: 0000000000000000 [ 417.478663][ T9744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 417.478678][ T9744] R13: 0000000000000000 R14: 00007f085c5a5fa0 R15: 00007ffc12bc6a88 [ 417.478711][ T9744] [ 417.478721][ T9744] ERROR: Out of memory at tomoyo_realpath_from_path. [ 417.943352][ T9754] netlink: 'syz.3.1059': attribute type 11 has an invalid length. [ 417.977794][ T9754] netlink: 'syz.3.1059': attribute type 11 has an invalid length. [ 418.006797][ T9754] netlink: 1280 bytes leftover after parsing attributes in process `syz.3.1059'. [ 418.408120][ T9760] netlink: 146 bytes leftover after parsing attributes in process `syz.2.1054'. [ 418.435513][ T9764] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1062'. [ 418.536317][ T9772] FAULT_INJECTION: forcing a failure. [ 418.536317][ T9772] name failslab, interval 1, probability 0, space 0, times 0 [ 418.659679][ T9772] CPU: 0 UID: 0 PID: 9772 Comm: syz.3.1063 Not tainted 6.15.0-rc1-syzkaller-00325-g7cdabafc0012 #0 PREEMPT(full) [ 418.659722][ T9772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 418.659739][ T9772] Call Trace: [ 418.659749][ T9772] [ 418.659760][ T9772] dump_stack_lvl+0x16c/0x1f0 [ 418.659810][ T9772] should_fail_ex+0x512/0x640 [ 418.659843][ T9772] ? fs_reclaim_acquire+0xae/0x150 [ 418.659883][ T9772] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 418.659924][ T9772] should_failslab+0xc2/0x120 [ 418.659950][ T9772] __kmalloc_noprof+0xd2/0x510 [ 418.660003][ T9772] tomoyo_realpath_from_path+0xc2/0x6e0 [ 418.660050][ T9772] ? tomoyo_profile+0x47/0x60 [ 418.660099][ T9772] tomoyo_path_number_perm+0x245/0x580 [ 418.660134][ T9772] ? tomoyo_path_number_perm+0x237/0x580 [ 418.660172][ T9772] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 418.660211][ T9772] ? find_held_lock+0x2b/0x80 [ 418.660286][ T9772] ? find_held_lock+0x2b/0x80 [ 418.660323][ T9772] ? hook_file_ioctl_common+0x145/0x410 [ 418.660373][ T9772] ? __fget_files+0x20e/0x3c0 [ 418.660425][ T9772] security_file_ioctl+0x9b/0x240 [ 418.660465][ T9772] __x64_sys_ioctl+0xb7/0x200 [ 418.660506][ T9772] do_syscall_64+0xcd/0x260 [ 418.660555][ T9772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.660585][ T9772] RIP: 0033:0x7f085c38d169 [ 418.660608][ T9772] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 418.660636][ T9772] RSP: 002b:00007f085d2ab038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 418.660664][ T9772] RAX: ffffffffffffffda RBX: 00007f085c5a5fa0 RCX: 00007f085c38d169 [ 418.660688][ T9772] RDX: 0000000000000000 RSI: 0000000040084504 RDI: 0000000000000003 [ 418.660705][ T9772] RBP: 00007f085d2ab090 R08: 0000000000000000 R09: 0000000000000000 [ 418.660720][ T9772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 418.660736][ T9772] R13: 0000000000000000 R14: 00007f085c5a5fa0 R15: 00007ffc12bc6a88 [ 418.660772][ T9772] [ 418.661516][ T9772] ERROR: Out of memory at tomoyo_realpath_from_path. [ 419.927807][ T9794] netlink: 'syz.0.1070': attribute type 11 has an invalid length. [ 419.927840][ T9794] netlink: 'syz.0.1070': attribute type 11 has an invalid length. [ 419.927873][ T9794] netlink: 1280 bytes leftover after parsing attributes in process `syz.0.1070'. [ 420.157504][ T9788] FAULT_INJECTION: forcing a failure. [ 420.157504][ T9788] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 420.182433][ T9788] CPU: 1 UID: 0 PID: 9788 Comm: syz.1.1068 Not tainted 6.15.0-rc1-syzkaller-00325-g7cdabafc0012 #0 PREEMPT(full) [ 420.182476][ T9788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 420.182493][ T9788] Call Trace: [ 420.182504][ T9788] [ 420.182515][ T9788] dump_stack_lvl+0x16c/0x1f0 [ 420.182566][ T9788] should_fail_ex+0x512/0x640 [ 420.182609][ T9788] _copy_from_iter+0x2a4/0x15b0 [ 420.182651][ T9788] ? __pfx___mutex_lock+0x10/0x10 [ 420.182697][ T9788] ? __pfx___ldsem_down_read_nested+0x10/0x10 [ 420.182738][ T9788] ? __pfx__copy_from_iter+0x10/0x10 [ 420.182780][ T9788] ? __pfx___might_resched+0x10/0x10 [ 420.182840][ T9788] file_tty_write.constprop.0+0x486/0x9b0 [ 420.182906][ T9788] redirected_tty_write+0xd4/0x150 [ 420.182958][ T9788] vfs_write+0x5ba/0x1180 [ 420.183002][ T9788] ? __pfx_redirected_tty_write+0x10/0x10 [ 420.183058][ T9788] ? __pfx_vfs_write+0x10/0x10 [ 420.183099][ T9788] ? find_held_lock+0x2b/0x80 [ 420.183167][ T9788] ksys_write+0x12a/0x240 [ 420.183211][ T9788] ? __pfx_ksys_write+0x10/0x10 [ 420.183253][ T9788] ? rcu_is_watching+0x12/0xc0 [ 420.183312][ T9788] do_syscall_64+0xcd/0x260 [ 420.183363][ T9788] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.183395][ T9788] RIP: 0033:0x7fa06af8d169 [ 420.183420][ T9788] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 420.183449][ T9788] RSP: 002b:00007fa06be1d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 420.183476][ T9788] RAX: ffffffffffffffda RBX: 00007fa06b1a5fa0 RCX: 00007fa06af8d169 [ 420.183496][ T9788] RDX: 0000000000000d44 RSI: 0000200000000e00 RDI: 0000000000000003 [ 420.183515][ T9788] RBP: 00007fa06be1d090 R08: 0000000000000000 R09: 0000000000000000 [ 420.183534][ T9788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 420.183552][ T9788] R13: 0000000000000000 R14: 00007fa06b1a5fa0 R15: 00007ffc6374dd78 [ 420.183593][ T9788] [ 422.082119][ T9835] netlink: 338 bytes leftover after parsing attributes in process `syz.3.1079'. [ 422.131591][ T9834] netlink: 338 bytes leftover after parsing attributes in process `syz.3.1079'. [ 422.172896][ T9834] netlink: 290 bytes leftover after parsing attributes in process `syz.3.1079'. [ 422.190251][ T9834] veth0_macvtap: left promiscuous mode [ 422.399153][ T9838] netlink: 'syz.3.1081': attribute type 11 has an invalid length. [ 422.407323][ T9838] netlink: 'syz.3.1081': attribute type 11 has an invalid length. [ 422.415336][ T9838] netlink: 1280 bytes leftover after parsing attributes in process `syz.3.1081'. [ 422.497808][ T9841] FAULT_INJECTION: forcing a failure. [ 422.497808][ T9841] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 422.519292][ T9841] CPU: 1 UID: 0 PID: 9841 Comm: syz.0.1082 Not tainted 6.15.0-rc1-syzkaller-00325-g7cdabafc0012 #0 PREEMPT(full) [ 422.519336][ T9841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 422.519354][ T9841] Call Trace: [ 422.519364][ T9841] [ 422.519375][ T9841] dump_stack_lvl+0x16c/0x1f0 [ 422.519428][ T9841] should_fail_ex+0x512/0x640 [ 422.519486][ T9841] should_fail_alloc_page+0xe7/0x130 [ 422.519518][ T9841] prepare_alloc_pages+0x3c2/0x610 [ 422.519552][ T9841] ? find_held_lock+0x2b/0x80 [ 422.519593][ T9841] __alloc_frozen_pages_noprof+0x18f/0x23a0 [ 422.519642][ T9841] ? is_bpf_text_address+0x94/0x1a0 [ 422.519668][ T9841] ? kernel_text_address+0x8d/0x100 [ 422.519704][ T9841] ? __kernel_text_address+0xd/0x40 [ 422.519739][ T9841] ? unwind_get_return_address+0x59/0xa0 [ 422.519780][ T9841] ? arch_stack_walk+0xa6/0x100 [ 422.519823][ T9841] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 422.519875][ T9841] ? __lock_acquire+0x5ca/0x1ba0 [ 422.519931][ T9841] ? stack_depot_save_flags+0x28/0xa50 [ 422.519971][ T9841] ? look_up_lock_class+0x59/0x150 [ 422.520016][ T9841] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 422.520060][ T9841] ? policy_nodemask+0xea/0x4e0 [ 422.520112][ T9841] alloc_pages_mpol+0x1fb/0x550 [ 422.520142][ T9841] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 422.520182][ T9841] alloc_pages_noprof+0x131/0x390 [ 422.520212][ T9841] __pmd_alloc+0x3f/0x870 [ 422.520245][ T9841] ? find_held_lock+0x2b/0x80 [ 422.520286][ T9841] __handle_mm_fault+0x948/0x2a40 [ 422.520341][ T9841] ? __pfx___handle_mm_fault+0x10/0x10 [ 422.520407][ T9841] ? find_vma+0xbf/0x140 [ 422.520439][ T9841] ? __pfx_find_vma+0x10/0x10 [ 422.520477][ T9841] handle_mm_fault+0x3fe/0xad0 [ 422.520525][ T9841] do_user_addr_fault+0x7a6/0x1370 [ 422.520563][ T9841] ? rcu_is_watching+0x12/0xc0 [ 422.520602][ T9841] exc_page_fault+0x5c/0xc0 [ 422.520642][ T9841] asm_exc_page_fault+0x26/0x30 [ 422.520677][ T9841] RIP: 0010:rep_movs_alternative+0x30/0x90 [ 422.520712][ T9841] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 422.520739][ T9841] RSP: 0018:ffffc90018abf9e0 EFLAGS: 00050216 [ 422.520764][ T9841] RAX: 0000000000000001 RBX: 0000000000000038 RCX: 0000000000000020 [ 422.520782][ T9841] RDX: fffff52003157fab RSI: 0000000000000038 RDI: ffffc90018abfd38 [ 422.520800][ T9841] RBP: 0000000000000020 R08: 0000000000000001 R09: fffff52003157faa [ 422.520819][ T9841] R10: ffffc90018abfd57 R11: 0000000000000000 R12: 0000000000000000 [ 422.520837][ T9841] R13: ffffc90018abfd38 R14: 0000000000000000 R15: 0000000000000003 [ 422.520875][ T9841] _copy_from_user+0x98/0xd0 [ 422.520913][ T9841] kvm_vm_ioctl+0x13b5/0x3d40 [ 422.520967][ T9841] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 422.521024][ T9841] ? kasan_quarantine_put+0x10a/0x240 [ 422.521073][ T9841] ? lockdep_hardirqs_on+0x7c/0x110 [ 422.521120][ T9841] ? find_held_lock+0x2b/0x80 [ 422.521158][ T9841] ? tomoyo_path_number_perm+0x295/0x580 [ 422.521218][ T9841] ? tomoyo_path_number_perm+0x18d/0x580 [ 422.521258][ T9841] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 422.521294][ T9841] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 422.521330][ T9841] ? do_vfs_ioctl+0x512/0x1990 [ 422.521368][ T9841] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 422.521434][ T9841] ? find_held_lock+0x2b/0x80 [ 422.521471][ T9841] ? hook_file_ioctl_common+0x145/0x410 [ 422.521515][ T9841] ? __fget_files+0x20e/0x3c0 [ 422.521566][ T9841] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 422.521608][ T9841] __x64_sys_ioctl+0x190/0x200 [ 422.521649][ T9841] do_syscall_64+0xcd/0x260 [ 422.521699][ T9841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.521729][ T9841] RIP: 0033:0x7f2415f8d169 [ 422.521753][ T9841] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 422.521782][ T9841] RSP: 002b:00007f2416d59038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 422.521809][ T9841] RAX: ffffffffffffffda RBX: 00007f24161a5fa0 RCX: 00007f2415f8d169 [ 422.521829][ T9841] RDX: 0000000000000038 RSI: 000000004020ae46 RDI: 0000000000000003 [ 422.521847][ T9841] RBP: 00007f2416d59090 R08: 0000000000000000 R09: 0000000000000000 [ 422.521864][ T9841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 422.521882][ T9841] R13: 0000000000000000 R14: 00007f24161a5fa0 R15: 00007fff06b316f8 [ 422.521922][ T9841] [ 422.971789][ T9828] netlink: 146 bytes leftover after parsing attributes in process `syz.1.1085'. [ 423.608902][ T9857] FAULT_INJECTION: forcing a failure. [ 423.608902][ T9857] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 423.680550][ T9857] CPU: 0 UID: 0 PID: 9857 Comm: syz.1.1087 Not tainted 6.15.0-rc1-syzkaller-00325-g7cdabafc0012 #0 PREEMPT(full) [ 423.680592][ T9857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 423.680610][ T9857] Call Trace: [ 423.680620][ T9857] [ 423.680631][ T9857] dump_stack_lvl+0x16c/0x1f0 [ 423.680683][ T9857] should_fail_ex+0x512/0x640 [ 423.680726][ T9857] _copy_from_user+0x2e/0xd0 [ 423.680780][ T9857] copy_msghdr_from_user+0x98/0x160 [ 423.680817][ T9857] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 423.680862][ T9857] ? kfree+0x252/0x4d0 [ 423.680899][ T9857] ? __lock_acquire+0x5ca/0x1ba0 [ 423.680956][ T9857] ___sys_recvmsg+0xdb/0x1a0 [ 423.680996][ T9857] ? __pfx____sys_recvmsg+0x10/0x10 [ 423.681049][ T9857] ? __pfx___might_resched+0x10/0x10 [ 423.681102][ T9857] do_recvmmsg+0x2fe/0x740 [ 423.681147][ T9857] ? __pfx_do_recvmmsg+0x10/0x10 [ 423.681195][ T9857] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 423.681260][ T9857] ? __fget_files+0x20e/0x3c0 [ 423.681315][ T9857] __x64_sys_recvmmsg+0x22a/0x280 [ 423.681360][ T9857] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 423.681401][ T9857] ? rcu_is_watching+0x12/0xc0 [ 423.681449][ T9857] do_syscall_64+0xcd/0x260 [ 423.681497][ T9857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.681527][ T9857] RIP: 0033:0x7fa06af8d169 [ 423.681550][ T9857] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 423.681578][ T9857] RSP: 002b:00007fa06bdfc038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 423.681606][ T9857] RAX: ffffffffffffffda RBX: 00007fa06b1a6080 RCX: 00007fa06af8d169 [ 423.681624][ T9857] RDX: 0000000000010000 RSI: 0000000000000000 RDI: 0000000000000003 [ 423.681640][ T9857] RBP: 00007fa06bdfc090 R08: 0000000000000000 R09: 0000000000000000 [ 423.681656][ T9857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 423.681671][ T9857] R13: 0000000000000000 R14: 00007fa06b1a6080 R15: 00007ffc6374dd78 [ 423.681704][ T9857] [ 424.053588][ T9862] program syz.2.1089 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 424.939757][ T9873] netlink: 'syz.3.1093': attribute type 11 has an invalid length. [ 424.947750][ T9873] netlink: 'syz.3.1093': attribute type 11 has an invalid length. [ 424.989530][ T9873] netlink: 1280 bytes leftover after parsing attributes in process `syz.3.1093'. [ 427.589688][ T9909] program syz.0.1101 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 428.647957][ T9915] program syz.1.1102 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 428.978995][ T9920] netlink: 'syz.3.1104': attribute type 11 has an invalid length. [ 429.049172][ T9920] netlink: 'syz.3.1104': attribute type 11 has an invalid length. [ 429.166241][ T9920] netlink: 1280 bytes leftover after parsing attributes in process `syz.3.1104'. [ 430.938519][ T9936] zswap: compressor not available [ 431.448195][ T9955] program syz.2.1112 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 431.613642][ T9959] program syz.0.1113 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 432.218813][ T9970] FAULT_INJECTION: forcing a failure. [ 432.218813][ T9970] name fail_futex, interval 1, probability 0, space 0, times 1 [ 432.284961][ T9970] CPU: 0 UID: 0 PID: 9970 Comm: syz.3.1114 Not tainted 6.15.0-rc1-syzkaller-00325-g7cdabafc0012 #0 PREEMPT(full) [ 432.285009][ T9970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 432.285027][ T9970] Call Trace: [ 432.285038][ T9970] [ 432.285051][ T9970] dump_stack_lvl+0x16c/0x1f0 [ 432.285106][ T9970] should_fail_ex+0x512/0x640 [ 432.285150][ T9970] get_futex_key+0x49e/0x1000 [ 432.285200][ T9970] ? __pfx_get_futex_key+0x10/0x10 [ 432.285264][ T9970] ? stack_trace_save+0x8e/0xc0 [ 432.285308][ T9970] ? __pfx_stack_trace_save+0x10/0x10 [ 432.285359][ T9970] ? stack_depot_save_flags+0x28/0xa50 [ 432.285399][ T9970] ? __lock_acquire+0xaa4/0x1ba0 [ 432.285459][ T9970] futex_wait_setup+0x78/0x290 [ 432.285490][ T9970] ? kasan_save_free_info+0x3b/0x60 [ 432.285532][ T9970] ? __x64_sys_openat+0x174/0x210 [ 432.285572][ T9970] __futex_wait+0x266/0x3c0 [ 432.285607][ T9970] ? __pfx___futex_wait+0x10/0x10 [ 432.285647][ T9970] ? __pfx_futex_wake_mark+0x10/0x10 [ 432.285701][ T9970] futex_wait+0xe8/0x380 [ 432.285733][ T9970] ? __pfx_futex_wait+0x10/0x10 [ 432.285773][ T9970] ? kmem_cache_free+0x2d4/0x4d0 [ 432.285819][ T9970] ? fd_install+0x225/0x750 [ 432.285862][ T9970] ? putname+0x154/0x1a0 [ 432.285900][ T9970] do_futex+0x229/0x350 [ 432.285947][ T9970] ? __pfx_do_futex+0x10/0x10 [ 432.286005][ T9970] __x64_sys_futex+0x1e0/0x4c0 [ 432.286068][ T9970] ? __pfx___x64_sys_futex+0x10/0x10 [ 432.286116][ T9970] ? rcu_is_watching+0x12/0xc0 [ 432.286166][ T9970] do_syscall_64+0xcd/0x260 [ 432.286216][ T9970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.286247][ T9970] RIP: 0033:0x7f085c38d169 [ 432.286272][ T9970] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 432.286302][ T9970] RSP: 002b:00007f085d2ab0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 432.286332][ T9970] RAX: ffffffffffffffda RBX: 00007f085c5a5fa8 RCX: 00007f085c38d169 [ 432.286358][ T9970] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f085c5a5fa8 [ 432.286377][ T9970] RBP: 00007f085c5a5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 432.286395][ T9970] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f085c5a5fac [ 432.286414][ T9970] R13: 0000000000000000 R14: 00007ffc12bc69a0 R15: 00007ffc12bc6a88 [ 432.286452][ T9970] [ 433.407825][ T9806] delete_channel: no stack [ 433.925736][T10000] FAULT_INJECTION: forcing a failure. [ 433.925736][T10000] name failslab, interval 1, probability 0, space 0, times 0 [ 433.974571][T10000] CPU: 0 UID: 0 PID: 10000 Comm: syz.0.1122 Not tainted 6.15.0-rc1-syzkaller-00325-g7cdabafc0012 #0 PREEMPT(full) [ 433.974617][T10000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 433.974635][T10000] Call Trace: [ 433.974647][T10000] [ 433.974659][T10000] dump_stack_lvl+0x16c/0x1f0 [ 433.974712][T10000] should_fail_ex+0x512/0x640 [ 433.974749][T10000] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 433.974828][T10000] should_failslab+0xc2/0x120 [ 433.974859][T10000] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 433.974910][T10000] ? __kernfs_new_node+0xd2/0x8a0 [ 433.974969][T10000] __kernfs_new_node+0xd2/0x8a0 [ 433.975033][T10000] ? __pfx___kernfs_new_node+0x10/0x10 [ 433.975097][T10000] ? find_held_lock+0x2b/0x80 [ 433.975142][T10000] ? kernfs_root+0xee/0x2a0 [ 433.975203][T10000] kernfs_new_node+0x13c/0x1e0 [ 433.975246][T10000] __kernfs_create_file+0x53/0x350 [ 433.975293][T10000] sysfs_add_file_mode_ns+0x207/0x3c0 [ 433.975353][T10000] internal_create_group+0x578/0xf30 [ 433.975418][T10000] ? __pfx_internal_create_group+0x10/0x10 [ 433.975491][T10000] ? kernfs_create_link+0x1bd/0x240 [ 433.975542][T10000] internal_create_groups+0x9d/0x150 [ 433.975601][T10000] device_add+0x6d1/0x1a70 [ 433.975641][T10000] ? __pfx_device_add+0x10/0x10 [ 433.975675][T10000] ? lockdep_init_map_type+0x5c/0x280 [ 433.975708][T10000] ? __init_waitqueue_head+0xca/0x150 [ 433.975758][T10000] netdev_register_kobject+0x182/0x3a0 [ 433.975815][T10000] register_netdevice+0x13dc/0x2270 [ 433.975873][T10000] ? __pfx_register_netdevice+0x10/0x10 [ 433.975934][T10000] internal_dev_create+0x2d3/0x520 [ 433.975970][T10000] ovs_vport_add+0x144/0x4d0 [ 433.976025][T10000] new_vport+0x16/0x1d0 [ 433.976066][T10000] ovs_dp_cmd_new+0x6ba/0xe60 [ 433.976123][T10000] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 433.976178][T10000] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 433.976214][T10000] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 433.976259][T10000] genl_family_rcv_msg_doit+0x206/0x2f0 [ 433.976296][T10000] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 433.976330][T10000] ? trace_cap_capable+0x18d/0x200 [ 433.976372][T10000] ? bpf_lsm_capable+0x9/0x10 [ 433.976418][T10000] ? security_capable+0x7e/0x260 [ 433.976451][T10000] ? ns_capable+0xd7/0x110 [ 433.976502][T10000] genl_rcv_msg+0x55c/0x800 [ 433.976540][T10000] ? __pfx_genl_rcv_msg+0x10/0x10 [ 433.976570][T10000] ? __pfx___dev_queue_xmit+0x10/0x10 [ 433.976607][T10000] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 433.976669][T10000] ? __lock_acquire+0xaa4/0x1ba0 [ 433.976728][T10000] netlink_rcv_skb+0x16a/0x440 [ 433.976775][T10000] ? __pfx_genl_rcv_msg+0x10/0x10 [ 433.976808][T10000] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 433.976878][T10000] ? __pfx_down_read+0x10/0x10 [ 433.976909][T10000] ? netlink_deliver_tap+0x1ae/0xd30 [ 433.976960][T10000] genl_rcv+0x28/0x40 [ 433.977008][T10000] netlink_unicast+0x53a/0x7f0 [ 433.977061][T10000] ? __pfx_netlink_unicast+0x10/0x10 [ 433.977105][T10000] ? __lock_acquire+0xaa4/0x1ba0 [ 433.977166][T10000] netlink_sendmsg+0x8d1/0xdd0 [ 433.977216][T10000] ? __pfx_netlink_sendmsg+0x10/0x10 [ 433.977275][T10000] ____sys_sendmsg+0xa95/0xc70 [ 433.977305][T10000] ? copy_msghdr_from_user+0x10a/0x160 [ 433.977345][T10000] ? __pfx_____sys_sendmsg+0x10/0x10 [ 433.977379][T10000] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 433.977434][T10000] ___sys_sendmsg+0x134/0x1d0 [ 433.977498][T10000] ? __pfx____sys_sendmsg+0x10/0x10 [ 433.977614][T10000] __sys_sendmsg+0x16d/0x220 [ 433.977660][T10000] ? __pfx___sys_sendmsg+0x10/0x10 [ 433.977703][T10000] ? __x64_sys_futex+0x1e0/0x4c0 [ 433.977762][T10000] ? rcu_is_watching+0x12/0xc0 [ 433.977813][T10000] do_syscall_64+0xcd/0x260 [ 433.977865][T10000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.977898][T10000] RIP: 0033:0x7f2415f8d169 [ 433.977925][T10000] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 433.977955][T10000] RSP: 002b:00007f2416d59038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 433.977986][T10000] RAX: ffffffffffffffda RBX: 00007f24161a5fa0 RCX: 00007f2415f8d169 [ 433.978006][T10000] RDX: 0000000002000000 RSI: 0000200000000080 RDI: 0000000000000006 [ 433.978025][T10000] RBP: 00007f241600e990 R08: 0000000000000000 R09: 0000000000000000 [ 433.978043][T10000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 433.978061][T10000] R13: 0000000000000000 R14: 00007f24161a5fa0 R15: 00007fff06b316f8 [ 433.978126][T10000] [ 434.462405][ T9998] .^: entered promiscuous mode [ 434.976073][T10010] program syz.3.1125 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 436.364365][T10029] netlink: 'syz.2.1127': attribute type 11 has an invalid length. [ 436.447911][T10029] netlink: 'syz.2.1127': attribute type 11 has an invalid length. [ 436.499502][T10029] netlink: 1280 bytes leftover after parsing attributes in process `syz.2.1127'. [ 437.007203][T10036] virtio-fs: tag <(null)> not found [ 439.142439][T10065] program syz.3.1139 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 439.749963][T10070] netlink: 'syz.1.1140': attribute type 11 has an invalid length. [ 439.789359][T10070] netlink: 'syz.1.1140': attribute type 11 has an invalid length. [ 439.853891][T10070] netlink: 1280 bytes leftover after parsing attributes in process `syz.1.1140'. [ 440.861375][T10084] FAULT_INJECTION: forcing a failure. [ 440.861375][T10084] name failslab, interval 1, probability 0, space 0, times 0 [ 440.999424][T10084] CPU: 0 UID: 0 PID: 10084 Comm: syz.2.1144 Not tainted 6.15.0-rc1-syzkaller-00325-g7cdabafc0012 #0 PREEMPT(full) [ 440.999473][T10084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 440.999494][T10084] Call Trace: [ 440.999506][T10084] [ 440.999519][T10084] dump_stack_lvl+0x16c/0x1f0 [ 440.999574][T10084] should_fail_ex+0x512/0x640 [ 440.999611][T10084] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 440.999668][T10084] should_failslab+0xc2/0x120 [ 440.999711][T10084] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 440.999793][T10084] ? __kernfs_new_node+0xd2/0x8a0 [ 440.999854][T10084] __kernfs_new_node+0xd2/0x8a0 [ 440.999911][T10084] ? __pfx___kernfs_new_node+0x10/0x10 [ 440.999975][T10084] ? find_held_lock+0x2b/0x80 [ 441.000025][T10084] ? kernfs_root+0xee/0x2a0 [ 441.000087][T10084] kernfs_new_node+0x13c/0x1e0 [ 441.000130][T10084] __kernfs_create_file+0x53/0x350 [ 441.000180][T10084] sysfs_add_file_mode_ns+0x207/0x3c0 [ 441.000242][T10084] internal_create_group+0x578/0xf30 [ 441.000307][T10084] ? __pfx_internal_create_group+0x10/0x10 [ 441.000368][T10084] ? kernfs_create_link+0x1bd/0x240 [ 441.000419][T10084] internal_create_groups+0x9d/0x150 [ 441.000479][T10084] device_add+0x6d1/0x1a70 [ 441.000518][T10084] ? __pfx_device_add+0x10/0x10 [ 441.000553][T10084] ? lockdep_init_map_type+0x5c/0x280 [ 441.000587][T10084] ? __init_waitqueue_head+0xca/0x150 [ 441.000636][T10084] netdev_register_kobject+0x182/0x3a0 [ 441.000694][T10084] register_netdevice+0x13dc/0x2270 [ 441.000752][T10084] ? __pfx_register_netdevice+0x10/0x10 [ 441.000816][T10084] internal_dev_create+0x2d3/0x520 [ 441.000851][T10084] ovs_vport_add+0x144/0x4d0 [ 441.000907][T10084] new_vport+0x16/0x1d0 [ 441.000949][T10084] ovs_dp_cmd_new+0x6ba/0xe60 [ 441.001013][T10084] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 441.001069][T10084] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 441.001106][T10084] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 441.001152][T10084] genl_family_rcv_msg_doit+0x206/0x2f0 [ 441.001189][T10084] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 441.001224][T10084] ? trace_cap_capable+0x18d/0x200 [ 441.001267][T10084] ? bpf_lsm_capable+0x9/0x10 [ 441.001315][T10084] ? security_capable+0x7e/0x260 [ 441.001348][T10084] ? ns_capable+0xd7/0x110 [ 441.001394][T10084] genl_rcv_msg+0x55c/0x800 [ 441.001433][T10084] ? __pfx_genl_rcv_msg+0x10/0x10 [ 441.001464][T10084] ? __pfx___dev_queue_xmit+0x10/0x10 [ 441.001500][T10084] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 441.001549][T10084] ? __lock_acquire+0xaa4/0x1ba0 [ 441.001612][T10084] netlink_rcv_skb+0x16a/0x440 [ 441.001662][T10084] ? __pfx_genl_rcv_msg+0x10/0x10 [ 441.001698][T10084] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 441.001771][T10084] ? __pfx_down_read+0x10/0x10 [ 441.001803][T10084] ? netlink_deliver_tap+0x1ae/0xd30 [ 441.001858][T10084] genl_rcv+0x28/0x40 [ 441.001908][T10084] netlink_unicast+0x53a/0x7f0 [ 441.001962][T10084] ? __pfx_netlink_unicast+0x10/0x10 [ 441.002016][T10084] ? __lock_acquire+0xaa4/0x1ba0 [ 441.002082][T10084] netlink_sendmsg+0x8d1/0xdd0 [ 441.002140][T10084] ? __pfx_netlink_sendmsg+0x10/0x10 [ 441.002208][T10084] ____sys_sendmsg+0xa95/0xc70 [ 441.002241][T10084] ? copy_msghdr_from_user+0x10a/0x160 [ 441.002284][T10084] ? __pfx_____sys_sendmsg+0x10/0x10 [ 441.002323][T10084] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 441.002389][T10084] ___sys_sendmsg+0x134/0x1d0 [ 441.002437][T10084] ? __pfx____sys_sendmsg+0x10/0x10 [ 441.002553][T10084] __sys_sendmsg+0x16d/0x220 [ 441.002610][T10084] ? __pfx___sys_sendmsg+0x10/0x10 [ 441.002689][T10084] ? __x64_sys_futex+0x1e0/0x4c0 [ 441.002751][T10084] ? rcu_is_watching+0x12/0xc0 [ 441.002808][T10084] do_syscall_64+0xcd/0x260 [ 441.002862][T10084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.002896][T10084] RIP: 0033:0x7f0f2b18d169 [ 441.002923][T10084] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 441.002955][T10084] RSP: 002b:00007f0f2c061038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 441.002986][T10084] RAX: ffffffffffffffda RBX: 00007f0f2b3a5fa0 RCX: 00007f0f2b18d169 [ 441.003014][T10084] RDX: 0000000002000000 RSI: 0000200000000080 RDI: 0000000000000006 [ 441.003034][T10084] RBP: 00007f0f2b20e990 R08: 0000000000000000 R09: 0000000000000000 [ 441.003054][T10084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 441.003073][T10084] R13: 0000000000000000 R14: 00007f0f2b3a5fa0 R15: 00007ffcf90bdc28 [ 441.003116][T10084] [ 441.672762][T10087] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1146'. [ 442.688574][T10110] program syz.1.1151 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 443.299180][T10108] zswap: compressor not available [ 443.497386][T10116] FAULT_INJECTION: forcing a failure. [ 443.497386][T10116] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 443.526455][T10116] CPU: 0 UID: 0 PID: 10116 Comm: syz.2.1152 Not tainted 6.15.0-rc1-syzkaller-00325-g7cdabafc0012 #0 PREEMPT(full) [ 443.526499][T10116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 443.526517][T10116] Call Trace: [ 443.526527][T10116] [ 443.526539][T10116] dump_stack_lvl+0x16c/0x1f0 [ 443.526591][T10116] should_fail_ex+0x512/0x640 [ 443.526631][T10116] _copy_to_user+0x32/0xd0 [ 443.526673][T10116] simple_read_from_buffer+0xcb/0x170 [ 443.526719][T10116] proc_fail_nth_read+0x197/0x270 [ 443.526765][T10116] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 443.526820][T10116] ? rw_verify_area+0xcf/0x680 [ 443.526857][T10116] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 443.526901][T10116] vfs_read+0x1de/0xc70 [ 443.526949][T10116] ? __pfx___mutex_lock+0x10/0x10 [ 443.526997][T10116] ? __pfx_vfs_read+0x10/0x10 [ 443.527051][T10116] ? __fget_files+0x20e/0x3c0 [ 443.527109][T10116] ksys_read+0x12a/0x240 [ 443.527150][T10116] ? __pfx_ksys_read+0x10/0x10 [ 443.527205][T10116] do_syscall_64+0xcd/0x260 [ 443.527252][T10116] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.527283][T10116] RIP: 0033:0x7f0f2b18bb7c [ 443.527308][T10116] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 443.527338][T10116] RSP: 002b:00007f0f2c061030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 443.527368][T10116] RAX: ffffffffffffffda RBX: 00007f0f2b3a5fa0 RCX: 00007f0f2b18bb7c [ 443.527389][T10116] RDX: 000000000000000f RSI: 00007f0f2c0610a0 RDI: 0000000000000003 [ 443.527407][T10116] RBP: 00007f0f2c061090 R08: 0000000000000000 R09: 0000000000000000 [ 443.527425][T10116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 443.527443][T10116] R13: 0000000000000000 R14: 00007f0f2b3a5fa0 R15: 00007ffcf90bdc28 [ 443.527484][T10116] [ 444.161947][T10132] FAULT_INJECTION: forcing a failure. [ 444.161947][T10132] name failslab, interval 1, probability 0, space 0, times 0 [ 444.177388][T10132] CPU: 0 UID: 0 PID: 10132 Comm: syz.3.1161 Not tainted 6.15.0-rc1-syzkaller-00325-g7cdabafc0012 #0 PREEMPT(full) [ 444.177431][T10132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 444.177450][T10132] Call Trace: [ 444.177460][T10132] [ 444.177471][T10132] dump_stack_lvl+0x16c/0x1f0 [ 444.177522][T10132] should_fail_ex+0x512/0x640 [ 444.177556][T10132] ? fs_reclaim_acquire+0xae/0x150 [ 444.177598][T10132] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 444.177642][T10132] should_failslab+0xc2/0x120 [ 444.177672][T10132] __kmalloc_noprof+0xd2/0x510 [ 444.177744][T10132] tomoyo_realpath_from_path+0xc2/0x6e0 [ 444.177805][T10132] ? tomoyo_profile+0x47/0x60 [ 444.177866][T10132] tomoyo_path_number_perm+0x245/0x580 [ 444.177908][T10132] ? tomoyo_path_number_perm+0x237/0x580 [ 444.177950][T10132] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 444.177991][T10132] ? find_held_lock+0x2b/0x80 [ 444.178068][T10132] ? find_held_lock+0x2b/0x80 [ 444.178107][T10132] ? hook_file_ioctl_common+0x145/0x410 [ 444.178152][T10132] ? __fget_files+0x20e/0x3c0 [ 444.178207][T10132] security_file_ioctl+0x9b/0x240 [ 444.178249][T10132] __x64_sys_ioctl+0xb7/0x200 [ 444.178290][T10132] do_syscall_64+0xcd/0x260 [ 444.178346][T10132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.178379][T10132] RIP: 0033:0x7f085c38d169 [ 444.178405][T10132] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 444.178435][T10132] RSP: 002b:00007f085d2ab038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 444.178465][T10132] RAX: ffffffffffffffda RBX: 00007f085c5a5fa0 RCX: 00007f085c38d169 [ 444.178486][T10132] RDX: 0000000000000000 RSI: 0000000040095505 RDI: 0000000000000004 [ 444.178504][T10132] RBP: 00007f085d2ab090 R08: 0000000000000000 R09: 0000000000000000 [ 444.178522][T10132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 444.178540][T10132] R13: 0000000000000000 R14: 00007f085c5a5fa0 R15: 00007ffc12bc6a88 [ 444.178580][T10132] [ 444.209347][T10132] ERROR: Out of memory at tomoyo_realpath_from_path. [ 444.607275][T10142] program syz.2.1164 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 445.245769][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.252234][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 446.302093][T10157] zswap: compressor not available [ 447.539339][T10175] program syz.0.1169 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 447.606694][T10171] Invalid ELF header magic: != ELF [ 449.775011][T10192] openvswitch: netlink: Message has 20 unknown bytes. [ 450.198854][T10201] FAULT_INJECTION: forcing a failure. [ 450.198854][T10201] name failslab, interval 1, probability 0, space 0, times 0 [ 450.260706][T10201] CPU: 1 UID: 0 PID: 10201 Comm: syz.0.1176 Not tainted 6.15.0-rc1-syzkaller-00325-g7cdabafc0012 #0 PREEMPT(full) [ 450.260748][T10201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 450.260768][T10201] Call Trace: [ 450.260778][T10201] [ 450.260789][T10201] dump_stack_lvl+0x16c/0x1f0 [ 450.260837][T10201] should_fail_ex+0x512/0x640 [ 450.260870][T10201] ? __kvmalloc_node_noprof+0x122/0x600 [ 450.260918][T10201] should_failslab+0xc2/0x120 [ 450.260946][T10201] __kvmalloc_node_noprof+0x135/0x600 [ 450.260991][T10201] ? seq_read_iter+0x826/0x12c0 [ 450.261038][T10201] ? seq_read_iter+0x826/0x12c0 [ 450.261073][T10201] seq_read_iter+0x826/0x12c0 [ 450.261126][T10201] ? __mutex_trylock_common+0xe9/0x250 [ 450.261166][T10201] kernfs_fop_read_iter+0x40f/0x5a0 [ 450.261201][T10201] ? rw_verify_area+0xcf/0x680 [ 450.261241][T10201] vfs_read+0x8c8/0xc70 [ 450.261285][T10201] ? __pfx___mutex_lock+0x10/0x10 [ 450.261327][T10201] ? __pfx_vfs_read+0x10/0x10 [ 450.261390][T10201] ksys_read+0x12a/0x240 [ 450.261429][T10201] ? __pfx_ksys_read+0x10/0x10 [ 450.261466][T10201] ? rcu_is_watching+0x12/0xc0 [ 450.261515][T10201] do_syscall_64+0xcd/0x260 [ 450.261562][T10201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.261592][T10201] RIP: 0033:0x7f2415f8d169 [ 450.261616][T10201] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 450.261645][T10201] RSP: 002b:00007f2416d59038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 450.261672][T10201] RAX: ffffffffffffffda RBX: 00007f24161a5fa0 RCX: 00007f2415f8d169 [ 450.261692][T10201] RDX: 000000000000009c RSI: 0000200000000140 RDI: 0000000000000003 [ 450.261710][T10201] RBP: 00007f2416d59090 R08: 0000000000000000 R09: 0000000000000000 [ 450.261727][T10201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 450.261746][T10201] R13: 0000000000000000 R14: 00007f24161a5fa0 R15: 00007fff06b316f8 [ 450.261786][T10201] [ 451.835388][T10223] program syz.0.1183 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 452.104351][T10217] zswap: compressor not available [ 452.281442][T10230] FAULT_INJECTION: forcing a failure. [ 452.281442][T10230] name failslab, interval 1, probability 0, space 0, times 0 [ 452.285436][T10232] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1185'. [ 452.309554][T10230] CPU: 1 UID: 0 PID: 10230 Comm: syz.0.1184 Not tainted 6.15.0-rc1-syzkaller-00325-g7cdabafc0012 #0 PREEMPT(full) [ 452.309599][T10230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 452.309620][T10230] Call Trace: [ 452.309632][T10230] [ 452.309644][T10230] dump_stack_lvl+0x16c/0x1f0 [ 452.309699][T10230] should_fail_ex+0x512/0x640 [ 452.309730][T10230] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 452.309776][T10230] should_failslab+0xc2/0x120 [ 452.309801][T10230] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 452.309841][T10230] ? vma_merge_new_range+0x3f8/0xc10 [ 452.309880][T10230] ? vm_area_alloc+0x1f/0x160 [ 452.309920][T10230] vm_area_alloc+0x1f/0x160 [ 452.309955][T10230] __mmap_region+0xfd0/0x27c0 [ 452.309999][T10230] ? rcu_is_watching+0x12/0xc0 [ 452.310033][T10230] ? __pfx___mmap_region+0x10/0x10 [ 452.310074][T10230] ? finish_task_switch.isra.0+0x221/0xc10 [ 452.310116][T10230] ? __schedule+0x1186/0x5de0 [ 452.310149][T10230] ? kvm_sched_clock_read+0x11/0x20 [ 452.310183][T10230] ? sched_clock+0x38/0x60 [ 452.310265][T10230] ? trace_cap_capable+0x18d/0x200 [ 452.310295][T10230] ? cap_capable+0xb3/0x250 [ 452.310326][T10230] mmap_region+0x1ab/0x3f0 [ 452.310374][T10230] do_mmap+0xd8e/0x11b0 [ 452.310413][T10230] ? __pfx_do_mmap+0x10/0x10 [ 452.310445][T10230] ? __pfx_down_write_killable+0x10/0x10 [ 452.310469][T10230] ? kmem_cache_free+0x2d4/0x4d0 [ 452.310513][T10230] vm_mmap_pgoff+0x281/0x450 [ 452.310559][T10230] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 452.310598][T10230] ? __x64_sys_futex+0x1e0/0x4c0 [ 452.310638][T10230] ? __x64_sys_futex+0x1e9/0x4c0 [ 452.310682][T10230] ksys_mmap_pgoff+0x7d/0x5c0 [ 452.310714][T10230] ? rcu_is_watching+0x12/0xc0 [ 452.310750][T10230] __x64_sys_mmap+0x125/0x190 [ 452.310785][T10230] do_syscall_64+0xcd/0x260 [ 452.310827][T10230] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.310855][T10230] RIP: 0033:0x7f2415f8d169 [ 452.310877][T10230] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 452.310903][T10230] RSP: 002b:00007f2416d59038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 452.310929][T10230] RAX: ffffffffffffffda RBX: 00007f24161a5fa0 RCX: 00007f2415f8d169 [ 452.310947][T10230] RDX: 00000000000000df RSI: 0000000000020009 RDI: 0000000000000000 [ 452.310964][T10230] RBP: 00007f241600e990 R08: 00040000000000a5 R09: 0000000000008000 [ 452.310990][T10230] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 452.311030][T10230] R13: 0000000000000000 R14: 00007f24161a5fa0 R15: 00007fff06b316f8 [ 452.311085][T10230] [ 453.490502][T10251] FAULT_INJECTION: forcing a failure. [ 453.490502][T10251] name failslab, interval 1, probability 0, space 0, times 0 [ 453.525337][T10250] capability: warning: `syz.1.1190' uses 32-bit capabilities (legacy support in use) [ 453.542302][T10251] CPU: 0 UID: 0 PID: 10251 Comm: syz.3.1191 Not tainted 6.15.0-rc1-syzkaller-00325-g7cdabafc0012 #0 PREEMPT(full) [ 453.542348][T10251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 453.542367][T10251] Call Trace: [ 453.542381][T10251] [ 453.542394][T10251] dump_stack_lvl+0x16c/0x1f0 [ 453.542446][T10251] should_fail_ex+0x512/0x640 [ 453.542481][T10251] ? __kvmalloc_node_noprof+0x122/0x600 [ 453.542532][T10251] should_failslab+0xc2/0x120 [ 453.542562][T10251] __kvmalloc_node_noprof+0x135/0x600 [ 453.542611][T10251] ? file_tty_write.constprop.0+0x6ed/0x9b0 [ 453.542661][T10251] ? trace_event_raw_event_fscache_invalidate+0x230/0x230 [ 453.542704][T10251] ? file_tty_write.constprop.0+0x6ed/0x9b0 [ 453.542756][T10251] file_tty_write.constprop.0+0x6ed/0x9b0 [ 453.542821][T10251] redirected_tty_write+0xd4/0x150 [ 453.542880][T10251] vfs_write+0x5ba/0x1180 [ 453.542926][T10251] ? __pfx_redirected_tty_write+0x10/0x10 [ 453.542984][T10251] ? __pfx_vfs_write+0x10/0x10 [ 453.543026][T10251] ? find_held_lock+0x2b/0x80 [ 453.543094][T10251] ksys_write+0x12a/0x240 [ 453.543139][T10251] ? __pfx_ksys_write+0x10/0x10 [ 453.543181][T10251] ? rcu_is_watching+0x12/0xc0 [ 453.543233][T10251] do_syscall_64+0xcd/0x260 [ 453.543284][T10251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.543317][T10251] RIP: 0033:0x7f085c38d169 [ 453.543346][T10251] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 453.543377][T10251] RSP: 002b:00007f085d2ab038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 453.543408][T10251] RAX: ffffffffffffffda RBX: 00007f085c5a5fa0 RCX: 00007f085c38d169 [ 453.543429][T10251] RDX: 0000000000000008 RSI: 0000200000000e00 RDI: 0000000000000003 [ 453.543447][T10251] RBP: 00007f085d2ab090 R08: 0000000000000000 R09: 0000000000000000 [ 453.543465][T10251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 453.543482][T10251] R13: 0000000000000000 R14: 00007f085c5a5fa0 R15: 00007ffc12bc6a88 [ 453.543524][T10251] [ 453.803091][T10254] program syz.1.1192 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 454.503019][T10261] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1196'. [ 454.739237][T10269] program syz.1.1198 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 456.202526][T10284] program syz.0.1201 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 456.656857][T10288] zswap: compressor not available [ 456.721927][T10295] svc: failed to register nfsdv3 RPC service (errno 111). [ 456.779938][T10295] svc: failed to register nfsaclv3 RPC service (errno 111). [ 458.355732][T10329] nbd: couldn't find device at index 33904 [ 458.745957][T10339] program syz.0.1212 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 459.362608][T10359] program syz.1.1216 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 459.972097][T10367] FAULT_INJECTION: forcing a failure. [ 459.972097][T10367] name failslab, interval 1, probability 0, space 0, times 0 [ 460.079992][T10367] CPU: 1 UID: 0 PID: 10367 Comm: syz.1.1218 Not tainted 6.15.0-rc1-syzkaller-00325-g7cdabafc0012 #0 PREEMPT(full) [ 460.080035][T10367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 460.080053][T10367] Call Trace: [ 460.080063][T10367] [ 460.080074][T10367] dump_stack_lvl+0x16c/0x1f0 [ 460.080124][T10367] should_fail_ex+0x512/0x640 [ 460.080157][T10367] ? __kvmalloc_node_noprof+0x122/0x600 [ 460.080204][T10367] should_failslab+0xc2/0x120 [ 460.080232][T10367] __kvmalloc_node_noprof+0x135/0x600 [ 460.080276][T10367] ? seq_read_iter+0x826/0x12c0 [ 460.080340][T10367] ? seq_read_iter+0x826/0x12c0 [ 460.080378][T10367] seq_read_iter+0x826/0x12c0 [ 460.080417][T10367] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 460.080487][T10367] kernfs_fop_read_iter+0x40f/0x5a0 [ 460.080535][T10367] copy_splice_read+0x615/0xba0 [ 460.080587][T10367] ? __pfx_copy_splice_read+0x10/0x10 [ 460.080632][T10367] ? look_up_lock_class+0x59/0x150 [ 460.080682][T10367] ? lockdep_init_map_type+0x5c/0x280 [ 460.080715][T10367] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 460.080765][T10367] ? __pfx_copy_splice_read+0x10/0x10 [ 460.080808][T10367] do_splice_read+0x282/0x370 [ 460.080856][T10367] splice_direct_to_actor+0x2a1/0xa30 [ 460.080904][T10367] ? __pfx_direct_splice_actor+0x10/0x10 [ 460.080958][T10367] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 460.081001][T10367] ? get_pid_task+0xfc/0x250 [ 460.081049][T10367] do_splice_direct+0x174/0x240 [ 460.081094][T10367] ? __pfx_do_splice_direct+0x10/0x10 [ 460.081140][T10367] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 460.081192][T10367] ? rw_verify_area+0xcf/0x680 [ 460.081236][T10367] do_sendfile+0xafd/0xe50 [ 460.081287][T10367] ? __pfx_do_sendfile+0x10/0x10 [ 460.081330][T10367] ? __fget_files+0x20e/0x3c0 [ 460.081388][T10367] __x64_sys_sendfile64+0x1d8/0x220 [ 460.081419][T10367] ? ksys_write+0x1b9/0x240 [ 460.081463][T10367] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 460.081500][T10367] ? rcu_is_watching+0x12/0xc0 [ 460.081553][T10367] do_syscall_64+0xcd/0x260 [ 460.081604][T10367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.081636][T10367] RIP: 0033:0x7fa06af8d169 [ 460.081662][T10367] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 460.081693][T10367] RSP: 002b:00007fa06be1d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 460.081723][T10367] RAX: ffffffffffffffda RBX: 00007fa06b1a5fa0 RCX: 00007fa06af8d169 [ 460.081744][T10367] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 460.081763][T10367] RBP: 00007fa06be1d090 R08: 0000000000000000 R09: 0000000000000000 [ 460.081783][T10367] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 460.081802][T10367] R13: 0000000000000000 R14: 00007fa06b1a5fa0 R15: 00007ffc6374dd78 [ 460.081845][T10367] [ 460.624807][T10377] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1221'. [ 461.065924][T10375] zswap: compressor not available [ 461.343291][T10386] zswap: compressor not available [ 462.177325][T10396] zswap: compressor not available [ 463.108705][T10409] zswap: compressor not available [ 463.442292][T10428] FAULT_INJECTION: forcing a failure. [ 463.442292][T10428] name failslab, interval 1, probability 0, space 0, times 0 [ 463.569719][T10428] CPU: 1 UID: 0 PID: 10428 Comm: syz.2.1233 Not tainted 6.15.0-rc1-syzkaller-00325-g7cdabafc0012 #0 PREEMPT(full) [ 463.569767][T10428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 463.569788][T10428] Call Trace: [ 463.569799][T10428] [ 463.569813][T10428] dump_stack_lvl+0x16c/0x1f0 [ 463.569869][T10428] should_fail_ex+0x512/0x640 [ 463.569906][T10428] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 463.569968][T10428] should_failslab+0xc2/0x120 [ 463.570002][T10428] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 463.570057][T10428] ? __kthread_create_on_node+0x186/0x3f0 [ 463.570116][T10428] kvasprintf+0xbc/0x160 [ 463.570158][T10428] ? __pfx_kvasprintf+0x10/0x10 [ 463.570224][T10428] ? __pfx_dvb_frontend_thread+0x10/0x10 [ 463.570258][T10428] __kthread_create_on_node+0x186/0x3f0 [ 463.570312][T10428] ? __pfx___kthread_create_on_node+0x10/0x10 [ 463.570386][T10428] ? __pfx_dvb_frontend_thread+0x10/0x10 [ 463.570421][T10428] kthread_create_on_node+0xc7/0x100 [ 463.570473][T10428] ? __pfx_kthread_create_on_node+0x10/0x10 [ 463.570532][T10428] ? mark_held_locks+0x49/0x80 [ 463.570583][T10428] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 463.570627][T10428] ? lockdep_hardirqs_on+0x7c/0x110 [ 463.570678][T10428] dvb_frontend_open+0xf47/0x1730 [ 463.570722][T10428] ? __pfx_dvb_frontend_open+0x10/0x10 [ 463.570757][T10428] dvb_device_open+0x26d/0x3b0 [ 463.570792][T10428] ? __pfx_dvb_device_open+0x10/0x10 [ 463.570824][T10428] chrdev_open+0x231/0x6a0 [ 463.570876][T10428] ? __pfx_chrdev_open+0x10/0x10 [ 463.570934][T10428] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 463.570993][T10428] do_dentry_open+0x741/0x1c10 [ 463.571041][T10428] ? __pfx_chrdev_open+0x10/0x10 [ 463.571103][T10428] vfs_open+0x82/0x3f0 [ 463.571142][T10428] path_openat+0x1e5e/0x2d40 [ 463.571260][T10428] ? __pfx_path_openat+0x10/0x10 [ 463.571322][T10428] do_filp_open+0x20b/0x470 [ 463.571373][T10428] ? __pfx_do_filp_open+0x10/0x10 [ 463.571455][T10428] ? alloc_fd+0x471/0x7d0 [ 463.571515][T10428] do_sys_openat2+0x11b/0x1d0 [ 463.571551][T10428] ? __pfx_do_sys_openat2+0x10/0x10 [ 463.571603][T10428] __x64_sys_openat+0x174/0x210 [ 463.571640][T10428] ? __pfx___x64_sys_openat+0x10/0x10 [ 463.571679][T10428] ? rcu_is_watching+0x12/0xc0 [ 463.571733][T10428] do_syscall_64+0xcd/0x260 [ 463.571786][T10428] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.571819][T10428] RIP: 0033:0x7f0f2b18d169 [ 463.571846][T10428] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 463.571878][T10428] RSP: 002b:00007f0f2c061038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 463.571908][T10428] RAX: ffffffffffffffda RBX: 00007f0f2b3a5fa0 RCX: 00007f0f2b18d169 [ 463.571929][T10428] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 463.571950][T10428] RBP: 00007f0f2b20e990 R08: 0000000000000000 R09: 0000000000000000 [ 463.571969][T10428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 463.571989][T10428] R13: 0000000000000000 R14: 00007f0f2b3a5fa0 R15: 00007ffcf90bdc28 [ 463.572031][T10428] [ 463.572109][T10428] i2c i2c-0: dvb_frontend_start: failed to start kthread (-12) [ 463.607330][T10432] i2c i2c-0: new_device: Missing parameters [ 464.562052][T10438] zswap: compressor not available [ 467.692416][T10504] netlink: 338 bytes leftover after parsing attributes in process `syz.1.1252'. [ 467.729091][T10503] netlink: 338 bytes leftover after parsing attributes in process `syz.1.1252'. [ 468.059165][T10514] bridge0: port 3(gretap0) entered blocking state [ 468.065890][T10514] bridge0: port 3(gretap0) entered disabled state [ 468.088681][T10514] gretap0: entered allmulticast mode [ 468.098858][T10514] gretap0: entered promiscuous mode [ 468.105204][T10514] bridge0: port 3(gretap0) entered blocking state [ 468.112093][T10514] bridge0: port 3(gretap0) entered listening state [ 469.909158][T10552] program syz.2.1265 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 470.994425][T10561] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1266'. [ 471.024937][T10561] netlink: 13 bytes leftover after parsing attributes in process `syz.2.1266'. [ 471.267464][T10563] program syz.2.1267 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 472.420688][T10578] FAULT_INJECTION: forcing a failure. [ 472.420688][T10578] name failslab, interval 1, probability 0, space 0, times 0 [ 472.454334][T10578] CPU: 0 UID: 0 PID: 10578 Comm: syz.3.1273 Not tainted 6.15.0-rc1-syzkaller-00325-g7cdabafc0012 #0 PREEMPT(full) [ 472.454381][T10578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 472.454401][T10578] Call Trace: [ 472.454411][T10578] [ 472.454423][T10578] dump_stack_lvl+0x16c/0x1f0 [ 472.454475][T10578] should_fail_ex+0x512/0x640 [ 472.454511][T10578] ? fs_reclaim_acquire+0xae/0x150 [ 472.454565][T10578] should_failslab+0xc2/0x120 [ 472.454596][T10578] __kmalloc_cache_noprof+0x6a/0x3e0 [ 472.454639][T10578] ? hub_ext_port_status+0x5e/0x670 [ 472.454680][T10578] ? usb_control_msg+0xbc/0x4a0 [ 472.454734][T10578] usb_control_msg+0xbc/0x4a0 [ 472.454786][T10578] ? __pfx_usb_control_msg+0x10/0x10 [ 472.454833][T10578] ? add_lock_to_list+0x9d/0x130 [ 472.454889][T10578] hub_ext_port_status+0x14e/0x670 [ 472.454949][T10578] hub_activate+0x6e5/0x1be0 [ 472.455011][T10578] ? __pfx_hub_activate+0x10/0x10 [ 472.455057][T10578] ? find_held_lock+0x2b/0x80 [ 472.455098][T10578] ? proc_do_submiturb+0x19e0/0x3b20 [ 472.455142][T10578] ? usbfs_notify_resume+0x25/0xf0 [ 472.455198][T10578] hub_resume+0xa8/0x3f0 [ 472.455247][T10578] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 472.455298][T10578] ? __pfx_hub_resume+0x10/0x10 [ 472.455347][T10578] ? __pfx_hcd_bus_resume+0x10/0x10 [ 472.455386][T10578] ? arch_stack_walk+0xa6/0x100 [ 472.455436][T10578] usb_resume_interface.constprop.0.isra.0+0x2c2/0x3e0 [ 472.455477][T10578] usb_resume_both+0x273/0x800 [ 472.455513][T10578] ? __pfx_stack_trace_save+0x10/0x10 [ 472.455563][T10578] ? __pfx_usb_resume_both+0x10/0x10 [ 472.455603][T10578] ? mark_held_locks+0x49/0x80 [ 472.455656][T10578] ? __pfx_usb_runtime_resume+0x10/0x10 [ 472.455699][T10578] __rpm_callback+0xc5/0x610 [ 472.455749][T10578] ? __pfx_usb_runtime_resume+0x10/0x10 [ 472.455790][T10578] rpm_callback+0x1b7/0x200 [ 472.455836][T10578] ? __pfx_usb_runtime_resume+0x10/0x10 [ 472.455877][T10578] rpm_resume+0xd0a/0x1310 [ 472.455935][T10578] ? __pfx_rpm_resume+0x10/0x10 [ 472.455978][T10578] ? do_raw_spin_lock+0x12c/0x2b0 [ 472.456014][T10578] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 472.456079][T10578] __pm_runtime_resume+0xb6/0x170 [ 472.456128][T10578] usb_autoresume_device+0x23/0xe0 [ 472.456170][T10578] usb_set_configuration+0x3d9/0x1e20 [ 472.456202][T10578] ? sscanf+0xc7/0x100 [ 472.456236][T10578] ? __pfx_sscanf+0x10/0x10 [ 472.456278][T10578] ? __mutex_lock+0x1ca/0xb90 [ 472.456333][T10578] bConfigurationValue_store+0x100/0x180 [ 472.456367][T10578] ? __pfx_bConfigurationValue_store+0x10/0x10 [ 472.456403][T10578] ? find_held_lock+0x2b/0x80 [ 472.456442][T10578] ? sysfs_file_kobj+0xe4/0x290 [ 472.456488][T10578] ? __pfx_bConfigurationValue_store+0x10/0x10 [ 472.456519][T10578] dev_attr_store+0x55/0x80 [ 472.456555][T10578] ? __pfx_dev_attr_store+0x10/0x10 [ 472.456583][T10578] sysfs_kf_write+0xef/0x150 [ 472.456629][T10578] kernfs_fop_write_iter+0x351/0x510 [ 472.456666][T10578] ? __pfx_sysfs_kf_write+0x10/0x10 [ 472.456714][T10578] iter_file_splice_write+0x91c/0x1150 [ 472.456787][T10578] ? __pfx_iter_file_splice_write+0x10/0x10 [ 472.456842][T10578] ? __pfx_copy_splice_read+0x10/0x10 [ 472.456908][T10578] ? __pfx_iter_file_splice_write+0x10/0x10 [ 472.456956][T10578] direct_splice_actor+0x18f/0x6c0 [ 472.457005][T10578] splice_direct_to_actor+0x342/0xa30 [ 472.457051][T10578] ? __pfx_direct_splice_actor+0x10/0x10 [ 472.457104][T10578] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 472.457145][T10578] ? get_pid_task+0xfc/0x250 [ 472.457186][T10578] do_splice_direct+0x174/0x240 [ 472.457248][T10578] ? __pfx_do_splice_direct+0x10/0x10 [ 472.457294][T10578] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 472.457347][T10578] ? rw_verify_area+0xcf/0x680 [ 472.457391][T10578] do_sendfile+0xafd/0xe50 [ 472.457442][T10578] ? __pfx_do_sendfile+0x10/0x10 [ 472.457486][T10578] ? __fget_files+0x20e/0x3c0 [ 472.457549][T10578] __x64_sys_sendfile64+0x1d8/0x220 [ 472.457579][T10578] ? ksys_write+0x1b9/0x240 [ 472.457623][T10578] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 472.457653][T10578] ? rcu_is_watching+0x12/0xc0 [ 472.457706][T10578] do_syscall_64+0xcd/0x260 [ 472.457757][T10578] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.457789][T10578] RIP: 0033:0x7f085c38d169 [ 472.457816][T10578] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 472.457846][T10578] RSP: 002b:00007f085d2ab038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 472.457875][T10578] RAX: ffffffffffffffda RBX: 00007f085c5a5fa0 RCX: 00007f085c38d169 [ 472.457895][T10578] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 472.457913][T10578] RBP: 00007f085d2ab090 R08: 0000000000000000 R09: 0000000000000000 [ 472.457932][T10578] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 472.457950][T10578] R13: 0000000000000000 R14: 00007f085c5a5fa0 R15: 00007ffc12bc6a88 [ 472.457992][T10578] [ 472.458011][T10578] hub 8-0:1.0: hub_ext_port_status failed (err = -12) [ 472.836023][T10585] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1276'. [ 472.866632][T10578] hub 8-0:1.0: USB hub found [ 472.902867][ C0] vkms_vblank_simulate: vblank timer overrun [ 472.946522][T10587] program syz.0.1275 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 472.966430][T10578] hub 8-0:1.0: 1 port detected [ 472.980573][T10585] netlink: 'syz.1.1276': attribute type 1 has an invalid length. [ 473.019844][T10585] netlink: 13 bytes leftover after parsing attributes in process `syz.1.1276'. [ 474.131286][T10603] FAULT_INJECTION: forcing a failure. [ 474.131286][T10603] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 474.235722][T10603] CPU: 1 UID: 0 PID: 10603 Comm: syz.0.1281 Not tainted 6.15.0-rc1-syzkaller-00325-g7cdabafc0012 #0 PREEMPT(full) [ 474.235767][T10603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 474.235785][T10603] Call Trace: [ 474.235796][T10603] [ 474.235808][T10603] dump_stack_lvl+0x16c/0x1f0 [ 474.235858][T10603] should_fail_ex+0x512/0x640 [ 474.235899][T10603] _copy_to_user+0x32/0xd0 [ 474.235942][T10603] simple_read_from_buffer+0xcb/0x170 [ 474.236006][T10603] proc_fail_nth_read+0x197/0x270 [ 474.236053][T10603] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 474.236102][T10603] ? rw_verify_area+0xcf/0x680 [ 474.236140][T10603] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 474.236185][T10603] vfs_read+0x1de/0xc70 [ 474.236234][T10603] ? __pfx___mutex_lock+0x10/0x10 [ 474.236282][T10603] ? __pfx_vfs_read+0x10/0x10 [ 474.236338][T10603] ? __fget_files+0x20e/0x3c0 [ 474.236405][T10603] ksys_read+0x12a/0x240 [ 474.236449][T10603] ? __pfx_ksys_read+0x10/0x10 [ 474.236505][T10603] do_syscall_64+0xcd/0x260 [ 474.236558][T10603] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.236591][T10603] RIP: 0033:0x7f2415f8bb7c [ 474.236627][T10603] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 474.236658][T10603] RSP: 002b:00007f2416d59030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 474.236690][T10603] RAX: ffffffffffffffda RBX: 00007f24161a5fa0 RCX: 00007f2415f8bb7c [ 474.236709][T10603] RDX: 000000000000000f RSI: 00007f2416d590a0 RDI: 0000000000000004 [ 474.236727][T10603] RBP: 00007f2416d59090 R08: 0000000000000000 R09: 0000000000000000 [ 474.236745][T10603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 474.236762][T10603] R13: 0000000000000000 R14: 00007f24161a5fa0 R15: 00007fff06b316f8 [ 474.236801][T10603] [ 475.852522][T10601] kexec: Could not allocate control_code_buffer [ 476.062902][T10618] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1286'. [ 476.072493][T10620] FAULT_INJECTION: forcing a failure. [ 476.072493][T10620] name failslab, interval 1, probability 0, space 0, times 0 [ 476.080856][T10618] netlink: 13 bytes leftover after parsing attributes in process `syz.0.1286'. [ 476.139574][T10620] CPU: 0 UID: 0 PID: 10620 Comm: syz.1.1285 Not tainted 6.15.0-rc1-syzkaller-00325-g7cdabafc0012 #0 PREEMPT(full) [ 476.139619][T10620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 476.139639][T10620] Call Trace: [ 476.139649][T10620] [ 476.139662][T10620] dump_stack_lvl+0x16c/0x1f0 [ 476.139712][T10620] should_fail_ex+0x512/0x640 [ 476.139746][T10620] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 476.139817][T10620] should_failslab+0xc2/0x120 [ 476.139865][T10620] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 476.139921][T10620] ? __kthread_create_on_node+0x186/0x3f0 [ 476.139979][T10620] kvasprintf+0xbc/0x160 [ 476.140022][T10620] ? __pfx_kvasprintf+0x10/0x10 [ 476.140082][T10620] ? __pfx_dvb_frontend_thread+0x10/0x10 [ 476.140114][T10620] __kthread_create_on_node+0x186/0x3f0 [ 476.140166][T10620] ? __pfx___mutex_trylock_common+0x10/0x10 [ 476.140200][T10620] ? __pfx___kthread_create_on_node+0x10/0x10 [ 476.140277][T10620] ? __pfx_dvb_frontend_thread+0x10/0x10 [ 476.140333][T10620] kthread_create_on_node+0xc7/0x100 [ 476.140386][T10620] ? __pfx_kthread_create_on_node+0x10/0x10 [ 476.140448][T10620] ? mark_held_locks+0x49/0x80 [ 476.140500][T10620] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 476.140545][T10620] ? lockdep_hardirqs_on+0x7c/0x110 [ 476.140600][T10620] dvb_frontend_open+0xf47/0x1730 [ 476.140650][T10620] ? __pfx_dvb_frontend_open+0x10/0x10 [ 476.140685][T10620] dvb_device_open+0x26d/0x3b0 [ 476.140720][T10620] ? __pfx_dvb_device_open+0x10/0x10 [ 476.140754][T10620] chrdev_open+0x231/0x6a0 [ 476.140805][T10620] ? __pfx_apparmor_file_open+0x10/0x10 [ 476.140847][T10620] ? __pfx_chrdev_open+0x10/0x10 [ 476.140902][T10620] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 476.140958][T10620] do_dentry_open+0x741/0x1c10 [ 476.141005][T10620] ? __pfx_chrdev_open+0x10/0x10 [ 476.141065][T10620] vfs_open+0x82/0x3f0 [ 476.141104][T10620] path_openat+0x1e5e/0x2d40 [ 476.141169][T10620] ? __pfx_path_openat+0x10/0x10 [ 476.141230][T10620] do_filp_open+0x20b/0x470 [ 476.141287][T10620] ? __pfx_do_filp_open+0x10/0x10 [ 476.141369][T10620] ? alloc_fd+0x471/0x7d0 [ 476.141429][T10620] do_sys_openat2+0x11b/0x1d0 [ 476.141464][T10620] ? __pfx_do_sys_openat2+0x10/0x10 [ 476.141518][T10620] __x64_sys_openat+0x174/0x210 [ 476.141554][T10620] ? __pfx___x64_sys_openat+0x10/0x10 [ 476.141592][T10620] ? rcu_is_watching+0x12/0xc0 [ 476.141646][T10620] do_syscall_64+0xcd/0x260 [ 476.141698][T10620] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.141731][T10620] RIP: 0033:0x7fa06af8d169 [ 476.141758][T10620] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 476.141790][T10620] RSP: 002b:00007fa06be1d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 476.141820][T10620] RAX: ffffffffffffffda RBX: 00007fa06b1a5fa0 RCX: 00007fa06af8d169 [ 476.141841][T10620] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 476.141861][T10620] RBP: 00007fa06b00e990 R08: 0000000000000000 R09: 0000000000000000 [ 476.141880][T10620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 476.141899][T10620] R13: 0000000000000000 R14: 00007fa06b1a5fa0 R15: 00007ffc6374dd78 [ 476.141941][T10620] [ 476.142085][T10620] i2c i2c-0: dvb_frontend_start: failed to start kthread (-12) [ 480.055390][T10654] program syz.1.1295 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 481.206930][T10662] ================================================================== [ 481.215067][T10662] BUG: KASAN: slab-use-after-free in dvb_device_open+0x36a/0x3b0 [ 481.222855][T10662] Read of size 8 at addr ffff88814130c218 by task syz.1.1298/10662 [ 481.230787][T10662] [ 481.233148][T10662] CPU: 1 UID: 0 PID: 10662 Comm: syz.1.1298 Not tainted 6.15.0-rc1-syzkaller-00325-g7cdabafc0012 #0 PREEMPT(full) [ 481.233193][T10662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 481.233213][T10662] Call Trace: [ 481.233226][T10662] [ 481.233239][T10662] dump_stack_lvl+0x116/0x1f0 [ 481.233293][T10662] print_report+0xc3/0x670 [ 481.233345][T10662] ? __virt_addr_valid+0x5e/0x590 [ 481.233395][T10662] ? __phys_addr+0xc6/0x150 [ 481.233444][T10662] ? dvb_device_open+0x36a/0x3b0 [ 481.233477][T10662] kasan_report+0xe0/0x110 [ 481.233507][T10662] ? dvb_device_open+0x36a/0x3b0 [ 481.233542][T10662] ? __pfx_dvb_device_open+0x10/0x10 [ 481.233588][T10662] dvb_device_open+0x36a/0x3b0 [ 481.233619][T10662] ? __pfx_dvb_device_open+0x10/0x10 [ 481.233652][T10662] chrdev_open+0x231/0x6a0 [ 481.233701][T10662] ? __pfx_apparmor_file_open+0x10/0x10 [ 481.233742][T10662] ? __pfx_chrdev_open+0x10/0x10 [ 481.233793][T10662] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 481.233844][T10662] do_dentry_open+0x741/0x1c10 [ 481.233889][T10662] ? __pfx_chrdev_open+0x10/0x10 [ 481.233949][T10662] vfs_open+0x82/0x3f0 [ 481.233984][T10662] path_openat+0x1e5e/0x2d40 [ 481.234038][T10662] ? __pfx_path_openat+0x10/0x10 [ 481.234089][T10662] do_filp_open+0x20b/0x470 [ 481.234136][T10662] ? __pfx_do_filp_open+0x10/0x10 [ 481.234197][T10662] ? alloc_fd+0x471/0x7d0 [ 481.234247][T10662] do_sys_openat2+0x11b/0x1d0 [ 481.234279][T10662] ? __pfx_do_sys_openat2+0x10/0x10 [ 481.234321][T10662] __x64_sys_openat+0x174/0x210 [ 481.234367][T10662] ? __pfx___x64_sys_openat+0x10/0x10 [ 481.234401][T10662] ? rcu_is_watching+0x12/0xc0 [ 481.234443][T10662] do_syscall_64+0xcd/0x260 [ 481.234488][T10662] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.234519][T10662] RIP: 0033:0x7fa06af8d169 [ 481.234542][T10662] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 481.234572][T10662] RSP: 002b:00007fa06be1d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 481.234620][T10662] RAX: ffffffffffffffda RBX: 00007fa06b1a5fa0 RCX: 00007fa06af8d169 [ 481.234641][T10662] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 481.234661][T10662] RBP: 00007fa06b00e990 R08: 0000000000000000 R09: 0000000000000000 [ 481.234680][T10662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 481.234699][T10662] R13: 0000000000000000 R14: 00007fa06b1a5fa0 R15: 00007ffc6374dd78 [ 481.234730][T10662] [ 481.234741][T10662] [ 481.266349][T10660] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1297'. [ 481.267794][T10662] Allocated by task 1: [ 481.267811][T10662] kasan_save_stack+0x33/0x60 [ 481.282222][T10660] netlink: 13 bytes leftover after parsing attributes in process `syz.2.1297'. [ 481.286736][T10662] kasan_save_track+0x14/0x30 [ 481.286782][T10662] __kasan_kmalloc+0xaa/0xb0 [ 481.519584][T10662] dvb_register_device+0x1e4/0x2370 [ 481.524810][T10662] dvb_register_frontend+0x5a6/0x880 [ 481.530132][T10662] vidtv_bridge_probe+0x459/0xa90 [ 481.535204][T10662] platform_probe+0xff/0x1f0 [ 481.539816][T10662] really_probe+0x23e/0xa90 [ 481.544363][T10662] __driver_probe_device+0x1de/0x440 [ 481.549680][T10662] driver_probe_device+0x4c/0x1b0 [ 481.554734][T10662] __driver_attach+0x283/0x580 [ 481.559617][T10662] bus_for_each_dev+0x13b/0x1d0 [ 481.564523][T10662] bus_add_driver+0x2e9/0x690 [ 481.569230][T10662] driver_register+0x15c/0x4b0 [ 481.574017][T10662] vidtv_bridge_init+0x45/0x80 [ 481.578830][T10662] do_one_initcall+0x120/0x6e0 [ 481.583634][T10662] kernel_init_freeable+0x5c2/0x900 [ 481.588862][T10662] kernel_init+0x1c/0x2b0 [ 481.593214][T10662] ret_from_fork+0x45/0x80 [ 481.597649][T10662] ret_from_fork_asm+0x1a/0x30 [ 481.602445][T10662] [ 481.604772][T10662] Freed by task 10620: [ 481.608846][T10662] kasan_save_stack+0x33/0x60 [ 481.613557][T10662] kasan_save_track+0x14/0x30 [ 481.618275][T10662] kasan_save_free_info+0x3b/0x60 [ 481.623323][T10662] __kasan_slab_free+0x51/0x70 [ 481.628117][T10662] kfree+0x2b6/0x4d0 [ 481.632118][T10662] dvb_device_put.part.0+0x60/0x90 [ 481.637248][T10662] dvb_device_open+0x2a4/0x3b0 [ 481.642034][T10662] chrdev_open+0x231/0x6a0 [ 481.646511][T10662] do_dentry_open+0x741/0x1c10 [ 481.651302][T10662] vfs_open+0x82/0x3f0 [ 481.655385][T10662] path_openat+0x1e5e/0x2d40 [ 481.660008][T10662] do_filp_open+0x20b/0x470 [ 481.664550][T10662] do_sys_openat2+0x11b/0x1d0 [ 481.669261][T10662] __x64_sys_openat+0x174/0x210 [ 481.674133][T10662] do_syscall_64+0xcd/0x260 [ 481.678755][T10662] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.684670][T10662] [ 481.686997][T10662] The buggy address belongs to the object at ffff88814130c200 [ 481.686997][T10662] which belongs to the cache kmalloc-256 of size 256 [ 481.701062][T10662] The buggy address is located 24 bytes inside of [ 481.701062][T10662] freed 256-byte region [ffff88814130c200, ffff88814130c300) [ 481.714881][T10662] [ 481.717217][T10662] The buggy address belongs to the physical page: [ 481.723646][T10662] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x14130c [ 481.732511][T10662] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 481.741024][T10662] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff) [ 481.748680][T10662] page_type: f5(slab) [ 481.752675][T10662] raw: 057ff00000000040 ffff88801b441b40 dead000000000122 0000000000000000 [ 481.761362][T10662] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 481.769969][T10662] head: 057ff00000000040 ffff88801b441b40 dead000000000122 0000000000000000 [ 481.778755][T10662] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 481.787448][T10662] head: 057ff00000000001 ffffea000504c301 00000000ffffffff 00000000ffffffff [ 481.796139][T10662] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 481.804825][T10662] page dumped because: kasan: bad access detected [ 481.811272][T10662] page_owner tracks the page as allocated [ 481.817005][T10662] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 24891614315, free_ts 0 [ 481.836737][T10662] post_alloc_hook+0x181/0x1b0 [ 481.841542][T10662] get_page_from_freelist+0x1193/0x39b0 [ 481.847139][T10662] __alloc_frozen_pages_noprof+0x263/0x23a0 [ 481.853063][T10662] alloc_pages_mpol+0x1fb/0x550 [ 481.857945][T10662] new_slab+0x23c/0x330 [ 481.862120][T10662] ___slab_alloc+0xd9c/0x1940 [ 481.866825][T10662] __slab_alloc.constprop.0+0x56/0xb0 [ 481.872231][T10662] __kmalloc_cache_noprof+0xfb/0x3e0 [ 481.877542][T10662] bus_add_driver+0x92/0x690 [ 481.882166][T10662] driver_register+0x15c/0x4b0 [ 481.886951][T10662] usb_register_driver+0x216/0x4d0 [ 481.892079][T10662] do_one_initcall+0x120/0x6e0 [ 481.896875][T10662] kernel_init_freeable+0x5c2/0x900 [ 481.902109][T10662] kernel_init+0x1c/0x2b0 [ 481.906455][T10662] ret_from_fork+0x45/0x80 [ 481.910898][T10662] ret_from_fork_asm+0x1a/0x30 [ 481.915695][T10662] page_owner free stack trace missing [ 481.921069][T10662] [ 481.923398][T10662] Memory state around the buggy address: [ 481.929036][T10662] ffff88814130c100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 481.937110][T10662] ffff88814130c180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 481.945182][T10662] >ffff88814130c200: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 481.953252][T10662] ^ [ 481.958108][T10662] ffff88814130c280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 481.966185][T10662] ffff88814130c300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 481.974260][T10662] ================================================================== [ 482.013789][T10662] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 482.021053][T10662] CPU: 0 UID: 0 PID: 10662 Comm: syz.1.1298 Not tainted 6.15.0-rc1-syzkaller-00325-g7cdabafc0012 #0 PREEMPT(full) [ 482.033190][T10662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 482.043291][T10662] Call Trace: [ 482.046611][T10662] [ 482.049567][T10662] dump_stack_lvl+0x3d/0x1f0 [ 482.054227][T10662] panic+0x71c/0x800 [ 482.058251][T10662] ? __pfx_panic+0x10/0x10 [ 482.062708][T10662] ? mark_held_locks+0x49/0x80 [ 482.067545][T10662] ? preempt_schedule_thunk+0x16/0x30 [ 482.072997][T10662] ? dvb_device_open+0x36a/0x3b0 [ 482.077989][T10662] ? preempt_schedule_common+0x44/0xc0 [ 482.083513][T10662] ? dvb_device_open+0x36a/0x3b0 [ 482.088509][T10662] check_panic_on_warn+0xab/0xb0 [ 482.094710][T10662] end_report+0x107/0x170 [ 482.099095][T10662] kasan_report+0xee/0x110 [ 482.103539][T10662] ? dvb_device_open+0x36a/0x3b0 [ 482.108513][T10662] ? __pfx_dvb_device_open+0x10/0x10 [ 482.113821][T10662] dvb_device_open+0x36a/0x3b0 [ 482.118603][T10662] ? __pfx_dvb_device_open+0x10/0x10 [ 482.123906][T10662] chrdev_open+0x231/0x6a0 [ 482.128384][T10662] ? __pfx_apparmor_file_open+0x10/0x10 [ 482.133954][T10662] ? __pfx_chrdev_open+0x10/0x10 [ 482.138923][T10662] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 482.145721][T10662] do_dentry_open+0x741/0x1c10 [ 482.150516][T10662] ? __pfx_chrdev_open+0x10/0x10 [ 482.155506][T10662] vfs_open+0x82/0x3f0 [ 482.159595][T10662] path_openat+0x1e5e/0x2d40 [ 482.164246][T10662] ? __pfx_path_openat+0x10/0x10 [ 482.169235][T10662] do_filp_open+0x20b/0x470 [ 482.173778][T10662] ? __pfx_do_filp_open+0x10/0x10 [ 482.178865][T10662] ? alloc_fd+0x471/0x7d0 [ 482.183240][T10662] do_sys_openat2+0x11b/0x1d0 [ 482.187942][T10662] ? __pfx_do_sys_openat2+0x10/0x10 [ 482.193170][T10662] __x64_sys_openat+0x174/0x210 [ 482.198044][T10662] ? __pfx___x64_sys_openat+0x10/0x10 [ 482.203436][T10662] ? rcu_is_watching+0x12/0xc0 [ 482.208241][T10662] do_syscall_64+0xcd/0x260 [ 482.212783][T10662] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.218696][T10662] RIP: 0033:0x7fa06af8d169 [ 482.223131][T10662] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 482.242766][T10662] RSP: 002b:00007fa06be1d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 482.251375][T10662] RAX: ffffffffffffffda RBX: 00007fa06b1a5fa0 RCX: 00007fa06af8d169 [ 482.259360][T10662] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 482.267348][T10662] RBP: 00007fa06b00e990 R08: 0000000000000000 R09: 0000000000000000 [ 482.275335][T10662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 482.283327][T10662] R13: 0000000000000000 R14: 00007fa06b1a5fa0 R15: 00007ffc6374dd78 [ 482.291338][T10662] [ 482.294763][T10662] Kernel Offset: disabled [ 482.299126][T10662] Rebooting in 86400 seconds..