last executing test programs: 9.746132879s ago: executing program 0 (id=1382): mmap$auto(0xfffffffffffffffb, 0x28009, 0x9, 0x80000100000eb1, 0x40000000000a1, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/devices/platform/dummy_udc.4/udc/dummy_udc.4/function\x00', 0x0, 0x0) ustat$auto(0x1, &(0x7f0000000440)={0x5, 0xfffffffffffff001, "a5434da71592", "37314ad4367c"}) read$auto(r0, 0x0, 0x20) socket(0x10, 0x2, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/devices/virtual/block/nbd12/queue/write_cache\x00', 0x80002, 0x0) sendfile$auto(r1, r1, 0x0, 0x400000000003) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x401, 0x1ff, 0x7, 0x48, 0x6ab, 0x1ffdf, 0x80000007, 0x200003, 0x2, 0xa121, 0x3, 0x6, 0x4, 0xb4, 0xa, 0x2, 0x10001, 0x80, 0x100000000, 0x800000, 0x3400, 0x8, 0x200, 0x800, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x1fe, 0xd) r2 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) ioctl$auto_PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x100000000000206, 0x50b301a, 0x0, 0x2, 0x0, 0x2}) r3 = open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) write$auto_ftrace_enable_fops_trace_events(r3, &(0x7f0000000580)="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", 0x287) open(&(0x7f0000000000)='./file0\x00', 0xc9594d8c1ee11af6, 0x92) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd8\x00', 0x20000, 0x0) ioctl$auto(r4, 0xab04, 0xffffffffffffffff) fcntl$auto(0x8000000000000001, 0xbe6a, 0x8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r5 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x241, 0x0) write$auto_seq_oss_f_ops_seq_oss(r5, &(0x7f0000000200)="a5e15cd5d29f1bd27530ae4b63c8e13fd10d7b956affe2d4e98441a3301c02a07691cac32e5dff3b1bd403411612513ada2f9a8db1a09d09fe77ef21544f9d7b", 0x40) mlockall$auto(0x7) prctl$auto(0x29, 0x0, 0x0, 0x0, 0x0) io_uring_setup$auto(0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) r6 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r6, 0xffffffffffdffe00, &(0x7f0000000140)=';') r7 = openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$auto(0x3, 0x40086200, r7) uname$auto(&(0x7f00000003c0)={"f3def6cbe454001000000000fadfe18915000010f27625b151a34e371ee3f0286c2a04040000000000169df350ee378638aa1310f289c42581c9000000002344a1", "7a32cb0762e3448f9877b91f76b3204b73de438141c40eccab28374af5342917765515a29cef7f1edba2b8744cb34364bf8f7c9ea4478f9b56867cb1cfda99be8d", "c8d0282d905a273f7f9b7f17f0f029872090eb4c21ac36368dccb68b979a998e467fec28c89948d88f7f442131d52ba9bbaffef900c8842ec2f743faacb99e0e3e", "6ae72c0cc36477c074c59227d4190b734c9f953cb3da9ded40cdb930aae90b4d6e01bb5c1a8ddae1615b1fb9ca7bcdfe882c83a62f8322522c4fe4b944c52fc1fa", "c715078db76879d2384418daa92cedc8bb3d44dd38c9d986b7650184926a4f50e50c21ddb67b6d27ce83b67ffb4d5e8f55d730df285bcb8806b3dd5723de5895e5", "c4e4e574f52565b120a0ff5419b66c94b117bbfda244070860f0a7c99d64463cf232e9436b7ecbf949d1c76bb4671f55d1f84f78ce4048077a5131bcd10244dad0"}) madvise$auto(0x0, 0x200007, 0x19) 9.220006739s ago: executing program 0 (id=1384): mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) ioctl$auto_TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptya5\x00', 0x62c00, 0x0) close_range$auto(0x2, 0xa, 0x0) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x101001, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000500)='/dev/tty34\x00', 0x2200, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x4, 0x948b, 0x3, 0x15f4da07, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x8]}, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mincore$auto(0x1000, 0x8001, 0x0) unshare$auto(0x20000080) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2710}, 0x10) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) munmap$auto(0x20001000, 0x7fb3) ptrace$auto(0x10, 0x10000000000001, 0xffffffffffffff56, 0x868f) accept4$auto(0xffffffffffffffff, &(0x7f0000000180)=@l2tp={0x2, 0x0, @remote, 0x3}, &(0x7f00000001c0)=0x5, 0x8001) sendmsg$auto(0xffffffffffffffff, 0x0, 0xfff) r1 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/oom_score\x00', 0x0, 0x0) read$auto_proc_single_file_operations_base(r1, &(0x7f0000000140)=""/44, 0x2c) capset$auto(0x0, 0x0) open(0x0, 0x22240, 0x154) select$auto(0x9, &(0x7f00000000c0)={[0xeeda, 0x5, 0x100000003, 0x9, 0x6, 0x1ff, 0x100000000, 0x3, 0x4, 0x401, 0x0, 0x8, 0x6, 0x9a8c, 0x9, 0x10001]}, &(0x7f0000000200)={[0x8, 0x8000000000000000, 0x2, 0xb, 0x1, 0x9, 0x0, 0x7fff, 0xa, 0x18f, 0xfffffffffffffff9, 0x3, 0x5a4, 0x1000, 0x80000001, 0x1]}, 0x0, &(0x7f0000000280)={0x10006, 0xcc}) 6.267007686s ago: executing program 2 (id=1390): r0 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x8e051, r0, 0x0) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYRESHEX, @ANYRES32=0x4, @ANYBLOB="080001002e53520008000200428fb782334c9b78e78bd684a987dba0514504e4579d38014bdda066703d145e66fb3cdf1544dde9f049deb92ee963958609026cc3da0a58f226690075939c6fe0a0e4529f8f67511e97571487af1be338514407906990f6ffa4d29bb76dc4f02e9e0a5957d1215c8640c6679622a9078c4d077c770607ce496743731a1becb7dbfaccfd216a3906892a1bcd3f7f61a5385297f788499a4789d6072331dc0557da7aa7aa", @ANYBLOB="5b8052e66996a84256fabb43a97f3c3c85dc622df30c41783d838df692a882fe0e41ecca42b93bf7dbd797c6b9fb11bbe25df8a136be94d478b022eb4115bb5a4376b9e3fa774bc9dfe73188a8f47f1d6d058dc9e33045dfd351e00eff33e78b233f453408e5b9641df9c7c6e13bf51a4288ad76552c5aa59aadd2efcbf8d9819b4a86feb7578bd0e76703d3e0fdc0cf7cf7b0e431dcea432752d3100624b567140f3ffbca2cda6ca96953d556fd9c1de274554f169e0e6db18616e152d40f9dbe695583348ecddd5b8451c309ced073cb6aa50c5e4c530b22", @ANYRES16=r0], 0x34}, 0x1, 0x0, 0x0, 0x20000800}, 0x880) migrate_pages$auto(0x0, 0x8, 0x0, 0x0) bpf$auto(0xd, 0x0, 0x6f5) r1 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/007/001\x00', 0x40ed01, 0x0) ioctl$auto_USBDEVFS_SUBMITURB32(r2, 0x802c550a, &(0x7f0000000300)=ANY=[]) ioctl$auto(r2, 0x4008550c, 0xffffffffffffffff) openat$auto_evm_xattr_ops_evm_secfs(0xffffffffffffff9c, 0x0, 0x2c0, 0x0) ioctl$auto_PAGEMAP_SCAN(r1, 0xc0606610, 0x0) init_module$auto(0x0, 0xffff9, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x8000000000000000, 0x15) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x1, 0x2) capset$auto(0x0, 0x0) prctl$auto(0x23, 0x80000000000a, 0x80000001, 0x0, 0x0) futex_waitv$auto(&(0x7f0000000000)={0xb, 0x1c380, 0x82}, 0x1, 0x0, 0x0, 0x623d) openat$auto_proc_environ_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/environ\x00', 0x2000, 0x0) mmap$auto(0xd05, 0x2020008, 0x1000, 0x12, 0xffffffffffffffff, 0x8040) openat$auto_tracing_saved_cmdlines_fops_trace(0xffffffffffffff9c, 0x0, 0xa00, 0x0) madvise$auto(0x8, 0x0, 0x17) socket$nl_generic(0x10, 0x3, 0x10) r3 = open(0x0, 0x591002, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) vmsplice$auto(r4, 0x0, 0x2, 0x5) read$auto(r3, 0x0, 0x6) 5.398891929s ago: executing program 2 (id=1391): r0 = socket(0xa, 0x3, 0x3b) io_cancel$auto(0x9, &(0x7f0000000280)={0x4, 0xe71e, 0x3, 0x8, 0x3, r0, 0x100000000, 0x5, 0x5, 0x0, 0x0, r0}, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000140), 0xffffffffffffffff) r3 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x129800, 0x0) ioctl$auto(r3, 0x921064ac, 0xffffffffffffffff) sendmsg$auto_NETDEV_CMD_QUEUE_GET(r1, &(0x7f0000000200)={0x0, 0x2000, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010025bd7000fbdbdf0002"], 0x1c}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) 5.279973832s ago: executing program 1 (id=1392): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capset$auto(&(0x7f0000000100)={0x20080522}, 0x0) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) fchown$auto(r0, 0xffffffffffffffff, 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) bpf$auto(0x0, &(0x7f0000000100)=@bpf_attr_4={0x16, 0x4, 0x80000001, 0x8}, 0x6f4) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000100)={{@raw=0x9, 0x85, 0x20e, 0x9, "669cbbd9e97551b991bea188e0f1a57ce2a1facac1f00b2f4ab8635524133f9e22c7717f6050f2d2252ca5f2"}, 0x0, @integer64=@value=[0x9, 0x7, 0xc2c3, 0x3, 0x8, 0x7, 0x4, 0x7, 0x80, 0x6, 0xfffffffffffffffd, 0x8000000000000001, 0x0, 0x9, 0x6, 0x1, 0x8, 0x5, 0x7ffffffffffffffc, 0x58a2, 0x5, 0xad, 0x7, 0x1000ffffe, 0x2, 0x85d7a604f, 0xc01, 0x7fffffff, 0x8, 0xff, 0x8, 0x9, 0x4, 0xfffffffffffffffd, 0x10000000000007, 0x0, 0x3, 0x9, 0x6, 0x8000000000000000, 0xfff, 0x4, 0x4, 0x4, 0x8001, 0x3, 0x3, 0x2, 0x7fffffff, 0x81, 0x2, 0x4, 0x5, 0x7, 0xfffffffffffffffd, 0x7fff, 0xd468, 0x9, 0x612, 0xffff, 0xf60d, 0x5, 0x6, 0x1], "282f77b07e718ed4d99a34617774e3a82f982e0f05e516c299a28a585e87e0d908e2c8e50de5016f1de5d432da2cc20e951d8fcdc4f791a11996aad5af504c0d9927e62ef70b23a13735a4fe805c1ce1b6b1d83d21bb42794ec925b4547a3d52d4b5210392111e181719fef9d685b6534b171d76ad633f94a608b818600a6c85"}) 5.167163929s ago: executing program 3 (id=1393): close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) openat$auto_proc_pid_smaps_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/smaps\x00', 0xc0000, 0x0) open(&(0x7f0000000100)='.\x00', 0x591083, 0x408) socketpair$auto(0x3, 0x4, 0x8000000000000000, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) open(0x0, 0x22240, 0x55) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$auto(0x3, 0x40106f52, r0) 5.041159242s ago: executing program 2 (id=1394): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0xa, 0x0) r0 = socket(0x10, 0x2, 0xc) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) fanotify_init$auto(0x65, 0x2) pipe$auto(0x0) prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x801, 0x0) write$auto_seq_oss_f_ops_seq_oss(r1, &(0x7f0000000740)="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", 0x318) dup2$auto(0x5, 0x4) splice$auto(0x4, 0x0, 0x2, 0x0, 0x80000001, 0x9) write$auto(0x6, 0x0, 0x100000001) sysfs$auto(0x2, 0x2e, 0x0) setsockopt$auto(0x3, 0x1, 0x2a, 0x0, 0x9) recvfrom$auto(0x3, 0x0, 0x80000000002, 0x6, 0x0, 0x0) r2 = openat$auto_userio_fops_userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) read$auto_userio_fops_userio(r2, 0x0, 0x0) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x80) openat$auto_proc_mountstats_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000), 0x208080, 0x0) close_range$auto(0x2, 0x8, 0x0) (fail_nth: 2) madvise$auto(0x0, 0xffffffffffff0005, 0x19) syz_clone(0x68000000, 0x0, 0x0, 0x0, 0x0, 0x0) madvise$auto(0x0, 0x4, 0x1) madvise$auto(0x0, 0x2003ec, 0x14) 4.987320762s ago: executing program 1 (id=1395): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_smc_pnetid(0x0, r0) r1 = socket(0xa, 0x1, 0x84) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, 0x0, 0xc800) socket(0x10, 0x2, 0x4) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x10b402, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x103400, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000001c00)=""/4111, 0x100f) pread64$auto(r2, 0x0, 0x100000001, 0x100) sendmsg$auto_OVS_VPORT_CMD_DEL(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000803}, 0x40001) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20b42, 0x0) mmap$auto(0x0, 0x2020009, 0x9, 0xeb1, 0xfffefffffffffffa, 0x8000) splice$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000003140), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_PHY_GET(r4, &(0x7f0000003200)={0x0, 0x0, &(0x7f00000031c0)={&(0x7f0000000000)={0x2c, r5, 0x301, 0x70bd26, 0x25dfdbff, {0x2d, 0x0, 0xa6}, [@ETHTOOL_A_PHY_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2404c012}, 0x80) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) pipe2$auto(0x0, 0x80) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) setrlimit$auto(0x1000000007, 0x0) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) 4.798384518s ago: executing program 3 (id=1396): mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) r0 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r0, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) r1 = socket(0x1e, 0x4, 0x0) setsockopt$auto(r1, 0x10f, 0x87, 0x0, 0x14) write$auto(r0, 0x0, 0x9) close_range$auto(0x2, 0x8, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_smc_pnetid(0x0, r2) r3 = socket(0xa, 0x1, 0x84) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, 0x0, 0xc800) socket(0x10, 0x2, 0x4) r4 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x10b402, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x103400, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000001c00)=""/4111, 0x100f) pread64$auto(r4, 0x0, 0x100000001, 0x100) sendmsg$auto_OVS_VPORT_CMD_DEL(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000803}, 0x40001) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20b42, 0x0) mmap$auto(0x0, 0x2020009, 0x9, 0xeb1, 0xfffefffffffffffa, 0x8000) splice$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x2) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000003140), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_PHY_GET(r6, &(0x7f0000003200)={0x0, 0x0, &(0x7f00000031c0)={&(0x7f0000000000)={0x2c, r7, 0x301, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_PHY_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2404c012}, 0x80) 4.320775877s ago: executing program 1 (id=1397): adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0xd4, 0x1, 0x6, 0x0, 0x1, 0x368e, 0x2, {0x100000000, 0x10000}, 0x5, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x9, 0x81, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x804}) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000040), 0x8300, 0x0) ioctl$auto_RTC_PIE_ON(r0, 0x7005, 0x0) readv$auto(r0, &(0x7f00000004c0)={0x0, 0x2004}, 0x5) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='x', @ANYRES16=r1, @ANYBLOB], 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x400c004) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio1\x00', 0x20b42, 0x0) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000080), 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/rpc/auth.rpcsec.context/channel\x00', 0x101002, 0x0) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/dev\x00', 0x40100, 0x0) pread64$auto(r3, 0x0, 0x10001, 0x830) read$auto(0x3, 0x0, 0x80) unshare$auto(0x40000080) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, 0x0, 0x48402, 0x0) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000) close_range$auto(0x2, 0x8, 0x0) syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x1000, 0x0) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, 0x0, 0xc0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 4.234806715s ago: executing program 0 (id=1398): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_smc_pnetid(0x0, r0) r1 = socket(0xa, 0x1, 0x84) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, 0x0, 0xc800) r2 = socket(0x10, 0x2, 0x4) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) getresuid$auto(&(0x7f00000000c0)=0x3, &(0x7f0000000100)=0x380, 0x0) r3 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x10b402, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x103400, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000001c00)=""/4111, 0x100f) pread64$auto(r3, 0x0, 0x100000001, 0x100) sendmsg$auto_OVS_VPORT_CMD_DEL(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000803}, 0x40001) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20b42, 0x0) mmap$auto(0x0, 0x2020009, 0x9, 0xeb1, 0xfffefffffffffffa, 0x8000) splice$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000003140), 0xffffffffffffffff) r6 = bpf$auto_BPF_ITER_CREATE(0x21, &(0x7f0000000080)=@bpf_attr_5={@target_ifindex, r2, 0x8, 0x5, r2, @relative_id=0x4, 0x10}, 0xc) sendmsg$auto_ETHTOOL_MSG_PHY_GET(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000031c0)={&(0x7f0000000000)={0x14, r5, 0x100, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x2404c012}, 0x80) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) pipe2$auto(0x0, 0x80) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) setrlimit$auto(0x1000000007, 0x0) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) 3.588995396s ago: executing program 3 (id=1399): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) getsockopt$auto(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) getpeername$auto(0x3, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20b42, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x100) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x55) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0x2020009, 0x9, 0xeb1, 0xfffefffffffffffa, 0x8000) setfsuid$auto(0x0) r1 = openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x8402, 0x0) read$auto(r1, 0x0, 0xfff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/cpu/cpu0/cache/index2/shared_cpu_list\x00', 0x0, 0x0) 3.083944197s ago: executing program 0 (id=1400): statmount$auto(0x0, &(0x7f0000000400)={0x1, 0x1, 0x1000009, 0x3, 0x22, 0x940, 0x9ffde, 0x5, 0x6, 0x3ff, 0x9, 0x400005, 0xfff, 0xfffffffffffffffd, 0xb0, 0x8, 0x9, 0x3, 0x5, 0x6, 0x6, 0xffffffff, 0x0, 0x4000001, 0x80, 0x100000, 0x0, 0x10, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x100], "349270411d0e642943c4ce335e60608a6f7b45bb12622a4afa75cef7dbde3940a8da74fd4c5311a2225a319b4ec5956cfc35528306e2647a0f8ae5ae388576ffa6ecaf3a46eb61c26ba9f827a7e2198a4fec5cadddd59407a7c37cf4a323f76ec6f7de10fabd01dcf7"}, 0x200, 0x81) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000001f00), r0) sendmsg$auto_SMC_PNETID_ADD(r0, &(0x7f0000002000)={0x0, 0x0, &(0x7f0000001fc0)={&(0x7f0000001f40)={0x20, r1, 0x1, 0x70bd2a, 0x25dfd3fb, {}, [@SMC_PNETID_NAME={0xb, 0x1, 'tlep\xc9\t\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) r2 = socket(0xa, 0x1, 0x84) close_range$auto(0x2, 0x8, 0x0) socket(0x22, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x3c, r4, 0x1b, 0x74bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0xc, 0x3, 0x0, 0x1, [@nested={0x8, 0x19, 0x0, 0x1, [@nested={0x4, 0x1}]}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "8987714800"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) socket(0x10, 0x2, 0x4) r5 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/fs/ext4/sda1/fc_info\x00', 0x10b402, 0x0) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/cpu/cpu0/crash_notes_size\x00', 0x103400, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r6, &(0x7f0000001c00)=""/4111, 0x100f) pread64$auto(r5, &(0x7f0000000340)='/proc/Nes\x00'/22, 0x100000001, 0x100) sendmsg$auto_OVS_VPORT_CMD_DEL(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x4000803}, 0x40001) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio1\x00', 0xa0902, 0x0) mmap$auto(0x0, 0x2020009, 0x9, 0xeb1, 0xfffefffffffffffa, 0x8000) splice$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x2) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000003140), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_PHY_GET(r7, &(0x7f0000003200)={0x0, 0x0, &(0x7f00000031c0)={&(0x7f0000000000)={0x2c, r8, 0x301, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_PHY_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2404c012}, 0x80) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) pipe2$auto(0x0, 0x80) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) setrlimit$auto(0x1000000007, 0x0) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) 2.41576124s ago: executing program 2 (id=1401): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = getuid() keyctl$auto_KEY_REQKEY_DEFL_PROCESS_KEYRING(0x100, 0x2, r0, 0x0, 0x4) msgctl$auto_IPC_RMID(0x3, 0x0, &(0x7f0000000380)={{0x7, r0, 0xee00, 0x6, 0x10001, 0x1, 0x1}, 0x0, &(0x7f0000000340)=0x7, 0x55a9c7e6, 0xd685, 0xfffffffffffffff7, 0x0, 0x2, 0x0, 0x81, 0x800, @raw=0x9175, @inferred=0xffffffffffffffff}) 2.401207498s ago: executing program 1 (id=1402): sched_get_priority_max$auto_SCHED_BATCH(0x3) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/dummy_udc.4/udc/dummy_udc.4/function\x00', 0x46002, 0x0) r0 = socket(0x2, 0x2, 0x88) pwrite64$auto(0xc8, &(0x7f0000000180)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x1f\a/\x00\x03\x00\xfd\xfdX\xd3\x1d\xf8\xbebZ\xddL\x01\x00\x00\xff^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x88\v\xae\xa9i8W\xe5\x00!\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00v\xd9\xe5H.-\x14\xee\xbc\xae\xe1\x85\xb2b\xd42\x89\x05e\x03z\xe6q\xcd\x91\tM\xd2\x90\xc91\xd9\x86\xe4\x8e\x0fI\xf0b2\nfa\xb8\x1a\xdb\xaa0P\xca\xb2W\xe3\x14\xb9Cx\x0e4\xc9\xb4\xdc4\xe3\x8f\x1c\xa5\x89\x8d\x84V\x97dg \x9f\xcd\x8fA\x16\x01\xc5.\x7fG\x86L\xa4\xd6h\xea\x11x\xce\x96t\xc7~# )\x8c6\x06\xd7\xfcu\x8c{t\xa5\x92JW\x8b\xb3Oj%\xb5H\x91F\x1b\x01\xef\x0e\xc5\xac\xcfK\xd5\x98\xce\xd6?\t\xa8\xb7\xce\x87\xdb\xb0\xaa\x8al8qF\re\xa7\xda\x1f\x9ad\b!\xddBD\xd9', 0x3d, 0x7a) setsockopt$auto(r0, 0x0, 0x20, 0x0, 0x8) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/ext4/sda1/reserved_clusters\x00', 0x42000, 0x0) fchownat$auto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = openat$auto_tracing_total_entries_fops_trace(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/debug/tracing/buffer_total_size_kb\x00', 0x800, 0x0) read$auto(r2, &(0x7f00000003c0)='/sys/kernel/debug/ieee80211/phy14/hwsim/group\x00', 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, 0x0, 0x0) openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x902, 0x0) ioctl$auto(0x3, 0x80004508, 0x10000000000402) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001080), 0xffffffffffffffff) r3 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x103041, 0x0) write$auto_ftrace_subsystem_filter_fops_trace_events(r3, 0x0, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/rcu_normal\x00', 0x10b142, 0x0) write$auto(0x3, 0x0, 0x100082) socket(0x2, 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8ad00, 0x0) close_range$auto(0x2, 0x8, 0x0) sysfs$auto(0x20, 0x4, 0x7fffffffffffffff) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) write$auto(0x3, 0x0, 0xffd8) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x8101, 0x0, 0xd0, 0x5, 0x6, 0x0, 0x1, 0x3691, 0x0, {0x100000000, 0x10000}, 0x7ffffffffffffffc, 0x40000000000006, 0xfffffffffffffffd, 0x1008000, 0x0, 0x80000004, 0x4bbd, 0xffffffffffff628e, 0xa747, 0xdeae, 0x804}) 2.292610109s ago: executing program 0 (id=1403): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capset$auto(&(0x7f0000000100)={0x20080522}, 0x0) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) fchown$auto(r0, 0xffffffffffffffff, 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) bpf$auto(0x0, &(0x7f0000000100)=@bpf_attr_4={0x16, 0x4, 0x80000001, 0x8}, 0x6f4) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000100)={{@raw=0x9, 0x85, 0x20e, 0x9, "669cbbd9e97551b991bea188e0f1a57ce2a1facac1f00b2f4ab8635524133f9e22c7717f6050f2d2252ca5f2"}, 0x0, @integer64=@value=[0x9, 0x7, 0xc2c3, 0x3, 0x8, 0x7, 0x4, 0x7, 0x80, 0x6, 0xfffffffffffffffd, 0x8000000000000001, 0x0, 0x9, 0x6, 0x1, 0x8, 0x5, 0x7ffffffffffffffc, 0x58a2, 0x5, 0xad, 0x7, 0x1000ffffe, 0x2, 0x85d7a604f, 0xc01, 0x7fffffff, 0x8, 0xff, 0x8, 0x9, 0x4, 0xfffffffffffffffd, 0x10000000000007, 0x0, 0x3, 0x9, 0x6, 0x8000000000000000, 0xfff, 0x4, 0x4, 0x4, 0x8001, 0x3, 0x3, 0x2, 0x7fffffff, 0x81, 0x2, 0x4, 0x5, 0x7, 0xfffffffffffffffd, 0x7fff, 0xd468, 0x9, 0x612, 0xffff, 0xf60d, 0x5, 0x6, 0x1], "282f77b07e718ed4d99a34617774e3a82f982e0f05e516c299a28a585e87e0d908e2c8e50de5016f1de5d432da2cc20e951d8fcdc4f791a11996aad5af504c0d9927e62ef70b23a13735a4fe805c1ce1b6b1d83d21bb42794ec925b4547a3d52d4b5210392111e181719fef9d685b6534b171d76ad633f94a608b818600a6c85"}) 2.068103035s ago: executing program 0 (id=1404): r0 = openat$auto_proc_uid_map_operations_base(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/uid_map\x00', 0x880, 0x0) mmap$auto(0x0, 0xa00006, 0x2, 0x13, 0x602, 0x300000000000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x11, 0x3, 0x6) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/ptype\x00', 0x101000, 0x0) pread64$auto(r1, 0x0, 0x8, 0xffff) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) mlockall$auto(0x800000000000005) madvise$auto(0x0, 0x200007, 0x19) syz_clone3(0x0, 0x0) read$auto(0xffffffffffffffff, &(0x7f0000000080)='\x00', 0x80) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x806, 0x0) pipe$auto(0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000003680)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_NEW_KEY(r4, &(0x7f00000048c0)={0x0, 0x0, &(0x7f0000004880)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010029bd7000c7f24efe7e", @ANYRES32=r5], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x890) dup2$auto(0x5, 0x4) r6 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/bus/usb/001/001\x00', 0x29202, 0x0) mmap$auto(0x2000, 0x80009, 0xb, 0x8000000008011, r6, 0x0) syz_clone3(0x0, 0x0) ioctl$auto_IOCTL_VMCI_VERSION(0xffffffffffffffff, 0x79f, 0x4) migrate_pages$auto(0x0, 0x3, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2) mmap$auto(0x80000000, 0x2000a, 0x5, 0xeb2, 0x401, 0x7ffe) mq_open$auto(0x0, 0x400056a, 0xd, 0x0) pread64$auto(r0, 0x0, 0x8000000e, 0x101) 2.067946623s ago: executing program 2 (id=1405): r0 = socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) fstat$auto(0xffffffffffffffff, &(0x7f0000000000)={0x5, 0x80000003, 0x1, 0x100, 0x0, 0x0, 0x0, 0x4, 0x8000fd3, 0x2, 0xef, 0x4, 0x80040000081, 0x8, 0x2, 0xfffffffffffffff8, 0x63}) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="1a002701f75d9ac01eab3710fa44860429b3daa18ad320ecf4a4f981d30e00d6c28a50fb2df50148c21965b38a"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) ioperm$auto(0x4, 0xe9e, 0x7) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) sendmmsg$auto(r0, &(0x7f0000000280)={{&(0x7f00000000c0)="b6954fab57e33323c290df724f5f10f89430cb69dfd7378e120d5da85b2f34ce96ee67f67e8202a995126e2a5f1a8215a892376cc2f0f1c9c5daa08c6f530f0081af1ccd08ec4f9dfb5471c94479cd0fe9e646f94d640ceec5d52b06fcfea33e9bcb1b41526445034876e04019bc21582f8e7e6949416af622eee3291d5d7a68154767be7064b5be20438cdd65c710083ee65a45810a2b5ec593560a5ec34f07e13fb267b02e054f3832ee7c122d9f48ba798c870e247b2a555abf4b970dfec350eae626db9ec5e4a55223d9578e14112baaaf621612", 0x6, &(0x7f0000000000)={&(0x7f00000001c0)="d010fa608cd368dc1d5b02a559505e1bcb80431c162d25ee22325cad98413001ce0c5ebaf430cd32eda83f8848dd5b840d29d1a3ce8e9e57676844777f2ea502eadba1a22cbd853b42f1cf59a47bbdaba0ac233508377baa32db20ce4faba7d98828de49c4efd4c21558642cc9d45576de1123f1bea3a484435098dc73149f635026cffdad8d008f6802fb994d7d3ad274ccf8668fbf726511f0", 0x2}, 0x2, &(0x7f0000000040)="2f46241c4ae1d26de4ac507388d011ab47500271b1e56f7491515777fcb698c4", 0xb829, 0x1}, 0xf}, 0xdf, 0x101) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/cifs/Stats\x00', 0x28102, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, 0x0, 0x2dc08f24db163610, 0x0) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0xd4, 0x1, 0x6, 0x0, 0x1, 0x368a, 0x2, {0x100000000, 0x10000}, 0x5, 0x8, 0xfffffffffffffffd, 0x1008000, 0x0, 0x9, 0x81, 0xdfffffffffff628e, 0x6, 0xdeb1, 0x808}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x88002, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D1\x00', 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0xa3db) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$auto(r2, 0x5453, r2) getrandom$auto(0x0, 0x6000000, 0x3) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) r3 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/pagetypeinfo\x00', 0x43102, 0x0) futex$auto(0x0, 0xc, 0xffffffff, 0x0, 0x0, 0x4) read$auto_proc_iter_file_ops_compat_inode(r3, &(0x7f00000007c0)=""/153, 0x99) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = socket(0xa, 0x2, 0x0) statx$auto(0xffffff9c, 0x0, 0x1000, 0x803, 0x0) setsockopt$auto(r4, 0x29, 0x30, 0x0, 0x56b) 1.435956901s ago: executing program 1 (id=1406): syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000200), 0xffffffffffffffff) mmap$auto(0xa, 0x200004, 0x4000000000e3, 0x12, 0xd, 0x300000000000) r0 = socket(0x22, 0x2, 0x24) getsockopt$auto(r0, 0x3, 0x1, 0x0, &(0x7f00000000c0)=0x1) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) fsopen$auto(0x0, 0x1) close_range$auto(0x0, 0xfffffffffffff000, 0x80000200) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) set_mempolicy$auto(0x6, &(0x7f0000000000)=0x7e, 0x4) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x0, 0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008012, 0x3, 0x0) syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/blkio.bfq.sectors\x00', 0x182, 0x0) sendfile$auto(r2, r2, 0x0, 0x0) ptrace$auto(0x10, r1, 0x4, 0x7ff) ptrace$auto_PTRACE_SET_THREAD_AREA(0x1a, r1, 0x4, 0x8) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r3, 0x0, 0x7, 0x8) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x8, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mremap$auto(0x1ff000, 0x8, 0x843, 0x3, 0xfffff000) 1.276424885s ago: executing program 3 (id=1407): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/rpc/auth.rpcsec.context/channel\x00', 0x101002, 0x0) r1 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/ptype\x00', 0x100, 0x0) socket(0x11, 0x3, 0x300) socket(0x11, 0x80003, 0x300) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) mremap$auto(0x4000, 0xfee0, 0x3fd6, 0x3, 0x18000) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x5ff4, 0x1) sendmsg$auto_TIPC_NL_MON_PEER_GET(r2, &(0x7f0000006140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="11072cb57000fedbdf25130000000c00098008000200", @ANYRES32=0x0, @ANYBLOB="c9c83dc332d241641995013081c077665afa2d872c1e747cf6b1fa4d43add55ed12b2c890e6176f32c242a9d1aaddc9b3ad5de6011d9a9f01bf0eac7528ae7cc2cac4283b269167cbe0c6110c796ce9089705386e0d57b801447d802bb69c61e3a4d1a1bfc63af75076637f3ed8944eea1fe038d55722bd434e996d307e72b48edaa7a5c931606e366b956536d314823d50eaa33b4752ccdae7294c0f1a742ec28b2f3d59fe7394b3aee0c"], 0x20}, 0x1, 0x0, 0x0, 0x4405}, 0x4c848) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/dev\x00', 0x40100, 0x0) sendmsg$auto_TIPC_NL_UDP_GET_REMOTEIP(r2, &(0x7f0000002a40)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002a00)={&(0x7f0000001380)={0x1650, r1, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x4f, 0x5, 0x0, 0x1, [@generic="9cc861db5d5032e5f3cd4d3bec70c34db825b6420c6ce55baf7f4bd6e1d281912818288c119f889d84e55d3c1a64f54b64fdd3c4ff89a9e17595cfecbea8ad241e4c5bbaf3525b245416a2"]}, @TIPC_NLA_SOCK={0x11f, 0x2, 0x0, 0x1, [@generic="2984477e01229422530fc136d0e229287875220de3e5ff2a2752a220fcb127999d1020ac94dca085a42692f81d54dd43f039e64ea712d05400ad1c9bf7e74a5114973371b80cdc6accc6dc09a005423bf91f97c8aa8e90dfc853d9e7016d307107bc5be374f3eb37d24dc3a3cfb7415bd91224dead8a12f8f3fbc6a98cbef1efd296d5dc99b207bb9a31aadbabebc4402682d77f1a6283431440a8164e9389a5be10e3efeaebfd", @nested={0x5c, 0x3c, 0x0, 0x1, [@typed={0x14, 0xb4, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @typed={0x4, 0xf6}, @nested={0x4, 0x66}, @nested={0x4, 0x10c}, @nested={0x4, 0x33}, @typed={0x29, 0xdb, 0x0, 0x0, @binary="f9523d75ea76637cad45afed1d53669457d20f5ee55ab5e17bfb41fb39c98abf961873455e"}, @nested={0x4, 0xd5}, @typed={0x4, 0x139}]}, @typed={0xc, 0x4b, 0x0, 0x0, @u64=0x6}, @nested={0xc, 0x16, 0x0, 0x1, [@typed={0x8, 0xb8, 0x0, 0x0, @ipv4=@remote}]}]}, @TIPC_NLA_SOCK={0x1134, 0x2, 0x0, 0x1, [@nested={0x1041, 0x30, 0x0, 0x1, [@nested={0x4, 0x6f}, @typed={0x14, 0x7f, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x11}}, @generic="c9442d644eb0378d42644217ad58ca99ca04855952be735d8b7b613818", @nested={0x4, 0x6e}, @typed={0x1004, 0x14f, 0x0, 0x0, @binary="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"}]}, @typed={0xac, 0x51, 0x0, 0x0, @binary="7ce8aee6cc022dbf5c32da10dfb75c715ef59a65bc97265f64024691bdf8ac00edc4677b779e9141ad1b5f36389cbc5fbbbfbf5665fd006f89b2e221458940b9c07a1cf9f4381ceefbe0cf3022dce476a15d87d1833b3a167b4187f75cf5745d88376e7c5a62fd6c25214b28a06041db08d719444125ac027761c50e7021e33f6f996d2b3f1cff052ebefb3cd902b502df8d81258a45b8b8baef46d661eb60583be82e5e14d07553"}, @generic="24e45a72c30850f1f4e3c5b97fbcbde36e66833a65704714d5d6bc971bc806f7072902a4058627f57e88ce8152d25230", @nested={0x10, 0xa, 0x0, 0x1, [@typed={0xc, 0xbb, 0x0, 0x0, @u64}]}]}, @TIPC_NLA_BEARER={0x373, 0x1, 0x0, 0x1, [@nested={0x10, 0x45, 0x0, 0x1, [@typed={0x8, 0x13a, 0x0, 0x0, @fd=r2}, @nested={0x4, 0x113}]}, @nested={0x59, 0x65, 0x0, 0x1, [@generic="3384450f558d097435a29f8b7125ac8831137fa763eea6de2da2c322eca589131e53d801bb65369428909383f58e0b3ec25aa2c56f1bf3bd242ec0cf5c9c42a03e", @typed={0xe, 0x26, 0x0, 0x0, @str='SMBD_GENL\x00'}, @nested={0x4, 0x7b}]}, @generic="227774a1a78e971500cb843bfecd982158b2797859e491c379ecf259e2eb604fa8efa781b4e760aba9316aff52607f55a137773f658eda475bf5411126f27d859f93ee42a06f44ebdf88b6b8d58e4683b396189a1ea4bc06ff0c79ed29fa30882733da01fe2a74b1d9542940ccd84fdadcd1832715b514551f1ae759518cf87c3e06021efd66e365b59662c22559b4e7f8defd0e776d6ce7f6b015f5600530e222c7e90295466f442e4c32fe38d2c3f6e63fd57f11222bfb93f6148b29e6a4eaa3d25e44d6094f039623c7db8890", @generic="e546f964b7b817d69589c2f5501b1ced6f4109eb60bd1b1ce1828baa376deeddf0bc9d91b63db487cf7b50de935a7232b7889db5dc56f5f4a7e267d08b8d08bc1e5844d1c96a7c8ca1280b0d8209d337d3f30070b5da0621012360d53d4d5dbccd10f2a954", @nested={0xaa, 0x41, 0x0, 0x1, [@nested={0x4, 0x44}, @generic="ae3d660f7d8ace51e97e7972f9edbf1538de60d3ff3c6d855f7180901c5e3bf5a74b3dcba6dc4b5d0ace0d5a989534c7ed491dca43bda28a02e4d29982bca3554cc998a0cd52fb9d1ee7035eeb8eb73b68484c4e336fc6604fe0ca9e9df8d5b67c04e1414898cfdb30a10323d6675cb5a092c55dad903c21c27f57b8fc0ff10a663a456b549e596fecb4433666d2", @typed={0x8, 0x2b, 0x0, 0x0, @u32=0x9a}, @typed={0xc, 0x2a, 0x0, 0x0, @u64=0xfffffffffffffffa}]}, @nested={0x10, 0x0, 0x0, 0x1, [@typed={0xc, 0x108, 0x0, 0x0, @u64=0xdbdd}]}, @typed={0x4, 0x36}, @nested={0x10e, 0x130, 0x0, 0x1, [@nested={0x4, 0x2a}, @nested={0x4, 0x12}, @nested={0x4, 0x124}, @nested={0x4, 0x7e}, @generic="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"]}]}, @TIPC_NLA_MEDIA={0x24, 0x5, 0x0, 0x1, [@typed={0x18, 0x89, 0x0, 0x0, @binary="ed7d07960f49b9ffa4b657941e09640a2cb26a14"}, @nested={0x8, 0x114, 0x0, 0x1, [@nested={0x4, 0x146}]}]}]}, 0x1650}, 0x1, 0x0, 0x0, 0x20000844}, 0x804) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f00000000c0), r3) sendmsg$auto_KSMBD_EVENT_SPNEGO_AUTHEN_REQUEST(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x14, r4, 0x1, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) open(&(0x7f0000000380)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x103040, 0xd1) sendmsg$auto_KSMBD_EVENT_UNSPEC(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r4, 0x200, 0x70bd28, 0x25dfdbfe, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20040040}, 0x5) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/netfilter/nf_conntrack_buckets\x00', 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2b, 0x1, 0x0) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/ieee80211/phy1/airtime_flags\x00', 0x2, 0x0) write$auto(r0, 0x0, 0x100) 747.756889ms ago: executing program 3 (id=1408): r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bus/usb/036/001\x00', 0xa901, 0x0) clock_getres$auto(0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x102, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) timer_create$auto(0x1, 0x0, 0x0) r1 = mq_open$auto(&(0x7f0000000280)='\\*)A\x00', 0x7e, 0x9, 0x0) mq_notify$auto(r1, &(0x7f0000000180)={@sival_ptr=0x0, @raw=0x1, 0x1, @_sigev_thread={0x0, 0x0}}) read$auto_proc_page_owner_operations_page_owner(r1, 0x0, 0x0) timer_gettime$auto(0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_AUTHENTICATE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001000)={0x310, 0x0, 0x320, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_FILS_ERP_RRK={0x29, 0xfc, "c9dea0bcec743c7e4fa973ba5d0219807c618430e847ff70956406ce1dbe8f71cade9a384f"}, @NL80211_ATTR_IE={0x136, 0x2a, "0afd2c507a1c2323e756f29e95d10567474512210997a5e68478accac27092d2fc9ffba8b334a77428ddffce21d307ec8e647a21c52cb68046f77eb5a9adad90dcf7a8ca73273db6e232d4ccbcf21a6fa4fc7fa9ce071b6aa65d93c563ab4f925ed5dd1de74bc681d78ff22a8a702048c3610a852a548df4073d135fb07c55209fede1f609fa236af3802904e8dd3fe3927663a57c12eb0988b23f268e0c81e5c85a043937d7637034ff4ef36f4e71ac8ec413e5862599e5051d115b49d8e3c8b992a13ad811d96d0face0d8f958ebb55e11b97208859c9026b4dc454bb96e38e6d9c3e86bab825577e820974fe1a1252d58676f40bc900b87dfc3c651fd9bc6f70f7b7a25dd49f7c62d699c235296a868ec31bcdbdf3cd1bb5a77ceede9fa95339998f1840e40661eb15d16b76ac56be17e"}, @NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x5}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x879}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA={0xb, 0x7, "c0054ceffb3c96"}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_EMA_RNR_ELEMS={0x170, 0x145, 0x0, 0x1, [@nested={0x8, 0x5a, 0x0, 0x1, [@nested={0x4, 0x96}]}, @nested={0x161, 0xbc, 0x0, 0x1, [@nested={0x4, 0x6}, @typed={0xc, 0xa9, 0x0, 0x0, @u64=0x8}, @generic="4a8d8038a595454b86d0a34bfaa35af22fe1b294535b003db4f94e19a3b934cf0188f7c6fe77cd8945a8866ac9a0c489dfe3a75353e3869e23c24103b4687a5f07c551946ad43de2d39382ca6a843da845", @nested={0x4, 0x76}, @typed={0x8, 0x90, 0x0, 0x0, @uid}, @generic="b78e85dfa72ad237b86380f97706dfecfcfef8f4fb13a95747f48fde054c000beba029ad3fda9fcc4cdecb968baf36079809ac0e1a249ba5a89c717570cf09fff541bdcb6725fd0ec1d08732dcbfce19c4eba9ded2674efc1075dac9996b78cb678d6df875eddd540b6706642c52e29378776fd66e01d9eff4cdbc148b027d91dbf3666e54b166564846c83680c62922d28eab48f8ec3688fc35b87e8a2116fd5b36a78fc8de64b6cfa6fb311aa6001dd3bfe13a007af5ef87d2d642a4297cd8bde5979a55b0d44e2f4c0e928f193d85639a793db7d38194ff000531abfac91c0674910e4c2fa44d", @typed={0x4, 0xc9}, @nested={0x4, 0x14f}]}]}, @NL80211_ATTR_FREQ_FIXED={0x4}]}, 0x310}, 0x1, 0x0, 0x0, 0x4}, 0x4000) memfd_create$auto(&(0x7f0000000000)='!\x00', 0x16) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0x2cbd5d) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) r3 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/pcmC1D1c\x00', 0x40001, 0x0) ioctl$auto_OSS_ALSAEMULVER2(r1, 0x80044df9, &(0x7f0000000340)="bf2cb6ab2dcf467d5ded7916ba710492978f4d2f6822ca3d368e4197d160c74af0fa3b1a2d965e0b5ca6d8c7ee88748ed1249ad01e8a47486ba64e8af2e41e548987d444ca128d72595577d9a9739dbe440fc84ee1a69bf471bbe111896f83551c794973877ffd5ec46a10d7274f4010a22573053ddd405f9e875a29c8406b7d2f2e6ee5d34ab6b97d9966948aac3bbce28509778096df5c8ccff070b0d329729564114f269be1") ioctl$auto_SNDRV_PCM_IOCTL_REWIND2(r3, 0x40084146, 0x0) mmap$auto(0x0, 0x400008, 0x6, 0x9b72, 0x3, 0x8000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000480), r4) ioperm$auto(0x5, 0x9, 0x3ffffffc) fdatasync$auto(0x68a3) mkdir$auto(&(0x7f0000000300)='./file0\x00', 0xf801) chmod$auto(&(0x7f0000000040)='./file0\x00', 0x10fe) sendmsg$auto_MACSEC_CMD_DEL_TXSA(r4, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b5f92e7dd9f70108bfe9b86941c2fb0700660de7127b0c18040a9c75df535410facb11688a1f2c0a29ea82ba355d30a37b0ae92a9b4715c8dd742e3ce88b288e615909959fb9bb322b5e26ed20ba319fee21aaf2ae902dcd52e82f9c4ae14c95e76834f1c4", @ANYRES16=r5, @ANYBLOB="01002abd7000fbdbdf250500000008000100", @ANYRES32=0x0, @ANYBLOB="04000380"], 0x20}, 0x1, 0x0, 0x0, 0x4004}, 0x4802) ioctl$auto(0x3, 0x8108551b, 0x1) ioctl$auto_USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000100)={0x4, 0x81, 0x5b, 0x4, &(0x7f0000000000), 0x9, 0xeb94, 0x2, @stream_id=0x100, 0x2, 0x476, 0x0}) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/pcrypt/pencrypt/parallel_cpumask\x00', 0x80302, 0x0) sendfile$auto(r6, r6, 0x0, 0x7ffff000) 306.342289ms ago: executing program 1 (id=1409): mmap$auto(0x0, 0x2020009, 0x100003, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x5, 0xffffeffffffffffe, 0x107, 0x803, 0x800000000000c) keyctl$auto(0x6, 0xfffffbfffffffffe, 0x2, 0x32, 0xfff) close_range$auto(0x0, 0xfffffffffffff000, 0x2) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, 0x0, 0x4814) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x6c}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x2, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="1e0027"], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS3\x00', 0x0, 0x0) r3 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/smaps_rollup\x00', 0x1a3000, 0x0) pread64$auto(r3, 0x0, 0x12a, 0x8) ioctl$auto(r2, 0x5403, r2) ioperm$auto(0x7fb, 0x1, 0x4000007) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) statmount$auto(&(0x7f0000000000)={0x7e, @raw, 0x80000020, 0x7fff, 0x2}, 0x0, 0x7fffffffeffd, 0x0) ioctl$auto_TIOCMSET2(r2, 0x5418, &(0x7f0000000140)="460d6545d9f4f9b8259b7f2a90a500e7e4bb0353307aa4e94d91db5dfff0415c0b327906af40ba58787b539c98cdffcb4e31d5969baeb96aaf7453c576c13d9bc8054809d9b9886149670fb019960139da92043d20c67c8168c024f2f1196a44e85ea1bd52f5460fba199b3391df682392c64866f850c67ac5e4dd685587ad58c686229f90d04e19add6") r4 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x8002, 0x0) ioctl$auto_SNDCTL_TMR_TIMEBASE(r4, 0xc0045401, &(0x7f00000000c0)="58f9fb") sendmmsg$auto(r1, &(0x7f0000000280)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f0000000040), 0x4, 0xa505}, 0x800}, 0x7, 0x4008) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="17000000", @ANYBLOB='i\x005'], 0x1ac}, 0x1, 0x0, 0x0, 0x40814}, 0x2004c0c4) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r5, &(0x7f0000000040)={0x0, 0x7}, 0x1) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x80, 0x0) 137.636416ms ago: executing program 2 (id=1410): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000040), 0xffffffffffffffff) r2 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r2, &(0x7f0000000040)="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", 0x13e) sendmsg$auto_NFSD_CMD_VERSION_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fcdbdf250400000010000180040000000800010003000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyw9\x00', 0x16b000, 0x0) mmap$auto(0x0, 0x40009, 0xde, 0x9b72, 0x7, 0x28000) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010026bd7000fedbdf25030000000800030000020000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a0001000000000000000000080003003800000008000200", @ANYRES32=0x0, @ANYBLOB="0a0001"], 0x6c}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) ioctl$auto(r3, 0x540a, 0x2) 0s ago: executing program 3 (id=1411): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/dummy_hcd.3/usb4/devpath\x00', 0xc3100, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000040)=""/49, 0x31) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) copy_file_range$auto(0x6, 0x0, 0x9, 0x0, 0x7fffffff, 0x2) add_key$auto(0x0, 0x0, 0x0, 0xf9f9, 0x8001) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = open(&(0x7f0000000100)='.\x00', 0x40000, 0x0) kexec_load$auto(0x5, 0x2, &(0x7f0000000040)={@kbuf=0x0, 0x2aa7, 0x6c0000c000, 0xc000}, 0x4) mmap$auto(0x0, 0x400008, 0x9, 0x9b7e, r1, 0x8000) socket(0x2b, 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x801, 0x84) socket(0x11, 0x3, 0x9) r2 = openat$auto_btrfs_dir_file_operations_inode(0xffffffffffffff9c, 0x0, 0x400000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000010c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r3, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010325bd7044ffdbdf3a0a0000000c000200ffffffffffffffffaf78c0ca7dd66b329219d5a2cf5fbbfd56b418219f4890f208c11f89f45aab0b96d6d088a6dcd23d2eb475da09d2ed47b914fe9a4025c75a2712d11318686027241bc5141df79f96a7201ac3db628b3563572c60acbdbd7c4f163e59b4e8cff6d018a04e2f473c41e5820d949b5d56038ec7cbe94cd13577afb92c9ae91da5877bf007609b59f8476914977d4329fbd04b73d03c0f89dc79169b579c3ad6215162ae883d6f13921b7c557fce1ba8ae8d740f9858dd417349862cfd2dd64e4666cc8ac9b75ca2d54310e5"], 0x20}, 0x1, 0x0, 0x0, 0x20000800}, 0xc040810) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), r3) ioctl$auto_FS_IOC_MEASURE_VERITY(r2, 0xc0046686, &(0x7f00000001c0)={0x0, 0x1ff, "50ef0725328d01ea09dc1676165a271b5d828ded6bc52d658c25c7acb6e99fc6f9c0f7d4ce7dc9c6789b6b067eac15ad2d9316ecb2cbed45ab67812dbd5584ef3e2b383c19180daf3e9c72086f35635a0f40f239d6bf7de8cc20b284f38c1341411c3d83bd282b254354170813abd87471c69884565d3151d8dca53f67184bd50f89429e9e1700ca9ff641879ce519159a387da19401eb82fcdb8198fc52371826326cf1a7e0fe841362b226789feb2edc611264afb1769a33054329be656bb5b0591959f2f623712e447c46a5cab213c626"}) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, 0x0, 0x1, 0x0) sendmsg$auto_OVS_METER_CMD_SET(0xffffffffffffffff, 0x0, 0x880) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0xb9c000, 0xfffffffffffffffd, 0x0, 0x7, 0x6) madvise$auto(0x0, 0x200007, 0x19) select$auto(0x3, 0x0, 0x0, 0x0, 0x0) syslog$auto(0x2, &(0x7f0000000000)='-#:\x00[\xda\xe2\xc3L\xd30{Q\xecvP\x93\x87\x1e\xdd\x95\x1b\x19qI\vv\xacO*X0V\x93\x85\xff\xb2\xdd\xd8\xd5Kh\xfa\xa3\xc7\x9b}\xec\x1e\xdc\x80\x1fR\xc30\x9a\xae\\\'\x14\x98\x98\xc3iDv\x97\xdfTMt\xe5?\xd0\xcc\xb8\xfa\a\x7f\x7f\x00\x00\x00\x00\x00\x00\x00n_\xb1\x1c\x7f\xb0y\xec\xe2\xcc\x1a/\xfa{d\xe4BN\x9c\xb9\x87.\xfe\xe7&1j\xe6]\xc3\x9anE6\x81\xe4\xec\xfa\xefE\xf7\x17h\xf4pumR\xd55Dd(\x0f(b\x1aD\xf4\x03\xc3\\\xdf\x8f\xa8\x82\xab\x102\xd1\xaf\xcaT\x86\x171\x11Q4\x94\x9d\xf5\x9c\xe3\xaa\xf3\xd26i\xf9\xb2\xd9T\xc9\xfd\xba\x91^\x19\x95\xde\xbc \xa8\x98\xc3\xed\xe9,{\xd4\xa1\xe4p\xcf\b\f\xb4\xbe_\xf2\xbe\xef\v\xf1d\xdd\x0e\xfc\xc3\xeaqt\x94\xe7\xce\xf1\xc5\x94~\xf6Cx\x0e\x98\xc7gE>*\x9c%\xa0\\\x14\t\tv.\x1c\x1a\xf1\xba\xc0>\xf4Hc\xc3\xfa\x033\x8f\xb9(\n/\xcdo\xc2', 0xcf) close_range$auto(0x2, 0x8, 0x0) clone$auto(0x1002, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x9) mmap$auto(0x0, 0xc, 0x4000000000df, 0x44eb2, 0x10006, 0x300000000000) kernel console output (not intermixed with test programs): _usercopy, interval 1, probability 0, space 0, times 0 [ 228.565964][ T7502] CPU: 1 UID: 0 PID: 7502 Comm: syz.1.334 Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) [ 228.565998][ T7502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 228.566011][ T7502] Call Trace: [ 228.566018][ T7502] [ 228.566027][ T7502] dump_stack_lvl+0x16c/0x1f0 [ 228.566065][ T7502] should_fail_ex+0x512/0x640 [ 228.566104][ T7502] _copy_to_iter+0x477/0x15a0 [ 228.566148][ T7502] ? __pfx__copy_to_iter+0x10/0x10 [ 228.566184][ T7502] ? irq_get_nr_irqs+0x9/0x20 [ 228.566215][ T7502] ? int_seq_next+0x52/0x70 [ 228.566250][ T7502] ? traverse.part.0.constprop.0+0x2c5/0x640 [ 228.566295][ T7502] seq_read_iter+0x719/0x12c0 [ 228.566342][ T7502] ? find_held_lock+0x2b/0x80 [ 228.566368][ T7502] proc_reg_read_iter+0x21d/0x310 [ 228.566394][ T7502] do_iter_readv_writev+0x735/0x950 [ 228.566433][ T7502] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 228.566477][ T7502] ? rw_verify_area+0xcf/0x680 [ 228.566514][ T7502] vfs_readv+0x4c5/0x8a0 [ 228.566548][ T7502] ? get_pid_task+0x106/0x250 [ 228.566587][ T7502] ? __pfx_vfs_readv+0x10/0x10 [ 228.566624][ T7502] ? find_held_lock+0x2b/0x80 [ 228.566662][ T7502] ? __fget_files+0x20e/0x3c0 [ 228.566705][ T7502] ? do_preadv+0x1af/0x270 [ 228.566739][ T7502] do_preadv+0x1af/0x270 [ 228.566775][ T7502] ? __pfx_do_preadv+0x10/0x10 [ 228.566819][ T7502] do_syscall_64+0xcd/0x230 [ 228.566856][ T7502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.566879][ T7502] RIP: 0033:0x7f2ba898e969 [ 228.566897][ T7502] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 228.566919][ T7502] RSP: 002b:00007f2ba97d8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 228.566940][ T7502] RAX: ffffffffffffffda RBX: 00007f2ba8bb6080 RCX: 00007f2ba898e969 [ 228.566955][ T7502] RDX: 0000000000000006 RSI: 0000200000000080 RDI: 0040000000000003 [ 228.566969][ T7502] RBP: 00007f2ba97d8090 R08: 0000000000000005 R09: 0000000000000000 [ 228.566983][ T7502] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001 [ 228.566996][ T7502] R13: 0000000000000001 R14: 00007f2ba8bb6080 R15: 00007ffd10713c18 [ 228.567024][ T7502] [ 229.540944][ T7508] cifs: Unknown parameter 'T.żc[$⁍)UÑnE-ʙl- -_5Z omfwYh*/xDlݩgkǐA79Xa/f_ARxM vp$^;q3n-6+ek [ 231.195149][ T7534] dump_stack_lvl+0x16c/0x1f0 [ 231.195188][ T7534] should_fail_ex+0x512/0x640 [ 231.195226][ T7534] _copy_from_iter+0x2a4/0x15b0 [ 231.195264][ T7534] ? __alloc_skb+0x200/0x380 [ 231.195289][ T7534] ? __pfx__copy_from_iter+0x10/0x10 [ 231.195326][ T7534] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 231.195362][ T7534] netlink_sendmsg+0x829/0xdd0 [ 231.195397][ T7534] ? __pfx_netlink_sendmsg+0x10/0x10 [ 231.195436][ T7534] sock_write_iter+0x4fc/0x5b0 [ 231.195471][ T7534] ? __pfx_sock_write_iter+0x10/0x10 [ 231.195514][ T7534] ? bpf_lsm_file_permission+0x9/0x10 [ 231.195551][ T7534] ? security_file_permission+0x71/0x210 [ 231.195583][ T7534] ? rw_verify_area+0xcf/0x680 [ 231.195620][ T7534] vfs_write+0x5ba/0x1180 [ 231.195643][ T7534] ? __pfx_sock_write_iter+0x10/0x10 [ 231.195679][ T7534] ? __pfx_vfs_write+0x10/0x10 [ 231.195697][ T7534] ? find_held_lock+0x2b/0x80 [ 231.195737][ T7534] ksys_write+0x205/0x240 [ 231.195758][ T7534] ? __pfx_ksys_write+0x10/0x10 [ 231.195778][ T7534] ? rcu_is_watching+0x12/0xc0 [ 231.195806][ T7534] do_syscall_64+0xcd/0x230 [ 231.195842][ T7534] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.195865][ T7534] RIP: 0033:0x7f2ba898e969 [ 231.195883][ T7534] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 231.195905][ T7534] RSP: 002b:00007f2ba97f9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 231.195926][ T7534] RAX: ffffffffffffffda RBX: 00007f2ba8bb5fa0 RCX: 00007f2ba898e969 [ 231.195948][ T7534] RDX: 00000000000002fb RSI: 0000200000000000 RDI: 0000000000000003 [ 231.195962][ T7534] RBP: 00007f2ba97f9090 R08: 0000000000000000 R09: 0000000000000000 [ 231.195976][ T7534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 231.195989][ T7534] R13: 0000000000000000 R14: 00007f2ba8bb5fa0 R15: 00007ffd10713c18 [ 231.196017][ T7534] [ 231.718752][ T7548] cifs: Unknown parameter 'T.żc[$⁍)UÑnE-ʙl- -_5Z omfwYh*/xDlݩgkǐA79Xa/f_ARxM vp$^;q3n-6+ek [ 241.507724][ T7678] dump_stack_lvl+0x16c/0x1f0 [ 241.507763][ T7678] should_fail_ex+0x512/0x640 [ 241.507798][ T7678] ? rcu_is_watching+0x12/0xc0 [ 241.507826][ T7678] get_futex_key+0x49e/0x1000 [ 241.507853][ T7678] ? __pfx_get_futex_key+0x10/0x10 [ 241.507881][ T7678] ? ___sys_sendmsg+0x146/0x1d0 [ 241.507910][ T7678] ? __pfx____sys_sendmsg+0x10/0x10 [ 241.507942][ T7678] futex_wake+0xe7/0x4e0 [ 241.507975][ T7678] ? __pfx_futex_wake+0x10/0x10 [ 241.508018][ T7678] do_futex+0x1e3/0x350 [ 241.508044][ T7678] ? __pfx_do_futex+0x10/0x10 [ 241.508070][ T7678] ? fput+0x70/0xf0 [ 241.508098][ T7678] ? __sys_sendmsg+0x199/0x220 [ 241.508127][ T7678] __x64_sys_futex+0x1e0/0x4c0 [ 241.508157][ T7678] ? __pfx___x64_sys_futex+0x10/0x10 [ 241.508185][ T7678] ? rcu_is_watching+0x12/0xc0 [ 241.508214][ T7678] do_syscall_64+0xcd/0x230 [ 241.508250][ T7678] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.508274][ T7678] RIP: 0033:0x7f0b3fd8e969 [ 241.508292][ T7678] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 241.508315][ T7678] RSP: 002b:00007f0b40c6e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 241.508337][ T7678] RAX: ffffffffffffffda RBX: 00007f0b3ffb5fa8 RCX: 00007f0b3fd8e969 [ 241.508352][ T7678] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f0b3ffb5fac [ 241.508367][ T7678] RBP: 00007f0b3ffb5fa0 R08: 00007f0b40c6f000 R09: 0000000000000000 [ 241.508381][ T7678] R10: 000000000000002c R11: 0000000000000246 R12: 00007f0b3ffb5fac [ 241.508395][ T7678] R13: 0000000000000000 R14: 00007ffffa430780 R15: 00007ffffa430868 [ 241.508423][ T7678] [ 242.380652][ T30] audit: type=1326 audit(6041763419.729:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7684 comm="syz.3.377" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4aa6d8e969 code=0x0 [ 243.505180][ T7690] delete_channel: no stack [ 245.060632][ T7717] netlink: 'syz.1.385': attribute type 1 has an invalid length. [ 247.388272][ T7752] netlink: 'syz.1.398': attribute type 1 has an invalid length. [ 249.282817][ T7781] ima: policy update failed [ 249.318668][ T30] audit: type=1802 audit(6041763426.666:4): pid=7781 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.405" res=0 errno=0 [ 250.230042][ T7796] cifs: Unknown parameter 'T.żc[$⁍)UÑnE-ʙl- -_5Z omfwYh*/xDlݩgkǐA79Xa/f_ARxM vp$^;q3n-6+ek [ 251.355855][ T7811] dump_stack_lvl+0x16c/0x1f0 [ 251.355892][ T7811] should_fail_ex+0x512/0x640 [ 251.355925][ T7811] ? fs_reclaim_acquire+0xae/0x150 [ 251.355963][ T7811] should_failslab+0xc2/0x120 [ 251.355992][ T7811] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 251.356022][ T7811] ? ima_alloc_tfm+0x21a/0x2e0 [ 251.356057][ T7811] ? ima_collect_measurement+0x4b5/0xa40 [ 251.356085][ T7811] krealloc_noprof+0x1fb/0x380 [ 251.356114][ T7811] ima_collect_measurement+0x4b5/0xa40 [ 251.356145][ T7811] ? __pfx_ima_collect_measurement+0x10/0x10 [ 251.356190][ T7811] ? do_raw_read_unlock+0x44/0xe0 [ 251.356233][ T7811] ? vfs_getxattr_alloc+0xec/0x340 [ 251.356276][ T7811] ? ima_get_hash_algo+0x27c/0x400 [ 251.356309][ T7811] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 251.356348][ T7811] ? process_measurement+0x11fa/0x23e0 [ 251.356382][ T7811] process_measurement+0x11fa/0x23e0 [ 251.356427][ T7811] ? __pfx_process_measurement+0x10/0x10 [ 251.356461][ T7811] ? __lock_acquire+0x5ca/0x1ba0 [ 251.356530][ T7811] ? mtree_load+0x325/0xa40 [ 251.356567][ T7811] ima_file_mmap+0x1b1/0x1d0 [ 251.356602][ T7811] ? __pfx_ima_file_mmap+0x10/0x10 [ 251.356644][ T7811] security_mmap_file+0x88c/0x990 [ 251.356677][ T7811] __do_sys_remap_file_pages+0x2e2/0xac0 [ 251.356722][ T7811] ? __fget_files+0x20e/0x3c0 [ 251.356759][ T7811] ? __pfx___do_sys_remap_file_pages+0x10/0x10 [ 251.356800][ T7811] ? fput+0x70/0xf0 [ 251.356831][ T7811] ? ksys_write+0x1b9/0x240 [ 251.356852][ T7811] ? __pfx_ksys_write+0x10/0x10 [ 251.356883][ T7811] do_syscall_64+0xcd/0x230 [ 251.356919][ T7811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.356942][ T7811] RIP: 0033:0x7f0b3fd8e969 [ 251.356960][ T7811] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 251.356982][ T7811] RSP: 002b:00007f0b40c4d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8 [ 251.357003][ T7811] RAX: ffffffffffffffda RBX: 00007f0b3ffb6080 RCX: 00007f0b3fd8e969 [ 251.357018][ T7811] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000000000000005 [ 251.357032][ T7811] RBP: 00007f0b40c4d090 R08: 0000000000010007 R09: 0000000000000000 [ 251.357045][ T7811] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001 [ 251.357059][ T7811] R13: 0000000000000001 R14: 00007f0b3ffb6080 R15: 00007ffffa430868 [ 251.357087][ T7811] [ 251.636064][ T30] audit: type=1800 audit(6041763428.705:5): pid=7811 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.412" name="dev/zero" dev="tmpfs" ino=1468 res=0 errno=0 [ 252.462712][ T7828] Invalid ELF header magic: != ELF [ 253.088080][ T7840] warning: `syz.3.417' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 253.314553][ T7847] netlink: 28 bytes leftover after parsing attributes in process `syz.2.418'. [ 254.390137][ T7859] cifs: Unknown parameter 'T.żc[$⁍)UÑnE-ʙl- -_5Z omfwYh*/xDlݩgkǐA79Xa/f_ARxM vp$^;q3n-6+ek [ 258.131509][ T7905] dump_stack_lvl+0x16c/0x1f0 [ 258.131547][ T7905] should_fail_ex+0x512/0x640 [ 258.131586][ T7905] _copy_to_user+0x32/0xd0 [ 258.131623][ T7905] simple_read_from_buffer+0xcb/0x170 [ 258.131660][ T7905] evm_read_xattrs+0x31f/0x410 [ 258.131687][ T7905] ? __pfx_evm_read_xattrs+0x10/0x10 [ 258.131711][ T7905] vfs_readv+0x6bc/0x8a0 [ 258.131745][ T7905] ? __pfx___mutex_trylock_common+0x10/0x10 [ 258.131786][ T7905] ? __pfx_vfs_readv+0x10/0x10 [ 258.131820][ T7905] ? __mutex_lock+0x1ca/0xb90 [ 258.131859][ T7905] ? __pfx___mutex_lock+0x10/0x10 [ 258.131903][ T7905] ? __fget_files+0x20e/0x3c0 [ 258.131937][ T7905] ? __fget_files+0x110/0x3c0 [ 258.131980][ T7905] ? do_readv+0x132/0x330 [ 258.132012][ T7905] do_readv+0x132/0x330 [ 258.132047][ T7905] ? __pfx_do_readv+0x10/0x10 [ 258.132087][ T7905] ? rcu_is_watching+0x12/0xc0 [ 258.132117][ T7905] do_syscall_64+0xcd/0x230 [ 258.132153][ T7905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.132177][ T7905] RIP: 0033:0x7f4aa6d8e969 [ 258.132195][ T7905] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 258.132217][ T7905] RSP: 002b:00007f4aa7b60038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 258.132238][ T7905] RAX: ffffffffffffffda RBX: 00007f4aa6fb5fa0 RCX: 00007f4aa6d8e969 [ 258.132253][ T7905] RDX: 0000000000000009 RSI: 00002000000018c0 RDI: 0000000000000003 [ 258.132266][ T7905] RBP: 00007f4aa7b60090 R08: 0000000000000000 R09: 0000000000000000 [ 258.132280][ T7905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 258.132293][ T7905] R13: 0000000000000000 R14: 00007f4aa6fb5fa0 R15: 00007ffe93259668 [ 258.132321][ T7905] [ 258.158494][ T7905] netlink: 8 bytes leftover after parsing attributes in process `syz.3.433'. [ 260.705907][ T7936] FAULT_INJECTION: forcing a failure. [ 260.705907][ T7936] name failslab, interval 1, probability 0, space 0, times 0 [ 260.705941][ T7936] CPU: 1 UID: 0 PID: 7936 Comm: syz.3.439 Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) [ 260.705970][ T7936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 260.705983][ T7936] Call Trace: [ 260.705990][ T7936] [ 260.705998][ T7936] dump_stack_lvl+0x16c/0x1f0 [ 260.706046][ T7936] should_fail_ex+0x512/0x640 [ 260.706080][ T7936] ? __kmalloc_noprof+0xbf/0x510 [ 260.706108][ T7936] ? copy_splice_read+0x1a8/0xba0 [ 260.706140][ T7936] should_failslab+0xc2/0x120 [ 260.706168][ T7936] __kmalloc_noprof+0xd2/0x510 [ 260.706199][ T7936] copy_splice_read+0x1a8/0xba0 [ 260.706239][ T7936] ? __pfx_copy_splice_read+0x10/0x10 [ 260.706275][ T7936] ? look_up_lock_class+0x6b/0x150 [ 260.706311][ T7936] ? lockdep_init_map_type+0x5c/0x280 [ 260.706345][ T7936] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 260.706385][ T7936] ? __pfx_copy_splice_read+0x10/0x10 [ 260.706418][ T7936] do_splice_read+0x282/0x370 [ 260.706455][ T7936] splice_direct_to_actor+0x2a1/0xa30 [ 260.706491][ T7936] ? __pfx_direct_splice_actor+0x10/0x10 [ 260.706531][ T7936] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 260.706565][ T7936] ? get_pid_task+0xfc/0x250 [ 260.706604][ T7936] do_splice_direct+0x174/0x240 [ 260.706638][ T7936] ? __pfx_do_splice_direct+0x10/0x10 [ 260.706674][ T7936] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 260.706712][ T7936] ? rw_verify_area+0xcf/0x680 [ 260.706749][ T7936] do_sendfile+0xafd/0xe50 [ 260.706790][ T7936] ? __pfx_do_sendfile+0x10/0x10 [ 260.706827][ T7936] ? __fget_files+0x20e/0x3c0 [ 260.706871][ T7936] __x64_sys_sendfile64+0x1d8/0x220 [ 260.706896][ T7936] ? ksys_write+0x1b9/0x240 [ 260.706917][ T7936] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 260.706943][ T7936] ? rcu_is_watching+0x12/0xc0 [ 260.706972][ T7936] do_syscall_64+0xcd/0x230 [ 260.707007][ T7936] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.707035][ T7936] RIP: 0033:0x7f4aa6d8e969 [ 260.707052][ T7936] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 260.707074][ T7936] RSP: 002b:00007f4aa7b1e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 260.707094][ T7936] RAX: ffffffffffffffda RBX: 00007f4aa6fb6160 RCX: 00007f4aa6d8e969 [ 260.707110][ T7936] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000007 [ 260.707123][ T7936] RBP: 00007f4aa7b1e090 R08: 0000000000000000 R09: 0000000000000000 [ 260.707136][ T7936] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001 [ 260.707149][ T7936] R13: 0000000000000000 R14: 00007f4aa6fb6160 R15: 00007ffe93259668 [ 260.707177][ T7936] [ 260.977859][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.977937][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 262.937737][ T7955] netlink: 28 bytes leftover after parsing attributes in process `syz.3.442'. [ 263.166302][ T7958] cifs: Unknown parameter 'T.żc[$⁍)UÑnE-ʙl- -_5Z omfwYh*/xDlݩgkǐA79Xa/f_ARxM vp$^;q3n-6+ek [ 264.449838][ T7966] dump_stack_lvl+0x16c/0x1f0 [ 264.449875][ T7966] should_fail_ex+0x512/0x640 [ 264.449908][ T7966] ? fs_reclaim_acquire+0xae/0x150 [ 264.449945][ T7966] should_failslab+0xc2/0x120 [ 264.449974][ T7966] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 264.450001][ T7966] ? security_inode_alloc+0x3b/0x2b0 [ 264.450030][ T7966] security_inode_alloc+0x3b/0x2b0 [ 264.450056][ T7966] inode_init_always_gfp+0xce4/0x1030 [ 264.450099][ T7966] alloc_inode+0x86/0x240 [ 264.450127][ T7966] iget_locked+0x2e4/0x830 [ 264.450154][ T7966] ? stack_trace_save+0x8e/0xc0 [ 264.450180][ T7966] ? __pfx_iget_locked+0x10/0x10 [ 264.450212][ T7966] ? find_held_lock+0x2b/0x80 [ 264.450234][ T7966] ? kernfs_find_and_get_node_by_id+0x1c3/0x3f0 [ 264.450267][ T7966] kernfs_get_inode+0x48/0x460 [ 264.450304][ T7966] kernfs_fh_to_dentry+0xf3/0x250 [ 264.450338][ T7966] exportfs_decode_fh_raw+0x164/0x890 [ 264.450395][ T7966] ? __pfx_vfs_dentry_acceptable+0x10/0x10 [ 264.450432][ T7966] ? __pfx_kernfs_fh_to_dentry+0x10/0x10 [ 264.450466][ T7966] ? __pfx_exportfs_decode_fh_raw+0x10/0x10 [ 264.450544][ T7966] do_handle_open+0x75e/0xb70 [ 264.450580][ T7966] ? __pfx_do_handle_open+0x10/0x10 [ 264.450617][ T7966] ? ksys_write+0x1b9/0x240 [ 264.450639][ T7966] ? rcu_is_watching+0x12/0xc0 [ 264.450667][ T7966] ? do_syscall_64+0xcd/0x230 [ 264.450700][ T7966] do_syscall_64+0xcd/0x230 [ 264.450734][ T7966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.450758][ T7966] RIP: 0033:0x7f2ba898e969 [ 264.450776][ T7966] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 264.450798][ T7966] RSP: 002b:00007f2ba97b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 264.450819][ T7966] RAX: ffffffffffffffda RBX: 00007f2ba8bb6160 RCX: 00007f2ba898e969 [ 264.450834][ T7966] RDX: 000000000000036c RSI: 0000200000000000 RDI: 000000000000000a [ 264.450848][ T7966] RBP: 00007f2ba97b7090 R08: 0000000000000000 R09: 0000000000000000 [ 264.450861][ T7966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 264.450874][ T7966] R13: 0000000000000000 R14: 00007f2ba8bb6160 R15: 00007ffd10713c18 [ 264.450903][ T7966] [ 269.101599][ T7960] tty tty53: ldisc open failed (-12), clearing slot 52 [ 269.119931][ T7999] pty pty121: ldisc open failed (-12), clearing slot 121 [ 269.491768][ T8016] FAULT_INJECTION: forcing a failure. [ 269.491768][ T8016] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 269.577643][ T8016] CPU: 1 UID: 0 PID: 8016 Comm: syz.0.457 Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) [ 269.577679][ T8016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 269.577694][ T8016] Call Trace: [ 269.577701][ T8016] [ 269.577709][ T8016] dump_stack_lvl+0x16c/0x1f0 [ 269.577748][ T8016] should_fail_ex+0x512/0x640 [ 269.577787][ T8016] _copy_from_user+0x2e/0xd0 [ 269.577825][ T8016] do_pages_stat+0x239/0x800 [ 269.577865][ T8016] ? __pfx_do_pages_stat+0x10/0x10 [ 269.577923][ T8016] ? do_raw_spin_unlock+0x172/0x230 [ 269.577965][ T8016] kernel_move_pages+0xfd5/0x13a0 [ 269.578004][ T8016] ? __pfx_do_futex+0x10/0x10 [ 269.578031][ T8016] ? __pfx_kernel_move_pages+0x10/0x10 [ 269.578069][ T8016] ? __x64_sys_futex+0x1e0/0x4c0 [ 269.578100][ T8016] ? __x64_sys_futex+0x1e9/0x4c0 [ 269.578128][ T8016] ? xfd_validate_state+0x5d/0x180 [ 269.578169][ T8016] ? rcu_is_watching+0x12/0xc0 [ 269.578194][ T8016] __x64_sys_move_pages+0xe0/0x1c0 [ 269.578228][ T8016] ? do_syscall_64+0x91/0x230 [ 269.578261][ T8016] ? lockdep_hardirqs_on+0x7c/0x110 [ 269.578293][ T8016] do_syscall_64+0xcd/0x230 [ 269.578330][ T8016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.578353][ T8016] RIP: 0033:0x7f0b3fd8e969 [ 269.578371][ T8016] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 269.578394][ T8016] RSP: 002b:00007f0b40c6e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 269.578415][ T8016] RAX: ffffffffffffffda RBX: 00007f0b3ffb5fa0 RCX: 00007f0b3fd8e969 [ 269.578430][ T8016] RDX: 0000000000000000 RSI: 0000000000000f54 RDI: 0000000000000001 [ 269.578444][ T8016] RBP: 00007f0b3fe10ab1 R08: 0000000000000000 R09: 8000000000000000 [ 269.578459][ T8016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 269.578472][ T8016] R13: 0000000000000000 R14: 00007f0b3ffb5fa0 R15: 00007ffffa430868 [ 269.578500][ T8016] [ 273.145631][ T8062] netlink: 4 bytes leftover after parsing attributes in process `syz.1.466'. [ 273.328927][ T8065] netlink: 28 bytes leftover after parsing attributes in process `syz.0.467'. [ 275.216718][ T8090] netlink: 206 bytes leftover after parsing attributes in process `syz.2.473'. [ 279.343558][ T8137] FAULT_INJECTION: forcing a failure. [ 279.343558][ T8137] name failslab, interval 1, probability 0, space 0, times 0 [ 279.415314][ T8137] CPU: 1 UID: 0 PID: 8137 Comm: syz.1.485 Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) [ 279.415348][ T8137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 279.415362][ T8137] Call Trace: [ 279.415369][ T8137] [ 279.415377][ T8137] dump_stack_lvl+0x16c/0x1f0 [ 279.415417][ T8137] should_fail_ex+0x512/0x640 [ 279.415451][ T8137] ? fs_reclaim_acquire+0xae/0x150 [ 279.415490][ T8137] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 279.415525][ T8137] should_failslab+0xc2/0x120 [ 279.415554][ T8137] __kmalloc_noprof+0xd2/0x510 [ 279.415587][ T8137] tomoyo_realpath_from_path+0xc2/0x6e0 [ 279.415631][ T8137] tomoyo_check_open_permission+0x2ab/0x3c0 [ 279.415661][ T8137] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 279.415720][ T8137] ? do_raw_spin_lock+0x12c/0x2b0 [ 279.415766][ T8137] tomoyo_file_open+0x6b/0x90 [ 279.415806][ T8137] security_file_open+0x84/0x1e0 [ 279.415846][ T8137] do_dentry_open+0x596/0x1c10 [ 279.415880][ T8137] vfs_open+0x82/0x3f0 [ 279.415914][ T8137] path_openat+0x1e5e/0x2d40 [ 279.415949][ T8137] ? __pfx_path_openat+0x10/0x10 [ 279.415979][ T8137] do_filp_open+0x20b/0x470 [ 279.416002][ T8137] ? __pfx_do_filp_open+0x10/0x10 [ 279.416046][ T8137] ? alloc_fd+0x471/0x7d0 [ 279.416091][ T8137] do_sys_openat2+0x11b/0x1d0 [ 279.416123][ T8137] ? __pfx_do_sys_openat2+0x10/0x10 [ 279.416166][ T8137] __x64_sys_openat+0x174/0x210 [ 279.416199][ T8137] ? __pfx___x64_sys_openat+0x10/0x10 [ 279.416234][ T8137] ? rcu_is_watching+0x12/0xc0 [ 279.416264][ T8137] do_syscall_64+0xcd/0x230 [ 279.416301][ T8137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.416325][ T8137] RIP: 0033:0x7f2ba898e969 [ 279.416343][ T8137] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 279.416366][ T8137] RSP: 002b:00007f2ba97f9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 279.416388][ T8137] RAX: ffffffffffffffda RBX: 00007f2ba8bb5fa0 RCX: 00007f2ba898e969 [ 279.416403][ T8137] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 279.416417][ T8137] RBP: 00007f2ba8a10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 279.416431][ T8137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 279.416445][ T8137] R13: 0000000000000000 R14: 00007f2ba8bb5fa0 R15: 00007ffd10713c18 [ 279.416476][ T8137] [ 279.416485][ T8137] ERROR: Out of memory at tomoyo_realpath_from_path. [ 279.934899][ T8145] netlink: 206 bytes leftover after parsing attributes in process `syz.3.487'. [ 280.955433][ T8162] cifs: Unknown parameter 'T.żc[$⁍)UÑnE-ʙl- -_5Z omfwYh*/xDlݩgkǐA79Xa/f_ARxM vp$^;q3n-6+ekU;߸Ilk [ 288.995561][ T8253] : renamed from hsr0 (while UP) [ 291.844867][ T8290] cifs: Unknown parameter 'T.żc[$⁍)UÑnE-ʙl- -_5Z omfwYh*/xDlݩgkǐA79Xa/f_ARxM vp$^;q3n-6+ek [ 293.847769][ T8314] dump_stack_lvl+0x16c/0x1f0 [ 293.847807][ T8314] should_fail_ex+0x512/0x640 [ 293.847843][ T8314] should_fail_alloc_page+0xe7/0x130 [ 293.847872][ T8314] prepare_alloc_pages+0x3c2/0x610 [ 293.847910][ T8314] __alloc_frozen_pages_noprof+0x18f/0x23a0 [ 293.847937][ T8314] ? copy_splice_read+0x1a8/0xba0 [ 293.847968][ T8314] ? stack_trace_save+0x8e/0xc0 [ 293.847990][ T8314] ? __pfx_stack_trace_save+0x10/0x10 [ 293.848011][ T8314] ? stack_depot_save_flags+0x28/0xa50 [ 293.848049][ T8314] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 293.848073][ T8314] ? kasan_save_stack+0x33/0x60 [ 293.848095][ T8314] ? __kasan_kmalloc+0xaa/0xb0 [ 293.848116][ T8314] ? copy_splice_read+0x1a8/0xba0 [ 293.848145][ T8314] ? do_splice_read+0x282/0x370 [ 293.848173][ T8314] ? splice_direct_to_actor+0x2a1/0xa30 [ 293.848204][ T8314] ? do_splice_direct+0x174/0x240 [ 293.848233][ T8314] ? do_sendfile+0xafd/0xe50 [ 293.848274][ T8314] ? __x64_sys_sendfile64+0x1d8/0x220 [ 293.848300][ T8314] ? do_syscall_64+0xcd/0x230 [ 293.848354][ T8314] alloc_pages_bulk_noprof+0x703/0x13b0 [ 293.848389][ T8314] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 293.848422][ T8314] ? trace_kmalloc+0x2b/0xd0 [ 293.848452][ T8314] ? __kmalloc_noprof+0x242/0x510 [ 293.848483][ T8314] copy_splice_read+0x1e1/0xba0 [ 293.848523][ T8314] ? __pfx_copy_splice_read+0x10/0x10 [ 293.848560][ T8314] ? look_up_lock_class+0x6b/0x150 [ 293.848595][ T8314] ? lockdep_init_map_type+0x5c/0x280 [ 293.848629][ T8314] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 293.848669][ T8314] ? __pfx_copy_splice_read+0x10/0x10 [ 293.848702][ T8314] do_splice_read+0x282/0x370 [ 293.848739][ T8314] splice_direct_to_actor+0x2a1/0xa30 [ 293.848776][ T8314] ? __pfx_direct_splice_actor+0x10/0x10 [ 293.848816][ T8314] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 293.848849][ T8314] ? get_pid_task+0xfc/0x250 [ 293.848889][ T8314] do_splice_direct+0x174/0x240 [ 293.848924][ T8314] ? __pfx_do_splice_direct+0x10/0x10 [ 293.848959][ T8314] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 293.848998][ T8314] ? rw_verify_area+0xcf/0x680 [ 293.849034][ T8314] do_sendfile+0xafd/0xe50 [ 293.849075][ T8314] ? __pfx_do_sendfile+0x10/0x10 [ 293.849112][ T8314] ? __fget_files+0x20e/0x3c0 [ 293.849156][ T8314] __x64_sys_sendfile64+0x1d8/0x220 [ 293.849182][ T8314] ? ksys_write+0x1b9/0x240 [ 293.849202][ T8314] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 293.849229][ T8314] ? rcu_is_watching+0x12/0xc0 [ 293.849261][ T8314] do_syscall_64+0xcd/0x230 [ 293.849297][ T8314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.849321][ T8314] RIP: 0033:0x7f936ff8e969 [ 293.849338][ T8314] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 293.849360][ T8314] RSP: 002b:00007f936ddf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 293.849381][ T8314] RAX: ffffffffffffffda RBX: 00007f93701b6160 RCX: 00007f936ff8e969 [ 293.849396][ T8314] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000007 [ 293.849409][ T8314] RBP: 00007f936ddf6090 R08: 0000000000000000 R09: 0000000000000000 [ 293.849423][ T8314] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001 [ 293.849436][ T8314] R13: 0000000000000000 R14: 00007f93701b6160 R15: 00007ffe9c42f738 [ 293.849464][ T8314] [ 294.707295][ T8331] cifs: Unknown parameter 'T.żc[$⁍)UÑnE-ʙl- -_5Z omfwYh*/xDlݩgkǐA79Xa/f_ARxM vp$^;q3n-6+ek [ 295.328040][ T8340] dump_stack_lvl+0x16c/0x1f0 [ 295.328085][ T8340] should_fail_ex+0x512/0x640 [ 295.328123][ T8340] _copy_to_user+0x32/0xd0 [ 295.328162][ T8340] simple_read_from_buffer+0xcb/0x170 [ 295.328198][ T8340] proc_fail_nth_read+0x197/0x270 [ 295.328232][ T8340] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 295.328267][ T8340] ? rw_verify_area+0xcf/0x680 [ 295.328300][ T8340] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 295.328333][ T8340] vfs_read+0x1de/0xc70 [ 295.328358][ T8340] ? __pfx___mutex_lock+0x10/0x10 [ 295.328392][ T8340] ? __pfx_vfs_read+0x10/0x10 [ 295.328420][ T8340] ? __fget_files+0x20e/0x3c0 [ 295.328465][ T8340] ksys_read+0x12a/0x240 [ 295.328486][ T8340] ? __pfx_ksys_read+0x10/0x10 [ 295.328505][ T8340] ? rcu_is_watching+0x12/0xc0 [ 295.328535][ T8340] do_syscall_64+0xcd/0x230 [ 295.328571][ T8340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.328594][ T8340] RIP: 0033:0x7f2ba898d37c [ 295.328611][ T8340] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 295.328633][ T8340] RSP: 002b:00007f2ba97d8030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 295.328654][ T8340] RAX: ffffffffffffffda RBX: 00007f2ba8bb6080 RCX: 00007f2ba898d37c [ 295.328669][ T8340] RDX: 000000000000000f RSI: 00007f2ba97d80a0 RDI: 0000000000000004 [ 295.328683][ T8340] RBP: 00007f2ba97d8090 R08: 0000000000000000 R09: 0000000000000000 [ 295.328696][ T8340] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001 [ 295.328709][ T8340] R13: 0000000000000001 R14: 00007f2ba8bb6080 R15: 00007ffd10713c18 [ 295.328738][ T8340] [ 296.803176][ T8354] vcan0: tx drop: invalid da for name 0x000000000000003f [ 297.001580][ T8352] usb usb36: usbfs: process 8352 (syz.3.540) did not claim interface 0 before use [ 299.510318][ T8394] ima: policy update failed [ 299.539072][ T30] audit: type=1802 audit(4294967346.573:7): pid=8394 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.549" res=0 errno=0 [ 300.928980][ T8420] FAULT_INJECTION: forcing a failure. [ 300.928980][ T8420] name failslab, interval 1, probability 0, space 0, times 0 [ 301.047010][ T8420] CPU: 1 UID: 0 PID: 8420 Comm: syz.1.558 Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) [ 301.047045][ T8420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 301.047059][ T8420] Call Trace: [ 301.047067][ T8420] [ 301.047076][ T8420] dump_stack_lvl+0x16c/0x1f0 [ 301.047116][ T8420] should_fail_ex+0x512/0x640 [ 301.047150][ T8420] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 301.047181][ T8420] should_failslab+0xc2/0x120 [ 301.047210][ T8420] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 301.047237][ T8420] ? __alloc_skb+0x2b2/0x380 [ 301.047267][ T8420] __alloc_skb+0x2b2/0x380 [ 301.047291][ T8420] ? __pfx___alloc_skb+0x10/0x10 [ 301.047319][ T8420] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 301.047347][ T8420] ? __lock_acquire+0xaa4/0x1ba0 [ 301.047383][ T8420] netlink_alloc_large_skb+0x69/0x130 [ 301.047414][ T8420] netlink_sendmsg+0x6a1/0xdd0 [ 301.047449][ T8420] ? __pfx_netlink_sendmsg+0x10/0x10 [ 301.047490][ T8420] ____sys_sendmsg+0xa95/0xc70 [ 301.047525][ T8420] ? copy_msghdr_from_user+0x10a/0x160 [ 301.047586][ T8420] ? __pfx_____sys_sendmsg+0x10/0x10 [ 301.047629][ T8420] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 301.047668][ T8420] ___sys_sendmsg+0x134/0x1d0 [ 301.047699][ T8420] ? __pfx____sys_sendmsg+0x10/0x10 [ 301.047760][ T8420] __sys_sendmsg+0x16d/0x220 [ 301.047787][ T8420] ? __pfx___sys_sendmsg+0x10/0x10 [ 301.047813][ T8420] ? __x64_sys_futex+0x1e0/0x4c0 [ 301.047848][ T8420] ? rcu_is_watching+0x12/0xc0 [ 301.047878][ T8420] do_syscall_64+0xcd/0x230 [ 301.047915][ T8420] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.047942][ T8420] RIP: 0033:0x7f2ba898e969 [ 301.047960][ T8420] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 301.047983][ T8420] RSP: 002b:00007f2ba97f9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 301.048005][ T8420] RAX: ffffffffffffffda RBX: 00007f2ba8bb5fa0 RCX: 00007f2ba898e969 [ 301.048021][ T8420] RDX: 0000000000008880 RSI: 0000200000001e00 RDI: 0000000000000008 [ 301.048039][ T8420] RBP: 00007f2ba8a10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 301.048053][ T8420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 301.048067][ T8420] R13: 0000000000000000 R14: 00007f2ba8bb5fa0 R15: 00007ffd10713c18 [ 301.048096][ T8420] [ 301.283976][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803340fc00: rx timeout, send abort [ 301.294779][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88803340fc00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 301.787930][ T8425] netlink: 8 bytes leftover after parsing attributes in process `syz.2.560'. [ 302.929518][ T8415] delete_channel: no stack [ 303.028882][ T30] audit: type=1800 audit(4294967350.054:8): pid=8438 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.562" name="SYSV00000008" dev="hugetlbfs" ino=0 res=0 errno=0 [ 303.156294][ T8444] netlink: 330 bytes leftover after parsing attributes in process `syz.2.564'. [ 303.672136][ T8453] openvswitch: netlink: Message has 8 unknown bytes. [ 304.327914][ T8463] hub 8-0:1.0: USB hub found [ 304.410021][ T8463] hub 8-0:1.0: 1 port detected [ 304.492757][ T8471] svc: failed to register nfsdv3 RPC service (errno 111). [ 304.544505][ T8471] svc: failed to register nfsaclv3 RPC service (errno 111). [ 305.030562][ T8480] netlink: 28 bytes leftover after parsing attributes in process `syz.0.574'. [ 305.068478][ T8480] ipvlan1: entered allmulticast mode [ 305.073853][ T8480] veth0_vlan: entered allmulticast mode [ 305.173126][ T8480] netlink: 330 bytes leftover after parsing attributes in process `syz.0.574'. [ 305.285319][ T8486] netlink: 20 bytes leftover after parsing attributes in process `syz.0.574'. [ 308.650346][ T8525] FAULT_INJECTION: forcing a failure. [ 308.650346][ T8525] name failslab, interval 1, probability 0, space 0, times 0 [ 308.719832][ T8525] CPU: 1 UID: 0 PID: 8525 Comm: syz.0.586 Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) [ 308.719866][ T8525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 308.719880][ T8525] Call Trace: [ 308.719887][ T8525] [ 308.719896][ T8525] dump_stack_lvl+0x16c/0x1f0 [ 308.719935][ T8525] should_fail_ex+0x512/0x640 [ 308.719967][ T8525] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 308.719995][ T8525] should_failslab+0xc2/0x120 [ 308.720022][ T8525] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 308.720047][ T8525] ? __alloc_skb+0x2b2/0x380 [ 308.720074][ T8525] __alloc_skb+0x2b2/0x380 [ 308.720096][ T8525] ? __pfx___alloc_skb+0x10/0x10 [ 308.720130][ T8525] netlink_ack+0x15d/0xb80 [ 308.720155][ T8525] ? __mutex_trylock_common+0xe9/0x250 [ 308.720194][ T8525] netlink_rcv_skb+0x347/0x440 [ 308.720221][ T8525] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 308.720252][ T8525] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 308.720299][ T8525] ? netlink_deliver_tap+0x1ae/0xd30 [ 308.720330][ T8525] xfrm_netlink_rcv+0x71/0x90 [ 308.720356][ T8525] netlink_unicast+0x53a/0x7f0 [ 308.720389][ T8525] ? __pfx_netlink_unicast+0x10/0x10 [ 308.720416][ T8525] ? __lock_acquire+0xaa4/0x1ba0 [ 308.720454][ T8525] netlink_sendmsg+0x8d1/0xdd0 [ 308.720488][ T8525] ? __pfx_netlink_sendmsg+0x10/0x10 [ 308.720528][ T8525] ____sys_sendmsg+0xa95/0xc70 [ 308.720563][ T8525] ? copy_msghdr_from_user+0x10a/0x160 [ 308.720589][ T8525] ? __pfx_____sys_sendmsg+0x10/0x10 [ 308.720627][ T8525] ? kfree+0x252/0x4d0 [ 308.720651][ T8525] ? __pfx__kstrtoull+0x10/0x10 [ 308.720684][ T8525] ___sys_sendmsg+0x134/0x1d0 [ 308.720712][ T8525] ? __pfx____sys_sendmsg+0x10/0x10 [ 308.720765][ T8525] ? __pfx___might_resched+0x10/0x10 [ 308.720797][ T8525] __sys_sendmmsg+0x200/0x420 [ 308.720827][ T8525] ? __pfx___sys_sendmmsg+0x10/0x10 [ 308.720863][ T8525] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 308.720911][ T8525] ? fput+0x70/0xf0 [ 308.720937][ T8525] ? ksys_write+0x1b9/0x240 [ 308.720958][ T8525] ? __pfx_ksys_write+0x10/0x10 [ 308.720979][ T8525] ? rcu_is_watching+0x12/0xc0 [ 308.721005][ T8525] __x64_sys_sendmmsg+0x9c/0x100 [ 308.721031][ T8525] ? lockdep_hardirqs_on+0x7c/0x110 [ 308.721063][ T8525] do_syscall_64+0xcd/0x230 [ 308.721099][ T8525] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.721122][ T8525] RIP: 0033:0x7f0b3fd8e969 [ 308.721140][ T8525] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 308.721161][ T8525] RSP: 002b:00007f0b40c6e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 308.721183][ T8525] RAX: ffffffffffffffda RBX: 00007f0b3ffb5fa0 RCX: 00007f0b3fd8e969 [ 308.721198][ T8525] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 308.721211][ T8525] RBP: 00007f0b40c6e090 R08: 0000000000000000 R09: 0000000000000000 [ 308.721225][ T8525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 308.721238][ T8525] R13: 0000000000000000 R14: 00007f0b3ffb5fa0 R15: 00007ffffa430868 [ 308.721267][ T8525] [ 311.478250][ T8554] netlink: 28 bytes leftover after parsing attributes in process `syz.3.593'. [ 311.724750][ T8541] ima: policy update failed [ 311.881756][ T30] audit: type=1802 audit(4294967358.926:9): pid=8541 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.591" res=0 errno=0 [ 312.483712][ T8570] netlink: 28 bytes leftover after parsing attributes in process `syz.1.597'. [ 316.820067][ T8620] FAULT_INJECTION: forcing a failure. [ 316.820067][ T8620] name failslab, interval 1, probability 0, space 0, times 0 [ 316.994019][ T8620] CPU: 1 UID: 0 PID: 8620 Comm: syz.1.610 Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) [ 316.994053][ T8620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 316.994067][ T8620] Call Trace: [ 316.994074][ T8620] [ 316.994083][ T8620] dump_stack_lvl+0x16c/0x1f0 [ 316.994121][ T8620] should_fail_ex+0x512/0x640 [ 316.994155][ T8620] ? __kvmalloc_node_noprof+0x122/0x600 [ 316.994182][ T8620] should_failslab+0xc2/0x120 [ 316.994216][ T8620] __kvmalloc_node_noprof+0x135/0x600 [ 316.994241][ T8620] ? seq_read_iter+0x826/0x12c0 [ 316.994279][ T8620] ? seq_read_iter+0x826/0x12c0 [ 316.994311][ T8620] seq_read_iter+0x826/0x12c0 [ 316.994344][ T8620] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 316.994381][ T8620] kernfs_fop_read_iter+0x40f/0x5a0 [ 316.994417][ T8620] copy_splice_read+0x615/0xba0 [ 316.994457][ T8620] ? __pfx_copy_splice_read+0x10/0x10 [ 316.994494][ T8620] ? look_up_lock_class+0x6b/0x150 [ 316.994530][ T8620] ? lockdep_init_map_type+0x5c/0x280 [ 316.994564][ T8620] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 316.994604][ T8620] ? __pfx_copy_splice_read+0x10/0x10 [ 316.994638][ T8620] do_splice_read+0x282/0x370 [ 316.994674][ T8620] splice_direct_to_actor+0x2a1/0xa30 [ 316.994710][ T8620] ? __pfx_direct_splice_actor+0x10/0x10 [ 316.994751][ T8620] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 316.994784][ T8620] ? get_pid_task+0xfc/0x250 [ 316.994828][ T8620] do_splice_direct+0x174/0x240 [ 316.994864][ T8620] ? __pfx_do_splice_direct+0x10/0x10 [ 316.994899][ T8620] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 316.994938][ T8620] ? rw_verify_area+0xcf/0x680 [ 316.994975][ T8620] do_sendfile+0xafd/0xe50 [ 316.995016][ T8620] ? __pfx_do_sendfile+0x10/0x10 [ 316.995053][ T8620] ? __fget_files+0x20e/0x3c0 [ 316.995098][ T8620] __x64_sys_sendfile64+0x1d8/0x220 [ 316.995124][ T8620] ? ksys_write+0x1b9/0x240 [ 316.995145][ T8620] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 316.995171][ T8620] ? rcu_is_watching+0x12/0xc0 [ 316.995200][ T8620] do_syscall_64+0xcd/0x230 [ 316.995234][ T8620] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.995256][ T8620] RIP: 0033:0x7f2ba898e969 [ 316.995273][ T8620] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 316.995293][ T8620] RSP: 002b:00007f2ba97b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 316.995313][ T8620] RAX: ffffffffffffffda RBX: 00007f2ba8bb6160 RCX: 00007f2ba898e969 [ 316.995327][ T8620] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000007 [ 316.995339][ T8620] RBP: 00007f2ba97b7090 R08: 0000000000000000 R09: 0000000000000000 [ 316.995352][ T8620] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001 [ 316.995364][ T8620] R13: 0000000000000000 R14: 00007f2ba8bb6160 R15: 00007ffd10713c18 [ 316.995391][ T8620] [ 320.570332][ T8659] FAULT_INJECTION: forcing a failure. [ 320.570332][ T8659] name failslab, interval 1, probability 0, space 0, times 0 [ 320.645430][ T8659] CPU: 1 UID: 0 PID: 8659 Comm: syz.2.619 Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) [ 320.645462][ T8659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 320.645476][ T8659] Call Trace: [ 320.645483][ T8659] [ 320.645491][ T8659] dump_stack_lvl+0x16c/0x1f0 [ 320.645529][ T8659] should_fail_ex+0x512/0x640 [ 320.645562][ T8659] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 320.645591][ T8659] should_failslab+0xc2/0x120 [ 320.645619][ T8659] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 320.645644][ T8659] ? __pfx_stack_trace_save+0x10/0x10 [ 320.645668][ T8659] ? getname_kernel+0x52/0x370 [ 320.645699][ T8659] getname_kernel+0x52/0x370 [ 320.645727][ T8659] do_file_open_root+0x19d/0x610 [ 320.645747][ T8659] ? __kasan_slab_free+0x51/0x70 [ 320.645772][ T8659] ? kfree+0x2b6/0x4d0 [ 320.645791][ T8659] ? __pfx_do_file_open_root+0x10/0x10 [ 320.645844][ T8659] ? do_raw_spin_lock+0x12c/0x2b0 [ 320.645883][ T8659] file_open_root+0x2a7/0x450 [ 320.645908][ T8659] ? __pfx_file_open_root+0x10/0x10 [ 320.645930][ T8659] ? _raw_spin_unlock+0x28/0x50 [ 320.645968][ T8659] do_handle_open+0x9e9/0xb70 [ 320.646004][ T8659] ? __pfx_do_handle_open+0x10/0x10 [ 320.646041][ T8659] ? ksys_write+0x1b9/0x240 [ 320.646062][ T8659] ? rcu_is_watching+0x12/0xc0 [ 320.646089][ T8659] ? do_syscall_64+0xcd/0x230 [ 320.646122][ T8659] do_syscall_64+0xcd/0x230 [ 320.646157][ T8659] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.646180][ T8659] RIP: 0033:0x7f936ff8e969 [ 320.646198][ T8659] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 320.646220][ T8659] RSP: 002b:00007f936ddd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 320.646241][ T8659] RAX: ffffffffffffffda RBX: 00007f93701b6240 RCX: 00007f936ff8e969 [ 320.646256][ T8659] RDX: 000000000000036c RSI: 0000200000000000 RDI: 000000000000000a [ 320.646270][ T8659] RBP: 00007f936ddd5090 R08: 0000000000000000 R09: 0000000000000000 [ 320.646284][ T8659] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 320.646297][ T8659] R13: 0000000000000000 R14: 00007f93701b6240 R15: 00007ffe9c42f738 [ 320.646326][ T8659] [ 321.454633][ T8673] Invalid ELF header magic: != ELF [ 322.188976][ T8683] netlink: 28 bytes leftover after parsing attributes in process `syz.3.625'. [ 322.217498][ T8683] ipvlan1: entered allmulticast mode [ 322.244573][ T8683] veth0_vlan: entered allmulticast mode [ 322.288804][ T8685] netlink: 330 bytes leftover after parsing attributes in process `syz.3.625'. [ 322.330866][ T8684] netlink: 206 bytes leftover after parsing attributes in process `syz.1.626'. [ 322.397622][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.405275][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.416239][ T8683] netlink: 20 bytes leftover after parsing attributes in process `syz.3.625'. [ 323.906136][ T8710] netlink: 8 bytes leftover after parsing attributes in process `syz.3.632'. [ 325.423161][ T8715] delete_channel: no stack [ 326.796119][ T8742] FAULT_INJECTION: forcing a failure. [ 326.796119][ T8742] name fail_futex, interval 1, probability 0, space 0, times 0 [ 326.854354][ T8742] CPU: 1 UID: 0 PID: 8742 Comm: syz.3.640 Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) [ 326.854390][ T8742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 326.854405][ T8742] Call Trace: [ 326.854412][ T8742] [ 326.854422][ T8742] dump_stack_lvl+0x16c/0x1f0 [ 326.854461][ T8742] should_fail_ex+0x512/0x640 [ 326.854502][ T8742] get_futex_key+0x49e/0x1000 [ 326.854528][ T8742] ? __pfx_try_to_wake_up+0x10/0x10 [ 326.854551][ T8742] ? __pfx_get_futex_key+0x10/0x10 [ 326.854572][ T8742] ? check_zeroed_user+0x6f/0x1b0 [ 326.854613][ T8742] ? bpf_check_uarg_tail_zero+0x127/0x1b0 [ 326.854644][ T8742] ? __pfx_bpf_check_uarg_tail_zero+0x10/0x10 [ 326.854678][ T8742] futex_wake+0xe7/0x4e0 [ 326.854710][ T8742] ? __pfx_futex_wake+0x10/0x10 [ 326.854760][ T8742] do_futex+0x1e3/0x350 [ 326.854786][ T8742] ? __pfx_do_futex+0x10/0x10 [ 326.854820][ T8742] __x64_sys_futex+0x1e0/0x4c0 [ 326.854850][ T8742] ? __pfx___x64_sys_futex+0x10/0x10 [ 326.854878][ T8742] ? rcu_is_watching+0x12/0xc0 [ 326.854908][ T8742] do_syscall_64+0xcd/0x230 [ 326.854945][ T8742] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.854969][ T8742] RIP: 0033:0x7f4aa6d8e969 [ 326.854988][ T8742] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 326.855012][ T8742] RSP: 002b:00007f4aa7b600e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 326.855034][ T8742] RAX: ffffffffffffffda RBX: 00007f4aa6fb5fa8 RCX: 00007f4aa6d8e969 [ 326.855049][ T8742] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f4aa6fb5fac [ 326.855065][ T8742] RBP: 00007f4aa6fb5fa0 R08: 00007f4aa7b61000 R09: 0000000000000000 [ 326.855079][ T8742] R10: ffffffffffffffff R11: 0000000000000246 R12: 00007f4aa6fb5fac [ 326.855094][ T8742] R13: 0000000000000000 R14: 00007ffe93259580 R15: 00007ffe93259668 [ 326.855123][ T8742] [ 327.836660][ T8746] svc: failed to register nfsdv3 RPC service (errno 101). [ 327.872013][ T8746] svc: failed to register nfsaclv3 RPC service (errno 101). [ 328.622929][ T8761] netlink: 28 bytes leftover after parsing attributes in process `syz.3.644'. [ 332.273644][ T8799] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 333.542346][ T8807] netlink: 'syz.1.652': attribute type 11 has an invalid length. [ 333.693202][ T8808] netlink: 28 bytes leftover after parsing attributes in process `syz.1.652'. [ 333.762457][ T8807] netlink: 'syz.1.652': attribute type 11 has an invalid length. [ 333.784528][ T8821] netlink: 28 bytes leftover after parsing attributes in process `syz.2.656'. [ 333.868645][ T8807] netlink: 4 bytes leftover after parsing attributes in process `syz.1.652'. [ 333.947396][ T8808] ipvlan1: entered promiscuous mode [ 333.995543][ T8827] netlink: 28 bytes leftover after parsing attributes in process `syz.3.655'. [ 334.048236][ T8808] ipvlan1: entered allmulticast mode [ 334.093387][ T8807] netlink: 'syz.1.652': attribute type 11 has an invalid length. [ 334.166348][ T8808] veth0_vlan: entered allmulticast mode [ 334.209802][ T8807] netlink: 20 bytes leftover after parsing attributes in process `syz.1.652'. [ 334.288742][ T8805] delete_channel: no stack [ 334.344041][ T8807] netlink: 200 bytes leftover after parsing attributes in process `syz.1.652'. [ 339.229765][ T8869] delete_channel: no stack [ 339.911679][ T8900] netlink: 28 bytes leftover after parsing attributes in process `syz.2.667'. [ 340.936450][ T8908] i2c i2c-0: new_device: Can't parse I2C address [ 343.451959][ T8909] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 343.798994][ T8939] delete_channel: no stack [ 343.838082][ T8943] FAULT_INJECTION: forcing a failure. [ 343.838082][ T8943] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 343.856219][ T8923] delete_channel: no stack [ 343.949105][ T8943] CPU: 1 UID: 0 PID: 8943 Comm: syz.1.677 Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) [ 343.949140][ T8943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 343.949154][ T8943] Call Trace: [ 343.949162][ T8943] [ 343.949171][ T8943] dump_stack_lvl+0x16c/0x1f0 [ 343.949210][ T8943] should_fail_ex+0x512/0x640 [ 343.949247][ T8943] should_fail_alloc_page+0xe7/0x130 [ 343.949278][ T8943] prepare_alloc_pages+0x3c2/0x610 [ 343.949319][ T8943] __alloc_frozen_pages_noprof+0x18f/0x23a0 [ 343.949353][ T8943] ? __lock_acquire+0x5ca/0x1ba0 [ 343.949390][ T8943] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 343.949433][ T8943] ? find_held_lock+0x2b/0x80 [ 343.949455][ T8943] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 343.949493][ T8943] ? policy_nodemask+0xea/0x4e0 [ 343.949525][ T8943] alloc_pages_mpol+0x1fb/0x550 [ 343.949555][ T8943] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 343.949592][ T8943] folio_alloc_mpol_noprof+0x36/0x2f0 [ 343.949627][ T8943] shmem_alloc_folio+0x135/0x160 [ 343.949651][ T8943] shmem_alloc_and_add_folio+0x499/0xc20 [ 343.949686][ T8943] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 343.949717][ T8943] ? shmem_allowable_huge_orders+0xcb/0x2f0 [ 343.949751][ T8943] shmem_get_folio_gfp+0x687/0x1530 [ 343.949787][ T8943] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 343.949818][ T8943] ? filemap_map_pages+0xf6c/0x1680 [ 343.949851][ T8943] shmem_fault+0x1fe/0xa30 [ 343.949881][ T8943] ? __pfx_shmem_fault+0x10/0x10 [ 343.949928][ T8943] ? __pfx_filemap_map_pages+0x10/0x10 [ 343.949966][ T8943] __do_fault+0x10a/0x490 [ 343.949998][ T8943] do_pte_missing+0x1031/0x3fb0 [ 343.950021][ T8943] ? do_raw_spin_unlock+0x172/0x230 [ 343.950059][ T8943] ? __pmd_alloc+0x3c2/0x870 [ 343.950091][ T8943] ? find_held_lock+0x2b/0x80 [ 343.950114][ T8943] __handle_mm_fault+0x103d/0x2a40 [ 343.950146][ T8943] ? __pfx___handle_mm_fault+0x10/0x10 [ 343.950187][ T8943] ? find_vma+0xbf/0x140 [ 343.950217][ T8943] ? __pfx_find_vma+0x10/0x10 [ 343.950253][ T8943] handle_mm_fault+0x3fe/0xad0 [ 343.950281][ T8943] do_user_addr_fault+0x7a6/0x1370 [ 343.950308][ T8943] ? rcu_is_watching+0x12/0xc0 [ 343.950332][ T8943] exc_page_fault+0x5c/0xc0 [ 343.950364][ T8943] asm_exc_page_fault+0x26/0x30 [ 343.950387][ T8943] RIP: 0010:rep_movs_alternative+0x30/0x90 [ 343.950414][ T8943] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 343.950437][ T8943] RSP: 0018:ffffc90003cdfc58 EFLAGS: 00050246 [ 343.950455][ T8943] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000008 [ 343.950469][ T8943] RDX: fffff5200079bf97 RSI: 0000000000000000 RDI: ffffc90003cdfcb0 [ 343.950484][ T8943] RBP: 0000000000000008 R08: 0000000000000001 R09: fffff5200079bf96 [ 343.950498][ T8943] R10: ffffc90003cdfcb7 R11: 0000000000000000 R12: 0000000000000000 [ 343.950512][ T8943] R13: ffffc90003cdfcb0 R14: dffffc0000000000 R15: ffff88802751d300 [ 343.950543][ T8943] _copy_from_user+0x98/0xd0 [ 343.950581][ T8943] ucma_write+0x128/0x330 [ 343.950612][ T8943] ? __pfx_ucma_write+0x10/0x10 [ 343.950641][ T8943] ? bpf_lsm_file_permission+0x9/0x10 [ 343.950678][ T8943] ? security_file_permission+0x71/0x210 [ 343.950711][ T8943] ? rw_verify_area+0xcf/0x680 [ 343.950748][ T8943] vfs_write+0x25c/0x1180 [ 343.950768][ T8943] ? __pfx_ucma_write+0x10/0x10 [ 343.950803][ T8943] ? __pfx_vfs_write+0x10/0x10 [ 343.950823][ T8943] ? find_held_lock+0x2b/0x80 [ 343.950845][ T8943] ? __fget_files+0x204/0x3c0 [ 343.950890][ T8943] ? __fget_files+0x20e/0x3c0 [ 343.950935][ T8943] ksys_write+0x205/0x240 [ 343.950956][ T8943] ? __pfx_ksys_write+0x10/0x10 [ 343.950976][ T8943] ? rcu_is_watching+0x12/0xc0 [ 343.951005][ T8943] do_syscall_64+0xcd/0x230 [ 343.951041][ T8943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.951064][ T8943] RIP: 0033:0x7f2ba898e969 [ 343.951081][ T8943] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 343.951103][ T8943] RSP: 002b:00007f2ba97f9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 343.951124][ T8943] RAX: ffffffffffffffda RBX: 00007f2ba8bb5fa0 RCX: 00007f2ba898e969 [ 343.951139][ T8943] RDX: 000000000000ffd8 RSI: 0000000000000000 RDI: 0000000000000003 [ 343.951153][ T8943] RBP: 00007f2ba97f9090 R08: 0000000000000000 R09: 0000000000000000 [ 343.951166][ T8943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 343.951179][ T8943] R13: 0000000000000000 R14: 00007f2ba8bb5fa0 R15: 00007ffd10713c18 [ 343.951208][ T8943] [ 345.450840][ T8956] block nbd6: not configured, cannot reconfigure [ 347.895895][ T8986] i2c i2c-0: new_device: Can't parse I2C address [ 348.532995][ T8993] Invalid ELF header magic: != ELF [ 349.872234][ T9026] netlink: 28 bytes leftover after parsing attributes in process `syz.1.698'. [ 351.074802][ T9037] Invalid ELF header magic: != ELF [ 353.073927][ T9063] netlink: zone id is out of range [ 353.104334][ T9063] netlink: zone id is out of range [ 353.166766][ T9063] netlink: zone id is out of range [ 353.196274][ T9063] netlink: zone id is out of range [ 353.207365][ T9061] delete_channel: no stack [ 353.214092][ T9063] netlink: zone id is out of range [ 353.257315][ T9063] netlink: zone id is out of range [ 353.299957][ T9063] netlink: del zone limit has 4 unknown bytes [ 353.880362][ T9073] netlink: 206 bytes leftover after parsing attributes in process `syz.0.709'. [ 355.205785][ T9088] kmem.tcp.limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 359.803806][ T9130] Invalid ELF header magic: != ELF [ 360.555656][ T9137] netlink: 206 bytes leftover after parsing attributes in process `syz.3.723'. [ 360.683637][ T9154] FAULT_INJECTION: forcing a failure. [ 360.683637][ T9154] name failslab, interval 1, probability 0, space 0, times 0 [ 360.747651][ T9154] CPU: 1 UID: 0 PID: 9154 Comm: syz.2.725 Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) [ 360.747686][ T9154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 360.747699][ T9154] Call Trace: [ 360.747707][ T9154] [ 360.747715][ T9154] dump_stack_lvl+0x16c/0x1f0 [ 360.747754][ T9154] should_fail_ex+0x512/0x640 [ 360.747785][ T9154] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 360.747815][ T9154] should_failslab+0xc2/0x120 [ 360.747844][ T9154] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 360.747870][ T9154] ? __alloc_skb+0x2b2/0x380 [ 360.747899][ T9154] __alloc_skb+0x2b2/0x380 [ 360.747922][ T9154] ? __pfx___alloc_skb+0x10/0x10 [ 360.747950][ T9154] ? __lock_acquire+0xaa4/0x1ba0 [ 360.747984][ T9154] netlink_alloc_large_skb+0x69/0x130 [ 360.748016][ T9154] netlink_sendmsg+0x6a1/0xdd0 [ 360.748050][ T9154] ? __pfx_netlink_sendmsg+0x10/0x10 [ 360.748090][ T9154] ____sys_sendmsg+0xa95/0xc70 [ 360.748125][ T9154] ? copy_msghdr_from_user+0x10a/0x160 [ 360.748160][ T9154] ? __pfx_____sys_sendmsg+0x10/0x10 [ 360.748197][ T9154] ? kfree+0x252/0x4d0 [ 360.748214][ T9154] ? __pfx__kstrtoull+0x10/0x10 [ 360.748246][ T9154] ___sys_sendmsg+0x134/0x1d0 [ 360.748274][ T9154] ? __pfx____sys_sendmsg+0x10/0x10 [ 360.748325][ T9154] ? __pfx___might_resched+0x10/0x10 [ 360.748358][ T9154] __sys_sendmmsg+0x200/0x420 [ 360.748388][ T9154] ? __pfx___sys_sendmmsg+0x10/0x10 [ 360.748424][ T9154] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 360.748470][ T9154] ? fput+0x70/0xf0 [ 360.748497][ T9154] ? ksys_write+0x1b9/0x240 [ 360.748518][ T9154] ? __pfx_ksys_write+0x10/0x10 [ 360.748538][ T9154] ? rcu_is_watching+0x12/0xc0 [ 360.748564][ T9154] __x64_sys_sendmmsg+0x9c/0x100 [ 360.748590][ T9154] ? lockdep_hardirqs_on+0x7c/0x110 [ 360.748621][ T9154] do_syscall_64+0xcd/0x230 [ 360.748657][ T9154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.748681][ T9154] RIP: 0033:0x7f936ff8e969 [ 360.748698][ T9154] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 360.748721][ T9154] RSP: 002b:00007f9370d4f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 360.748743][ T9154] RAX: ffffffffffffffda RBX: 00007f93701b5fa0 RCX: 00007f936ff8e969 [ 360.748758][ T9154] RDX: 0000000000000007 RSI: 0000200000000200 RDI: 0000000000000003 [ 360.748773][ T9154] RBP: 00007f9370d4f090 R08: 0000000000000000 R09: 0000000000000000 [ 360.748787][ T9154] R10: 0000000000004008 R11: 0000000000000246 R12: 0000000000000001 [ 360.748800][ T9154] R13: 0000000000000000 R14: 00007f93701b5fa0 R15: 00007ffe9c42f738 [ 360.748829][ T9154] [ 361.043561][ T9157] netlink: 28 bytes leftover after parsing attributes in process `syz.1.724'. [ 362.792063][ T9171] svc: failed to register nfsdv3 RPC service (errno 111). [ 362.902237][ T9171] svc: failed to register nfsaclv3 RPC service (errno 111). [ 363.461498][ T9174] delete_channel: no stack [ 364.915674][ T9208] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 364.972715][ T9208] FAULT_INJECTION: forcing a failure. [ 364.972715][ T9208] name failslab, interval 1, probability 0, space 0, times 0 [ 365.099859][ T9208] CPU: 1 UID: 0 PID: 9208 Comm: syz.0.738 Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) [ 365.099896][ T9208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 365.099910][ T9208] Call Trace: [ 365.099918][ T9208] [ 365.099927][ T9208] dump_stack_lvl+0x16c/0x1f0 [ 365.099966][ T9208] should_fail_ex+0x512/0x640 [ 365.100001][ T9208] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 365.100044][ T9208] should_failslab+0xc2/0x120 [ 365.100074][ T9208] __kmalloc_cache_noprof+0x6a/0x3e0 [ 365.100113][ T9208] ? rcu_is_watching+0x12/0xc0 [ 365.100134][ T9208] ? call_usermodehelper_setup+0xaf/0x360 [ 365.100159][ T9208] ? __pfx_free_modprobe_argv+0x10/0x10 [ 365.100196][ T9208] call_usermodehelper_setup+0xaf/0x360 [ 365.100224][ T9208] __request_module+0x3bd/0x690 [ 365.100259][ T9208] ? __pfx___request_module+0x10/0x10 [ 365.100292][ T9208] ? aa_get_newest_label+0x375/0x680 [ 365.100318][ T9208] ? __pfx_aa_get_newest_label+0x10/0x10 [ 365.100351][ T9208] ? apparmor_capable+0x114/0x1d0 [ 365.100383][ T9208] dev_load+0x221/0x240 [ 365.100406][ T9208] dev_ioctl+0x4e4/0x1060 [ 365.100432][ T9208] sock_do_ioctl+0x19d/0x280 [ 365.100465][ T9208] ? __pfx_sock_do_ioctl+0x10/0x10 [ 365.100514][ T9208] sock_ioctl+0x227/0x6b0 [ 365.100551][ T9208] ? __pfx_sock_ioctl+0x10/0x10 [ 365.100585][ T9208] ? hook_file_ioctl_common+0x145/0x410 [ 365.100617][ T9208] ? __fget_files+0x20e/0x3c0 [ 365.100659][ T9208] ? __pfx_sock_ioctl+0x10/0x10 [ 365.100702][ T9208] __x64_sys_ioctl+0x190/0x200 [ 365.100738][ T9208] do_syscall_64+0xcd/0x230 [ 365.100776][ T9208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.100800][ T9208] RIP: 0033:0x7f0b3fd8e969 [ 365.100818][ T9208] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 365.100842][ T9208] RSP: 002b:00007f0b40c6e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 365.100864][ T9208] RAX: ffffffffffffffda RBX: 00007f0b3ffb5fa0 RCX: 00007f0b3fd8e969 [ 365.100880][ T9208] RDX: 0000000000000000 RSI: 0000000000008933 RDI: 0000000000000006 [ 365.100894][ T9208] RBP: 00007f0b3fe10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 365.100908][ T9208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 365.100922][ T9208] R13: 0000000000000000 R14: 00007f0b3ffb5fa0 R15: 00007ffffa430868 [ 365.100950][ T9208] [ 367.649296][ T9237] cifs: Unknown parameter 'T.żc[$⁍)UÑnE-ʙl- -_5Z omfwYh*/xDlݩgkǐA79Xa/f_ARxM vp$^;q3n-6+ek [ 393.255754][ T9509] dump_stack_lvl+0x16c/0x1f0 [ 393.255793][ T9509] should_fail_ex+0x512/0x640 [ 393.255828][ T9509] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 393.255857][ T9509] should_failslab+0xc2/0x120 [ 393.255886][ T9509] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 393.255913][ T9509] ? security_file_alloc+0x34/0x2b0 [ 393.255949][ T9509] security_file_alloc+0x34/0x2b0 [ 393.255979][ T9509] init_file+0x93/0x4c0 [ 393.256008][ T9509] alloc_empty_file+0x73/0x1e0 [ 393.256039][ T9509] path_openat+0xe0/0x2d40 [ 393.256066][ T9509] ? rcu_is_watching+0x12/0xc0 [ 393.256088][ T9509] ? trace_kmem_cache_alloc+0x28/0xc0 [ 393.256119][ T9509] ? kmem_cache_alloc_noprof+0x21e/0x3b0 [ 393.256145][ T9509] ? __pfx_path_openat+0x10/0x10 [ 393.256168][ T9509] ? __asan_memcpy+0x3c/0x60 [ 393.256194][ T9509] do_file_open_root+0x322/0x610 [ 393.256215][ T9509] ? __kasan_slab_free+0x51/0x70 [ 393.256243][ T9509] ? __pfx_do_file_open_root+0x10/0x10 [ 393.256292][ T9509] ? do_raw_spin_lock+0x12c/0x2b0 [ 393.256332][ T9509] file_open_root+0x2a7/0x450 [ 393.256357][ T9509] ? __pfx_file_open_root+0x10/0x10 [ 393.256379][ T9509] ? _raw_spin_unlock+0x28/0x50 [ 393.256418][ T9509] do_handle_open+0x9e9/0xb70 [ 393.256454][ T9509] ? __pfx_do_handle_open+0x10/0x10 [ 393.256495][ T9509] ? ksys_write+0x1b9/0x240 [ 393.256517][ T9509] ? rcu_is_watching+0x12/0xc0 [ 393.256545][ T9509] ? do_syscall_64+0xcd/0x230 [ 393.256576][ T9509] do_syscall_64+0xcd/0x230 [ 393.256625][ T9509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.256649][ T9509] RIP: 0033:0x7f4aa6d8e969 [ 393.256667][ T9509] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 393.256695][ T9509] RSP: 002b:00007f4aa4bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 393.256717][ T9509] RAX: ffffffffffffffda RBX: 00007f4aa6fb6240 RCX: 00007f4aa6d8e969 [ 393.256733][ T9509] RDX: 000000000000036c RSI: 0000200000000000 RDI: 000000000000000a [ 393.256747][ T9509] RBP: 00007f4aa4bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 393.256761][ T9509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 393.256775][ T9509] R13: 0000000000000000 R14: 00007f4aa6fb6240 R15: 00007ffe93259668 [ 393.256803][ T9509] [ 393.541692][ T9514] netlink: 4 bytes leftover after parsing attributes in process `syz.2.810'. [ 394.288187][ T9522] netlink: 'syz.2.812': attribute type 1 has an invalid length. [ 397.318157][ T9552] netlink: 'syz.0.819': attribute type 1 has an invalid length. [ 398.567393][ T9573] netlink: 'syz.0.825': attribute type 1 has an invalid length. [ 399.564125][ T9569] delete_channel: no stack [ 399.821701][ T9585] netlink: 'syz.0.827': attribute type 1 has an invalid length. [ 400.995598][ T9597] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 401.034658][ T9597] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 401.060810][ T9597] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 401.097682][ T9597] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 401.103692][ T9597] CPU0 is offline. [ 402.110792][ T9616] netlink: 28 bytes leftover after parsing attributes in process `syz.0.832'. [ 402.348909][ T9619] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 403.028830][ T5140] Bluetooth: hci0: command 0x0c1a tx timeout [ 403.107479][ T9623] Bluetooth: hci3: command 0x0c1a tx timeout [ 403.114342][ T5831] Bluetooth: hci2: command 0x0c1a tx timeout [ 403.120844][ T5831] Bluetooth: hci1: command 0x0c1a tx timeout [ 405.917442][ T9653] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 410.905921][ T9695] can: request_module (can-proto-0) failed. [ 411.604800][ T9714] netlink: 'syz.2.851': attribute type 1 has an invalid length. [ 412.774498][ T9725] netlink: 'syz.2.853': attribute type 4 has an invalid length. [ 412.797329][ T9725] netlink: 314 bytes leftover after parsing attributes in process `syz.2.853'. [ 414.016128][ T9730] delete_channel: no stack [ 415.825805][ T9759] netlink: 'syz.0.861': attribute type 1 has an invalid length. [ 416.755813][ T9769] netlink: 342 bytes leftover after parsing attributes in process `syz.3.864'. [ 417.695794][ T9783] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 417.801662][ T9783] FAULT_INJECTION: forcing a failure. [ 417.801662][ T9783] name failslab, interval 1, probability 0, space 0, times 0 [ 417.872958][ T9783] CPU: 1 UID: 0 PID: 9783 Comm: syz.1.868 Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) [ 417.872994][ T9783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 417.873009][ T9783] Call Trace: [ 417.873017][ T9783] [ 417.873032][ T9783] dump_stack_lvl+0x16c/0x1f0 [ 417.873072][ T9783] should_fail_ex+0x512/0x640 [ 417.873106][ T9783] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 417.873151][ T9783] should_failslab+0xc2/0x120 [ 417.873182][ T9783] __kmalloc_cache_noprof+0x6a/0x3e0 [ 417.873222][ T9783] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 417.873254][ T9783] ? lockdep_hardirqs_on+0x7c/0x110 [ 417.873286][ T9783] ? __request_module+0x2ad/0x690 [ 417.873325][ T9783] __request_module+0x2ad/0x690 [ 417.873361][ T9783] ? __pfx___request_module+0x10/0x10 [ 417.873395][ T9783] ? aa_get_newest_label+0x375/0x680 [ 417.873422][ T9783] ? __pfx_aa_get_newest_label+0x10/0x10 [ 417.873456][ T9783] ? apparmor_capable+0x114/0x1d0 [ 417.873482][ T9783] ? dev_load+0x1c0/0x240 [ 417.873509][ T9783] dev_load+0x221/0x240 [ 417.873533][ T9783] dev_ioctl+0x4e4/0x1060 [ 417.873560][ T9783] sock_do_ioctl+0x19d/0x280 [ 417.873594][ T9783] ? __pfx_sock_do_ioctl+0x10/0x10 [ 417.873644][ T9783] sock_ioctl+0x227/0x6b0 [ 417.873680][ T9783] ? __pfx_sock_ioctl+0x10/0x10 [ 417.873715][ T9783] ? hook_file_ioctl_common+0x145/0x410 [ 417.873748][ T9783] ? __fget_files+0x20e/0x3c0 [ 417.873791][ T9783] ? __pfx_sock_ioctl+0x10/0x10 [ 417.873827][ T9783] __x64_sys_ioctl+0x190/0x200 [ 417.873864][ T9783] do_syscall_64+0xcd/0x230 [ 417.873903][ T9783] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.873928][ T9783] RIP: 0033:0x7f2ba898e969 [ 417.873948][ T9783] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 417.873991][ T9783] RSP: 002b:00007f2ba97f9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 417.874015][ T9783] RAX: ffffffffffffffda RBX: 00007f2ba8bb5fa0 RCX: 00007f2ba898e969 [ 417.874037][ T9783] RDX: 0000000000000000 RSI: 0000000000008933 RDI: 0000000000000006 [ 417.874052][ T9783] RBP: 00007f2ba8a10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 417.874067][ T9783] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 417.874081][ T9783] R13: 0000000000000000 R14: 00007f2ba8bb5fa0 R15: 00007ffd10713c18 [ 417.874111][ T9783] [ 418.526082][ T9790] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 418.575299][ T9790] FAULT_INJECTION: forcing a failure. [ 418.575299][ T9790] name failslab, interval 1, probability 0, space 0, times 0 [ 418.747162][ T9790] CPU: 1 UID: 0 PID: 9790 Comm: syz.2.869 Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) [ 418.747198][ T9790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 418.747216][ T9790] Call Trace: [ 418.747224][ T9790] [ 418.747233][ T9790] dump_stack_lvl+0x16c/0x1f0 [ 418.747273][ T9790] should_fail_ex+0x512/0x640 [ 418.747308][ T9790] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 418.747351][ T9790] should_failslab+0xc2/0x120 [ 418.747380][ T9790] __kmalloc_cache_noprof+0x6a/0x3e0 [ 418.747419][ T9790] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 418.747450][ T9790] ? lockdep_hardirqs_on+0x7c/0x110 [ 418.747482][ T9790] ? __request_module+0x2ad/0x690 [ 418.747520][ T9790] __request_module+0x2ad/0x690 [ 418.747554][ T9790] ? __pfx___request_module+0x10/0x10 [ 418.747587][ T9790] ? aa_get_newest_label+0x375/0x680 [ 418.747614][ T9790] ? __pfx_aa_get_newest_label+0x10/0x10 [ 418.747646][ T9790] ? apparmor_capable+0x114/0x1d0 [ 418.747679][ T9790] dev_load+0x221/0x240 [ 418.747703][ T9790] dev_ioctl+0x4e4/0x1060 [ 418.747729][ T9790] sock_do_ioctl+0x19d/0x280 [ 418.747762][ T9790] ? __pfx_sock_do_ioctl+0x10/0x10 [ 418.747811][ T9790] sock_ioctl+0x227/0x6b0 [ 418.747847][ T9790] ? __pfx_sock_ioctl+0x10/0x10 [ 418.747881][ T9790] ? hook_file_ioctl_common+0x145/0x410 [ 418.747914][ T9790] ? __fget_files+0x20e/0x3c0 [ 418.747956][ T9790] ? __pfx_sock_ioctl+0x10/0x10 [ 418.747999][ T9790] __x64_sys_ioctl+0x190/0x200 [ 418.748036][ T9790] do_syscall_64+0xcd/0x230 [ 418.748073][ T9790] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.748098][ T9790] RIP: 0033:0x7f936ff8e969 [ 418.748116][ T9790] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 418.748140][ T9790] RSP: 002b:00007f9370d4f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 418.748162][ T9790] RAX: ffffffffffffffda RBX: 00007f93701b5fa0 RCX: 00007f936ff8e969 [ 418.748178][ T9790] RDX: 0000000000000000 RSI: 0000000000008933 RDI: 0000000000000006 [ 418.748192][ T9790] RBP: 00007f9370010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 418.748207][ T9790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 418.748221][ T9790] R13: 0000000000000000 R14: 00007f93701b5fa0 R15: 00007ffe9c42f738 [ 418.748250][ T9790] [ 432.158164][ T9949] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 432.158164][ T9949] The task syz.1.902 (9949) triggered the difference, watch for misbehavior. [ 433.131155][ T9971] FAULT_INJECTION: forcing a failure. [ 433.131155][ T9971] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 433.304810][ T9971] CPU: 1 UID: 0 PID: 9971 Comm: syz.3.908 Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) [ 433.304845][ T9971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 433.304859][ T9971] Call Trace: [ 433.304866][ T9971] [ 433.304875][ T9971] dump_stack_lvl+0x16c/0x1f0 [ 433.304913][ T9971] should_fail_ex+0x512/0x640 [ 433.304952][ T9971] _copy_to_user+0x32/0xd0 [ 433.304990][ T9971] simple_read_from_buffer+0xcb/0x170 [ 433.305028][ T9971] proc_fail_nth_read+0x197/0x270 [ 433.305062][ T9971] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 433.305098][ T9971] ? rw_verify_area+0xcf/0x680 [ 433.305132][ T9971] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 433.305165][ T9971] vfs_read+0x1de/0xc70 [ 433.305190][ T9971] ? __pfx___mutex_lock+0x10/0x10 [ 433.305224][ T9971] ? __pfx_vfs_read+0x10/0x10 [ 433.305253][ T9971] ? __fget_files+0x20e/0x3c0 [ 433.305298][ T9971] ksys_read+0x12a/0x240 [ 433.305321][ T9971] ? __pfx_ksys_read+0x10/0x10 [ 433.305341][ T9971] ? rcu_is_watching+0x12/0xc0 [ 433.305371][ T9971] do_syscall_64+0xcd/0x230 [ 433.305407][ T9971] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.305431][ T9971] RIP: 0033:0x7f4aa6d8d37c [ 433.305450][ T9971] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 433.305473][ T9971] RSP: 002b:00007f4aa7b1e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 433.305495][ T9971] RAX: ffffffffffffffda RBX: 00007f4aa6fb6160 RCX: 00007f4aa6d8d37c [ 433.305510][ T9971] RDX: 000000000000000f RSI: 00007f4aa7b1e0a0 RDI: 0000000000000008 [ 433.305524][ T9971] RBP: 00007f4aa7b1e090 R08: 0000000000000000 R09: 0000000000000000 [ 433.305538][ T9971] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001 [ 433.305552][ T9971] R13: 0000000000000000 R14: 00007f4aa6fb6160 R15: 00007ffe93259668 [ 433.305590][ T9971] [ 433.499362][ T9978] netlink: 28 bytes leftover after parsing attributes in process `syz.2.909'. [ 433.984136][ T9983] netlink: 4 bytes leftover after parsing attributes in process `syz.0.912'. [ 434.627401][ T9624] Bluetooth: hci2: command 0x0c1a tx timeout [ 434.634427][ T24] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 434.683352][ T9994] netlink: 28 bytes leftover after parsing attributes in process `syz.3.914'. [ 435.927772][T10017] FAULT_INJECTION: forcing a failure. [ 435.927772][T10017] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 436.027375][T10017] CPU: 1 UID: 0 PID: 10017 Comm: syz.2.919 Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) [ 436.027412][T10017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 436.027427][T10017] Call Trace: [ 436.027434][T10017] [ 436.027443][T10017] dump_stack_lvl+0x16c/0x1f0 [ 436.027482][T10017] should_fail_ex+0x512/0x640 [ 436.027521][T10017] _copy_from_user+0x2e/0xd0 [ 436.027559][T10017] get_user_ifreq+0x77/0x1c0 [ 436.027592][T10017] sock_do_ioctl+0x16b/0x280 [ 436.027624][T10017] ? __pfx_sock_do_ioctl+0x10/0x10 [ 436.027673][T10017] sock_ioctl+0x227/0x6b0 [ 436.027710][T10017] ? __pfx_sock_ioctl+0x10/0x10 [ 436.027743][T10017] ? hook_file_ioctl_common+0x145/0x410 [ 436.027777][T10017] ? __fget_files+0x20e/0x3c0 [ 436.027819][T10017] ? __pfx_sock_ioctl+0x10/0x10 [ 436.027856][T10017] __x64_sys_ioctl+0x190/0x200 [ 436.027891][T10017] do_syscall_64+0xcd/0x230 [ 436.027929][T10017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.027953][T10017] RIP: 0033:0x7f936ff8e969 [ 436.027971][T10017] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 436.027995][T10017] RSP: 002b:00007f9370d4f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 436.028017][T10017] RAX: ffffffffffffffda RBX: 00007f93701b5fa0 RCX: 00007f936ff8e969 [ 436.028032][T10017] RDX: 00002000000000c0 RSI: 0000000000008933 RDI: 0000000000000006 [ 436.028047][T10017] RBP: 00007f9370010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 436.028062][T10017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 436.028076][T10017] R13: 0000000000000000 R14: 00007f93701b5fa0 R15: 00007ffe9c42f738 [ 436.028105][T10017] [ 436.799276][T10022] netlink: 206 bytes leftover after parsing attributes in process `syz.2.920'. [ 439.493870][T10071] svc: failed to register nfsdv3 RPC service (errno 111). [ 439.554081][T10069] bond0: no command found in slaves file - use +ifname or -ifname [ 439.572655][T10071] svc: failed to register nfsaclv3 RPC service (errno 111). [ 439.983132][T10078] netlink: 28 bytes leftover after parsing attributes in process `syz.1.938'. [ 440.419094][T10089] netlink: 20 bytes leftover after parsing attributes in process `syz.0.941'. [ 445.276945][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.286740][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 446.131114][T10153] Invalid ELF header magic: != ELF [ 447.842827][T10168] delete_channel: no stack [ 448.528594][T10191] netlink: 28 bytes leftover after parsing attributes in process `syz.1.964'. [ 449.423215][T10200] device-mapper: ioctl: ioctl interface mismatch: kernel(4.49.0), user(0.0.0), cmd(10) [ 450.261820][T10213] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 451.156476][T10230] netlink: 28 bytes leftover after parsing attributes in process `syz.2.973'. [ 452.501628][T10243] device-mapper: ioctl: ioctl interface mismatch: kernel(4.49.0), user(0.0.0), cmd(10) [ 452.586060][T10247] netlink: 28 bytes leftover after parsing attributes in process `syz.3.977'. [ 455.666652][T10272] ima: policy update failed [ 455.695919][T10274] netlink: 'syz.3.985': attribute type 1 has an invalid length. [ 455.727910][ T30] audit: type=1802 audit(4294967502.756:10): pid=10272 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.984" res=0 errno=0 [ 456.767625][T10295] netlink: 28 bytes leftover after parsing attributes in process `syz.1.990'. [ 459.434679][T10322] delete_channel: no stack [ 460.394022][T10332] netlink: 'syz.0.999': attribute type 1 has an invalid length. [ 462.309510][T10353] Invalid ELF header magic: != ELF [ 465.261219][T10378] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1009'. [ 465.305979][T10379] netlink: 354 bytes leftover after parsing attributes in process `syz.2.1009'. [ 465.376768][T10378] openvswitch: netlink: IP tunnel dst address not specified [ 466.099714][T10392] FAULT_INJECTION: forcing a failure. [ 466.099714][T10392] name failslab, interval 1, probability 0, space 0, times 0 [ 466.171868][T10392] CPU: 1 UID: 0 PID: 10392 Comm: syz.1.1013 Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) [ 466.171908][T10392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 466.171922][T10392] Call Trace: [ 466.171929][T10392] [ 466.171938][T10392] dump_stack_lvl+0x16c/0x1f0 [ 466.171976][T10392] should_fail_ex+0x512/0x640 [ 466.172009][T10392] ? fs_reclaim_acquire+0xae/0x150 [ 466.172047][T10392] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 466.172080][T10392] should_failslab+0xc2/0x120 [ 466.172109][T10392] __kmalloc_noprof+0xd2/0x510 [ 466.172141][T10392] tomoyo_realpath_from_path+0xc2/0x6e0 [ 466.172177][T10392] ? tomoyo_profile+0x47/0x60 [ 466.172216][T10392] tomoyo_path_number_perm+0x245/0x580 [ 466.172242][T10392] ? tomoyo_path_number_perm+0x237/0x580 [ 466.172272][T10392] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 466.172302][T10392] ? find_held_lock+0x2b/0x80 [ 466.172350][T10392] ? find_held_lock+0x2b/0x80 [ 466.172370][T10392] ? hook_file_ioctl_common+0x145/0x410 [ 466.172402][T10392] ? __fget_files+0x20e/0x3c0 [ 466.172443][T10392] security_file_ioctl+0x9b/0x240 [ 466.172474][T10392] __x64_sys_ioctl+0xb7/0x200 [ 466.172509][T10392] do_syscall_64+0xcd/0x230 [ 466.172546][T10392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.172569][T10392] RIP: 0033:0x7f2ba898e969 [ 466.172587][T10392] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 466.172610][T10392] RSP: 002b:00007f2ba97f9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 466.172631][T10392] RAX: ffffffffffffffda RBX: 00007f2ba8bb5fa0 RCX: 00007f2ba898e969 [ 466.172647][T10392] RDX: 0000000000000000 RSI: 0000000000005417 RDI: 0000000000000003 [ 466.172661][T10392] RBP: 00007f2ba97f9090 R08: 0000000000000000 R09: 0000000000000000 [ 466.172675][T10392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 466.172688][T10392] R13: 0000000000000000 R14: 00007f2ba8bb5fa0 R15: 00007ffd10713c18 [ 466.172718][T10392] [ 466.172726][T10392] ERROR: Out of memory at tomoyo_realpath_from_path. [ 468.853877][T10421] netlink: 'syz.2.1023': attribute type 1 has an invalid length. [ 469.203404][T10426] FAULT_INJECTION: forcing a failure. [ 469.203404][T10426] name failslab, interval 1, probability 0, space 0, times 0 [ 469.294827][T10426] CPU: 1 UID: 0 PID: 10426 Comm: syz.3.1024 Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) [ 469.294862][T10426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 469.294877][T10426] Call Trace: [ 469.294884][T10426] [ 469.294894][T10426] dump_stack_lvl+0x16c/0x1f0 [ 469.294932][T10426] should_fail_ex+0x512/0x640 [ 469.294968][T10426] ? fs_reclaim_acquire+0xae/0x150 [ 469.295007][T10426] ? tomoyo_supervisor+0x45b/0x13b0 [ 469.295045][T10426] should_failslab+0xc2/0x120 [ 469.295075][T10426] __kmalloc_noprof+0xd2/0x510 [ 469.295099][T10426] ? tomoyo_profile+0x47/0x60 [ 469.295143][T10426] tomoyo_supervisor+0x45b/0x13b0 [ 469.295187][T10426] ? __pfx_tomoyo_supervisor+0x10/0x10 [ 469.295224][T10426] ? __pfx_vsnprintf+0x10/0x10 [ 469.295270][T10426] ? tomoyo_encode2+0x329/0x3e0 [ 469.295319][T10426] tomoyo_path_number_perm+0x448/0x580 [ 469.295350][T10426] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 469.295409][T10426] ? find_held_lock+0x2b/0x80 [ 469.295432][T10426] ? hook_file_ioctl_common+0x145/0x410 [ 469.295464][T10426] ? __fget_files+0x20e/0x3c0 [ 469.295507][T10426] security_file_ioctl+0x9b/0x240 [ 469.295539][T10426] __x64_sys_ioctl+0xb7/0x200 [ 469.295582][T10426] do_syscall_64+0xcd/0x230 [ 469.295620][T10426] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.295644][T10426] RIP: 0033:0x7f4aa6d8e969 [ 469.295662][T10426] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 469.295686][T10426] RSP: 002b:00007f4aa7b3f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 469.295708][T10426] RAX: ffffffffffffffda RBX: 00007f4aa6fb6080 RCX: 00007f4aa6d8e969 [ 469.295724][T10426] RDX: 0000000000000000 RSI: 00000000c0045005 RDI: 0000000000000008 [ 469.295739][T10426] RBP: 00007f4aa6e10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 469.295753][T10426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 469.295767][T10426] R13: 0000000000000000 R14: 00007f4aa6fb6080 R15: 00007ffe93259668 [ 469.295796][T10426] [ 469.718659][T10430] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 469.749388][T10433] FAULT_INJECTION: forcing a failure. [ 469.749388][T10433] name failslab, interval 1, probability 0, space 0, times 0 [ 469.786734][T10433] CPU: 1 UID: 0 PID: 10433 Comm: syz.1.1026 Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) [ 469.786770][T10433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 469.786785][T10433] Call Trace: [ 469.786792][T10433] [ 469.786801][T10433] dump_stack_lvl+0x16c/0x1f0 [ 469.786840][T10433] should_fail_ex+0x512/0x640 [ 469.786876][T10433] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 469.786909][T10433] should_failslab+0xc2/0x120 [ 469.786939][T10433] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 469.786971][T10433] ? __request_module+0x2cb/0x690 [ 469.787009][T10433] kstrdup+0x53/0x100 [ 469.787041][T10433] __request_module+0x2cb/0x690 [ 469.787081][T10433] ? __pfx___request_module+0x10/0x10 [ 469.787113][T10433] ? aa_get_newest_label+0x375/0x680 [ 469.787140][T10433] ? __pfx_aa_get_newest_label+0x10/0x10 [ 469.787173][T10433] ? apparmor_capable+0x114/0x1d0 [ 469.787206][T10433] dev_load+0x221/0x240 [ 469.787229][T10433] dev_ioctl+0x4e4/0x1060 [ 469.787256][T10433] sock_do_ioctl+0x19d/0x280 [ 469.787289][T10433] ? __pfx_sock_do_ioctl+0x10/0x10 [ 469.787337][T10433] sock_ioctl+0x227/0x6b0 [ 469.787374][T10433] ? __pfx_sock_ioctl+0x10/0x10 [ 469.787407][T10433] ? hook_file_ioctl_common+0x145/0x410 [ 469.787473][T10433] ? __fget_files+0x20e/0x3c0 [ 469.787515][T10433] ? __pfx_sock_ioctl+0x10/0x10 [ 469.787553][T10433] __x64_sys_ioctl+0x190/0x200 [ 469.787590][T10433] do_syscall_64+0xcd/0x230 [ 469.787627][T10433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.787654][T10433] RIP: 0033:0x7f2ba898e969 [ 469.787673][T10433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 469.787696][T10433] RSP: 002b:00007f2ba97d8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 469.787719][T10433] RAX: ffffffffffffffda RBX: 00007f2ba8bb6080 RCX: 00007f2ba898e969 [ 469.787735][T10433] RDX: 0000000000000000 RSI: 0000000000008933 RDI: 0000000000000006 [ 469.787749][T10433] RBP: 00007f2ba8a10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 469.787764][T10433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 469.787778][T10433] R13: 0000000000000000 R14: 00007f2ba8bb6080 R15: 00007ffd10713c18 [ 469.787807][T10433] [ 471.423191][T10450] delete_channel: no stack [ 472.167682][T10465] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1033'. [ 475.521444][T10501] ptrace attach of "./syz-executor exec"[5836] was attempted by "./syz-executor exec"[10501] [ 475.627504][T10507] netlink: 'syz.1.1044': attribute type 1 has an invalid length. [ 476.488566][T10520] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1046'. [ 476.697749][T10519] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1047'. [ 479.526911][T10553] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1053'. [ 480.510183][T10570] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1056'. [ 481.548699][T10582] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1058'. [ 481.830594][T10585] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1060'. [ 482.490564][T10591] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 482.549442][T10591] FAULT_INJECTION: forcing a failure. [ 482.549442][T10591] name failslab, interval 1, probability 0, space 0, times 0 [ 482.597980][T10591] CPU: 1 UID: 0 PID: 10591 Comm: syz.3.1061 Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) [ 482.598017][T10591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 482.598032][T10591] Call Trace: [ 482.598039][T10591] [ 482.598048][T10591] dump_stack_lvl+0x16c/0x1f0 [ 482.598089][T10591] should_fail_ex+0x512/0x640 [ 482.598221][T10591] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 482.598269][T10591] should_failslab+0xc2/0x120 [ 482.598300][T10591] __kmalloc_cache_noprof+0x6a/0x3e0 [ 482.598339][T10591] ? rcu_is_watching+0x12/0xc0 [ 482.598362][T10591] ? call_usermodehelper_setup+0xaf/0x360 [ 482.598389][T10591] ? __pfx_free_modprobe_argv+0x10/0x10 [ 482.598426][T10591] call_usermodehelper_setup+0xaf/0x360 [ 482.598454][T10591] __request_module+0x3bd/0x690 [ 482.598489][T10591] ? __pfx___request_module+0x10/0x10 [ 482.598522][T10591] ? aa_get_newest_label+0x375/0x680 [ 482.598548][T10591] ? __pfx_aa_get_newest_label+0x10/0x10 [ 482.598581][T10591] ? apparmor_capable+0x114/0x1d0 [ 482.598613][T10591] dev_load+0x221/0x240 [ 482.598637][T10591] dev_ioctl+0x4e4/0x1060 [ 482.598671][T10591] sock_do_ioctl+0x19d/0x280 [ 482.598705][T10591] ? __pfx_sock_do_ioctl+0x10/0x10 [ 482.598754][T10591] sock_ioctl+0x227/0x6b0 [ 482.598791][T10591] ? __pfx_sock_ioctl+0x10/0x10 [ 482.598825][T10591] ? hook_file_ioctl_common+0x145/0x410 [ 482.598858][T10591] ? __fget_files+0x20e/0x3c0 [ 482.598900][T10591] ? __pfx_sock_ioctl+0x10/0x10 [ 482.598941][T10591] __x64_sys_ioctl+0x190/0x200 [ 482.598975][T10591] do_syscall_64+0xcd/0x230 [ 482.599013][T10591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.599037][T10591] RIP: 0033:0x7f4aa6d8e969 [ 482.599057][T10591] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 482.599081][T10591] RSP: 002b:00007f4aa7b60038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 482.599104][T10591] RAX: ffffffffffffffda RBX: 00007f4aa6fb5fa0 RCX: 00007f4aa6d8e969 [ 482.599121][T10591] RDX: 0000000000000000 RSI: 0000000000008933 RDI: 0000000000000006 [ 482.599146][T10591] RBP: 00007f4aa6e10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 482.599161][T10591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 482.599175][T10591] R13: 0000000000000000 R14: 00007f4aa6fb5fa0 R15: 00007ffe93259668 [ 482.599205][T10591] [ 483.287283][T10598] FAULT_INJECTION: forcing a failure. [ 483.287283][T10598] name fail_futex, interval 1, probability 0, space 0, times 0 [ 483.374011][T10598] CPU: 1 UID: 0 PID: 10598 Comm: syz.1.1063 Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) [ 483.374048][T10598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 483.374073][T10598] Call Trace: [ 483.374080][T10598] [ 483.374089][T10598] dump_stack_lvl+0x16c/0x1f0 [ 483.374129][T10598] should_fail_ex+0x512/0x640 [ 483.374168][T10598] get_futex_key+0x49e/0x1000 [ 483.374196][T10598] ? __pfx_get_futex_key+0x10/0x10 [ 483.374220][T10598] ? pick_eevdf+0x3be/0x5b0 [ 483.374246][T10598] ? update_curr_se+0x8b/0x270 [ 483.374278][T10598] ? update_curr+0x74/0x800 [ 483.374318][T10598] futex_wait_setup+0x78/0x290 [ 483.374357][T10598] __futex_wait+0x266/0x3c0 [ 483.374390][T10598] ? __pfx___futex_wait+0x10/0x10 [ 483.374420][T10598] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 483.374457][T10598] ? __pfx_futex_wake_mark+0x10/0x10 [ 483.374500][T10598] futex_wait+0xe8/0x380 [ 483.374532][T10598] ? __pfx_futex_wait+0x10/0x10 [ 483.374581][T10598] do_futex+0x229/0x350 [ 483.374607][T10598] ? __pfx_do_futex+0x10/0x10 [ 483.374636][T10598] ? fput+0x70/0xf0 [ 483.374666][T10598] ? __sys_sendmsg+0x199/0x220 [ 483.374699][T10598] __x64_sys_futex+0x1e0/0x4c0 [ 483.374732][T10598] ? __pfx___x64_sys_futex+0x10/0x10 [ 483.374761][T10598] ? rcu_is_watching+0x12/0xc0 [ 483.374794][T10598] do_syscall_64+0xcd/0x230 [ 483.374833][T10598] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.374857][T10598] RIP: 0033:0x7f2ba898e969 [ 483.374875][T10598] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 483.374898][T10598] RSP: 002b:00007f2ba97f90e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 483.374921][T10598] RAX: ffffffffffffffda RBX: 00007f2ba8bb5fa8 RCX: 00007f2ba898e969 [ 483.374936][T10598] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f2ba8bb5fa8 [ 483.374953][T10598] RBP: 00007f2ba8bb5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 483.374967][T10598] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2ba8bb5fac [ 483.374981][T10598] R13: 0000000000000000 R14: 00007ffd10713b30 R15: 00007ffd10713c18 [ 483.375011][T10598] [ 485.282931][T10618] Invalid ELF header magic: != ELF [ 485.501713][T10629] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1070'. [ 486.306023][T10632] kexec: Could not allocate control_code_buffer [ 488.263091][T10651] sctp: [Deprecated]: syz.1.1076 (pid 10651) Use of struct sctp_assoc_value in delayed_ack socket option. [ 488.263091][T10651] Use struct sctp_sack_info instead [ 501.590761][T10801] delete_channel: no stack [ 502.602962][T10841] Invalid ELF header magic: != ELF [ 503.029691][T10835] delete_channel: no stack [ 506.703757][T10886] Invalid ELF header magic: != ELF [ 506.715938][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.737785][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.729435][T10914] netlink: 'syz.3.1136': attribute type 1 has an invalid length. [ 507.822966][T10917] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1135'. [ 507.994699][T10903] delete_channel: no stack [ 510.621030][T10949] Invalid ELF header magic: != ELF [ 516.071290][T10990] FAULT_INJECTION: forcing a failure. [ 516.071290][T10990] name failslab, interval 1, probability 0, space 0, times 0 [ 516.171238][T10990] CPU: 1 UID: 0 PID: 10990 Comm: syz.2.1150 Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) [ 516.171274][T10990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 516.171288][T10990] Call Trace: [ 516.171295][T10990] [ 516.171304][T10990] dump_stack_lvl+0x16c/0x1f0 [ 516.171344][T10990] should_fail_ex+0x512/0x640 [ 516.171379][T10990] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 516.171422][T10990] should_failslab+0xc2/0x120 [ 516.171452][T10990] __kmalloc_cache_noprof+0x6a/0x3e0 [ 516.171500][T10990] ? pty_common_install+0xdf/0xb30 [ 516.171528][T10990] pty_common_install+0xdf/0xb30 [ 516.171550][T10990] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 516.171591][T10990] ? __pfx_pty_unix98_install+0x10/0x10 [ 516.171616][T10990] tty_init_dev.part.0+0x99/0x500 [ 516.171649][T10990] tty_init_dev+0x60/0x80 [ 516.171679][T10990] ? __pfx_ptmx_open+0x10/0x10 [ 516.171699][T10990] ptmx_open+0x10d/0x360 [ 516.171721][T10990] ? __pfx_ptmx_open+0x10/0x10 [ 516.171742][T10990] chrdev_open+0x231/0x6a0 [ 516.171766][T10990] ? __pfx_apparmor_file_open+0x10/0x10 [ 516.171798][T10990] ? __pfx_chrdev_open+0x10/0x10 [ 516.171825][T10990] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 516.171868][T10990] do_dentry_open+0x741/0x1c10 [ 516.171893][T10990] ? __pfx_chrdev_open+0x10/0x10 [ 516.171924][T10990] vfs_open+0x82/0x3f0 [ 516.171958][T10990] path_openat+0x1e5e/0x2d40 [ 516.171992][T10990] ? __pfx_path_openat+0x10/0x10 [ 516.172023][T10990] do_filp_open+0x20b/0x470 [ 516.172046][T10990] ? __pfx_do_filp_open+0x10/0x10 [ 516.172090][T10990] ? alloc_fd+0x471/0x7d0 [ 516.172135][T10990] do_sys_openat2+0x11b/0x1d0 [ 516.172167][T10990] ? __pfx_do_sys_openat2+0x10/0x10 [ 516.172211][T10990] __x64_sys_openat+0x174/0x210 [ 516.172244][T10990] ? __pfx___x64_sys_openat+0x10/0x10 [ 516.172279][T10990] ? rcu_is_watching+0x12/0xc0 [ 516.172310][T10990] do_syscall_64+0xcd/0x230 [ 516.172347][T10990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.172371][T10990] RIP: 0033:0x7f936ff8e969 [ 516.172390][T10990] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 516.172413][T10990] RSP: 002b:00007f936ddf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 516.172435][T10990] RAX: ffffffffffffffda RBX: 00007f93701b6160 RCX: 00007f936ff8e969 [ 516.172451][T10990] RDX: 0000000000020540 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 516.172471][T10990] RBP: 00007f9370010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 516.172486][T10990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 516.172500][T10990] R13: 0000000000000000 R14: 00007f93701b6160 R15: 00007ffe9c42f738 [ 516.172529][T10990] [ 522.372442][T11078] can: request_module (can-proto-0) failed. [ 524.726678][T11110] Invalid ELF header magic: != ELF [ 529.171579][T11160] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input31 [ 529.368410][T11176] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input30 [ 532.146477][T11209] svc: failed to register nfsdv3 RPC service (errno 101). [ 532.230478][T11209] svc: failed to register nfsaclv3 RPC service (errno 101). [ 532.568599][T11213] FAULT_INJECTION: forcing a failure. [ 532.568599][T11213] name failslab, interval 1, probability 0, space 0, times 0 [ 532.653222][T11213] CPU: 1 UID: 0 PID: 11213 Comm: syz.1.1201 Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) [ 532.653256][T11213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 532.653270][T11213] Call Trace: [ 532.653278][T11213] [ 532.653286][T11213] dump_stack_lvl+0x16c/0x1f0 [ 532.653324][T11213] should_fail_ex+0x512/0x640 [ 532.653357][T11213] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 532.653387][T11213] should_failslab+0xc2/0x120 [ 532.653416][T11213] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 532.653443][T11213] ? __alloc_skb+0x2b2/0x380 [ 532.653471][T11213] __alloc_skb+0x2b2/0x380 [ 532.653495][T11213] ? __pfx___alloc_skb+0x10/0x10 [ 532.653520][T11213] ? __mutex_trylock_common+0x80/0x250 [ 532.653553][T11213] ? __pfx___mutex_trylock_common+0x10/0x10 [ 532.653591][T11213] netlink_dump+0x698/0xd00 [ 532.653620][T11213] ? __mutex_lock+0x1ca/0xb90 [ 532.653653][T11213] ? __pfx_netlink_dump+0x10/0x10 [ 532.653678][T11213] ? __rhashtable_lookup.constprop.0+0x3a5/0x760 [ 532.653707][T11213] ? __netlink_dump_start+0x150/0x990 [ 532.653745][T11213] ? netlink_lookup+0x258/0x520 [ 532.653777][T11213] ? __pfx_netlink_lookup+0x10/0x10 [ 532.653812][T11213] __netlink_dump_start+0x6d6/0x990 [ 532.653843][T11213] ? __pfx_tc_dump_tfilter+0x10/0x10 [ 532.653872][T11213] rtnetlink_rcv_msg+0xb3e/0xe90 [ 532.653900][T11213] ? __pfx_tc_dump_tfilter+0x10/0x10 [ 532.653931][T11213] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 532.653959][T11213] ? __pfx_rtnl_dumpit+0x10/0x10 [ 532.653994][T11213] ? __pfx_tc_dump_tfilter+0x10/0x10 [ 532.654034][T11213] netlink_rcv_skb+0x16a/0x440 [ 532.654063][T11213] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 532.654093][T11213] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 532.654139][T11213] ? netlink_deliver_tap+0x1ae/0xd30 [ 532.654178][T11213] netlink_unicast+0x53a/0x7f0 [ 532.654211][T11213] ? __pfx_netlink_unicast+0x10/0x10 [ 532.654238][T11213] ? __lock_acquire+0xaa4/0x1ba0 [ 532.654279][T11213] netlink_sendmsg+0x8d1/0xdd0 [ 532.654315][T11213] ? __pfx_netlink_sendmsg+0x10/0x10 [ 532.654355][T11213] ____sys_sendmsg+0xa95/0xc70 [ 532.654390][T11213] ? copy_msghdr_from_user+0x10a/0x160 [ 532.654416][T11213] ? __pfx_____sys_sendmsg+0x10/0x10 [ 532.654454][T11213] ? kfree+0x252/0x4d0 [ 532.654472][T11213] ? __pfx__kstrtoull+0x10/0x10 [ 532.654504][T11213] ___sys_sendmsg+0x134/0x1d0 [ 532.654532][T11213] ? __pfx____sys_sendmsg+0x10/0x10 [ 532.654586][T11213] ? __pfx___might_resched+0x10/0x10 [ 532.654618][T11213] __sys_sendmmsg+0x200/0x420 [ 532.654648][T11213] ? __pfx___sys_sendmmsg+0x10/0x10 [ 532.654685][T11213] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 532.654731][T11213] ? fput+0x70/0xf0 [ 532.654758][T11213] ? ksys_write+0x1b9/0x240 [ 532.654785][T11213] ? __pfx_ksys_write+0x10/0x10 [ 532.654805][T11213] ? rcu_is_watching+0x12/0xc0 [ 532.654832][T11213] __x64_sys_sendmmsg+0x9c/0x100 [ 532.654858][T11213] ? lockdep_hardirqs_on+0x7c/0x110 [ 532.654889][T11213] do_syscall_64+0xcd/0x230 [ 532.654925][T11213] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.654949][T11213] RIP: 0033:0x7f2ba898e969 [ 532.654967][T11213] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 532.654990][T11213] RSP: 002b:00007f2ba97f9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 532.655012][T11213] RAX: ffffffffffffffda RBX: 00007f2ba8bb5fa0 RCX: 00007f2ba898e969 [ 532.655027][T11213] RDX: 0000000000000007 RSI: 0000200000000200 RDI: 0000000000000003 [ 532.655041][T11213] RBP: 00007f2ba97f9090 R08: 0000000000000000 R09: 0000000000000000 [ 532.655055][T11213] R10: 0000000000004008 R11: 0000000000000246 R12: 0000000000000002 [ 532.655070][T11213] R13: 0000000000000000 R14: 00007f2ba8bb5fa0 R15: 00007ffd10713c18 [ 532.655098][T11213] [ 533.228508][T11219] netlink: 206 bytes leftover after parsing attributes in process `syz.1.1204'. [ 533.367905][T11224] Invalid ELF header magic: != ELF [ 535.563604][ T30] audit: type=1800 audit(4294967582.606:11): pid=11247 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1209" name="file0" dev="tmpfs" ino=1585 res=0 errno=0 [ 536.786164][T11265] Invalid ELF header magic: != ELF [ 536.939526][T11267] ksmbd: Unknown IPC event: 14, ignore. [ 540.999954][T11309] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input32 [ 545.239475][T11357] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1235'. [ 545.295066][T11357] kernel read not supported for file /set_event_notrace_pid (pid: 11357 comm: syz.3.1235) [ 545.338371][ T30] audit: type=1800 audit(4294967592.376:12): pid=11357 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1235" name="set_event_notrace_pid" dev="tracefs" ino=24 res=0 errno=0 [ 545.804826][T11357] could not allocate digest TFM handle [ 546.854851][T11375] Invalid ELF header magic: != ELF [ 554.295689][T11435] program syz.3.1251 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 554.980026][T11447] ksmbd: Unknown IPC event: 14, ignore. [ 557.367077][T11454] mkiss: ax0: crc mode is auto. [ 557.464941][T11471] Invalid ELF header magic: != ELF [ 562.508445][T11546] netlink: 'syz.1.1279': attribute type 1 has an invalid length. [ 568.061432][T11634] program syz.0.1298 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 568.155717][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.162383][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 569.811776][T11658] FAULT_INJECTION: forcing a failure. [ 569.811776][T11658] name failslab, interval 1, probability 0, space 0, times 0 [ 569.875411][T11658] CPU: 1 UID: 0 PID: 11658 Comm: syz.0.1304 Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) [ 569.875447][T11658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 569.875461][T11658] Call Trace: [ 569.875468][T11658] [ 569.875477][T11658] dump_stack_lvl+0x16c/0x1f0 [ 569.875513][T11658] should_fail_ex+0x512/0x640 [ 569.875547][T11658] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 569.875577][T11658] should_failslab+0xc2/0x120 [ 569.875606][T11658] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 569.875633][T11658] ? __alloc_skb+0x2b2/0x380 [ 569.875662][T11658] __alloc_skb+0x2b2/0x380 [ 569.875685][T11658] ? __pfx___alloc_skb+0x10/0x10 [ 569.875709][T11658] ? __mutex_trylock_common+0x80/0x250 [ 569.875743][T11658] ? __pfx___mutex_trylock_common+0x10/0x10 [ 569.875787][T11658] netlink_dump+0x698/0xd00 [ 569.875816][T11658] ? __mutex_lock+0x1ca/0xb90 [ 569.875850][T11658] ? __pfx_netlink_dump+0x10/0x10 [ 569.875875][T11658] ? __rhashtable_lookup.constprop.0+0x3a5/0x760 [ 569.875903][T11658] ? __netlink_dump_start+0x150/0x990 [ 569.875942][T11658] ? netlink_lookup+0x258/0x520 [ 569.875967][T11658] ? __pfx_netlink_lookup+0x10/0x10 [ 569.876002][T11658] __netlink_dump_start+0x6d6/0x990 [ 569.876034][T11658] ? __pfx_tc_dump_tfilter+0x10/0x10 [ 569.876063][T11658] rtnetlink_rcv_msg+0xb3e/0xe90 [ 569.876092][T11658] ? __pfx_tc_dump_tfilter+0x10/0x10 [ 569.876122][T11658] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 569.876151][T11658] ? __pfx_rtnl_dumpit+0x10/0x10 [ 569.876185][T11658] ? __pfx_tc_dump_tfilter+0x10/0x10 [ 569.876225][T11658] netlink_rcv_skb+0x16a/0x440 [ 569.876254][T11658] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 569.876284][T11658] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 569.876330][T11658] ? netlink_deliver_tap+0x1ae/0xd30 [ 569.876363][T11658] netlink_unicast+0x53a/0x7f0 [ 569.876396][T11658] ? __pfx_netlink_unicast+0x10/0x10 [ 569.876423][T11658] ? __lock_acquire+0xaa4/0x1ba0 [ 569.876461][T11658] netlink_sendmsg+0x8d1/0xdd0 [ 569.876495][T11658] ? __pfx_netlink_sendmsg+0x10/0x10 [ 569.876536][T11658] ____sys_sendmsg+0xa95/0xc70 [ 569.876571][T11658] ? copy_msghdr_from_user+0x10a/0x160 [ 569.876598][T11658] ? __pfx_____sys_sendmsg+0x10/0x10 [ 569.876635][T11658] ? kfree+0x252/0x4d0 [ 569.876652][T11658] ? __pfx__kstrtoull+0x10/0x10 [ 569.876685][T11658] ___sys_sendmsg+0x134/0x1d0 [ 569.876713][T11658] ? __pfx____sys_sendmsg+0x10/0x10 [ 569.876772][T11658] ? __pfx___might_resched+0x10/0x10 [ 569.876804][T11658] __sys_sendmmsg+0x200/0x420 [ 569.876834][T11658] ? __pfx___sys_sendmmsg+0x10/0x10 [ 569.876870][T11658] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 569.876917][T11658] ? fput+0x70/0xf0 [ 569.876943][T11658] ? ksys_write+0x1b9/0x240 [ 569.876964][T11658] ? __pfx_ksys_write+0x10/0x10 [ 569.876984][T11658] ? rcu_is_watching+0x12/0xc0 [ 569.877013][T11658] __x64_sys_sendmmsg+0x9c/0x100 [ 569.877040][T11658] ? lockdep_hardirqs_on+0x7c/0x110 [ 569.877071][T11658] do_syscall_64+0xcd/0x230 [ 569.877107][T11658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 569.877131][T11658] RIP: 0033:0x7f0b3fd8e969 [ 569.877149][T11658] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 569.877172][T11658] RSP: 002b:00007f0b40c6e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 569.877193][T11658] RAX: ffffffffffffffda RBX: 00007f0b3ffb5fa0 RCX: 00007f0b3fd8e969 [ 569.877209][T11658] RDX: 0000000000000007 RSI: 0000200000000200 RDI: 0000000000000003 [ 569.877223][T11658] RBP: 00007f0b40c6e090 R08: 0000000000000000 R09: 0000000000000000 [ 569.877237][T11658] R10: 0000000000004008 R11: 0000000000000246 R12: 0000000000000002 [ 569.877250][T11658] R13: 0000000000000000 R14: 00007f0b3ffb5fa0 R15: 00007ffffa430868 [ 569.877279][T11658] [ 574.925398][T11695] delete_channel: no stack [ 577.183815][T11755] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1323'. [ 577.750629][T11727] delete_channel: no stack [ 578.129159][T11761] netlink: 146 bytes leftover after parsing attributes in process `syz.3.1325'. [ 578.479214][T11769] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1326'. [ 580.846570][T11800] Invalid ELF header magic: != ELF [ 583.495995][T11826] ksmbd: Unknown IPC event: 14, ignore. [ 586.370639][T11871] Invalid ELF header magic: != ELF [ 587.244737][T11879] ksmbd: Unknown IPC event: 14, ignore. [ 588.855829][T11890] syz.3.1354 (11890): attempted to duplicate a private mapping with mremap. This is not supported. [ 589.361410][T11909] delete_channel: no stack [ 590.708524][T11928] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1361'. [ 591.036828][T11928] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:376: inode #274: comm syz.2.1361: No space for directory leaf checksum. Please run e2fsck -D. [ 591.227491][T11928] EXT4-fs error (device sda1): __ext4_find_entry:1626: inode #274: comm syz.2.1361: checksumming directory block 0 [ 591.329769][T11928] platform regulatory.0: loading /lib/firmware/updates/6.15.0-rc5-syzkaller-00136-g9c69f8884904/regulatory.db failed with error -74 [ 591.485125][T11928] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:376: inode #274: comm syz.2.1361: No space for directory leaf checksum. Please run e2fsck -D. [ 591.861413][T11928] EXT4-fs error (device sda1): __ext4_find_entry:1626: inode #274: comm syz.2.1361: checksumming directory block 0 [ 591.931376][T11928] platform regulatory.0: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 592.006852][T11928] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:376: inode #274: comm syz.2.1361: No space for directory leaf checksum. Please run e2fsck -D. [ 592.100979][T11928] EXT4-fs error (device sda1): __ext4_find_entry:1626: inode #274: comm syz.2.1361: checksumming directory block 0 [ 592.170080][T11928] platform regulatory.0: loading /lib/firmware/6.15.0-rc5-syzkaller-00136-g9c69f8884904/regulatory.db failed with error -74 [ 592.237758][T11928] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:376: inode #274: comm syz.2.1361: No space for directory leaf checksum. Please run e2fsck -D. [ 592.282656][T11928] EXT4-fs error (device sda1): __ext4_find_entry:1626: inode #274: comm syz.2.1361: checksumming directory block 0 [ 592.335084][T11928] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -74 [ 592.367966][T11928] platform regulatory.0: Direct firmware load for regulatory.db failed with error -74 [ 592.445911][T11928] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 596.469816][T11996] netlink: 330 bytes leftover after parsing attributes in process `syz.0.1375'. [ 598.702800][T12014] FAULT_INJECTION: forcing a failure. [ 598.702800][T12014] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 598.772518][T12014] CPU: 1 UID: 0 PID: 12014 Comm: syz.1.1381 Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) [ 598.772554][T12014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 598.772569][T12014] Call Trace: [ 598.772576][T12014] [ 598.772586][T12014] dump_stack_lvl+0x16c/0x1f0 [ 598.772626][T12014] should_fail_ex+0x512/0x640 [ 598.772664][T12014] should_fail_alloc_page+0xe7/0x130 [ 598.772706][T12014] prepare_alloc_pages+0x3c2/0x610 [ 598.772748][T12014] __alloc_frozen_pages_noprof+0x18f/0x23a0 [ 598.772778][T12014] ? unwind_get_return_address+0x59/0xa0 [ 598.772806][T12014] ? arch_stack_walk+0xa6/0x100 [ 598.772842][T12014] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 598.772873][T12014] ? __pfx_stack_trace_save+0x10/0x10 [ 598.772897][T12014] ? stack_depot_save_flags+0x28/0xa50 [ 598.772939][T12014] ? kasan_save_stack+0x42/0x60 [ 598.772962][T12014] ? kasan_save_stack+0x33/0x60 [ 598.772985][T12014] ? kasan_save_track+0x14/0x30 [ 598.773008][T12014] ? __kasan_slab_alloc+0x89/0x90 [ 598.773033][T12014] ? kmem_cache_alloc_node_noprof+0x1d5/0x3b0 [ 598.773060][T12014] ? alloc_vmap_area+0x613/0x2970 [ 598.773091][T12014] ? __get_vm_area_node+0x1a7/0x300 [ 598.773125][T12014] ? __vmalloc_node_range_noprof+0x277/0x1540 [ 598.773163][T12014] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 598.773197][T12014] ? policy_nodemask+0xea/0x4e0 [ 598.773228][T12014] alloc_pages_mpol+0x1fb/0x550 [ 598.773258][T12014] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 598.773295][T12014] alloc_pages_noprof+0x131/0x390 [ 598.773324][T12014] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 598.773348][T12014] get_free_pages_noprof+0xc/0x40 [ 598.773379][T12014] kasan_populate_vmalloc_pte+0x2d/0x160 [ 598.773404][T12014] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 598.773428][T12014] __apply_to_page_range+0x617/0xd60 [ 598.773468][T12014] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 598.773497][T12014] ? __pfx___apply_to_page_range+0x10/0x10 [ 598.773535][T12014] ? alloc_vmap_area+0x872/0x2970 [ 598.773573][T12014] alloc_vmap_area+0x919/0x2970 [ 598.773619][T12014] ? __pfx_alloc_vmap_area+0x10/0x10 [ 598.773661][T12014] __get_vm_area_node+0x1a7/0x300 [ 598.773710][T12014] __vmalloc_node_range_noprof+0x277/0x1540 [ 598.773750][T12014] ? htab_map_alloc+0x456/0x1540 [ 598.773788][T12014] ? find_held_lock+0x2b/0x80 [ 598.773811][T12014] ? htab_map_alloc+0x456/0x1540 [ 598.773845][T12014] ? pcpu_memcg_post_alloc_hook+0x1e/0x740 [ 598.773876][T12014] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 598.773914][T12014] ? pcpu_alloc_noprof+0x1f5/0x1470 [ 598.773948][T12014] ? htab_map_alloc+0x456/0x1540 [ 598.773980][T12014] __bpf_map_area_alloc+0xeb/0x190 [ 598.774018][T12014] ? htab_map_alloc+0x456/0x1540 [ 598.774051][T12014] htab_map_alloc+0x456/0x1540 [ 598.774090][T12014] ? htab_map_alloc_check+0x2f2/0x430 [ 598.774125][T12014] map_create+0x58f/0x1db0 [ 598.774165][T12014] ? __pfx_map_create+0x10/0x10 [ 598.774195][T12014] ? __might_fault+0xe3/0x190 [ 598.774220][T12014] ? __might_fault+0xe3/0x190 [ 598.774245][T12014] ? __might_fault+0x13b/0x190 [ 598.774283][T12014] __sys_bpf+0x47cc/0x4d80 [ 598.774324][T12014] ? __pfx___sys_bpf+0x10/0x10 [ 598.774359][T12014] ? ksys_write+0x190/0x240 [ 598.774387][T12014] ? do_futex+0x122/0x350 [ 598.774413][T12014] ? __pfx_do_futex+0x10/0x10 [ 598.774451][T12014] ? xfd_validate_state+0x5d/0x180 [ 598.774494][T12014] ? rcu_is_watching+0x12/0xc0 [ 598.774520][T12014] __x64_sys_bpf+0x78/0xc0 [ 598.774555][T12014] ? lockdep_hardirqs_on+0x7c/0x110 [ 598.774588][T12014] do_syscall_64+0xcd/0x230 [ 598.774641][T12014] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 598.774666][T12014] RIP: 0033:0x7f2ba898e969 [ 598.774689][T12014] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 598.774713][T12014] RSP: 002b:00007f2ba97f9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 598.774736][T12014] RAX: ffffffffffffffda RBX: 00007f2ba8bb5fa0 RCX: 00007f2ba898e969 [ 598.774753][T12014] RDX: 0000000000000098 RSI: 0000200000000100 RDI: 0000000000000000 [ 598.774767][T12014] RBP: 00007f2ba8a10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 598.774782][T12014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 598.774796][T12014] R13: 0000000000000000 R14: 00007f2ba8bb5fa0 R15: 00007ffd10713c18 [ 598.774825][T12014] [ 599.364878][T12014] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1381'. syzkaller syzkaller login: [ 600.469248][T12031] ksmbd: Unknown IPC event: 14, ignore. [ 603.114486][T12055] Invalid ELF header magic: != ELF [ 603.304797][T12058] ptrace attach of "./syz-executor exec"[5826] was attempted by "./syz-executor exec"[12058] [ 603.929218][T12062] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1391'. [ 604.172535][T12066] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 606.192342][T12094] netlink: 'syz.0.1400': attribute type 1 has an invalid length. [ 607.946196][T12118] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1404'. [ 608.020935][T12118] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:376: inode #274: comm syz.0.1404: No space for directory leaf checksum. Please run e2fsck -D. [ 608.130138][T12118] EXT4-fs error (device sda1): __ext4_find_entry:1626: inode #274: comm syz.0.1404: checksumming directory block 0 [ 608.165313][T12122] ksmbd: Unknown IPC event: 14, ignore. [ 608.252299][T12118] platform regulatory.0: loading /lib/firmware/updates/6.15.0-rc5-syzkaller-00136-g9c69f8884904/regulatory.db failed with error -74 [ 608.333739][T12118] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:376: inode #274: comm syz.0.1404: No space for directory leaf checksum. Please run e2fsck -D. [ 608.487263][T12118] EXT4-fs error (device sda1): __ext4_find_entry:1626: inode #274: comm syz.0.1404: checksumming directory block 0 [ 608.576165][T12118] platform regulatory.0: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 608.653706][T12118] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:376: inode #274: comm syz.0.1404: No space for directory leaf checksum. Please run e2fsck -D. [ 608.790612][T12118] EXT4-fs error (device sda1): __ext4_find_entry:1626: inode #274: comm syz.0.1404: checksumming directory block 0 [ 608.872636][T12118] platform regulatory.0: loading /lib/firmware/6.15.0-rc5-syzkaller-00136-g9c69f8884904/regulatory.db failed with error -74 [ 608.939612][T12118] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:376: inode #274: comm syz.0.1404: No space for directory leaf checksum. Please run e2fsck -D. [ 609.049336][T12118] EXT4-fs error (device sda1): __ext4_find_entry:1626: inode #274: comm syz.0.1404: checksumming directory block 0 [ 609.131114][T12118] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -74 [ 609.159862][T12134] ================================================================== [ 609.159878][T12134] BUG: KASAN: vmalloc-out-of-bounds in sys_fillrect+0x15d4/0x17b0 [ 609.159925][T12134] Write of size 8 at addr ffffc90003739000 by task syz.2.1410/12134 [ 609.159945][T12134] [ 609.159956][T12134] CPU: 1 UID: 0 PID: 12134 Comm: syz.2.1410 Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) [ 609.159985][T12134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 609.160000][T12134] Call Trace: [ 609.160007][T12134] [ 609.160016][T12134] dump_stack_lvl+0x116/0x1f0 [ 609.160052][T12134] print_report+0xc3/0x670 [ 609.160081][T12134] ? __virt_addr_valid+0x5e/0x590 [ 609.160115][T12134] ? sys_fillrect+0x15d4/0x17b0 [ 609.160151][T12134] kasan_report+0xe0/0x110 [ 609.160181][T12134] ? sys_fillrect+0x15d4/0x17b0 [ 609.160222][T12134] sys_fillrect+0x15d4/0x17b0 [ 609.160263][T12134] ? __pfx_sys_fillrect+0x10/0x10 [ 609.160303][T12134] ? __pfx_bit_putcs+0x10/0x10 [ 609.160333][T12134] ? bit_cursor+0xeca/0x17e0 [ 609.160365][T12134] drm_fbdev_shmem_defio_fillrect+0x22/0x140 [ 609.160402][T12134] bit_clear+0x17a/0x220 [ 609.160433][T12134] ? __pfx_bit_clear+0x10/0x10 [ 609.160463][T12134] ? __pfx___might_resched+0x10/0x10 [ 609.160490][T12134] ? fb_get_color_depth+0x120/0x250 [ 609.160518][T12134] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 609.160553][T12134] ? __pfx_bit_clear+0x10/0x10 [ 609.160583][T12134] __fbcon_clear+0x600/0x780 [ 609.160614][T12134] fbcon_scroll+0x48b/0x690 [ 609.160644][T12134] con_scroll+0x45c/0x690 [ 609.160673][T12134] do_con_write+0x6869/0x7c90 [ 609.160711][T12134] ? __pfx_do_con_write+0x10/0x10 [ 609.160747][T12134] con_write+0x23/0xb0 [ 609.160775][T12134] n_tty_write+0x40f/0x1160 [ 609.160815][T12134] ? __pfx_n_tty_write+0x10/0x10 [ 609.160854][T12134] ? rcu_is_watching+0x12/0xc0 [ 609.160876][T12134] ? __pfx_woken_wake_function+0x10/0x10 [ 609.160917][T12134] ? kfree+0x252/0x4d0 [ 609.160936][T12134] ? file_tty_write.constprop.0+0x6ed/0x9b0 [ 609.160967][T12134] ? __pfx_n_tty_write+0x10/0x10 [ 609.161002][T12134] file_tty_write.constprop.0+0x4ff/0x9b0 [ 609.161036][T12134] redirected_tty_write+0xd4/0x150 [ 609.161064][T12134] vfs_write+0x5ba/0x1180 [ 609.161087][T12134] ? __pfx_redirected_tty_write+0x10/0x10 [ 609.161118][T12134] ? __pfx_vfs_write+0x10/0x10 [ 609.161138][T12134] ? find_held_lock+0x2b/0x80 [ 609.161169][T12134] ksys_write+0x12a/0x240 [ 609.161191][T12134] ? __pfx_ksys_write+0x10/0x10 [ 609.161212][T12134] ? rcu_is_watching+0x12/0xc0 [ 609.161237][T12134] do_syscall_64+0xcd/0x230 [ 609.161273][T12134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.161298][T12134] RIP: 0033:0x7f936ff8e969 [ 609.161317][T12134] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 609.161341][T12134] RSP: 002b:00007f9370d4f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 609.161364][T12134] RAX: ffffffffffffffda RBX: 00007f93701b5fa0 RCX: 00007f936ff8e969 [ 609.161380][T12134] RDX: 000000000000013e RSI: 0000200000000040 RDI: 0000000000000004 [ 609.161395][T12134] RBP: 00007f9370010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 609.161410][T12134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 609.161425][T12134] R13: 0000000000000000 R14: 00007f93701b5fa0 R15: 00007ffe9c42f738 [ 609.161447][T12134] [ 609.161455][T12134] [ 609.161468][T12134] The buggy address ffffc90003739000 belongs to a vmalloc virtual mapping [ 609.161481][T12134] Memory state around the buggy address: [ 609.161500][T12134] ffffc90003738f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 609.161518][T12134] ffffc90003738f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 609.161535][T12134] >ffffc90003739000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 609.161549][T12134] ^ [ 609.161561][T12134] ffffc90003739080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 609.161578][T12134] ffffc90003739100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 609.161591][T12134] ================================================================== [ 609.161605][T12134] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 609.161620][T12134] CPU: 1 UID: 0 PID: 12134 Comm: syz.2.1410 Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) [ 609.161650][T12134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 609.161664][T12134] Call Trace: [ 609.161673][T12134] [ 609.161681][T12134] dump_stack_lvl+0x3d/0x1f0 [ 609.161716][T12134] panic+0x71c/0x800 [ 609.161749][T12134] ? __pfx_panic+0x10/0x10 [ 609.161786][T12134] ? __pfx__printk+0x10/0x10 [ 609.161816][T12134] ? rcu_is_watching+0x12/0xc0 [ 609.161842][T12134] ? sys_fillrect+0x15d4/0x17b0 [ 609.161885][T12134] check_panic_on_warn+0xab/0xb0 [ 609.161922][T12134] end_report+0x107/0x170 [ 609.161951][T12134] kasan_report+0xee/0x110 [ 609.161979][T12134] ? sys_fillrect+0x15d4/0x17b0 [ 609.162020][T12134] sys_fillrect+0x15d4/0x17b0 [ 609.162061][T12134] ? __pfx_sys_fillrect+0x10/0x10 [ 609.162101][T12134] ? __pfx_bit_putcs+0x10/0x10 [ 609.162131][T12134] ? bit_cursor+0xeca/0x17e0 [ 609.162164][T12134] drm_fbdev_shmem_defio_fillrect+0x22/0x140 [ 609.162201][T12134] bit_clear+0x17a/0x220 [ 609.162232][T12134] ? __pfx_bit_clear+0x10/0x10 [ 609.162264][T12134] ? __pfx___might_resched+0x10/0x10 [ 609.162291][T12134] ? fb_get_color_depth+0x120/0x250 [ 609.162319][T12134] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 609.162354][T12134] ? __pfx_bit_clear+0x10/0x10 [ 609.162384][T12134] __fbcon_clear+0x600/0x780 [ 609.162415][T12134] fbcon_scroll+0x48b/0x690 [ 609.162445][T12134] con_scroll+0x45c/0x690 [ 609.162474][T12134] do_con_write+0x6869/0x7c90 [ 609.162512][T12134] ? __pfx_do_con_write+0x10/0x10 [ 609.162548][T12134] con_write+0x23/0xb0 [ 609.162577][T12134] n_tty_write+0x40f/0x1160 [ 609.162617][T12134] ? __pfx_n_tty_write+0x10/0x10 [ 609.162651][T12134] ? rcu_is_watching+0x12/0xc0 [ 609.162673][T12134] ? __pfx_woken_wake_function+0x10/0x10 [ 609.162713][T12134] ? kfree+0x252/0x4d0 [ 609.162732][T12134] ? file_tty_write.constprop.0+0x6ed/0x9b0 [ 609.162762][T12134] ? __pfx_n_tty_write+0x10/0x10 [ 609.162797][T12134] file_tty_write.constprop.0+0x4ff/0x9b0 [ 609.162831][T12134] redirected_tty_write+0xd4/0x150 [ 609.162864][T12134] vfs_write+0x5ba/0x1180 [ 609.162887][T12134] ? __pfx_redirected_tty_write+0x10/0x10 [ 609.162917][T12134] ? __pfx_vfs_write+0x10/0x10 [ 609.162938][T12134] ? find_held_lock+0x2b/0x80 [ 609.162971][T12134] ksys_write+0x12a/0x240 [ 609.162992][T12134] ? __pfx_ksys_write+0x10/0x10 [ 609.163014][T12134] ? rcu_is_watching+0x12/0xc0 [ 609.163040][T12134] do_syscall_64+0xcd/0x230 [ 609.163075][T12134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.163100][T12134] RIP: 0033:0x7f936ff8e969 [ 609.163118][T12134] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 609.163142][T12134] RSP: 002b:00007f9370d4f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 609.163164][T12134] RAX: ffffffffffffffda RBX: 00007f93701b5fa0 RCX: 00007f936ff8e969 [ 609.163181][T12134] RDX: 000000000000013e RSI: 0000200000000040 RDI: 0000000000000004 [ 609.163196][T12134] RBP: 00007f9370010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 609.163211][T12134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 609.163226][T12134] R13: 0000000000000000 R14: 00007f93701b5fa0 R15: 00007ffe9c42f738 [ 609.163249][T12134] [ 609.163318][T12134] Kernel Offset: disabled