last executing test programs: 11.036452337s ago: executing program 3 (id=8355): connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) bind$auto(0x3, 0x0, 0x6a) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x25, 0x800007, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = socket(0xa, 0x5, 0x0) getsockopt$auto(r0, 0x84, 0x1e, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/dev/audio1\x00', 0x100000a3d8) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x5) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vbi15\x00', 0x802, 0x0) sendmsg$auto_THERMAL_GENL_CMD_THRESHOLD_DELETE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8004}, 0x4) writev$auto(0x3, &(0x7f0000000100)={&(0x7f0000000340), 0x7111}, 0x8) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) getrandom$auto(0x0, 0x20, 0x3) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r2, 0x4b47, 0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) setresuid$auto(0x0, 0x8, 0x8000) 9.874821298s ago: executing program 3 (id=8358): r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x400008, 0x200, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0) r1 = openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/clear_refs\x00', 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB=']'], 0x1ac}}, 0x40000) recvmmsg$auto(r2, &(0x7f0000000140)={{0x0, 0x1, &(0x7f0000000080)={0x0, 0x400}, 0x5, 0x0, 0x200002, 0x8}, 0x803}, 0xfffffff9, 0x10, 0x0) write$auto_proc_clear_refs_operations_internal(r1, 0x0, 0xffffff4b) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) select$auto(0xffffffff, &(0x7f0000000040)={[0x54, 0x10, 0x800000c8be, 0x8, 0x273a, 0x0, 0xb, 0x5, 0x5, 0x330, 0x7, 0x200cf, 0x45, 0xc, 0x5, 0xb98]}, 0x0, 0x0, 0x0) sendmsg$auto_TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB='J\x00\x00\x00', @ANYRES16, @ANYBLOB="010025bd7000fcdbdf25020000002c00018028003c8008001b"], 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x44) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) mq_notify$auto(0x4, &(0x7f0000000040)={@sival_ptr=0x0, @inferred, 0x1, @_tid}) sendmsg$auto_NL802154_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0}, 0x80) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0xff, 0x0, 0x1, 0x3}, 0xed7138c}, 0xb, 0x0) clone$auto(0x9001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6) syz_clone3(&(0x7f0000000080)={0x123060000, 0x0, 0x0, 0x0, {0x14}, 0x0, 0x0, 0x0, 0x0}, 0x58) write$auto(0x3, 0x0, 0x5c8) 8.465979578s ago: executing program 3 (id=8363): unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x4000000000db, 0x12, 0x400, 0x18002) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/net/rose8/address\x00', 0x752502, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nbd0\x00', 0xc0c00, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r0 = io_uring_setup$auto(0x4, 0x0) close_range$auto(0x2, r0, 0x0) arch_prctl$auto_ARCH_MAP_VDSO_32(0x2002, 0x3) mmap$auto(0x0, 0x2000009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) ioctl$auto_BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000200)={"5f9e13fb111c0f20af5ba4ef6e6d032125c0c120eb1e928a6be8ebbd1ec31982", 0x40, 0x1, 0x6a04, 0x2, 0x3}) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001300)={'batadv_slave_0\x00', 0x0}) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001480), r2) sendmsg$auto_ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002abd6000fcdbdfa1e0e479322e794d2bcf42e66c3b797a1200eb8e00000000000c00018008cb2c9d0cd5a6fe4e19f72fb1fcd7000100e98381619dd3a625f669d5ec1647ba2b17a8a6a38a109e97918a0940b285226e20d7d5d48a06dea06d6a98ddff5e8561cb71b391bac3b1518ad2ca90204f24c48267d5c1fb", @ANYRES32=r3, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x8800}, 0x0) socket(0x2, 0x1, 0x106) socket(0x2, 0x1, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/scsi/sg/debug\x00', 0x40, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1\x00', 0x20342, 0x0) listen$auto(0x3, 0x3) socket(0xa, 0x1, 0x84) 5.545979447s ago: executing program 1 (id=8367): close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) r1 = ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$auto(0x3, 0xaece, 0xffffffffffffffff) read$auto(0x4, 0x0, 0xfdef) mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x5, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket(0x23, 0x80805, 0x0) memfd_secret$auto(0x0) socket(0x2b, 0x1, 0x1) setsockopt$auto(0x3, 0x2000a, 0x2, 0x0, 0xfb0) mmap$auto(0x0, 0x400008, 0x2, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) sysfs$auto(0x2, 0x7, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000008040), 0x2, 0x0) r2 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x80044943, 0x0) ioctl$auto_VHOST_GET_FEATURES(r1, 0x8008af00, &(0x7f0000000000)=0x8) r3 = openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/tracing/dynamic_events\x00', 0x1, 0x0) write$auto_dynamic_events_ops_trace_dynevent(r3, &(0x7f0000000c00)='#', 0x1) getrandom$auto(0x0, 0x6000000, 0x3) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f000000fc00), 0x3, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xc004ae02, 0x88) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/dummy_hcd.2/usb3/authorized\x00', 0x601, 0x0) getsockopt$auto(r4, 0x8, 0x5, &(0x7f0000000040)='/sys/kernel/tracing/dynamic_events\x00', &(0x7f0000000080)=0x8) r5 = openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$auto_mISDN_fops_timerdev(r5, 0x0, 0x0) 5.520335361s ago: executing program 3 (id=8368): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) write$auto(0x3, 0x0, 0x100082) r1 = openat$auto_lowpan_control_fops_6lowpan(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) bpf$auto_BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)=@bpf_attr_1={r1, 0x4, @value=0x7, 0x3ff}, 0x7ff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x80000008000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x800) bpf$auto(0x0, &(0x7f00000001c0)=@test={0xffffffffffffffff, 0xffff, 0xfffff0b6, 0xffff, 0x84, 0xac1, 0x2, 0x36242398, 0xfffff5b2, 0x3bb, 0x8000007, 0xffff, 0x6, 0x81, 0x68198}, 0x6f3) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff0500060001000000840002803d00488013b37090badc49d6dc93876646d25a4d297d01cd3b7da38d12889cc50d505f353dc42d0a3c0a14c7b46428910708003600", @ANYRES32=0x0, @ANYBLOB="0400b3800000003d003b800400a4800c009a00008000000000000004008680c16ab1b1b39dcaa14b6af7dcc011b43cf706e562811c62b28a702b72e0a87126700294f23500"], 0xd4}, 0x1, 0x0, 0x0, 0x20000010}, 0x20008000) sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="010027bd"], 0x2c}, 0x1, 0x0, 0x0, 0x4801}, 0x0) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000380), r2) r3 = socket(0xa, 0x5, 0x84) sendto$auto(r3, 0x0, 0x401, 0x101, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fb8000"}, 0x1c) recvfrom$auto(r1, &(0x7f0000000280)="57ff15fea0a4ed55fabdd55f5a04bb3e7cee53eb7a997590240b050918aecb6215256d6fad1c22a48b2a88dc2e10df8b9e6c7b81c00ceaded6aeec51d7f875f2", 0x8000000000000000, 0x80000000, &(0x7f0000000300)=@qipcrtr={0x2a, 0x3, 0x7ffe}, &(0x7f0000000340)=0xfff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="12"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) ioctl$auto_SNDCTL_DSP_SYNC(r0, 0x5001, 0xfffffffffffffffc) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) 5.302581409s ago: executing program 0 (id=8369): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/netdevsim0/del_port\x00', 0xa001, 0x0) mkdir$auto(&(0x7f0000000080)='./file0\x00', 0x1) mmap$auto(0x0, 0x20009, 0xdf, 0xef1, r0, 0x1) process_vm_readv$auto(0x0, &(0x7f0000000000)={0x0, 0xfff}, 0x1, 0x0, 0x6, 0x0) r1 = io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x22, &(0x7f0000000000), 0x1) mincore$auto(0x7fff, 0x6, &(0x7f0000000180)='{\xc8\x00') socket(0x0, 0x2, 0x0) r2 = open$dir(&(0x7f0000000000)='./file0\x00', 0x18000, 0x6) prctl$auto(0x1000000001c, 0x8000000000000000, 0x100000000, 0x400000000009, 0x5) mincore$auto(0x9, 0x3, &(0x7f00000001c0)='/sys/devices/netdevsim0/del_port\x00') getsockopt$auto(r2, 0xe, 0x8, &(0x7f0000000040)='\x00', &(0x7f0000000100)=0xf) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14f602, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mkdir$auto(&(0x7f0000004440)='./file0\x00', 0x1) mkdir$auto(&(0x7f00000000c0)='./file1\x00', 0x9) mkdir$auto(&(0x7f0000000380)='./file0/file0\x00', 0x552) rename$auto(&(0x7f0000000480)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') setsockopt$auto(0x1, 0x1, 0x14, &(0x7f0000000000)='\x00', 0xbb) rmdir$auto(&(0x7f0000000280)='./file0\x00') lsm_get_self_attr$auto(0x68, 0x0, &(0x7f0000002440)=0x8, 0x0) openat$auto(r1, &(0x7f0000000140)='./file0\x00', 0xffffffff, 0x3) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000005c0), r3) sendmsg$auto_NL80211_CMD_STOP_NAN(r4, &(0x7f0000000680)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000640)={&(0x7f00000006c0)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x4044800}, 0x40) write$auto(r0, &(0x7f00000006c0)='0\x81=\"\xad/\x8d\b\x00\xce\x9bj\xdf\xd9\x82=~\x17\xfb&\xc3y=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\x9b\xd3x7b[\x8a +6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xf77^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85K /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xcb56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;a\xc0!\x8b\xf5{\xc7Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xda\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0e\x00\x00\x00\x00\x00\x00\x00\x80\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb', 0xfffffffffffffff8) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x8081, 0x152) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000300), 0x400, 0x0) 4.897617363s ago: executing program 0 (id=8370): openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x82000, 0x0) openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, 0x0, 0x2dc08f24db1a1290, 0x0) r0 = epoll_create$auto(0x3e) epoll_ctl$auto(r0, 0x1, 0xffffffffffffffff, 0x0) openat$auto_drm_edid_fops_drm_debugfs(0xffffffffffffff9c, 0x0, 0x40901, 0x0) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0xd4, 0x1, 0x6, 0x0, 0x1, 0x368e, 0x2, {0x100000000, 0x10000}, 0x5, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x9, 0x81, 0xdfffffffffff628e, 0x6, 0xdeb1, 0x808}) socket(0x2b, 0x1, 0x1) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D1\x00', 0x1, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x4a801, 0x0) socket(0x3, 0x5, 0x5) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mtd0ro\x00', 0x2000, 0x0) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) r1 = eventfd$auto(0x80) readv$auto(r1, 0x0, 0x4) read$auto(r1, 0x0, 0xcc9c) write$auto(r1, &(0x7f0000000400)='\'\x00', 0x8) 4.615911032s ago: executing program 0 (id=8371): read$auto_force_wakeup_fops_hci_vhci(0xffffffffffffffff, &(0x7f0000000080)=""/218, 0xda) set_mempolicy$auto(0x6, &(0x7f0000000000)=0x3, 0x21) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_CREATE_VM(r0, 0xae80, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) ioctl$auto(0x3, 0xae41, r2) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyu3\x00', 0x1, 0x0) ioctl$auto_TIOCSETD2(r3, 0x5423, &(0x7f0000000080)) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x60742, 0x0) socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x40000080) mmap$auto(0xfffffffffffffffe, 0x580f, 0x112f4a03, 0x8000000008011, 0x3, 0x0) getresgid$auto(0x0, 0x0, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x2, 0x73) ioctl$auto_SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r4 = socket(0x2a, 0x2, 0x1) connect$auto(r4, &(0x7f00000000c0)=@qipcrtr={0x2a, 0xffffffff, 0xfffffffe}, 0x55) mmap$auto(0x0, 0x8, 0x89, 0xb811, 0xffffffffffffffff, 0x8004) sendto$auto(0x3, 0x0, 0x79, 0x0, 0x0, 0x20) writev$auto(0x1, 0x0, 0x1) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc2481, 0x0) 4.415043019s ago: executing program 3 (id=8372): openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x100, 0x0) ioctl$auto(0xffffffffffffffff, 0x5522, 0xf15) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) socket(0x10, 0x4, 0xffffffc0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x6, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x2, 0x7, 0x1, 0x9, 0x100, 0xfffffffffffffffe]}, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) write$auto(r1, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(r1, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket(0x10, 0x2, 0xffffffff) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/timers\x00', 0x109500, 0x0) pread64$auto(r2, 0x0, 0x8, 0xffff) madvise$auto(0x0, 0x200007, 0x8) setresuid$auto(0x2, 0x7, 0x8080) socket(0x2b, 0x2, 0x20a) syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff) r3 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/security/tomoyo/exception_policy\x00', 0xc0201, 0x0) write$auto_tomoyo_operations_securityfs_if(r3, &(0x7f00000000c0)="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", 0x119) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/usb/usbmon/9t\x00', 0x70a80, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x400, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty51\x00', 0x200300, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x8080, 0x0) io_setup$auto(0x7ffe, &(0x7f0000000000)) 4.204278232s ago: executing program 1 (id=8373): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="e7e1707d00"], 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000084) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/fs/nfs/exports\x00', 0x86201, 0x0) r2 = socket(0x9, 0x80000, 0x82) io_uring_setup$auto(0x6, 0x0) r3 = socket(0x2, 0x5, 0xfffffffa) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, r3, 0x8000) getsockopt$auto(r2, 0x84, 0x76, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) socket(0x10, 0x2, 0x0) (async) socket(0x10, 0x2, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x9, 0xd, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0xf, 0x29f, 0x100, 0x7f, 0x101, 0x6, 0x2}, {0x0, 0x1, 0x52, 0x5, 0x1, 0x40, 0x40, 0x8, 0x100000040}}) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/nbd9\x00', 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_DISCONNECT(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="7c020000", @ANYRES16=r5, @ANYBLOB="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"], 0x27c}, 0x1, 0x0, 0x0, 0xc000}, 0x24008051) (async) sendmsg$auto_NBD_CMD_DISCONNECT(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="7c020000", @ANYRES16=r5, @ANYBLOB="01002dbd7000fcdbdf250200000068020980be00c58020369b20e4750e82832bfcd6e3630eeb4a47a5d7809cac9c08cedabf2647f30b29eb00a87f05df535918b4e6bcabb913423b8e7e9a780ca58ed283f621eee21dcf5898578558bd28fb4c97780a3813f3ef0e2c1df34bd33fa404f3664f88032d616c4b40aa44ef3796ebb5bec22bb84d1a55e2000989498969db839f9c7036a3c33405b266c409d8c110ddc623a00107be60c1b7a1be5a4f37e4b36d0131ea28349950c09d2f9b2a53e6c2043cde52df177363874ee1e3c97780000058cb93e074c5b8288b1231c8c6db2f192e79d506ebea6e31ca2c31ea7b3d3db5d3345b10e21f992f916654e93660e46672c6811cbe87be1f6698b963c796711d559870945ad6e32e06b836c36cf797a3aba29d189fd0ec859228119c6224f69a8988926e09e8fe0dc86ebc0d048bc101f71f00c44c09485753d5996dfeb20c00e60005000000000000003058feaf4c742e5c187c805542649b1b76530034009b3cdfc4d10c7ea4cef2a9bcbc0081ceef45cb75226940368cfa0b5432a4e2f6887a469c5a1e3fa74a7b1d3f464ab957675d48b5ada3d1b0a81eeeefcd22341550e45db2679d430f7c97e792d67efb0093fcb4fac5e6755a91f8a679ca0aabf46d123fb2493b21ccbddc6b93799ebb60ba42a8d005fc1553c1f1b3fc46d2b3d249574e3a2ccd48d09eac0c6beb7d1ef761a27f54becb27a3d175691de6d1df43066c66e4e6210c79bb4c7a80f0aff9020758080fe2fd5fc6e3b03c1337d67266b8c60fea50d3eabab06d2d7a740db4fe5424058324ad78016f4fb12398e68822bd0acfe53d7d99af660848c3faa4f9e38f115c7d0d29636fe1a331563c4ee647656d3a5801"], 0x27c}, 0x1, 0x0, 0x0, 0xc000}, 0x24008051) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x2, 0x3a) (async) socket(0xa, 0x2, 0x3a) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) (async) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) io_uring_setup$auto(0x6, 0x0) clock_nanosleep$auto(0x8, 0x1, 0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x9, 0x400000072, 0x8b72, 0x1000000002, 0x8000) (async) mmap$auto(0x0, 0x9, 0x400000072, 0x8b72, 0x1000000002, 0x8000) shutdown$auto(0xffffffffffffffff, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80302, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) 4.196767774s ago: executing program 2 (id=8374): ioctl$auto_XFS_IOC_ALLOCSP64(0xffffffffffffffff, 0x40305824, &(0x7f00000000c0)={0x8, 0x0, 0xfffffffffffffff9, 0xfffffffffffffffd, 0x5, 0x0}) openat$auto_ftrace_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/events/vmalloc/purge_vmap_area_lazy/enable\x00', 0x1, 0x0) write$auto(0x3, 0x0, 0x81) move_pages$auto(r0, 0xf54, 0x0, 0x0, 0x0, 0x1) capget$auto(&(0x7f0000000000)={0xfffff800, r0}, &(0x7f0000000040)={0x3, 0x2, 0x5}) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nbd4\x00', 0x2e9c0, 0x0) mmap$auto(0x0, 0x580f, 0x1, 0x8000000008011, 0x3, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) ioctl$auto(0x3, 0x40104d09, 0x5) ioctl$auto(0xffffffffffffffff, 0x89a2, 0xffffffffffffffff) write$auto(0xca, 0x0, 0x9) madvise$auto(0x0, 0x2003f0, 0x15) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r1 = socket(0xa, 0x1, 0x84) setsockopt$auto(r1, 0x10000000084, 0x7, 0x0, 0x4007) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) write$auto(0x3, 0x0, 0x5c8) 3.838810262s ago: executing program 2 (id=8375): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/LNXSYSTM:00/LNXPWRBN:00/power/wakeup\x00', 0x2, 0x0) read$auto(0x3, 0x0, 0x1f40) write$auto(0x3, 0x0, 0x3f00) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) rt_tgsigqueueinfo$auto(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000100)={@siginfo_0_0={0x6, 0xe, 0x85, @_rt={0x0, 0x0, @sival_int=0x8000}}}) 3.7803382s ago: executing program 1 (id=8376): mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0x8, 0x3, 0x9b72, 0x2, 0x8000) sysfs$auto(0x2, 0x10000000000000b, 0x0) madvise$auto(0x9a16050000000000, 0x5, 0x15) 3.531873189s ago: executing program 1 (id=8377): r0 = socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20342, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000200)='/dev/tty53\x00', 0x200, 0x0) select$auto(0x7, 0x0, 0x0, 0x0, 0x0) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp1\x00', 0x60282, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, 0x0) write$auto(r1, 0x0, 0x100082) sendmmsg$auto(r0, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) 3.511426017s ago: executing program 2 (id=8378): openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0x2, 0x1, 0x84) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x0, @rand_addr=0xfffffffe}, 0x55) shutdown$auto(0x200000003, 0x2) mmap$auto(0x0, 0x400008, 0xef, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x6, 0x0) read$auto(0x3, 0x0, 0x80) close_range$auto(0x2, 0x8000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) lsm_list_modules$auto(0x0, 0x0, 0x0) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (async) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket(0x2, 0x80002, 0x73) (async) socket(0x2, 0x1, 0x84) (async) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x0, @rand_addr=0xfffffffe}, 0x55) (async) shutdown$auto(0x200000003, 0x2) (async) mmap$auto(0x0, 0x400008, 0xef, 0x9b72, 0x2, 0x8000) (async) io_uring_setup$auto(0x6, 0x0) (async) read$auto(0x3, 0x0, 0x80) (async) close_range$auto(0x2, 0x8000, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) 2.954780111s ago: executing program 0 (id=8379): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x13, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) socket(0x15, 0x5, 0x0) openat$auto_vga_arb_device_fops_vgaarb(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000200)='/dev/tty53\x00', 0x200, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D0\x00', 0x109302, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x0, 0x0) select$auto(0x7, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x0, 0x1, 0x2, 0x3, 0x95f4da0a, 0xefffffffffffffff, 0x3, 0x62, 0x80000001, 0x10000000000004, 0x6d40, 0x1, 0x2, 0xfffffffffffffffe]}, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2b, 0x1, 0x1) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f0000000140)={[0x1ff, 0x7, 0xc45d, 0x80, 0x6, 0x3, 0x2, 0x3, 0x3, 0x62, 0x80000022, 0x7, 0x6d3e, 0x2000000004000009, 0x2, 0x6]}, 0x0) socket(0xa, 0x5, 0x94) mmap$auto(0xf87f, 0x400108, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto_USBDEVFS_DISCSIGNAL(0xffffffffffffffff, 0x8010550e, &(0x7f0000000040)={0x6, 0x0}) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0x2, 0x1, 0x84) socketpair$auto(0x0, 0xd496, 0xfffffffc, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) 2.384453822s ago: executing program 2 (id=8380): r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x400008, 0x200, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0) r1 = openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/clear_refs\x00', 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB=']'], 0x1ac}}, 0x40000) recvmmsg$auto(r2, &(0x7f0000000140)={{0x0, 0x1, &(0x7f0000000080)={0x0, 0x400}, 0x5, 0x0, 0x200002, 0x8}, 0x803}, 0xfffffff9, 0x10, 0x0) write$auto_proc_clear_refs_operations_internal(r1, 0x0, 0xffffff4b) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) select$auto(0xffffffff, &(0x7f0000000040)={[0x54, 0x10, 0x800000c8be, 0x8, 0x273a, 0x0, 0xb, 0x5, 0x5, 0x330, 0x7, 0x200cf, 0x45, 0xc, 0x5, 0xb98]}, 0x0, 0x0, 0x0) sendmsg$auto_TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB='J\x00\x00\x00', @ANYRES16, @ANYBLOB="010025bd7000fcdbdf25020000002c00018028003c8008001b"], 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x44) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) mq_notify$auto(0x4, &(0x7f0000000040)={@sival_ptr=0x0, @inferred, 0x1, @_tid}) sendmsg$auto_NL802154_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0}, 0x80) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0xff, 0x0, 0x1, 0x3}, 0xed7138c}, 0xb, 0x0) clone$auto(0x9001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6) syz_clone3(&(0x7f0000000080)={0x123060000, 0x0, 0x0, 0x0, {0x14}, 0x0, 0x0, 0x0, 0x0}, 0x58) write$auto(0x3, 0x0, 0x5c8) 2.25357091s ago: executing program 1 (id=8381): set_mempolicy$auto(0x2, &(0x7f0000000080)=0x7e, 0x4) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) mmap$auto(0xfffffffffffffffc, 0x400008, 0x8, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) futex$auto(&(0x7f0000000000)=0x5, 0x8, 0x8, 0x0, 0x0, 0x7ff) getpeername$auto(0xffffffffffffffff, &(0x7f00000000c0)=@generic={0xf, "d6af80218b35db41bf7508315c4d"}, &(0x7f0000000140)=0xdc92) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2) mmap$auto(0x0, 0x10, 0xde, 0x9b7f, 0x2, 0x7fff) mlockall$auto(0x7) write$auto_sg_fops_sg(0xffffffffffffffff, &(0x7f0000000000)="92b950ae6e5742a21461bf8c2cd2899e154adb6eac4c585aab943301a10a409d5af515b1f2b5802ddcab27975026ccfdab32ada2b8fc7660d6a53b3ec6df8095a8e2ee51c3136f76a65732ad87243441", 0x50) migrate_pages$auto(0x0, 0x3, &(0x7f0000000100)=0x5, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x787b, 0x7000000) epoll_ctl$auto(0x5, 0x1, r0, 0x0) sched_get_priority_min$auto(0x40) openat$auto_proc_projid_map_operations_base(0xffffffffffffff9c, 0x0, 0x981082, 0x0) r1 = socket(0x6, 0x2, 0x80000000) sendmsg$auto_OVS_DP_CMD_DEL(r1, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040c04}, 0x808c5) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x8}, 0x2, 0x0) 1.411823954s ago: executing program 0 (id=8382): r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x400008, 0x200, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0) r1 = openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/clear_refs\x00', 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB=']'], 0x1ac}}, 0x40000) recvmmsg$auto(r2, &(0x7f0000000140)={{0x0, 0x1, &(0x7f0000000080)={0x0, 0x400}, 0x5, 0x0, 0x200002, 0x8}, 0x803}, 0xfffffff9, 0x10, 0x0) write$auto_proc_clear_refs_operations_internal(r1, 0x0, 0xffffff4b) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) select$auto(0xffffffff, &(0x7f0000000040)={[0x54, 0x10, 0x800000c8be, 0x8, 0x273a, 0x0, 0xb, 0x5, 0x5, 0x330, 0x7, 0x200cf, 0x45, 0xc, 0x5, 0xb98]}, 0x0, 0x0, 0x0) sendmsg$auto_TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB='J\x00\x00\x00', @ANYRES16, @ANYBLOB="010025bd7000fcdbdf25020000002c00018028003c8008001b"], 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x44) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) mq_notify$auto(0x4, &(0x7f0000000040)={@sival_ptr=0x0, @inferred, 0x1, @_tid}) sendmsg$auto_NL802154_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0}, 0x80) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0xff, 0x0, 0x1, 0x3}, 0xed7138c}, 0xb, 0x0) clone$auto(0x9001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6) syz_clone3(&(0x7f0000000080)={0x123060000, 0x0, 0x0, 0x0, {0x14}, 0x0, 0x0, 0x0, 0x0}, 0x58) write$auto(0x3, 0x0, 0x5c8) 1.210011525s ago: executing program 2 (id=8383): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) pread64$auto(r1, 0x0, 0x0, 0x70b1) syz_genetlink_get_family_id$auto_netdev(0x0, r0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r4 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82400, 0x0) unshare$auto(0x45e) ioctl$auto_SG_SCSI_RESET(r4, 0x2284, &(0x7f00000001c0)) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000780)='/proc/self/net/rpc/auth.rpcsec.init/channel\x00', 0x441, 0x0) sendmmsg$auto(r3, &(0x7f0000000280)={{&(0x7f00000000c0)="1ae5ddcafbe64cd628216005e5db934b917e84bb86758426023d820e886d12af298b2c51cc8745ecbb51b85524fc1a5215a5836ae7959b9bcbfae6d3bfdcf237c9254fd8868ed369b70e3b086222817a498659ed57a235a80c536381c9", 0xa, &(0x7f0000000200)={0x0, 0x400}, 0x5, &(0x7f0000000240)="be0ac122f6f61c9a0e4a21dccc05a67e318b0ace3fd1406f119d5f722f7d1290af3620af80f8917759c597f0c936", 0x6252a776, 0x80}, 0xf}, 0x4f, 0x200) write$auto(r5, &(0x7f0000000080)='\\x7fF&\xb5\x8d\xddEl/trac_notrace_pid\x00\x00\x00\x00', 0x7) r6 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) ioctl$auto_PAGEMAP_SCAN(r6, 0xc0606610, &(0x7f000000c380)={0x40000000060, 0x0, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x4, 0x5, 0xc00, 0x2c, 0x8, 0x200000000000009, 0x2}) epoll_create$auto(0x4) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) open(&(0x7f0000000800)='./file0\x00', 0x2a241, 0x154) gettid() close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x40, 0x0) gettid() 1.076528173s ago: executing program 3 (id=8384): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) socket(0x15, 0x5, 0x0) openat$auto_vga_arb_device_fops_vgaarb(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000200)='/dev/tty53\x00', 0x200, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D0\x00', 0x109302, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x0, 0x0) select$auto(0x7, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x0, 0x1, 0x2, 0x3, 0x95f4da0a, 0xefffffffffffffff, 0x3, 0x62, 0x80000001, 0x10000000000004, 0x6d40, 0x1, 0x2, 0xfffffffffffffffe]}, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2b, 0x1, 0x1) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f0000000140)={[0x1ff, 0x7, 0xc45d, 0x80, 0x6, 0x3, 0x2, 0x3, 0x3, 0x62, 0x80000022, 0x7, 0x6d3e, 0x2000000004000009, 0x2, 0x6]}, 0x0) socket(0xa, 0x5, 0x94) mmap$auto(0xf87f, 0x400108, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto_USBDEVFS_DISCSIGNAL(0xffffffffffffffff, 0x8010550e, &(0x7f0000000040)={0x6, 0x0}) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) statx$auto(0xffffffffffffffff, 0x0, 0x4, 0x2, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mlock$auto(0x102, 0x80006) mlockall$auto(0x800000000000005) madvise$auto(0x0, 0x200007, 0x19) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0x2, 0x1, 0x84) socketpair$auto(0x0, 0xd496, 0xfffffffc, 0x0) 685.974644ms ago: executing program 1 (id=8385): mmap$auto(0x0, 0x2020009, 0x8000000003, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x10, 0x0, 0x9) (async) setsockopt$auto(0x3, 0x1, 0x10, 0x0, 0x9) io_uring_setup$auto(0x1, 0x0) connect$auto(0x3, 0x0, 0x55) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dsp\x00', 0x0, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x2}, 0x400) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000300)='/proc/asound/card0/pcm0c/sub0/status\x00', 0x100, 0x0) (async) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000300)='/proc/asound/card0/pcm0c/sub0/status\x00', 0x100, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2) (async) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2) prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0) (async) prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0) prctl$auto(0x43, 0x0, 0x0, 0x0, 0x0) fanotify_init$auto(0x602, 0x1) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14f602, 0x0) (async) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14f602, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) (async) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) write$auto(0x3, 0x0, 0xfffffdef) (async) write$auto(0x3, 0x0, 0xfffffdef) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffe2, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="906f1995", @ANYRES16=0x0, @ANYBLOB="10002cbd0000fddb79a71c"], 0x14}, 0x1, 0x0, 0x0, 0x20048000}, 0x10004010) (async) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffe2, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="906f1995", @ANYRES16=0x0, @ANYBLOB="10002cbd0000fddb79a71c"], 0x14}, 0x1, 0x0, 0x0, 0x20048000}, 0x10004010) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a0027"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="19"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x3, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/afs/addr_prefs\x00', 0x102, 0x0) writev$auto(r1, &(0x7f0000000080)={&(0x7f0000000040), 0x6}, 0x3) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_TIPC_NL_NODE_GET(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x94, 0x0, 0x800, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_UNSPEC={0x6b, 0x0, "6af118bfb9ba5ab44192f46e0b098553191fc3fb410133a419b119ad870e23353db1cfb24ae8ed173d0086f385b0893735f654108ebc9b1361e8b86f634f7080bd8553ea209590f5c23eaee425761540c89d431e1fe6d7289e9551475a843fd460ee7b76b8a2d5"}, @TIPC_NLA_LINK={0x14, 0x4, 0x0, 0x1, [@nested={0x10, 0xdb, 0x0, 0x1, [@typed={0xc, 0x53, 0x0, 0x0, @u64=0x4}]}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x404c0d5}, 0xcfc72cceafd338cc) 136.82799ms ago: executing program 0 (id=8386): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu1/online\x00', 0x62, 0x0) write$auto(r1, &(0x7f00000002c0)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\b};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xde\f/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7\x00\x85Z\x06?\x12\x98\x0f)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1;\xe4pd$\xd7\x1b\v\x82\r\f\xd0Hq\xd9\r\x88#\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8HR+\a\xb7R\t\n+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb\xc8^\xa4\xe2\x05\x91|\x123\xc3:\xfd\xee\x04a\xc8\x12\xce\xa2\x12\xcb\x8c\x87f\xebGQ\xe9\x96\xd5E\x13a\xb7\x057<&\xe0\x94\xa7\xfb\x9d;\xfa\xb1\x1b4a,\'\xb2Ym\xe1:\xbf\x8cs\x06\xa3u\x8d!\n\x80-\x9a\xbb;\xf4\xf3\xe1\x97\xfc8\xff\xa7\\\x8b\xf9\x95\x10$\xef\x1a #b\xfb\xfe\xe9\x06fK0\xdd\x84T,\xfa\xb5\x00\x83d\xbba\xd7\n\x92\x90|l\xdfAN\x9d\xcb\x96\xc7\xe8\xe6\x8bC\xeb\xc7EZ\xc8\x1a\x81nf\tZ-sZ\x13n\xec\xa9\xbf\xd0$\xb9\xd8\x00'/507, 0x1098c7) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, 0x0, 0x20880, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/platform/vhci_hcd.0/usb9/9-0:1.0/usb9-port4/power/pm_qos_no_power_off\x00', 0x80880, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000001100)=""/4105, 0x1009) r3 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000001cc0), 0x101440, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f00000000c0)={{0x0, 0x2, 0x200800, 0xffffffff, 0xfffffffb}, "0dd7fd004929347eeeccdf0732f77b1f6de0d6d51768a257a97ca5e9ca6310ea"}) ioctl$auto_SNDRV_TIMER_IOCTL_PAUSE(r3, 0x54a3, 0x0) close_range$auto(r3, 0x8, 0x2) r4 = openat$auto_dfs_global_fops_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/ubifs/chk_fs\x00', 0x400, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vhci_hcd.10/usb30/ep_00/bmAttributes\x00', 0x12b5c0, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ram3\x00', 0x1035c0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/machinecheck/machinecheck1/cmci_disabled\x00', 0x20102, 0x0) r5 = open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) fallocate$auto(r5, 0xa, 0xd, 0xcbd5f) pipe2$auto(0x0, 0x80) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0xffffffffffffffff, r4, 0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x2, 0x0) r6 = socket(0xa, 0x3, 0xff) connect$auto(r6, &(0x7f00000018c0)=@generic={0xa}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) 0s ago: executing program 2 (id=8387): mmap$auto(0x0, 0x9, 0xdf, 0x1000000eb1, 0x401, 0x8000) mmap$auto(0x0, 0xfffffffffffffff8, 0x5, 0xeb1, 0x401, 0x1000000) capget$auto(0x0, 0xfffffffffffffffe) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x4007, 0xb}) fanotify_init$auto(0x10001, 0x5) r0 = socket(0x23, 0x80805, 0x0) poll$auto(&(0x7f0000000040)={r0, 0x7, 0x8}, 0x80, 0x400400) setsockopt$auto(r1, 0x113, 0x1, 0x0, 0x81) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x2, 0x3, 0x100) sysfs$auto(0x2, 0x4c, 0x0) fsopen$auto(0x0, 0x1) socket(0x2, 0x5, 0x0) r2 = socket(0x10, 0x2, 0x0) setsockopt$auto(r2, 0x104000000000010e, 0x1, 0x0, 0x16) bind$auto(0x3, &(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0x24}, 0x68) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio1/protocol\x00', 0x40880, 0x0) r3 = socket(0x18, 0x80000, 0x0) connect$auto(r3, 0x0, 0x1e) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/platform/snd_aloop.0/sound/card1/pcmC1D1p/pcm_class\x00', 0x2000, 0x0) read$auto(r4, 0x0, 0x20) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r5, &(0x7f0000000200)={0x0, 0x7}, 0x3) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x100000000, 0x2020007, 0x2000000000000003, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000b80)='/proc/sys/kernel/kptr_restrict\x00', 0x202, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) kernel console output (not intermixed with test programs): 1f8e969 [ 3071.215602][T13195] RDX: 0000000000000060 RSI: 0000200000002f40 RDI: 0000000000000003 [ 3071.215623][T13195] RBP: 00007f5dd2d5f090 R08: 0000000000000000 R09: 0000000000000000 [ 3071.215644][T13195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3071.215664][T13195] R13: 0000000000000000 R14: 00007f5dd21b6080 R15: 00007ffd0225f9c8 [ 3071.215707][T13195] [ 3071.424175][ C0] vkms_vblank_simulate: vblank timer overrun [ 3077.218758][T13267] FAULT_INJECTION: forcing a failure. [ 3077.218758][T13267] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3077.244322][T13267] CPU: 1 UID: 0 PID: 13267 Comm: syz.1.7446 Tainted: G U 6.15.0-syzkaller-10402-g4cb6c8af8591 #0 PREEMPT(full) [ 3077.244377][T13267] Tainted: [U]=USER [ 3077.244395][T13267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 3077.244414][T13267] Call Trace: [ 3077.244426][T13267] [ 3077.244439][T13267] dump_stack_lvl+0x16c/0x1f0 [ 3077.244482][T13267] should_fail_ex+0x512/0x640 [ 3077.244535][T13267] _copy_from_user+0x2e/0xd0 [ 3077.244586][T13267] snd_rawmidi_kernel_write1+0x50a/0x8a0 [ 3077.244657][T13267] snd_rawmidi_write+0x26e/0xc10 [ 3077.244700][T13267] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 3077.244736][T13267] ? __pfx_default_wake_function+0x10/0x10 [ 3077.244784][T13267] ? bpf_lsm_file_permission+0x9/0x10 [ 3077.244831][T13267] ? security_file_permission+0x71/0x210 [ 3077.244872][T13267] ? rw_verify_area+0xcf/0x680 [ 3077.244926][T13267] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 3077.244958][T13267] vfs_write+0x2a0/0x1150 [ 3077.245001][T13267] ? __pfx_vfs_write+0x10/0x10 [ 3077.245032][T13267] ? find_held_lock+0x2b/0x80 [ 3077.245077][T13267] ? __fget_files+0x204/0x3c0 [ 3077.245116][T13267] ? __fget_files+0x20e/0x3c0 [ 3077.245161][T13267] ksys_write+0x1f8/0x250 [ 3077.245194][T13267] ? __pfx_ksys_write+0x10/0x10 [ 3077.245242][T13267] do_syscall_64+0xcd/0x490 [ 3077.245285][T13267] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3077.245318][T13267] RIP: 0033:0x7f5dd1f8e969 [ 3077.245344][T13267] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3077.245377][T13267] RSP: 002b:00007f5dd2d80038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3077.245414][T13267] RAX: ffffffffffffffda RBX: 00007f5dd21b5fa0 RCX: 00007f5dd1f8e969 [ 3077.245436][T13267] RDX: 000000000000a3db RSI: 0000200000000400 RDI: 0000000000000004 [ 3077.245457][T13267] RBP: 00007f5dd2d80090 R08: 0000000000000000 R09: 0000000000000000 [ 3077.245477][T13267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3077.245497][T13267] R13: 0000000000000000 R14: 00007f5dd21b5fa0 R15: 00007ffd0225f9c8 [ 3077.245537][T13267] [ 3079.300622][T13294] FAULT_INJECTION: forcing a failure. [ 3079.300622][T13294] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3079.360604][T13294] CPU: 0 UID: 0 PID: 13294 Comm: syz.0.7453 Tainted: G U 6.15.0-syzkaller-10402-g4cb6c8af8591 #0 PREEMPT(full) [ 3079.360644][T13294] Tainted: [U]=USER [ 3079.360651][T13294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 3079.360666][T13294] Call Trace: [ 3079.360674][T13294] [ 3079.360683][T13294] dump_stack_lvl+0x16c/0x1f0 [ 3079.360715][T13294] should_fail_ex+0x512/0x640 [ 3079.360755][T13294] core_sys_select+0x4c5/0xc10 [ 3079.360786][T13294] ? __pfx_core_sys_select+0x10/0x10 [ 3079.360815][T13294] ? proc_fail_nth_write+0x9f/0x250 [ 3079.360878][T13294] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 3079.360915][T13294] kern_select+0x15d/0x1e0 [ 3079.360938][T13294] ? __pfx_kern_select+0x10/0x10 [ 3079.360966][T13294] ? __pfx_ksys_write+0x10/0x10 [ 3079.360996][T13294] __x64_sys_select+0xbd/0x160 [ 3079.361018][T13294] ? do_syscall_64+0x91/0x490 [ 3079.361045][T13294] ? lockdep_hardirqs_on+0x7c/0x110 [ 3079.361072][T13294] do_syscall_64+0xcd/0x490 [ 3079.361102][T13294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3079.361127][T13294] RIP: 0033:0x7f11e9d8e969 [ 3079.361146][T13294] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3079.361170][T13294] RSP: 002b:00007f11eab32038 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 3079.361193][T13294] RAX: ffffffffffffffda RBX: 00007f11e9fb6080 RCX: 00007f11e9d8e969 [ 3079.361209][T13294] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000e [ 3079.361224][T13294] RBP: 00007f11eab32090 R08: 0000000000000000 R09: 0000000000000000 [ 3079.361239][T13294] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 3079.361254][T13294] R13: 0000000000000001 R14: 00007f11e9fb6080 R15: 00007ffc154bfdc8 [ 3079.361283][T13294] [ 3079.541130][ C0] vkms_vblank_simulate: vblank timer overrun [ 3080.021218][T13318] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input103 [ 3080.636196][T13319] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input104 [ 3080.960230][T13328] blktrace: Concurrent blktraces are not allowed on ram7 [ 3081.541489][T13337] sctp: Changing rto_alpha or rto_beta may lead to suboptimal rtt/srtt estimations! [ 3085.258672][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 3085.265209][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 3085.385798][T13395] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input105 [ 3087.174245][T13411] could not allocate digest TFM handle [ 3087.291319][T13396] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input106 [ 3089.237080][T13427] block nbd7: not configured, cannot reconfigure [ 3092.296067][T13450] FAULT_INJECTION: forcing a failure. [ 3092.296067][T13450] name failslab, interval 1, probability 0, space 0, times 0 [ 3092.309048][T13450] CPU: 0 UID: 0 PID: 13450 Comm: syz.1.7480 Tainted: G U 6.15.0-syzkaller-10402-g4cb6c8af8591 #0 PREEMPT(full) [ 3092.309101][T13450] Tainted: [U]=USER [ 3092.309114][T13450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 3092.309135][T13450] Call Trace: [ 3092.309147][T13450] [ 3092.309161][T13450] dump_stack_lvl+0x16c/0x1f0 [ 3092.309209][T13450] should_fail_ex+0x512/0x640 [ 3092.309256][T13450] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 3092.309297][T13450] should_failslab+0xc2/0x120 [ 3092.309349][T13450] __kmalloc_cache_noprof+0x6a/0x3e0 [ 3092.309387][T13450] ? copy_cgroup_ns+0x207/0x700 [ 3092.309442][T13450] copy_cgroup_ns+0x207/0x700 [ 3092.309496][T13450] create_new_namespaces+0x34a/0xa90 [ 3092.309558][T13450] copy_namespaces+0x468/0x560 [ 3092.309612][T13450] copy_process+0x2a55/0x9170 [ 3092.309675][T13450] ? __pfx_copy_process+0x10/0x10 [ 3092.309707][T13450] ? __pfx___futex_wait+0x10/0x10 [ 3092.309787][T13450] kernel_clone+0xfc/0x960 [ 3092.309824][T13450] ? __pfx_kernel_clone+0x10/0x10 [ 3092.309884][T13450] __do_sys_clone+0xce/0x120 [ 3092.309918][T13450] ? __pfx___do_sys_clone+0x10/0x10 [ 3092.309973][T13450] ? xfd_validate_state+0x61/0x180 [ 3092.310009][T13450] ? __pfx_do_writev+0x10/0x10 [ 3092.310055][T13450] do_syscall_64+0xcd/0x490 [ 3092.310103][T13450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3092.310140][T13450] RIP: 0033:0x7f5dd1f8e969 [ 3092.310169][T13450] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3092.310204][T13450] RSP: 002b:00007f5dd2d3dfe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 3092.310238][T13450] RAX: ffffffffffffffda RBX: 00007f5dd21b6160 RCX: 00007f5dd1f8e969 [ 3092.310262][T13450] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000002360411 [ 3092.310285][T13450] RBP: 00007f5dd2010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 3092.310308][T13450] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 3092.310338][T13450] R13: 0000000000000000 R14: 00007f5dd21b6160 R15: 00007ffd0225f9c8 [ 3092.310385][T13450] [ 3094.924946][T13475] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7485'. [ 3099.482589][T13558] Setting dangerous option i915.mitigations - tainting kernel [ 3100.024656][T13567] FAULT_INJECTION: forcing a failure. [ 3100.024656][T13567] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3100.072311][T13567] CPU: 1 UID: 0 PID: 13567 Comm: syz.2.7503 Tainted: G U 6.15.0-syzkaller-10402-g4cb6c8af8591 #0 PREEMPT(full) [ 3100.072365][T13567] Tainted: [U]=USER [ 3100.072377][T13567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 3100.072404][T13567] Call Trace: [ 3100.072415][T13567] [ 3100.072429][T13567] dump_stack_lvl+0x16c/0x1f0 [ 3100.072474][T13567] should_fail_ex+0x512/0x640 [ 3100.072528][T13567] _copy_to_iter+0x29f/0x16f0 [ 3100.072582][T13567] ? __lock_acquire+0xb8a/0x1c90 [ 3100.072616][T13567] ? trace_event_raw_event_rxrpc_resend+0x330/0x350 [ 3100.072670][T13567] ? __pfx__copy_to_iter+0x10/0x10 [ 3100.072721][T13567] ? __lock_acquire+0xb8a/0x1c90 [ 3100.072762][T13567] ? find_held_lock+0x2b/0x80 [ 3100.072812][T13567] simple_copy_to_iter+0x46/0x90 [ 3100.072845][T13567] __skb_datagram_iter+0x5af/0x900 [ 3100.072876][T13567] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 3100.072943][T13567] skb_copy_datagram_iter+0x40/0x50 [ 3100.072978][T13567] tcp_recvmsg_locked+0x1b31/0x2880 [ 3100.073037][T13567] ? __pfx_tcp_recvmsg_locked+0x10/0x10 [ 3100.073084][T13567] ? __local_bh_enable_ip+0xa4/0x120 [ 3100.073141][T13567] tcp_recvmsg+0x12f/0x680 [ 3100.073180][T13567] ? __pfx_tcp_recvmsg+0x10/0x10 [ 3100.073229][T13567] ? aa_sk_perm+0x2f4/0xb10 [ 3100.073269][T13567] ? __pfx_tcp_recvmsg+0x10/0x10 [ 3100.073308][T13567] inet_recvmsg+0x12a/0x6a0 [ 3100.073343][T13567] ? __fget_files+0x204/0x3c0 [ 3100.073377][T13567] ? __pfx_inet_recvmsg+0x10/0x10 [ 3100.073433][T13567] sock_recvmsg+0x1b2/0x250 [ 3100.073485][T13567] __sys_recvfrom+0x203/0x310 [ 3100.073522][T13567] ? 0xffffffff81000000 [ 3100.073548][T13567] ? __pfx___sys_recvfrom+0x10/0x10 [ 3100.073623][T13567] ? ksys_write+0x1ac/0x250 [ 3100.073658][T13567] ? __pfx_ksys_write+0x10/0x10 [ 3100.073698][T13567] __x64_sys_recvfrom+0xe0/0x1c0 [ 3100.073733][T13567] ? do_syscall_64+0x91/0x490 [ 3100.073773][T13567] ? lockdep_hardirqs_on+0x7c/0x110 [ 3100.073809][T13567] do_syscall_64+0xcd/0x490 [ 3100.073853][T13567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3100.073886][T13567] RIP: 0033:0x7fb13978e969 [ 3100.073911][T13567] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3100.073946][T13567] RSP: 002b:00007fb13a63f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 3100.073977][T13567] RAX: ffffffffffffffda RBX: 00007fb1399b6080 RCX: 00007fb13978e969 [ 3100.074000][T13567] RDX: 000000800000000e RSI: 0000000000000000 RDI: 0000000000000003 [ 3100.074020][T13567] RBP: 00007fb13a63f090 R08: 0000000000000000 R09: ffffffff81000000 [ 3100.074043][T13567] R10: 0000000000000100 R11: 0000000000000246 R12: 0000000000000001 [ 3100.074063][T13567] R13: 0000000000000001 R14: 00007fb1399b6080 R15: 00007ffcde1e2108 [ 3100.074094][T13567] ? 0xffffffff81000000 [ 3100.074127][T13567] [ 3100.350503][ C1] vkms_vblank_simulate: vblank timer overrun [ 3100.503937][T13564] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7504'. [ 3101.402457][T13588] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 3102.528213][T13606] Setting dangerous option i915.mitigations - tainting kernel [ 3103.672194][T13624] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input107 [ 3104.363474][T13625] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input108 [ 3108.080373][T13676] openvswitch: netlink: IPv4 tunnel dst address is zero [ 3108.248392][T13674] could not allocate digest TFM handle [ 3108.674510][T13693] FAULT_INJECTION: forcing a failure. [ 3108.674510][T13693] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3108.701832][T13693] CPU: 0 UID: 0 PID: 13693 Comm: syz.3.7529 Tainted: G U 6.15.0-syzkaller-10402-g4cb6c8af8591 #0 PREEMPT(full) [ 3108.701888][T13693] Tainted: [U]=USER [ 3108.701896][T13693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 3108.701911][T13693] Call Trace: [ 3108.701920][T13693] [ 3108.701930][T13693] dump_stack_lvl+0x16c/0x1f0 [ 3108.701962][T13693] should_fail_ex+0x512/0x640 [ 3108.701999][T13693] _copy_from_user+0x2e/0xd0 [ 3108.702035][T13693] snd_rawmidi_kernel_write1+0x50a/0x8a0 [ 3108.702088][T13693] snd_rawmidi_write+0x26e/0xc10 [ 3108.702118][T13693] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 3108.702142][T13693] ? __pfx_default_wake_function+0x10/0x10 [ 3108.702178][T13693] ? bpf_lsm_file_permission+0x9/0x10 [ 3108.702214][T13693] ? security_file_permission+0x71/0x210 [ 3108.702244][T13693] ? rw_verify_area+0xcf/0x680 [ 3108.702283][T13693] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 3108.702305][T13693] vfs_write+0x2a0/0x1150 [ 3108.702336][T13693] ? __pfx_vfs_write+0x10/0x10 [ 3108.702359][T13693] ? find_held_lock+0x2b/0x80 [ 3108.702391][T13693] ? __fget_files+0x204/0x3c0 [ 3108.702419][T13693] ? __fget_files+0x20e/0x3c0 [ 3108.702450][T13693] ksys_write+0x1f8/0x250 [ 3108.702474][T13693] ? __pfx_ksys_write+0x10/0x10 [ 3108.702508][T13693] do_syscall_64+0xcd/0x490 [ 3108.702539][T13693] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3108.702564][T13693] RIP: 0033:0x7fe52bb8e969 [ 3108.702582][T13693] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3108.702606][T13693] RSP: 002b:00007fe52ca27038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3108.702629][T13693] RAX: ffffffffffffffda RBX: 00007fe52bdb6160 RCX: 00007fe52bb8e969 [ 3108.702647][T13693] RDX: 000000100000a3d9 RSI: 00002000000000c0 RDI: 0000000000000004 [ 3108.702662][T13693] RBP: 00007fe52ca27090 R08: 0000000000000000 R09: 0000000000000000 [ 3108.702677][T13693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3108.702691][T13693] R13: 0000000000000001 R14: 00007fe52bdb6160 R15: 00007fff702b5cb8 [ 3108.702721][T13693] [ 3110.283519][T13710] FAULT_INJECTION: forcing a failure. [ 3110.283519][T13710] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3110.371201][T13710] CPU: 0 UID: 0 PID: 13710 Comm: syz.3.7534 Tainted: G U 6.15.0-syzkaller-10402-g4cb6c8af8591 #0 PREEMPT(full) [ 3110.371243][T13710] Tainted: [U]=USER [ 3110.371251][T13710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 3110.371266][T13710] Call Trace: [ 3110.371274][T13710] [ 3110.371284][T13710] dump_stack_lvl+0x16c/0x1f0 [ 3110.371316][T13710] should_fail_ex+0x512/0x640 [ 3110.371355][T13710] _copy_to_user+0x32/0xd0 [ 3110.371401][T13710] simple_read_from_buffer+0xcb/0x170 [ 3110.371443][T13710] proc_fail_nth_read+0x197/0x270 [ 3110.371481][T13710] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 3110.371521][T13710] ? rw_verify_area+0xcf/0x680 [ 3110.371558][T13710] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 3110.371595][T13710] vfs_read+0x1e1/0xc60 [ 3110.371624][T13710] ? __pfx___mutex_lock+0x10/0x10 [ 3110.371655][T13710] ? __pfx_vfs_read+0x10/0x10 [ 3110.371687][T13710] ? __fget_files+0x20e/0x3c0 [ 3110.371720][T13710] ksys_read+0x12a/0x250 [ 3110.371744][T13710] ? __pfx_ksys_read+0x10/0x10 [ 3110.371777][T13710] do_syscall_64+0xcd/0x490 [ 3110.371808][T13710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3110.371832][T13710] RIP: 0033:0x7fe52bb8d37c [ 3110.371851][T13710] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 3110.371875][T13710] RSP: 002b:00007fe52ca69030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3110.371898][T13710] RAX: ffffffffffffffda RBX: 00007fe52bdb5fa0 RCX: 00007fe52bb8d37c [ 3110.371914][T13710] RDX: 000000000000000f RSI: 00007fe52ca690a0 RDI: 0000000000000004 [ 3110.371929][T13710] RBP: 00007fe52ca69090 R08: 0000000000000000 R09: 0000000000000000 [ 3110.371944][T13710] R10: 000000000000ffff R11: 0000000000000246 R12: 0000000000000001 [ 3110.371959][T13710] R13: 0000000000000000 R14: 00007fe52bdb5fa0 R15: 00007fff702b5cb8 [ 3110.371988][T13710] [ 3113.433109][T13752] openvswitch: netlink: IPv4 tunnel dst address is zero [ 3113.589502][T13748] could not allocate digest TFM handle [ 3125.365580][T13902] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input109 [ 3125.535739][T13899] FAULT_INJECTION: forcing a failure. [ 3125.535739][T13899] name failslab, interval 1, probability 0, space 0, times 0 [ 3125.581854][T13899] CPU: 0 UID: 0 PID: 13899 Comm: syz.0.7573 Tainted: G U 6.15.0-syzkaller-10402-g4cb6c8af8591 #0 PREEMPT(full) [ 3125.581896][T13899] Tainted: [U]=USER [ 3125.581905][T13899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 3125.581920][T13899] Call Trace: [ 3125.581929][T13899] [ 3125.581939][T13899] dump_stack_lvl+0x16c/0x1f0 [ 3125.581972][T13899] should_fail_ex+0x512/0x640 [ 3125.582012][T13899] should_failslab+0xc2/0x120 [ 3125.582062][T13899] __kmalloc_cache_noprof+0x6a/0x3e0 [ 3125.582100][T13899] ? sctp_add_bind_addr+0xae/0x3f0 [ 3125.582135][T13899] sctp_add_bind_addr+0xae/0x3f0 [ 3125.582166][T13899] sctp_copy_local_addr_list+0x39d/0x5a0 [ 3125.582212][T13899] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 3125.582251][T13899] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 3125.582292][T13899] ? sctp_bind_addr_copy+0x331/0x530 [ 3125.582321][T13899] sctp_bind_addr_copy+0x331/0x530 [ 3125.582362][T13899] sctp_connect_new_asoc+0x1d7/0x790 [ 3125.582405][T13899] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 3125.582451][T13899] ? sctp_get_af_specific+0x62/0x70 [ 3125.582483][T13899] ? sctp_sockaddr_af+0x2a3/0x340 [ 3125.582517][T13899] __sctp_connect+0x3f3/0xc60 [ 3125.582562][T13899] ? __pfx___sctp_connect+0x10/0x10 [ 3125.582601][T13899] ? __might_fault+0x13b/0x190 [ 3125.582639][T13899] __sctp_setsockopt_connectx+0xfc/0x170 [ 3125.582682][T13899] sctp_getsockopt+0x29d6/0x6b10 [ 3125.582706][T13899] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 3125.582737][T13899] ? __pfx_sctp_getsockopt+0x10/0x10 [ 3125.582760][T13899] ? __pfx___futex_wait+0x10/0x10 [ 3125.582805][T13899] ? __pfx___might_resched+0x10/0x10 [ 3125.582851][T13899] ? find_held_lock+0x2b/0x80 [ 3125.582883][T13899] ? __might_fault+0xe3/0x190 [ 3125.582909][T13899] ? __might_fault+0xe3/0x190 [ 3125.582935][T13899] ? __might_fault+0x13b/0x190 [ 3125.582969][T13899] ? sock_common_getsockopt+0x21/0xb0 [ 3125.583004][T13899] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 3125.583042][T13899] do_sock_getsockopt+0x3fc/0x800 [ 3125.583083][T13899] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 3125.583121][T13899] ? fd_install+0x225/0x750 [ 3125.583150][T13899] ? __x64_sys_futex+0x1e0/0x4c0 [ 3125.583170][T13899] ? __x64_sys_futex+0x1e9/0x4c0 [ 3125.583196][T13899] __sys_getsockopt+0x123/0x1b0 [ 3125.583231][T13899] __x64_sys_getsockopt+0xbd/0x160 [ 3125.583258][T13899] ? do_syscall_64+0x91/0x490 [ 3125.583287][T13899] ? lockdep_hardirqs_on+0x7c/0x110 [ 3125.583314][T13899] do_syscall_64+0xcd/0x490 [ 3125.583355][T13899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3125.583381][T13899] RIP: 0033:0x7f11e9d8e969 [ 3125.583402][T13899] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3125.583426][T13899] RSP: 002b:00007f11eab53038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 3125.583450][T13899] RAX: ffffffffffffffda RBX: 00007f11e9fb5fa0 RCX: 00007f11e9d8e969 [ 3125.583466][T13899] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000003 [ 3125.583481][T13899] RBP: 00007f11e9e10ab1 R08: 0000200000000000 R09: 0000000000000000 [ 3125.583497][T13899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3125.583512][T13899] R13: 0000000000000000 R14: 00007f11e9fb5fa0 R15: 00007ffc154bfdc8 [ 3125.583544][T13899] [ 3126.440316][T13903] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input110 [ 3127.002240][T13921] device-mapper: ioctl: ioctl interface mismatch: kernel(4.49.0), user(0.0.0), cmd(5) [ 3128.701168][T13945] FAULT_INJECTION: forcing a failure. [ 3128.701168][T13945] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3128.733855][T13945] CPU: 0 UID: 0 PID: 13945 Comm: syz.3.7583 Tainted: G U 6.15.0-syzkaller-10402-g4cb6c8af8591 #0 PREEMPT(full) [ 3128.733911][T13945] Tainted: [U]=USER [ 3128.733923][T13945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 3128.733947][T13945] Call Trace: [ 3128.733959][T13945] [ 3128.733973][T13945] dump_stack_lvl+0x16c/0x1f0 [ 3128.734016][T13945] should_fail_ex+0x512/0x640 [ 3128.734071][T13945] _copy_from_user+0x2e/0xd0 [ 3128.734126][T13945] copy_msghdr_from_user+0x98/0x160 [ 3128.734168][T13945] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 3128.734230][T13945] ___sys_sendmsg+0xfe/0x1d0 [ 3128.734275][T13945] ? __pfx____sys_sendmsg+0x10/0x10 [ 3128.734312][T13945] ? __lock_acquire+0x622/0x1c90 [ 3128.734397][T13945] __sys_sendmsg+0x16d/0x220 [ 3128.734441][T13945] ? __pfx___sys_sendmsg+0x10/0x10 [ 3128.734509][T13945] do_syscall_64+0xcd/0x490 [ 3128.734553][T13945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3128.734587][T13945] RIP: 0033:0x7fe52bb8e969 [ 3128.734614][T13945] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3128.734647][T13945] RSP: 002b:00007fe52ca69038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3128.734679][T13945] RAX: ffffffffffffffda RBX: 00007fe52bdb5fa0 RCX: 00007fe52bb8e969 [ 3128.734702][T13945] RDX: 0000000000000000 RSI: 0000200000000c00 RDI: 0000000000000003 [ 3128.734723][T13945] RBP: 00007fe52ca69090 R08: 0000000000000000 R09: 0000000000000000 [ 3128.734744][T13945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3128.734764][T13945] R13: 0000000000000000 R14: 00007fe52bdb5fa0 R15: 00007fff702b5cb8 [ 3128.734808][T13945] [ 3129.157521][T13948] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input111 [ 3129.627929][T13953] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input112 [ 3132.068341][T13978] futex_wake_op: syz.0.7590 tries to shift op by 64; fix this program [ 3132.201798][T13984] openvswitch: netlink: IPv4 tunnel dst address is zero [ 3132.410186][T13981] could not allocate digest TFM handle [ 3134.680420][T14024] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7599'. [ 3134.826512][T14022] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7600'. [ 3135.280905][T14032] vivid-007: ================= START STATUS ================= [ 3135.317093][T14032] vivid-007: Generate PTS: true [ 3135.344918][T14032] vivid-007: Generate SCR: true [ 3135.352807][T14032] tpg source WxH: 320x240 (Y'CbCr) [ 3135.388174][T14037] openvswitch: netlink: IPv4 tunnel dst address is zero [ 3135.399301][T14032] tpg field: 1 [ 3135.409952][T14032] tpg crop: (0,0)/320x240 [ 3135.415533][T14032] tpg compose: (0,0)/320x240 [ 3135.423108][T14032] tpg colorspace: 8 [ 3135.427035][T14032] tpg transfer function: 0/0 [ 3135.432259][T14032] tpg Y'CbCr encoding: 0/0 [ 3135.437263][T14032] tpg quantization: 0/0 [ 3135.443548][T14032] tpg RGB range: 0/2 [ 3135.447578][T14032] vivid-007: ================== END STATUS ================== [ 3135.852682][T14034] could not allocate digest TFM handle [ 3138.792449][T14084] openvswitch: netlink: IPv4 tunnel dst address is zero [ 3138.931165][T14082] could not allocate digest TFM handle [ 3141.741395][T14117] bond0: option all_slaves_active: invalid value () [ 3141.757837][T14117] bond0: option all_slaves_active: invalid value () [ 3143.022745][T14126] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7622'. [ 3143.278490][T14138] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input113 [ 3144.013845][T14139] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input114 [ 3144.748781][T14143] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input115 [ 3145.113702][T14145] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input116 [ 3145.554851][T14158] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input117 [ 3146.002967][T14159] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input118 [ 3146.382712][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 3146.393511][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 3147.097665][T14181] openvswitch: netlink: IPv4 tunnel dst address is zero [ 3147.306699][T14177] could not allocate digest TFM handle [ 3147.468721][T14191] openvswitch: netlink: IPv4 tunnel dst address is zero [ 3147.495294][T14193] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input119 [ 3147.719132][T14185] could not allocate digest TFM handle [ 3149.106781][T14217] sd 0:0:1:0: PR command failed: 1026 [ 3149.134667][T14217] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 3149.159159][T14217] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 3149.260830][T14194] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input120 [ 3154.189398][T14263] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7644'. [ 3156.004392][T14294] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input121 [ 3156.367536][T14295] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input122 [ 3157.440430][T14303] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7649'. [ 3159.376689][T14352] FAULT_INJECTION: forcing a failure. [ 3159.376689][T14352] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3159.394623][T14352] CPU: 1 UID: 0 PID: 14352 Comm: syz.3.7658 Tainted: G U 6.15.0-syzkaller-10402-g4cb6c8af8591 #0 PREEMPT(full) [ 3159.394679][T14352] Tainted: [U]=USER [ 3159.394691][T14352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 3159.394711][T14352] Call Trace: [ 3159.394723][T14352] [ 3159.394735][T14352] dump_stack_lvl+0x16c/0x1f0 [ 3159.394780][T14352] should_fail_ex+0x512/0x640 [ 3159.394833][T14352] _copy_to_user+0x32/0xd0 [ 3159.394887][T14352] simple_read_from_buffer+0xcb/0x170 [ 3159.394945][T14352] proc_fail_nth_read+0x197/0x270 [ 3159.394997][T14352] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 3159.395053][T14352] ? rw_verify_area+0xcf/0x680 [ 3159.395113][T14352] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 3159.395164][T14352] vfs_read+0x1e1/0xc60 [ 3159.395204][T14352] ? __pfx___mutex_lock+0x10/0x10 [ 3159.395243][T14352] ? __pfx_vfs_read+0x10/0x10 [ 3159.395289][T14352] ? __fget_files+0x20e/0x3c0 [ 3159.395335][T14352] ksys_read+0x12a/0x250 [ 3159.395368][T14352] ? __pfx_ksys_read+0x10/0x10 [ 3159.395403][T14352] ? fput+0x70/0xf0 [ 3159.395452][T14352] do_syscall_64+0xcd/0x490 [ 3159.395495][T14352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3159.395528][T14352] RIP: 0033:0x7fe52bb8d37c [ 3159.395554][T14352] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 3159.395586][T14352] RSP: 002b:00007fe52ca69030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3159.395618][T14352] RAX: ffffffffffffffda RBX: 00007fe52bdb5fa0 RCX: 00007fe52bb8d37c [ 3159.395640][T14352] RDX: 000000000000000f RSI: 00007fe52ca690a0 RDI: 0000000000000004 [ 3159.395661][T14352] RBP: 00007fe52ca69090 R08: 0000000000000000 R09: 0000000000000000 [ 3159.395686][T14352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3159.395705][T14352] R13: 0000000000000000 R14: 00007fe52bdb5fa0 R15: 00007fff702b5cb8 [ 3159.395747][T14352] [ 3160.057845][T14362] zswap: compressor not available [ 3160.068401][T14364] FAULT_INJECTION: forcing a failure. [ 3160.068401][T14364] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3160.092520][T14364] CPU: 1 UID: 0 PID: 14364 Comm: syz.1.7661 Tainted: G U 6.15.0-syzkaller-10402-g4cb6c8af8591 #0 PREEMPT(full) [ 3160.092577][T14364] Tainted: [U]=USER [ 3160.092588][T14364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 3160.092609][T14364] Call Trace: [ 3160.092620][T14364] [ 3160.092632][T14364] dump_stack_lvl+0x16c/0x1f0 [ 3160.092678][T14364] should_fail_ex+0x512/0x640 [ 3160.092733][T14364] _copy_to_iter+0x29f/0x16f0 [ 3160.092788][T14364] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 3160.092855][T14364] ? __pfx__copy_to_iter+0x10/0x10 [ 3160.092908][T14364] ? kernfs_seq_stop+0xcd/0x120 [ 3160.092963][T14364] ? kernfs_put_active+0x86/0xe0 [ 3160.093010][T14364] seq_read_iter+0xcf8/0x12c0 [ 3160.093081][T14364] kernfs_fop_read_iter+0x40f/0x5a0 [ 3160.093127][T14364] ? rw_verify_area+0xcf/0x680 [ 3160.093186][T14364] vfs_read+0x8bf/0xc60 [ 3160.093232][T14364] ? __pfx___mutex_lock+0x10/0x10 [ 3160.093272][T14364] ? __pfx_vfs_read+0x10/0x10 [ 3160.093335][T14364] ksys_read+0x12a/0x250 [ 3160.093368][T14364] ? __pfx_ksys_read+0x10/0x10 [ 3160.093413][T14364] do_syscall_64+0xcd/0x490 [ 3160.093454][T14364] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3160.093486][T14364] RIP: 0033:0x7f5dd1f8e969 [ 3160.093510][T14364] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3160.093541][T14364] RSP: 002b:00007f5dd2d5f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3160.093571][T14364] RAX: ffffffffffffffda RBX: 00007f5dd21b6080 RCX: 00007f5dd1f8e969 [ 3160.093592][T14364] RDX: 0000000000000011 RSI: 00002000000000c0 RDI: 0000000000000004 [ 3160.093612][T14364] RBP: 00007f5dd2d5f090 R08: 0000000000000000 R09: 0000000000000000 [ 3160.093631][T14364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3160.093651][T14364] R13: 0000000000000000 R14: 00007f5dd21b6080 R15: 00007ffd0225f9c8 [ 3160.093692][T14364] [ 3161.690947][T14392] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input123 [ 3162.822671][T14394] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input124 [ 3162.888905][T14407] FAULT_INJECTION: forcing a failure. [ 3162.888905][T14407] name failslab, interval 1, probability 0, space 0, times 0 [ 3162.889053][T14407] CPU: 0 UID: 0 PID: 14407 Comm: syz.2.7669 Tainted: G U 6.15.0-syzkaller-10402-g4cb6c8af8591 #0 PREEMPT(full) [ 3162.889102][T14407] Tainted: [U]=USER [ 3162.889113][T14407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 3162.889133][T14407] Call Trace: [ 3162.889144][T14407] [ 3162.889157][T14407] dump_stack_lvl+0x16c/0x1f0 [ 3162.889200][T14407] should_fail_ex+0x512/0x640 [ 3162.889246][T14407] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 3162.889290][T14407] should_failslab+0xc2/0x120 [ 3162.889333][T14407] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 3162.889373][T14407] ? __pmd_alloc+0xc3/0x910 [ 3162.889429][T14407] __pmd_alloc+0xc3/0x910 [ 3162.889482][T14407] __handle_mm_fault+0xaac/0x5450 [ 3162.889529][T14407] ? __pfx___handle_mm_fault+0x10/0x10 [ 3162.889589][T14407] ? find_vma+0xbf/0x140 [ 3162.889634][T14407] ? __pfx_find_vma+0x10/0x10 [ 3162.889686][T14407] handle_mm_fault+0x3fe/0xad0 [ 3162.889728][T14407] do_user_addr_fault+0x7a6/0x1370 [ 3162.889770][T14407] ? rcu_is_watching+0x12/0xc0 [ 3162.889827][T14407] exc_page_fault+0x5c/0xb0 [ 3162.889865][T14407] asm_exc_page_fault+0x26/0x30 [ 3162.889897][T14407] RIP: 0010:__get_user_4+0x14/0x20 [ 3162.889927][T14407] Code: 00 00 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 ba 00 f0 ff ff ff 7f 00 00 48 39 d0 48 0f 47 c2 0f 01 cb <8b> 10 31 c0 0f 01 ca e9 90 09 04 00 90 90 90 90 90 90 90 90 90 90 [ 3162.889960][T14407] RSP: 0018:ffffc90003abfc58 EFLAGS: 00050283 [ 3162.889986][T14407] RAX: 0000000000000f15 RBX: 0000000000000000 RCX: ffffc90003abfbfc [ 3162.890008][T14407] RDX: 00007ffffffff000 RSI: ffffffff8732593b RDI: ffffffff8bf51cc0 [ 3162.890030][T14407] RBP: ffffc90003abfee0 R08: b6458f99736bf2f2 R09: 0000000000000000 [ 3162.890053][T14407] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888034920c00 [ 3162.890075][T14407] R13: 1ffff92000757f93 R14: ffff8880296d1518 R15: ffff888029707130 [ 3162.890113][T14407] ? usbdev_ioctl+0x319b/0x4070 [ 3162.890170][T14407] usbdev_ioctl+0x31a5/0x4070 [ 3162.890228][T14407] ? __pfx_usbdev_ioctl+0x10/0x10 [ 3162.890279][T14407] ? do_vfs_ioctl+0x523/0x1a60 [ 3162.890328][T14407] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 3162.890404][T14407] ? find_held_lock+0x2b/0x80 [ 3162.890448][T14407] ? hook_file_ioctl_common+0x145/0x410 [ 3162.890492][T14407] ? __fget_files+0x20e/0x3c0 [ 3162.890529][T14407] ? __pfx_usbdev_ioctl+0x10/0x10 [ 3162.890583][T14407] __x64_sys_ioctl+0x18e/0x210 [ 3162.890634][T14407] do_syscall_64+0xcd/0x490 [ 3162.890676][T14407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3162.890707][T14407] RIP: 0033:0x7fb13978e969 [ 3162.890733][T14407] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3162.890766][T14407] RSP: 002b:00007fb13a660038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3162.890796][T14407] RAX: ffffffffffffffda RBX: 00007fb1399b5fa0 RCX: 00007fb13978e969 [ 3162.890827][T14407] RDX: 0000000000000f15 RSI: 000000008004550f RDI: 0000000000000003 [ 3162.890848][T14407] RBP: 00007fb13a660090 R08: 0000000000000000 R09: 0000000000000000 [ 3162.890869][T14407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3162.890889][T14407] R13: 0000000000000000 R14: 00007fb1399b5fa0 R15: 00007ffcde1e2108 [ 3162.890933][T14407] [ 3163.722518][T14412] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3163.724238][T17804] Bluetooth: hci4: command 0x0406 tx timeout [ 3165.114236][T14440] FAULT_INJECTION: forcing a failure. [ 3165.114236][T14440] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3165.135720][T14440] CPU: 1 UID: 0 PID: 14440 Comm: syz.0.7675 Tainted: G U 6.15.0-syzkaller-10402-g4cb6c8af8591 #0 PREEMPT(full) [ 3165.135774][T14440] Tainted: [U]=USER [ 3165.135786][T14440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 3165.135806][T14440] Call Trace: [ 3165.135817][T14440] [ 3165.135829][T14440] dump_stack_lvl+0x16c/0x1f0 [ 3165.135878][T14440] should_fail_ex+0x512/0x640 [ 3165.135931][T14440] _copy_from_user+0x2e/0xd0 [ 3165.135984][T14440] copy_from_sockptr_offset.constprop.0+0x136/0x170 [ 3165.136031][T14440] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 3165.136091][T14440] tipc_setsockopt+0x681/0xdb0 [ 3165.136139][T14440] ? __pfx_tipc_setsockopt+0x10/0x10 [ 3165.136205][T14440] ? __pfx_tipc_setsockopt+0x10/0x10 [ 3165.136251][T14440] do_sock_setsockopt+0x221/0x470 [ 3165.136299][T14440] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 3165.136373][T14440] __sys_setsockopt+0x120/0x1a0 [ 3165.136419][T14440] __x64_sys_setsockopt+0xbd/0x160 [ 3165.136456][T14440] ? do_syscall_64+0x91/0x490 [ 3165.136495][T14440] ? lockdep_hardirqs_on+0x7c/0x110 [ 3165.136531][T14440] do_syscall_64+0xcd/0x490 [ 3165.136584][T14440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3165.136618][T14440] RIP: 0033:0x7f11e9d8e969 [ 3165.136644][T14440] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3165.136677][T14440] RSP: 002b:00007f11eab11038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 3165.136709][T14440] RAX: ffffffffffffffda RBX: 00007f11e9fb6160 RCX: 00007f11e9d8e969 [ 3165.136731][T14440] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000003 [ 3165.136752][T14440] RBP: 00007f11eab11090 R08: 0000000000000014 R09: 0000000000000000 [ 3165.136774][T14440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3165.136794][T14440] R13: 0000000000000000 R14: 00007f11e9fb6160 R15: 00007ffc154bfdc8 [ 3165.136836][T14440] [ 3165.571128][T14443] openvswitch: netlink: nsh attribute has 14 unknown bytes. [ 3168.130014][T14487] openvswitch: netlink: IPv4 tunnel dst address is zero [ 3168.757465][T14486] could not allocate digest TFM handle [ 3169.318526][T14508] FAULT_INJECTION: forcing a failure. [ 3169.318526][T14508] name failslab, interval 1, probability 0, space 0, times 0 [ 3169.331497][T14508] CPU: 1 UID: 0 PID: 14508 Comm: syz.3.7688 Tainted: G U 6.15.0-syzkaller-10402-g4cb6c8af8591 #0 PREEMPT(full) [ 3169.331551][T14508] Tainted: [U]=USER [ 3169.331563][T14508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 3169.331612][T14508] Call Trace: [ 3169.331624][T14508] [ 3169.331637][T14508] dump_stack_lvl+0x16c/0x1f0 [ 3169.331683][T14508] should_fail_ex+0x512/0x640 [ 3169.331729][T14508] ? __kmalloc_noprof+0xbf/0x510 [ 3169.331770][T14508] ? io_cache_alloc_new+0x45/0xf0 [ 3169.331815][T14508] should_failslab+0xc2/0x120 [ 3169.331859][T14508] __kmalloc_noprof+0xd2/0x510 [ 3169.331906][T14508] io_cache_alloc_new+0x45/0xf0 [ 3169.331955][T14508] io_rsrc_node_alloc+0x221/0x2b0 [ 3169.332005][T14508] io_sqe_buffer_register+0xf1/0x1de0 [ 3169.332081][T14508] ? __pfx_io_sqe_buffer_register+0x10/0x10 [ 3169.332132][T14508] ? trace_kmalloc+0x2b/0xd0 [ 3169.332175][T14508] ? __kvmalloc_node_noprof+0x296/0x620 [ 3169.332229][T14508] ? iovec_from_user+0xbb/0x140 [ 3169.332285][T14508] io_sqe_buffers_register+0x1ed/0x860 [ 3169.332347][T14508] ? __pfx_io_sqe_buffers_register+0x10/0x10 [ 3169.332419][T14508] ? __pfx___mutex_trylock_common+0x10/0x10 [ 3169.332478][T14508] __io_uring_register+0x2248/0x2310 [ 3169.332527][T14508] ? trace_contention_end+0xdd/0x130 [ 3169.332562][T14508] ? __pfx___io_uring_register+0x10/0x10 [ 3169.332606][T14508] ? __mutex_lock+0x1ca/0xb90 [ 3169.332649][T14508] ? __x64_sys_io_uring_register+0x159/0x280 [ 3169.332699][T14508] ? __pfx___mutex_lock+0x10/0x10 [ 3169.332749][T14508] ? __fget_files+0x20e/0x3c0 [ 3169.332778][T14508] ? fput+0x60/0xf0 [ 3169.332833][T14508] __x64_sys_io_uring_register+0x169/0x280 [ 3169.332886][T14508] do_syscall_64+0xcd/0x490 [ 3169.332930][T14508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3169.332964][T14508] RIP: 0033:0x7fe52bb8e969 [ 3169.332991][T14508] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3169.333024][T14508] RSP: 002b:00007fe52ca69038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 3169.333056][T14508] RAX: ffffffffffffffda RBX: 00007fe52bdb5fa0 RCX: 00007fe52bb8e969 [ 3169.333079][T14508] RDX: 0000200000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 3169.333099][T14508] RBP: 00007fe52ca69090 R08: 0000000000000000 R09: 0000000000000000 [ 3169.333120][T14508] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 3169.333140][T14508] R13: 0000000000000000 R14: 00007fe52bdb5fa0 R15: 00007fff702b5cb8 [ 3169.333183][T14508] [ 3172.322553][T14549] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input125 [ 3173.401511][T14557] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input126 [ 3176.275430][T14588] FAULT_INJECTION: forcing a failure. [ 3176.275430][T14588] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3176.330700][T14588] CPU: 0 UID: 0 PID: 14588 Comm: syz.2.7704 Tainted: G U 6.15.0-syzkaller-10402-g4cb6c8af8591 #0 PREEMPT(full) [ 3176.330756][T14588] Tainted: [U]=USER [ 3176.330775][T14588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 3176.330796][T14588] Call Trace: [ 3176.330807][T14588] [ 3176.330820][T14588] dump_stack_lvl+0x16c/0x1f0 [ 3176.330865][T14588] should_fail_ex+0x512/0x640 [ 3176.330920][T14588] _copy_to_user+0x32/0xd0 [ 3176.330974][T14588] simple_read_from_buffer+0xcb/0x170 [ 3176.331031][T14588] proc_fail_nth_read+0x197/0x270 [ 3176.331085][T14588] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 3176.331140][T14588] ? rw_verify_area+0xcf/0x680 [ 3176.331191][T14588] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 3176.331243][T14588] vfs_read+0x1e1/0xc60 [ 3176.331284][T14588] ? __pfx___mutex_lock+0x10/0x10 [ 3176.331324][T14588] ? __pfx_vfs_read+0x10/0x10 [ 3176.331370][T14588] ? __fget_files+0x20e/0x3c0 [ 3176.331416][T14588] ksys_read+0x12a/0x250 [ 3176.331450][T14588] ? __pfx_ksys_read+0x10/0x10 [ 3176.331497][T14588] do_syscall_64+0xcd/0x490 [ 3176.331545][T14588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3176.331578][T14588] RIP: 0033:0x7fb13978d37c [ 3176.331604][T14588] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 3176.331636][T14588] RSP: 002b:00007fb13a660030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3176.331668][T14588] RAX: ffffffffffffffda RBX: 00007fb1399b5fa0 RCX: 00007fb13978d37c [ 3176.331690][T14588] RDX: 000000000000000f RSI: 00007fb13a6600a0 RDI: 0000000000000004 [ 3176.331716][T14588] RBP: 00007fb13a660090 R08: 0000000000000000 R09: 0000000000000000 [ 3176.331737][T14588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3176.331758][T14588] R13: 0000000000000000 R14: 00007fb1399b5fa0 R15: 00007ffcde1e2108 [ 3176.331807][T14588] [ 3177.071016][T14597] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7707'. [ 3177.284185][T14610] netlink: 93 bytes leftover after parsing attributes in process `syz.2.7707'. [ 3178.017853][T14596] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 3178.065742][T14596] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 3178.072189][T14596] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 3178.081086][T14596] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 3178.087242][T14596] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 3180.118308][ T5845] Bluetooth: hci4: command 0x0406 tx timeout [ 3180.124450][ T5845] Bluetooth: hci1: command 0x0c1a tx timeout [ 3180.130920][T17804] Bluetooth: hci3: command 0x0c1a tx timeout [ 3180.137165][T12214] Bluetooth: hci2: command 0x0406 tx timeout [ 3180.615639][T14650] FAULT_INJECTION: forcing a failure. [ 3180.615639][T14650] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3180.669499][T14650] CPU: 1 UID: 0 PID: 14650 Comm: syz.2.7714 Tainted: G U 6.15.0-syzkaller-10402-g4cb6c8af8591 #0 PREEMPT(full) [ 3180.669539][T14650] Tainted: [U]=USER [ 3180.669548][T14650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 3180.669562][T14650] Call Trace: [ 3180.669570][T14650] [ 3180.669579][T14650] dump_stack_lvl+0x16c/0x1f0 [ 3180.669612][T14650] should_fail_ex+0x512/0x640 [ 3180.669651][T14650] _copy_to_user+0x32/0xd0 [ 3180.669690][T14650] simple_read_from_buffer+0xcb/0x170 [ 3180.669732][T14650] proc_fail_nth_read+0x197/0x270 [ 3180.669770][T14650] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 3180.669816][T14650] ? rw_verify_area+0xcf/0x680 [ 3180.669854][T14650] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 3180.669891][T14650] vfs_read+0x1e1/0xc60 [ 3180.669919][T14650] ? __pfx___mutex_lock+0x10/0x10 [ 3180.669948][T14650] ? __pfx_vfs_read+0x10/0x10 [ 3180.669981][T14650] ? __fget_files+0x20e/0x3c0 [ 3180.670013][T14650] ksys_read+0x12a/0x250 [ 3180.670036][T14650] ? __pfx_ksys_read+0x10/0x10 [ 3180.670068][T14650] do_syscall_64+0xcd/0x490 [ 3180.670098][T14650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3180.670121][T14650] RIP: 0033:0x7fb13978d37c [ 3180.670142][T14650] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 3180.670166][T14650] RSP: 002b:00007fb13a660030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3180.670188][T14650] RAX: ffffffffffffffda RBX: 00007fb1399b5fa0 RCX: 00007fb13978d37c [ 3180.670205][T14650] RDX: 000000000000000f RSI: 00007fb13a6600a0 RDI: 0000000000000004 [ 3180.670219][T14650] RBP: 00007fb13a660090 R08: 0000000000000000 R09: 0000000000000000 [ 3180.670234][T14650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3180.670248][T14650] R13: 0000000000000000 R14: 00007fb1399b5fa0 R15: 00007ffcde1e2108 [ 3180.670279][T14650] [ 3182.187279][ T5845] Bluetooth: hci4: command 0x0406 tx timeout [ 3183.013216][T14678] block nbd7: not configured, cannot reconfigure [ 3183.853203][T14684] block nbd7: not configured, cannot reconfigure [ 3184.516286][T14694] [U]  [ 3184.519175][T14694] [U] [ 3184.521924][T14694] [U] [ 3184.524690][T14694] [U] [ 3184.576318][T14694] FAULT_INJECTION: forcing a failure. [ 3184.576318][T14694] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3184.691066][T14694] CPU: 1 UID: 0 PID: 14694 Comm: syz.3.7724 Tainted: G U 6.15.0-syzkaller-10402-g4cb6c8af8591 #0 PREEMPT(full) [ 3184.691124][T14694] Tainted: [U]=USER [ 3184.691136][T14694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 3184.691156][T14694] Call Trace: [ 3184.691169][T14694] [ 3184.691182][T14694] dump_stack_lvl+0x16c/0x1f0 [ 3184.691227][T14694] should_fail_ex+0x512/0x640 [ 3184.691280][T14694] _copy_from_iter+0x29f/0x16f0 [ 3184.691341][T14694] ? __pfx__copy_from_iter+0x10/0x10 [ 3184.691407][T14694] ? __pfx___might_resched+0x10/0x10 [ 3184.691465][T14694] file_tty_write.constprop.0+0x486/0x9b0 [ 3184.691529][T14694] vfs_write+0x6c7/0x1150 [ 3184.691566][T14694] ? __pfx_tty_write+0x10/0x10 [ 3184.691619][T14694] ? __pfx_vfs_write+0x10/0x10 [ 3184.691651][T14694] ? find_held_lock+0x2b/0x80 [ 3184.691723][T14694] ksys_write+0x12a/0x250 [ 3184.691758][T14694] ? __pfx_ksys_write+0x10/0x10 [ 3184.691807][T14694] do_syscall_64+0xcd/0x490 [ 3184.691851][T14694] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3184.691886][T14694] RIP: 0033:0x7fe52bb8e969 [ 3184.691912][T14694] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3184.691946][T14694] RSP: 002b:00007fe52ca69038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3184.691979][T14694] RAX: ffffffffffffffda RBX: 00007fe52bdb5fa0 RCX: 00007fe52bb8e969 [ 3184.692002][T14694] RDX: 000000000000fdef RSI: 0000000000000000 RDI: 0000000000000003 [ 3184.692028][T14694] RBP: 00007fe52ca69090 R08: 0000000000000000 R09: 0000000000000000 [ 3184.692050][T14694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3184.692071][T14694] R13: 0000000000000000 R14: 00007fe52bdb5fa0 R15: 00007fff702b5cb8 [ 3184.692116][T14694] [ 3184.876147][T14698] [U] [ 3186.162513][T14719] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7730'. [ 3186.984751][T14739] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input127 [ 3187.530003][T14750] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input128 [ 3190.381683][T14788] random: crng reseeded on system resumption [ 3190.990895][T14792] Unrecognized hibernate image header format! [ 3191.068189][T14792] PM: hibernation: Image mismatch: architecture specific data [ 3191.305676][T14792] Unrecognized hibernate image header format! [ 3191.359924][T14792] PM: hibernation: Image mismatch: architecture specific data [ 3191.754731][T14811] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7749'. [ 3191.778644][T14810] [U]  [ 3191.778723][T14810] [U] [ 3191.778792][T14810] [U] [ 3191.778858][T14810] [U] [ 3191.779177][T14810] [U] [ 3191.779256][T14810] [U] [ 3191.779325][T14810] [U] [ 3191.779392][T14810] [U] [ 3191.779791][T14810] [U] [ 3191.779860][T14810] [U] [ 3191.779929][T14810] [U] [ 3191.779996][T14810] [U] [ 3191.780336][T14810] [U] [ 3191.780403][T14810] [U] [ 3191.780471][T14810] [U] [ 3191.780539][T14810] [U] [ 3191.781033][T14810] [U] [ 3191.781102][T14810] [U] [ 3191.781170][T14810] [U] [ 3191.781247][T14810] [U] [ 3191.781673][T14810] [U] [ 3191.781739][T14810] [U] [ 3191.781807][T14810] [U] [ 3191.781871][T14810] [U] [ 3191.782243][T14810] [U] [ 3191.782308][T14810] [U] [ 3191.782372][T14810] [U] [ 3191.782437][T14810] [U] [ 3191.782733][T14810] [U] [ 3191.782801][T14810] [U] [ 3191.782865][T14810] [U] [ 3191.782929][T14810] [U] [ 3191.787764][T14810] [U] [ 3191.787830][T14810] [U] [ 3191.787894][T14810] [U] [ 3191.787957][T14810] [U] [ 3191.788254][T14810] [U] [ 3191.788317][T14810] [U] [ 3191.788380][T14810] [U] [ 3191.788443][T14810] [U] [ 3191.788799][T14810] [U] [ 3191.788864][T14810] [U] [ 3191.788928][T14810] [U] [ 3191.788991][T14810] [U] [ 3191.789293][T14810] [U] [ 3191.789358][T14810] [U] [ 3191.789421][T14810] [U] [ 3191.789484][T14810] [U] [ 3191.789839][T14810] [U] [ 3191.789904][T14810] [U] [ 3191.789970][T14810] [U] [ 3191.790035][T14810] [U] [ 3191.790337][T14810] [U] [ 3191.790400][T14810] [U] [ 3191.790463][T14810] [U] [ 3191.790526][T14810] [U] [ 3191.790885][T14810] [U] [ 3191.790951][T14810] [U] [ 3191.791016][T14810] [U] [ 3191.791081][T14810] [U] [ 3191.791383][T14810] [U] [ 3191.791446][T14810] [U] [ 3191.791514][T14810] [U] [ 3191.791577][T14810] [U] [ 3191.806959][T14810] [U] [ 3191.980201][T14810] [U] [ 3191.980263][T14810] [U] [ 3191.980316][T14810] [U] [ 3192.156291][T14810] [U] [ 3192.159117][T14810] [U] [ 3192.161888][T14810] [U] [ 3192.164655][T14810] [U] [ 3192.270235][T14819] [U] [ 3193.718487][T14844] openvswitch: netlink: nsh attribute has 14 unknown bytes. [ 3196.689248][T14890] FAULT_INJECTION: forcing a failure. [ 3196.689248][T14890] name failslab, interval 1, probability 0, space 0, times 0 [ 3196.706278][T14890] CPU: 1 UID: 0 PID: 14890 Comm: syz.1.7765 Tainted: G U 6.15.0-syzkaller-10402-g4cb6c8af8591 #0 PREEMPT(full) [ 3196.706339][T14890] Tainted: [U]=USER [ 3196.706353][T14890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 3196.706376][T14890] Call Trace: [ 3196.706388][T14890] [ 3196.706402][T14890] dump_stack_lvl+0x16c/0x1f0 [ 3196.706450][T14890] should_fail_ex+0x512/0x640 [ 3196.706501][T14890] ? fs_reclaim_acquire+0xae/0x150 [ 3196.706559][T14890] ? tomoyo_init_log+0x1385/0x2140 [ 3196.706601][T14890] should_failslab+0xc2/0x120 [ 3196.706646][T14890] __kmalloc_noprof+0xd2/0x510 [ 3196.706684][T14890] ? __pfx_from_kuid+0x10/0x10 [ 3196.706747][T14890] tomoyo_init_log+0x1385/0x2140 [ 3196.706816][T14890] ? __pfx_tomoyo_init_log+0x10/0x10 [ 3196.706862][T14890] ? tomoyo_profile+0x47/0x60 [ 3196.706913][T14890] ? tomoyo_domain_quota_is_ok+0x2f6/0x5a0 [ 3196.706958][T14890] tomoyo_supervisor+0x302/0x13b0 [ 3196.707019][T14890] ? __pfx_tomoyo_supervisor+0x10/0x10 [ 3196.707092][T14890] ? lockdep_hardirqs_on+0x7c/0x110 [ 3196.707140][T14890] ? tomoyo_check_path_acl+0xad/0x210 [ 3196.707181][T14890] ? tomoyo_check_acl+0x1f7/0x410 [ 3196.707245][T14890] tomoyo_path_permission+0x270/0x3b0 [ 3196.707289][T14890] tomoyo_path_perm+0x362/0x460 [ 3196.707331][T14890] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 3196.707417][T14890] ? __pfx_ima_file_check+0x10/0x10 [ 3196.707465][T14890] ? hook_file_truncate+0xc7/0x250 [ 3196.707513][T14890] security_file_truncate+0x84/0x1e0 [ 3196.707561][T14890] path_openat+0xc10/0x2cb0 [ 3196.707615][T14890] ? __pfx_path_openat+0x10/0x10 [ 3196.707657][T14890] ? __lock_acquire+0xb8a/0x1c90 [ 3196.707705][T14890] do_filp_open+0x20b/0x470 [ 3196.707746][T14890] ? __pfx_do_filp_open+0x10/0x10 [ 3196.707818][T14890] ? alloc_fd+0x471/0x7d0 [ 3196.707867][T14890] do_sys_openat2+0x11b/0x1d0 [ 3196.707917][T14890] ? __pfx_do_sys_openat2+0x10/0x10 [ 3196.707986][T14890] __x64_sys_openat+0x174/0x210 [ 3196.708039][T14890] ? __pfx___x64_sys_openat+0x10/0x10 [ 3196.708109][T14890] do_syscall_64+0xcd/0x490 [ 3196.708156][T14890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3196.708193][T14890] RIP: 0033:0x7f5dd1f8e969 [ 3196.708221][T14890] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3196.708258][T14890] RSP: 002b:00007f5dd2d80038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 3196.708292][T14890] RAX: ffffffffffffffda RBX: 00007f5dd21b5fa0 RCX: 00007f5dd1f8e969 [ 3196.708316][T14890] RDX: 0000000000000640 RSI: 0000000000000000 RDI: ffffffffffffff9c [ 3196.708339][T14890] RBP: 00007f5dd2010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 3196.708360][T14890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3196.708382][T14890] R13: 0000000000000000 R14: 00007f5dd21b5fa0 R15: 00007ffd0225f9c8 [ 3196.708427][T14890] [ 3198.040692][T14913] input: jJǸ-¶š9ã%vø“û¨lÐQ  J86Ö‘ as /devices/virtual/input/input129 [ 3198.144802][T14917] FAULT_INJECTION: forcing a failure. [ 3198.144802][T14917] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3198.171887][T14917] CPU: 1 UID: 0 PID: 14917 Comm: syz.2.7770 Tainted: G U 6.15.0-syzkaller-10402-g4cb6c8af8591 #0 PREEMPT(full) [ 3198.171943][T14917] Tainted: [U]=USER [ 3198.171955][T14917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 3198.171976][T14917] Call Trace: [ 3198.171987][T14917] [ 3198.172001][T14917] dump_stack_lvl+0x16c/0x1f0 [ 3198.172046][T14917] should_fail_ex+0x512/0x640 [ 3198.172101][T14917] _copy_from_user+0x2e/0xd0 [ 3198.172153][T14917] input_event_from_user+0xb9/0x290 [ 3198.172198][T14917] ? __pfx_input_event_from_user+0x10/0x10 [ 3198.172239][T14917] ? __pfx___might_resched+0x10/0x10 [ 3198.172286][T14917] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 3198.172322][T14917] ? input_event+0x98/0xb0 [ 3198.172363][T14917] uinput_write+0xbe7/0xff0 [ 3198.172420][T14917] ? __pfx_uinput_write+0x10/0x10 [ 3198.172469][T14917] ? bpf_lsm_file_permission+0x9/0x10 [ 3198.172519][T14917] ? security_file_permission+0x71/0x210 [ 3198.172580][T14917] ? rw_verify_area+0xcf/0x680 [ 3198.172634][T14917] ? __pfx_uinput_write+0x10/0x10 [ 3198.172677][T14917] vfs_writev+0x5df/0xde0 [ 3198.172722][T14917] ? __pfx_vfs_writev+0x10/0x10 [ 3198.172785][T14917] ? __fget_files+0x20e/0x3c0 [ 3198.172825][T14917] ? __fget_files+0x1f0/0x3c0 [ 3198.172873][T14917] ? do_writev+0x28c/0x340 [ 3198.172902][T14917] do_writev+0x28c/0x340 [ 3198.172935][T14917] ? __pfx_do_writev+0x10/0x10 [ 3198.172980][T14917] do_syscall_64+0xcd/0x490 [ 3198.173023][T14917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3198.173057][T14917] RIP: 0033:0x7fb13978e969 [ 3198.173084][T14917] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3198.173118][T14917] RSP: 002b:00007fb13a61e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 3198.173151][T14917] RAX: ffffffffffffffda RBX: 00007fb1399b6160 RCX: 00007fb13978e969 [ 3198.173174][T14917] RDX: 0000000000000009 RSI: 0000200000000340 RDI: 0000000000000003 [ 3198.173194][T14917] RBP: 00007fb13a61e090 R08: 0000000000000000 R09: 0000000000000000 [ 3198.173215][T14917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3198.173235][T14917] R13: 0000000000000001 R14: 00007fb1399b6160 R15: 00007ffcde1e2108 [ 3198.173279][T14917] [ 3198.999527][T14927] openvswitch: netlink: IPv4 tunnel dst address is zero [ 3199.172219][T14926] could not allocate digest TFM handle [ 3200.221766][T14950] netlink: 342 bytes leftover after parsing attributes in process `syz.2.7777'. [ 3200.439928][T14955] FAULT_INJECTION: forcing a failure. [ 3200.439928][T14955] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3200.453628][T14955] CPU: 0 UID: 0 PID: 14955 Comm: syz.1.7778 Tainted: G U 6.15.0-syzkaller-10402-g4cb6c8af8591 #0 PREEMPT(full) [ 3200.453667][T14955] Tainted: [U]=USER [ 3200.453675][T14955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 3200.453690][T14955] Call Trace: [ 3200.453697][T14955] [ 3200.453706][T14955] dump_stack_lvl+0x16c/0x1f0 [ 3200.453739][T14955] should_fail_ex+0x512/0x640 [ 3200.453778][T14955] _copy_to_user+0x32/0xd0 [ 3200.453816][T14955] simple_read_from_buffer+0xcb/0x170 [ 3200.453858][T14955] proc_fail_nth_read+0x197/0x270 [ 3200.453896][T14955] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 3200.453936][T14955] ? rw_verify_area+0xcf/0x680 [ 3200.453977][T14955] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 3200.454015][T14955] vfs_read+0x1e1/0xc60 [ 3200.454043][T14955] ? __pfx___mutex_lock+0x10/0x10 [ 3200.454072][T14955] ? __pfx_vfs_read+0x10/0x10 [ 3200.454104][T14955] ? __fget_files+0x20e/0x3c0 [ 3200.454136][T14955] ksys_read+0x12a/0x250 [ 3200.454159][T14955] ? __pfx_ksys_read+0x10/0x10 [ 3200.454191][T14955] do_syscall_64+0xcd/0x490 [ 3200.454221][T14955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3200.454244][T14955] RIP: 0033:0x7f5dd1f8d37c [ 3200.454264][T14955] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 3200.454288][T14955] RSP: 002b:00007f5dd2d5f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3200.454310][T14955] RAX: ffffffffffffffda RBX: 00007f5dd21b6080 RCX: 00007f5dd1f8d37c [ 3200.454326][T14955] RDX: 000000000000000f RSI: 00007f5dd2d5f0a0 RDI: 000000000000000e [ 3200.454341][T14955] RBP: 00007f5dd2d5f090 R08: 0000000000000000 R09: 0000000000000000 [ 3200.454356][T14955] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 3200.454371][T14955] R13: 0000000000000000 R14: 00007f5dd21b6080 R15: 00007ffd0225f9c8 [ 3200.454407][T14955] [ 3201.428989][T14946] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7776'. [ 3203.534477][T14999] openvswitch: netlink: nsh attribute has 14 unknown bytes. [ 3203.546646][T15002] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7790'. [ 3204.946936][T15008] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7792'. [ 3206.700369][T15040] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7800'. [ 3207.502278][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 3207.509090][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 3208.757740][T15068] openvswitch: netlink: IPv4 tunnel dst address is zero [ 3209.097643][T15065] could not allocate digest TFM handle [ 3210.293915][T15086] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7809'. [ 3213.203382][T15141] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input130 [ 3213.939001][T15142] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input131 [ 3214.527407][T15146] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input132 [ 3215.283931][T15147] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input133 [ 3215.773005][T15177] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input134 [ 3215.839273][T15178] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input135 [ 3218.084562][T15213] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input136 [ 3219.233184][T15214] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input137 [ 3220.274815][T15229] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7837'. [ 3220.278437][T15224] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7836'. [ 3221.051169][T15244] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7841'. [ 3221.133901][T15244] netlink: 93 bytes leftover after parsing attributes in process `syz.1.7841'. [ 3221.457005][T15254] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input138 [ 3222.704187][T15267] FAULT_INJECTION: forcing a failure. [ 3222.704187][T15267] name failslab, interval 1, probability 0, space 0, times 0 [ 3222.726635][T15267] CPU: 0 UID: 0 PID: 15267 Comm: syz.3.7846 Tainted: G U 6.15.0-syzkaller-10402-g4cb6c8af8591 #0 PREEMPT(full) [ 3222.726690][T15267] Tainted: [U]=USER [ 3222.726703][T15267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 3222.726723][T15267] Call Trace: [ 3222.726735][T15267] [ 3222.726748][T15267] dump_stack_lvl+0x16c/0x1f0 [ 3222.726792][T15267] should_fail_ex+0x512/0x640 [ 3222.726840][T15267] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 3222.726878][T15267] should_failslab+0xc2/0x120 [ 3222.726921][T15267] __kmalloc_cache_noprof+0x6a/0x3e0 [ 3222.726957][T15267] ? copy_net_ns+0x135/0x5f0 [ 3222.727010][T15267] copy_net_ns+0x135/0x5f0 [ 3222.727055][T15267] ? copy_cgroup_ns+0x71/0x700 [ 3222.727108][T15267] create_new_namespaces+0x3ea/0xa90 [ 3222.727169][T15267] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 3222.727223][T15267] ksys_unshare+0x45b/0xa40 [ 3222.727259][T15267] ? __pfx_ksys_unshare+0x10/0x10 [ 3222.727294][T15267] ? ksys_write+0x1ac/0x250 [ 3222.727343][T15267] __x64_sys_unshare+0x31/0x40 [ 3222.727379][T15267] do_syscall_64+0xcd/0x490 [ 3222.727431][T15267] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3222.727466][T15267] RIP: 0033:0x7fe52bb8e969 [ 3222.727493][T15267] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3222.727526][T15267] RSP: 002b:00007fe52ca48038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 3222.727558][T15267] RAX: ffffffffffffffda RBX: 00007fe52bdb6080 RCX: 00007fe52bb8e969 [ 3222.727581][T15267] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 3222.727602][T15267] RBP: 00007fe52ca48090 R08: 0000000000000000 R09: 0000000000000000 [ 3222.727624][T15267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3222.727644][T15267] R13: 0000000000000000 R14: 00007fe52bdb6080 R15: 00007fff702b5cb8 [ 3222.727688][T15267] [ 3223.765996][T15281] Setting dangerous option i915.mitigations - tainting kernel [ 3223.889181][T15282] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7847'. [ 3223.997472][T15282] netlink: 93 bytes leftover after parsing attributes in process `syz.3.7847'. [ 3227.068904][T15344] Setting dangerous option i915.mitigations - tainting kernel [ 3228.568014][T15373] FAULT_INJECTION: forcing a failure. [ 3228.568014][T15373] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3228.651127][T15373] CPU: 1 UID: 0 PID: 15373 Comm: syz.0.7862 Tainted: G U 6.15.0-syzkaller-10402-g4cb6c8af8591 #0 PREEMPT(full) [ 3228.651180][T15373] Tainted: [U]=USER [ 3228.651192][T15373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 3228.651212][T15373] Call Trace: [ 3228.651223][T15373] [ 3228.651235][T15373] dump_stack_lvl+0x16c/0x1f0 [ 3228.651279][T15373] should_fail_ex+0x512/0x640 [ 3228.651330][T15373] _copy_from_user+0x2e/0xd0 [ 3228.651378][T15373] do_pages_stat+0x239/0x820 [ 3228.651428][T15373] ? __pfx_do_pages_stat+0x10/0x10 [ 3228.651470][T15373] ? __lock_acquire+0xb8a/0x1c90 [ 3228.651523][T15373] ? do_raw_spin_unlock+0x172/0x230 [ 3228.651562][T15373] kernel_move_pages+0xfd4/0x13b0 [ 3228.651616][T15373] ? __pfx_kernel_move_pages+0x10/0x10 [ 3228.651659][T15373] ? __fget_files+0x20e/0x3c0 [ 3228.651693][T15373] ? fput+0x70/0xf0 [ 3228.651728][T15373] ? ksys_write+0x1ac/0x250 [ 3228.651757][T15373] ? __pfx_ksys_write+0x10/0x10 [ 3228.651795][T15373] __x64_sys_move_pages+0xe0/0x1c0 [ 3228.651835][T15373] ? do_syscall_64+0x91/0x490 [ 3228.651870][T15373] ? lockdep_hardirqs_on+0x7c/0x110 [ 3228.651901][T15373] do_syscall_64+0xcd/0x490 [ 3228.651937][T15373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3228.651966][T15373] RIP: 0033:0x7f11e9d8e969 [ 3228.651987][T15373] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3228.652015][T15373] RSP: 002b:00007f11eab32038 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 3228.652042][T15373] RAX: ffffffffffffffda RBX: 00007f11e9fb6080 RCX: 00007f11e9d8e969 [ 3228.652060][T15373] RDX: 0000000000000000 RSI: 0000000000000f54 RDI: 0000000000000001 [ 3228.652077][T15373] RBP: 00007f11eab32090 R08: 0000000000000000 R09: 8000000000000000 [ 3228.652101][T15373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3228.652118][T15373] R13: 0000000000000000 R14: 00007f11e9fb6080 R15: 00007ffc154bfdc8 [ 3228.652152][T15373] [ 3232.186964][T15412] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7872'. [ 3232.954390][T15442] FAULT_INJECTION: forcing a failure. [ 3232.954390][T15442] name failslab, interval 1, probability 0, space 0, times 0 [ 3232.983889][T15442] CPU: 1 UID: 0 PID: 15442 Comm: syz.0.7875 Tainted: G U 6.15.0-syzkaller-10402-g4cb6c8af8591 #0 PREEMPT(full) [ 3232.983945][T15442] Tainted: [U]=USER [ 3232.983955][T15442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 3232.983975][T15442] Call Trace: [ 3232.983990][T15442] [ 3232.984004][T15442] dump_stack_lvl+0x16c/0x1f0 [ 3232.984047][T15442] should_fail_ex+0x512/0x640 [ 3232.984092][T15442] ? __kmalloc_noprof+0xbf/0x510 [ 3232.984133][T15442] ? kobject_get_path+0xd2/0x2a0 [ 3232.984172][T15442] should_failslab+0xc2/0x120 [ 3232.984214][T15442] __kmalloc_noprof+0xd2/0x510 [ 3232.984258][T15442] kobject_get_path+0xd2/0x2a0 [ 3232.984305][T15442] kobject_uevent_env+0x289/0x1870 [ 3232.984351][T15442] ? __pfx_dev_uevent_name+0x10/0x10 [ 3232.984394][T15442] ? kfree+0x2b4/0x4d0 [ 3232.984424][T15442] ? kvm_uevent_notify_change.part.0+0x32d/0x450 [ 3232.984463][T15442] kvm_uevent_notify_change.part.0+0x3ae/0x450 [ 3232.984491][T15442] ? __pfx_kvm_vm_release+0x10/0x10 [ 3232.984526][T15442] kvm_put_kvm+0xe4/0xb40 [ 3232.984559][T15442] ? lockdep_hardirqs_on+0x7c/0x110 [ 3232.984590][T15442] ? __pfx_kvm_vm_release+0x10/0x10 [ 3232.984625][T15442] kvm_vm_release+0x3c/0x50 [ 3232.984658][T15442] __fput+0x402/0xb70 [ 3232.984691][T15442] ? _raw_spin_unlock_irq+0x23/0x50 [ 3232.984719][T15442] task_work_run+0x150/0x240 [ 3232.984749][T15442] ? __pfx_task_work_run+0x10/0x10 [ 3232.984786][T15442] ? __pfx___do_sys_close_range+0x10/0x10 [ 3232.984819][T15442] exit_to_user_mode_loop+0xeb/0x110 [ 3232.984850][T15442] do_syscall_64+0x3f6/0x490 [ 3232.984881][T15442] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3232.984904][T15442] RIP: 0033:0x7f11e9d8e969 [ 3232.984924][T15442] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3232.984948][T15442] RSP: 002b:00007f11e7bf6038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 3232.984971][T15442] RAX: 0000000000000000 RBX: 00007f11e9fb6240 RCX: 00007f11e9d8e969 [ 3232.984986][T15442] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 3232.985001][T15442] RBP: 00007f11e7bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 3232.985016][T15442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3232.985030][T15442] R13: 0000000000000001 R14: 00007f11e9fb6240 R15: 00007ffc154bfdc8 [ 3232.985059][T15442] [ 3235.146094][T15462] bcachefs: bch2_ioctl_fsck_offline() ret EFAULT [ 3239.243127][T15559] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7890'. [ 3239.350752][T15560] netlink: 93 bytes leftover after parsing attributes in process `syz.1.7890'. [ 3241.296748][T15576] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7894'. [ 3241.723112][T15588] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7896'. [ 3241.862796][T15591] netlink: 93 bytes leftover after parsing attributes in process `syz.1.7896'. [ 3243.843603][T15619] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7902'. [ 3243.954374][T15623] netlink: 93 bytes leftover after parsing attributes in process `syz.2.7902'. [ 3247.762627][T15669] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7914'. [ 3247.830807][T15669] netlink: 93 bytes leftover after parsing attributes in process `syz.2.7914'. [ 3248.522619][T15678] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7917'. [ 3255.018119][T15759] openvswitch: netlink: IPv4 tunnel dst address is zero [ 3255.154813][T15754] could not allocate digest TFM handle [ 3255.156170][T15752] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7933'. [ 3259.610317][T15823] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7947'. [ 3264.863728][T15898] vivid-003: ================= START STATUS ================= [ 3264.885213][T15898] vivid-003: Radio HW Seek Mode: Bounded [ 3264.897977][T15898] vivid-003: Radio Programmable HW Seek: false [ 3264.899043][T15891] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7961'. [ 3264.912389][T15898] vivid-003: RDS Rx I/O Mode: Block I/O [ 3264.944710][T15898] vivid-003: Generate RBDS Instead of RDS: false [ 3264.978960][T15898] vivid-003: RDS Reception: true [ 3264.996735][T15898] vivid-003: RDS Program Type: 0 inactive [ 3265.013000][T15898] vivid-003: RDS PS Name: inactive [ 3265.029498][T15898] vivid-003: RDS Radio Text: inactive [ 3265.052977][T15898] vivid-003: RDS Traffic Announcement: false inactive [ 3265.076292][T15898] vivid-003: RDS Traffic Program: false inactive [ 3265.106235][T15898] vivid-003: RDS Music: false inactive [ 3265.126014][T15898] vivid-003: ================== END STATUS ================== [ 3265.816373][T15908] .SR: entered promiscuous mode [ 3265.911427][T15909] Invalid ELF header magic: != ELF [ 3266.409544][T10695] smpboot: CPU 1 is now offline [ 3266.542856][T15908] could not allocate digest TFM handle [ 3266.608306][T15909] could not allocate digest TFM handle [ 3266.799540][T15928] openvswitch: netlink: IPv4 tunnel dst address is zero [ 3266.867115][T15931] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input139 [ 3267.165483][T15925] could not allocate digest TFM handle [ 3267.278227][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 3267.297553][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 3269.623031][T15970] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7979'. [ 3271.761972][T16016] openvswitch: netlink: IPv4 tunnel dst address is zero [ 3272.226526][T16010] could not allocate digest TFM handle [ 3272.686453][T16032] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7990'. [ 3274.247255][T16054] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7995'. [ 3275.835912][T16071] FAULT_INJECTION: forcing a failure. [ 3275.835912][T16071] name failslab, interval 1, probability 0, space 0, times 0 [ 3275.913197][T16071] CPU: 0 UID: 0 PID: 16071 Comm: syz.0.8001 Tainted: G U 6.15.0-syzkaller-10402-g4cb6c8af8591 #0 PREEMPT(full) [ 3275.913240][T16071] Tainted: [U]=USER [ 3275.913249][T16071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 3275.913264][T16071] Call Trace: [ 3275.913273][T16071] [ 3275.913282][T16071] dump_stack_lvl+0x16c/0x1f0 [ 3275.913316][T16071] should_fail_ex+0x512/0x640 [ 3275.913352][T16071] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 3275.913385][T16071] should_failslab+0xc2/0x120 [ 3275.913416][T16071] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 3275.913446][T16071] ? alloc_empty_file+0x55/0x1e0 [ 3275.913483][T16071] alloc_empty_file+0x55/0x1e0 [ 3275.913518][T16071] path_openat+0xda/0x2cb0 [ 3275.913542][T16071] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3275.913578][T16071] ? __pfx_path_openat+0x10/0x10 [ 3275.913605][T16071] ? __lock_acquire+0xb8a/0x1c90 [ 3275.913634][T16071] do_filp_open+0x20b/0x470 [ 3275.913660][T16071] ? __pfx_do_filp_open+0x10/0x10 [ 3275.913716][T16071] ? alloc_fd+0x471/0x7d0 [ 3275.913748][T16071] do_sys_openat2+0x11b/0x1d0 [ 3275.913784][T16071] ? __pfx_do_sys_openat2+0x10/0x10 [ 3275.913821][T16071] ? __up_read+0x1f8/0x750 [ 3275.913855][T16071] __x64_sys_openat+0x174/0x210 [ 3275.913891][T16071] ? __pfx___x64_sys_openat+0x10/0x10 [ 3275.913939][T16071] do_syscall_64+0xcd/0x490 [ 3275.913971][T16071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3275.913995][T16071] RIP: 0033:0x7f11e9d8e969 [ 3275.914018][T16071] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3275.914043][T16071] RSP: 002b:00007f11eab53038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 3275.914066][T16071] RAX: ffffffffffffffda RBX: 00007f11e9fb5fa0 RCX: 00007f11e9d8e969 [ 3275.914083][T16071] RDX: 00000000000e0180 RSI: 0000000000000000 RDI: ffffffffffffff9c [ 3275.914099][T16071] RBP: 00007f11e9e10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 3275.914115][T16071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3275.914130][T16071] R13: 0000000000000000 R14: 00007f11e9fb5fa0 R15: 00007ffc154bfdc8 [ 3275.914160][T16071] [ 3278.101552][T16091] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8007'. [ 3279.807336][T16104] CIFS mount error: No usable UNC path provided in device string! [ 3279.807336][T16104] [ 3280.214274][T16104] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 3285.517196][T16173] FAULT_INJECTION: forcing a failure. [ 3285.517196][T16173] name fail_futex, interval 1, probability 0, space 0, times 0 [ 3285.623310][T16173] CPU: 0 UID: 0 PID: 16173 Comm: syz.1.8024 Tainted: G U 6.15.0-syzkaller-10402-g4cb6c8af8591 #0 PREEMPT(full) [ 3285.623352][T16173] Tainted: [U]=USER [ 3285.623360][T16173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 3285.623376][T16173] Call Trace: [ 3285.623383][T16173] [ 3285.623393][T16173] dump_stack_lvl+0x16c/0x1f0 [ 3285.623426][T16173] should_fail_ex+0x512/0x640 [ 3285.623467][T16173] get_futex_key+0x1d0/0x1540 [ 3285.623507][T16173] ? find_held_lock+0x2b/0x80 [ 3285.623540][T16173] ? __pfx_get_futex_key+0x10/0x10 [ 3285.623579][T16173] ? do_raw_spin_unlock+0x172/0x230 [ 3285.623610][T16173] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 3285.623640][T16173] futex_wait_setup+0x9d/0x550 [ 3285.623677][T16173] __futex_wait+0x194/0x2f0 [ 3285.623706][T16173] ? __pfx___futex_wait+0x10/0x10 [ 3285.623732][T16173] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 3285.623757][T16173] ? lockdep_hardirqs_on+0x7c/0x110 [ 3285.623788][T16173] ? __pfx_futex_wake_mark+0x10/0x10 [ 3285.623832][T16173] futex_wait+0xe8/0x380 [ 3285.623859][T16173] ? __pfx_futex_wait+0x10/0x10 [ 3285.623893][T16173] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 3285.623933][T16173] do_futex+0x229/0x350 [ 3285.623955][T16173] ? __pfx_do_futex+0x10/0x10 [ 3285.623997][T16173] ? __up_read+0x1f8/0x750 [ 3285.624036][T16173] __x64_sys_futex+0x1e0/0x4c0 [ 3285.624062][T16173] ? __pfx___x64_sys_futex+0x10/0x10 [ 3285.624086][T16173] ? madvise_unlock+0xf6/0x190 [ 3285.624125][T16173] ? do_madvise+0x11c/0x170 [ 3285.624164][T16173] do_syscall_64+0xcd/0x490 [ 3285.624195][T16173] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3285.624220][T16173] RIP: 0033:0x7f5dd1f8e969 [ 3285.624243][T16173] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3285.624267][T16173] RSP: 002b:00007f5dd2d800e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3285.624291][T16173] RAX: ffffffffffffffda RBX: 00007f5dd21b5fa8 RCX: 00007f5dd1f8e969 [ 3285.624308][T16173] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f5dd21b5fa8 [ 3285.624324][T16173] RBP: 00007f5dd21b5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 3285.624340][T16173] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5dd21b5fac [ 3285.624356][T16173] R13: 0000000000000000 R14: 00007ffd0225f8e0 R15: 00007ffd0225f9c8 [ 3285.624387][T16173] [ 3287.196746][T16181] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8025'. [ 3290.134236][T16198] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8031'. [ 3290.171670][T16198] netlink: 93 bytes leftover after parsing attributes in process `syz.0.8031'. [ 3291.452791][T16214] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8036'. [ 3291.656012][T16220] FAULT_INJECTION: forcing a failure. [ 3291.656012][T16220] name failslab, interval 1, probability 0, space 0, times 0 [ 3291.761179][T16220] CPU: 0 UID: 0 PID: 16220 Comm: syz.1.8039 Tainted: G U 6.15.0-syzkaller-10402-g4cb6c8af8591 #0 PREEMPT(full) [ 3291.761218][T16220] Tainted: [U]=USER [ 3291.761226][T16220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 3291.761241][T16220] Call Trace: [ 3291.761249][T16220] [ 3291.761259][T16220] dump_stack_lvl+0x16c/0x1f0 [ 3291.761292][T16220] should_fail_ex+0x512/0x640 [ 3291.761337][T16220] should_failslab+0xc2/0x120 [ 3291.761369][T16220] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 3291.761399][T16220] ? skb_clone+0x190/0x3f0 [ 3291.761432][T16220] skb_clone+0x190/0x3f0 [ 3291.761462][T16220] netlink_deliver_tap+0xabd/0xd30 [ 3291.761502][T16220] netlink_unicast+0x5df/0x7f0 [ 3291.761540][T16220] ? __pfx_netlink_unicast+0x10/0x10 [ 3291.761584][T16220] netlink_sendmsg+0x8d1/0xdd0 [ 3291.761623][T16220] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3291.761670][T16220] ____sys_sendmsg+0xa95/0xc70 [ 3291.761707][T16220] ? copy_msghdr_from_user+0x10a/0x160 [ 3291.761736][T16220] ? __pfx_____sys_sendmsg+0x10/0x10 [ 3291.761787][T16220] ___sys_sendmsg+0x134/0x1d0 [ 3291.761817][T16220] ? __pfx____sys_sendmsg+0x10/0x10 [ 3291.761847][T16220] ? __lock_acquire+0x622/0x1c90 [ 3291.761907][T16220] __sys_sendmsg+0x16d/0x220 [ 3291.761936][T16220] ? __pfx___sys_sendmsg+0x10/0x10 [ 3291.761984][T16220] do_syscall_64+0xcd/0x490 [ 3291.762016][T16220] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3291.762040][T16220] RIP: 0033:0x7f5dd1f8e969 [ 3291.762058][T16220] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3291.762082][T16220] RSP: 002b:00007f5dd2d5f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3291.762104][T16220] RAX: ffffffffffffffda RBX: 00007f5dd21b6080 RCX: 00007f5dd1f8e969 [ 3291.762120][T16220] RDX: 0000000000000060 RSI: 0000200000002f40 RDI: 0000000000000003 [ 3291.762135][T16220] RBP: 00007f5dd2d5f090 R08: 0000000000000000 R09: 0000000000000000 [ 3291.762150][T16220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3291.762165][T16220] R13: 0000000000000000 R14: 00007f5dd21b6080 R15: 00007ffd0225f9c8 [ 3291.762195][T16220] [ 3291.981075][ C0] vkms_vblank_simulate: vblank timer overrun [ 3296.914808][T16269] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8048'. [ 3297.036646][T16270] netlink: 93 bytes leftover after parsing attributes in process `syz.2.8048'. [ 3299.089367][T16286] sd 0:0:1:0: PR command failed: 1026 [ 3299.094825][T16286] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 3299.162372][T16286] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 3300.325637][T16302] FAULT_INJECTION: forcing a failure. [ 3300.325637][T16302] name failslab, interval 1, probability 0, space 0, times 0 [ 3300.415895][T16302] CPU: 0 UID: 0 PID: 16302 Comm: syz.0.8057 Tainted: G U 6.15.0-syzkaller-10402-g4cb6c8af8591 #0 PREEMPT(full) [ 3300.415936][T16302] Tainted: [U]=USER [ 3300.415945][T16302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 3300.415959][T16302] Call Trace: [ 3300.415967][T16302] [ 3300.415977][T16302] dump_stack_lvl+0x16c/0x1f0 [ 3300.416009][T16302] should_fail_ex+0x512/0x640 [ 3300.416043][T16302] ? __kmalloc_noprof+0xbf/0x510 [ 3300.416073][T16302] ? alloc_pipe_info+0x1ec/0x590 [ 3300.416100][T16302] should_failslab+0xc2/0x120 [ 3300.416131][T16302] __kmalloc_noprof+0xd2/0x510 [ 3300.416158][T16302] ? bpf_lsm_capable+0x9/0x10 [ 3300.416181][T16302] ? security_capable+0x7e/0x260 [ 3300.416222][T16302] alloc_pipe_info+0x1ec/0x590 [ 3300.416252][T16302] splice_direct_to_actor+0x77d/0xa30 [ 3300.416294][T16302] ? __pfx_direct_splice_actor+0x10/0x10 [ 3300.416319][T16302] ? __pfx_aa_file_perm+0x10/0x10 [ 3300.416351][T16302] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 3300.416388][T16302] ? get_pid_task+0xfc/0x250 [ 3300.416420][T16302] do_splice_direct+0x174/0x240 [ 3300.416460][T16302] ? __pfx_do_splice_direct+0x10/0x10 [ 3300.416506][T16302] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 3300.416549][T16302] ? rw_verify_area+0xcf/0x680 [ 3300.416589][T16302] do_sendfile+0xb06/0xe50 [ 3300.416618][T16302] ? __pfx_do_sendfile+0x10/0x10 [ 3300.416646][T16302] ? find_held_lock+0x2b/0x80 [ 3300.416682][T16302] __x64_sys_sendfile64+0x1d8/0x220 [ 3300.416712][T16302] ? ksys_write+0x1ac/0x250 [ 3300.416736][T16302] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 3300.416776][T16302] do_syscall_64+0xcd/0x490 [ 3300.416807][T16302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3300.416831][T16302] RIP: 0033:0x7f11e9d8e969 [ 3300.416850][T16302] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3300.416874][T16302] RSP: 002b:00007f11eab53038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 3300.416897][T16302] RAX: ffffffffffffffda RBX: 00007f11e9fb5fa0 RCX: 00007f11e9d8e969 [ 3300.416913][T16302] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 3300.416928][T16302] RBP: 00007f11eab53090 R08: 0000000000000000 R09: 0000000000000000 [ 3300.416943][T16302] R10: 0000000001000200 R11: 0000000000000246 R12: 0000000000000001 [ 3300.416958][T16302] R13: 0000000000000000 R14: 00007f11e9fb5fa0 R15: 00007ffc154bfdc8 [ 3300.416987][T16302] [ 3300.935594][T16300] warning: `syz.3.8056' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 3304.206324][T16340] Setting dangerous option i915.mitigations - tainting kernel [ 3304.729359][T16347] openvswitch: netlink: IPv4 tunnel dst address is zero [ 3305.237592][T16357] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input141 [ 3305.290250][T16342] could not allocate digest TFM handle [ 3306.758806][T16358] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input142 [ 3308.191755][T16376] Setting dangerous option i915.mitigations - tainting kernel [ 3310.407904][T16413] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input143 [ 3310.963752][T16418] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input144 [ 3312.748680][T16437] FAULT_INJECTION: forcing a failure. [ 3312.748680][T16437] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3312.830866][T16437] CPU: 0 UID: 0 PID: 16437 Comm: syz.1.8088 Tainted: G U 6.15.0-syzkaller-10402-g4cb6c8af8591 #0 PREEMPT(full) [ 3312.830906][T16437] Tainted: [U]=USER [ 3312.830914][T16437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 3312.830929][T16437] Call Trace: [ 3312.830936][T16437] [ 3312.830946][T16437] dump_stack_lvl+0x16c/0x1f0 [ 3312.830979][T16437] should_fail_ex+0x512/0x640 [ 3312.831018][T16437] should_fail_alloc_page+0xe7/0x130 [ 3312.831053][T16437] prepare_alloc_pages+0x3c2/0x610 [ 3312.831095][T16437] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 3312.831127][T16437] ? is_bpf_text_address+0x94/0x1a0 [ 3312.831155][T16437] ? kernel_text_address+0x8d/0x100 [ 3312.831186][T16437] ? __kernel_text_address+0xd/0x40 [ 3312.831215][T16437] ? unwind_get_return_address+0x59/0xa0 [ 3312.831246][T16437] ? arch_stack_walk+0xa6/0x100 [ 3312.831280][T16437] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 3312.831311][T16437] ? __lock_acquire+0x622/0x1c90 [ 3312.831340][T16437] ? stack_depot_save_flags+0x28/0xa40 [ 3312.831386][T16437] ? look_up_lock_class+0x59/0x150 [ 3312.831415][T16437] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 3312.831444][T16437] ? policy_nodemask+0xea/0x4e0 [ 3312.831476][T16437] alloc_pages_mpol+0x1fb/0x550 [ 3312.831507][T16437] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 3312.831545][T16437] alloc_pages_noprof+0x131/0x390 [ 3312.831576][T16437] __pmd_alloc+0x3f/0x910 [ 3312.831614][T16437] __handle_mm_fault+0xaac/0x5450 [ 3312.831649][T16437] ? __pfx___handle_mm_fault+0x10/0x10 [ 3312.831690][T16437] ? find_vma+0xbf/0x140 [ 3312.831722][T16437] ? __pfx_find_vma+0x10/0x10 [ 3312.831759][T16437] handle_mm_fault+0x3fe/0xad0 [ 3312.831789][T16437] do_user_addr_fault+0x7a6/0x1370 [ 3312.831818][T16437] ? rcu_is_watching+0x12/0xc0 [ 3312.831854][T16437] exc_page_fault+0x5c/0xb0 [ 3312.831880][T16437] asm_exc_page_fault+0x26/0x30 [ 3312.831904][T16437] RIP: 0010:rep_movs_alternative+0x30/0x90 [ 3312.831942][T16437] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 3312.831966][T16437] RSP: 0018:ffffc9000432f9f8 EFLAGS: 00050206 [ 3312.831985][T16437] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000038 [ 3312.832000][T16437] RDX: fffff52000865f50 RSI: 0000000000000000 RDI: ffffc9000432fa48 [ 3312.832016][T16437] RBP: 0000000000000038 R08: 0000000000000001 R09: fffff52000865f4f [ 3312.832032][T16437] R10: ffffc9000432fa7f R11: 0000000000000001 R12: 0000000000000000 [ 3312.832047][T16437] R13: ffffc9000432fa48 R14: ffffc9000432fb40 R15: ffffc9000432fa48 [ 3312.832078][T16437] _copy_from_user+0x98/0xd0 [ 3312.832117][T16437] copy_msghdr_from_user+0x98/0x160 [ 3312.832147][T16437] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 3312.832182][T16437] ? __pfx__kstrtoull+0x10/0x10 [ 3312.832220][T16437] ___sys_sendmsg+0xfe/0x1d0 [ 3312.832250][T16437] ? __pfx____sys_sendmsg+0x10/0x10 [ 3312.832293][T16437] ? find_held_lock+0x2b/0x80 [ 3312.832336][T16437] ? proc_fail_nth_write+0x9f/0x250 [ 3312.832378][T16437] ? find_held_lock+0x2b/0x80 [ 3312.832413][T16437] __sys_sendmmsg+0x200/0x420 [ 3312.832445][T16437] ? __pfx___sys_sendmmsg+0x10/0x10 [ 3312.832482][T16437] ? find_held_lock+0x2b/0x80 [ 3312.832529][T16437] ? ksys_write+0x1ac/0x250 [ 3312.832553][T16437] ? __pfx_ksys_write+0x10/0x10 [ 3312.832584][T16437] __x64_sys_sendmmsg+0x9c/0x100 [ 3312.832612][T16437] ? lockdep_hardirqs_on+0x7c/0x110 [ 3312.832639][T16437] do_syscall_64+0xcd/0x490 [ 3312.832669][T16437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3312.832692][T16437] RIP: 0033:0x7f5dd1f8e969 [ 3312.832710][T16437] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3312.832733][T16437] RSP: 002b:00007f5dd2d80038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 3312.832755][T16437] RAX: ffffffffffffffda RBX: 00007f5dd21b5fa0 RCX: 00007f5dd1f8e969 [ 3312.832771][T16437] RDX: 00000000000009a6 RSI: 0000000000000000 RDI: 0000000000000003 [ 3312.832785][T16437] RBP: 00007f5dd2d80090 R08: 0000000000000000 R09: 0000000000000000 [ 3312.832800][T16437] R10: 0000000007000000 R11: 0000000000000246 R12: 0000000000000001 [ 3312.832814][T16437] R13: 0000000000000000 R14: 00007f5dd21b5fa0 R15: 00007ffd0225f9c8 [ 3312.832844][T16437] [ 3313.255471][ C0] vkms_vblank_simulate: vblank timer overrun [ 3314.874632][T16465] FAULT_INJECTION: forcing a failure. [ 3314.874632][T16465] name failslab, interval 1, probability 0, space 0, times 0 [ 3315.001256][T16465] CPU: 0 UID: 0 PID: 16465 Comm: syz.3.8095 Tainted: G U 6.15.0-syzkaller-10402-g4cb6c8af8591 #0 PREEMPT(full) [ 3315.001297][T16465] Tainted: [U]=USER [ 3315.001305][T16465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 3315.001320][T16465] Call Trace: [ 3315.001327][T16465] [ 3315.001337][T16465] dump_stack_lvl+0x16c/0x1f0 [ 3315.001369][T16465] should_fail_ex+0x512/0x640 [ 3315.001404][T16465] ? fs_reclaim_acquire+0xae/0x150 [ 3315.001444][T16465] ? tomoyo_encode2+0x100/0x3e0 [ 3315.001474][T16465] should_failslab+0xc2/0x120 [ 3315.001505][T16465] __kmalloc_noprof+0xd2/0x510 [ 3315.001533][T16465] ? d_absolute_path+0x136/0x1a0 [ 3315.001570][T16465] tomoyo_encode2+0x100/0x3e0 [ 3315.001605][T16465] tomoyo_encode+0x29/0x50 [ 3315.001635][T16465] tomoyo_realpath_from_path+0x18f/0x6e0 [ 3315.001670][T16465] ? tomoyo_profile+0x47/0x60 [ 3315.001708][T16465] tomoyo_path_number_perm+0x245/0x580 [ 3315.001734][T16465] ? tomoyo_path_number_perm+0x237/0x580 [ 3315.001763][T16465] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 3315.001792][T16465] ? find_held_lock+0x2b/0x80 [ 3315.001850][T16465] ? find_held_lock+0x2b/0x80 [ 3315.001881][T16465] ? hook_file_ioctl_common+0x145/0x410 [ 3315.001912][T16465] ? __fget_files+0x20e/0x3c0 [ 3315.001941][T16465] security_file_ioctl+0x9b/0x240 [ 3315.001971][T16465] __x64_sys_ioctl+0xb7/0x210 [ 3315.002009][T16465] do_syscall_64+0xcd/0x490 [ 3315.002041][T16465] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3315.002065][T16465] RIP: 0033:0x7fe52bb8e969 [ 3315.002083][T16465] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3315.002106][T16465] RSP: 002b:00007fe52ca48038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3315.002152][T16465] RAX: ffffffffffffffda RBX: 00007fe52bdb6080 RCX: 00007fe52bb8e969 [ 3315.002168][T16465] RDX: 0000000000000003 RSI: 00000000400454d9 RDI: 04000000000000c8 [ 3315.002183][T16465] RBP: 00007fe52ca48090 R08: 0000000000000000 R09: 0000000000000000 [ 3315.002198][T16465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3315.002213][T16465] R13: 0000000000000000 R14: 00007fe52bdb6080 R15: 00007fff702b5cb8 [ 3315.002243][T16465] [ 3315.002263][T16465] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3315.326695][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 3315.334003][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 3315.345851][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 3315.358225][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 3315.368531][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 3315.384637][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 3315.393092][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 3315.399547][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 3316.622859][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 3316.629407][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 3316.668348][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 3316.676433][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 3316.718357][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 3316.734913][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 3316.750959][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 3316.768703][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 3319.605689][T16493] syz.0.8102 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 3320.246689][T16503] FAULT_INJECTION: forcing a failure. [ 3320.246689][T16503] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3320.279824][T16500] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8104'. [ 3320.346380][T16503] CPU: 0 UID: 0 PID: 16503 Comm: syz.3.8105 Tainted: G U 6.15.0-syzkaller-10402-g4cb6c8af8591 #0 PREEMPT(full) [ 3320.346421][T16503] Tainted: [U]=USER [ 3320.346429][T16503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 3320.346444][T16503] Call Trace: [ 3320.346452][T16503] [ 3320.346462][T16503] dump_stack_lvl+0x16c/0x1f0 [ 3320.346495][T16503] should_fail_ex+0x512/0x640 [ 3320.346533][T16503] _copy_to_user+0x32/0xd0 [ 3320.346571][T16503] simple_read_from_buffer+0xcb/0x170 [ 3320.346611][T16503] proc_fail_nth_read+0x197/0x270 [ 3320.346649][T16503] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 3320.346693][T16503] ? rw_verify_area+0xcf/0x680 [ 3320.346730][T16503] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 3320.346767][T16503] vfs_read+0x1e1/0xc60 [ 3320.346795][T16503] ? __pfx___mutex_lock+0x10/0x10 [ 3320.346824][T16503] ? __pfx_vfs_read+0x10/0x10 [ 3320.346857][T16503] ? __fget_files+0x20e/0x3c0 [ 3320.346888][T16503] ksys_read+0x12a/0x250 [ 3320.346911][T16503] ? __pfx_ksys_read+0x10/0x10 [ 3320.346943][T16503] do_syscall_64+0xcd/0x490 [ 3320.346974][T16503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3320.346998][T16503] RIP: 0033:0x7fe52bb8d37c [ 3320.347016][T16503] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 3320.347040][T16503] RSP: 002b:00007fe52ca69030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3320.347062][T16503] RAX: ffffffffffffffda RBX: 00007fe52bdb5fa0 RCX: 00007fe52bb8d37c [ 3320.347079][T16503] RDX: 000000000000000f RSI: 00007fe52ca690a0 RDI: 0000000000000003 [ 3320.347094][T16503] RBP: 00007fe52ca69090 R08: 0000000000000000 R09: 0000000000000000 [ 3320.347109][T16503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3320.347124][T16503] R13: 0000000000000001 R14: 00007fe52bdb5fa0 R15: 00007fff702b5cb8 [ 3320.347153][T16503] [ 3321.640772][T16517] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input145 [ 3322.011590][T16523] FAULT_INJECTION: forcing a failure. [ 3322.011590][T16523] name failslab, interval 1, probability 0, space 0, times 0 [ 3322.104490][T16523] CPU: 0 UID: 0 PID: 16523 Comm: syz.3.8110 Tainted: G U 6.15.0-syzkaller-10402-g4cb6c8af8591 #0 PREEMPT(full) [ 3322.104531][T16523] Tainted: [U]=USER [ 3322.104539][T16523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 3322.104554][T16523] Call Trace: [ 3322.104562][T16523] [ 3322.104577][T16523] dump_stack_lvl+0x16c/0x1f0 [ 3322.104609][T16523] should_fail_ex+0x512/0x640 [ 3322.104644][T16523] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 3322.104671][T16523] should_failslab+0xc2/0x120 [ 3322.104702][T16523] __kmalloc_cache_noprof+0x6a/0x3e0 [ 3322.104727][T16523] ? alloc_pipe_info+0x10e/0x590 [ 3322.104760][T16523] alloc_pipe_info+0x10e/0x590 [ 3322.104790][T16523] splice_direct_to_actor+0x77d/0xa30 [ 3322.104831][T16523] ? __pfx_direct_splice_actor+0x10/0x10 [ 3322.104857][T16523] ? __pfx_aa_file_perm+0x10/0x10 [ 3322.104889][T16523] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 3322.104926][T16523] ? get_pid_task+0xfc/0x250 [ 3322.104959][T16523] do_splice_direct+0x174/0x240 [ 3322.104997][T16523] ? __pfx_do_splice_direct+0x10/0x10 [ 3322.105036][T16523] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 3322.105079][T16523] ? rw_verify_area+0xcf/0x680 [ 3322.105119][T16523] do_sendfile+0xb06/0xe50 [ 3322.105148][T16523] ? __pfx_do_sendfile+0x10/0x10 [ 3322.105172][T16523] ? __fget_files+0x20e/0x3c0 [ 3322.105203][T16523] __x64_sys_sendfile64+0x1d8/0x220 [ 3322.105233][T16523] ? ksys_write+0x1ac/0x250 [ 3322.105257][T16523] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 3322.105297][T16523] do_syscall_64+0xcd/0x490 [ 3322.105329][T16523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3322.105353][T16523] RIP: 0033:0x7fe52bb8e969 [ 3322.105372][T16523] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3322.105396][T16523] RSP: 002b:00007fe52ca69038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 3322.105419][T16523] RAX: ffffffffffffffda RBX: 00007fe52bdb5fa0 RCX: 00007fe52bb8e969 [ 3322.105435][T16523] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 3322.105450][T16523] RBP: 00007fe52ca69090 R08: 0000000000000000 R09: 0000000000000000 [ 3322.105465][T16523] R10: 00000000ffffffff R11: 0000000000000246 R12: 0000000000000001 [ 3322.105480][T16523] R13: 0000000000000000 R14: 00007fe52bdb5fa0 R15: 00007fff702b5cb8 [ 3322.105514][T16523] [ 3322.961300][T16527] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8111'. [ 3323.005269][T16527] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3323.030009][T16527] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3323.306703][T16527] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3323.331463][T16527] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3323.452839][T16519] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input146 [ 3323.765112][T16537] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8114'. [ 3323.911653][T16537] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3324.100233][T16537] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3326.781532][T16537] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3326.806434][T16537] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3329.745789][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 3329.763008][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 3329.962393][T16582] FAULT_INJECTION: forcing a failure. [ 3329.962393][T16582] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3330.260293][T16582] CPU: 0 UID: 0 PID: 16582 Comm: syz.2.8124 Tainted: G U 6.15.0-syzkaller-10402-g4cb6c8af8591 #0 PREEMPT(full) [ 3330.260333][T16582] Tainted: [U]=USER [ 3330.260342][T16582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 3330.260356][T16582] Call Trace: [ 3330.260364][T16582] [ 3330.260374][T16582] dump_stack_lvl+0x16c/0x1f0 [ 3330.260406][T16582] should_fail_ex+0x512/0x640 [ 3330.260445][T16582] strncpy_from_user+0x3b/0x2e0 [ 3330.260480][T16582] getname_flags.part.0+0x8f/0x550 [ 3330.260519][T16582] getname_flags+0x93/0xf0 [ 3330.260543][T16582] do_sys_openat2+0xb8/0x1d0 [ 3330.260578][T16582] ? __pfx_do_sys_openat2+0x10/0x10 [ 3330.260615][T16582] ? __fget_files+0x20e/0x3c0 [ 3330.260644][T16582] __x64_sys_openat+0x174/0x210 [ 3330.260679][T16582] ? __pfx___x64_sys_openat+0x10/0x10 [ 3330.260714][T16582] ? ksys_write+0x1ac/0x250 [ 3330.260749][T16582] do_syscall_64+0xcd/0x490 [ 3330.260807][T16582] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3330.260832][T16582] RIP: 0033:0x7fb13978e969 [ 3330.260851][T16582] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3330.260875][T16582] RSP: 002b:00007fb13a660038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 3330.260897][T16582] RAX: ffffffffffffffda RBX: 00007fb1399b5fa0 RCX: 00007fb13978e969 [ 3330.260914][T16582] RDX: 0000000000000000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 3330.260930][T16582] RBP: 00007fb13a660090 R08: 0000000000000000 R09: 0000000000000000 [ 3330.260945][T16582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3330.260960][T16582] R13: 0000000000000000 R14: 00007fb1399b5fa0 R15: 00007ffcde1e2108 [ 3330.260989][T16582] [ 3333.634943][T16617] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input147 [ 3333.646188][T16609] FAULT_INJECTION: forcing a failure. [ 3333.646188][T16609] name failslab, interval 1, probability 0, space 0, times 0 [ 3333.757950][T16609] CPU: 0 UID: 0 PID: 16609 Comm: syz.2.8129 Tainted: G U 6.15.0-syzkaller-10402-g4cb6c8af8591 #0 PREEMPT(full) [ 3333.757996][T16609] Tainted: [U]=USER [ 3333.758003][T16609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 3333.758018][T16609] Call Trace: [ 3333.758026][T16609] [ 3333.758034][T16609] dump_stack_lvl+0x16c/0x1f0 [ 3333.758067][T16609] should_fail_ex+0x512/0x640 [ 3333.758100][T16609] ? fs_reclaim_acquire+0xae/0x150 [ 3333.758139][T16609] ? tomoyo_encode2+0x100/0x3e0 [ 3333.758168][T16609] should_failslab+0xc2/0x120 [ 3333.758200][T16609] __kmalloc_noprof+0xd2/0x510 [ 3333.758227][T16609] ? d_absolute_path+0x136/0x1a0 [ 3333.758264][T16609] tomoyo_encode2+0x100/0x3e0 [ 3333.758299][T16609] tomoyo_encode+0x29/0x50 [ 3333.758328][T16609] tomoyo_realpath_from_path+0x18f/0x6e0 [ 3333.758369][T16609] tomoyo_get_exe+0x63/0xa0 [ 3333.758392][T16609] tomoyo_write_control+0x689/0x1430 [ 3333.758441][T16609] ? __pfx_tomoyo_write_control+0x10/0x10 [ 3333.758491][T16609] ? __pfx_tomoyo_write+0x10/0x10 [ 3333.758522][T16609] vfs_write+0x2a0/0x1150 [ 3333.758552][T16609] ? __pfx___mutex_lock+0x10/0x10 [ 3333.758581][T16609] ? __pfx_vfs_write+0x10/0x10 [ 3333.758615][T16609] ? __fget_files+0x20e/0x3c0 [ 3333.758647][T16609] ksys_write+0x12a/0x250 [ 3333.758672][T16609] ? __pfx_ksys_write+0x10/0x10 [ 3333.758706][T16609] do_syscall_64+0xcd/0x490 [ 3333.758737][T16609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3333.758762][T16609] RIP: 0033:0x7fb13978e969 [ 3333.758780][T16609] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3333.758804][T16609] RSP: 002b:00007fb13a61e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3333.758828][T16609] RAX: ffffffffffffffda RBX: 00007fb1399b6160 RCX: 00007fb13978e969 [ 3333.758844][T16609] RDX: 000000000000ffd8 RSI: 0000000000000000 RDI: 0000000000000003 [ 3333.758859][T16609] RBP: 00007fb13a61e090 R08: 0000000000000000 R09: 0000000000000000 [ 3333.758874][T16609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3333.758889][T16609] R13: 0000000000000000 R14: 00007fb1399b6160 R15: 00007ffcde1e2108 [ 3333.758920][T16609] [ 3335.024336][T16609] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3335.265681][T16620] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input148 [ 3337.692832][ T5845] Bluetooth: hci2: Unable to find connection for big 0xd2 [ 3338.359665][T16671] openvswitch: netlink: IPv4 tunnel dst address is zero [ 3341.545885][ C0] vcan0: j1939_tp_rxtimer: 0xffff888060279c00: rx timeout, send abort [ 3341.929199][T16709] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8149'. [ 3342.051656][ C0] vcan0: j1939_tp_rxtimer: 0xffff888060279c00: abort rx timeout. Force session deactivation [ 3345.473954][T16740] openvswitch: netlink: IPv4 tunnel dst address is zero [ 3347.488608][T16765] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8160'. [ 3347.669472][T16771] FAULT_INJECTION: forcing a failure. [ 3347.669472][T16771] name failslab, interval 1, probability 0, space 0, times 0 [ 3347.736673][T16771] CPU: 0 UID: 0 PID: 16771 Comm: syz.0.8162 Tainted: G U 6.15.0-syzkaller-10402-g4cb6c8af8591 #0 PREEMPT(full) [ 3347.736721][T16771] Tainted: [U]=USER [ 3347.736731][T16771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 3347.736748][T16771] Call Trace: [ 3347.736758][T16771] [ 3347.736769][T16771] dump_stack_lvl+0x16c/0x1f0 [ 3347.736806][T16771] should_fail_ex+0x512/0x640 [ 3347.736846][T16771] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 3347.736885][T16771] should_failslab+0xc2/0x120 [ 3347.736922][T16771] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 3347.736957][T16771] ? __pmd_alloc+0xc3/0x910 [ 3347.737006][T16771] __pmd_alloc+0xc3/0x910 [ 3347.737053][T16771] __handle_mm_fault+0xaac/0x5450 [ 3347.737095][T16771] ? __pfx___handle_mm_fault+0x10/0x10 [ 3347.737152][T16771] ? find_vma+0xbf/0x140 [ 3347.737189][T16771] ? __pfx_find_vma+0x10/0x10 [ 3347.737234][T16771] handle_mm_fault+0x3fe/0xad0 [ 3347.737273][T16771] do_user_addr_fault+0x7a6/0x1370 [ 3347.737304][T16771] ? rcu_is_watching+0x12/0xc0 [ 3347.737340][T16771] exc_page_fault+0x5c/0xb0 [ 3347.737368][T16771] asm_exc_page_fault+0x26/0x30 [ 3347.737391][T16771] RIP: 0010:__get_user_4+0x14/0x20 [ 3347.737421][T16771] Code: 00 00 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 ba 00 f0 ff ff ff 7f 00 00 48 39 d0 48 0f 47 c2 0f 01 cb <8b> 10 31 c0 0f 01 ca e9 90 09 04 00 90 90 90 90 90 90 90 90 90 90 [ 3347.737448][T16771] RSP: 0018:ffffc9000414fc58 EFLAGS: 00050283 [ 3347.737467][T16771] RAX: 0000000000000f15 RBX: 0000000000000000 RCX: ffffc9000414fbfc [ 3347.737483][T16771] RDX: 00007ffffffff000 RSI: ffffffff87325574 RDI: ffffffff8bf51cc0 [ 3347.737499][T16771] RBP: ffffc9000414fee0 R08: b6458f99736bf2f2 R09: 0000000000000000 [ 3347.737515][T16771] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888035b05000 [ 3347.737529][T16771] R13: 1ffff92000829f93 R14: ffff8880296d1518 R15: ffff888029707130 [ 3347.737555][T16771] ? usbdev_ioctl+0x2dd4/0x4070 [ 3347.737603][T16771] usbdev_ioctl+0x2dde/0x4070 [ 3347.737644][T16771] ? __pfx_usbdev_ioctl+0x10/0x10 [ 3347.737682][T16771] ? do_vfs_ioctl+0x523/0x1a60 [ 3347.737718][T16771] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 3347.737773][T16771] ? find_held_lock+0x2b/0x80 [ 3347.737804][T16771] ? hook_file_ioctl_common+0x145/0x410 [ 3347.737836][T16771] ? __fget_files+0x20e/0x3c0 [ 3347.737864][T16771] ? __pfx_usbdev_ioctl+0x10/0x10 [ 3347.737902][T16771] __x64_sys_ioctl+0x18e/0x210 [ 3347.737940][T16771] do_syscall_64+0xcd/0x490 [ 3347.737971][T16771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3347.737995][T16771] RIP: 0033:0x7f11e9d8e969 [ 3347.738013][T16771] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3347.738037][T16771] RSP: 002b:00007f11eab53038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3347.738058][T16771] RAX: ffffffffffffffda RBX: 00007f11e9fb5fa0 RCX: 00007f11e9d8e969 [ 3347.738074][T16771] RDX: 0000000000000f15 RSI: 0000000080045519 RDI: 0000000000000003 [ 3347.738089][T16771] RBP: 00007f11eab53090 R08: 0000000000000000 R09: 0000000000000000 [ 3347.738104][T16771] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3347.738119][T16771] R13: 0000000000000000 R14: 00007f11e9fb5fa0 R15: 00007ffc154bfdc8 [ 3347.738149][T16771] [ 3348.647264][T16788] openvswitch: netlink: IPv4 tunnel dst address is zero [ 3349.630079][T16800] usb usb38: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 3349.630116][T16800] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 3351.921336][T16825] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input149 [ 3352.234238][T16820] kexec: Could not allocate control_code_buffer [ 3352.660095][T16834] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8175'. [ 3353.021113][T16826] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input150 [ 3354.890038][T16867] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8182'. [ 3356.217126][T16876] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8183'. [ 3356.769187][T16887] FAULT_INJECTION: forcing a failure. [ 3356.769187][T16887] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3356.855399][T16887] CPU: 0 UID: 0 PID: 16887 Comm: syz.3.8186 Tainted: G U 6.15.0-syzkaller-10402-g4cb6c8af8591 #0 PREEMPT(full) [ 3356.855441][T16887] Tainted: [U]=USER [ 3356.855448][T16887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 3356.855463][T16887] Call Trace: [ 3356.855471][T16887] [ 3356.855480][T16887] dump_stack_lvl+0x16c/0x1f0 [ 3356.855512][T16887] should_fail_ex+0x512/0x640 [ 3356.855557][T16887] should_fail_alloc_page+0xe7/0x130 [ 3356.855591][T16887] prepare_alloc_pages+0x3c2/0x610 [ 3356.855634][T16887] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 3356.855669][T16887] ? __lock_acquire+0xb8a/0x1c90 [ 3356.855697][T16887] ? arch_stack_walk+0xa6/0x100 [ 3356.855728][T16887] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 3356.855762][T16887] ? do_raw_spin_lock+0x12c/0x2b0 [ 3356.855789][T16887] ? look_up_lock_class+0x59/0x150 [ 3356.855814][T16887] ? find_held_lock+0x2b/0x80 [ 3356.855856][T16887] ? __lock_acquire+0xb8a/0x1c90 [ 3356.855877][T16887] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 3356.855908][T16887] ? policy_nodemask+0xea/0x4e0 [ 3356.855941][T16887] alloc_pages_mpol+0x1fb/0x550 [ 3356.855973][T16887] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 3356.856011][T16887] ? __pfx___pollwait+0x10/0x10 [ 3356.856048][T16887] alloc_pages_noprof+0x131/0x390 [ 3356.856080][T16887] get_free_pages_noprof+0x10/0xb0 [ 3356.856113][T16887] __pollwait+0x295/0x490 [ 3356.856154][T16887] ? __pfx___pollwait+0x10/0x10 [ 3356.856190][T16887] unix_dgram_poll+0x82/0x770 [ 3356.856217][T16887] ? __pfx_unix_dgram_poll+0x10/0x10 [ 3356.856240][T16887] sock_poll+0x15d/0x510 [ 3356.856277][T16887] ? __pfx_sock_poll+0x10/0x10 [ 3356.856311][T16887] do_select+0xd3a/0x17e0 [ 3356.856356][T16887] ? __pfx_do_select+0x10/0x10 [ 3356.856380][T16887] ? __pfx___pollwait+0x10/0x10 [ 3356.856422][T16887] ? __pfx_pollwake+0x10/0x10 [ 3356.856445][T16887] ? __pfx_pollwake+0x10/0x10 [ 3356.856469][T16887] ? __pfx_pollwake+0x10/0x10 [ 3356.856493][T16887] ? __pfx_pollwake+0x10/0x10 [ 3356.856521][T16887] ? __pfx_pollwake+0x10/0x10 [ 3356.856545][T16887] ? __pfx_pollwake+0x10/0x10 [ 3356.856569][T16887] ? __pfx_pollwake+0x10/0x10 [ 3356.856593][T16887] ? __pfx_pollwake+0x10/0x10 [ 3356.856617][T16887] ? __pfx_pollwake+0x10/0x10 [ 3356.856640][T16887] ? find_held_lock+0x2b/0x80 [ 3356.856670][T16887] ? __might_fault+0xe3/0x190 [ 3356.856697][T16887] ? __might_fault+0xe3/0x190 [ 3356.856722][T16887] ? __might_fault+0x13b/0x190 [ 3356.856759][T16887] ? core_sys_select+0x453/0xc10 [ 3356.856781][T16887] core_sys_select+0x453/0xc10 [ 3356.856811][T16887] ? __pfx_core_sys_select+0x10/0x10 [ 3356.856840][T16887] ? proc_fail_nth_write+0x9f/0x250 [ 3356.856902][T16887] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 3356.856939][T16887] kern_select+0x15d/0x1e0 [ 3356.856962][T16887] ? __pfx_kern_select+0x10/0x10 [ 3356.856989][T16887] ? __pfx_ksys_write+0x10/0x10 [ 3356.857019][T16887] __x64_sys_select+0xbd/0x160 [ 3356.857041][T16887] ? do_syscall_64+0x91/0x490 [ 3356.857068][T16887] ? lockdep_hardirqs_on+0x7c/0x110 [ 3356.857095][T16887] do_syscall_64+0xcd/0x490 [ 3356.857124][T16887] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3356.857149][T16887] RIP: 0033:0x7fe52bb8e969 [ 3356.857168][T16887] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3356.857192][T16887] RSP: 002b:00007fe52ca69038 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 3356.857214][T16887] RAX: ffffffffffffffda RBX: 00007fe52bdb5fa0 RCX: 00007fe52bb8e969 [ 3356.857231][T16887] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000e [ 3356.857245][T16887] RBP: 00007fe52ca69090 R08: 0000000000000000 R09: 0000000000000000 [ 3356.857260][T16887] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 3356.857275][T16887] R13: 0000000000000000 R14: 00007fe52bdb5fa0 R15: 00007fff702b5cb8 [ 3356.857304][T16887] [ 3359.159467][T16916] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input151 [ 3359.860434][T16921] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input152 [ 3359.935801][T16928] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8195'. [ 3359.981270][T16928] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3360.023382][T16928] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3360.126310][T16928] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3360.165262][T16928] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3362.990586][T16961] netlink: 342 bytes leftover after parsing attributes in process `syz.3.8206'. [ 3366.050139][T17006] ubi: mtd0 is already attached to ubi0 [ 3367.570151][T17027] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8223'. [ 3368.172987][T17044] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8225'. [ 3368.253067][T17045] netlink: 93 bytes leftover after parsing attributes in process `syz.0.8225'. [ 3368.340184][T17049] [U]  [ 3368.343044][T17049] [U] [ 3368.345770][T17049] [U] [ 3368.348489][T17049] [U] [ 3368.376072][T17049] [U] [ 3368.378867][T17049] [U] [ 3368.381603][T17049] [U] [ 3368.384332][T17049] [U] [ 3368.435345][T17049] FAULT_INJECTION: forcing a failure. [ 3368.435345][T17049] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3368.514352][T17049] CPU: 0 UID: 0 PID: 17049 Comm: syz.1.8227 Tainted: G U 6.15.0-syzkaller-10402-g4cb6c8af8591 #0 PREEMPT(full) [ 3368.514392][T17049] Tainted: [U]=USER [ 3368.514400][T17049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 3368.514414][T17049] Call Trace: [ 3368.514423][T17049] [ 3368.514433][T17049] dump_stack_lvl+0x16c/0x1f0 [ 3368.514464][T17049] should_fail_ex+0x512/0x640 [ 3368.514504][T17049] _copy_from_iter+0x29f/0x16f0 [ 3368.514548][T17049] ? __pfx__copy_from_iter+0x10/0x10 [ 3368.514591][T17049] ? __pfx___might_resched+0x10/0x10 [ 3368.514642][T17049] file_tty_write.constprop.0+0x486/0x9b0 [ 3368.514687][T17049] vfs_write+0x6c7/0x1150 [ 3368.514715][T17049] ? __pfx_tty_write+0x10/0x10 [ 3368.514751][T17049] ? __pfx_vfs_write+0x10/0x10 [ 3368.514774][T17049] ? find_held_lock+0x2b/0x80 [ 3368.514825][T17049] ksys_write+0x12a/0x250 [ 3368.514850][T17049] ? __pfx_ksys_write+0x10/0x10 [ 3368.514883][T17049] do_syscall_64+0xcd/0x490 [ 3368.514914][T17049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3368.514939][T17049] RIP: 0033:0x7f5dd1f8e969 [ 3368.514958][T17049] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3368.514981][T17049] RSP: 002b:00007f5dd2d80038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3368.515004][T17049] RAX: ffffffffffffffda RBX: 00007f5dd21b5fa0 RCX: 00007f5dd1f8e969 [ 3368.515020][T17049] RDX: 000000000000fdef RSI: 0000000000000000 RDI: 0000000000000003 [ 3368.515035][T17049] RBP: 00007f5dd2d80090 R08: 0000000000000000 R09: 0000000000000000 [ 3368.515050][T17049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3368.515065][T17049] R13: 0000000000000000 R14: 00007f5dd21b5fa0 R15: 00007ffd0225f9c8 [ 3368.515096][T17049] [ 3369.672751][T17053] [U] [ 3371.886952][T17101] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8239'. [ 3371.968524][T17103] netlink: 93 bytes leftover after parsing attributes in process `syz.1.8239'. [ 3372.694396][T17111] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input153 [ 3373.258138][T17119] FAULT_INJECTION: forcing a failure. [ 3373.258138][T17119] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3374.147923][T17112] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input154 [ 3374.496073][T17119] CPU: 0 UID: 0 PID: 17119 Comm: syz.2.8245 Tainted: G U 6.15.0-syzkaller-10402-g4cb6c8af8591 #0 PREEMPT(full) [ 3374.496112][T17119] Tainted: [U]=USER [ 3374.496121][T17119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 3374.496134][T17119] Call Trace: [ 3374.496142][T17119] [ 3374.496151][T17119] dump_stack_lvl+0x16c/0x1f0 [ 3374.496183][T17119] should_fail_ex+0x512/0x640 [ 3374.496222][T17119] _copy_to_user+0x32/0xd0 [ 3374.496261][T17119] rng_dev_read+0x1ea/0x810 [ 3374.496286][T17119] ? __pfx_virtio_read+0x10/0x10 [ 3374.496310][T17119] ? __pfx_rng_dev_read+0x10/0x10 [ 3374.496338][T17119] ? bpf_lsm_file_permission+0x9/0x10 [ 3374.496374][T17119] ? security_file_permission+0x71/0x210 [ 3374.496405][T17119] ? rw_verify_area+0xcf/0x680 [ 3374.496442][T17119] ? __pfx_rng_dev_read+0x10/0x10 [ 3374.496465][T17119] vfs_read+0x1e1/0xc60 [ 3374.496495][T17119] ? __pfx_vfs_read+0x10/0x10 [ 3374.496517][T17119] ? find_held_lock+0x2b/0x80 [ 3374.496550][T17119] ? __fget_files+0x204/0x3c0 [ 3374.496578][T17119] ? __fget_files+0x20e/0x3c0 [ 3374.496610][T17119] ksys_read+0x12a/0x250 [ 3374.496633][T17119] ? __pfx_ksys_read+0x10/0x10 [ 3374.496666][T17119] do_syscall_64+0xcd/0x490 [ 3374.496696][T17119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3374.496720][T17119] RIP: 0033:0x7fb13978e969 [ 3374.496739][T17119] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3374.496763][T17119] RSP: 002b:00007fb13a63f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3374.496785][T17119] RAX: ffffffffffffffda RBX: 00007fb1399b6080 RCX: 00007fb13978e969 [ 3374.496802][T17119] RDX: 00000000fffffe82 RSI: 0000200000000040 RDI: 0000000000000002 [ 3374.496817][T17119] RBP: 00007fb13a63f090 R08: 0000000000000000 R09: 0000000000000000 [ 3374.496849][T17119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3374.496869][T17119] R13: 0000000000000000 R14: 00007fb1399b6080 R15: 00007ffcde1e2108 [ 3374.496901][T17119] [ 3377.813824][T17167] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input155 [ 3378.432623][T17168] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input156 [ 3379.727942][T17209] openvswitch: netlink: IPv4 tunnel dst address is zero [ 3380.053146][T17207] could not allocate digest TFM handle [ 3380.736938][T17226] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8269'. [ 3381.234919][T17233] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input157 [ 3381.852038][T17235] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input158 [ 3383.159841][T17254] Setting dangerous option i915.mitigations - tainting kernel [ 3383.704044][T17262] openvswitch: netlink: IPv4 tunnel dst address is zero [ 3384.022257][T17264] could not allocate digest TFM handle [ 3384.879243][T17274] netlink: set zone limit has 8 unknown bytes [ 3386.396000][T17301] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8289'. [ 3386.449547][T17304] netlink: 93 bytes leftover after parsing attributes in process `syz.0.8289'. [ 3388.146706][T17332] Setting dangerous option i915.mitigations - tainting kernel [ 3389.798126][T17349] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8301'. [ 3389.851427][T17353] netlink: 93 bytes leftover after parsing attributes in process `syz.1.8301'. [ 3390.638244][T17365] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8306'. [ 3390.869496][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 3390.876043][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 3391.323724][T17379] vivid-003: ================= START STATUS ================= [ 3391.376132][T17379] vivid-003: Radio HW Seek Mode: Bounded [ 3391.404256][T17379] vivid-003: Radio Programmable HW Seek: false [ 3391.454629][T17379] vivid-003: RDS Rx I/O Mode: Block I/O [ 3391.484681][T17379] vivid-003: Generate RBDS Instead of RDS: false [ 3391.530019][T17379] vivid-003: RDS Reception: true [ 3391.549142][T17379] vivid-003: RDS Program Type: 0 inactive [ 3391.588690][T17379] vivid-003: RDS PS Name: inactive [ 3391.601054][T17379] vivid-003: RDS Radio Text: inactive [ 3391.637717][T17379] vivid-003: RDS Traffic Announcement: false inactive [ 3391.658063][T17379] vivid-003: RDS Traffic Program: false inactive [ 3391.687822][T17379] vivid-003: RDS Music: false inactive [ 3391.727888][T17379] vivid-003: ================== END STATUS ================== [ 3393.451703][T17399] openvswitch: netlink: IPv4 tunnel dst address is zero [ 3393.783077][T17403] Setting dangerous option i915.mitigations - tainting kernel [ 3394.147205][T17394] could not allocate digest TFM handle [ 3395.332645][T17413] binder: 17412:17413 ioctl 4030582b 6 returned -22 [ 3395.388676][T17413] binder: 17412:17413 ioctl c0306201 2000000000c0 returned -11 [ 3395.403619][T17417] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8314'. [ 3395.515136][T17419] netlink: 93 bytes leftover after parsing attributes in process `syz.3.8314'. [ 3396.306411][T17434] FAULT_INJECTION: forcing a failure. [ 3396.306411][T17434] name failslab, interval 1, probability 0, space 0, times 0 [ 3396.443394][T17434] CPU: 0 UID: 0 PID: 17434 Comm: syz.2.8319 Tainted: G U 6.15.0-syzkaller-10402-g4cb6c8af8591 #0 PREEMPT(full) [ 3396.443435][T17434] Tainted: [U]=USER [ 3396.443443][T17434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 3396.443459][T17434] Call Trace: [ 3396.443467][T17434] [ 3396.443476][T17434] dump_stack_lvl+0x16c/0x1f0 [ 3396.443509][T17434] should_fail_ex+0x512/0x640 [ 3396.443543][T17434] ? __kvmalloc_node_noprof+0x122/0x620 [ 3396.443574][T17434] should_failslab+0xc2/0x120 [ 3396.443605][T17434] __kvmalloc_node_noprof+0x135/0x620 [ 3396.443633][T17434] ? seq_read_iter+0x826/0x12c0 [ 3396.443676][T17434] ? seq_read_iter+0x826/0x12c0 [ 3396.443711][T17434] seq_read_iter+0x826/0x12c0 [ 3396.443750][T17434] ? aa_file_perm+0x4d6/0xfb0 [ 3396.443789][T17434] seq_read+0x39e/0x4e0 [ 3396.443826][T17434] ? __pfx_seq_read+0x10/0x10 [ 3396.443861][T17434] ? __lock_acquire+0xb8a/0x1c90 [ 3396.443896][T17434] ? get_pid_task+0xfc/0x250 [ 3396.443936][T17434] full_proxy_read+0x13f/0x200 [ 3396.443968][T17434] ? __pfx_full_proxy_read+0x10/0x10 [ 3396.444001][T17434] vfs_read+0x1e1/0xc60 [ 3396.444030][T17434] ? __pfx___mutex_lock+0x10/0x10 [ 3396.444059][T17434] ? __pfx_vfs_read+0x10/0x10 [ 3396.444092][T17434] ? __fget_files+0x20e/0x3c0 [ 3396.444124][T17434] ksys_read+0x12a/0x250 [ 3396.444148][T17434] ? __pfx_ksys_read+0x10/0x10 [ 3396.444181][T17434] do_syscall_64+0xcd/0x490 [ 3396.444213][T17434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3396.444237][T17434] RIP: 0033:0x7fb13978e969 [ 3396.444256][T17434] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3396.444280][T17434] RSP: 002b:00007fb13a660038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3396.444302][T17434] RAX: ffffffffffffffda RBX: 00007fb1399b5fa0 RCX: 00007fb13978e969 [ 3396.444318][T17434] RDX: 0000000000000051 RSI: 0000200000000080 RDI: 0000000000000004 [ 3396.444333][T17434] RBP: 00007fb13a660090 R08: 0000000000000000 R09: 0000000000000000 [ 3396.444348][T17434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3396.444362][T17434] R13: 0000000000000000 R14: 00007fb1399b5fa0 R15: 00007ffcde1e2108 [ 3396.444396][T17434] [ 3399.229457][T17471] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8325'. [ 3399.336100][T17478] netlink: 93 bytes leftover after parsing attributes in process `syz.2.8325'. [ 3402.880815][T17523] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8338'. [ 3402.934773][T17527] netlink: 93 bytes leftover after parsing attributes in process `syz.0.8338'. [ 3403.394919][T17532] netlink: 330 bytes leftover after parsing attributes in process `syz.3.8340'. [ 3403.518128][T17532] : renamed from lo (while UP) [ 3404.951470][ T5845] Bluetooth: hci4: Malformed LE Event: 0x1d [ 3405.842064][T17563] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8348'. [ 3405.883718][T17563] netlink: 93 bytes leftover after parsing attributes in process `syz.0.8348'. [ 3406.988476][T17580] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input159 [ 3408.349294][T17581] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input160 [ 3410.690446][T17631] FAULT_INJECTION: forcing a failure. [ 3410.690446][T17631] name failslab, interval 1, probability 0, space 0, times 0 [ 3410.746841][T17631] CPU: 0 UID: 0 PID: 17631 Comm: syz.0.8362 Tainted: G U 6.15.0-syzkaller-10402-g4cb6c8af8591 #0 PREEMPT(full) [ 3410.746883][T17631] Tainted: [U]=USER [ 3410.746891][T17631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 3410.746906][T17631] Call Trace: [ 3410.746914][T17631] [ 3410.746923][T17631] dump_stack_lvl+0x16c/0x1f0 [ 3410.746955][T17631] should_fail_ex+0x512/0x640 [ 3410.746988][T17631] ? __kvmalloc_node_noprof+0x122/0x620 [ 3410.747018][T17631] should_failslab+0xc2/0x120 [ 3410.747048][T17631] __kvmalloc_node_noprof+0x135/0x620 [ 3410.747072][T17631] ? __lock_acquire+0xb8a/0x1c90 [ 3410.747095][T17631] ? seq_read_iter+0x826/0x12c0 [ 3410.747136][T17631] ? seq_read_iter+0x826/0x12c0 [ 3410.747169][T17631] seq_read_iter+0x826/0x12c0 [ 3410.747204][T17631] ? __mutex_trylock_common+0xe9/0x250 [ 3410.747239][T17631] proc_reg_read_iter+0x220/0x310 [ 3410.747270][T17631] vfs_read+0x8bf/0xc60 [ 3410.747298][T17631] ? __pfx___mutex_lock+0x10/0x10 [ 3410.747326][T17631] ? __pfx_vfs_read+0x10/0x10 [ 3410.747369][T17631] ksys_read+0x12a/0x250 [ 3410.747392][T17631] ? __pfx_ksys_read+0x10/0x10 [ 3410.747424][T17631] do_syscall_64+0xcd/0x490 [ 3410.747454][T17631] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3410.747478][T17631] RIP: 0033:0x7f11e9d8e969 [ 3410.747497][T17631] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3410.747520][T17631] RSP: 002b:00007f11eab53038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3410.747542][T17631] RAX: ffffffffffffffda RBX: 00007f11e9fb5fa0 RCX: 00007f11e9d8e969 [ 3410.747559][T17631] RDX: 00000000000000fa RSI: 0000200000000180 RDI: 0000000000000003 [ 3410.747574][T17631] RBP: 00007f11eab53090 R08: 0000000000000000 R09: 0000000000000000 [ 3410.747589][T17631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3410.747604][T17631] R13: 0000000000000000 R14: 00007f11e9fb5fa0 R15: 00007ffc154bfdc8 [ 3410.747634][T17631] [ 3411.982508][T17645] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input161 [ 3413.118135][T17648] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input162 [ 3415.072553][T17681] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input163 [ 3415.781828][T17687] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input164 [ 3419.130006][T17754] netlink: 342 bytes leftover after parsing attributes in process `syz.1.8385'. [ 3419.285451][T17761] ================================================================== [ 3419.293711][T17761] BUG: KASAN: slab-out-of-bounds in afs_proc_addr_prefs_write+0x13a9/0x15f0 [ 3419.302420][T17761] Read of size 1 at addr ffff8880212cdca7 by task syz.1.8385/17761 [ 3419.310318][T17761] [ 3419.312666][T17761] CPU: 0 UID: 0 PID: 17761 Comm: syz.1.8385 Tainted: G U 6.15.0-syzkaller-10402-g4cb6c8af8591 #0 PREEMPT(full) [ 3419.312703][T17761] Tainted: [U]=USER [ 3419.312712][T17761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 3419.312727][T17761] Call Trace: [ 3419.312737][T17761] [ 3419.312747][T17761] dump_stack_lvl+0x116/0x1f0 [ 3419.312777][T17761] print_report+0xcd/0x680 [ 3419.312806][T17761] ? __virt_addr_valid+0x81/0x610 [ 3419.312847][T17761] ? __phys_addr+0xe8/0x180 [ 3419.312881][T17761] ? afs_proc_addr_prefs_write+0x13a9/0x15f0 [ 3419.312914][T17761] kasan_report+0xe0/0x110 [ 3419.312953][T17761] ? afs_proc_addr_prefs_write+0x13a9/0x15f0 [ 3419.312991][T17761] afs_proc_addr_prefs_write+0x13a9/0x15f0 [ 3419.313024][T17761] ? __lock_acquire+0xb8a/0x1c90 [ 3419.313052][T17761] ? __pfx_afs_proc_addr_prefs_write+0x10/0x10 [ 3419.313088][T17761] ? find_held_lock+0x2b/0x80 [ 3419.313118][T17761] ? __might_fault+0xe3/0x190 [ 3419.313144][T17761] ? __might_fault+0xe3/0x190 [ 3419.313169][T17761] ? __might_fault+0x13b/0x190 [ 3419.313202][T17761] ? proc_simple_write+0x114/0x1b0 [ 3419.313234][T17761] proc_simple_write+0x114/0x1b0 [ 3419.313266][T17761] ? __pfx_proc_simple_write+0x10/0x10 [ 3419.313299][T17761] proc_reg_write+0x240/0x330 [ 3419.313328][T17761] ? __pfx_proc_reg_write+0x10/0x10 [ 3419.313354][T17761] vfs_writev+0x5df/0xde0 [ 3419.313376][T17761] ? __pfx___mutex_trylock_common+0x10/0x10 [ 3419.313408][T17761] ? __pfx_vfs_writev+0x10/0x10 [ 3419.313432][T17761] ? __mutex_lock+0x1ca/0xb90 [ 3419.313460][T17761] ? kmem_cache_free+0x2d1/0x4d0 [ 3419.313489][T17761] ? __pfx___mutex_lock+0x10/0x10 [ 3419.313522][T17761] ? __fget_files+0x20e/0x3c0 [ 3419.313549][T17761] ? do_writev+0x132/0x340 [ 3419.313570][T17761] do_writev+0x132/0x340 [ 3419.313592][T17761] ? __pfx_do_writev+0x10/0x10 [ 3419.313618][T17761] do_syscall_64+0xcd/0x490 [ 3419.313648][T17761] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3419.313673][T17761] RIP: 0033:0x7f5dd1f8e969 [ 3419.313694][T17761] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3419.313718][T17761] RSP: 002b:00007f5dcfdd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 3419.313741][T17761] RAX: ffffffffffffffda RBX: 00007f5dd21b6400 RCX: 00007f5dd1f8e969 [ 3419.313758][T17761] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000006 [ 3419.313773][T17761] RBP: 00007f5dd2010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 3419.313789][T17761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3419.313804][T17761] R13: 0000000000000000 R14: 00007f5dd21b6400 R15: 00007ffd0225f9c8 [ 3419.313827][T17761] [ 3419.313835][T17761] [ 3419.578785][T17761] Allocated by task 17761: [ 3419.583206][T17761] kasan_save_stack+0x33/0x60 [ 3419.587927][T17761] kasan_save_track+0x14/0x30 [ 3419.592706][T17761] __kasan_kmalloc+0xaa/0xb0 [ 3419.597304][T17761] __kmalloc_node_track_caller_noprof+0x221/0x510 [ 3419.603740][T17761] memdup_user_nul+0x2b/0x120 [ 3419.608433][T17761] proc_simple_write+0xc7/0x1b0 [ 3419.613308][T17761] proc_reg_write+0x240/0x330 [ 3419.618002][T17761] vfs_writev+0x5df/0xde0 [ 3419.622338][T17761] do_writev+0x132/0x340 [ 3419.626586][T17761] do_syscall_64+0xcd/0x490 [ 3419.631102][T17761] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3419.637004][T17761] [ 3419.639331][T17761] The buggy address belongs to the object at ffff8880212cdca0 [ 3419.639331][T17761] which belongs to the cache kmalloc-8 of size 8 [ 3419.653044][T17761] The buggy address is located 0 bytes to the right of [ 3419.653044][T17761] allocated 7-byte region [ffff8880212cdca0, ffff8880212cdca7) [ 3419.667386][T17761] [ 3419.669713][T17761] The buggy address belongs to the physical page: [ 3419.676219][T17761] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x212cd [ 3419.684986][T17761] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 3419.692102][T17761] page_type: f5(slab) [ 3419.696108][T17761] raw: 00fff00000000000 ffff88801b441500 dead000000000100 dead000000000122 [ 3419.704704][T17761] raw: 0000000000000000 0000000080800080 00000000f5000000 0000000000000000 [ 3419.713290][T17761] page dumped because: kasan: bad access detected [ 3419.719714][T17761] page_owner tracks the page as allocated [ 3419.725447][T17761] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 1, tgid 1 (swapper/0), ts 3405713939, free_ts 3324114111 [ 3419.743783][T17761] post_alloc_hook+0x1c0/0x230 [ 3419.748586][T17761] get_page_from_freelist+0x135c/0x3950 [ 3419.754232][T17761] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 3419.760139][T17761] alloc_pages_mpol+0x1fb/0x550 [ 3419.765012][T17761] new_slab+0x23b/0x330 [ 3419.769173][T17761] ___slab_alloc+0xd9c/0x1940 [ 3419.773857][T17761] __slab_alloc.constprop.0+0x56/0xb0 [ 3419.779247][T17761] __kmalloc_noprof+0x2f2/0x510 [ 3419.784200][T17761] acpi_ex_allocate_name_string+0x6f/0x2e0 [ 3419.790033][T17761] acpi_ex_get_name_string+0x131/0x5d0 [ 3419.795520][T17761] acpi_ds_create_operand+0x37d/0x880 [ 3419.800934][T17761] acpi_ds_evaluate_name_path+0x138/0x470 [ 3419.806677][T17761] acpi_ds_exec_end_op+0x3b0/0x1460 [ 3419.811981][T17761] acpi_ps_parse_loop+0x428/0x1d00 [ 3419.817195][T17761] acpi_ps_parse_aml+0x3c1/0xcb0 [ 3419.822158][T17761] acpi_ps_execute_method+0x55a/0xb30 [ 3419.827554][T17761] page last free pid 1 tgid 1 stack trace: [ 3419.833358][T17761] __free_frozen_pages+0x7fe/0x1180 [ 3419.838566][T17761] __put_partials+0x16d/0x1c0 [ 3419.843251][T17761] qlist_free_all+0x4d/0x120 [ 3419.847859][T17761] kasan_quarantine_remove_cache+0xe7/0x180 [ 3419.853782][T17761] kmem_cache_shrink+0xd/0x20 [ 3419.858466][T17761] acpi_os_purge_cache+0x15/0x20 [ 3419.863409][T17761] acpi_purge_cached_objects+0xad/0x100 [ 3419.868972][T17761] acpi_initialize_objects+0x47/0xa0 [ 3419.874327][T17761] acpi_init+0x168/0xb60 [ 3419.878573][T17761] do_one_initcall+0x120/0x6e0 [ 3419.883345][T17761] kernel_init_freeable+0x5c2/0x900 [ 3419.888755][T17761] kernel_init+0x1c/0x2b0 [ 3419.893116][T17761] ret_from_fork+0x5d4/0x6f0 [ 3419.897715][T17761] ret_from_fork_asm+0x1a/0x30 [ 3419.902488][T17761] [ 3419.904811][T17761] Memory state around the buggy address: [ 3419.910441][T17761] ffff8880212cdb80: 05 fc fc fc fa fc fc fc 05 fc fc fc fa fc fc fc [ 3419.918507][T17761] ffff8880212cdc00: 05 fc fc fc 06 fc fc fc 07 fc fc fc fa fc fc fc [ 3419.926591][T17761] >ffff8880212cdc80: 05 fc fc fc 07 fc fc fc 05 fc fc fc fa fc fc fc [ 3419.934676][T17761] ^ [ 3419.939816][T17761] ffff8880212cdd00: 05 fc fc fc 00 fc fc fc fa fc fc fc 05 fc fc fc [ 3419.948067][T17761] ffff8880212cdd80: fa fc fc fc fa fc fc fc 05 fc fc fc 05 fc fc fc [ 3419.956139][T17761] ================================================================== [ 3420.540811][T17761] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 3420.548068][T17761] CPU: 0 UID: 0 PID: 17761 Comm: syz.1.8385 Tainted: G U 6.15.0-syzkaller-10402-g4cb6c8af8591 #0 PREEMPT(full) [ 3420.561919][T17761] Tainted: [U]=USER [ 3420.565742][T17761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 3420.575938][T17761] Call Trace: [ 3420.579242][T17761] [ 3420.582197][T17761] dump_stack_lvl+0x3d/0x1f0 [ 3420.586819][T17761] panic+0x71c/0x800 [ 3420.590817][T17761] ? __pfx_panic+0x10/0x10 [ 3420.595265][T17761] ? mark_held_locks+0x49/0x80 [ 3420.600044][T17761] ? preempt_schedule_thunk+0x16/0x30 [ 3420.605433][T17761] ? afs_proc_addr_prefs_write+0x13a9/0x15f0 [ 3420.611466][T17761] ? preempt_schedule_common+0x44/0xc0 [ 3420.616951][T17761] ? check_panic_on_warn+0x1f/0xb0 [ 3420.622165][T17761] ? afs_proc_addr_prefs_write+0x13a9/0x15f0 [ 3420.628190][T17761] check_panic_on_warn+0xab/0xb0 [ 3420.633166][T17761] end_report+0x107/0x170 [ 3420.637512][T17761] kasan_report+0xee/0x110 [ 3420.641944][T17761] ? afs_proc_addr_prefs_write+0x13a9/0x15f0 [ 3420.647947][T17761] afs_proc_addr_prefs_write+0x13a9/0x15f0 [ 3420.653794][T17761] ? __lock_acquire+0xb8a/0x1c90 [ 3420.658745][T17761] ? __pfx_afs_proc_addr_prefs_write+0x10/0x10 [ 3420.664921][T17761] ? find_held_lock+0x2b/0x80 [ 3420.669623][T17761] ? __might_fault+0xe3/0x190 [ 3420.674312][T17761] ? __might_fault+0xe3/0x190 [ 3420.679004][T17761] ? __might_fault+0x13b/0x190 [ 3420.683793][T17761] ? proc_simple_write+0x114/0x1b0 [ 3420.688919][T17761] proc_simple_write+0x114/0x1b0 [ 3420.693871][T17761] ? __pfx_proc_simple_write+0x10/0x10 [ 3420.699350][T17761] proc_reg_write+0x240/0x330 [ 3420.704038][T17761] ? __pfx_proc_reg_write+0x10/0x10 [ 3420.709271][T17761] vfs_writev+0x5df/0xde0 [ 3420.713609][T17761] ? __pfx___mutex_trylock_common+0x10/0x10 [ 3420.719530][T17761] ? __pfx_vfs_writev+0x10/0x10 [ 3420.724387][T17761] ? __mutex_lock+0x1ca/0xb90 [ 3420.729080][T17761] ? kmem_cache_free+0x2d1/0x4d0 [ 3420.734031][T17761] ? __pfx___mutex_lock+0x10/0x10 [ 3420.739090][T17761] ? __fget_files+0x20e/0x3c0 [ 3420.743787][T17761] ? do_writev+0x132/0x340 [ 3420.748210][T17761] do_writev+0x132/0x340 [ 3420.752484][T17761] ? __pfx_do_writev+0x10/0x10 [ 3420.757274][T17761] do_syscall_64+0xcd/0x490 [ 3420.762001][T17761] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3420.768014][T17761] RIP: 0033:0x7f5dd1f8e969 [ 3420.772460][T17761] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3420.792097][T17761] RSP: 002b:00007f5dcfdd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 3420.800524][T17761] RAX: ffffffffffffffda RBX: 00007f5dd21b6400 RCX: 00007f5dd1f8e969 [ 3420.808502][T17761] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000006 [ 3420.816479][T17761] RBP: 00007f5dd2010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 3420.824455][T17761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3420.832868][T17761] R13: 0000000000000000 R14: 00007f5dd21b6400 R15: 00007ffd0225f9c8 [ 3420.840864][T17761] [ 3420.843953][T17761] Kernel Offset: disabled [ 3420.848287][T17761] Rebooting in 86400 seconds..