last executing test programs: 8.43882145s ago: executing program 0 (id=906): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x3, 0x66) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_MON_SET(r0, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000002540)={&(0x7f0000000080)={0x14, r1, 0x21, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x85}, 0x4000) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000240), r0) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x130, r2, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x6}, @ETHTOOL_A_LINKMODES_HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1000}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x48e9986a}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x7}, @ETHTOOL_A_LINKMODES_OURS={0x90, 0x3, 0x0, 0x1, [@typed={0x7b, 0xd4, 0x0, 0x0, @binary="d987b6691d7d9aaa3ffb0cfb79b3964fbbd53aa10e237ba4faaa6fe46b5d78bbf1ccb80b035516cd2496413c551b3cd3af36e9ecdf63d07c2de15614f98bdc576790f809ccaae6d9e12add5cf1e044d1a7d954febfed09530097855b10bb1ea38aa8b6bc100e6a917e850dce8b963b613c7b8faab75684"}, @nested={0x8, 0x31, 0x0, 0x1, [@nested={0x4, 0x12a}]}, @typed={0x8, 0x6b, 0x0, 0x0, @u32=0x7ff}]}]}, 0x130}}, 0x40084) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/tcp\x00', 0x181800, 0x0) pread64$auto(r3, &(0x7f0000000000)='/proc/thread-self/net/tcp6\x00\xd2)\x8e\x892\x82\x19\xfd\x03\xc3\x8d\xd7D\bz\xde5u4\xddS\xe6\x1a\x8a`\xad0\x98|\xbc\x00\x98\b\x0ey\xcb`\x9b\x91r\xd5\x13\x9e\xdd4\xe7\xb7\x94P\x8fBlm\x04eAW\xbc0\x9b\xbd\x8f\xf5];\x94\x18\xf0\v\xd7\xf4P\xd3\x9e,Q\xd8\x16\x989l\x03\a\xcc\x1e\xb9\xe9{\xeeS\xa9\xc60\x00\xb5&\x9e\xdbk{F\x18\xa8\xba*G\xd3\x80\xb1G.\xec1\x96uP\x97\x8co\xf1\xa6\xd5\xea\xc8L3|a\xb3\xaa\x90~Y\xb19\xad\xdc\x05o\x98g\xd4\x10]5\x95\xd0\xabJC\x06\xd0c\xd1Ra\xf7\xc4n\xdf\xe4\xc7\x03\x19x\xbb\v\x00\t\xde\xf5\x93\xfb\xfb#\xbd\xc0S\f57\x83\xdd\xaa\xf0\x9c\xd3G\xe1\x00'/232, 0x3ef, 0x9) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), 0xffffffffffffffff) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) pwrite64$auto(0xc8, &(0x7f0000000080)='\vX\xb5\x85\x91p\xe6\x1eRN8\x90\x86\xdde\x1cJ\x99\x00\x11\x89\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#\x1c\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xaf\n1\x80\x1a\xbc_\xef\x8b\t\xcc\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0xfdef, 0x3) mq_notify$auto(0xffffffffffffffff, &(0x7f0000000180)={@sival_int=0xc7, @raw=0x8, 0x790, @_tid}) socket(0xa, 0x4, 0x84) msgctl$auto(0x6, 0x3, &(0x7f00000001c0)={{0x1, 0xffffffffffffffff, 0xee01, 0x6, 0x0, 0x6, 0x3}, 0x0, 0x0, 0x8, 0x9, 0x6, 0x205, 0x5b73, 0x49, 0x9, 0x2}) pwrite64$auto(0xc8, &(0x7f0000000040)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e#\xae\xa9i8W\xe5Iq\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/231, 0xfdf2, 0x3a) clock_nanosleep$auto(0x5, 0x1ff, &(0x7f0000000000)={0x7, 0x8}, &(0x7f0000000040)={0x7, 0x7}) syz_genetlink_get_family_id$auto_ioam6(0x0, 0xffffffffffffffff) madvise$auto(0x0, 0x2003f0, 0x15) 8.437770838s ago: executing program 3 (id=907): r0 = openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$auto_cachefiles_daemon_fops_internal(r0, 0x0, 0x0) (fail_nth: 2) 7.498769731s ago: executing program 3 (id=911): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS3\x00', 0x0, 0x0) r1 = clone$auto(0x8001, 0x1, &(0x7f0000000040)=0x6, &(0x7f0000000180)=0x2, 0xffe00) prctl$auto(0x403, 0x4291, r1, 0x4, 0x2) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x24044010}, 0xc0) mmap$auto(0x0, 0x9, 0xdf, 0x1000000eb1, 0x401, 0x8000) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) getsockname$auto(0xffffffffffffffff, &(0x7f0000000000)=@tipc=@name={0x1e, 0x2, 0x2, {{0x42}, 0x103}}, 0x0) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$auto(r2, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x101d0, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x3, 0x6) socket(0x10, 0x2, 0x4) r3 = socket(0x10, 0x3, 0x6) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x50) r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80502, 0x0) ioctl$auto_SNDCTL_DSP_CHANNELS(r4, 0xc0045006, 0x0) ioctl$auto_SNDCTL_DSP_SETTRIGGER(r4, 0x40045010, &(0x7f0000000280)="0c8a76602f1198fa98eb0e4588d60110a0839502e8714a5b17f6e587dec5d7e69ae86461a13c04985969fa468c11cffa50f1fd0301d645725f7f6e101ba01b25d5d4a198fb118fb225aa37f473a387531bf504ef1ea4c2fb65ca5f147ca0ca58311d2e22b9926938d0bb8f1691e447d4cae0ffae1e5835037f43ff0b4b5349163aec1fb7296fb5b9b693e1888bf40c60c41cd1897e488067403e9ffc8abc2f247f3fd16d7cac9c0e0abded8c78361622285d4c9827edbbb6997b37c94b9eeca795a9e012b9a5b089") ioctl$auto(r0, 0x200540a, r0) 6.853724319s ago: executing program 3 (id=915): openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000) r0 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/mtd0\x00', 0x0, 0x0) openat$auto_trace_options_fops_trace(0xffffffffffffff9c, 0x0, 0x942, 0x0) ioctl$auto_MEMGETREGIONCOUNT(r0, 0x80044d07, &(0x7f0000000700)=0x2) quotactl_fd$auto(0xffffffffffffffff, 0x1, 0x0, 0x0) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0xd4, 0x3, 0x6, 0x0, 0x200000000000001, 0x368e, 0x2, {0x100000000, 0x4}, 0xff, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x8000000c, 0x81, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x804}) r1 = socket(0x2b, 0x1, 0x1) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x2, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0xa3da) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000180), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_THERMAL_GENL_CMD_THRESHOLD_DELETE(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB='\t@\x00\x00', @ANYRES16, @ANYBLOB="000126bd7000fcdbdf25090000000400018004000f80c3fc0e003264650101000000000000636572320014001300766c616e3000"/62], 0x44}, 0x1, 0x0, 0x0, 0x8004}, 0x40) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/scsi/sg/allow_dio\x00', 0x101181, 0x0) socket(0x2, 0x1, 0x0) socket(0x15, 0x5, 0x0) ustat$auto(0x801, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) unshare$auto(0x40000080) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20342, 0x0) r4 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000380), 0x82002, 0x0) ioctl$auto_RTC_ALM_SET(r4, 0x40247007, &(0x7f00000000c0)={0xe, 0x5, 0x2, 0x0, 0x5, 0x2003, 0x74f, 0x1fb, 0xf}) ioctl$auto_SNDCTL_DSP_SYNC(r3, 0x5001, 0xfffffffffffffffc) unshare$auto(0x40000080) socket(0x1d, 0x2, 0x6) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8002, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto_CEC_DQEVENT(r4, 0xc0506107, &(0x7f0000000300)={0xa, 0xfabe, 0x401, @raw=[0x8, 0x1, 0x1, 0xd389, 0x6, 0xb, 0xe2e, 0x400, 0x3, 0x7, 0x3ff, 0xc, 0x19, 0x2, 0xadfd, 0x61c08245]}) 6.140323184s ago: executing program 0 (id=918): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/stat/synproxy\x00', 0xc0a00, 0x0) pread64$auto(r0, &(0x7f0000000040)='/proc/thread-self/net/tcp6\x00\xd2)\x8e\x892\x82\x19\xfd\x03\xc3\x8d\xd7D\x8d\xa8\xcfM9\\\xd6\xcfUq\x05#\xed\x1c\xd1G\bz\xde5u4\xddS\xe6\x1a\x8a`\xad0\x98|\xbc\x00\x98\b\x0ey\xcb`\x9b\x91r\xd5\x13\x9e\xdd4\xe7\xb7\x94P\x8fBlm\x04eAW\xbc0\x9b\xbd\x8f\xf5];\x94\x18\xf0\v\xd7\xf4P\xd3\x9e,Q\xd8\x16\x989l\x03\a\xcc\x1e\xb9\xe9{\xeeS\xa9\xc60\x00\xb5&\x9e\xdbk{F\x18\xa8\xbasG\xd3\x80\xb1G.\xec1\x96uP\x97\x8co\xf1\xa6\xd5\xea\xc8L3|a\xb3\xaa\x90Y\xb19\xad\xdc\x05o\x98g\xd4\x10]5\x95\xd0\xabJC\x06\xd0c\xd1Ra\xf7\xc4n\xdf\xe4\xc7\x03\x19x\xbb\v\x00\t\xde\xf5\x93\xfb\xfb#\xbd\xc0S\f57\x83\xdd\xaa\xf0\x9c\xd3G\xe1', 0x3ff, 0x9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NL80211_CMD_SET_PMKSA(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x8001}, 0x40) clone3$auto(&(0x7f00000001c0)={0x3, 0x6, 0x8000000000000000, 0xc05, 0x0, 0x8000, 0xfffffffffffffffd, 0x9, 0x100000000, 0x7, 0x1}, 0x7) io_uring_setup$auto(0x1, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r3, 0x5423, 0x0) r4 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="01002abd47ae14"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040804) r5 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) read$auto(r5, 0x0, 0x1f40) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x200440c4}, 0x40048c5) sendmsg$auto_OVS_DP_CMD_DEL(r1, &(0x7f0000001180)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001140)={&(0x7f00000011c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="02202bbd7000ffaa000008000200f9bb36572673bf33d62253cfaf726346fbf9164ccb39df9f6fb3fc16fda848fa39da1e95541ffb4fa1e2cf23bb49f823eff63ceaf49b66ca1a623035ba788b6b7ebe33a047916be92cc4fed9f4f8e57e9362a30304b1a61191884abf5be0cbb3f6f6a5cb409cb8164b347a2d8b9997b46736decc4f0e1d", @ANYRES32, @ANYBLOB="08000200", @ANYRES32, @ANYBLOB="240001002f7379732f6b65726e656c2f64656275672f74726163696e672f747261636500"], 0x48}, 0x1, 0x0, 0x0, 0x240008d3}, 0x4c080) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1000000000045, 0x100000001, 0xfffdffff, 0x0, 0x0, 0x0, 0x1000000006, 0x6, 0x7, 0x401, 0x7ffffffb, 0x5, 0xffffffff80000000, 0x1, 0x61, 0x103}) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001040)='/proc/thread-self/fail-nth\x00', 0xa802, 0x0) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/trace\x00', 0x600, 0x0) fcntl$auto(0x0, 0x407, 0x8100000) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) 5.462158634s ago: executing program 1 (id=920): ioctl$auto_SNDRV_PCM_IOCTL_TTSTAMP2(0xffffffffffffffff, 0x40044103, &(0x7f0000000080)=0x78) socket(0xf, 0x80003, 0x300) mmap$auto(0x0, 0x20009, 0x94a, 0xeb1, 0x401, 0x8000) r0 = socketpair$auto(0xffffffff, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0xa, 0x806, 0x0) syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000040), r1) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x55) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000001100), r4) sendmsg$auto_CTRL_CMD_GETFAMILY(r4, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000001140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="01002dbd7000ffdbdf25030000000600010030"], 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x20000044) r6 = syz_genetlink_get_family_id$auto_thermal(&(0x7f0000000200), r4) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_TEMP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000036c0)=ANY=[@ANYBLOB='\x006\x00\x00', @ANYRES16=r6, @ANYBLOB="01002bbd7000fedbdfa503000000e43501805b"], 0x3600}, 0x1, 0x0, 0x0, 0x4008000}, 0x8084) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_TEMP(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@', @ANYRES16=r6, @ANYBLOB="000129bd7000fedbdf250300000008000a000700000008000a0005000000080006000600000008000d80040058001400130062617461647630000000000000000000080010000400000008000a0000000000"], 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) sendmsg$auto_THERMAL_GENL_CMD_THRESHOLD_GET(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10200004}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="24010400", @ANYRES16=r6, @ANYBLOB="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"], 0x124}, 0x1, 0x0, 0x0, 0x5}, 0x4000000) request_key$auto(0x0, 0x0, 0x0, 0xfffffffd) r7 = setfsuid$auto(0xee00) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000000040), 0xffffffffffffffff) read$auto_page_owner_stack_operations_page_owner(0xffffffffffffffff, &(0x7f00000000c0)=""/95, 0x5f) sendmsg$auto_OVS_METER_CMD_DEL(r8, &(0x7f0000001180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="6471246060449559de55772ce18bedf0a14065", @ANYRES16=r9, @ANYBLOB="010028bd7000ffdbdf2503000000040002000800010001000080"], 0x20}, 0x1, 0x0, 0x0, 0x4800}, 0x4000) setreuid$auto(r7, 0x0) keyctl$auto(0x3, 0x102000000010001, r7, 0x200, 0x2) 5.03620239s ago: executing program 1 (id=922): mmap$auto(0x0, 0xb, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @loopback}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x3, 0x20000000) shutdown$auto(0x200000003, 0x2) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0x2, 0x2, 0x0) fsopen$auto(0x0, 0x1) socket(0x15, 0x3, 0xa) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r1 = openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000180), 0x101002, 0x0) write$auto(r1, 0x0, 0xc3) socket$nl_generic(0x10, 0x3, 0x10) write$auto(0xca, 0x0, 0x1ff) r2 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, 0x0) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, 0x0, 0x100, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) connect$auto(r1, 0x0, 0x54) listen$auto(0x3, 0x81) accept$auto(0x3, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) 3.905658543s ago: executing program 0 (id=926): mmap$auto(0x0, 0x6, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty35\x00', 0x0, 0x0) pwrite64$auto(r0, &(0x7f00000001c0)='\x00', 0x2, 0x0) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0xc800) r2 = socket(0xa, 0x5, 0x84) sendto$auto(r2, 0x0, 0xfef4, 0x7f, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe8000"}, 0x1c) ioctl$auto(r1, 0xc0045520, r0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'rose0\x00', 0x0}) sendmsg$auto_BATADV_CMD_TP_METER(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_TT_VID={0x6, 0x14, 0x7fff}, @BATADV_ATTR_TPMETER_BYTES={0xc, 0xc, 0x7fffffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x7}, @BATADV_ATTR_MESH_IFNAME={0x14, 0x4, 'tunl0\x00'}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x5f0}]}, 0x54}, 0x1, 0x0, 0x0, 0x4810}, 0x20000000) 3.673120923s ago: executing program 1 (id=927): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/tty/ptya4/power/runtime_active_time\x00', 0x696d41, 0x0) write$auto(r0, &(0x7f0000000080)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94&\x81\xe2\x13\x8f\xea#\xf8F\xbbOO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\b\xc1\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(', 0x4) 3.232557049s ago: executing program 2 (id=928): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="2f212cbd7010ca705d", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) 3.215106768s ago: executing program 0 (id=929): mmap$auto(0x7fb, 0x6, 0x10000003, 0x20eb3, 0xfffffffffffffffa, 0x8004) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) (async, rerun: 32) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (rerun: 32) write$auto(0x3, 0x0, 0x7fffffff) write$auto(0x1, 0x0, 0x80000000) (async) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) (async) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) (async) futex$auto(&(0x7f0000000040)=0xce, 0x1, 0x101, &(0x7f00000000c0)={0xfff, 0x8}, &(0x7f0000000100)=0x8001, 0x5d33) r0 = socket(0x2b, 0x1, 0x1) r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) ioctl$auto_PPPIOCSMRU(r1, 0xc004743e, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) sendmsg$auto_NFC_CMD_DEP_LINK_DOWN(r0, 0x0, 0x20000001) (async) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) (async, rerun: 64) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001480)={'veth0_virt_wifi\x00'}) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000001280), 0xffffffffffffffff) sendmsg$auto_IOAM6_CMD_DEL_NAMESPACE(r2, &(0x7f0000001340)={0x0, 0xfffffffffffffe46, &(0x7f0000001300)={&(0x7f00000012c0)=ANY=[@ANYBLOB="12b100", @ANYRES16=r3, @ANYBLOB="010026bd7000fedbdf25020000000600010009000000"], 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x40010) sendmsg$auto_NL80211_CMD_GET_MPP(r0, 0x0, 0x880) munmap$auto(0x8000, 0xffffffff) (async) getrandom$auto(0x0, 0x6000000, 0x3) (async) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) (async) sysfs$auto(0x2, 0x10000000000048, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) mmap$auto(0xfffffffffffffffc, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) socket(0x10, 0x2, 0x0) (async) statmount$auto(0x0, &(0x7f0000000040)={0x1, 0x0, 0x36, 0x828, 0x9, 0x8000000000000000, 0x9f, 0x7, 0x9, 0x8, 0x2, 0x9, 0x3, 0x8, 0x0, 0x200000000000f, 0x100, 0x1, 0x10001, 0x2cf8}, 0xe3c, 0x0) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYBLOB='N\x00\''], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) 3.152694376s ago: executing program 1 (id=930): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/acpi/wakeup\x00', 0x141880, 0x0) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) setrlimit$auto(0x1000000007, 0x0) ioctl$auto_SG_SET_DEBUG(0xffffffffffffffff, 0x227e, &(0x7f00000003c0)="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") mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) write$auto(0x3, 0x0, 0x7fffffff) write$auto(0x1, 0x0, 0x80000000) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, 0x0, 0x200, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000240)={0x0, 0xfffffffd}, 0x6, 0xc, 0x1) r0 = socket(0x2b, 0x1, 0x1) ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0) sendmsg$auto_NFC_CMD_DEP_LINK_DOWN(r0, 0x0, 0x20000001) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001480)={'veth0_virt_wifi\x00'}) sendmsg$auto_NL80211_CMD_GET_MPP(r0, 0x0, 0x880) munmap$auto(0x8000, 0xffffffff) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f00000000c0)={{0x0, 0x6, 0x0, 0xa7, &(0x7f0000000180)="bcb9c371f46d0d9bdb06c4837f6392975c3dce07fe23702dd7346a3e7774e8881be6660ef6514d314dc7c2a7b07582635940668ee4020f9bb4b577322dbddb1dcc92fbad285a54e448c0423f71bef721ac0eacdf0e2184faac074151ca1655bf5e8814d73eeff0e81576aad5aced3625f066f3eeb4e7d741b11edc7a", 0x8000, 0x1}, 0x8}, 0x1, 0x100) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0xff, 0x0, 0x1, 0x3}, 0x7}, 0xb, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/fs/cifs/traceSMB\x00', 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(0x3, 0x0, 0x1f40) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f00000000c0)={"58f99464", 0x8, 0x6, 0x1, 0x3, 0x5, "4bb69ec4b3f4c14539898e4c5682f5", "347f00", "a630df9d", "a0ed9959", ["cd9196b8fe1a8a7eb90401a9", "2f9c30017721de33c560b95a", "d3fe6c55a78d6932211c9b69", "ea334f1f1e5e27a1320d6edb"]}) mmap$auto(0x0, 0xa00006, 0xbd, 0x6199, 0x602, 0x300000000000) syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000140), 0xffffffffffffffff) 3.015547018s ago: executing program 3 (id=931): ioctl$auto_SNDRV_PCM_IOCTL_TTSTAMP2(0xffffffffffffffff, 0x40044103, &(0x7f0000000080)=0x78) socket(0xf, 0x80003, 0x300) mmap$auto(0x0, 0x20009, 0x94a, 0xeb1, 0x401, 0x8000) r0 = socketpair$auto(0xffffffff, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0xa, 0x806, 0x0) syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000040), r1) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x55) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000001100), r4) sendmsg$auto_CTRL_CMD_GETFAMILY(r4, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000001140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="01002dbd7000ffdbdf25030000000600010030"], 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x20000044) r6 = syz_genetlink_get_family_id$auto_thermal(&(0x7f0000000200), r4) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_TEMP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000036c0)=ANY=[@ANYBLOB='\x006\x00\x00', @ANYRES16=r6, @ANYBLOB="01002bbd7000fedbdfa503000000e43501805b"], 0x3600}, 0x1, 0x0, 0x0, 0x4008000}, 0x8084) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_TEMP(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@', @ANYRES16=r6, @ANYBLOB="000129bd7000fedbdf250300000008000a000700000008000a0005000000080006000600000008000d80040058001400130062617461647630000000000000000000080010000400000008000a0000000000"], 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) sendmsg$auto_THERMAL_GENL_CMD_THRESHOLD_GET(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10200004}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="24010400", @ANYRES16=r6, @ANYBLOB="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"], 0x124}, 0x1, 0x0, 0x0, 0x5}, 0x4000000) request_key$auto(0x0, 0x0, 0x0, 0xfffffffd) r7 = setfsuid$auto(0xee00) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000000040), 0xffffffffffffffff) read$auto_page_owner_stack_operations_page_owner(0xffffffffffffffff, &(0x7f00000000c0)=""/95, 0x5f) sendmsg$auto_OVS_METER_CMD_DEL(r8, &(0x7f0000001180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="6471246060449559de55772ce18bedf0a14065", @ANYRES16=r9, @ANYBLOB="010028bd7000ffdbdf2503000000040002000800010001000080"], 0x20}, 0x1, 0x0, 0x0, 0x4800}, 0x4000) setreuid$auto(r7, 0x0) keyctl$auto(0x3, 0x102000000010001, r7, 0x200, 0x2) 3.005098649s ago: executing program 2 (id=932): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/midi2\x00', 0x8000, 0x0) r1 = openat$auto_adf_ctl_ops_adf_ctl_drv(0xffffffffffffff9c, &(0x7f0000000140), 0x20000, 0x0) futex_wait$auto(0x0, 0x2, 0x7, 0x2, &(0x7f0000000080)={0x0, 0x3ca}, 0xc) ioctl$auto_IOCTL_STOP_ACCEL_DEV(r1, 0x40096101, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) r2 = socket(0x34, 0x800, 0x3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000040), 0x481, 0x0) pwrite64$auto(r3, 0x0, 0x400000, 0xc) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/thread-self/net/dev_snmp6/gretap0\x00', 0x10000, 0x0) r4 = fcntl$auto_F_GETOWN(r1, 0x9, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_SW_PARAMS(r4, 0xc0884113, &(0x7f0000000280)={0x0, 0x8, 0x3, 0x6, 0x401, 0xa, 0x4, 0xff, 0xfffffffffffffffa, 0x6, 0x9, 0xe8f4, "bb1fe1db2f8b29e7d4f87b757575ac3dcb72ffc2f8fba1f71f558bfc7602555e7d016ede26581ce54cafc5586d9b008fd142b11533e40f2f"}) fgetxattr$auto(r0, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', &(0x7f0000000180)="8f15d5595edec7136f32a8b16cb08521f1f9ed620dee88131b7c5a78c367ff82a60252d9f97a7bdfcf9ec2946ef1dea4db68acaaa7a03110a14d76f778a1b64f6abcc6d7e7a8002b7cb3b583cdab5bbbe140418ea6a759d352f809cde8119ae6a8f0687436e5067d91819f7adbc1340e2004b1f8530ba074939e5220d9c83f9bb95edc8b1803d394f5234d79276056128e7adb91456e8d53a3456f16cb53d8d6f06f0130809608898f417b1c4f21d356fe1413180a367016296fb904aa74d6f471c75e547264c930f3bc46b24f416bd26870875f17141c38d6f7bc9454793a915e447ba78d9e344e7e7a2a1f40bc1f7f26a403ab17859d", 0x7) r5 = getsockopt$auto(r2, 0x7, 0x9, 0x0, 0x0) mknod$auto(&(0x7f0000000100)='./file0\x00', 0x4, 0x101) close_range$auto(r4, 0xfffffffffffff000, 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_METER_CMD_GET(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r6, @ANYRESOCT=r5, @ANYRES8=r5], 0x14}, 0x1, 0x0, 0x0, 0x24040014}, 0x2004894) r7 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000340)='/dev/sequencer2\x00', 0x2000, 0x0) r8 = semctl$auto_SETALL(0x80000001, 0x7, 0x11, 0x0) fcntl$auto_F_GET_RW_HINT(r7, 0x40b, r8) socket(0x26, 0x80805, 0x0) r9 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)) fcntl$auto(r9, 0x402, 0x8000007fffffdf) futex_waitv$auto(&(0x7f0000000380)={0x9, 0x4, 0x800}, 0x2, 0x9, &(0x7f00000004c0)={0x7fffffff, 0x7}, 0x4) r10 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) getdents$auto(r10, 0x0, 0x101) close_range$auto(r1, r9, 0xffffffff) syz_genetlink_get_family_id$auto_nfsd(&(0x7f00000000c0), r2) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) 2.277912409s ago: executing program 3 (id=933): openat$auto_ftrace_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/tracing/events/vmalloc/alloc_vmap_area/enable\x00', 0x34481, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/bdi/1:7/min_ratio\x00', 0x490640, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000022c0)=""/43, 0xffffffffffffff4a) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0xa, 0x2, 0x0) setsockopt$auto(r4, 0x29, 0x37, &(0x7f0000000080)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\x1e\x1b\xc3 \xe2\xa8\xd6\xd9\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\x91[\vBj\x0eQ\xce\x16\'C\x8cYA\x92u\xd5\xb8\\\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\xde\x14\xe4\xa5\xfe\xb5', 0x110) mmap$auto(0x3, 0x8, 0xe2, 0xeb1, r3, 0x8000) socket(0x2, 0x3, 0xa) socket(0x2, 0x5, 0x0) setsockopt$auto(0x4, 0x0, 0xc, &(0x7f0000000200)='\xf3\xc6uy\x90:\xf2\xb3}\xfb\xa9n\xbf\f\x8a\x16\x1a#\x866}\t\xcb-K\x962\xf4,;\xe4\"=\t#\xe9B\x1dq[\xe6\xf6\xd1\xf9\xdd\xfe\x1e\xc8\xa1\xea\xf9\x93\f\x95\x14\t\t\x01\x13Z0O@\xb6~8\x0ej\xf1\x8dH\x9ddK6\\|\x12\x82L\x84\x9d\x14\xd0\xa9{\xb1\xb4\xc5\xe0\xaf\x15RT\x98\xd9\x10D\xa1Y\x80\x1fe\xc1. \x9d\x84\x8b\x9a\x9a`q\x00\x8c8c:%\x97\x15\x80-\r\x94\xcb\xda\xa2\x1d\\;f\xcds\xa7q]?\'\xf5\x9eA\x841f\x1e\xce\xc0\x1d{t\xfdc\xa3\fp\x1b\xd2\'\xcd1\x8d\x87\xf1\x02\xc4QL\xcc\xf9L\xbf\xa4_\x85\xf1\xb6\xe0\xca\x9e3\x9b\xf7\n\xe7\xdf\x12\xef_ \x9dC\x1f\xb8k\xfbu\x8f\xd9\xaa>\xe3\xda\x1f\'\x00'/219, 0x800d) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC0\x00', 0x0, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r2, 0x8000) r5 = socket(0x2, 0x6, 0x0) setsockopt$auto(r5, 0x10a, 0x8000000e, 0x0, 0x5) r6 = semctl$auto_GETZCNT(0x8, 0x8, 0xf, 0x4) ptrace$auto(0x401, r6, 0x37, 0xa) sendmmsg$auto(0x3, 0x0, 0xee8c, 0x4) socket(0x1d, 0x2, 0x6) setsockopt$auto(0x4, 0x6a, 0x1, 0x0, 0xe) writev$auto(r1, &(0x7f0000000080)={&(0x7f0000000040)="37fdbc106eed52feb235e23df02a4a12b20f2355abf00fdce7227d33279c8d22ec86284f913ed1bcec5bf6181b389a01cc3e0aa58b90b690cea266ea2362", 0xfffffffffffff7ce}, 0xfffffffffffffffd) r7 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r8 = socketpair$auto(0x1e, 0x3, 0x1, 0x0) ioctl$auto(r7, 0x560a, r8) mmap$auto(0x0, 0x20009, 0x485, 0xeb0, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) 1.686373613s ago: executing program 2 (id=934): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\v'], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x7) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) getdents$auto(r1, 0x0, 0x101) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r0) read$auto(r0, &(0x7f0000000100)='nl80211\x00', 0xbe62) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030009000000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a000100aaaaaaaaaabb00000a000500aaaaaaaaaa370000080004001000000008000200", @ANYRES32=0x0, @ANYBLOB="08001b"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 1.547403894s ago: executing program 2 (id=935): setitimer$auto(0x1, 0x0, &(0x7f0000000040)={{0x8, 0x5}, {0x9, 0xb}}) r0 = fsopen$auto(&(0x7f0000000080)='%\x00', 0x4) mmap$auto(0x4, 0xd, 0x4000000000df, 0xeb1, r0, 0x8000) openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x24000, 0x0) mmap$auto(0x0, 0x2020009, 0x2000000003, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2, 0x6, 0x0) io_uring_setup$auto(0x3, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_MACSEC_CMD_DEL_RXSC(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="010527bd7000fbdbdf25020000000800", @ANYRES32=0x0, @ANYBLOB="18"], 0x34}, 0x1, 0x0, 0x0, 0x4068811}, 0x80) ppoll$auto(&(0x7f0000000080)={0xffffffffffffffff, 0x11b, 0xf}, 0xc, 0x0, 0x0, 0x8) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="1e0027"], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) connect$auto(0x3, &(0x7f0000000000)=@in={0x2, 0x300, @remote}, 0x53) shutdown$auto(0x200000003, 0x2) close_range$auto(0x2, 0x8, 0x0) pselect6$auto(0xc70, &(0x7f00000000c0)={[0x4, 0x4, 0x1ff, 0xfffffffffffffff8, 0xfffffffffffffffe, 0x9, 0x800, 0x59, 0x5, 0x8, 0x4, 0x3, 0xe, 0xd, 0x0, 0x401]}, &(0x7f0000000140)={[0x800, 0x1, 0x7, 0x7, 0x0, 0x3, 0x9, 0xf30, 0xfd, 0xffffffff, 0x0, 0x8000, 0x5ea, 0x8000000000000000, 0x9, 0xe]}, &(0x7f00000001c0)={[0x3, 0x4, 0x8000000000000001, 0x0, 0x5, 0x0, 0x6, 0x6, 0xa751, 0x7, 0x2, 0x1, 0x714a1a9d, 0x0, 0xffffffffffffffff, 0x2]}, &(0x7f0000000240)={0x1ff}, &(0x7f0000000280)="8a6fd4b3dcf31cf6b0d48007b2f674b8c6b4fb13ec22d04c7d95fc8837") 1.502258737s ago: executing program 0 (id=936): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB='\v'], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r0) read$auto(r0, &(0x7f0000000100)='nl80211\x00', 0xbe62) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030009000000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a000100aaaaaaaaaabb00000a000500aaaaaaaaaa370000080004001000000008000200", @ANYRES32=0x0], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 1.291857179s ago: executing program 1 (id=937): sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000dbdbdf25020000000800030000000000050004"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/netdevsim3/sriov_numvfs\x00', 0x10b142, 0x0) pipe2$auto(&(0x7f0000000040)=0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = io_uring_setup$auto(0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto(0x3, 0x0, 0xffff) ioctl$auto_BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f0000000840)={0x100000001, 0x3, "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"}) ioctl$auto(0x3, 0x5414, 0x38) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0xacc84d9f9aef6302, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000804) lstat$auto(0x0, &(0x7f0000000180)={0xe, 0x6, 0x100000001, 0xfb9, 0x0, 0x0, 0x0, 0x9, 0x6, 0x9, 0x5, 0x7fffffff, 0x5, 0xffffffff80000000, 0xdf1, 0x61, 0x105}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) socket(0x2, 0x1, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x1258, 0x1, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x9, 0x5, 0x80003, 0x4, 0x1ffffffffffd, 0xb4, 0x3, 0x7, 0x10007, 0x80, 0x2a0, 0x0, 0xa, 0x22000, 0x200, 0x4, 0x84, [0x3, 0x2, 0x0, 0x2, 0x0, 0x2000, 0x0, 0x0, 0x70624ce7, 0x1, 0xfffffffffffffffd, 0xa, 0x8, 0x0, 0x6, 0x0, 0xfffffffffffbfffd, 0x5, 0x10000000000001, 0x10000000000, 0xe, 0x4, 0xfffffffffffffe00, 0x0, 0x0, 0x5, 0x400000000005b8, 0x10001, 0x0, 0x100, 0x0, 0x6, 0xffffffffffffffff, 0xfffffffffffffffa, 0x8000000000008, 0xfffffffffffffffc, 0xa, 0xa38, 0x0, 0x3, 0xfffffffffffffffc, 0x89, 0x1, 0x7, 0xc567]}, 0x1fe, 0xd) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x50) r3 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, 0x0, 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r3, 0xfffffffffffffd03, &(0x7f00000001c0)) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty46\x00', 0x0, 0x0) ioctl$auto(r4, 0x540a, 0x0) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty46\x00', 0x0, 0x0) ioctl$auto(r5, 0x540a, r0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) 941.586271ms ago: executing program 2 (id=938): mmap$auto(0x0, 0x6, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty35\x00', 0x0, 0x0) pwrite64$auto(r0, &(0x7f00000001c0)='\x00', 0x2, 0x0) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0xc800) r2 = socket(0xa, 0x5, 0x84) sendto$auto(r2, 0x0, 0xfef4, 0x7f, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe8000"}, 0x1c) ioctl$auto(r1, 0xc0045520, r0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'rose0\x00', 0x0}) sendmsg$auto_BATADV_CMD_TP_METER(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_TT_VID={0x6, 0x14, 0x7fff}, @BATADV_ATTR_TPMETER_BYTES={0xc, 0xc, 0x7fffffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x7}, @BATADV_ATTR_MESH_IFNAME={0x14, 0x4, 'tunl0\x00'}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x5f0}]}, 0x54}, 0x1, 0x0, 0x0, 0x4810}, 0x20000000) 459.250709ms ago: executing program 0 (id=939): r0 = socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) getcwd$auto(0x0, 0xffffffffffffffff) setsockopt$auto(0x3, 0x10000000084, 0x2, 0x0, 0x8) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1fff8}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYBLOB="01002dbd7000f9dbdf250100"], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x8587) r2 = socket(0x2, 0x80002, 0x73) getpeername$auto(r2, 0x0, 0x0) sendmsg$auto_TIPC_NL_BEARER_SET(r1, 0x0, 0x40044) unshare$auto(0x40000080) r3 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000002b40)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="01002abd7000fbdbdf25040000002d0011002f50136a450cf972f5a3d28479f92a9b221ca46c2d19fda4f47902c296fa844c12cd83f712d3c41e5d000000080004000000010030001a80080001008703000004000480040002001c000480180001800800060000000000040004000800060001000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000800) recvmmsg$auto(r0, &(0x7f0000000240)={{&(0x7f0000000180)="6402a71ac704369b78d002ec7ce0ce9cf1ed1266ec0d680696a44d2f52f01ee653d3bc8641f3d59ae79dacd07d6743d3c689ad483e48f9f87e8952581aebb9d9802a9060", 0x40, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x33d}, 0x6, 0x5, 0x0) r4 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/tracing/set_event\x00', 0x40, 0x0) unshare$auto(0x40000080) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000480)=ANY=[@ANYRES16=r5, @ANYBLOB="03032abd7000ffdbdf2567000000"], 0x14}, 0x1, 0xf0ffff, 0x0, 0x8800}, 0x40040) pread64$auto(r4, &(0x7f0000000000)='\xae\xa9\x16\xee\xb5\x84\xde\xff\x9f_\a\xa9\x89N\x86\xbc\xb1\xfe\xf6&\v\xe9\xac\',Yd[\xac\x94C\x93\xe8\'-\x92N\xc6\xeaKZA\xde\x98j\x10\xe0f\xc7\x81\xa1\xf3L\xec\'c\xe4\xe8\xe5\xfdU\xa39\x11a\xb7\xf7\xef\xf3^w\xbeP\xfbynT|l;\xf2\xc7u\xcd\x17', 0xf, 0x5af) (fail_nth: 2) r6 = socket(0x28, 0x5, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x7}, 0x3, 0x0) bind$auto(r6, &(0x7f0000000080)=@in={0x28, 0x4e20, @multicast2}, 0x68) 294.132975ms ago: executing program 2 (id=940): openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000) r0 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/mtd0\x00', 0x0, 0x0) openat$auto_trace_options_fops_trace(0xffffffffffffff9c, 0x0, 0x942, 0x0) ioctl$auto_MEMGETREGIONCOUNT(r0, 0x80044d07, &(0x7f0000000700)=0x2) quotactl_fd$auto(0xffffffffffffffff, 0x1, 0x0, 0x0) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0xd4, 0x3, 0x6, 0x0, 0x200000000000001, 0x368e, 0x2, {0x100000000, 0x4}, 0xff, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x8000000c, 0x81, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x804}) r1 = socket(0x2b, 0x1, 0x1) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x2, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0xa3da) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000180), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_THERMAL_GENL_CMD_THRESHOLD_DELETE(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB='\t@\x00\x00', @ANYRES16, @ANYBLOB="000126bd7000fcdbdf25090000000400018004000f80c3fc0e003264650101000000000000636572320014001300766c616e3000"/62], 0x44}, 0x1, 0x0, 0x0, 0x8004}, 0x40) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/scsi/sg/allow_dio\x00', 0x101181, 0x0) socket(0x2, 0x1, 0x0) socket(0x15, 0x5, 0x0) ustat$auto(0x801, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) unshare$auto(0x40000080) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20342, 0x0) r4 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000380), 0x82002, 0x0) ioctl$auto_RTC_ALM_SET(r4, 0x40247007, &(0x7f00000000c0)={0xe, 0x5, 0x2, 0x0, 0x5, 0x2003, 0x74f, 0x1fb, 0xf}) ioctl$auto_SNDCTL_DSP_SYNC(r3, 0x5001, 0xfffffffffffffffc) unshare$auto(0x40000080) socket(0x1d, 0x2, 0x6) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8002, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto_CEC_DQEVENT(r4, 0xc0506107, &(0x7f0000000300)={0xa, 0xfabe, 0x401, @raw=[0x8, 0x1, 0x1, 0xd389, 0x6, 0xb, 0xe2e, 0x400, 0x3, 0x7, 0x3ff, 0xc, 0x19, 0x2, 0xadfd, 0x61c08245]}) 204.090457ms ago: executing program 3 (id=941): ioctl$auto_SNDRV_PCM_IOCTL_TTSTAMP2(0xffffffffffffffff, 0x40044103, &(0x7f0000000080)=0x78) socket(0xf, 0x80003, 0x300) mmap$auto(0x0, 0x20009, 0x94a, 0xeb1, 0x401, 0x8000) r0 = socketpair$auto(0xffffffff, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0xa, 0x806, 0x0) syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000040), r1) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x55) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000001100), r4) sendmsg$auto_CTRL_CMD_GETFAMILY(r4, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000001140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="01002dbd7000ffdbdf25030000000600010030"], 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x20000044) r6 = syz_genetlink_get_family_id$auto_thermal(&(0x7f0000000200), r4) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_TEMP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000036c0)=ANY=[@ANYBLOB='\x006\x00\x00', @ANYRES16=r6, @ANYBLOB="01002bbd7000fedbdfa503000000e43501805b"], 0x3600}, 0x1, 0x0, 0x0, 0x4008000}, 0x8084) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_TEMP(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@', @ANYRES16=r6, @ANYBLOB="000129bd7000fedbdf250300000008000a000700000008000a0005000000080006000600000008000d80040058001400130062617461647630000000000000000000080010000400000008000a0000000000"], 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) sendmsg$auto_THERMAL_GENL_CMD_THRESHOLD_GET(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10200004}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="24010400", @ANYRES16=r6, @ANYBLOB="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"], 0x124}, 0x1, 0x0, 0x0, 0x5}, 0x4000000) request_key$auto(0x0, 0x0, 0x0, 0xfffffffd) r7 = setfsuid$auto(0xee00) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000000040), 0xffffffffffffffff) read$auto_page_owner_stack_operations_page_owner(0xffffffffffffffff, &(0x7f00000000c0)=""/95, 0x5f) sendmsg$auto_OVS_METER_CMD_DEL(r8, &(0x7f0000001180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="6471246060449559de55772ce18bedf0a14065", @ANYRES16=r9, @ANYBLOB="010028bd7000ffdbdf2503000000040002000800010001000080"], 0x20}, 0x1, 0x0, 0x0, 0x4800}, 0x4000) setreuid$auto(r7, 0x0) keyctl$auto(0x3, 0x102000000010001, r7, 0x200, 0x2) 0s ago: executing program 1 (id=942): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="2f212cbd7010ca705d", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) kernel console output (not intermixed with test programs): hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 147.000327][ T6666] 57299 total pagecache pages [ 147.005075][ T6666] 0 pages in swap cache [ 147.009275][ T6666] Free swap = 124996kB [ 147.043477][ T6666] Total swap = 124996kB [ 147.047869][ T6666] 2097051 pages RAM [ 147.060243][ T6666] 0 pages HighMem/MovableOnly [ 147.065210][ T6666] 429587 pages reserved [ 147.069528][ T6666] 0 pages cma reserved [ 147.179330][ T6705] netlink: 28 bytes leftover after parsing attributes in process `syz.0.197'. [ 147.220498][ T5842] Bluetooth: hci1: command 0x0c1a tx timeout [ 147.361707][ T6705] team0: Port device team_slave_0 removed [ 147.550834][ T5842] Bluetooth: hci2: command 0x0c1a tx timeout [ 147.621082][ T5842] Bluetooth: hci0: command 0x0c1a tx timeout [ 147.781361][ T5842] Bluetooth: hci3: command 0x0c1a tx timeout [ 148.238628][ T6728] FAULT_INJECTION: forcing a failure. [ 148.238628][ T6728] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 148.263034][ T6728] CPU: 0 UID: 0 PID: 6728 Comm: syz.3.193 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 148.263081][ T6728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 148.263096][ T6728] Call Trace: [ 148.263105][ T6728] [ 148.263116][ T6728] dump_stack_lvl+0x16c/0x1f0 [ 148.263168][ T6728] should_fail_ex+0x512/0x640 [ 148.263204][ T6728] strncpy_from_user+0x3b/0x2e0 [ 148.263236][ T6728] getname_flags.part.0+0x8b/0x540 [ 148.263272][ T6728] getname_flags+0x93/0xf0 [ 148.263308][ T6728] __x64_sys_execve+0x74/0xb0 [ 148.263345][ T6728] do_syscall_64+0xcd/0x260 [ 148.263409][ T6728] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.263436][ T6728] RIP: 0033:0x7f522bb8d169 [ 148.263457][ T6728] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.263481][ T6728] RSP: 002b:00007f522c9b9038 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 148.263506][ T6728] RAX: ffffffffffffffda RBX: 00007f522bda6080 RCX: 00007f522bb8d169 [ 148.263523][ T6728] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000200000000280 [ 148.263539][ T6728] RBP: 00007f522c9b9090 R08: 0000000000000000 R09: 0000000000000000 [ 148.263554][ T6728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 148.263568][ T6728] R13: 0000000000000001 R14: 00007f522bda6080 R15: 00007ffc591cc758 [ 148.263604][ T6728] [ 148.788594][ T6734] netlink: 'syz.2.198': attribute type 10 has an invalid length. [ 148.817935][ T6734] netlink: 230 bytes leftover after parsing attributes in process `syz.2.198'. [ 149.627297][ T6755] bridge0: port 3(netdevsim2) entered blocking state [ 149.677876][ T6755] bridge0: port 3(netdevsim2) entered disabled state [ 149.727941][ T6755] netdevsim netdevsim2 netdevsim2: entered allmulticast mode [ 149.779982][ T6755] netdevsim netdevsim2 netdevsim2: entered promiscuous mode [ 149.796315][ T6755] bridge0: port 3(netdevsim2) entered blocking state [ 149.803351][ T6755] bridge0: port 3(netdevsim2) entered forwarding state [ 150.698629][ T6789] FAULT_INJECTION: forcing a failure. [ 150.698629][ T6789] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 150.734040][ T6789] CPU: 1 UID: 0 PID: 6789 Comm: syz.0.209 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 150.734075][ T6789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 150.734090][ T6789] Call Trace: [ 150.734099][ T6789] [ 150.734109][ T6789] dump_stack_lvl+0x16c/0x1f0 [ 150.734148][ T6789] should_fail_ex+0x512/0x640 [ 150.734182][ T6789] _copy_to_user+0x32/0xd0 [ 150.734215][ T6789] simple_read_from_buffer+0xcb/0x170 [ 150.734253][ T6789] proc_fail_nth_read+0x197/0x270 [ 150.734296][ T6789] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 150.734332][ T6789] ? rw_verify_area+0xcf/0x680 [ 150.734364][ T6789] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 150.734399][ T6789] vfs_read+0x1de/0xc70 [ 150.734438][ T6789] ? __pfx___mutex_lock+0x10/0x10 [ 150.734474][ T6789] ? __pfx_vfs_read+0x10/0x10 [ 150.734518][ T6789] ? __fget_files+0x20e/0x3c0 [ 150.734567][ T6789] ksys_read+0x12a/0x240 [ 150.734602][ T6789] ? __pfx_ksys_read+0x10/0x10 [ 150.734648][ T6789] do_syscall_64+0xcd/0x260 [ 150.734691][ T6789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.734726][ T6789] RIP: 0033:0x7f8f0cd8bb7c [ 150.734749][ T6789] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 150.734772][ T6789] RSP: 002b:00007f8f0dc77030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 150.734797][ T6789] RAX: ffffffffffffffda RBX: 00007f8f0cfa5fa0 RCX: 00007f8f0cd8bb7c [ 150.734814][ T6789] RDX: 000000000000000f RSI: 00007f8f0dc770a0 RDI: 0000000000000003 [ 150.734829][ T6789] RBP: 00007f8f0dc77090 R08: 0000000000000000 R09: 0000000000000000 [ 150.734844][ T6789] R10: fffffffffffffff8 R11: 0000000000000246 R12: 0000000000000001 [ 150.734859][ T6789] R13: 0000000000000001 R14: 00007f8f0cfa5fa0 R15: 00007fff2e1845a8 [ 150.734896][ T6789] [ 152.254378][ T6821] FAULT_INJECTION: forcing a failure. [ 152.254378][ T6821] name failslab, interval 1, probability 0, space 0, times 0 [ 152.297288][ T6821] CPU: 0 UID: 0 PID: 6821 Comm: syz.2.214 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 152.297328][ T6821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 152.297345][ T6821] Call Trace: [ 152.297354][ T6821] [ 152.297365][ T6821] dump_stack_lvl+0x16c/0x1f0 [ 152.297421][ T6821] should_fail_ex+0x512/0x640 [ 152.297452][ T6821] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 152.297494][ T6821] should_failslab+0xc2/0x120 [ 152.297519][ T6821] __kmalloc_cache_noprof+0x6a/0x3e0 [ 152.297556][ T6821] ? create_filter_start.constprop.0+0xa5/0x300 [ 152.297601][ T6821] create_filter_start.constprop.0+0xa5/0x300 [ 152.297643][ T6821] apply_subsystem_event_filter+0x185/0x1450 [ 152.297693][ T6821] ? __might_fault+0xe3/0x190 [ 152.297733][ T6821] ? __pfx_apply_subsystem_event_filter+0x10/0x10 [ 152.297785][ T6821] ? _copy_from_user+0x59/0xd0 [ 152.297823][ T6821] subsystem_filter_write+0x95/0x120 [ 152.297866][ T6821] vfs_write+0x25c/0x1180 [ 152.297899][ T6821] ? __pfx_subsystem_filter_write+0x10/0x10 [ 152.297945][ T6821] ? __pfx___mutex_lock+0x10/0x10 [ 152.297984][ T6821] ? __pfx_vfs_write+0x10/0x10 [ 152.298031][ T6821] ? __fget_files+0x20e/0x3c0 [ 152.298082][ T6821] ksys_write+0x12a/0x240 [ 152.298118][ T6821] ? __pfx_ksys_write+0x10/0x10 [ 152.298152][ T6821] ? rcu_is_watching+0x12/0xc0 [ 152.298197][ T6821] do_syscall_64+0xcd/0x260 [ 152.298239][ T6821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.298266][ T6821] RIP: 0033:0x7f804138d169 [ 152.298287][ T6821] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 152.298312][ T6821] RSP: 002b:00007f804210f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 152.298339][ T6821] RAX: ffffffffffffffda RBX: 00007f80415a6080 RCX: 00007f804138d169 [ 152.298356][ T6821] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000007 [ 152.298380][ T6821] RBP: 00007f804140e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 152.298397][ T6821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 152.298411][ T6821] R13: 0000000000000000 R14: 00007f80415a6080 R15: 00007ffe9a93f308 [ 152.298449][ T6821] [ 153.133078][ T6833] FAULT_INJECTION: forcing a failure. [ 153.133078][ T6833] name failslab, interval 1, probability 0, space 0, times 0 [ 153.152336][ T6833] CPU: 1 UID: 0 PID: 6833 Comm: syz.0.217 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 153.152373][ T6833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 153.152399][ T6833] Call Trace: [ 153.152408][ T6833] [ 153.152418][ T6833] dump_stack_lvl+0x16c/0x1f0 [ 153.152461][ T6833] should_fail_ex+0x512/0x640 [ 153.152487][ T6833] ? __kvmalloc_node_noprof+0x122/0x600 [ 153.152525][ T6833] should_failslab+0xc2/0x120 [ 153.152549][ T6833] __kvmalloc_node_noprof+0x135/0x600 [ 153.152584][ T6833] ? __pfx___mutex_lock+0x10/0x10 [ 153.152619][ T6833] ? traverse.part.0.constprop.0+0x392/0x640 [ 153.152659][ T6833] ? traverse.part.0.constprop.0+0x392/0x640 [ 153.152692][ T6833] traverse.part.0.constprop.0+0x392/0x640 [ 153.152737][ T6833] seq_read_iter+0x932/0x12c0 [ 153.152773][ T6833] ? aa_file_perm+0x4d6/0xfb0 [ 153.152818][ T6833] seq_read+0x39e/0x4e0 [ 153.152853][ T6833] ? __pfx_seq_read+0x10/0x10 [ 153.152892][ T6833] ? get_pid_task+0xfc/0x250 [ 153.152931][ T6833] ? __pfx_seq_read+0x10/0x10 [ 153.152962][ T6833] proc_reg_read+0x23d/0x330 [ 153.152987][ T6833] ? __pfx_proc_reg_read+0x10/0x10 [ 153.153014][ T6833] vfs_read+0x1de/0xc70 [ 153.153060][ T6833] ? __pfx_vfs_read+0x10/0x10 [ 153.153092][ T6833] ? find_held_lock+0x2b/0x80 [ 153.153125][ T6833] ? __fget_files+0x204/0x3c0 [ 153.153166][ T6833] ? __fget_files+0x20e/0x3c0 [ 153.153205][ T6833] ? __fget_files+0x1e0/0x3c0 [ 153.153250][ T6833] __x64_sys_pread64+0x1f4/0x250 [ 153.153285][ T6833] ? __pfx___x64_sys_pread64+0x10/0x10 [ 153.153319][ T6833] ? rcu_is_watching+0x12/0xc0 [ 153.153365][ T6833] do_syscall_64+0xcd/0x260 [ 153.153411][ T6833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.153437][ T6833] RIP: 0033:0x7f8f0cd8d169 [ 153.153457][ T6833] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 153.153481][ T6833] RSP: 002b:00007f8f0dc77038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 153.153506][ T6833] RAX: ffffffffffffffda RBX: 00007f8f0cfa5fa0 RCX: 00007f8f0cd8d169 [ 153.153523][ T6833] RDX: 00000000000081bb RSI: 0000200000000500 RDI: 0000000000000007 [ 153.153538][ T6833] RBP: 00007f8f0dc77090 R08: 0000000000000000 R09: 0000000000000000 [ 153.153554][ T6833] R10: 0000000000000dfe R11: 0000000000000246 R12: 0000000000000001 [ 153.153567][ T6833] R13: 0000000000000000 R14: 00007f8f0cfa5fa0 R15: 00007fff2e1845a8 [ 153.153603][ T6833] [ 153.230775][ T6828] ======================================================= [ 153.230775][ T6828] WARNING: The mand mount option has been deprecated and [ 153.230775][ T6828] and is ignored by this kernel. Remove the mand [ 153.230775][ T6828] option from the mount to silence this warning. [ 153.230775][ T6828] ======================================================= [ 153.522725][ T6843] netlink: 'syz.0.222': attribute type 10 has an invalid length. [ 153.533538][ T6843] netlink: 230 bytes leftover after parsing attributes in process `syz.0.222'. [ 154.256590][ T6867] FAULT_INJECTION: forcing a failure. [ 154.256590][ T6867] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 154.325895][ T6867] CPU: 0 UID: 0 PID: 6867 Comm: syz.3.227 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 154.325935][ T6867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 154.325950][ T6867] Call Trace: [ 154.325959][ T6867] [ 154.325969][ T6867] dump_stack_lvl+0x16c/0x1f0 [ 154.326012][ T6867] should_fail_ex+0x512/0x640 [ 154.326049][ T6867] _copy_to_user+0x32/0xd0 [ 154.326088][ T6867] simple_read_from_buffer+0xcb/0x170 [ 154.326128][ T6867] proc_fail_nth_read+0x197/0x270 [ 154.326167][ T6867] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 154.326207][ T6867] ? rw_verify_area+0xcf/0x680 [ 154.326237][ T6867] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 154.326275][ T6867] vfs_read+0x1de/0xc70 [ 154.326316][ T6867] ? __pfx___mutex_lock+0x10/0x10 [ 154.326354][ T6867] ? __pfx_vfs_read+0x10/0x10 [ 154.326409][ T6867] ? __fget_files+0x20e/0x3c0 [ 154.326459][ T6867] ksys_read+0x12a/0x240 [ 154.326495][ T6867] ? __pfx_ksys_read+0x10/0x10 [ 154.326529][ T6867] ? madvise_unlock+0xf6/0x190 [ 154.326566][ T6867] do_syscall_64+0xcd/0x260 [ 154.326607][ T6867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.326634][ T6867] RIP: 0033:0x7f522bb8bb7c [ 154.326656][ T6867] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 154.326681][ T6867] RSP: 002b:00007f522c9b9030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 154.326708][ T6867] RAX: ffffffffffffffda RBX: 00007f522bda6080 RCX: 00007f522bb8bb7c [ 154.326726][ T6867] RDX: 000000000000000f RSI: 00007f522c9b90a0 RDI: 0000000000000003 [ 154.326742][ T6867] RBP: 00007f522c9b9090 R08: 0000000000000000 R09: 0000000000000000 [ 154.326757][ T6867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 154.326772][ T6867] R13: 0000000000000001 R14: 00007f522bda6080 R15: 00007ffc591cc758 [ 154.326809][ T6867] [ 154.941834][ T6882] netlink: 'syz.1.234': attribute type 10 has an invalid length. [ 154.949793][ T6882] netlink: 230 bytes leftover after parsing attributes in process `syz.1.234'. [ 155.240989][ T6880] Invalid ELF header magic: != ELF [ 155.994247][ T6912] netlink: 8 bytes leftover after parsing attributes in process `syz.0.242'. [ 156.024745][ T6912] netlink: 13700 bytes leftover after parsing attributes in process `syz.0.242'. [ 156.567257][ T6930] netlink: 'syz.1.245': attribute type 10 has an invalid length. [ 156.585575][ T6930] netlink: 230 bytes leftover after parsing attributes in process `syz.1.245'. [ 158.594580][ T6971] FAULT_INJECTION: forcing a failure. [ 158.594580][ T6971] name failslab, interval 1, probability 0, space 0, times 0 [ 158.644552][ T6971] CPU: 0 UID: 0 PID: 6971 Comm: syz.3.252 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 158.644592][ T6971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 158.644606][ T6971] Call Trace: [ 158.644615][ T6971] [ 158.644626][ T6971] dump_stack_lvl+0x16c/0x1f0 [ 158.644670][ T6971] should_fail_ex+0x512/0x640 [ 158.644701][ T6971] ? fs_reclaim_acquire+0xae/0x150 [ 158.644736][ T6971] ? security_inode_init_security+0x13f/0x390 [ 158.644777][ T6971] should_failslab+0xc2/0x120 [ 158.644802][ T6971] __kmalloc_noprof+0xd2/0x510 [ 158.644851][ T6971] security_inode_init_security+0x13f/0x390 [ 158.644896][ T6971] ? __pfx_shmem_initxattrs+0x10/0x10 [ 158.644929][ T6971] ? __pfx_security_inode_init_security+0x10/0x10 [ 158.644982][ T6971] shmem_mknod+0x22e/0x450 [ 158.645023][ T6971] shmem_mkdir+0x31/0x80 [ 158.645058][ T6971] vfs_mkdir+0x590/0x8c0 [ 158.645093][ T6971] do_mkdirat+0x304/0x3e0 [ 158.645131][ T6971] ? __pfx_do_mkdirat+0x10/0x10 [ 158.645183][ T6971] __x64_sys_mkdir+0xef/0x140 [ 158.645221][ T6971] do_syscall_64+0xcd/0x260 [ 158.645260][ T6971] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.645287][ T6971] RIP: 0033:0x7f522bb8d169 [ 158.645311][ T6971] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 158.645347][ T6971] RSP: 002b:00007f522c9da038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 158.645376][ T6971] RAX: ffffffffffffffda RBX: 00007f522bda5fa0 RCX: 00007f522bb8d169 [ 158.645394][ T6971] RDX: 0000000000000000 RSI: 0000000000008001 RDI: 0000000000000000 [ 158.645410][ T6971] RBP: 00007f522bc0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 158.645426][ T6971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 158.645441][ T6971] R13: 0000000000000000 R14: 00007f522bda5fa0 R15: 00007ffc591cc758 [ 158.645479][ T6971] [ 158.832942][ C0] vkms_vblank_simulate: vblank timer overrun [ 161.003120][ T7020] netlink: 'syz.2.263': attribute type 10 has an invalid length. [ 161.034663][ T7020] netlink: 230 bytes leftover after parsing attributes in process `syz.2.263'. [ 161.563701][ T7036] FAULT_INJECTION: forcing a failure. [ 161.563701][ T7036] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 161.599709][ T7036] CPU: 1 UID: 0 PID: 7036 Comm: syz.0.266 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 161.599744][ T7036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 161.599759][ T7036] Call Trace: [ 161.599768][ T7036] [ 161.599778][ T7036] dump_stack_lvl+0x16c/0x1f0 [ 161.599818][ T7036] should_fail_ex+0x512/0x640 [ 161.599855][ T7036] _copy_to_user+0x32/0xd0 [ 161.599891][ T7036] simple_read_from_buffer+0xcb/0x170 [ 161.599930][ T7036] proc_fail_nth_read+0x197/0x270 [ 161.599966][ T7036] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 161.600004][ T7036] ? rw_verify_area+0xcf/0x680 [ 161.600033][ T7036] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 161.600069][ T7036] vfs_read+0x1de/0xc70 [ 161.600110][ T7036] ? __pfx___mutex_lock+0x10/0x10 [ 161.600149][ T7036] ? __pfx_vfs_read+0x10/0x10 [ 161.600187][ T7036] ? __fget_files+0x20e/0x3c0 [ 161.600235][ T7036] ksys_read+0x12a/0x240 [ 161.600269][ T7036] ? __pfx_ksys_read+0x10/0x10 [ 161.600314][ T7036] do_syscall_64+0xcd/0x260 [ 161.600353][ T7036] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.600388][ T7036] RIP: 0033:0x7f8f0cd8bb7c [ 161.600410][ T7036] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 161.600433][ T7036] RSP: 002b:00007f8f0dc77030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 161.600457][ T7036] RAX: ffffffffffffffda RBX: 00007f8f0cfa5fa0 RCX: 00007f8f0cd8bb7c [ 161.600474][ T7036] RDX: 000000000000000f RSI: 00007f8f0dc770a0 RDI: 0000000000000003 [ 161.600489][ T7036] RBP: 00007f8f0dc77090 R08: 0000000000000000 R09: 0000000000000000 [ 161.600504][ T7036] R10: 000000000000000b R11: 0000000000000246 R12: 0000000000000001 [ 161.600518][ T7036] R13: 0000000000000001 R14: 00007f8f0cfa5fa0 R15: 00007fff2e1845a8 [ 161.600546][ T7036] [ 161.612114][ T7038] FAULT_INJECTION: forcing a failure. [ 161.612114][ T7038] name failslab, interval 1, probability 0, space 0, times 0 [ 161.846894][ T7038] CPU: 0 UID: 0 PID: 7038 Comm: syz.3.267 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 161.846930][ T7038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 161.846945][ T7038] Call Trace: [ 161.846954][ T7038] [ 161.846964][ T7038] dump_stack_lvl+0x16c/0x1f0 [ 161.847006][ T7038] should_fail_ex+0x512/0x640 [ 161.847034][ T7038] ? __kmalloc_noprof+0xbf/0x510 [ 161.847075][ T7038] ? kernfs_fop_write_iter+0x237/0x510 [ 161.847105][ T7038] should_failslab+0xc2/0x120 [ 161.847129][ T7038] __kmalloc_noprof+0xd2/0x510 [ 161.847174][ T7038] kernfs_fop_write_iter+0x237/0x510 [ 161.847209][ T7038] vfs_write+0x5ba/0x1180 [ 161.847243][ T7038] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 161.847269][ T7038] ? __pfx___mutex_lock+0x10/0x10 [ 161.847298][ T7038] ? __pfx_vfs_write+0x10/0x10 [ 161.847396][ T7038] ksys_write+0x12a/0x240 [ 161.847422][ T7038] ? __pfx_ksys_write+0x10/0x10 [ 161.847447][ T7038] ? rcu_is_watching+0x12/0xc0 [ 161.847481][ T7038] do_syscall_64+0xcd/0x260 [ 161.847512][ T7038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.847532][ T7038] RIP: 0033:0x7f522bb8d169 [ 161.847554][ T7038] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 161.847575][ T7038] RSP: 002b:00007f522c9da038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 161.847601][ T7038] RAX: ffffffffffffffda RBX: 00007f522bda5fa0 RCX: 00007f522bb8d169 [ 161.847618][ T7038] RDX: 0000000000000004 RSI: 0000200000000080 RDI: 0000000000000003 [ 161.847633][ T7038] RBP: 00007f522c9da090 R08: 0000000000000000 R09: 0000000000000000 [ 161.847648][ T7038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 161.847662][ T7038] R13: 0000000000000000 R14: 00007f522bda5fa0 R15: 00007ffc591cc758 [ 161.847699][ T7038] [ 162.410429][ T7050] netlink: 'syz.3.273': attribute type 10 has an invalid length. [ 162.434852][ T7050] netlink: 230 bytes leftover after parsing attributes in process `syz.3.273'. [ 163.041677][ T7058] FAULT_INJECTION: forcing a failure. [ 163.041677][ T7058] name failslab, interval 1, probability 0, space 0, times 0 [ 163.128545][ T7058] CPU: 0 UID: 0 PID: 7058 Comm: syz.3.274 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 163.128591][ T7058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 163.128616][ T7058] Call Trace: [ 163.128625][ T7058] [ 163.128634][ T7058] dump_stack_lvl+0x16c/0x1f0 [ 163.128676][ T7058] should_fail_ex+0x512/0x640 [ 163.128704][ T7058] ? __kvmalloc_node_noprof+0x122/0x600 [ 163.128745][ T7058] should_failslab+0xc2/0x120 [ 163.128769][ T7058] __kvmalloc_node_noprof+0x135/0x600 [ 163.128805][ T7058] ? __pfx___mutex_lock+0x10/0x10 [ 163.128838][ T7058] ? traverse.part.0.constprop.0+0x392/0x640 [ 163.128889][ T7058] ? traverse.part.0.constprop.0+0x392/0x640 [ 163.128923][ T7058] traverse.part.0.constprop.0+0x392/0x640 [ 163.128962][ T7058] ? aa_file_perm+0x4c7/0xfb0 [ 163.129005][ T7058] seq_read_iter+0x932/0x12c0 [ 163.129057][ T7058] seq_read+0x39e/0x4e0 [ 163.129093][ T7058] ? __pfx_seq_read+0x10/0x10 [ 163.129127][ T7058] ? get_pid_task+0xfc/0x250 [ 163.129171][ T7058] ? rw_verify_area+0xcf/0x680 [ 163.129200][ T7058] ? __pfx_seq_read+0x10/0x10 [ 163.129235][ T7058] vfs_read+0x1de/0xc70 [ 163.129279][ T7058] ? __pfx_vfs_read+0x10/0x10 [ 163.129311][ T7058] ? find_held_lock+0x2b/0x80 [ 163.129362][ T7058] ? __fget_files+0x204/0x3c0 [ 163.129406][ T7058] ? __fget_files+0x20e/0x3c0 [ 163.129440][ T7058] ? __fget_files+0x1e0/0x3c0 [ 163.129488][ T7058] __x64_sys_pread64+0x1f4/0x250 [ 163.129524][ T7058] ? __pfx___x64_sys_pread64+0x10/0x10 [ 163.129559][ T7058] ? rcu_is_watching+0x12/0xc0 [ 163.129612][ T7058] do_syscall_64+0xcd/0x260 [ 163.129649][ T7058] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.129675][ T7058] RIP: 0033:0x7f522bb8d169 [ 163.129697][ T7058] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 163.129721][ T7058] RSP: 002b:00007f522c9b9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 163.129745][ T7058] RAX: ffffffffffffffda RBX: 00007f522bda6080 RCX: 00007f522bb8d169 [ 163.129762][ T7058] RDX: 000000000000000f RSI: 0000200000000000 RDI: 0000000000000006 [ 163.129785][ T7058] RBP: 00007f522c9b9090 R08: 0000000000000000 R09: 0000000000000000 [ 163.129799][ T7058] R10: 00000000000005af R11: 0000000000000246 R12: 0000000000000001 [ 163.129814][ T7058] R13: 0000000000000000 R14: 00007f522bda6080 R15: 00007ffc591cc758 [ 163.129850][ T7058] [ 166.131401][ T7099] FAULT_INJECTION: forcing a failure. [ 166.131401][ T7099] name failslab, interval 1, probability 0, space 0, times 0 [ 166.170775][ T7099] CPU: 0 UID: 0 PID: 7099 Comm: syz.2.286 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 166.170801][ T7099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 166.170811][ T7099] Call Trace: [ 166.170817][ T7099] [ 166.170824][ T7099] dump_stack_lvl+0x16c/0x1f0 [ 166.170851][ T7099] should_fail_ex+0x512/0x640 [ 166.170869][ T7099] ? fs_reclaim_acquire+0xae/0x150 [ 166.170891][ T7099] ? security_inode_init_security+0x13f/0x390 [ 166.170915][ T7099] should_failslab+0xc2/0x120 [ 166.170930][ T7099] __kmalloc_noprof+0xd2/0x510 [ 166.170958][ T7099] security_inode_init_security+0x13f/0x390 [ 166.170983][ T7099] ? __pfx_shmem_initxattrs+0x10/0x10 [ 166.171003][ T7099] ? __pfx_security_inode_init_security+0x10/0x10 [ 166.171034][ T7099] shmem_mknod+0x22e/0x450 [ 166.171058][ T7099] shmem_mkdir+0x31/0x80 [ 166.171078][ T7099] vfs_mkdir+0x590/0x8c0 [ 166.171100][ T7099] do_mkdirat+0x304/0x3e0 [ 166.171124][ T7099] ? __pfx_do_mkdirat+0x10/0x10 [ 166.171153][ T7099] __x64_sys_mkdir+0xef/0x140 [ 166.171176][ T7099] do_syscall_64+0xcd/0x260 [ 166.171200][ T7099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.171216][ T7099] RIP: 0033:0x7f804138d169 [ 166.171229][ T7099] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 166.171245][ T7099] RSP: 002b:00007f8042130038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 166.171261][ T7099] RAX: ffffffffffffffda RBX: 00007f80415a5fa0 RCX: 00007f804138d169 [ 166.171271][ T7099] RDX: 0000000000000000 RSI: 0000000000008001 RDI: 0000000000000000 [ 166.171280][ T7099] RBP: 00007f804140e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 166.171289][ T7099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 166.171298][ T7099] R13: 0000000000000000 R14: 00007f80415a5fa0 R15: 00007ffe9a93f308 [ 166.171317][ T7099] [ 167.267786][ T7123] kmem.tcp.limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 167.367294][ T7127] netlink: 8 bytes leftover after parsing attributes in process `syz.3.295'. [ 167.388864][ T7127] netlink: 13700 bytes leftover after parsing attributes in process `syz.3.295'. [ 167.429335][ T7125] netlink: 8 bytes leftover after parsing attributes in process `syz.2.294'. [ 167.451976][ T7125] netlink: 13700 bytes leftover after parsing attributes in process `syz.2.294'. [ 167.914911][ T7146] netlink: 16 bytes leftover after parsing attributes in process `syz.0.299'. [ 168.300681][ T7155] FAULT_INJECTION: forcing a failure. [ 168.300681][ T7155] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 168.323221][ T7155] CPU: 0 UID: 0 PID: 7155 Comm: syz.2.304 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 168.323256][ T7155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 168.323271][ T7155] Call Trace: [ 168.323280][ T7155] [ 168.323290][ T7155] dump_stack_lvl+0x16c/0x1f0 [ 168.323342][ T7155] should_fail_ex+0x512/0x640 [ 168.323378][ T7155] _copy_to_user+0x32/0xd0 [ 168.323413][ T7155] simple_read_from_buffer+0xcb/0x170 [ 168.323453][ T7155] proc_fail_nth_read+0x197/0x270 [ 168.323487][ T7155] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 168.323522][ T7155] ? rw_verify_area+0xcf/0x680 [ 168.323548][ T7155] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 168.323579][ T7155] vfs_read+0x1de/0xc70 [ 168.323618][ T7155] ? __pfx___mutex_lock+0x10/0x10 [ 168.323652][ T7155] ? __pfx_vfs_read+0x10/0x10 [ 168.323695][ T7155] ? __fget_files+0x20e/0x3c0 [ 168.323742][ T7155] ksys_read+0x12a/0x240 [ 168.323775][ T7155] ? __pfx_ksys_read+0x10/0x10 [ 168.323819][ T7155] do_syscall_64+0xcd/0x260 [ 168.323858][ T7155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.323884][ T7155] RIP: 0033:0x7f804138bb7c [ 168.323905][ T7155] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 168.323928][ T7155] RSP: 002b:00007f8042130030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 168.323953][ T7155] RAX: ffffffffffffffda RBX: 00007f80415a5fa0 RCX: 00007f804138bb7c [ 168.323969][ T7155] RDX: 000000000000000f RSI: 00007f80421300a0 RDI: 0000000000000003 [ 168.323983][ T7155] RBP: 00007f8042130090 R08: 0000000000000000 R09: 0000000000000000 [ 168.323997][ T7155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 168.324010][ T7155] R13: 0000000000000001 R14: 00007f80415a5fa0 R15: 00007ffe9a93f308 [ 168.324044][ T7155] [ 168.659345][ T7157] sd 0:0:1:0: PR command failed: 1026 [ 168.665197][ T7157] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 168.689775][ T7157] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 168.806777][ T7161] ecryptfs_parse_packet_length: Five-byte packet length not supported [ 168.827069][ T7161] ecryptfs_miscdev_write: Error parsing packet length; rc = [-22] [ 168.879686][ T7164] netlink: 8 bytes leftover after parsing attributes in process `syz.0.307'. [ 168.879763][ T7164] netlink: 13700 bytes leftover after parsing attributes in process `syz.0.307'. [ 169.367515][ T7178] netlink: 'syz.1.311': attribute type 10 has an invalid length. [ 169.375738][ T7178] netlink: 230 bytes leftover after parsing attributes in process `syz.1.311'. [ 171.067479][ T7208] netlink: 28 bytes leftover after parsing attributes in process `syz.3.321'. [ 171.107946][ T7209] netlink: 28 bytes leftover after parsing attributes in process `syz.3.321'. [ 171.341318][ T7209] Invalid ELF header magic: != ELF [ 171.899022][ T7217] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 172.005727][ T7217] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 172.146465][ T7220] zswap: compressor not available [ 172.476668][ T7236] netlink: 8 bytes leftover after parsing attributes in process `syz.1.328'. [ 172.486263][ T7236] netlink: 13700 bytes leftover after parsing attributes in process `syz.1.328'. [ 172.692171][ T7241] netlink: 16 bytes leftover after parsing attributes in process `syz.0.332'. [ 172.846150][ T7245] netlink: 'syz.3.333': attribute type 10 has an invalid length. [ 172.902374][ T7245] netlink: 230 bytes leftover after parsing attributes in process `syz.3.333'. [ 173.283777][ T7254] FAULT_INJECTION: forcing a failure. [ 173.283777][ T7254] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 173.297464][ T7254] CPU: 1 UID: 0 PID: 7254 Comm: syz.3.337 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 173.297500][ T7254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 173.297516][ T7254] Call Trace: [ 173.297525][ T7254] [ 173.297534][ T7254] dump_stack_lvl+0x16c/0x1f0 [ 173.297561][ T7254] should_fail_ex+0x512/0x640 [ 173.297584][ T7254] should_fail_alloc_page+0xe7/0x130 [ 173.297601][ T7254] prepare_alloc_pages+0x3c2/0x610 [ 173.297624][ T7254] __alloc_frozen_pages_noprof+0x18f/0x23a0 [ 173.297652][ T7254] ? __lock_acquire+0x5ca/0x1ba0 [ 173.297675][ T7254] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 173.297703][ T7254] ? find_held_lock+0x2b/0x80 [ 173.297726][ T7254] ? bpf_ksym_find+0x124/0x1c0 [ 173.297747][ T7254] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 173.297769][ T7254] ? is_bpf_text_address+0x94/0x1a0 [ 173.297784][ T7254] ? kernel_text_address+0x8d/0x100 [ 173.297801][ T7254] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 173.297819][ T7254] ? policy_nodemask+0xea/0x4e0 [ 173.297846][ T7254] alloc_pages_mpol+0x1fb/0x550 [ 173.297862][ T7254] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 173.297878][ T7254] ? stack_trace_save+0x8e/0xc0 [ 173.297901][ T7254] alloc_pages_noprof+0x131/0x390 [ 173.297916][ T7254] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 173.297937][ T7254] get_free_pages_noprof+0xc/0x40 [ 173.297952][ T7254] kasan_populate_vmalloc_pte+0x2d/0x160 [ 173.297974][ T7254] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 173.297995][ T7254] __apply_to_page_range+0x5f9/0xd30 [ 173.298017][ T7254] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 173.298043][ T7254] ? __pfx___apply_to_page_range+0x10/0x10 [ 173.298062][ T7254] ? alloc_vmap_area+0x872/0x2970 [ 173.298084][ T7254] alloc_vmap_area+0x919/0x2970 [ 173.298110][ T7254] ? __pfx_alloc_vmap_area+0x10/0x10 [ 173.298134][ T7254] __get_vm_area_node+0x1a7/0x300 [ 173.298158][ T7254] __vmalloc_node_range_noprof+0x277/0x1540 [ 173.298184][ T7254] ? kernel_clone+0xfc/0x960 [ 173.298208][ T7254] ? find_held_lock+0x2b/0x80 [ 173.298236][ T7254] ? rcu_is_watching+0x12/0xc0 [ 173.298256][ T7254] ? kernel_clone+0xfc/0x960 [ 173.298283][ T7254] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 173.298302][ T7254] ? __memcg_slab_post_alloc_hook+0x4d0/0x940 [ 173.298323][ T7254] ? rcu_is_watching+0x12/0xc0 [ 173.298343][ T7254] ? kernel_clone+0xfc/0x960 [ 173.298364][ T7254] __vmalloc_node_noprof+0x74/0xa0 [ 173.298384][ T7254] ? kernel_clone+0xfc/0x960 [ 173.298407][ T7254] copy_process+0x2ead/0x91a0 [ 173.298428][ T7254] ? find_held_lock+0x2b/0x80 [ 173.298448][ T7254] ? schedule+0x2d7/0x3a0 [ 173.298469][ T7254] ? futex_wait_queue+0x24/0x220 [ 173.298484][ T7254] ? schedule+0xf1/0x3a0 [ 173.298503][ T7254] ? futex_wait_queue+0x14c/0x220 [ 173.298522][ T7254] ? __pfx_copy_process+0x10/0x10 [ 173.298542][ T7254] ? __pfx___futex_wait+0x10/0x10 [ 173.298557][ T7254] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 173.298582][ T7254] ? __pfx_futex_wake_mark+0x10/0x10 [ 173.298609][ T7254] kernel_clone+0xfc/0x960 [ 173.298633][ T7254] ? __pfx_kernel_clone+0x10/0x10 [ 173.298668][ T7254] __do_sys_clone+0xce/0x120 [ 173.298689][ T7254] ? __pfx___do_sys_clone+0x10/0x10 [ 173.298723][ T7254] ? syscall_user_dispatch+0x78/0x140 [ 173.298747][ T7254] do_syscall_64+0xcd/0x260 [ 173.298771][ T7254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.298786][ T7254] RIP: 0033:0x7f522bb8d169 [ 173.298800][ T7254] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 173.298815][ T7254] RSP: 002b:00007f522c9da038 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 173.298831][ T7254] RAX: ffffffffffffffda RBX: 00007f522bda5fa0 RCX: 00007f522bb8d169 [ 173.298841][ T7254] RDX: 0000000000000000 RSI: fffffffffffffff7 RDI: 0000000000000006 [ 173.298850][ T7254] RBP: 00007f522bc0e2a0 R08: 0000000000000009 R09: 0000000000000000 [ 173.298859][ T7254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 173.298867][ T7254] R13: 0000000000000000 R14: 00007f522bda5fa0 R15: 00007ffc591cc758 [ 173.298888][ T7254] [ 173.299009][ T7254] syz.3.337: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 173.773625][ T7254] CPU: 1 UID: 0 PID: 7254 Comm: syz.3.337 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 173.773666][ T7254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 173.773682][ T7254] Call Trace: [ 173.773692][ T7254] [ 173.773703][ T7254] dump_stack_lvl+0x16c/0x1f0 [ 173.773745][ T7254] warn_alloc+0x248/0x3a0 [ 173.773787][ T7254] ? __pfx_warn_alloc+0x10/0x10 [ 173.773830][ T7254] ? kfree+0x2b6/0x4d0 [ 173.773873][ T7254] ? __get_vm_area_node+0x1e5/0x300 [ 173.773916][ T7254] __vmalloc_node_range_noprof+0xd31/0x1540 [ 173.773955][ T7254] ? find_held_lock+0x2b/0x80 [ 173.773995][ T7254] ? rcu_is_watching+0x12/0xc0 [ 173.774030][ T7254] ? kernel_clone+0xfc/0x960 [ 173.774080][ T7254] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 173.774115][ T7254] ? __memcg_slab_post_alloc_hook+0x4d0/0x940 [ 173.774153][ T7254] ? rcu_is_watching+0x12/0xc0 [ 173.774190][ T7254] ? kernel_clone+0xfc/0x960 [ 173.774228][ T7254] __vmalloc_node_noprof+0x74/0xa0 [ 173.774275][ T7254] ? kernel_clone+0xfc/0x960 [ 173.774315][ T7254] copy_process+0x2ead/0x91a0 [ 173.774353][ T7254] ? find_held_lock+0x2b/0x80 [ 173.774389][ T7254] ? schedule+0x2d7/0x3a0 [ 173.774425][ T7254] ? futex_wait_queue+0x24/0x220 [ 173.774451][ T7254] ? schedule+0xf1/0x3a0 [ 173.774485][ T7254] ? futex_wait_queue+0x14c/0x220 [ 173.774517][ T7254] ? __pfx_copy_process+0x10/0x10 [ 173.774554][ T7254] ? __pfx___futex_wait+0x10/0x10 [ 173.774581][ T7254] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 173.774621][ T7254] ? __pfx_futex_wake_mark+0x10/0x10 [ 173.774667][ T7254] kernel_clone+0xfc/0x960 [ 173.774709][ T7254] ? __pfx_kernel_clone+0x10/0x10 [ 173.774757][ T7254] __do_sys_clone+0xce/0x120 [ 173.774788][ T7254] ? __pfx___do_sys_clone+0x10/0x10 [ 173.774838][ T7254] ? syscall_user_dispatch+0x78/0x140 [ 173.774879][ T7254] do_syscall_64+0xcd/0x260 [ 173.774919][ T7254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.774950][ T7254] RIP: 0033:0x7f522bb8d169 [ 173.774971][ T7254] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 173.774995][ T7254] RSP: 002b:00007f522c9da038 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 173.775020][ T7254] RAX: ffffffffffffffda RBX: 00007f522bda5fa0 RCX: 00007f522bb8d169 [ 173.775038][ T7254] RDX: 0000000000000000 RSI: fffffffffffffff7 RDI: 0000000000000006 [ 173.775053][ T7254] RBP: 00007f522bc0e2a0 R08: 0000000000000009 R09: 0000000000000000 [ 173.775067][ T7254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 173.775082][ T7254] R13: 0000000000000000 R14: 00007f522bda5fa0 R15: 00007ffc591cc758 [ 173.775118][ T7254] [ 173.775127][ T7254] Mem-Info: [ 174.120198][ T7254] active_anon:13480 inactive_anon:0 isolated_anon:0 [ 174.120198][ T7254] active_file:17384 inactive_file:38598 isolated_file:0 [ 174.120198][ T7254] unevictable:768 dirty:1038 writeback:0 [ 174.120198][ T7254] slab_reclaimable:9694 slab_unreclaimable:98618 [ 174.120198][ T7254] mapped:24460 shmem:1403 pagetables:885 [ 174.120198][ T7254] sec_pagetables:0 bounce:0 [ 174.120198][ T7254] kernel_misc_reclaimable:0 [ 174.120198][ T7254] free:1324490 free_pcp:2849 free_cma:0 [ 174.171795][ T7254] Node 0 active_anon:53920kB inactive_anon:0kB active_file:69536kB inactive_file:154320kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:97840kB dirty:4148kB writeback:0kB shmem:4076kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10560kB pagetables:3340kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 174.216790][ T7256] sd 0:0:1:0: PR command failed: 1026 [ 174.217513][ T7254] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 174.222241][ T7256] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 174.259399][ T7254] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 174.266863][ T7256] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 174.301669][ T7254] lowmem_reserve[]: 0 2482 2483 2483 2483 [ 174.308889][ T7254] Node 0 DMA32 free:1372324kB boost:0kB min:34092kB low:42612kB high:51132kB reserved_highatomic:0KB active_anon:53904kB inactive_anon:0kB active_file:69536kB inactive_file:152768kB unevictable:1536kB writepending:4148kB present:3129332kB managed:2541688kB mlocked:0kB bounce:0kB free_pcp:11520kB local_pcp:788kB free_cma:0kB [ 174.343495][ T7254] lowmem_reserve[]: 0 0 1 1 1 [ 174.345277][ T7264] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 174.348884][ T7254] Node 0 Normal free:24kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB active_anon:52kB inactive_anon:0kB active_file:0kB inactive_file:1552kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 174.397280][ T7254] lowmem_reserve[]: 0 0 0 0 0 [ 174.416102][ T7254] Node 1 Normal free:3908916kB boost:0kB min:55784kB low:69728kB high:83672kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:772kB local_pcp:772kB free_cma:0kB [ 174.473956][ T7254] lowmem_reserve[]: 0 0 0 0 0 [ 174.478778][ T7254] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 174.524052][ T7254] Node 0 DMA32: 9*4kB (UE) 869*8kB (UM) 879*16kB (UM) 769*32kB (UME) 798*64kB (UME) 375*128kB (UME) 227*256kB (UM) 98*512kB (UME) 44*1024kB (ME) 10*2048kB (ME) 257*4096kB (UM) = 1371228kB [ 174.562175][ T7254] Node 0 Normal: 0*4kB 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24kB [ 174.577574][ T7254] Node 1 Normal: 118*4kB (U) 66*8kB (UE) 39*16kB (UE) 210*32kB (UE) 95*64kB (UME) 30*128kB (UE) 20*256kB (UME) 9*512kB (UM) 4*1024kB (UME) 3*2048kB (UE) 945*4096kB (M) = 3908952kB [ 174.618683][ T7254] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 174.652016][ T7254] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 174.671794][ T7254] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 174.733844][ T7254] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 174.756223][ T7254] 57417 total pagecache pages [ 174.782815][ T7254] 26 pages in swap cache [ 174.798352][ T7254] Free swap = 124892kB [ 174.802580][ T7254] Total swap = 124996kB [ 174.826315][ T7254] 2097051 pages RAM [ 174.830187][ T7254] 0 pages HighMem/MovableOnly [ 174.849904][ T7254] 429587 pages reserved [ 174.860047][ T7254] 0 pages cma reserved [ 174.874836][ T7275] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 174.916165][ T7275] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 176.043811][ T7296] netlink: 'syz.1.346': attribute type 10 has an invalid length. [ 176.051867][ T7296] netlink: 230 bytes leftover after parsing attributes in process `syz.1.346'. [ 176.612550][ T7304] syz.3.348 uses obsolete (PF_INET,SOCK_PACKET) [ 177.041692][ T7313] netlink: 4 bytes leftover after parsing attributes in process `syz.3.350'. [ 177.511001][ T7328] netlink: 16 bytes leftover after parsing attributes in process `syz.1.354'. [ 178.970135][ T7368] FAULT_INJECTION: forcing a failure. [ 178.970135][ T7368] name failslab, interval 1, probability 0, space 0, times 0 [ 178.998117][ T7368] CPU: 1 UID: 0 PID: 7368 Comm: syz.0.357 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 178.998153][ T7368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 178.998167][ T7368] Call Trace: [ 178.998174][ T7368] [ 178.998183][ T7368] dump_stack_lvl+0x16c/0x1f0 [ 178.998225][ T7368] should_fail_ex+0x512/0x640 [ 178.998254][ T7368] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 178.998293][ T7368] should_failslab+0xc2/0x120 [ 178.998318][ T7368] __kmalloc_cache_noprof+0x6a/0x3e0 [ 178.998360][ T7368] ? dccp_feat_clone_sp_val+0x96/0x130 [ 178.998400][ T7368] ? dccp_feat_entry_new+0x1a2/0x380 [ 178.998446][ T7368] dccp_feat_entry_new+0x1a2/0x380 [ 178.998491][ T7368] __feat_register_sp+0x372/0x5a0 [ 178.998537][ T7368] ? __pfx___feat_register_sp+0x10/0x10 [ 178.998577][ T7368] ? __kasan_kmalloc+0xaa/0xb0 [ 178.998622][ T7368] dccp_feat_init+0x724/0x800 [ 178.998653][ T7368] ? __pfx_dccp_feat_init+0x10/0x10 [ 178.998679][ T7368] ? __pfx_dccp_keepalive_timer+0x10/0x10 [ 178.998714][ T7368] ? lockdep_init_map_type+0x5c/0x280 [ 178.998742][ T7368] ? do_init_timer+0xc9/0x110 [ 178.998777][ T7368] ? __pfx_dccp_keepalive_timer+0x10/0x10 [ 178.998810][ T7368] ? __pfx_dccp_delack_timer+0x10/0x10 [ 178.998850][ T7368] dccp_init_sock+0x327/0x420 [ 178.998879][ T7368] ? __pfx_dccp_v4_init_sock+0x10/0x10 [ 178.998909][ T7368] dccp_v4_init_sock+0x1f/0xa0 [ 178.998936][ T7368] ? __pfx_dccp_v4_init_sock+0x10/0x10 [ 178.998965][ T7368] inet_create+0x936/0x1090 [ 178.998991][ T7368] ? inet_create+0x93/0x1090 [ 178.999022][ T7368] __sock_create+0x335/0x8d0 [ 178.999055][ T7368] inet_ctl_sock_create+0x94/0x230 [ 178.999095][ T7368] ? __pfx_inet_ctl_sock_create+0x10/0x10 [ 178.999143][ T7368] ? __pfx_dccp_v4_init_net+0x10/0x10 [ 178.999171][ T7368] dccp_v4_init_net+0x63/0x90 [ 178.999200][ T7368] ops_init+0x1df/0x5f0 [ 178.999240][ T7368] setup_net+0x21e/0x850 [ 178.999279][ T7368] ? __pfx_setup_net+0x10/0x10 [ 178.999311][ T7368] ? lockdep_init_map_type+0x5c/0x280 [ 178.999336][ T7368] ? __pfx_down_read_killable+0x10/0x10 [ 178.999390][ T7368] ? debug_mutex_init+0x37/0x70 [ 178.999427][ T7368] copy_net_ns+0x2a6/0x5f0 [ 178.999470][ T7368] create_new_namespaces+0x3ea/0xad0 [ 178.999516][ T7368] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 178.999556][ T7368] ksys_unshare+0x45b/0xa40 [ 178.999598][ T7368] ? __pfx_ksys_unshare+0x10/0x10 [ 178.999634][ T7368] ? xfd_validate_state+0x5d/0x180 [ 178.999665][ T7368] ? rcu_is_watching+0x12/0xc0 [ 178.999706][ T7368] __x64_sys_unshare+0x31/0x40 [ 178.999744][ T7368] do_syscall_64+0xcd/0x260 [ 178.999783][ T7368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.999809][ T7368] RIP: 0033:0x7f8f0cd8d169 [ 178.999831][ T7368] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 178.999855][ T7368] RSP: 002b:00007f8f0dc77038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 178.999881][ T7368] RAX: ffffffffffffffda RBX: 00007f8f0cfa5fa0 RCX: 00007f8f0cd8d169 [ 178.999898][ T7368] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 178.999912][ T7368] RBP: 00007f8f0ce0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 178.999927][ T7368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 178.999940][ T7368] R13: 0000000000000000 R14: 00007f8f0cfa5fa0 R15: 00007fff2e1845a8 [ 178.999975][ T7368] [ 179.413917][ T7366] sg_write: data in/out 3292/1 bytes for SCSI command 0xa3-- guessing data in; [ 179.413917][ T7366] program syz.3.359 not setting count and/or reply_len properly [ 180.119467][ T7382] net_ratelimit: 13 callbacks suppressed [ 180.119491][ T7382] openvswitch: netlink: Key type 261 is out of range max 32 [ 180.870052][ T7395] netlink: 'syz.0.365': attribute type 10 has an invalid length. [ 180.883740][ T7395] netlink: 230 bytes leftover after parsing attributes in process `syz.0.365'. [ 182.430677][ T7429] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0 [ 182.841390][ T7450] FAULT_INJECTION: forcing a failure. [ 182.841390][ T7450] name failslab, interval 1, probability 0, space 0, times 0 [ 182.910737][ T7450] CPU: 0 UID: 0 PID: 7450 Comm: syz.1.376 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 182.910779][ T7450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 182.910794][ T7450] Call Trace: [ 182.910803][ T7450] [ 182.910812][ T7450] dump_stack_lvl+0x16c/0x1f0 [ 182.910853][ T7450] should_fail_ex+0x512/0x640 [ 182.910883][ T7450] ? fs_reclaim_acquire+0xae/0x150 [ 182.910918][ T7450] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 182.910954][ T7450] should_failslab+0xc2/0x120 [ 182.910980][ T7450] __kmalloc_noprof+0xd2/0x510 [ 182.911029][ T7450] tomoyo_realpath_from_path+0xc2/0x6e0 [ 182.911069][ T7450] ? tomoyo_profile+0x47/0x60 [ 182.911113][ T7450] tomoyo_path_number_perm+0x245/0x580 [ 182.911143][ T7450] ? tomoyo_path_number_perm+0x237/0x580 [ 182.911179][ T7450] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 182.911212][ T7450] ? find_held_lock+0x2b/0x80 [ 182.911282][ T7450] ? find_held_lock+0x2b/0x80 [ 182.911322][ T7450] ? hook_file_ioctl_common+0x145/0x410 [ 182.911360][ T7450] ? __fget_files+0x20e/0x3c0 [ 182.911405][ T7450] security_file_ioctl+0x9b/0x240 [ 182.911448][ T7450] __x64_sys_ioctl+0xb7/0x200 [ 182.911485][ T7450] do_syscall_64+0xcd/0x260 [ 182.911526][ T7450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.911552][ T7450] RIP: 0033:0x7f14c138d169 [ 182.911573][ T7450] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 182.911598][ T7450] RSP: 002b:00007f14c2159038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 182.911623][ T7450] RAX: ffffffffffffffda RBX: 00007f14c15a6080 RCX: 00007f14c138d169 [ 182.911640][ T7450] RDX: 0000000000000046 RSI: 0000000000008912 RDI: 0000000000000003 [ 182.911655][ T7450] RBP: 00007f14c2159090 R08: 0000000000000000 R09: 0000000000000000 [ 182.911669][ T7450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 182.911684][ T7450] R13: 0000000000000000 R14: 00007f14c15a6080 R15: 00007fff9d8a1c98 [ 182.911721][ T7450] [ 182.911731][ T7450] ERROR: Out of memory at tomoyo_realpath_from_path. [ 183.967559][ T7466] netlink: 8 bytes leftover after parsing attributes in process `syz.0.378'. [ 184.045131][ T7466] netlink: 13700 bytes leftover after parsing attributes in process `syz.0.378'. [ 185.424135][ T7491] netlink: 'syz.2.383': attribute type 10 has an invalid length. [ 185.448480][ T7491] netlink: 230 bytes leftover after parsing attributes in process `syz.2.383'. [ 186.275192][ T7501] FAULT_INJECTION: forcing a failure. [ 186.275192][ T7501] name failslab, interval 1, probability 0, space 0, times 0 [ 186.350663][ T7501] CPU: 0 UID: 0 PID: 7501 Comm: syz.1.387 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 186.350702][ T7501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 186.350718][ T7501] Call Trace: [ 186.350726][ T7501] [ 186.350737][ T7501] dump_stack_lvl+0x16c/0x1f0 [ 186.350782][ T7501] should_fail_ex+0x512/0x640 [ 186.350813][ T7501] ? fs_reclaim_acquire+0xae/0x150 [ 186.350850][ T7501] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 186.350887][ T7501] should_failslab+0xc2/0x120 [ 186.350914][ T7501] __kmalloc_noprof+0xd2/0x510 [ 186.350964][ T7501] tomoyo_realpath_from_path+0xc2/0x6e0 [ 186.351007][ T7501] ? tomoyo_profile+0x47/0x60 [ 186.351052][ T7501] tomoyo_path_number_perm+0x245/0x580 [ 186.351081][ T7501] ? tomoyo_path_number_perm+0x237/0x580 [ 186.351117][ T7501] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 186.351151][ T7501] ? find_held_lock+0x2b/0x80 [ 186.351222][ T7501] ? find_held_lock+0x2b/0x80 [ 186.351255][ T7501] ? hook_file_ioctl_common+0x145/0x410 [ 186.351294][ T7501] ? __fget_files+0x20e/0x3c0 [ 186.351355][ T7501] security_file_ioctl+0x9b/0x240 [ 186.351391][ T7501] __x64_sys_ioctl+0xb7/0x200 [ 186.351428][ T7501] do_syscall_64+0xcd/0x260 [ 186.351471][ T7501] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.351498][ T7501] RIP: 0033:0x7f14c138d169 [ 186.351520][ T7501] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 186.351545][ T7501] RSP: 002b:00007f14c217a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 186.351571][ T7501] RAX: ffffffffffffffda RBX: 00007f14c15a5fa0 RCX: 00007f14c138d169 [ 186.351589][ T7501] RDX: 0000000000000000 RSI: 0000000000005423 RDI: 0000000000000004 [ 186.351605][ T7501] RBP: 00007f14c217a090 R08: 0000000000000000 R09: 0000000000000000 [ 186.351620][ T7501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 186.351636][ T7501] R13: 0000000000000000 R14: 00007f14c15a5fa0 R15: 00007fff9d8a1c98 [ 186.351673][ T7501] [ 186.351771][ T7501] ERROR: Out of memory at tomoyo_realpath_from_path. [ 187.994819][ T7531] FAULT_INJECTION: forcing a failure. [ 187.994819][ T7531] name failslab, interval 1, probability 0, space 0, times 0 [ 188.063062][ T7531] CPU: 1 UID: 0 PID: 7531 Comm: syz.3.394 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 188.063105][ T7531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 188.063131][ T7531] Call Trace: [ 188.063140][ T7531] [ 188.063150][ T7531] dump_stack_lvl+0x16c/0x1f0 [ 188.063195][ T7531] should_fail_ex+0x512/0x640 [ 188.063223][ T7531] ? __kmalloc_noprof+0xbf/0x510 [ 188.063266][ T7531] ? lsm_blob_alloc+0x68/0x90 [ 188.063305][ T7531] should_failslab+0xc2/0x120 [ 188.063332][ T7531] __kmalloc_noprof+0xd2/0x510 [ 188.063380][ T7531] lsm_blob_alloc+0x68/0x90 [ 188.063421][ T7531] security_sk_alloc+0x30/0x270 [ 188.063453][ T7531] sk_prot_alloc+0xfb/0x2a0 [ 188.063494][ T7531] sk_alloc+0x36/0xc20 [ 188.063526][ T7531] inet_create+0x3a1/0x1090 [ 188.063552][ T7531] ? inet_create+0x93/0x1090 [ 188.063583][ T7531] __sock_create+0x335/0x8d0 [ 188.063617][ T7531] __sys_socket+0x14d/0x260 [ 188.063644][ T7531] ? __pfx___sys_socket+0x10/0x10 [ 188.063671][ T7531] ? rcu_is_watching+0x12/0xc0 [ 188.063713][ T7531] __x64_sys_socket+0x72/0xb0 [ 188.063738][ T7531] ? lockdep_hardirqs_on+0x7c/0x110 [ 188.063776][ T7531] do_syscall_64+0xcd/0x260 [ 188.063819][ T7531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.063848][ T7531] RIP: 0033:0x7f522bb8d169 [ 188.063871][ T7531] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 188.063898][ T7531] RSP: 002b:00007f522c9da038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 188.063927][ T7531] RAX: ffffffffffffffda RBX: 00007f522bda5fa0 RCX: 00007f522bb8d169 [ 188.063946][ T7531] RDX: 0000000000000106 RSI: 0000000000000801 RDI: 0000000000000002 [ 188.063962][ T7531] RBP: 00007f522bc0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 188.063979][ T7531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 188.063995][ T7531] R13: 0000000000000000 R14: 00007f522bda5fa0 R15: 00007ffc591cc758 [ 188.064033][ T7531] [ 189.605423][ T7568] netlink: 8 bytes leftover after parsing attributes in process `syz.3.400'. [ 189.614420][ T7568] netlink: 13700 bytes leftover after parsing attributes in process `syz.3.400'. [ 195.355352][ T7668] netlink: 'syz.2.415': attribute type 10 has an invalid length. [ 195.363273][ T7668] netlink: 230 bytes leftover after parsing attributes in process `syz.2.415'. [ 199.721883][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.728647][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 201.585788][ T7753] Invalid ELF header magic: != ELF [ 205.053700][ T7790] netlink: 342 bytes leftover after parsing attributes in process `syz.0.444'. [ 205.065161][ T7790] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 205.797220][ T7799] FAULT_INJECTION: forcing a failure. [ 205.797220][ T7799] name failslab, interval 1, probability 0, space 0, times 0 [ 205.828985][ T7799] CPU: 1 UID: 0 PID: 7799 Comm: syz.2.446 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 205.829026][ T7799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 205.829043][ T7799] Call Trace: [ 205.829053][ T7799] [ 205.829064][ T7799] dump_stack_lvl+0x16c/0x1f0 [ 205.829112][ T7799] should_fail_ex+0x512/0x640 [ 205.829242][ T7799] ? __kmalloc_noprof+0xbf/0x510 [ 205.829289][ T7799] ? kobject_get_path+0xd2/0x2a0 [ 205.829331][ T7799] should_failslab+0xc2/0x120 [ 205.829359][ T7799] __kmalloc_noprof+0xd2/0x510 [ 205.829410][ T7799] kobject_get_path+0xd2/0x2a0 [ 205.829461][ T7799] kobject_uevent_env+0x289/0x1870 [ 205.829490][ T7799] ? __pfx_dev_uevent_name+0x10/0x10 [ 205.829533][ T7799] ? queue_work_on+0x12a/0x1f0 [ 205.829566][ T7799] ? bus_to_subsys+0x12d/0x160 [ 205.829605][ T7799] driver_bound+0x164/0x230 [ 205.829650][ T7799] device_bind_driver+0x3a/0x70 [ 205.829693][ T7799] mac80211_hwsim_new_radio+0x3e5/0x54d0 [ 205.829748][ T7799] ? __asan_memset+0x23/0x50 [ 205.829788][ T7799] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 205.829837][ T7799] hwsim_new_radio_nl+0xb51/0x12c0 [ 205.829878][ T7799] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 205.829923][ T7799] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 205.829973][ T7799] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 205.830030][ T7799] genl_family_rcv_msg_doit+0x206/0x2f0 [ 205.830082][ T7799] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 205.830129][ T7799] ? trace_cap_capable+0x18d/0x200 [ 205.830192][ T7799] ? bpf_lsm_capable+0x9/0x10 [ 205.830233][ T7799] ? security_capable+0x7e/0x260 [ 205.830264][ T7799] ? ns_capable+0xd7/0x110 [ 205.830304][ T7799] genl_rcv_msg+0x55c/0x800 [ 205.830336][ T7799] ? __pfx_genl_rcv_msg+0x10/0x10 [ 205.830360][ T7799] ? __pfx___dev_queue_xmit+0x10/0x10 [ 205.830392][ T7799] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 205.830429][ T7799] ? __lock_acquire+0xaa4/0x1ba0 [ 205.830464][ T7799] netlink_rcv_skb+0x16a/0x440 [ 205.830501][ T7799] ? __pfx_genl_rcv_msg+0x10/0x10 [ 205.830527][ T7799] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 205.830578][ T7799] ? __pfx_down_read+0x10/0x10 [ 205.830621][ T7799] ? netlink_deliver_tap+0x1ae/0xd30 [ 205.830663][ T7799] genl_rcv+0x28/0x40 [ 205.830703][ T7799] netlink_unicast+0x53a/0x7f0 [ 205.830747][ T7799] ? __pfx_netlink_unicast+0x10/0x10 [ 205.830786][ T7799] ? __lock_acquire+0xaa4/0x1ba0 [ 205.830823][ T7799] netlink_sendmsg+0x8d1/0xdd0 [ 205.830871][ T7799] ? __pfx_netlink_sendmsg+0x10/0x10 [ 205.830924][ T7799] ____sys_sendmsg+0xa95/0xc70 [ 205.830964][ T7799] ? copy_msghdr_from_user+0x10a/0x160 [ 205.831001][ T7799] ? __pfx_____sys_sendmsg+0x10/0x10 [ 205.831067][ T7799] ___sys_sendmsg+0x134/0x1d0 [ 205.831105][ T7799] ? __pfx____sys_sendmsg+0x10/0x10 [ 205.831215][ T7799] __sys_sendmsg+0x16d/0x220 [ 205.831255][ T7799] ? __pfx___sys_sendmsg+0x10/0x10 [ 205.831292][ T7799] ? __x64_sys_futex+0x1e0/0x4c0 [ 205.831344][ T7799] ? rcu_is_watching+0x12/0xc0 [ 205.831393][ T7799] do_syscall_64+0xcd/0x260 [ 205.831438][ T7799] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.831467][ T7799] RIP: 0033:0x7f804138d169 [ 205.831493][ T7799] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 205.831520][ T7799] RSP: 002b:00007f8042130038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 205.831549][ T7799] RAX: ffffffffffffffda RBX: 00007f80415a5fa0 RCX: 00007f804138d169 [ 205.831568][ T7799] RDX: 00000000040000c0 RSI: 0000200000000300 RDI: 000000000000000a [ 205.831584][ T7799] RBP: 00007f804140e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 205.831599][ T7799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 205.831616][ T7799] R13: 0000000000000000 R14: 00007f80415a5fa0 R15: 00007ffe9a93f308 [ 205.831652][ T7799] [ 207.485400][ T7823] HfR: entered promiscuous mode [ 207.600796][ T7823] netlink: 12 bytes leftover after parsing attributes in process `syz.3.452'. [ 207.630294][ T7823] HfR: left promiscuous mode [ 207.691634][ T7831] device-mapper: ioctl: ioctl interface mismatch: kernel(4.49.0), user(0.0.0), cmd(5) [ 208.094022][ T7841] netlink: 'syz.3.455': attribute type 10 has an invalid length. [ 208.102065][ T7841] netlink: 230 bytes leftover after parsing attributes in process `syz.3.455'. [ 208.606556][ T7850] blkio.reset_stats is deprecated [ 210.353407][ T7890] netlink: 'syz.0.465': attribute type 10 has an invalid length. [ 210.421954][ T7890] netlink: 230 bytes leftover after parsing attributes in process `syz.0.465'. [ 210.861730][ T7898] netlink: 338 bytes leftover after parsing attributes in process `syz.0.466'. [ 211.350134][ T7901] HfR: entered promiscuous mode [ 211.387572][ T7901] netlink: 12 bytes leftover after parsing attributes in process `syz.2.469'. [ 211.462391][ T7907] device-mapper: ioctl: ioctl interface mismatch: kernel(4.49.0), user(0.0.0), cmd(5) [ 211.503281][ T7901] HfR: left promiscuous mode [ 213.306217][ T7940] FAULT_INJECTION: forcing a failure. [ 213.306217][ T7940] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 213.331938][ T7934] netlink: 'syz.2.475': attribute type 10 has an invalid length. [ 213.342040][ T7940] CPU: 1 UID: 0 PID: 7940 Comm: syz.3.476 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 213.342086][ T7940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 213.342102][ T7940] Call Trace: [ 213.342109][ T7940] [ 213.342119][ T7940] dump_stack_lvl+0x16c/0x1f0 [ 213.342163][ T7940] should_fail_ex+0x512/0x640 [ 213.342199][ T7940] _copy_to_user+0x32/0xd0 [ 213.342237][ T7940] simple_read_from_buffer+0xcb/0x170 [ 213.342278][ T7940] proc_fail_nth_read+0x197/0x270 [ 213.342317][ T7940] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 213.342357][ T7940] ? rw_verify_area+0xcf/0x680 [ 213.342389][ T7940] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 213.342426][ T7940] vfs_read+0x1de/0xc70 [ 213.342467][ T7940] ? __pfx___mutex_lock+0x10/0x10 [ 213.342504][ T7940] ? __pfx_vfs_read+0x10/0x10 [ 213.342551][ T7940] ? __fget_files+0x20e/0x3c0 [ 213.342601][ T7940] ksys_read+0x12a/0x240 [ 213.342637][ T7940] ? __pfx_ksys_read+0x10/0x10 [ 213.342670][ T7940] ? rcu_is_watching+0x12/0xc0 [ 213.342715][ T7940] do_syscall_64+0xcd/0x260 [ 213.342756][ T7940] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.342803][ T7940] RIP: 0033:0x7f522bb8bb7c [ 213.342824][ T7940] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 213.342849][ T7940] RSP: 002b:00007f522c9da030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 213.342875][ T7940] RAX: ffffffffffffffda RBX: 00007f522bda5fa0 RCX: 00007f522bb8bb7c [ 213.342893][ T7940] RDX: 000000000000000f RSI: 00007f522c9da0a0 RDI: 0000000000000004 [ 213.342909][ T7940] RBP: 00007f522c9da090 R08: 0000000000000000 R09: 0000000000000000 [ 213.342925][ T7940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 213.342941][ T7940] R13: 0000000000000000 R14: 00007f522bda5fa0 R15: 00007ffc591cc758 [ 213.342978][ T7940] [ 213.576644][ T7934] netlink: 230 bytes leftover after parsing attributes in process `syz.2.475'. [ 213.964750][ T7951] FAULT_INJECTION: forcing a failure. [ 213.964750][ T7951] name failslab, interval 1, probability 0, space 0, times 0 [ 214.066493][ T7951] CPU: 1 UID: 0 PID: 7951 Comm: syz.3.478 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 214.066533][ T7951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 214.066550][ T7951] Call Trace: [ 214.066560][ T7951] [ 214.066570][ T7951] dump_stack_lvl+0x16c/0x1f0 [ 214.066616][ T7951] should_fail_ex+0x512/0x640 [ 214.066648][ T7951] ? __kmalloc_noprof+0xbf/0x510 [ 214.066689][ T7951] ? ieee80211_register_hw+0x1548/0x4020 [ 214.066716][ T7951] should_failslab+0xc2/0x120 [ 214.066743][ T7951] __kmalloc_noprof+0xd2/0x510 [ 214.066781][ T7951] ? do_raw_spin_lock+0x12c/0x2b0 [ 214.066811][ T7951] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 214.066849][ T7951] ieee80211_register_hw+0x1548/0x4020 [ 214.066883][ T7951] ? _raw_spin_unlock_irqrestore+0x11/0x80 [ 214.066919][ T7951] ? __debug_object_init+0x281/0x3d0 [ 214.066965][ T7951] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 214.066999][ T7951] ? find_held_lock+0x2b/0x80 [ 214.067045][ T7951] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 214.067077][ T7951] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 214.067120][ T7951] ? __hrtimer_setup+0x176/0x280 [ 214.067156][ T7951] mac80211_hwsim_new_radio+0x3034/0x54d0 [ 214.067222][ T7951] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 214.067275][ T7951] hwsim_new_radio_nl+0xb51/0x12c0 [ 214.067314][ T7951] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 214.067365][ T7951] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 214.067415][ T7951] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 214.067472][ T7951] genl_family_rcv_msg_doit+0x206/0x2f0 [ 214.067522][ T7951] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 214.067569][ T7951] ? trace_cap_capable+0x18d/0x200 [ 214.067608][ T7951] ? bpf_lsm_capable+0x9/0x10 [ 214.067648][ T7951] ? security_capable+0x7e/0x260 [ 214.067677][ T7951] ? ns_capable+0xd7/0x110 [ 214.067717][ T7951] genl_rcv_msg+0x55c/0x800 [ 214.067751][ T7951] ? __pfx_genl_rcv_msg+0x10/0x10 [ 214.067775][ T7951] ? __pfx___dev_queue_xmit+0x10/0x10 [ 214.067805][ T7951] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 214.067843][ T7951] ? __lock_acquire+0xaa4/0x1ba0 [ 214.067880][ T7951] netlink_rcv_skb+0x16a/0x440 [ 214.067922][ T7951] ? __pfx_genl_rcv_msg+0x10/0x10 [ 214.067951][ T7951] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 214.068017][ T7951] ? __pfx_down_read+0x10/0x10 [ 214.068071][ T7951] ? netlink_deliver_tap+0x1ae/0xd30 [ 214.068116][ T7951] genl_rcv+0x28/0x40 [ 214.068157][ T7951] netlink_unicast+0x53a/0x7f0 [ 214.068203][ T7951] ? __pfx_netlink_unicast+0x10/0x10 [ 214.068240][ T7951] ? __lock_acquire+0xaa4/0x1ba0 [ 214.068277][ T7951] netlink_sendmsg+0x8d1/0xdd0 [ 214.068326][ T7951] ? __pfx_netlink_sendmsg+0x10/0x10 [ 214.068385][ T7951] ____sys_sendmsg+0xa95/0xc70 [ 214.068433][ T7951] ? copy_msghdr_from_user+0x10a/0x160 [ 214.068469][ T7951] ? __pfx_____sys_sendmsg+0x10/0x10 [ 214.068531][ T7951] ___sys_sendmsg+0x134/0x1d0 [ 214.068571][ T7951] ? __pfx____sys_sendmsg+0x10/0x10 [ 214.068661][ T7951] __sys_sendmsg+0x16d/0x220 [ 214.068698][ T7951] ? __pfx___sys_sendmsg+0x10/0x10 [ 214.068733][ T7951] ? __x64_sys_futex+0x1e0/0x4c0 [ 214.068784][ T7951] ? rcu_is_watching+0x12/0xc0 [ 214.068831][ T7951] do_syscall_64+0xcd/0x260 [ 214.068875][ T7951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.068905][ T7951] RIP: 0033:0x7f522bb8d169 [ 214.068930][ T7951] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 214.068957][ T7951] RSP: 002b:00007f522c9da038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 214.068986][ T7951] RAX: ffffffffffffffda RBX: 00007f522bda5fa0 RCX: 00007f522bb8d169 [ 214.069004][ T7951] RDX: 00000000040000c0 RSI: 0000200000000300 RDI: 000000000000000a [ 214.069022][ T7951] RBP: 00007f522bc0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 214.069045][ T7951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 214.069062][ T7951] R13: 0000000000000000 R14: 00007f522bda5fa0 R15: 00007ffc591cc758 [ 214.069101][ T7951] [ 214.606352][ T7957] netlink: 'syz.2.489': attribute type 10 has an invalid length. [ 214.635031][ T7957] netlink: 230 bytes leftover after parsing attributes in process `syz.2.489'. [ 214.949468][ T7964] netlink: 338 bytes leftover after parsing attributes in process `syz.2.483'. [ 214.967792][ T7967] netlink: 12 bytes leftover after parsing attributes in process `syz.0.482'. [ 214.984538][ T7967] device-mapper: ioctl: ioctl interface mismatch: kernel(4.49.0), user(0.0.0), cmd(5) [ 217.440058][ T8014] netlink: 'syz.2.492': attribute type 10 has an invalid length. [ 217.492426][ T8014] netlink: 230 bytes leftover after parsing attributes in process `syz.2.492'. [ 220.299090][ T8048] netlink: zone id is out of range [ 220.336638][ T8048] netlink: zone id is out of range [ 220.368254][ T8057] netlink: 'syz.3.501': attribute type 10 has an invalid length. [ 220.386304][ T8048] netlink: zone id is out of range [ 220.401507][ T8057] netlink: 230 bytes leftover after parsing attributes in process `syz.3.501'. [ 220.412203][ T8048] netlink: zone id is out of range [ 220.441013][ T8048] netlink: zone id is out of range [ 220.488879][ T8048] netlink: zone id is out of range [ 220.494161][ T8048] netlink: zone id is out of range [ 220.573974][ T8048] netlink: zone id is out of range [ 220.616526][ T8048] netlink: zone id is out of range [ 220.627618][ T8048] netlink: zone id is out of range [ 220.748733][ T8064] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input7 [ 220.898063][ T5197] ERROR: Out of memory at tomoyo_memory_ok. [ 221.331094][ T26] ERROR: Out of memory at tomoyo_memory_ok. [ 221.737433][ T8086] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 224.143603][ T8131] FAULT_INJECTION: forcing a failure. [ 224.143603][ T8131] name failslab, interval 1, probability 0, space 0, times 0 [ 224.206104][ T8131] CPU: 1 UID: 0 PID: 8131 Comm: syz.3.518 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 224.206143][ T8131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 224.206159][ T8131] Call Trace: [ 224.206168][ T8131] [ 224.206178][ T8131] dump_stack_lvl+0x16c/0x1f0 [ 224.206222][ T8131] should_fail_ex+0x512/0x640 [ 224.206253][ T8131] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 224.206298][ T8131] should_failslab+0xc2/0x120 [ 224.206325][ T8131] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 224.206366][ T8131] ? __alloc_skb+0x2b2/0x380 [ 224.206406][ T8131] __alloc_skb+0x2b2/0x380 [ 224.206442][ T8131] ? __pfx___alloc_skb+0x10/0x10 [ 224.206475][ T8131] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 224.206511][ T8131] ? __lock_acquire+0xaa4/0x1ba0 [ 224.206540][ T8131] netlink_alloc_large_skb+0x69/0x130 [ 224.206577][ T8131] netlink_sendmsg+0x6a1/0xdd0 [ 224.206621][ T8131] ? __pfx_netlink_sendmsg+0x10/0x10 [ 224.206675][ T8131] ____sys_sendmsg+0xa95/0xc70 [ 224.206719][ T8131] ? copy_msghdr_from_user+0x10a/0x160 [ 224.206754][ T8131] ? __pfx_____sys_sendmsg+0x10/0x10 [ 224.206813][ T8131] ___sys_sendmsg+0x134/0x1d0 [ 224.206850][ T8131] ? __pfx____sys_sendmsg+0x10/0x10 [ 224.206931][ T8131] __sys_sendmsg+0x16d/0x220 [ 224.206965][ T8131] ? __pfx___sys_sendmsg+0x10/0x10 [ 224.207008][ T8131] ? rcu_is_watching+0x12/0xc0 [ 224.207060][ T8131] do_syscall_64+0xcd/0x260 [ 224.207100][ T8131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.207126][ T8131] RIP: 0033:0x7f522bb8d169 [ 224.207147][ T8131] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 224.207173][ T8131] RSP: 002b:00007f522c9da038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 224.207197][ T8131] RAX: ffffffffffffffda RBX: 00007f522bda5fa0 RCX: 00007f522bb8d169 [ 224.207215][ T8131] RDX: 0000000010004010 RSI: 0000200000000100 RDI: 0000000000000003 [ 224.207230][ T8131] RBP: 00007f522c9da090 R08: 0000000000000000 R09: 0000000000000000 [ 224.207246][ T8131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 224.207260][ T8131] R13: 0000000000000000 R14: 00007f522bda5fa0 R15: 00007ffc591cc758 [ 224.207293][ T8131] [ 227.006743][ T8159] net_ratelimit: 32 callbacks suppressed [ 227.006792][ T8159] netlink: zone id is out of range [ 227.010454][ T8162] vivid-007: ================= START STATUS ================= [ 227.012616][ T8159] netlink: zone id is out of range [ 227.020046][ T8162] vivid-007: Generate PTS: true [ 227.038404][ T8162] vivid-007: Generate SCR: true [ 227.043454][ T8162] tpg source WxH: 640x360 (Y'CbCr) [ 227.068950][ T8162] tpg field: 1 [ 227.072482][ T8162] tpg crop: (0,0)/640x360 [ 227.085696][ T8159] netlink: zone id is out of range [ 227.102289][ T8162] tpg compose: (0,0)/640x360 [ 227.129026][ T8162] tpg colorspace: 8 [ 227.147969][ T8159] netlink: zone id is out of range [ 227.176585][ T8162] tpg transfer function: 0/0 [ 227.196525][ T8159] netlink: zone id is out of range [ 227.210230][ T8162] tpg Y'CbCr encoding: 0/0 [ 227.256580][ T8162] tpg quantization: 0/0 [ 227.260865][ T8159] netlink: zone id is out of range [ 227.266076][ T8159] netlink: zone id is out of range [ 227.281790][ T8162] tpg RGB range: 0/2 [ 227.296763][ T8162] vivid-007: ================== END STATUS ================== [ 227.359355][ T8159] netlink: zone id is out of range [ 227.418844][ T8159] netlink: zone id is out of range [ 227.425794][ T8159] netlink: zone id is out of range [ 232.690762][ T8221] netlink: 'syz.2.543': attribute type 10 has an invalid length. [ 232.698735][ T8221] netlink: 230 bytes leftover after parsing attributes in process `syz.2.543'. [ 232.746833][ T8219] netlink: 332 bytes leftover after parsing attributes in process `syz.0.542'. [ 235.177666][ T8247] bridge0: port 4(team0) entered blocking state [ 235.588155][ T8247] bridge0: port 4(team0) entered disabled state [ 235.668129][ T8247] team0: entered allmulticast mode [ 235.673433][ T8247] team_slave_1: entered allmulticast mode [ 235.682277][ T8247] team0: entered promiscuous mode [ 235.688228][ T8247] team_slave_1: entered promiscuous mode [ 236.039004][ T8254] netlink: 28 bytes leftover after parsing attributes in process `syz.1.553'. [ 236.606519][ T8259] netlink: 332 bytes leftover after parsing attributes in process `syz.3.554'. [ 237.632702][ T8274] netlink: 'syz.3.557': attribute type 10 has an invalid length. [ 237.682671][ T8274] netlink: 230 bytes leftover after parsing attributes in process `syz.3.557'. [ 239.187020][ T8298] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 239.216843][ T8300] net_ratelimit: 12 callbacks suppressed [ 239.216869][ T8300] netlink: zone id is out of range [ 239.325875][ T8300] netlink: zone id is out of range [ 239.381250][ T8300] netlink: zone id is out of range [ 239.406938][ T8300] netlink: zone id is out of range [ 239.446513][ T8300] netlink: zone id is out of range [ 239.486630][ T8300] netlink: zone id is out of range [ 239.777361][ T8308] netlink: 332 bytes leftover after parsing attributes in process `syz.1.566'. [ 240.339694][ T8319] netlink: 'syz.3.568': attribute type 10 has an invalid length. [ 240.356616][ T8319] netlink: 230 bytes leftover after parsing attributes in process `syz.3.568'. [ 241.139617][ T8330] netlink: 8 bytes leftover after parsing attributes in process `syz.3.571'. [ 241.184029][ T8330] netlink: 13700 bytes leftover after parsing attributes in process `syz.3.571'. [ 243.637721][ T8356] netlink: zone id is out of range [ 243.642919][ T8356] netlink: set zone limit has 8 unknown bytes [ 246.780937][ T8383] netlink: 8 bytes leftover after parsing attributes in process `syz.2.582'. [ 246.825048][ T8383] netlink: 13700 bytes leftover after parsing attributes in process `syz.2.582'. [ 247.033324][ T8389] netlink: zone id is out of range [ 247.064448][ T8389] netlink: set zone limit has 8 unknown bytes [ 247.362965][ T8393] netlink: 'syz.2.585': attribute type 10 has an invalid length. [ 247.456973][ T8393] netlink: 230 bytes leftover after parsing attributes in process `syz.2.585'. [ 248.355127][ T8398] netlink: 'syz.3.588': attribute type 10 has an invalid length. [ 248.366614][ T8398] netlink: 230 bytes leftover after parsing attributes in process `syz.3.588'. [ 251.046269][ T8419] bond0: option all_slaves_active: invalid value (7) [ 253.007436][ T8451] netlink: 338 bytes leftover after parsing attributes in process `syz.3.599'. [ 253.032606][ T8455] netlink: 8 bytes leftover after parsing attributes in process `syz.1.600'. [ 253.044246][ T8455] netlink: 13700 bytes leftover after parsing attributes in process `syz.1.600'. [ 254.409877][ T8477] syz.0.605 (8477): /proc/8476/oom_adj is deprecated, please use /proc/8476/oom_score_adj instead. [ 254.842990][ T8484] netlink: 28 bytes leftover after parsing attributes in process `syz.3.607'. [ 257.957496][ T8521] FAULT_INJECTION: forcing a failure. [ 257.957496][ T8521] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 258.001549][ T8521] CPU: 1 UID: 0 PID: 8521 Comm: syz.0.615 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 258.001586][ T8521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 258.001601][ T8521] Call Trace: [ 258.001610][ T8521] [ 258.001620][ T8521] dump_stack_lvl+0x16c/0x1f0 [ 258.001664][ T8521] should_fail_ex+0x512/0x640 [ 258.001698][ T8521] _copy_to_user+0x32/0xd0 [ 258.001734][ T8521] simple_read_from_buffer+0xcb/0x170 [ 258.001774][ T8521] proc_fail_nth_read+0x197/0x270 [ 258.001811][ T8521] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 258.001849][ T8521] ? rw_verify_area+0xcf/0x680 [ 258.001879][ T8521] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 258.001916][ T8521] vfs_read+0x1de/0xc70 [ 258.001956][ T8521] ? __pfx___mutex_lock+0x10/0x10 [ 258.001994][ T8521] ? __pfx_vfs_read+0x10/0x10 [ 258.002039][ T8521] ? __fget_files+0x20e/0x3c0 [ 258.002087][ T8521] ksys_read+0x12a/0x240 [ 258.002121][ T8521] ? __pfx_ksys_read+0x10/0x10 [ 258.002168][ T8521] do_syscall_64+0xcd/0x260 [ 258.002209][ T8521] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.002235][ T8521] RIP: 0033:0x7f8f0cd8bb7c [ 258.002257][ T8521] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 258.002281][ T8521] RSP: 002b:00007f8f0dc77030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 258.002306][ T8521] RAX: ffffffffffffffda RBX: 00007f8f0cfa5fa0 RCX: 00007f8f0cd8bb7c [ 258.002325][ T8521] RDX: 000000000000000f RSI: 00007f8f0dc770a0 RDI: 0000000000000004 [ 258.002340][ T8521] RBP: 00007f8f0dc77090 R08: 0000000000000000 R09: 0000000000000000 [ 258.002356][ T8521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 258.002393][ T8521] R13: 0000000000000000 R14: 00007f8f0cfa5fa0 R15: 00007fff2e1845a8 [ 258.002438][ T8521] [ 258.416886][ T8527] program syz.0.617 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 258.494380][ T8527] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 259.425641][ T8542] netlink: 'syz.1.620': attribute type 10 has an invalid length. [ 259.425683][ T8542] netlink: 230 bytes leftover after parsing attributes in process `syz.1.620'. [ 260.223229][ T8540] kexec: Could not allocate swap buffer [ 260.689584][ T8566] FAULT_INJECTION: forcing a failure. [ 260.689584][ T8566] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 260.766505][ T8566] CPU: 0 UID: 0 PID: 8566 Comm: syz.0.628 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 260.766548][ T8566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 260.766565][ T8566] Call Trace: [ 260.766575][ T8566] [ 260.766587][ T8566] dump_stack_lvl+0x16c/0x1f0 [ 260.766631][ T8566] should_fail_ex+0x512/0x640 [ 260.766666][ T8566] _copy_from_user+0x2e/0xd0 [ 260.766701][ T8566] snd_rawmidi_kernel_write1+0x50a/0x8a0 [ 260.766745][ T8566] snd_rawmidi_write+0x26e/0xc10 [ 260.766785][ T8566] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 260.766816][ T8566] ? __pfx_default_wake_function+0x10/0x10 [ 260.766855][ T8566] ? bpf_lsm_file_permission+0x9/0x10 [ 260.766889][ T8566] ? security_file_permission+0x71/0x210 [ 260.766925][ T8566] ? rw_verify_area+0xcf/0x680 [ 260.766961][ T8566] vfs_write+0x25c/0x1180 [ 260.766995][ T8566] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 260.767032][ T8566] ? __pfx_vfs_write+0x10/0x10 [ 260.767066][ T8566] ? find_held_lock+0x2b/0x80 [ 260.767102][ T8566] ? __fget_files+0x204/0x3c0 [ 260.767146][ T8566] ? __fget_files+0x20e/0x3c0 [ 260.767195][ T8566] ksys_write+0x205/0x240 [ 260.767231][ T8566] ? __pfx_ksys_write+0x10/0x10 [ 260.767266][ T8566] ? rcu_is_watching+0x12/0xc0 [ 260.767310][ T8566] do_syscall_64+0xcd/0x260 [ 260.767352][ T8566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.767379][ T8566] RIP: 0033:0x7f8f0cd8d169 [ 260.767402][ T8566] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 260.767437][ T8566] RSP: 002b:00007f8f0dc77038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 260.767463][ T8566] RAX: ffffffffffffffda RBX: 00007f8f0cfa5fa0 RCX: 00007f8f0cd8d169 [ 260.767481][ T8566] RDX: 000000100000a3d9 RSI: 0000200000000400 RDI: 0000000000000005 [ 260.767498][ T8566] RBP: 00007f8f0ce0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 260.767514][ T8566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 260.767529][ T8566] R13: 0000000000000000 R14: 00007f8f0cfa5fa0 R15: 00007fff2e1845a8 [ 260.767566][ T8566] [ 261.162531][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.171051][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 262.959124][ T8596] netlink: 'syz.2.634': attribute type 1 has an invalid length. [ 264.663063][ T8614] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 264.869740][ T8611] kexec: Could not allocate control_code_buffer [ 265.270895][ T8628] FAULT_INJECTION: forcing a failure. [ 265.270895][ T8628] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 265.335639][ T8628] CPU: 1 UID: 0 PID: 8628 Comm: syz.1.642 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 265.335672][ T8628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 265.335686][ T8628] Call Trace: [ 265.335693][ T8628] [ 265.335703][ T8628] dump_stack_lvl+0x16c/0x1f0 [ 265.335744][ T8628] should_fail_ex+0x512/0x640 [ 265.335777][ T8628] _copy_from_user+0x2e/0xd0 [ 265.335809][ T8628] io_uring_setup+0xb4/0x2090 [ 265.335839][ T8628] ? __pfx_io_uring_setup+0x10/0x10 [ 265.335862][ T8628] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 265.335903][ T8628] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 265.335945][ T8628] ? __fget_files+0x20e/0x3c0 [ 265.335991][ T8628] ? ksys_write+0x1b9/0x240 [ 265.336025][ T8628] ? __pfx_ksys_write+0x10/0x10 [ 265.336057][ T8628] ? rcu_is_watching+0x12/0xc0 [ 265.336096][ T8628] __x64_sys_io_uring_setup+0xc2/0x170 [ 265.336123][ T8628] do_syscall_64+0xcd/0x260 [ 265.336163][ T8628] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.336188][ T8628] RIP: 0033:0x7f14c138d169 [ 265.336208][ T8628] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 265.336232][ T8628] RSP: 002b:00007f14c217a038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 265.336258][ T8628] RAX: ffffffffffffffda RBX: 00007f14c15a5fa0 RCX: 00007f14c138d169 [ 265.336274][ T8628] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000059 [ 265.336289][ T8628] RBP: 00007f14c217a090 R08: 0000000000000000 R09: 0000000000000000 [ 265.336305][ T8628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 265.336319][ T8628] R13: 0000000000000000 R14: 00007f14c15a5fa0 R15: 00007fff9d8a1c98 [ 265.336353][ T8628] [ 267.936461][ T30] audit: type=1800 audit(6039048930.405:4): pid=8651 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.650" name="dbroot" dev="configfs" ino=18318 res=0 errno=0 [ 268.022855][ T8658] netlink: 338 bytes leftover after parsing attributes in process `syz.0.651'. [ 268.047496][ T8659] FAULT_INJECTION: forcing a failure. [ 268.047496][ T8659] name failslab, interval 1, probability 0, space 0, times 0 [ 268.066586][ T8659] CPU: 1 UID: 0 PID: 8659 Comm: syz.3.653 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 268.066623][ T8659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 268.066644][ T8659] Call Trace: [ 268.066653][ T8659] [ 268.066663][ T8659] dump_stack_lvl+0x16c/0x1f0 [ 268.066708][ T8659] should_fail_ex+0x512/0x640 [ 268.066737][ T8659] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 268.066778][ T8659] should_failslab+0xc2/0x120 [ 268.066804][ T8659] __kmalloc_cache_noprof+0x6a/0x3e0 [ 268.066840][ T8659] ? nl80211_dump_survey+0x10f/0xae0 [ 268.066878][ T8659] nl80211_dump_survey+0x10f/0xae0 [ 268.066920][ T8659] ? trace_kmalloc+0x2b/0xd0 [ 268.066945][ T8659] ? __kmalloc_node_track_caller_noprof+0x23e/0x510 [ 268.066988][ T8659] ? __pfx_nl80211_dump_survey+0x10/0x10 [ 268.067019][ T8659] ? __alloc_skb+0x166/0x380 [ 268.067070][ T8659] ? __pfx___alloc_skb+0x10/0x10 [ 268.067100][ T8659] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.067139][ T8659] genl_dumpit+0x122/0x230 [ 268.067168][ T8659] netlink_dump+0x53b/0xd00 [ 268.067212][ T8659] ? __pfx_netlink_dump+0x10/0x10 [ 268.067272][ T8659] ? __asan_memset+0x23/0x50 [ 268.067308][ T8659] ? genl_start+0x67f/0x980 [ 268.067363][ T8659] __netlink_dump_start+0x6d6/0x990 [ 268.067405][ T8659] genl_family_rcv_msg_dumpit+0x1e2/0x2e0 [ 268.067434][ T8659] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 268.067460][ T8659] ? genl_op_from_small+0x25/0x440 [ 268.067505][ T8659] ? __pfx_genl_get_cmd+0x10/0x10 [ 268.067535][ T8659] ? __pfx_genl_start+0x10/0x10 [ 268.067563][ T8659] ? __pfx_genl_dumpit+0x10/0x10 [ 268.067579][ T8659] ? __pfx_genl_done+0x10/0x10 [ 268.067601][ T8659] ? __local_bh_enable_ip+0xa4/0x120 [ 268.067627][ T8659] ? __dev_queue_xmit+0x896/0x43e0 [ 268.067647][ T8659] ? __radix_tree_lookup+0x21f/0x2c0 [ 268.067678][ T8659] genl_rcv_msg+0x46e/0x800 [ 268.067701][ T8659] ? __pfx_genl_rcv_msg+0x10/0x10 [ 268.067719][ T8659] ? __pfx___dev_queue_xmit+0x10/0x10 [ 268.067741][ T8659] ? __pfx_nl80211_dump_survey+0x10/0x10 [ 268.067768][ T8659] ? __lock_acquire+0xaa4/0x1ba0 [ 268.067794][ T8659] netlink_rcv_skb+0x16a/0x440 [ 268.067822][ T8659] ? __pfx_genl_rcv_msg+0x10/0x10 [ 268.067843][ T8659] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 268.067887][ T8659] ? __pfx_down_read+0x10/0x10 [ 268.067918][ T8659] ? netlink_deliver_tap+0x1ae/0xd30 [ 268.067950][ T8659] genl_rcv+0x28/0x40 [ 268.067979][ T8659] netlink_unicast+0x53a/0x7f0 [ 268.068011][ T8659] ? __pfx_netlink_unicast+0x10/0x10 [ 268.068039][ T8659] ? __lock_acquire+0xaa4/0x1ba0 [ 268.068065][ T8659] netlink_sendmsg+0x8d1/0xdd0 [ 268.068099][ T8659] ? __pfx_netlink_sendmsg+0x10/0x10 [ 268.068140][ T8659] ____sys_sendmsg+0xa95/0xc70 [ 268.068173][ T8659] ? copy_msghdr_from_user+0x10a/0x160 [ 268.068199][ T8659] ? __pfx_____sys_sendmsg+0x10/0x10 [ 268.068245][ T8659] ___sys_sendmsg+0x134/0x1d0 [ 268.068273][ T8659] ? __pfx____sys_sendmsg+0x10/0x10 [ 268.068348][ T8659] __sys_sendmsg+0x16d/0x220 [ 268.068375][ T8659] ? __pfx___sys_sendmsg+0x10/0x10 [ 268.068411][ T8659] ? rcu_is_watching+0x12/0xc0 [ 268.068444][ T8659] do_syscall_64+0xcd/0x260 [ 268.068475][ T8659] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.068495][ T8659] RIP: 0033:0x7f522bb8d169 [ 268.068512][ T8659] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 268.068532][ T8659] RSP: 002b:00007f522c9da038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 268.068552][ T8659] RAX: ffffffffffffffda RBX: 00007f522bda5fa0 RCX: 00007f522bb8d169 [ 268.068566][ T8659] RDX: 0000000000008010 RSI: 0000200000002780 RDI: 0000000000000003 [ 268.068578][ T8659] RBP: 00007f522c9da090 R08: 0000000000000000 R09: 0000000000000000 [ 268.068591][ T8659] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 268.068603][ T8659] R13: 0000000000000000 R14: 00007f522bda5fa0 R15: 00007ffc591cc758 [ 268.068631][ T8659] [ 270.530128][ T8682] FAULT_INJECTION: forcing a failure. [ 270.530128][ T8682] name failslab, interval 1, probability 0, space 0, times 0 [ 270.602611][ T8682] CPU: 0 UID: 0 PID: 8682 Comm: syz.1.658 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 270.602650][ T8682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 270.602667][ T8682] Call Trace: [ 270.602677][ T8682] [ 270.602688][ T8682] dump_stack_lvl+0x16c/0x1f0 [ 270.602732][ T8682] should_fail_ex+0x512/0x640 [ 270.602763][ T8682] ? __kmalloc_noprof+0xbf/0x510 [ 270.602806][ T8682] ? strset_prepare_data+0x5f4/0xb40 [ 270.602841][ T8682] should_failslab+0xc2/0x120 [ 270.602866][ T8682] __kmalloc_noprof+0xd2/0x510 [ 270.602916][ T8682] strset_prepare_data+0x5f4/0xb40 [ 270.602963][ T8682] ethnl_default_dumpit+0x6cc/0xf30 [ 270.603014][ T8682] genl_dumpit+0x122/0x230 [ 270.603041][ T8682] netlink_dump+0x53b/0xd00 [ 270.603083][ T8682] ? __pfx_netlink_dump+0x10/0x10 [ 270.603120][ T8682] ? rcu_is_watching+0x12/0xc0 [ 270.603170][ T8682] ? ethnl_default_start+0x2dd/0x420 [ 270.603207][ T8682] ? __pfx_ethnl_default_start+0x10/0x10 [ 270.603239][ T8682] ? genl_start+0x67f/0x980 [ 270.603286][ T8682] __netlink_dump_start+0x6d6/0x990 [ 270.603330][ T8682] genl_family_rcv_msg_dumpit+0x1e2/0x2e0 [ 270.603367][ T8682] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 270.603393][ T8682] ? kfree_skbmem+0x1a4/0x1f0 [ 270.603427][ T8682] ? __pfx_genl_get_cmd+0x10/0x10 [ 270.603461][ T8682] ? __pfx_genl_start+0x10/0x10 [ 270.603499][ T8682] ? __pfx_genl_dumpit+0x10/0x10 [ 270.603520][ T8682] ? __pfx_genl_done+0x10/0x10 [ 270.603547][ T8682] ? __local_bh_enable_ip+0xa4/0x120 [ 270.603579][ T8682] ? __dev_queue_xmit+0x896/0x43e0 [ 270.603606][ T8682] ? __radix_tree_lookup+0x21f/0x2c0 [ 270.603652][ T8682] genl_rcv_msg+0x46e/0x800 [ 270.603685][ T8682] ? __pfx_genl_rcv_msg+0x10/0x10 [ 270.603710][ T8682] ? __pfx___dev_queue_xmit+0x10/0x10 [ 270.603736][ T8682] ? __pfx_ethnl_default_start+0x10/0x10 [ 270.603768][ T8682] ? __pfx_ethnl_default_dumpit+0x10/0x10 [ 270.603800][ T8682] ? __pfx_ethnl_default_done+0x10/0x10 [ 270.603835][ T8682] ? __lock_acquire+0xaa4/0x1ba0 [ 270.603868][ T8682] netlink_rcv_skb+0x16a/0x440 [ 270.603906][ T8682] ? __pfx_genl_rcv_msg+0x10/0x10 [ 270.603934][ T8682] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 270.603994][ T8682] ? __pfx_down_read+0x10/0x10 [ 270.604036][ T8682] ? netlink_deliver_tap+0x1ae/0xd30 [ 270.604076][ T8682] genl_rcv+0x28/0x40 [ 270.604114][ T8682] netlink_unicast+0x53a/0x7f0 [ 270.604156][ T8682] ? __pfx_netlink_unicast+0x10/0x10 [ 270.604191][ T8682] ? __lock_acquire+0xaa4/0x1ba0 [ 270.604226][ T8682] netlink_sendmsg+0x8d1/0xdd0 [ 270.604270][ T8682] ? __pfx_netlink_sendmsg+0x10/0x10 [ 270.604323][ T8682] ____sys_sendmsg+0xa95/0xc70 [ 270.604375][ T8682] ? copy_msghdr_from_user+0x10a/0x160 [ 270.604411][ T8682] ? __pfx_____sys_sendmsg+0x10/0x10 [ 270.604474][ T8682] ___sys_sendmsg+0x134/0x1d0 [ 270.604511][ T8682] ? __pfx____sys_sendmsg+0x10/0x10 [ 270.604598][ T8682] __sys_sendmsg+0x16d/0x220 [ 270.604634][ T8682] ? __pfx___sys_sendmsg+0x10/0x10 [ 270.604683][ T8682] ? rcu_is_watching+0x12/0xc0 [ 270.604727][ T8682] do_syscall_64+0xcd/0x260 [ 270.604767][ T8682] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.604792][ T8682] RIP: 0033:0x7f14c138d169 [ 270.604813][ T8682] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 270.604836][ T8682] RSP: 002b:00007f14c217a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 270.604859][ T8682] RAX: ffffffffffffffda RBX: 00007f14c15a5fa0 RCX: 00007f14c138d169 [ 270.604875][ T8682] RDX: 0000000020000000 RSI: 0000200000003400 RDI: 0000000000000003 [ 270.604890][ T8682] RBP: 00007f14c217a090 R08: 0000000000000000 R09: 0000000000000000 [ 270.604904][ T8682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 270.604918][ T8682] R13: 0000000000000000 R14: 00007f14c15a5fa0 R15: 00007fff9d8a1c98 [ 270.604951][ T8682] [ 272.471758][ T8700] netlink: 'syz.0.662': attribute type 1 has an invalid length. [ 272.493204][ T8702] netlink: 338 bytes leftover after parsing attributes in process `syz.2.663'. [ 274.993440][ T8730] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input9 [ 275.008025][ T5197] ERROR: Out of memory at tomoyo_memory_ok. [ 275.375526][ T26] ERROR: Out of memory at tomoyo_memory_ok. [ 276.229900][ T8750] netlink: 338 bytes leftover after parsing attributes in process `syz.0.677'. [ 276.985764][ T8758] FAULT_INJECTION: forcing a failure. [ 276.985764][ T8758] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 277.060995][ T8758] CPU: 0 UID: 0 PID: 8758 Comm: syz.2.678 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 277.061032][ T8758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 277.061048][ T8758] Call Trace: [ 277.061057][ T8758] [ 277.061068][ T8758] dump_stack_lvl+0x16c/0x1f0 [ 277.061125][ T8758] should_fail_ex+0x512/0x640 [ 277.061163][ T8758] _copy_from_iter+0x2a4/0x15b0 [ 277.061208][ T8758] ? __pfx__copy_from_iter+0x10/0x10 [ 277.061244][ T8758] ? rcu_is_watching+0x12/0xc0 [ 277.061282][ T8758] ? trace_kmalloc+0x2b/0xd0 [ 277.061309][ T8758] ? __kmalloc_noprof+0x242/0x510 [ 277.061359][ T8758] kernfs_fop_write_iter+0x19a/0x510 [ 277.061401][ T8758] vfs_write+0x5ba/0x1180 [ 277.061440][ T8758] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 277.061476][ T8758] ? __pfx___mutex_lock+0x10/0x10 [ 277.061531][ T8758] ? __pfx_vfs_write+0x10/0x10 [ 277.061595][ T8758] ksys_write+0x12a/0x240 [ 277.061631][ T8758] ? __pfx_ksys_write+0x10/0x10 [ 277.061664][ T8758] ? rcu_is_watching+0x12/0xc0 [ 277.061708][ T8758] do_syscall_64+0xcd/0x260 [ 277.061750][ T8758] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.061777][ T8758] RIP: 0033:0x7f804138d169 [ 277.061797][ T8758] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 277.061823][ T8758] RSP: 002b:00007f8042130038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 277.061850][ T8758] RAX: ffffffffffffffda RBX: 00007f80415a5fa0 RCX: 00007f804138d169 [ 277.061867][ T8758] RDX: 000000000000fdef RSI: 0000000000000000 RDI: 0000000000000003 [ 277.061883][ T8758] RBP: 00007f8042130090 R08: 0000000000000000 R09: 0000000000000000 [ 277.061899][ T8758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 277.061914][ T8758] R13: 0000000000000000 R14: 00007f80415a5fa0 R15: 00007ffe9a93f308 [ 277.061952][ T8758] [ 278.034668][ T8781] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input10 [ 278.111395][ T5197] ERROR: Out of memory at tomoyo_memory_ok. [ 278.587657][ T26] ERROR: Out of memory at tomoyo_memory_ok. [ 281.157205][ T8843] netlink: 338 bytes leftover after parsing attributes in process `syz.3.696'. [ 284.783918][ T8879] netlink: 8 bytes leftover after parsing attributes in process `syz.2.709'. [ 284.808237][ T8879] netlink: 13700 bytes leftover after parsing attributes in process `syz.2.709'. [ 285.099090][ T8887] netlink: 338 bytes leftover after parsing attributes in process `syz.2.710'. [ 286.481635][ T8903] zswap: compressor not available [ 287.906654][ T8929] netlink: 338 bytes leftover after parsing attributes in process `syz.3.723'. [ 290.385950][ T8974] netlink: 338 bytes leftover after parsing attributes in process `syz.3.739'. [ 290.566947][ T8976] netlink: 28 bytes leftover after parsing attributes in process `syz.2.740'. [ 292.052017][ T9003] netlink: zone id is out of range [ 292.106624][ T9003] netlink: zone id is out of range [ 292.152148][ T9003] netlink: zone id is out of range [ 292.166794][ T9003] netlink: zone id is out of range [ 292.175757][ T9003] netlink: zone id is out of range [ 292.214484][ T9003] netlink: zone id is out of range [ 292.322086][ T9003] netlink: zone id is out of range [ 293.735871][ T9037] netlink: zone id is out of range [ 293.746563][ T9037] netlink: zone id is out of range [ 293.759994][ T9037] netlink: zone id is out of range [ 295.413582][ T30] audit: type=1800 audit(6039048965.902:5): pid=9058 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.765" name="dbroot" dev="configfs" ino=20247 res=0 errno=0 [ 295.461674][ T9058] FAULT_INJECTION: forcing a failure. [ 295.461674][ T9058] name failslab, interval 1, probability 0, space 0, times 0 [ 295.496625][ T9058] CPU: 1 UID: 0 PID: 9058 Comm: syz.2.765 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 295.496666][ T9058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 295.496682][ T9058] Call Trace: [ 295.496691][ T9058] [ 295.496702][ T9058] dump_stack_lvl+0x16c/0x1f0 [ 295.496750][ T9058] should_fail_ex+0x512/0x640 [ 295.496781][ T9058] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 295.496817][ T9058] should_failslab+0xc2/0x120 [ 295.496844][ T9058] __kmalloc_cache_noprof+0x6a/0x3e0 [ 295.496882][ T9058] ? pty_common_install+0x10e/0xb30 [ 295.496926][ T9058] pty_common_install+0x10e/0xb30 [ 295.496970][ T9058] ? __pfx_pty_install+0x10/0x10 [ 295.497009][ T9058] tty_init_dev.part.0+0x99/0x500 [ 295.497042][ T9058] tty_open+0xa50/0xf90 [ 295.497078][ T9058] ? __pfx_tty_open+0x10/0x10 [ 295.497106][ T9058] ? chrdev_open+0x58c/0x6a0 [ 295.497152][ T9058] ? __pfx_tty_open+0x10/0x10 [ 295.497179][ T9058] chrdev_open+0x231/0x6a0 [ 295.497223][ T9058] ? __pfx_chrdev_open+0x10/0x10 [ 295.497271][ T9058] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 295.497320][ T9058] do_dentry_open+0x741/0x1c10 [ 295.497360][ T9058] ? __pfx_chrdev_open+0x10/0x10 [ 295.497422][ T9058] vfs_open+0x82/0x3f0 [ 295.497457][ T9058] path_openat+0x1e5e/0x2d40 [ 295.497515][ T9058] ? __pfx_path_openat+0x10/0x10 [ 295.497569][ T9058] do_filp_open+0x20b/0x470 [ 295.497611][ T9058] ? __pfx_do_filp_open+0x10/0x10 [ 295.497683][ T9058] ? alloc_fd+0x471/0x7d0 [ 295.497736][ T9058] do_sys_openat2+0x11b/0x1d0 [ 295.497766][ T9058] ? __pfx_do_sys_openat2+0x10/0x10 [ 295.497812][ T9058] __x64_sys_openat+0x174/0x210 [ 295.497843][ T9058] ? __pfx___x64_sys_openat+0x10/0x10 [ 295.497877][ T9058] ? rcu_is_watching+0x12/0xc0 [ 295.497922][ T9058] do_syscall_64+0xcd/0x260 [ 295.497966][ T9058] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.497994][ T9058] RIP: 0033:0x7f804138d169 [ 295.498019][ T9058] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 295.498046][ T9058] RSP: 002b:00007f803f1f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 295.498073][ T9058] RAX: ffffffffffffffda RBX: 00007f80415a6160 RCX: 00007f804138d169 [ 295.498092][ T9058] RDX: 0000000000040000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 295.498109][ T9058] RBP: 00007f804140e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 295.498125][ T9058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 295.498140][ T9058] R13: 0000000000000000 R14: 00007f80415a6160 R15: 00007ffe9a93f308 [ 295.498178][ T9058] [ 296.527573][ T9089] netlink: 8 bytes leftover after parsing attributes in process `syz.0.776'. [ 296.536831][ T9089] netlink: 13700 bytes leftover after parsing attributes in process `syz.0.776'. [ 297.662416][ T9110] net_ratelimit: 12 callbacks suppressed [ 297.662441][ T9110] netlink: zone id is out of range [ 297.689820][ T5842] Bluetooth: hci0: Unable to find connection for big 0xd2 [ 297.702161][ T9110] netlink: zone id is out of range [ 297.702178][ T9110] netlink: zone id is out of range [ 297.702189][ T9110] netlink: zone id is out of range [ 297.702199][ T9110] netlink: zone id is out of range [ 297.702245][ T9110] netlink: zone id is out of range [ 297.766270][ T9116] netlink: 338 bytes leftover after parsing attributes in process `syz.3.785'. [ 297.879673][ T9122] netlink: 8 bytes leftover after parsing attributes in process `syz.0.786'. [ 297.879708][ T9122] netlink: 13700 bytes leftover after parsing attributes in process `syz.0.786'. [ 298.023121][ T9125] netlink: 28 bytes leftover after parsing attributes in process `syz.0.787'. [ 299.379242][ T9146] netlink: zone id is out of range [ 299.382082][ T9149] netlink: 8 bytes leftover after parsing attributes in process `syz.2.795'. [ 299.384416][ T9146] netlink: zone id is out of range [ 299.393575][ T9149] netlink: 13700 bytes leftover after parsing attributes in process `syz.2.795'. [ 299.494930][ T9146] netlink: zone id is out of range [ 299.506575][ T9146] netlink: zone id is out of range [ 299.982876][ T9162] FAULT_INJECTION: forcing a failure. [ 299.982876][ T9162] name failslab, interval 1, probability 0, space 0, times 0 [ 300.004176][ T9162] CPU: 0 UID: 0 PID: 9162 Comm: syz.2.799 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 300.004215][ T9162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 300.004232][ T9162] Call Trace: [ 300.004240][ T9162] [ 300.004251][ T9162] dump_stack_lvl+0x16c/0x1f0 [ 300.004293][ T9162] should_fail_ex+0x512/0x640 [ 300.004323][ T9162] ? fs_reclaim_acquire+0xae/0x150 [ 300.004358][ T9162] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 300.004394][ T9162] should_failslab+0xc2/0x120 [ 300.004420][ T9162] __kmalloc_noprof+0xd2/0x510 [ 300.004471][ T9162] tomoyo_realpath_from_path+0xc2/0x6e0 [ 300.004513][ T9162] ? tomoyo_profile+0x47/0x60 [ 300.004556][ T9162] tomoyo_path_number_perm+0x245/0x580 [ 300.004586][ T9162] ? tomoyo_path_number_perm+0x237/0x580 [ 300.004620][ T9162] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 300.004655][ T9162] ? find_held_lock+0x2b/0x80 [ 300.004725][ T9162] ? find_held_lock+0x2b/0x80 [ 300.004757][ T9162] ? hook_file_ioctl_common+0x145/0x410 [ 300.004796][ T9162] ? __fget_files+0x20e/0x3c0 [ 300.004842][ T9162] security_file_ioctl+0x9b/0x240 [ 300.004877][ T9162] __x64_sys_ioctl+0xb7/0x200 [ 300.004914][ T9162] do_syscall_64+0xcd/0x260 [ 300.004956][ T9162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.004982][ T9162] RIP: 0033:0x7f804138d169 [ 300.005013][ T9162] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 300.005039][ T9162] RSP: 002b:00007f8042130038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 300.005063][ T9162] RAX: ffffffffffffffda RBX: 00007f80415a5fa0 RCX: 00007f804138d169 [ 300.005081][ T9162] RDX: 0000200000000000 RSI: 000000004024700a RDI: 0000000000000003 [ 300.005097][ T9162] RBP: 00007f8042130090 R08: 0000000000000000 R09: 0000000000000000 [ 300.005112][ T9162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 300.005127][ T9162] R13: 0000000000000000 R14: 00007f80415a5fa0 R15: 00007ffe9a93f308 [ 300.005161][ T9162] [ 300.207069][ T9162] ERROR: Out of memory at tomoyo_realpath_from_path. [ 301.200320][ T9175] netlink: 8 bytes leftover after parsing attributes in process `syz.2.804'. [ 301.256971][ T9184] netlink: 8 bytes leftover after parsing attributes in process `syz.3.805'. [ 302.420256][ T9200] FAULT_INJECTION: forcing a failure. [ 302.420256][ T9200] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 302.454309][ T9200] CPU: 1 UID: 0 PID: 9200 Comm: syz.1.811 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 302.454347][ T9200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 302.454363][ T9200] Call Trace: [ 302.454373][ T9200] [ 302.454384][ T9200] dump_stack_lvl+0x16c/0x1f0 [ 302.454429][ T9200] should_fail_ex+0x512/0x640 [ 302.454466][ T9200] _copy_from_user+0x2e/0xd0 [ 302.454501][ T9200] ppp_ioctl+0x1e9/0x2660 [ 302.454531][ T9200] ? find_held_lock+0x2b/0x80 [ 302.454565][ T9200] ? __pfx_ppp_ioctl+0x10/0x10 [ 302.454598][ T9200] ? __fget_files+0x20e/0x3c0 [ 302.454644][ T9200] ? __pfx_ppp_ioctl+0x10/0x10 [ 302.454671][ T9200] __x64_sys_ioctl+0x190/0x200 [ 302.454707][ T9200] do_syscall_64+0xcd/0x260 [ 302.454749][ T9200] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.454777][ T9200] RIP: 0033:0x7f14c138d169 [ 302.454798][ T9200] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 302.454824][ T9200] RSP: 002b:00007f14c217a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 302.454850][ T9200] RAX: ffffffffffffffda RBX: 00007f14c15a5fa0 RCX: 00007f14c138d169 [ 302.454868][ T9200] RDX: 00002000000000c0 RSI: 0000000040107447 RDI: 0000000000000003 [ 302.454884][ T9200] RBP: 00007f14c217a090 R08: 0000000000000000 R09: 0000000000000000 [ 302.454899][ T9200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 302.454914][ T9200] R13: 0000000000000000 R14: 00007f14c15a5fa0 R15: 00007fff9d8a1c98 [ 302.454952][ T9200] [ 302.611174][ C1] vkms_vblank_simulate: vblank timer overrun [ 302.907878][ T9214] __nla_validate_parse: 1 callbacks suppressed [ 302.907902][ T9214] netlink: 8 bytes leftover after parsing attributes in process `syz.2.816'. [ 302.949321][ T9214] netlink: 13700 bytes leftover after parsing attributes in process `syz.2.816'. [ 304.390828][ T9253] FAULT_INJECTION: forcing a failure. [ 304.390828][ T9253] name failslab, interval 1, probability 0, space 0, times 0 [ 304.443244][ T9253] CPU: 0 UID: 0 PID: 9253 Comm: syz.1.827 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 304.443285][ T9253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 304.443304][ T9253] Call Trace: [ 304.443313][ T9253] [ 304.443325][ T9253] dump_stack_lvl+0x16c/0x1f0 [ 304.443371][ T9253] should_fail_ex+0x512/0x640 [ 304.443404][ T9253] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 304.443453][ T9253] should_failslab+0xc2/0x120 [ 304.443482][ T9253] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 304.443526][ T9253] ? sk_prot_alloc+0x60/0x2a0 [ 304.443570][ T9253] sk_prot_alloc+0x60/0x2a0 [ 304.443610][ T9253] sk_alloc+0x36/0xc20 [ 304.443644][ T9253] inet6_create+0x381/0x1300 [ 304.443680][ T9253] ? inet6_create+0x7f/0x1300 [ 304.443718][ T9253] __sock_create+0x335/0x8d0 [ 304.443752][ T9253] smc_create+0x15d/0x2a0 [ 304.443788][ T9253] __sock_create+0x335/0x8d0 [ 304.443829][ T9253] __sys_socket+0x14d/0x260 [ 304.443857][ T9253] ? __pfx___sys_socket+0x10/0x10 [ 304.443887][ T9253] ? rcu_is_watching+0x12/0xc0 [ 304.443929][ T9253] __x64_sys_socket+0x72/0xb0 [ 304.443954][ T9253] ? lockdep_hardirqs_on+0x7c/0x110 [ 304.443986][ T9253] do_syscall_64+0xcd/0x260 [ 304.444038][ T9253] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.444066][ T9253] RIP: 0033:0x7f14c138d169 [ 304.444088][ T9253] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 304.444115][ T9253] RSP: 002b:00007f14c217a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 304.444141][ T9253] RAX: ffffffffffffffda RBX: 00007f14c15a5fa0 RCX: 00007f14c138d169 [ 304.444158][ T9253] RDX: 0000000000000001 RSI: 0000000000000001 RDI: 000000000000002b [ 304.444174][ T9253] RBP: 00007f14c140e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 304.444189][ T9253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 304.444205][ T9253] R13: 0000000000000000 R14: 00007f14c15a5fa0 R15: 00007fff9d8a1c98 [ 304.444241][ T9253] [ 304.712365][ T9258] net_ratelimit: 8 callbacks suppressed [ 304.712388][ T9258] netlink: zone id is out of range [ 304.723820][ T9258] netlink: zone id is out of range [ 304.729342][ T9258] netlink: zone id is out of range [ 304.735309][ T9258] netlink: zone id is out of range [ 304.741112][ T9258] netlink: zone id is out of range [ 304.979555][ T9267] netlink: 8 bytes leftover after parsing attributes in process `syz.3.830'. [ 304.989248][ T9267] netlink: 13700 bytes leftover after parsing attributes in process `syz.3.830'. [ 305.393335][ T9274] netlink: 338 bytes leftover after parsing attributes in process `syz.1.832'. [ 306.607214][ T9287] nvme_fabrics: missing parameter 'transport=%s' [ 306.658836][ T9287] nvme_fabrics: missing parameter 'nqn=%s' [ 306.802854][ T9299] netlink: zone id is out of range [ 306.816667][ T9299] netlink: zone id is out of range [ 306.826808][ T9299] netlink: zone id is out of range [ 306.832082][ T9299] netlink: zone id is out of range [ 306.889292][ T9299] netlink: zone id is out of range [ 307.348305][ T9305] netlink: 8 bytes leftover after parsing attributes in process `syz.1.840'. [ 307.368159][ T9305] netlink: 13700 bytes leftover after parsing attributes in process `syz.1.840'. [ 308.757977][ T9323] netlink: 338 bytes leftover after parsing attributes in process `syz.1.845'. [ 309.043500][ T9329] FAULT_INJECTION: forcing a failure. [ 309.043500][ T9329] name failslab, interval 1, probability 0, space 0, times 0 [ 309.082758][ T9329] CPU: 0 UID: 0 PID: 9329 Comm: syz.3.847 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 309.082804][ T9329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 309.082823][ T9329] Call Trace: [ 309.082832][ T9329] [ 309.082845][ T9329] dump_stack_lvl+0x16c/0x1f0 [ 309.082894][ T9329] should_fail_ex+0x512/0x640 [ 309.082938][ T9329] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 309.082989][ T9329] should_failslab+0xc2/0x120 [ 309.083020][ T9329] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 309.083063][ T9329] ? __proc_create+0xc3/0x8c0 [ 309.083095][ T9329] ? __proc_create+0x2ce/0x8c0 [ 309.083131][ T9329] __proc_create+0x2ce/0x8c0 [ 309.083164][ T9329] ? __pfx___proc_create+0x10/0x10 [ 309.083212][ T9329] _proc_mkdir+0xb9/0x200 [ 309.083246][ T9329] ? __pfx__proc_mkdir+0x10/0x10 [ 309.083290][ T9329] ? __pfx_vlan_init_net+0x10/0x10 [ 309.083321][ T9329] vlan_proc_init+0x93/0x180 [ 309.083365][ T9329] ops_init+0x1df/0x5f0 [ 309.083409][ T9329] setup_net+0x21e/0x850 [ 309.083451][ T9329] ? __pfx_setup_net+0x10/0x10 [ 309.083485][ T9329] ? lockdep_init_map_type+0x5c/0x280 [ 309.083516][ T9329] ? __pfx_down_read_killable+0x10/0x10 [ 309.083565][ T9329] ? debug_mutex_init+0x37/0x70 [ 309.083604][ T9329] copy_net_ns+0x2a6/0x5f0 [ 309.083645][ T9329] create_new_namespaces+0x3ea/0xad0 [ 309.083694][ T9329] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 309.083734][ T9329] ksys_unshare+0x45b/0xa40 [ 309.083773][ T9329] ? __pfx_ksys_unshare+0x10/0x10 [ 309.083809][ T9329] ? xfd_validate_state+0x5d/0x180 [ 309.083839][ T9329] ? rcu_is_watching+0x12/0xc0 [ 309.083881][ T9329] __x64_sys_unshare+0x31/0x40 [ 309.083920][ T9329] do_syscall_64+0xcd/0x260 [ 309.083977][ T9329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.084007][ T9329] RIP: 0033:0x7f522bb8d169 [ 309.084030][ T9329] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 309.084057][ T9329] RSP: 002b:00007f522c9da038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 309.084085][ T9329] RAX: ffffffffffffffda RBX: 00007f522bda5fa0 RCX: 00007f522bb8d169 [ 309.084105][ T9329] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 309.084120][ T9329] RBP: 00007f522bc0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 309.084138][ T9329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 309.084156][ T9329] R13: 0000000000000000 R14: 00007f522bda5fa0 R15: 00007ffc591cc758 [ 309.084193][ T9329] [ 309.084204][ T9329] 8021q: can't create entry in proc filesystem! [ 310.693996][ T9375] netlink: 338 bytes leftover after parsing attributes in process `syz.2.860'. [ 313.457367][ T9412] netlink: zone id is out of range [ 313.462560][ T9412] netlink: zone id is out of range [ 313.469341][ T9412] netlink: zone id is out of range [ 313.478883][ T9412] netlink: zone id is out of range [ 313.484162][ T9412] netlink: zone id is out of range [ 313.758286][ T9419] netlink: 8 bytes leftover after parsing attributes in process `syz.0.874'. [ 313.796037][ T9419] netlink: 13700 bytes leftover after parsing attributes in process `syz.0.874'. [ 314.820082][ T9450] netlink: zone id is out of range [ 314.846705][ T9450] netlink: zone id is out of range [ 314.859836][ T9450] netlink: zone id is out of range [ 314.865056][ T9450] netlink: zone id is out of range [ 314.878296][ T9450] netlink: zone id is out of range [ 315.275065][ T9459] netlink: 338 bytes leftover after parsing attributes in process `syz.1.884'. [ 315.849931][ T9468] FAULT_INJECTION: forcing a failure. [ 315.849931][ T9468] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 315.886868][ T9468] CPU: 1 UID: 0 PID: 9468 Comm: syz.0.888 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 315.886917][ T9468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 315.886934][ T9468] Call Trace: [ 315.886943][ T9468] [ 315.886953][ T9468] dump_stack_lvl+0x16c/0x1f0 [ 315.886996][ T9468] should_fail_ex+0x512/0x640 [ 315.887038][ T9468] strncpy_from_user+0x3b/0x2e0 [ 315.887071][ T9468] getname_flags.part.0+0x8b/0x540 [ 315.887107][ T9468] getname_flags+0x93/0xf0 [ 315.887143][ T9468] do_sys_openat2+0xb8/0x1d0 [ 315.887169][ T9468] ? __pfx_do_sys_openat2+0x10/0x10 [ 315.887202][ T9468] ? __fget_files+0x20e/0x3c0 [ 315.887246][ T9468] __x64_sys_openat+0x174/0x210 [ 315.887274][ T9468] ? __pfx___x64_sys_openat+0x10/0x10 [ 315.887301][ T9468] ? ksys_write+0x1b9/0x240 [ 315.887336][ T9468] ? rcu_is_watching+0x12/0xc0 [ 315.887380][ T9468] do_syscall_64+0xcd/0x260 [ 315.887421][ T9468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.887449][ T9468] RIP: 0033:0x7f8f0cd8d169 [ 315.887470][ T9468] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 315.887496][ T9468] RSP: 002b:00007f8f0dc77038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 315.887521][ T9468] RAX: ffffffffffffffda RBX: 00007f8f0cfa5fa0 RCX: 00007f8f0cd8d169 [ 315.887539][ T9468] RDX: 0000000000028641 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 315.887556][ T9468] RBP: 00007f8f0dc77090 R08: 0000000000000000 R09: 0000000000000000 [ 315.887602][ T9468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 315.887617][ T9468] R13: 0000000000000000 R14: 00007f8f0cfa5fa0 R15: 00007fff2e1845a8 [ 315.887653][ T9468] [ 316.087906][ T9471] netlink: 8 bytes leftover after parsing attributes in process `syz.2.889'. [ 316.096800][ T9471] netlink: 13700 bytes leftover after parsing attributes in process `syz.2.889'. [ 318.738254][ T9511] netlink: 338 bytes leftover after parsing attributes in process `syz.1.899'. [ 318.985516][ T9513] FAULT_INJECTION: forcing a failure. [ 318.985516][ T9513] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 319.023100][ T9513] CPU: 1 UID: 0 PID: 9513 Comm: syz.3.898 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 319.023139][ T9513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 319.023156][ T9513] Call Trace: [ 319.023165][ T9513] [ 319.023175][ T9513] dump_stack_lvl+0x16c/0x1f0 [ 319.023221][ T9513] should_fail_ex+0x512/0x640 [ 319.023257][ T9513] _copy_from_iter+0x2a4/0x15b0 [ 319.023297][ T9513] ? alloc_pages_mpol+0x25a/0x550 [ 319.023322][ T9513] ? __pfx__copy_from_iter+0x10/0x10 [ 319.023355][ T9513] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 319.023396][ T9513] copy_page_from_iter+0xa5/0x120 [ 319.023434][ T9513] tun_build_skb.constprop.0+0x292/0x1480 [ 319.023485][ T9513] ? __pfx_tun_build_skb.constprop.0+0x10/0x10 [ 319.023527][ T9513] ? __lock_acquire+0x5ca/0x1ba0 [ 319.023574][ T9513] ? find_held_lock+0x2b/0x80 [ 319.023614][ T9513] tun_get_user+0x165f/0x3b10 [ 319.023668][ T9513] ? __pfx_tun_get_user+0x10/0x10 [ 319.023703][ T9513] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 319.023750][ T9513] ? find_held_lock+0x2b/0x80 [ 319.023784][ T9513] ? tun_get+0x191/0x370 [ 319.023836][ T9513] tun_chr_write_iter+0xdc/0x210 [ 319.023873][ T9513] vfs_write+0x5ba/0x1180 [ 319.023910][ T9513] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 319.023952][ T9513] ? __pfx_vfs_write+0x10/0x10 [ 319.023986][ T9513] ? find_held_lock+0x2b/0x80 [ 319.024044][ T9513] __x64_sys_pwrite64+0x1f4/0x250 [ 319.024081][ T9513] ? __pfx___x64_sys_pwrite64+0x10/0x10 [ 319.024132][ T9513] do_syscall_64+0xcd/0x260 [ 319.024172][ T9513] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.024200][ T9513] RIP: 0033:0x7f522bb8d169 [ 319.024221][ T9513] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 319.024246][ T9513] RSP: 002b:00007f522c9da038 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 319.024273][ T9513] RAX: ffffffffffffffda RBX: 00007f522bda5fa0 RCX: 00007f522bb8d169 [ 319.024290][ T9513] RDX: 000000000000004e RSI: 0000200000000000 RDI: 00000000000000c8 [ 319.024307][ T9513] RBP: 00007f522c9da090 R08: 0000000000000000 R09: 0000000000000000 [ 319.024323][ T9513] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 319.024338][ T9513] R13: 0000000000000001 R14: 00007f522bda5fa0 R15: 00007ffc591cc758 [ 319.024374][ T9513] [ 319.588128][ T9515] netlink: 8 bytes leftover after parsing attributes in process `syz.3.900'. [ 319.597187][ T9515] netlink: 13700 bytes leftover after parsing attributes in process `syz.3.900'. [ 319.713013][ T9517] net_ratelimit: 5 callbacks suppressed [ 319.713041][ T9517] netlink: zone id is out of range [ 319.744985][ T9517] netlink: zone id is out of range [ 319.755088][ T9517] netlink: zone id is out of range [ 319.765232][ T9517] netlink: zone id is out of range [ 319.776842][ T9517] netlink: zone id is out of range [ 320.360169][ T9530] FAULT_INJECTION: forcing a failure. [ 320.360169][ T9530] name failslab, interval 1, probability 0, space 0, times 0 [ 320.389011][ T9530] CPU: 1 UID: 0 PID: 9530 Comm: syz.2.905 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 320.389050][ T9530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 320.389066][ T9530] Call Trace: [ 320.389075][ T9530] [ 320.389085][ T9530] dump_stack_lvl+0x16c/0x1f0 [ 320.389128][ T9530] should_fail_ex+0x512/0x640 [ 320.389158][ T9530] ? fs_reclaim_acquire+0xae/0x150 [ 320.389194][ T9530] ? tomoyo_encode2+0x100/0x3e0 [ 320.389227][ T9530] should_failslab+0xc2/0x120 [ 320.389253][ T9530] __kmalloc_noprof+0xd2/0x510 [ 320.389291][ T9530] ? d_absolute_path+0x136/0x1a0 [ 320.389328][ T9530] tomoyo_encode2+0x100/0x3e0 [ 320.389370][ T9530] tomoyo_encode+0x29/0x50 [ 320.389404][ T9530] tomoyo_realpath_from_path+0x18f/0x6e0 [ 320.389453][ T9530] tomoyo_path_number_perm+0x245/0x580 [ 320.389483][ T9530] ? tomoyo_path_number_perm+0x237/0x580 [ 320.389517][ T9530] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 320.389551][ T9530] ? find_held_lock+0x2b/0x80 [ 320.389621][ T9530] ? find_held_lock+0x2b/0x80 [ 320.389652][ T9530] ? hook_file_ioctl_common+0x145/0x410 [ 320.389691][ T9530] ? __fget_files+0x20e/0x3c0 [ 320.389736][ T9530] security_file_ioctl+0x9b/0x240 [ 320.389771][ T9530] __x64_sys_ioctl+0xb7/0x200 [ 320.389806][ T9530] do_syscall_64+0xcd/0x260 [ 320.389857][ T9530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.389883][ T9530] RIP: 0033:0x7f804138d169 [ 320.389905][ T9530] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 320.389931][ T9530] RSP: 002b:00007f8042130038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 320.389957][ T9530] RAX: ffffffffffffffda RBX: 00007f80415a5fa0 RCX: 00007f804138d169 [ 320.389974][ T9530] RDX: ffffffffffffffff RSI: 000000000000227f RDI: 0000000000000003 [ 320.389990][ T9530] RBP: 00007f8042130090 R08: 0000000000000000 R09: 0000000000000000 [ 320.390005][ T9530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 320.390021][ T9530] R13: 0000000000000000 R14: 00007f80415a5fa0 R15: 00007ffe9a93f308 [ 320.390059][ T9530] [ 320.390084][ T9530] ERROR: Out of memory at tomoyo_realpath_from_path. [ 320.445733][ T9532] FAULT_INJECTION: forcing a failure. [ 320.445733][ T9532] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 320.690957][ T9536] FAULT_INJECTION: forcing a failure. [ 320.690957][ T9536] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 320.743523][ T9532] CPU: 0 UID: 0 PID: 9532 Comm: syz.3.907 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 320.743560][ T9532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 320.743575][ T9532] Call Trace: [ 320.743584][ T9532] [ 320.743594][ T9532] dump_stack_lvl+0x16c/0x1f0 [ 320.743638][ T9532] should_fail_ex+0x512/0x640 [ 320.743675][ T9532] _copy_from_user+0x2e/0xd0 [ 320.743710][ T9532] memdup_user_nul+0x6c/0x120 [ 320.743741][ T9532] cachefiles_daemon_write+0xda/0x500 [ 320.743786][ T9532] vfs_write+0x25c/0x1180 [ 320.743821][ T9532] ? __pfx_cachefiles_daemon_write+0x10/0x10 [ 320.743869][ T9532] ? __pfx_vfs_write+0x10/0x10 [ 320.743899][ T9532] ? find_held_lock+0x2b/0x80 [ 320.743933][ T9532] ? __fget_files+0x204/0x3c0 [ 320.743974][ T9532] ? __fget_files+0x20e/0x3c0 [ 320.744021][ T9532] ksys_write+0x12a/0x240 [ 320.744056][ T9532] ? __pfx_ksys_write+0x10/0x10 [ 320.744088][ T9532] ? rcu_is_watching+0x12/0xc0 [ 320.744139][ T9532] do_syscall_64+0xcd/0x260 [ 320.744179][ T9532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.744205][ T9532] RIP: 0033:0x7f522bb8d169 [ 320.744227][ T9532] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 320.744252][ T9532] RSP: 002b:00007f522c9da038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 320.744278][ T9532] RAX: ffffffffffffffda RBX: 00007f522bda5fa0 RCX: 00007f522bb8d169 [ 320.744295][ T9532] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 320.744309][ T9532] RBP: 00007f522c9da090 R08: 0000000000000000 R09: 0000000000000000 [ 320.744324][ T9532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 320.744339][ T9532] R13: 0000000000000000 R14: 00007f522bda5fa0 R15: 00007ffc591cc758 [ 320.744373][ T9532] [ 320.744692][ T9536] CPU: 1 UID: 0 PID: 9536 Comm: syz.2.908 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 320.744726][ T9536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 320.744741][ T9536] Call Trace: [ 320.744749][ T9536] [ 320.744759][ T9536] dump_stack_lvl+0x16c/0x1f0 [ 320.744796][ T9536] should_fail_ex+0x512/0x640 [ 320.744831][ T9536] _copy_to_iter+0x2a4/0x15a0 [ 320.744876][ T9536] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 320.744916][ T9536] ? __asan_memcpy+0x3c/0x60 [ 320.744951][ T9536] ? __pfx__copy_to_iter+0x10/0x10 [ 320.744984][ T9536] ? kernfs_seq_stop+0xcd/0x120 [ 320.745020][ T9536] ? kernfs_put_active+0x86/0xe0 [ 320.745050][ T9536] seq_read_iter+0xcf8/0x12c0 [ 320.745101][ T9536] kernfs_fop_read_iter+0x40f/0x5a0 [ 320.745130][ T9536] ? rw_verify_area+0xcf/0x680 [ 320.745165][ T9536] vfs_read+0x8c8/0xc70 [ 320.745203][ T9536] ? __pfx___mutex_lock+0x10/0x10 [ 320.745241][ T9536] ? __pfx_vfs_read+0x10/0x10 [ 320.745306][ T9536] ksys_read+0x12a/0x240 [ 320.745346][ T9536] ? __pfx_ksys_read+0x10/0x10 [ 320.745379][ T9536] ? rcu_is_watching+0x12/0xc0 [ 320.745424][ T9536] do_syscall_64+0xcd/0x260 [ 320.745466][ T9536] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.745492][ T9536] RIP: 0033:0x7f804138d169 [ 320.745513][ T9536] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 320.745537][ T9536] RSP: 002b:00007f8042130038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 320.745562][ T9536] RAX: ffffffffffffffda RBX: 00007f80415a5fa0 RCX: 00007f804138d169 [ 320.745579][ T9536] RDX: 00000000000000a3 RSI: 0000200000000480 RDI: 0000000000000003 [ 320.745596][ T9536] RBP: 00007f8042130090 R08: 0000000000000000 R09: 0000000000000000 [ 320.745612][ T9536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 320.745627][ T9536] R13: 0000000000000000 R14: 00007f80415a5fa0 R15: 00007ffe9a93f308 [ 320.745666][ T9536] [ 322.604496][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.611073][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.546310][ T9579] netlink: 8 bytes leftover after parsing attributes in process `syz.1.920'. [ 323.555584][ T9579] netlink: 13700 bytes leftover after parsing attributes in process `syz.1.920'. [ 323.609729][ T9580] netlink: zone id is out of range [ 323.628888][ T9580] netlink: zone id is out of range [ 323.634101][ T9580] netlink: zone id is out of range [ 323.665335][ T9580] netlink: zone id is out of range [ 323.694920][ T9580] netlink: zone id is out of range [ 324.709210][ T9598] netlink: 338 bytes leftover after parsing attributes in process `syz.2.925'. [ 325.870848][ T9622] QAT: failed to copy from user cfg_data. [ 325.921419][ T9625] netlink: 8 bytes leftover after parsing attributes in process `syz.3.931'. [ 326.023284][ T9625] netlink: 13700 bytes leftover after parsing attributes in process `syz.3.931'. [ 327.398257][ T9656] syz.2.935 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 327.568278][ T9659] netlink: 338 bytes leftover after parsing attributes in process `syz.0.936'. [ 328.616356][ T9673] FAULT_INJECTION: forcing a failure. [ 328.616356][ T9673] name failslab, interval 1, probability 0, space 0, times 0 [ 328.789948][ T9673] CPU: 0 UID: 0 PID: 9673 Comm: syz.0.939 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 328.789987][ T9673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 328.790003][ T9673] Call Trace: [ 328.790013][ T9673] [ 328.790032][ T9673] dump_stack_lvl+0x16c/0x1f0 [ 328.790076][ T9673] should_fail_ex+0x512/0x640 [ 328.790105][ T9673] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 328.790146][ T9673] should_failslab+0xc2/0x120 [ 328.790172][ T9673] __kmalloc_cache_noprof+0x6a/0x3e0 [ 328.790207][ T9673] ? rcu_is_watching+0x12/0xc0 [ 328.790241][ T9673] ? s_start+0x7b/0x320 [ 328.790271][ T9673] s_start+0x7b/0x320 [ 328.790303][ T9673] traverse.part.0.constprop.0+0xac/0x640 [ 328.790355][ T9673] seq_read_iter+0x932/0x12c0 [ 328.790409][ T9673] seq_read+0x39e/0x4e0 [ 328.790444][ T9673] ? __pfx_seq_read+0x10/0x10 [ 328.790479][ T9673] ? get_pid_task+0xfc/0x250 [ 328.790525][ T9673] ? rw_verify_area+0xcf/0x680 [ 328.790558][ T9673] ? __pfx_seq_read+0x10/0x10 [ 328.790594][ T9673] vfs_read+0x1de/0xc70 [ 328.790639][ T9673] ? __pfx_vfs_read+0x10/0x10 [ 328.790672][ T9673] ? find_held_lock+0x2b/0x80 [ 328.790713][ T9673] ? __fget_files+0x204/0x3c0 [ 328.790765][ T9673] ? __fget_files+0x20e/0x3c0 [ 328.790797][ T9673] ? __fget_files+0x1e0/0x3c0 [ 328.790847][ T9673] __x64_sys_pread64+0x1f4/0x250 [ 328.790888][ T9673] ? __pfx___x64_sys_pread64+0x10/0x10 [ 328.790924][ T9673] ? rcu_is_watching+0x12/0xc0 [ 328.790970][ T9673] do_syscall_64+0xcd/0x260 [ 328.791013][ T9673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.791049][ T9673] RIP: 0033:0x7f8f0cd8d169 [ 328.791072][ T9673] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 328.791097][ T9673] RSP: 002b:00007f8f0dc35038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 328.791124][ T9673] RAX: ffffffffffffffda RBX: 00007f8f0cfa6160 RCX: 00007f8f0cd8d169 [ 328.791142][ T9673] RDX: 000000000000000f RSI: 0000200000000000 RDI: 0000000000000006 [ 328.791157][ T9673] RBP: 00007f8f0dc35090 R08: 0000000000000000 R09: 0000000000000000 [ 328.791174][ T9673] R10: 00000000000005af R11: 0000000000000246 R12: 0000000000000001 [ 328.791190][ T9673] R13: 0000000000000000 R14: 00007f8f0cfa6160 R15: 00007fff2e1845a8 [ 328.791228][ T9673] [ 329.023163][ C0] vkms_vblank_simulate: vblank timer overrun [ 329.119167][ T9673] [ 329.121569][ T9673] ===================================== [ 329.127862][ T9673] WARNING: bad unlock balance detected! [ 329.133535][ T9673] 6.15.0-rc1-syzkaller #0 Not tainted [ 329.138948][ T9673] ------------------------------------- [ 329.144700][ T9673] syz.0.939/9673 is trying to release lock (event_mutex) at: [ 329.152142][ T9673] [] traverse.part.0.constprop.0+0x2bd/0x640 [ 329.159824][ T9673] but there are no more locks to release! [ 329.165552][ T9673] [ 329.165552][ T9673] other info that might help us debug this: [ 329.173620][ T9673] 1 lock held by syz.0.939/9673: [ 329.178588][ T9673] #0: ffff8880336ef8b8 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xe1/0x12c0 [ 329.187514][ T9673] [ 329.187514][ T9673] stack backtrace: [ 329.193410][ T9673] CPU: 1 UID: 0 PID: 9673 Comm: syz.0.939 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 329.193435][ T9673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 329.193447][ T9673] Call Trace: [ 329.193454][ T9673] [ 329.193462][ T9673] dump_stack_lvl+0x116/0x1f0 [ 329.193490][ T9673] ? traverse.part.0.constprop.0+0x2bd/0x640 [ 329.193517][ T9673] print_unlock_imbalance_bug+0x11b/0x130 [ 329.193547][ T9673] ? traverse.part.0.constprop.0+0x2bd/0x640 [ 329.193573][ T9673] lock_release+0x242/0x2f0 [ 329.193592][ T9673] __mutex_unlock_slowpath+0xa2/0x6a0 [ 329.193621][ T9673] ? rcu_is_watching+0x12/0xc0 [ 329.193646][ T9673] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 329.193674][ T9673] ? __kmalloc_cache_noprof+0x249/0x3e0 [ 329.193700][ T9673] ? rcu_is_watching+0x12/0xc0 [ 329.193723][ T9673] ? kfree+0x252/0x4d0 [ 329.193747][ T9673] ? s_start+0x28c/0x320 [ 329.193766][ T9673] traverse.part.0.constprop.0+0x2bd/0x640 [ 329.193796][ T9673] seq_read_iter+0x932/0x12c0 [ 329.193825][ T9673] seq_read+0x39e/0x4e0 [ 329.193849][ T9673] ? __pfx_seq_read+0x10/0x10 [ 329.193874][ T9673] ? get_pid_task+0xfc/0x250 [ 329.193898][ T9673] ? rw_verify_area+0xcf/0x680 [ 329.193921][ T9673] ? __pfx_seq_read+0x10/0x10 [ 329.193946][ T9673] vfs_read+0x1de/0xc70 [ 329.193974][ T9673] ? __pfx_vfs_read+0x10/0x10 [ 329.194005][ T9673] ? find_held_lock+0x2b/0x80 [ 329.194028][ T9673] ? __fget_files+0x204/0x3c0 [ 329.194057][ T9673] ? __fget_files+0x20e/0x3c0 [ 329.194083][ T9673] ? __fget_files+0x1e0/0x3c0 [ 329.194112][ T9673] __x64_sys_pread64+0x1f4/0x250 [ 329.194140][ T9673] ? __pfx___x64_sys_pread64+0x10/0x10 [ 329.194167][ T9673] ? rcu_is_watching+0x12/0xc0 [ 329.194193][ T9673] do_syscall_64+0xcd/0x260 [ 329.194222][ T9673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.194242][ T9673] RIP: 0033:0x7f8f0cd8d169 [ 329.194259][ T9673] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 329.194279][ T9673] RSP: 002b:00007f8f0dc35038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 329.194298][ T9673] RAX: ffffffffffffffda RBX: 00007f8f0cfa6160 RCX: 00007f8f0cd8d169 [ 329.194311][ T9673] RDX: 000000000000000f RSI: 0000200000000000 RDI: 0000000000000006 [ 329.194324][ T9673] RBP: 00007f8f0dc35090 R08: 0000000000000000 R09: 0000000000000000 [ 329.194336][ T9673] R10: 00000000000005af R11: 0000000000000246 R12: 0000000000000001 [ 329.194348][ T9673] R13: 0000000000000000 R14: 00007f8f0cfa6160 R15: 00007fff2e1845a8 [ 329.194366][ T9673] [ 329.489658][ T9680] netlink: 8 bytes leftover after parsing attributes in process `syz.3.941'. [ 329.586524][ T9680] netlink: 13700 bytes leftover after parsing attributes in process `syz.3.941'.