last executing test programs: 8.363211342s ago: executing program 0 (id=1318): statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x13, 0x940, 0x1ffe0, 0x3, 0x6, 0x2, 0x9, 0x5, 0x2, 0x7, 0xb0, 0x9, 0x5, 0x3, 0x5, 0x7}, 0x1fe, 0x81) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$auto_KVM_GET_MSRS(r0, 0xc008ae88, &(0x7f0000000040)={0x2, 0x0, [{0x487, 0x400, 0x9}]}) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r1 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) mmap$auto(0x0, 0x9, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) r2 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) read$auto_rng_chrdev_ops_core(r2, &(0x7f0000000040)=""/4096, 0xfffffe82) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x2, 0x3, 0x9) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/devices/platform/i8042/serio0/softraw\x00', 0x141042, 0x0) write$auto(0x3, 0x0, 0x5c8) 8.087281195s ago: executing program 3 (id=1320): mmap$auto(0xa, 0x400008, 0xdf, 0x1a, 0x2, 0x8000) socket(0x2, 0x1, 0x0) r0 = mq_open$auto(0x0, 0x10000, 0x6, 0x0) mq_notify$auto(0x4, 0x0) mq_notify$auto(0x4, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) fsopen$auto(0x0, 0x1) adjtimex$auto(&(0x7f00000005c0)={0xf332b6e, 0x0, 0xcea4, 0xfffffffffffffffd, 0xd4, 0x1, 0x0, 0x0, 0x1, 0x368e, 0x2, {0x100000000, 0x10000}, 0x5, 0x6, 0xfffffffffffffffd, 0x1007bfe, 0x0, 0x9, 0x81, 0xdfffffffffff628c, 0x2, 0xdeb1, 0x808}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D1\x00', 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0xa3db) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) ioctl$auto(r2, 0x401870cb, r2) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x381800, 0x0) read$auto_proc_uid_map_operations_base(r0, 0x0, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001080)='/sys/module/i915/parameters/mitigations\x00', 0x80302, 0x0) sendfile$auto(r3, r3, 0x0, 0x7ffff000) openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, 0x0, 0x12000, 0x0) socket(0x3, 0x5, 0x5) sendmsg$auto_OVS_FLOW_CMD_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40010}, 0x800) ioctl$auto_MTDFILEMODE(0xffffffffffffffff, 0x4d13, 0x0) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) r4 = eventfd$auto(0x80) readv$auto(r4, &(0x7f0000000380)={0x0, 0x8}, 0x4) listmount$auto(&(0x7f0000000100)={0x1f, @raw, 0x80000002, 0xfffffffffffffff7, 0x2}, 0x0, 0xf4240, 0x1) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/mm/transparent_hugepage/khugepaged/scan_sleep_millisecs\x00', 0xa0582, 0x0) write$auto(r5, 0x0, 0x2b6) semctl$auto(0x203, 0x100006, 0xd4, 0x200) 7.049654471s ago: executing program 0 (id=1323): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/net/dummy0/netdev_group\x00', 0x102, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000100)='8', 0x1) (fail_nth: 3) 6.925781552s ago: executing program 2 (id=1324): socket(0x2, 0x1, 0x0) r0 = mq_open$auto(0x0, 0x10000, 0x6, 0x0) mq_notify$auto(0x4, 0x0) mq_notify$auto(0x4, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) fsopen$auto(0x0, 0x1) adjtimex$auto(&(0x7f00000005c0)={0xf332b6e, 0x0, 0xcea4, 0xfffffffffffffffd, 0xd4, 0x1, 0x0, 0x0, 0x1, 0x368e, 0x2, {0x100000000, 0x10000}, 0x5, 0x6, 0xfffffffffffffffd, 0x1007bfe, 0x0, 0x9, 0x81, 0xdfffffffffff628c, 0x2, 0xdeb1, 0x808}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D1\x00', 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0xa3db) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) ioctl$auto(r2, 0x401870cb, r2) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x381800, 0x0) read$auto_proc_uid_map_operations_base(r0, &(0x7f0000000140)=""/163, 0xa3) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001080)='/sys/module/i915/parameters/mitigations\x00', 0x80302, 0x0) sendfile$auto(r3, r3, 0x0, 0x7ffff000) r4 = openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, 0x0, 0x12000, 0x0) socket(0x3, 0x5, 0x5) sendmsg$auto_OVS_FLOW_CMD_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40010}, 0x800) ioctl$auto_MTDFILEMODE(0xffffffffffffffff, 0x4d13, 0x0) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) r5 = eventfd$auto(0x80) readv$auto(r5, &(0x7f0000000380)={0x0, 0x8}, 0x4) read$auto(r4, 0x0, 0x3) userfaultfd$auto(0x4) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/mm/transparent_hugepage/khugepaged/scan_sleep_millisecs\x00', 0xa0582, 0x0) write$auto(r6, 0x0, 0x2b6) semctl$auto(0x203, 0x100006, 0xd4, 0x200) 6.574481148s ago: executing program 3 (id=1325): mmap$auto(0x0, 0x2020006, 0x3, 0xeb4, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0) write$auto_tty_fops_tty_io(r0, &(0x7f00000001c0)="976f09bd689a850edbe36136c8535f593331280bb0b4ba0edd7932ab185cca064833fd9b3c", 0x25) madvise$auto(0x0, 0xffffffffffff0005, 0x17) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/pcmC0D0p\x00', 0x4040, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) clone$auto(0xa, 0xa, &(0x7f0000000040), &(0x7f0000000080)=0x1, 0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket(0x2, 0x1, 0x106) bind$auto(r1, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000400), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010b27bd7000fda5c5a62073660008000300", @ANYRES32=r5], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4040080) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_macsec(&(0x7f00000001c0), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$auto_MACSEC_CMD_UPD_OFFLOAD(r6, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="44010000", @ANYRES16=r7, @ANYBLOB="01002dbd7000fddbdf250a00000008000100", @ANYRES32=r9, @ANYRES32, @ANYBLOB="0b0042006d6163736563000014002d00fc010000000000000000000000000001080001"], 0x144}, 0x1, 0x0, 0x0, 0x4040085}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'veth0_macvtap\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'ip6gretap0\x00', 0x0}) r12 = syz_genetlink_get_family_id$auto_macsec(&(0x7f00000001c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_MACSEC_CMD_UPD_OFFLOAD(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="44010000", @ANYRES16=r12, @ANYBLOB="01002dbd7000fddbdf250a00000008000100", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="0b0042006d6163736563000014002d00fc010000000000000000000000000001080001"], 0x144}, 0x1, 0x0, 0x0, 0x4040085}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'pimreg\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)={0x144, 0x0, 0x301, 0x70bd2b, 0x25dfdbfb, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x87c7}, @ETHTOOL_A_HEADER_FLAGS={0xffffff5a, 0x3, 0xc}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xc0000000}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6e}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x80007}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}]}, 0x144}, 0x1, 0x0, 0x0, 0x8000}, 0x24000000) 5.794405896s ago: executing program 2 (id=1328): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xa001, 0x0) io_uring_setup$auto(0xc, 0x0) clock_getres$auto(0xfffffffffffffff5, 0xffffffffffffffff) r0 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xdc5e}, 0x800}, 0x7, 0x4008) r1 = geteuid() setpriority$auto(0x9, r1, 0x8) sendmsg$auto_NL802154_CMD_GET_INTERFACE(r0, &(0x7f0000000600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000040)={0x548, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_PAN_ID={0x6, 0x9, 0x30c3}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x52a, 0x2b, 0x0, 0x1, [@nested={0xf3, 0x11f, 0x0, 0x1, [@generic="0afd1759a771dabe03ad18790d268ff6330c519abbdfe17a7e665a12d7a2e25d23d88fc0b183b62f0a63c9e54048d4c7b31a82779ffc003633dde43ca23e96a188c4ccdd159ea0872802bea7fb3f4c5236bfd76f378a6e9aa9202f04fa8707b9ad4a777f434f94e0102765975242eae05137668920d82bc331f3eace07c522078525c577f28a4b0bf5929b3359e2ad7adda431e1c9a5f0c7e80a27017dc35526e8e14e899710f1c435c516d7de99bf003862bdc9593d76c322dbb100f63214df65e61090a2d1f8cb3826683ccd8eda8d6aa1b5db10d63708006cde079e83ec04d7187a5c9e697b41bbe44c453bbb19"]}, @generic="a94ac59db5ade407268630", @nested={0x1a4, 0x37, 0x0, 0x1, [@typed={0xc, 0x87, 0x0, 0x0, @u64=0x6}, @generic="72d2640136cc22aa6fe4d4fb51d717ec189ed51f947499fbed7591c31dcbf7ffc13fd555fcad780ac871a257d70d3bc24aa5616cd5d6096e2061c1a531336aeae1c5eed27db4424d8d30d5ad50ab8b6d874af90a75b9eb1fed505d84d3e2e8e5cc3bd4634cb1aafc8f4c8f13425a3d3f6632123f10c36863f1d9ddff1bd131a6eaa6a24576fdd36fa7da6e3361aa14", @generic="61ed3c14b6b99c0deb702fe6b80b5768be466140d9ebfab07e9bddc1ec09c1c66dd7416626853469fa896848abd363c6a8", @generic="b9b59bae912546c9141e7898feccec589ab92294de2192816b850b828bc5f27874ca6ad7e66744fb2cc98356f1e94aa8a3971aaed19bbc2fd96f94847cb9fd6434357ce10def940bf680a152148f93048c8dac4f2fa9a5091a61032f4242097778eb3c1ff7d7dbe6982695432e35e653dd42b8b79b6d7667992cb354ee5176d3ed6316913b80a9de4ce3f70754e5068a05dc086d12502bb6069e44292c572d4d48acd170068d8f37accd25150f9b166633219c8c4dc646203e79e2a4c8b4c7d58f4679907a64281e8fd9a129f2f47c36d442a631"]}, @nested={0x10b, 0x4f, 0x0, 0x1, [@nested={0x4, 0x9e}, @nested={0x4, 0x9}, @typed={0x14, 0xee, 0x0, 0x0, @ipv6=@mcast2}, @generic="df2c457322bb42069b7e419e590e50f0169c3bed25b5cea624503285a25658984263a5428cfe54363e23a84eaa8a1fac2cc0b66bd04f30b93339eba79dd3e398153c225f0a249e1a1045531816f001eafe1f253e1866ab7ee92c15cb71648a565f9dbf48cf0d0dfe8af7e66abc7490937c2dbbca5e725a0dafbd2fa3209717e5c6b4bcce69c57713682fb608a83e246dbeb65c098bb1283475c0dc69632743a31e3c1948c1cbc74936216234235886366e0dfb6a0c498f71fc923fe325d382e2891f43119e8bd143afa73a36ab979208719f90fc70a9be8362737cde98b468ee61629b", @typed={0x7, 0x127, 0x0, 0x0, @str='/\x18\x00'}]}, @nested={0x8, 0x69, 0x0, 0x1, [@nested={0x4, 0x115}]}, @generic="8bea1f8eb1ad75ed74000422f77a47fd292a396b8743313ca3b5880f64f0aa22eba4ccd74031eea2442c6b76286ef32e8dac3776b5ee9d34740fe57fb6fbdce401fddedd53b6bfd6795fdf042062961ef22b700164a17d0a375df2d01061e228843a4882d76962dd4daeb8a15a17d31fa5140716f1275e8fca605070867a4b3076cbcdfaac8f493da69db434a50f11caeb9d8f3eb6e1c4f0860f6d42a4a74d7f5c523843b28556183a0f0af0acccb13b31515f27d22ab32eac598c6dae96dd0e94887178345941e3bbdf89e3760079", @nested={0x75, 0x2a, 0x0, 0x1, [@nested={0x4, 0xc4}, @nested={0x4, 0x55}, @generic="2d9bcd1405846332c3fd612d3edb85f2b6b5d88dcfc80b43aef1b9e8ee688a43f779c40721f4d158dfbef65182dd3a998c8018c3b1c4a1832fd308230bd45fc28afcc1833d743a4c05cae412fd163039f5dda3ea1364142ead523bf30ac95fe341", @typed={0x8, 0x2a, 0x0, 0x0, @uid=r1}]}, @typed={0x8, 0x58, 0x0, 0x0, @pid}, @typed={0xb, 0x10d, 0x0, 0x0, @str='(--{\'^\x00'}, @typed={0x14, 0xfc, 0x0, 0x0, @ipv6=@loopback}]}]}, 0x548}, 0x1, 0x0, 0x0, 0x10044}, 0x40) 5.6258981s ago: executing program 2 (id=1330): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(0x3, 0x0, 0x7fffffff) write$auto(0x1, 0x0, 0x80000000) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) r0 = socket(0x2b, 0x1, 0x1) r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) ioctl$auto_PPPIOCSMRU(r1, 0xc004743e, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001480)={'veth0_virt_wifi\x00'}) sendmsg$auto_NL80211_CMD_GET_MPP(r0, 0x0, 0x880) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) sysfs$auto(0x2, 0x10000000000048, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ovs_datapath(0x0, r3) sendmsg$auto_OVS_DP_CMD_DEL(r3, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00', @ANYRES16=r4, @ANYBLOB="1b9a46d18a099b624c25020000000800050000000100000000007298190a4c03a5ed15cd70ddd993dace61b8a4c2ccec3be0c37f89607a919036e6a844edfb57c49870e292b989d8", @ANYRES32, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x8c1}, 0x8000) sendmsg$auto_OVS_DP_CMD_SET(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x40, r4, 0x1, 0x70bd29, 0x25dfdbff, {}, [@OVS_DP_ATTR_NAME={0x13, 0x1, 'MAC80211_HWSIM\x00'}, @OVS_DP_ATTR_MASKS_CACHE_SIZE={0x8, 0x7, 0x3}, @OVS_DP_ATTR_USER_FEATURES={0x8}, @OVS_DP_ATTR_USER_FEATURES={0x8, 0x5, 0x4d9}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="6ed67edca5cdac50de887b7a622d89a74d2bf1e2bcde2127774ab7041267a024ab7b471547599463ab6d00f46d478a0bc87cfc28efd12ff71ee8cf5db99c", @ANYRES16, @ANYBLOB="01002cbd7000fddbdf25040000009800110000abe68418a69aae5ae028084b3be05a426b49a50486ff1f98e1d14875f7597fa02b4ca4e50d4c2059a6d4e21dcceb1b24f32042608af2dde554893e6c0a2c1332411eba33e0e4b0fdb39ee5d79557fd9388633c0220d921135a73e2dfad408ac06c0f977126d2cb4a4e97bb6181d8f3015d4c1dc30805f92485b57bc2874cf4bf9987605a40a8a2bd648c8fb87dcbb5c82bafc8"], 0xac}, 0x1, 0x0, 0x0, 0x801}, 0x4044820) 4.527425979s ago: executing program 3 (id=1331): openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82000, 0x0) (async) r0 = socket(0xa, 0x801, 0x84) (async) listen$auto(0x3, 0x81) (async) r1 = accept$auto(0x3, 0x0, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/cifs/Stats\x00', 0x28102, 0x0) ioctl$auto_PPPIOCSMAXCID(r1, 0x40047451, &(0x7f00000002c0)=0x8) openat$auto_msft_opcode_fops_(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/debug/bluetooth/hci8/msft_opcode\x00', 0x9b2615d55c19f7cb, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x200000000, 0xfffdfffffffffffa, 0x1, 0x1, 0x6, 0x0, 0x7, 0x4ec4445, 0x2, {0x100000000, 0x5}, 0x5, 0x1, 0x10000000000009, 0x1008000, 0x0, 0x8, 0x81, 0xdfffffffffff6295, 0x10000000000406, 0x4, 0x808}) (async) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D1\x00', 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x7fff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(r3, r3, 0x2) landlock_restrict_self$auto(r3, 0x1) (async) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000780)='/proc/self/net/rpc/auth.rpcsec.init/channel\x00', 0x441, 0x0) (async) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS3\x00', 0x0, 0x0) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) (async) statmount$auto(0x0, &(0x7f0000000040)={0x0, 0x2, 0x5ae, 0x5, 0x7, 0x6, 0x10000, 0x1, 0xa, 0x8, 0x6, 0x9, 0x200005, 0x4, 0x1ff, 0x2, 0x8, 0x10000, 0xfffffffd, 0x6, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7909c0d6, 0x0, 0x2000, 0x0, 0x36, [0x80, 0x0, 0x0, 0x8, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd]}, 0x4, 0x1000000) bpf$auto(0x12, &(0x7f0000000040)=@link_detach, 0x26) (async) syz_genetlink_get_family_id$auto_ila(&(0x7f0000000040), 0xffffffffffffffff) (async) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) (async) madvise$auto(0x110c230000, 0x1, 0x9) openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) open(&(0x7f0000000000)='./cgroup\x00', 0x80000, 0x61) (async) sendmsg$auto_WG_CMD_GET_DEVICE(r0, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00012cbd091b6bd51694833827353b2aa1e00528faa3f487ee530c0da1746c998ba154dd82d19b3649d512f22d90c9b24c960fdbf29a0400d6bdb96bed34c05e02002386db48dea581ddb0a653bf1da5e9c4d6a73554e1c3cbcf1a280862628b35e0be388729b3bf81bbe619dc7ce2c18e724f08bd05377e87d242df28cd1e4eec2a6d754db4871cecf17374e92a6ffbbd176cf71213e4d24edf7676271e6dcff7"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) syz_genetlink_get_family_id$auto_psample(&(0x7f0000000280), 0xffffffffffffffff) (async) rmdir$auto(&(0x7f0000000300)='./cgroup\x00') poll$auto(&(0x7f0000000080)={r4, 0x9, 0x1816}, 0xff, 0x2) 4.295353236s ago: executing program 0 (id=1332): mount$auto(0x0, 0x0, 0x0, 0xdef, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x1000, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x200006, 0x19) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x2000, 0x0) ioctl$auto_SNDCTL_DSP_GETCAPS(r0, 0x8004500f, &(0x7f0000000040)="b451307a14bdb89dbce8196e60cb6ef3b34cc3") 4.171324309s ago: executing program 1 (id=1333): mmap$auto(0xa, 0x400008, 0xdf, 0x1a, 0x2, 0x8000) socket(0x2, 0x1, 0x0) r0 = mq_open$auto(0x0, 0x10000, 0x6, 0x0) mq_notify$auto(0x4, 0x0) mq_notify$auto(0x4, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) fsopen$auto(0x0, 0x1) adjtimex$auto(&(0x7f00000005c0)={0xf332b6e, 0x0, 0xcea4, 0xfffffffffffffffd, 0xd4, 0x1, 0x0, 0x0, 0x1, 0x368e, 0x2, {0x100000000, 0x10000}, 0x5, 0x6, 0xfffffffffffffffd, 0x1007bfe, 0x0, 0x9, 0x81, 0xdfffffffffff628c, 0x2, 0xdeb1, 0x808}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D1\x00', 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0xa3db) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) ioctl$auto(r2, 0x401870cb, r2) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x381800, 0x0) read$auto_proc_uid_map_operations_base(r0, 0x0, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001080)='/sys/module/i915/parameters/mitigations\x00', 0x80302, 0x0) sendfile$auto(r3, r3, 0x0, 0x7ffff000) openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, 0x0, 0x12000, 0x0) socket(0x3, 0x5, 0x5) sendmsg$auto_OVS_FLOW_CMD_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40010}, 0x800) ioctl$auto_MTDFILEMODE(0xffffffffffffffff, 0x4d13, 0x0) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) r4 = eventfd$auto(0x80) readv$auto(r4, &(0x7f0000000380)={0x0, 0x8}, 0x4) listmount$auto(&(0x7f0000000100)={0x1f, @raw, 0x80000002, 0xfffffffffffffff7, 0x2}, 0x0, 0xf4240, 0x1) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/mm/transparent_hugepage/khugepaged/scan_sleep_millisecs\x00', 0xa0582, 0x0) write$auto(r5, 0x0, 0x2b6) semctl$auto(0x203, 0x100006, 0xd4, 0x200) 3.793837802s ago: executing program 3 (id=1334): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_to_bond\x00'}) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001480), r1) sendmsg$auto_ETHTOOL_MSG_CHANNELS_SET(r1, 0x0, 0x4) 3.161589177s ago: executing program 1 (id=1335): r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r1 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f00000089c0)='/dev/mtd0\x00', 0x80000, 0x0) ioctl$auto_MEMREADOOB64(r1, 0xc0184d16, &(0x7f0000008a00)={0x2000000000000000, 0x0, 0xffffffff, 0xe94b}) socket(0xa, 0x3, 0x3c) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x810) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) mmap$auto(0x0, 0x402000a, 0x4b0, 0xeb1, r0, 0x0) connect$auto(0x4, 0x0, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0x8, 0x8000) listmount$auto(&(0x7f0000000100)={0x1f, @inferred=r1, 0x7ffffffe, 0xfffffffffffffff7, 0x2}, 0x0, 0x1, 0x1) socket(0x2c, 0x3, 0x0) socket(0x25, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'geneve1\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000003b40)={'xfrm0\x00'}) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40001) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080), 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) open(0x0, 0x161342, 0x110) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xb02, 0x0) sendfile$auto(r3, r3, 0x0, 0x3) socket(0x2a, 0x2, 0x1) r4 = openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) read$auto(r4, 0x0, 0xffffff7f) 3.059827837s ago: executing program 3 (id=1336): close_range$auto(0x2, 0x8, 0x0) r0 = socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x7, 0x3e, 0xfffffffffffffffa, 0x1ffde, 0x0, 0xa, 0x2, 0x9, 0x3, 0x9, 0x4, 0xb4, 0x9, 0x2, 0x10000, 0x80, 0x7, 0x0, 0x7, 0x2000, 0x200, 0x0, 0x84}, 0x1fe, 0x200d) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) recvmmsg$auto(r1, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1c"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 2.565967551s ago: executing program 0 (id=1337): mmap$auto(0xa, 0x400008, 0xdf, 0x1a, 0x2, 0x8000) socket(0x2, 0x1, 0x0) r0 = mq_open$auto(0x0, 0x10000, 0x6, 0x0) mq_notify$auto(0x4, 0x0) mq_notify$auto(0x4, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) fsopen$auto(0x0, 0x1) adjtimex$auto(0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D1\x00', 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0xa3db) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) ioctl$auto(r2, 0x401870cb, r2) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x381800, 0x0) read$auto_proc_uid_map_operations_base(r0, &(0x7f0000000140)=""/163, 0xa3) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001080)='/sys/module/i915/parameters/mitigations\x00', 0x80302, 0x0) sendfile$auto(r3, r3, 0x0, 0x7ffff000) r4 = openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, 0x0, 0x12000, 0x0) socket(0x3, 0x5, 0x5) sendmsg$auto_OVS_FLOW_CMD_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40010}, 0x800) ioctl$auto_MTDFILEMODE(0xffffffffffffffff, 0x4d13, 0x0) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) r5 = eventfd$auto(0x80) readv$auto(r5, &(0x7f0000000380)={0x0, 0x8}, 0x4) read$auto(r4, 0x0, 0x3) userfaultfd$auto(0x4) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/mm/transparent_hugepage/khugepaged/scan_sleep_millisecs\x00', 0xa0582, 0x0) write$auto(r6, 0x0, 0x2b6) semctl$auto(0x203, 0x100006, 0xd4, 0x200) 2.438703824s ago: executing program 2 (id=1338): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x1000000000000eb1, 0x8, 0x8000) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) connect$auto(0x4, 0x0, 0x10) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) select$auto(0x7, 0x0, &(0x7f0000000080)={[0x209c, 0xe9e, 0x6, 0x15, 0x1000, 0x100000001, 0x6, 0x9, 0x0, 0xfffffffffffffffe, 0x2000000e, 0xd59, 0x101, 0xff, 0x2, 0x80000001]}, 0x0, 0x0) connect$auto(0x3, 0x0, 0x55) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/devices/virtual/block/loop6/queue/max_segments\x00', 0x80800, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x40001, 0x0) openat$auto_uhid_fops_uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2201, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/adsp1\x00', 0x742, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer\x00', 0x101401, 0x0) pipe$auto(0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x87) socket(0xa, 0x3, 0xff) socket(0x3, 0x2, 0x1) socket(0x18, 0x3, 0x1) socketpair$auto(0x80000001, 0x1, 0x8000000000000000, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x80140, 0x0) socket(0xa, 0x5, 0x0) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0x4) socketpair$auto(0x27, 0x2, 0x8000000000000000, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) write$auto(r0, 0x0, 0xb) 2.118504744s ago: executing program 0 (id=1339): close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket(0x2b, 0x1, 0x1) setsockopt$auto(r0, 0x0, 0x21, 0x0, 0x1e) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r2, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x02\x91\xf9fRJ', 0x81) timer_create$auto(0x2, 0x0, 0x0) futex_waitv$auto(&(0x7f0000000000)={0xb, 0x1, 0x82}, 0x5, 0x0, 0x0, 0x623b) r3 = socket(0x2, 0x1, 0x0) r4 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) listen$auto(r3, 0x7) sendmmsg$auto(r4, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1, 0xb}, 0x800009}, 0x5, 0x2000fdff) shmget$auto(0x14, 0x2, 0xe64) close_range$auto(0x2, r1, 0x40000008) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, 0x0, 0x40001, 0x0) mmap$auto(0x0, 0x400008, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0xfffffffc, 0x0) close_range$auto(0x2, 0xa, 0x0) openat$auto_nsim_pp_hold_fops_netdev(0xffffffffffffff9c, 0x0, 0xc8a101, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) poll$auto(0x0, 0x5, 0x108) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x4000080) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) 2.113221587s ago: executing program 1 (id=1340): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) modify_ldt$auto(0x1, 0x0, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) modify_ldt$auto(0x1, 0x0, 0x10) 2.06931428s ago: executing program 3 (id=1341): mmap$auto(0x0, 0x2020009, 0x8000000003, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x10, 0x0, 0x9) io_uring_setup$auto(0x1, 0x0) connect$auto(0x3, 0x0, 0x55) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dsp\x00', 0x0, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x2}, 0x400) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000300)='/proc/asound/card0/pcm0c/sub0/status\x00', 0x100, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000002740), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_GET_SEC_DEV(r1, &(0x7f0000002800)={0x0, 0x0, &(0x7f00000027c0)={&(0x7f0000000c00)={0x14, r2, 0x309, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x48800}, 0x0) r3 = syz_clone(0x0, &(0x7f00000000c0)="477160e9015241fe3006ced973eaa92b36f7117bb12271dd03838e006f891fdd7c7bef1e50300826d6057c0ff8f20c575c2ab94c3ff30b283a413c3c6c06cb92a78902fba7fb2dd451a7252f380a908823b0921165440d97ee34a9ec2c3f93ce5a5a6fb672841d11d674a48516f15db82c7957c61c2f46e8327a980e1311f42792cfef934366056567890c2dc8bd67972a49b5d62ce57d1ebb2728119d37f5d11288cecae85d59dd432db1aae5f8c9d9e9265e01ab6b55a830", 0xb9, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)="05611ec98eec4d83c152") sendmsg$auto_NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_PID={0x8, 0x1c, r3}, @NL802154_ATTR_SCAN_DONE_REASON={0x5, 0x25, 0xd8}]}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x80d5) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2) prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0) prctl$auto(0x43, 0x0, 0x0, 0x0, 0x0) fanotify_init$auto(0x602, 0x1) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/afs/addr_prefs\x00', 0x102, 0x0) writev$auto(r4, &(0x7f0000000080)={&(0x7f0000000040), 0x6}, 0x3) close_range$auto(0x2, 0x8, 0x0) 1.596947211s ago: executing program 1 (id=1342): setfsuid$auto(0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdir$auto(&(0x7f0000000080)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x8, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000d40), 0xffffffffffffffff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000013c0)='/sys/module/kvm/parameters/pi_inject_timer\x00', 0x10b142, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000180), 0x204000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptyzf\x00', 0x2200, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0x11, 0x0, 0x0, 0x0, 0x0) prctl$auto_PR_SET_MM_ARG_END(0x9, 0x9, 0xffffffffffffffff, 0xd, 0x13) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/bus/pci/rescan\x00', 0x20681, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000200)='5', 0x1) sendmsg$auto(0xffffffffffffffff, 0x0, 0xfff) capset$auto(&(0x7f0000000340)={0x19980330}, 0x0) select$auto(0x9, 0x0, &(0x7f0000000200)={[0x8, 0x4, 0x2, 0xb, 0x1, 0x9, 0x0, 0x7fff, 0xa, 0x193, 0xfffffffffffffff9, 0x3, 0x5e4, 0x1000, 0x1, 0x1]}, &(0x7f0000000380)={[0x8000000000000001, 0x2, 0x1, 0x10001, 0xe, 0xf, 0x5, 0x3, 0x59fc8000, 0x200006, 0x8000000000000000, 0x3, 0x800, 0x7, 0x1ff, 0x5]}, &(0x7f0000000280)={0x6, 0xc8}) socket$nl_generic(0x10, 0x3, 0x10) select$auto(0x7, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x40841, 0x8) socket(0xa, 0x5, 0x94) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dri/card0\x00', 0x6c800, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, 0x0, 0x88000, 0x0) 733.647731ms ago: executing program 2 (id=1343): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x2, 0x88) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) select$auto(0x7, 0x0, &(0x7f0000000080)={[0x8, 0xc0b, 0x3, 0x16, 0x1001, 0xffffffffffffffff, 0xf, 0x9, 0xb, 0xfffffffffffffdfe, 0x7ff, 0x2e3, 0x5, 0x0, 0x1, 0x7fffffff]}, 0x0, 0x0) 375.794216ms ago: executing program 0 (id=1344): mmap$auto(0xa, 0x400008, 0xdf, 0x1a, 0x2, 0x8000) socket(0x2, 0x1, 0x0) r0 = mq_open$auto(0x0, 0x10000, 0x6, 0x0) mq_notify$auto(0x4, 0x0) mq_notify$auto(0x4, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) fsopen$auto(0x0, 0x1) adjtimex$auto(&(0x7f00000005c0)={0xf332b6e, 0x0, 0xcea4, 0xfffffffffffffffd, 0xd4, 0x1, 0x0, 0x0, 0x1, 0x368e, 0x2, {0x100000000, 0x10000}, 0x5, 0x6, 0xfffffffffffffffd, 0x1007bfe, 0x0, 0x9, 0x81, 0xdfffffffffff628c, 0x2, 0xdeb1, 0x808}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D1\x00', 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0xa3db) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) ioctl$auto(r2, 0x401870cb, r2) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x381800, 0x0) read$auto_proc_uid_map_operations_base(r0, &(0x7f0000000140)=""/163, 0xa3) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80302, 0x0) sendfile$auto(r3, r3, 0x0, 0x7ffff000) openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, 0x0, 0x12000, 0x0) socket(0x3, 0x5, 0x5) sendmsg$auto_OVS_FLOW_CMD_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40010}, 0x800) ioctl$auto_MTDFILEMODE(0xffffffffffffffff, 0x4d13, 0x0) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) r4 = eventfd$auto(0x80) readv$auto(r4, &(0x7f0000000380)={0x0, 0x8}, 0x4) listmount$auto(&(0x7f0000000100)={0x1f, @raw, 0x80000002, 0xfffffffffffffff7, 0x2}, 0x0, 0xf4240, 0x1) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/mm/transparent_hugepage/khugepaged/scan_sleep_millisecs\x00', 0xa0582, 0x0) write$auto(r5, 0x0, 0x2b6) semctl$auto(0x203, 0x100006, 0xd4, 0x200) 373.688345ms ago: executing program 1 (id=1345): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_to_bond\x00'}) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001480), r1) sendmsg$auto_ETHTOOL_MSG_CHANNELS_SET(r1, 0x0, 0x4) 284.340459ms ago: executing program 2 (id=1346): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) shmat$auto(0x59, &(0x7f0000000580)='(\x04', 0xfffffffd) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x2, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) socket(0x2, 0x1, 0x0) epoll_create$auto(0x4) mq_open$auto(&(0x7f0000000000)='/dev/sequencer2\x00', 0x5, 0x3, &(0x7f0000000040)={0xe7a2, 0x0, 0x1, 0xa}) sendmsg$auto_NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x20, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000840)='/proc/sys/vm/dirty_background_ratio\x00', 0x80000, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) sched_get_priority_min$auto(0x40) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) ioctl$auto_KVM_GET_MSRS(r1, 0xc008ae88, &(0x7f0000000080)={0x2, 0x0, [{0x40000073, 0x400, 0x9}]}) openat$auto_proc_projid_map_operations_base(0xffffffffffffff9c, 0x0, 0x101002, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) socketpair$auto(0x3, 0x6, 0xf77, 0x0) gettimeofday$auto(&(0x7f0000000040)={0xb1c3, 0x401}, 0x0) openat$auto_proc_mounts_operations_mnt_namespace(0xffffffffffffff9c, 0x0, 0x40800, 0x0) mkdir$auto(0x0, 0x100) 0s ago: executing program 1 (id=1347): openat$auto_proc_pid_attr_operations_base(0xffffffffffffff9c, 0x0, 0x183681, 0x0) r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$auto_RTC_UIE_ON(r0, 0x7003, 0x0) kernel console output (not intermixed with test programs): .177553][T10090] handle_mm_fault+0x589/0xd10 [ 419.177582][T10090] ? __pkru_allows_pkey+0x21/0xb0 [ 419.177611][T10090] do_user_addr_fault+0x7a6/0x1370 [ 419.177641][T10090] ? rcu_is_watching+0x12/0xc0 [ 419.177664][T10090] exc_page_fault+0x5c/0xb0 [ 419.177697][T10090] asm_exc_page_fault+0x26/0x30 [ 419.177716][T10090] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 419.177743][T10090] Code: 10 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 8f 10 04 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 419.177762][T10090] RSP: 0018:ffffc90003dd7ca0 EFLAGS: 00050206 [ 419.177778][T10090] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000002000 [ 419.177790][T10090] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888027cf4000 [ 419.177803][T10090] RBP: 0000000000002000 R08: 0000000000000001 R09: ffffed1004f9ebff [ 419.177815][T10090] R10: ffff888027cf5fff R11: 0000000000000000 R12: 0000000000000000 [ 419.177828][T10090] R13: ffff888027cf4000 R14: 000000000000ffd8 R15: ffffffff8c8924e0 [ 419.177854][T10090] _copy_from_user+0x98/0xd0 [ 419.177880][T10090] memdup_user+0x6b/0xe0 [ 419.177912][T10090] i2cdev_write+0xe4/0x210 [ 419.177932][T10090] ? __pfx_i2cdev_write+0x10/0x10 [ 419.177949][T10090] vfs_write+0x2a0/0x1150 [ 419.177985][T10090] ? __pfx_vfs_write+0x10/0x10 [ 419.178012][T10090] ? find_held_lock+0x2b/0x80 [ 419.178032][T10090] ? __fget_files+0x204/0x3c0 [ 419.178065][T10090] ? __fget_files+0x20e/0x3c0 [ 419.178100][T10090] ksys_write+0x12a/0x250 [ 419.178129][T10090] ? __pfx_ksys_write+0x10/0x10 [ 419.178167][T10090] do_syscall_64+0xcd/0x490 [ 419.178188][T10090] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.178208][T10090] RIP: 0033:0x7fdd7c78e929 [ 419.178223][T10090] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 419.178242][T10090] RSP: 002b:00007fdd7d518038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 419.178259][T10090] RAX: ffffffffffffffda RBX: 00007fdd7c9b5fa0 RCX: 00007fdd7c78e929 [ 419.178273][T10090] RDX: 000000000000ffd8 RSI: 0000000000000000 RDI: 0000000000000003 [ 419.178285][T10090] RBP: 00007fdd7d518090 R08: 0000000000000000 R09: 0000000000000000 [ 419.178297][T10090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 419.178309][T10090] R13: 0000000000000000 R14: 00007fdd7c9b5fa0 R15: 00007ffe74848de8 [ 419.178339][T10090] [ 420.158763][T10096] netlink: 342 bytes leftover after parsing attributes in process `syz.3.862'. [ 421.981615][T10124] netlink: 342 bytes leftover after parsing attributes in process `syz.0.869'. [ 422.422998][T10130] bcachefs: bch2_ioctl_fsck_offline() ret EFAULT [ 422.894989][T10146] FAULT_INJECTION: forcing a failure. [ 422.894989][T10146] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 422.971140][T10146] CPU: 0 UID: 0 PID: 10146 Comm: syz.2.874 Tainted: G U 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(full) [ 422.971174][T10146] Tainted: [U]=USER [ 422.971181][T10146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 422.971193][T10146] Call Trace: [ 422.971199][T10146] [ 422.971207][T10146] dump_stack_lvl+0x16c/0x1f0 [ 422.971246][T10146] should_fail_ex+0x512/0x640 [ 422.971274][T10146] should_fail_alloc_page+0xe7/0x130 [ 422.971297][T10146] prepare_alloc_pages+0x3c2/0x610 [ 422.971323][T10146] ? register_lock_class+0x41/0x4c0 [ 422.971351][T10146] ? find_held_lock+0x2b/0x80 [ 422.971373][T10146] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 422.971409][T10146] ? __lock_acquire+0xb8a/0x1c90 [ 422.971446][T10146] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 422.971484][T10146] ? __pfx___might_resched+0x10/0x10 [ 422.971510][T10146] ? __lock_acquire+0x622/0x1c90 [ 422.971542][T10146] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 422.971576][T10146] ? policy_nodemask+0xea/0x4e0 [ 422.971599][T10146] alloc_pages_mpol+0x1fb/0x550 [ 422.971621][T10146] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 422.971650][T10146] alloc_pages_noprof+0x131/0x390 [ 422.971671][T10146] __pmd_alloc+0x3b/0x930 [ 422.971695][T10146] ? find_held_lock+0x2b/0x80 [ 422.971717][T10146] __handle_mm_fault+0xaac/0x5490 [ 422.971753][T10146] ? __pfx___handle_mm_fault+0x10/0x10 [ 422.971784][T10146] ? __pfx_mt_find+0x10/0x10 [ 422.971821][T10146] ? find_vma+0xbf/0x140 [ 422.971843][T10146] ? __pfx_find_vma+0x10/0x10 [ 422.971868][T10146] handle_mm_fault+0x589/0xd10 [ 422.971898][T10146] ? __pkru_allows_pkey+0x21/0xb0 [ 422.971928][T10146] do_user_addr_fault+0x7a6/0x1370 [ 422.971960][T10146] ? rcu_is_watching+0x12/0xc0 [ 422.971984][T10146] exc_page_fault+0x5c/0xb0 [ 422.972028][T10146] asm_exc_page_fault+0x26/0x30 [ 422.972047][T10146] RIP: 0010:rep_movs_alternative+0x11/0x90 [ 422.972080][T10146] Code: c3 cc cc cc cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f 8a 06 <88> 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 bd 10 04 00 66 66 2e 0f [ 422.972100][T10146] RSP: 0018:ffffc90003c17bf8 EFLAGS: 00050202 [ 422.972115][T10146] RAX: 0000000000000063 RBX: 0000000000000002 RCX: 0000000000000002 [ 422.972127][T10146] RDX: ffffed10064e1501 RSI: ffff88803270a800 RDI: 0000000000000000 [ 422.972140][T10146] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffed10064e1500 [ 422.972152][T10146] R10: ffff88803270a801 R11: 0000000000000001 R12: ffff88803270a800 [ 422.972165][T10146] R13: 0000000000000002 R14: 00007ffffffff000 R15: 0000000000000000 [ 422.972190][T10146] _copy_to_user+0xbb/0xd0 [ 422.972216][T10146] vga_arb_read+0x3e9/0x5e0 [ 422.972247][T10146] ? __pfx_vga_arb_read+0x10/0x10 [ 422.972273][T10146] vfs_readv+0x5be/0x8b0 [ 422.972306][T10146] ? __pfx_vfs_readv+0x10/0x10 [ 422.972350][T10146] ? __fget_files+0x20e/0x3c0 [ 422.972376][T10146] ? __fget_files+0x150/0x3c0 [ 422.972410][T10146] ? do_readv+0x132/0x340 [ 422.972434][T10146] do_readv+0x132/0x340 [ 422.972460][T10146] ? __pfx_do_readv+0x10/0x10 [ 422.972494][T10146] do_syscall_64+0xcd/0x490 [ 422.972515][T10146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.972534][T10146] RIP: 0033:0x7f86f1b8e929 [ 422.972548][T10146] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 422.972567][T10146] RSP: 002b:00007f86f2944038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 422.972584][T10146] RAX: ffffffffffffffda RBX: 00007f86f1db5fa0 RCX: 00007f86f1b8e929 [ 422.972596][T10146] RDX: 0000000000000005 RSI: 0000200000000040 RDI: 0000000000000004 [ 422.972608][T10146] RBP: 00007f86f2944090 R08: 0000000000000000 R09: 0000000000000000 [ 422.972620][T10146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 422.972631][T10146] R13: 0000000000000000 R14: 00007f86f1db5fa0 R15: 00007ffe8650eb08 [ 422.972655][T10146] [ 423.844251][T10154] sd 0:0:1:0: PR command failed: 1026 [ 423.849694][T10154] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 423.907695][T10154] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 425.053264][T10170] netlink: 28 bytes leftover after parsing attributes in process `syz.2.880'. [ 425.871926][T10194] sd 0:0:1:0: PR command failed: 1026 [ 425.877360][T10194] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 426.196281][T10194] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 427.680603][T10216] netlink: 25 bytes leftover after parsing attributes in process `syz.1.890'. [ 427.884381][T10219] FAULT_INJECTION: forcing a failure. [ 427.884381][T10219] name failslab, interval 1, probability 0, space 0, times 0 [ 428.179842][T10219] CPU: 0 UID: 0 PID: 10219 Comm: syz.2.889 Tainted: G U 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(full) [ 428.179881][T10219] Tainted: [U]=USER [ 428.179889][T10219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 428.179903][T10219] Call Trace: [ 428.179911][T10219] [ 428.179920][T10219] dump_stack_lvl+0x16c/0x1f0 [ 428.179962][T10219] should_fail_ex+0x512/0x640 [ 428.179988][T10219] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 428.180033][T10219] should_failslab+0xc2/0x120 [ 428.180054][T10219] __kmalloc_cache_noprof+0x6a/0x3e0 [ 428.180084][T10219] ? snd_pcm_oss_change_params_locked+0x247/0x3a30 [ 428.180113][T10219] ? kasan_save_track+0x14/0x30 [ 428.180162][T10219] snd_pcm_oss_change_params_locked+0x247/0x3a30 [ 428.180192][T10219] ? rcu_is_watching+0x12/0xc0 [ 428.180215][T10219] ? __mutex_lock+0x1ca/0xb90 [ 428.180236][T10219] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 428.180264][T10219] ? __pfx___mutex_lock+0x10/0x10 [ 428.180283][T10219] ? __lock_acquire+0xb8a/0x1c90 [ 428.180323][T10219] snd_pcm_oss_make_ready+0xe6/0x1b0 [ 428.180351][T10219] snd_pcm_oss_set_trigger.isra.0+0x5e/0x6b0 [ 428.180382][T10219] snd_pcm_oss_ioctl+0x1d0f/0x37a0 [ 428.180408][T10219] ? find_held_lock+0x2b/0x80 [ 428.180426][T10219] ? hook_file_ioctl_common+0x145/0x410 [ 428.180455][T10219] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 428.180484][T10219] ? __fget_files+0x20e/0x3c0 [ 428.180515][T10219] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 428.180543][T10219] __x64_sys_ioctl+0x18b/0x210 [ 428.180568][T10219] do_syscall_64+0xcd/0x490 [ 428.180589][T10219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.180609][T10219] RIP: 0033:0x7f86f1b8e929 [ 428.180623][T10219] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 428.180642][T10219] RSP: 002b:00007f86ef9f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 428.180666][T10219] RAX: ffffffffffffffda RBX: 00007f86f1db6160 RCX: 00007f86f1b8e929 [ 428.180679][T10219] RDX: 0000000000000000 RSI: 0000000040045010 RDI: 0000000000000003 [ 428.180690][T10219] RBP: 00007f86ef9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 428.180702][T10219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 428.180713][T10219] R13: 0000000000000001 R14: 00007f86f1db6160 R15: 00007ffe8650eb08 [ 428.180738][T10219] [ 429.168920][T10231] FAULT_INJECTION: forcing a failure. [ 429.168920][T10231] name failslab, interval 1, probability 0, space 0, times 0 [ 429.221378][T10231] CPU: 0 UID: 0 PID: 10231 Comm: syz.2.894 Tainted: G U 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(full) [ 429.221410][T10231] Tainted: [U]=USER [ 429.221417][T10231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 429.221429][T10231] Call Trace: [ 429.221435][T10231] [ 429.221442][T10231] dump_stack_lvl+0x16c/0x1f0 [ 429.221478][T10231] should_fail_ex+0x512/0x640 [ 429.221505][T10231] should_failslab+0xc2/0x120 [ 429.221525][T10231] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 429.221557][T10231] ? skb_clone+0x190/0x3f0 [ 429.221587][T10231] skb_clone+0x190/0x3f0 [ 429.221608][T10231] netlink_deliver_tap+0xabd/0xd30 [ 429.221636][T10231] netlink_unicast+0x5df/0x7f0 [ 429.221663][T10231] ? __pfx_netlink_unicast+0x10/0x10 [ 429.221694][T10231] netlink_sendmsg+0x8d1/0xdd0 [ 429.221722][T10231] ? __pfx_netlink_sendmsg+0x10/0x10 [ 429.221755][T10231] __sys_sendto+0x4a3/0x520 [ 429.221789][T10231] ? __pfx___sys_sendto+0x10/0x10 [ 429.221827][T10231] ? find_held_lock+0x2b/0x80 [ 429.221865][T10231] __x64_sys_sendto+0xe0/0x1c0 [ 429.221894][T10231] ? do_syscall_64+0x91/0x490 [ 429.221912][T10231] ? lockdep_hardirqs_on+0x7c/0x110 [ 429.221944][T10231] do_syscall_64+0xcd/0x490 [ 429.221964][T10231] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.221985][T10231] RIP: 0033:0x7f86f1b907bc [ 429.222000][T10231] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 429.222020][T10231] RSP: 002b:00007f86f2942ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 429.222038][T10231] RAX: ffffffffffffffda RBX: 00007f86f2942fc0 RCX: 00007f86f1b907bc [ 429.222051][T10231] RDX: 0000000000000028 RSI: 00007f86f2943010 RDI: 0000000000000003 [ 429.222064][T10231] RBP: 0000000000000000 R08: 00007f86f2942f14 R09: 000000000000000c [ 429.222076][T10231] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 429.222088][T10231] R13: 00007f86f2942f68 R14: 00007f86f2943010 R15: 0000000000000000 [ 429.222112][T10231] [ 430.592837][T10242] sd 0:0:1:0: PR command failed: 1026 [ 430.766850][T10238] Setting dangerous option i915.mitigations - tainting kernel [ 430.828407][T10242] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 431.019567][T10242] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 431.518502][T10261] netlink: 266 bytes leftover after parsing attributes in process `syz.3.900'. [ 431.720078][T10271] FAULT_INJECTION: forcing a failure. [ 431.720078][T10271] name fail_futex, interval 1, probability 0, space 0, times 1 [ 431.909549][T10271] CPU: 0 UID: 0 PID: 10271 Comm: syz.2.903 Tainted: G U 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(full) [ 431.909589][T10271] Tainted: [U]=USER [ 431.909596][T10271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 431.909611][T10271] Call Trace: [ 431.909618][T10271] [ 431.909626][T10271] dump_stack_lvl+0x16c/0x1f0 [ 431.909669][T10271] should_fail_ex+0x512/0x640 [ 431.909701][T10271] get_futex_key+0x1d0/0x1540 [ 431.909732][T10271] ? __pfx_get_futex_key+0x10/0x10 [ 431.909768][T10271] futex_wake+0xea/0x530 [ 431.909802][T10271] ? rcu_is_watching+0x12/0xc0 [ 431.909826][T10271] ? __pfx_futex_wake+0x10/0x10 [ 431.909863][T10271] ? kmem_cache_free+0x2d1/0x4d0 [ 431.909897][T10271] ? fd_install+0x225/0x750 [ 431.909928][T10271] ? putname+0x154/0x1a0 [ 431.909956][T10271] do_futex+0x1e3/0x350 [ 431.909999][T10271] ? __pfx_do_futex+0x10/0x10 [ 431.910033][T10271] __x64_sys_futex+0x1e0/0x4c0 [ 431.910081][T10271] ? __x64_sys_openat+0x174/0x210 [ 431.910107][T10271] ? __pfx___x64_sys_futex+0x10/0x10 [ 431.910143][T10271] do_syscall_64+0xcd/0x490 [ 431.910166][T10271] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.910187][T10271] RIP: 0033:0x7f86f1b8e929 [ 431.910203][T10271] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 431.910224][T10271] RSP: 002b:00007f86f29440e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 431.910244][T10271] RAX: ffffffffffffffda RBX: 00007f86f1db5fa8 RCX: 00007f86f1b8e929 [ 431.910258][T10271] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f86f1db5fac [ 431.910271][T10271] RBP: 00007f86f1db5fa0 R08: 00007f86f2945000 R09: 0000000000000000 [ 431.910284][T10271] R10: 0000000000000005 R11: 0000000000000246 R12: 00007f86f1db5fac [ 431.910297][T10271] R13: 0000000000000000 R14: 00007ffe8650ea20 R15: 00007ffe8650eb08 [ 431.910322][T10271] [ 432.402062][ T5839] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 434.941710][T10315] kafs: addr_prefs: Invalid Command [ 435.101919][T10321] sd 0:0:1:0: PR command failed: 1026 [ 435.373447][T10321] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 435.471118][T10314] Setting dangerous option i915.mitigations - tainting kernel [ 435.539080][T10321] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 440.324749][T10374] netlink: 342 bytes leftover after parsing attributes in process `syz.1.925'. [ 440.419150][T10375] FAULT_INJECTION: forcing a failure. [ 440.419150][T10375] name failslab, interval 1, probability 0, space 0, times 0 [ 440.596811][T10375] CPU: 0 UID: 0 PID: 10375 Comm: syz.2.924 Tainted: G U 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(full) [ 440.596845][T10375] Tainted: [U]=USER [ 440.596851][T10375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 440.596863][T10375] Call Trace: [ 440.596869][T10375] [ 440.596876][T10375] dump_stack_lvl+0x16c/0x1f0 [ 440.596913][T10375] should_fail_ex+0x512/0x640 [ 440.596935][T10375] ? __kmalloc_cache_node_noprof+0x5a/0x420 [ 440.596967][T10375] should_failslab+0xc2/0x120 [ 440.596986][T10375] __kmalloc_cache_node_noprof+0x6d/0x420 [ 440.597015][T10375] ? find_held_lock+0x2b/0x80 [ 440.597033][T10375] ? __get_vm_area_node+0x101/0x330 [ 440.597060][T10375] __get_vm_area_node+0x101/0x330 [ 440.597084][T10375] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 440.597117][T10375] __vmalloc_node_range_noprof+0x271/0x14b0 [ 440.597144][T10375] ? __do_sys_listmount+0x1c2/0xec0 [ 440.597175][T10375] ? __lock_acquire+0xb8a/0x1c90 [ 440.597200][T10375] ? __do_sys_listmount+0x1c2/0xec0 [ 440.597230][T10375] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 440.597258][T10375] ? __alloc_pages_noprof+0xb/0x1b0 [ 440.597286][T10375] ? ___kmalloc_large_node+0x84/0x1e0 [ 440.597308][T10375] ? find_held_lock+0x2b/0x80 [ 440.597331][T10375] __kvmalloc_node_noprof+0x30a/0x620 [ 440.597360][T10375] ? __do_sys_listmount+0x1c2/0xec0 [ 440.597386][T10375] ? __do_sys_listmount+0x1c2/0xec0 [ 440.597415][T10375] ? __do_sys_listmount+0x1c2/0xec0 [ 440.597438][T10375] __do_sys_listmount+0x1c2/0xec0 [ 440.597470][T10375] ? __pfx___do_sys_listmount+0x10/0x10 [ 440.597494][T10375] ? fput+0x70/0xf0 [ 440.597513][T10375] ? ksys_write+0x1ac/0x250 [ 440.597550][T10375] do_syscall_64+0xcd/0x490 [ 440.597570][T10375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.597590][T10375] RIP: 0033:0x7f86f1b8e929 [ 440.597604][T10375] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 440.597623][T10375] RSP: 002b:00007f86f2944038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ca [ 440.597641][T10375] RAX: ffffffffffffffda RBX: 00007f86f1db5fa0 RCX: 00007f86f1b8e929 [ 440.597654][T10375] RDX: 00000000000f4240 RSI: 0000000000000000 RDI: 0000200000000100 [ 440.597666][T10375] RBP: 00007f86f2944090 R08: 0000000000000000 R09: 0000000000000000 [ 440.597678][T10375] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 440.597690][T10375] R13: 0000000000000000 R14: 00007f86f1db5fa0 R15: 00007ffe8650eb08 [ 440.597719][T10375] [ 441.111987][T10375] syz.2.924: vmalloc error: size 8000000, vm_struct allocation failed, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 441.239005][T10375] CPU: 0 UID: 0 PID: 10375 Comm: syz.2.924 Tainted: G U 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(full) [ 441.239045][T10375] Tainted: [U]=USER [ 441.239053][T10375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 441.239067][T10375] Call Trace: [ 441.239075][T10375] [ 441.239083][T10375] dump_stack_lvl+0x16c/0x1f0 [ 441.239125][T10375] warn_alloc+0x248/0x3a0 [ 441.239163][T10375] ? __pfx_warn_alloc+0x10/0x10 [ 441.239201][T10375] ? __kmalloc_cache_node_noprof+0x272/0x420 [ 441.239240][T10375] ? __kasan_kmalloc+0x8a/0xb0 [ 441.239276][T10375] ? __get_vm_area_node+0x208/0x330 [ 441.239311][T10375] __vmalloc_node_range_noprof+0xb2d/0x14b0 [ 441.239350][T10375] ? __lock_acquire+0xb8a/0x1c90 [ 441.239381][T10375] ? __do_sys_listmount+0x1c2/0xec0 [ 441.239419][T10375] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 441.239452][T10375] ? __alloc_pages_noprof+0xb/0x1b0 [ 441.239488][T10375] ? ___kmalloc_large_node+0x84/0x1e0 [ 441.239514][T10375] ? find_held_lock+0x2b/0x80 [ 441.239542][T10375] __kvmalloc_node_noprof+0x30a/0x620 [ 441.239577][T10375] ? __do_sys_listmount+0x1c2/0xec0 [ 441.239608][T10375] ? __do_sys_listmount+0x1c2/0xec0 [ 441.239649][T10375] ? __do_sys_listmount+0x1c2/0xec0 [ 441.239677][T10375] __do_sys_listmount+0x1c2/0xec0 [ 441.239716][T10375] ? __pfx___do_sys_listmount+0x10/0x10 [ 441.239746][T10375] ? fput+0x70/0xf0 [ 441.239768][T10375] ? ksys_write+0x1ac/0x250 [ 441.239812][T10375] do_syscall_64+0xcd/0x490 [ 441.239837][T10375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.239862][T10375] RIP: 0033:0x7f86f1b8e929 [ 441.239879][T10375] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 441.239902][T10375] RSP: 002b:00007f86f2944038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ca [ 441.239923][T10375] RAX: ffffffffffffffda RBX: 00007f86f1db5fa0 RCX: 00007f86f1b8e929 [ 441.239939][T10375] RDX: 00000000000f4240 RSI: 0000000000000000 RDI: 0000200000000100 [ 441.239953][T10375] RBP: 00007f86f2944090 R08: 0000000000000000 R09: 0000000000000000 [ 441.239968][T10375] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 441.239993][T10375] R13: 0000000000000000 R14: 00007f86f1db5fa0 R15: 00007ffe8650eb08 [ 441.240017][T10375] [ 441.240037][T10375] Mem-Info: [ 442.326353][T10364] hugetlbfs: syz.3.921 (10364): Using mlock ulimits for SHM_HUGETLB is obsolete [ 442.959120][T10395] netlink: 342 bytes leftover after parsing attributes in process `syz.3.929'. [ 443.467592][T10401] sd 0:0:1:0: PR command failed: 1026 [ 443.537918][T10401] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 443.752419][T10398] Setting dangerous option i915.mitigations - tainting kernel [ 443.813190][T10401] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 445.010135][T10375] active_anon:62299 inactive_anon:0 isolated_anon:0 [ 445.010135][T10375] active_file:8281 inactive_file:50379 isolated_file:0 [ 445.010135][T10375] unevictable:768 dirty:348 writeback:0 [ 445.010135][T10375] slab_reclaimable:10260 slab_unreclaimable:92924 [ 445.010135][T10375] mapped:38331 shmem:45577 pagetables:1149 [ 445.010135][T10375] sec_pagetables:0 bounce:0 [ 445.010135][T10375] kernel_misc_reclaimable:0 [ 445.010135][T10375] free:1251994 free_pcp:34149 free_cma:0 [ 445.090517][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.103263][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.583990][T10422] netlink: 342 bytes leftover after parsing attributes in process `syz.1.935'. [ 445.773322][T10375] Node 0 active_anon:217576kB inactive_anon:0kB active_file:33124kB inactive_file:201312kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:131584kB dirty:1392kB writeback:0kB shmem:146632kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10448kB pagetables:4484kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 445.881069][T10425] netlink: 28 bytes leftover after parsing attributes in process `syz.1.937'. [ 445.905218][T10426] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(144130787.2306353901.729), cmd(18) [ 445.938626][T10426] syz.3.936 uses obsolete (PF_INET,SOCK_PACKET) [ 446.360972][T10375] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:80kB pagetables:168kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 446.747812][T10375] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 447.049388][T10418] ima: policy update failed [ 447.086528][ T30] audit: type=1802 audit(6044062067.480:12): pid=10418 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.934" res=0 errno=0 [ 447.176345][T10375] lowmem_reserve[]: 0 2481 2483 2483 2483 [ 447.237031][T10375] Node 0 DMA32 free:1220024kB boost:0kB min:34092kB low:42612kB high:51132kB reserved_highatomic:0KB free_highatomic:0KB active_anon:178064kB inactive_anon:0kB active_file:33124kB inactive_file:199748kB unevictable:1536kB writepending:1392kB present:3129332kB managed:2541060kB mlocked:0kB bounce:0kB free_pcp:61412kB local_pcp:61412kB free_cma:0kB [ 448.509151][T10452] FAULT_INJECTION: forcing a failure. [ 448.509151][T10452] name failslab, interval 1, probability 0, space 0, times 0 [ 448.531976][T10375] lowmem_reserve[]: 0 0 1 1 1 [ 448.557450][T10375] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1564kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:20kB local_pcp:20kB free_cma:0kB [ 448.591896][T10452] CPU: 0 UID: 0 PID: 10452 Comm: syz.1.942 Tainted: G U 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(full) [ 448.591930][T10452] Tainted: [U]=USER [ 448.591937][T10452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 448.591950][T10452] Call Trace: [ 448.591957][T10452] [ 448.591966][T10452] dump_stack_lvl+0x16c/0x1f0 [ 448.592005][T10452] should_fail_ex+0x512/0x640 [ 448.592029][T10452] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 448.592062][T10452] should_failslab+0xc2/0x120 [ 448.592089][T10452] __kmalloc_cache_noprof+0x6a/0x3e0 [ 448.592120][T10452] ? mon_bin_open+0x1a8/0x4a0 [ 448.592152][T10452] mon_bin_open+0x1a8/0x4a0 [ 448.592178][T10452] ? __pfx_mon_bin_open+0x10/0x10 [ 448.592205][T10452] chrdev_open+0x234/0x6a0 [ 448.592223][T10452] ? __pfx_apparmor_file_open+0x10/0x10 [ 448.592258][T10452] ? __pfx_chrdev_open+0x10/0x10 [ 448.592279][T10452] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 448.592314][T10452] do_dentry_open+0x741/0x1c10 [ 448.592347][T10452] ? __pfx_chrdev_open+0x10/0x10 [ 448.592371][T10452] vfs_open+0x82/0x3f0 [ 448.592398][T10452] path_openat+0x1de4/0x2cb0 [ 448.592439][T10452] ? __pfx_path_openat+0x10/0x10 [ 448.592473][T10452] ? __lock_acquire+0xb8a/0x1c90 [ 448.592504][T10452] do_filp_open+0x20b/0x470 [ 448.592536][T10452] ? __pfx_do_filp_open+0x10/0x10 [ 448.592588][T10452] ? alloc_fd+0x471/0x7d0 [ 448.592625][T10452] do_sys_openat2+0x11b/0x1d0 [ 448.592649][T10452] ? __pfx_do_sys_openat2+0x10/0x10 [ 448.592684][T10452] __x64_sys_openat+0x174/0x210 [ 448.592710][T10452] ? __pfx___x64_sys_openat+0x10/0x10 [ 448.592746][T10452] do_syscall_64+0xcd/0x490 [ 448.592769][T10452] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.592790][T10452] RIP: 0033:0x7fbda2d8e929 [ 448.592806][T10452] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 448.592826][T10452] RSP: 002b:00007fbda3b8d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 448.592845][T10452] RAX: ffffffffffffffda RBX: 00007fbda2fb5fa0 RCX: 00007fbda2d8e929 [ 448.592859][T10452] RDX: 0000000000000881 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 448.592872][T10452] RBP: 00007fbda2e10b39 R08: 0000000000000000 R09: 0000000000000000 [ 448.592884][T10452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 448.592897][T10452] R13: 0000000000000000 R14: 00007fbda2fb5fa0 R15: 00007fff33b10638 [ 448.592923][T10452] [ 449.094966][T10375] lowmem_reserve[]: 0 0 0 0 0 [ 449.099763][T10375] Node 1 Normal free:3859000kB boost:0kB min:55788kB low:69732kB high:83676kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:59636kB local_pcp:59636kB free_cma:0kB [ 449.225396][T10375] lowmem_reserve[]: 0 0 0 0 0 [ 449.230182][T10375] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 449.280974][T10375] Node 0 DMA32: 7594*4kB (UME) 3355*8kB (UME) 2268*16kB (UM) 1833*32kB (UME) 864*64kB (UME) 428*128kB (UM) 241*256kB (UM) 154*512kB (UM) 79*1024kB (UME) 5*2048kB (UE) 190*4096kB (M) = 1272160kB [ 449.341837][T10375] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 449.383493][T10375] Node 1 Normal: 10*4kB (ME) 6*8kB (ME) 6*16kB (ME) 14*32kB (UME) 13*64kB (ME) 7*128kB (UME) 3*256kB (UM) 1*512kB (M) 3*1024kB (ME) 1*2048kB (E) 940*4096kB (UM) = 3859000kB [ 449.431877][T10375] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 449.461351][T10375] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 449.492174][T10375] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 449.511749][T10375] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 449.523904][T10375] 78046 total pagecache pages [ 449.528605][T10375] 0 pages in swap cache [ 449.532896][T10375] Free swap = 124996kB [ 449.537049][T10375] Total swap = 124996kB [ 449.541214][T10375] 2097051 pages RAM [ 449.545175][T10375] 0 pages HighMem/MovableOnly [ 449.549862][T10375] 429744 pages reserved [ 449.561163][T10469] netlink: 342 bytes leftover after parsing attributes in process `syz.0.946'. [ 449.574106][T10375] 0 pages cma reserved [ 450.228249][T10483] Setting dangerous option i915.mitigations - tainting kernel [ 452.146925][T10503] netlink: 4 bytes leftover after parsing attributes in process `syz.2.954'. [ 452.259522][T10506] netlink: 13 bytes leftover after parsing attributes in process `syz.2.954'. [ 452.896079][T10520] netlink: 342 bytes leftover after parsing attributes in process `syz.2.958'. [ 453.681963][T10528] Setting dangerous option i915.mitigations - tainting kernel [ 455.346017][T10548] ubi: mtd0 is already attached to ubi0 [ 457.324044][T10574] FAULT_INJECTION: forcing a failure. [ 457.324044][T10574] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 457.385481][T10574] CPU: 0 UID: 0 PID: 10574 Comm: syz.2.967 Tainted: G U 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(full) [ 457.385515][T10574] Tainted: [U]=USER [ 457.385522][T10574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 457.385534][T10574] Call Trace: [ 457.385541][T10574] [ 457.385549][T10574] dump_stack_lvl+0x16c/0x1f0 [ 457.385586][T10574] should_fail_ex+0x512/0x640 [ 457.385613][T10574] _copy_from_user+0x2e/0xd0 [ 457.385639][T10574] cifs_security_flags_proc_write+0xd7/0x720 [ 457.385666][T10574] ? __pfx_cifs_security_flags_proc_write+0x10/0x10 [ 457.385701][T10574] ? __pfx_cifs_security_flags_proc_write+0x10/0x10 [ 457.385728][T10574] proc_reg_write+0x23d/0x330 [ 457.385761][T10574] ? __pfx_proc_reg_write+0x10/0x10 [ 457.385791][T10574] vfs_write+0x2a0/0x1150 [ 457.385824][T10574] ? __pfx___mutex_lock+0x10/0x10 [ 457.385844][T10574] ? __pfx_vfs_write+0x10/0x10 [ 457.385880][T10574] ? __fget_files+0x20e/0x3c0 [ 457.385916][T10574] ksys_write+0x12a/0x250 [ 457.385945][T10574] ? __pfx_ksys_write+0x10/0x10 [ 457.385982][T10574] do_syscall_64+0xcd/0x490 [ 457.386003][T10574] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.386024][T10574] RIP: 0033:0x7f86f1b8e929 [ 457.386040][T10574] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 457.386059][T10574] RSP: 002b:00007f86f2944038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 457.386078][T10574] RAX: ffffffffffffffda RBX: 00007f86f1db5fa0 RCX: 00007f86f1b8e929 [ 457.386091][T10574] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000003 [ 457.386103][T10574] RBP: 00007f86f2944090 R08: 0000000000000000 R09: 0000000000000000 [ 457.386116][T10574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 457.386128][T10574] R13: 0000000000000000 R14: 00007f86f1db5fa0 R15: 00007ffe8650eb08 [ 457.386154][T10574] [ 458.030453][T10583] netlink: 342 bytes leftover after parsing attributes in process `syz.0.969'. [ 458.323449][T10587] i2c i2c-0: new_device: Missing parameters [ 458.856225][T10602] Setting dangerous option i915.mitigations - tainting kernel [ 458.901958][T10589] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 458.949077][T10589] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 459.192055][T10589] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 459.279592][T10589] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 459.332103][T10589] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 460.528559][T10624] netlink: 342 bytes leftover after parsing attributes in process `syz.1.980'. [ 460.917096][T10626] netlink: 28 bytes leftover after parsing attributes in process `syz.2.982'. [ 460.935315][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 461.012160][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 461.334934][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 461.411895][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 461.479944][T10641] Setting dangerous option i915.mitigations - tainting kernel [ 462.749517][T10659] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 463.106277][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 463.214748][T10669] FAULT_INJECTION: forcing a failure. [ 463.214748][T10669] name fail_futex, interval 1, probability 0, space 0, times 0 [ 463.301981][T10669] CPU: 0 UID: 0 PID: 10669 Comm: syz.3.990 Tainted: G U 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(full) [ 463.302017][T10669] Tainted: [U]=USER [ 463.302024][T10669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 463.302036][T10669] Call Trace: [ 463.302043][T10669] [ 463.302051][T10669] dump_stack_lvl+0x16c/0x1f0 [ 463.302090][T10669] should_fail_ex+0x512/0x640 [ 463.302118][T10669] get_futex_key+0x1d0/0x1540 [ 463.302145][T10669] ? __pfx_get_futex_key+0x10/0x10 [ 463.302177][T10669] futex_wake+0xea/0x530 [ 463.302204][T10669] ? futex_wait+0x120/0x380 [ 463.302235][T10669] ? __pfx_futex_wake+0x10/0x10 [ 463.302268][T10669] ? __lock_acquire+0x622/0x1c90 [ 463.302300][T10669] do_futex+0x1e3/0x350 [ 463.302326][T10669] ? __pfx_do_futex+0x10/0x10 [ 463.302357][T10669] __x64_sys_futex+0x1e0/0x4c0 [ 463.302384][T10669] ? fdget_pos+0x2b8/0x370 [ 463.302414][T10669] ? __pfx___x64_sys_futex+0x10/0x10 [ 463.302438][T10669] ? ksys_write+0x1ac/0x250 [ 463.302467][T10669] ? __pfx_ksys_write+0x10/0x10 [ 463.302503][T10669] do_syscall_64+0xcd/0x490 [ 463.302524][T10669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.302544][T10669] RIP: 0033:0x7fdd7c78e929 [ 463.302560][T10669] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 463.302580][T10669] RSP: 002b:00007fdd7d5180e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 463.302599][T10669] RAX: ffffffffffffffda RBX: 00007fdd7c9b5fa8 RCX: 00007fdd7c78e929 [ 463.302612][T10669] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fdd7c9b5fac [ 463.302625][T10669] RBP: 00007fdd7c9b5fa0 R08: 00007fdd7d519000 R09: 0000000000000000 [ 463.302638][T10669] R10: ffffffffffffffff R11: 0000000000000246 R12: 00007fdd7c9b5fac [ 463.302651][T10669] R13: 0000000000000000 R14: 00007ffe74848d00 R15: 00007ffe74848de8 [ 463.302676][T10669] [ 463.873111][T10674] ICMPv6: process `syz.3.991' is using deprecated sysctl (syscall) net.ipv6.neigh.veth0_to_bridge.base_reachable_time - use net.ipv6.neigh.veth0_to_bridge.base_reachable_time_ms instead [ 464.355062][T10681] [U] [ 464.357814][T10681] [U] —rÖâPÉt5i‰‹}H¬ìÝò€ÏmÔºÁª9(e…\ê°âóO7Ý쎥‡üMï‚V°«*nÊÄ b½B¢+ãw [ 464.460315][T10684] netlink: 342 bytes leftover after parsing attributes in process `syz.2.992'. [ 464.794707][T10688] ubi: mtd0 is already attached to ubi0 [ 465.916990][T10704] sd 0:0:1:0: PR command failed: 1026 [ 465.944168][T10704] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 466.074728][T10705] Setting dangerous option i915.mitigations - tainting kernel [ 466.178683][T10704] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 469.307486][T10750] Setting dangerous option i915.mitigations - tainting kernel [ 469.880042][T10757] sp0: Synchronizing with TNC [ 469.950136][T10764] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1010'. [ 470.072655][T10762] netlink: 13832 bytes leftover after parsing attributes in process `syz.0.1008'. [ 470.708337][T10775] FAULT_INJECTION: forcing a failure. [ 470.708337][T10775] name failslab, interval 1, probability 0, space 0, times 0 [ 470.755873][T10775] CPU: 0 UID: 0 PID: 10775 Comm: syz.1.1012 Tainted: G U 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(full) [ 470.755912][T10775] Tainted: [U]=USER [ 470.755920][T10775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 470.755934][T10775] Call Trace: [ 470.755941][T10775] [ 470.755951][T10775] dump_stack_lvl+0x16c/0x1f0 [ 470.755993][T10775] should_fail_ex+0x512/0x640 [ 470.756019][T10775] ? fs_reclaim_acquire+0xae/0x150 [ 470.756050][T10775] should_failslab+0xc2/0x120 [ 470.756074][T10775] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 470.756112][T10775] ? generic_fillattr+0x6bf/0x940 [ 470.756133][T10775] ? stack_depot_save_flags+0x3e0/0xa40 [ 470.756160][T10775] ? ima_alloc_tfm+0x21a/0x2e0 [ 470.756185][T10775] ? ima_collect_measurement+0x4b5/0xa40 [ 470.756220][T10775] krealloc_noprof+0x1fc/0x370 [ 470.756259][T10775] ima_collect_measurement+0x4b5/0xa40 [ 470.756298][T10775] ? __pfx_ima_collect_measurement+0x10/0x10 [ 470.756347][T10775] ? __mutex_lock+0x1ca/0xb90 [ 470.756368][T10775] ? is_bad_inode+0xd/0x40 [ 470.756401][T10775] ? xattr_resolve_name+0x27b/0x3f0 [ 470.756438][T10775] ? vfs_getxattr_alloc+0xec/0x340 [ 470.756476][T10775] ? ima_get_hash_algo+0x27c/0x400 [ 470.756499][T10775] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 470.756529][T10775] ? process_measurement+0x11fa/0x23e0 [ 470.756554][T10775] process_measurement+0x11fa/0x23e0 [ 470.756590][T10775] ? __pfx_process_measurement+0x10/0x10 [ 470.756659][T10775] ? get_pid_task+0x106/0x250 [ 470.756694][T10775] ima_file_mmap+0x1b1/0x1d0 [ 470.756720][T10775] ? __pfx_ima_file_mmap+0x10/0x10 [ 470.756744][T10775] ? __lock_acquire+0x622/0x1c90 [ 470.756781][T10775] security_mmap_file+0x88c/0x990 [ 470.756804][T10775] vm_mmap_pgoff+0xec/0x450 [ 470.756830][T10775] ? find_held_lock+0x2b/0x80 [ 470.756856][T10775] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 470.756885][T10775] ? __fget_files+0x20e/0x3c0 [ 470.756923][T10775] ksys_mmap_pgoff+0x32c/0x5c0 [ 470.756949][T10775] ? __pfx_ksys_write+0x10/0x10 [ 470.756986][T10775] __x64_sys_mmap+0x125/0x190 [ 470.757022][T10775] do_syscall_64+0xcd/0x490 [ 470.757046][T10775] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.757070][T10775] RIP: 0033:0x7fbda2d8e929 [ 470.757088][T10775] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 470.757111][T10775] RSP: 002b:00007fbda3b8d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 470.757132][T10775] RAX: ffffffffffffffda RBX: 00007fbda2fb5fa0 RCX: 00007fbda2d8e929 [ 470.757148][T10775] RDX: 0000000000000006 RSI: 0000000000000008 RDI: 0000000000000000 [ 470.757162][T10775] RBP: 00007fbda3b8d090 R08: 0000000000000006 R09: 0000000130000000 [ 470.757177][T10775] R10: 0000000000000010 R11: 0000000000000246 R12: 0000000000000001 [ 470.757192][T10775] R13: 0000000000000000 R14: 00007fbda2fb5fa0 R15: 00007fff33b10638 [ 470.757221][T10775] [ 470.760941][ T30] audit: type=1800 audit(6044062091.150:13): pid=10775 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1012" name="[io_uring]" dev="anon_inodefs" ino=23473 res=0 errno=0 [ 472.664430][T10789] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1016'. [ 472.711664][T10789] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 472.741103][T10789] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 472.772612][T10789] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 472.799557][T10789] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 473.134550][T10806] sd 0:0:1:0: PR command failed: 1026 [ 473.178633][T10806] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 473.224908][T10807] Setting dangerous option i915.mitigations - tainting kernel [ 473.324983][T10806] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 473.413249][T10812] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1020'. [ 473.722264][T10816] ubi: mtd0 is already attached to ubi0 [ 474.616287][T10836] FAULT_INJECTION: forcing a failure. [ 474.616287][T10836] name failslab, interval 1, probability 0, space 0, times 0 [ 474.679759][T10836] CPU: 0 UID: 0 PID: 10836 Comm: syz.3.1025 Tainted: G U 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(full) [ 474.679799][T10836] Tainted: [U]=USER [ 474.679807][T10836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 474.679822][T10836] Call Trace: [ 474.679830][T10836] [ 474.679839][T10836] dump_stack_lvl+0x16c/0x1f0 [ 474.679882][T10836] should_fail_ex+0x512/0x640 [ 474.679908][T10836] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 474.679946][T10836] should_failslab+0xc2/0x120 [ 474.679971][T10836] __kmalloc_cache_noprof+0x6a/0x3e0 [ 474.680005][T10836] ? apply_wqattrs_prepare+0x130/0xbd0 [ 474.680048][T10836] apply_wqattrs_prepare+0x130/0xbd0 [ 474.680082][T10836] apply_workqueue_attrs_locked+0x64/0xe0 [ 474.680106][T10836] __alloc_workqueue+0xf41/0x1810 [ 474.680143][T10836] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 474.680179][T10836] alloc_workqueue+0xd2/0x200 [ 474.680224][T10836] ? __pfx_alloc_workqueue+0x10/0x10 [ 474.680261][T10836] ? __pfx___debug_object_init+0x10/0x10 [ 474.680302][T10836] nci_register_device+0x21e/0xb80 [ 474.680338][T10836] ? __pfx_nci_register_device+0x10/0x10 [ 474.680377][T10836] ? lockdep_init_map_type+0x5c/0x280 [ 474.680415][T10836] virtual_ncidev_open+0x141/0x220 [ 474.680452][T10836] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 474.680487][T10836] misc_open+0x35d/0x420 [ 474.680524][T10836] ? __pfx_misc_open+0x10/0x10 [ 474.680560][T10836] chrdev_open+0x234/0x6a0 [ 474.680580][T10836] ? __pfx_apparmor_file_open+0x10/0x10 [ 474.680630][T10836] ? __pfx_chrdev_open+0x10/0x10 [ 474.680652][T10836] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 474.680688][T10836] do_dentry_open+0x741/0x1c10 [ 474.680721][T10836] ? __pfx_chrdev_open+0x10/0x10 [ 474.680746][T10836] vfs_open+0x82/0x3f0 [ 474.680774][T10836] path_openat+0x1de4/0x2cb0 [ 474.680815][T10836] ? __pfx_path_openat+0x10/0x10 [ 474.680849][T10836] ? __lock_acquire+0xb8a/0x1c90 [ 474.680880][T10836] do_filp_open+0x20b/0x470 [ 474.680913][T10836] ? __pfx_do_filp_open+0x10/0x10 [ 474.680965][T10836] ? alloc_fd+0x471/0x7d0 [ 474.681002][T10836] do_sys_openat2+0x11b/0x1d0 [ 474.681027][T10836] ? __pfx_do_sys_openat2+0x10/0x10 [ 474.681063][T10836] __x64_sys_openat+0x174/0x210 [ 474.681089][T10836] ? __pfx___x64_sys_openat+0x10/0x10 [ 474.681131][T10836] do_syscall_64+0xcd/0x490 [ 474.681156][T10836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.681179][T10836] RIP: 0033:0x7fdd7c78e929 [ 474.681197][T10836] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 474.681218][T10836] RSP: 002b:00007fdd7d518038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 474.681239][T10836] RAX: ffffffffffffffda RBX: 00007fdd7c9b5fa0 RCX: 00007fdd7c78e929 [ 474.681254][T10836] RDX: 0000000000000002 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 474.681267][T10836] RBP: 00007fdd7c810b39 R08: 0000000000000000 R09: 0000000000000000 [ 474.681280][T10836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 474.681293][T10836] R13: 0000000000000000 R14: 00007fdd7c9b5fa0 R15: 00007ffe74848de8 [ 474.681320][T10836] [ 474.991470][ C0] vkms_vblank_simulate: vblank timer overrun [ 475.660489][T10852] [U] µQBer‘éÝf¿”ê2h’ƒ»‰]¼ [ 475.686346][T10852] [U] —rÖâPÉt5i‰‹}H¬ìÝò€ÏmÔºÁª9(e…\ê°âóO7Ý쎥‡üMï‚V°«*nÊÄ b½B¢+ãw [ 475.776551][ C0] vkms_vblank_simulate: vblank timer overrun [ 475.910848][T10852] [U] µ˜À7¸ð‰Ï‹ BªûjÉ$ÏU-ñX§õœ&æ/?Ï2Ø`Â%œ±³Šw?óϺùÅ°hÚÞ\×w©‡ [ 475.918891][T10852] [U] R!Cu+3°‰½ò³ƒ‡·.ŠS96b>Ööï”ÝüÊ{ò [ 475.955271][T10852] [U] oäP =í³jW5^%ÿW›\c _H@~Ί|lO[%‚ao [ 475.980955][T10852] [U] kº˜À¢ƒUûÜîÉâdRÃ_ŠÙ?–ò.Y"Ô?oÜ ùâ°÷¨–`N¤óÄ0QBŒÉÛ²Œ* `ž@;^’§'¯§g±ù}ó5îr–†À>LÁŠ¥JØ+@<ÆÁÿcAU`A}}HðiÉ%Ê?Î`ÊzÇgýßaÊö/:¶}­?¯Ã4>Aœ.—U>Ê­X¿ q’çnš¼\›é6qŠº2Í}¼Æ¼cJFQ9mŲGø8™y̵eÆFfÛq4Ñ\ÿZèù5¥¼²<ªÎ.Ý+7§&W^<°Rà^ÝŸãëawg¶¥W( [ 476.335725][T10863] sd 0:0:1:0: PR command failed: 1026 [ 476.345118][T10852] [U] (‹R¯D¡`{`c†~\VÄIhýP›Yƒúæ±îû/Œî ´›‹Vœñ;w­¼"Η,×zÅqîA¤FÑ91øIÕclr™–³nÈAqýâ`¤à—pÏhu‘§˜3®dsÅÀú«–ï >axÔ…Rm¿w\”2Lv½Jòe.6±Ì [ 476.383634][T10863] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 476.434562][T10865] Setting dangerous option i915.mitigations - tainting kernel [ 476.450849][T10852] [U] =ð\’2înï|OF¦ÏŠÑ`­zºi(¿kó­áÑ5©eÄ¢²ƒHWÚgþ™"/¿³º§Muþ)*ßØ/Ë“%·ê‚jRU–TçmIJ7M•5úÏÍJ²HãˆÅ»Š [ 476.472194][T10863] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 476.498817][T10852] [U] ÁQ±U~A×Æ%Æz±Å [ 476.528524][T10852] [U] o¹{¡\Ucî¤K!©>­o{ý…n(x/ [ 476.557831][T10852] [U] ÐPDÙ›—9ÒÌë†Ï&¬ëà‰¨a4 ýầƒ*0ê.`R¸~ám~(¾CÑ+²¶y7Ý&¨®¸Oï/-R÷R2¤ [ 476.615125][T10852] [U] ªoj3KQÒu)Øn¥Î‡Ebùù=¤]$B$¹6üí;eŠ»çª [ 476.620907][T10852] [U] Pé~epDpÚöèŠ3Ï/ÿ΂?RŠ´~£T"ñDs6f"šàŒü~a$wBêN< 8®|{Áî—\ƒyg.LïĘ”«s»¢X [ 476.706134][T10852] [U] ÄvÌV¶t‹ŽÛ³z?ÚúÔì«Î|Mü2ä [ 477.346747][T10879] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input13 [ 478.241725][T10879] FAULT_INJECTION: forcing a failure. [ 478.241725][T10879] name failslab, interval 1, probability 0, space 0, times 0 [ 478.364586][T10880] i2c i2c-0: new_device: Can't parse I2C address [ 478.397819][T10879] CPU: 0 UID: 0 PID: 10879 Comm: syz.1.1034 Tainted: G U 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(full) [ 478.397851][T10879] Tainted: [U]=USER [ 478.397858][T10879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 478.397871][T10879] Call Trace: [ 478.397877][T10879] [ 478.397885][T10879] dump_stack_lvl+0x16c/0x1f0 [ 478.397923][T10879] should_fail_ex+0x512/0x640 [ 478.397946][T10879] ? __kmalloc_noprof+0xbf/0x510 [ 478.397978][T10879] ? tbl_mask_array_alloc+0x38/0x160 [ 478.398005][T10879] should_failslab+0xc2/0x120 [ 478.398025][T10879] __kmalloc_noprof+0xd2/0x510 [ 478.398061][T10879] tbl_mask_array_alloc+0x38/0x160 [ 478.398091][T10879] ovs_flow_tbl_init+0x40/0x600 [ 478.398120][T10879] ? kasan_save_track+0x14/0x30 [ 478.398153][T10879] ovs_dp_cmd_new+0x251/0xe60 [ 478.398188][T10879] ? rcu_is_watching+0x12/0xc0 [ 478.398210][T10879] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 478.398246][T10879] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 478.398277][T10879] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 478.398313][T10879] genl_family_rcv_msg_doit+0x206/0x2f0 [ 478.398343][T10879] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 478.398372][T10879] ? trace_cap_capable+0x18d/0x200 [ 478.398405][T10879] ? bpf_lsm_capable+0x9/0x10 [ 478.398430][T10879] ? security_capable+0x7e/0x260 [ 478.398457][T10879] ? ns_capable+0xd7/0x110 [ 478.398479][T10879] genl_rcv_msg+0x55c/0x800 [ 478.398510][T10879] ? __pfx_genl_rcv_msg+0x10/0x10 [ 478.398539][T10879] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 478.398578][T10879] netlink_rcv_skb+0x155/0x420 [ 478.398603][T10879] ? __pfx_genl_rcv_msg+0x10/0x10 [ 478.398632][T10879] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 478.398667][T10879] ? netlink_deliver_tap+0x1ae/0xd30 [ 478.398693][T10879] genl_rcv+0x28/0x40 [ 478.398718][T10879] netlink_unicast+0x53d/0x7f0 [ 478.398745][T10879] ? __pfx_netlink_unicast+0x10/0x10 [ 478.398777][T10879] netlink_sendmsg+0x8d1/0xdd0 [ 478.398805][T10879] ? __pfx_netlink_sendmsg+0x10/0x10 [ 478.398865][T10879] ____sys_sendmsg+0xa95/0xc70 [ 478.398897][T10879] ? copy_msghdr_from_user+0x10a/0x160 [ 478.398920][T10879] ? __pfx_____sys_sendmsg+0x10/0x10 [ 478.398964][T10879] ___sys_sendmsg+0x134/0x1d0 [ 478.398988][T10879] ? __pfx____sys_sendmsg+0x10/0x10 [ 478.399009][T10879] ? __lock_acquire+0x622/0x1c90 [ 478.399076][T10879] __sys_sendmsg+0x16d/0x220 [ 478.399100][T10879] ? __pfx___sys_sendmsg+0x10/0x10 [ 478.399142][T10879] do_syscall_64+0xcd/0x490 [ 478.399167][T10879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.399191][T10879] RIP: 0033:0x7fbda2d8e929 [ 478.399209][T10879] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 478.399232][T10879] RSP: 002b:00007fbda3b6c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 478.399253][T10879] RAX: ffffffffffffffda RBX: 00007fbda2fb6080 RCX: 00007fbda2d8e929 [ 478.399269][T10879] RDX: 0000000002000000 RSI: 0000200000000080 RDI: 0000000000000006 [ 478.399283][T10879] RBP: 00007fbda3b6c090 R08: 0000000000000000 R09: 0000000000000000 [ 478.399297][T10879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 478.399310][T10879] R13: 0000000000000000 R14: 00007fbda2fb6080 R15: 00007fff33b10638 [ 478.399339][T10879] [ 478.723092][ C0] vkms_vblank_simulate: vblank timer overrun [ 479.787222][T10893] sp0: Synchronizing with TNC [ 480.689563][T10910] sd 0:0:1:0: PR command failed: 1026 [ 480.731038][T10910] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 480.809735][T10910] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 480.907175][T10906] Setting dangerous option i915.mitigations - tainting kernel [ 481.793480][T10919] netlink: 338 bytes leftover after parsing attributes in process `syz.1.1042'. [ 481.914350][T10920] netlink: 338 bytes leftover after parsing attributes in process `syz.1.1042'. [ 482.011884][T10919] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1042'. [ 482.526396][T10929] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1043'. [ 484.551212][T10952] sp0: Synchronizing with TNC [ 484.672721][T10957] [U] Z³{:n«í¾úØîñ‰¹#cÓ98Jòk}G•=‚„\›f¥¼½dÉáÆÙ«]* IÑ—j0š¾ž[?žb2B±Ø›ÃiÑE§Š›ßT=¿þ‰Ÿù6` £°BJcFµ0ÚÙï#ñ6¡ r‡ŽWóÂÞE­ð¡Ã(à[—LªF²æᦺ qÀd·©I{ä  ±qb­ýM{dúóx*’3:Л„ŠµôÑU4¸Ää=É`K0øÓI²È“ÃQBer‘éÝf¿”ê2h’ƒ»‰]¼ [ 484.963695][T10957] [U] —rÖâPÉt5i‰‹}H¬ìÝò€ÏmÔºÁª9(e…\ê°âóO7Ý쎥‡üMï‚V°«*nÊÄ b½B¢+ãw [ 485.442217][T10957] [U] µ˜À7¸ð‰Ï‹ BªûjÉ$ÏU-ñX§õœ&æ/?Ï2Ø`Â%œ±³Šw?óϺùÅ°hÚÞ\×w©‡ [ 485.450241][T10957] [U] R!Cu+3°‰½ò³ƒ‡·.ŠS96b>Ööï”ÝüÊ{ò [ 485.574794][T10957] [U] oäP =í³jW5^%ÿW›\c _H@~Ί|lO[%‚ao [ 485.633732][T10957] [U] kº˜À¢ƒUûÜîÉâdRÃ_ŠÙ?–ò.Y"Ô?oÜ ùâ°÷¨–`N¤óÄ0QBŒÉÛ²Œ* `ž@;^’§'¯§g±ù}ó5îr–†À>LÁŠ¥JØ+@<ÆÁÿcAU`A}}HðiÉ%Ê?Î`ÊzÇgýßaÊö/:¶}­?¯Ã4>Aœ.—U>Ê­X¿ q’çnš¼\›é6qŠº2Í}¼Æ¼cJF [ 485.832687][T10968] dump_stack_lvl+0x16c/0x1f0 [ 485.832731][T10968] should_fail_ex+0x512/0x640 [ 485.832764][T10968] get_futex_key+0x1d0/0x1540 [ 485.832795][T10968] ? keyctl_keyring_clear+0xd3/0x1a0 [ 485.832826][T10968] ? __pfx_get_futex_key+0x10/0x10 [ 485.832864][T10968] futex_wake+0xea/0x530 [ 485.832900][T10968] ? __pfx_futex_wake+0x10/0x10 [ 485.832938][T10968] ? do_raw_spin_lock+0x12c/0x2b0 [ 485.832976][T10968] ? find_held_lock+0x2b/0x80 [ 485.833003][T10968] do_futex+0x1e3/0x350 [ 485.833032][T10968] ? __pfx_do_futex+0x10/0x10 [ 485.833062][T10968] ? up_write+0x1b2/0x520 [ 485.833101][T10968] __x64_sys_futex+0x1e0/0x4c0 [ 485.833132][T10968] ? fput+0x70/0xf0 [ 485.833155][T10968] ? __pfx___x64_sys_futex+0x10/0x10 [ 485.833186][T10968] ? key_put+0x54/0x2d0 [ 485.833230][T10968] ? keyctl_keyring_clear+0xb8/0x1a0 [ 485.833267][T10968] do_syscall_64+0xcd/0x490 [ 485.833293][T10968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.833318][T10968] RIP: 0033:0x7f86f1b8e929 [ 485.833337][T10968] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 485.833360][T10968] RSP: 002b:00007f86f29440e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 485.833382][T10968] RAX: ffffffffffffffda RBX: 00007f86f1db5fa8 RCX: 00007f86f1b8e929 [ 485.833417][T10968] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f86f1db5fac [ 485.833431][T10968] RBP: 00007f86f1db5fa0 R08: 00007f86f2945000 R09: 0000000000000000 [ 485.833445][T10968] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f86f1db5fac [ 485.833459][T10968] R13: 0000000000000000 R14: 00007ffe8650ea20 R15: 00007ffe8650eb08 [ 485.833485][T10968] [ 486.062261][T10957] [U] ë{j?7W† [ 486.065687][T10957] [U] Ýtc'|CÎMÎÄŸEX•›õ‘‚ºôòPª_î8<êì(¿"-ûîÊŒÈG1v2lýIê+_Q9mŲGø8™y̵eÆFfÛq4Ñ\ÿZèù5¥¼²<ªÎ.Ý+7§&W^<°Rà^ÝŸãëawg¶¥W( [ 486.091895][T10957] [U] (‹R¯D¡`{`c†~\VÄIhýP›Yƒúæ±îû/Œî ´›‹Vœñ;w­¼"Η,×zÅqîA¤FÑ91øIÕclr™–³nÈAqýâ`¤à—pÏhu‘§˜3®dsÅÀú«–ï >axÔ…Rm¿w\”2Lv½Jòe.6±Ì [ 486.105513][T10957] [U] =ð\’2înï|OF¦ÏŠÑ`­zºi(¿kó­áÑ5©eÄ¢²ƒHWÚgþ™"/¿³º§Muþ)*ßØ/Ë“%·ê‚jRU–TçmIJ7M•5úÏÍJ²HãˆÅ»Š [ 486.116070][T10957] [U] ÁQ±U~A×Æ%Æz±Å [ 486.120000][T10957] [U] o¹{¡\Ucî¤K!©>­o{ý…n(x/ [ 486.126668][T10957] [U] ÐPDÙ›—9ÒÌë†Ï&¬ëà‰¨a4 ýầƒ*0ê.`R¸~ám~(¾CÑ+²¶y7Ý&¨®¸Oï/-R÷R2¤ [ 486.135228][T10957] [U] ªoj3KQÒu)Øn¥Î‡Ebùù=¤]$B$¹6üí;eŠ»çª [ 486.141002][T10957] [U] Pé~epDpÚöèŠ3Ï/ÿ΂?RŠ´~£T"ñDs6f"šàŒü~a$wBêN< 8®|{Áî—\ƒyg.LïĘ”«s»¢X [ 486.150244][T10957] [U] ÄvÌV¶t‹ŽÛ³z?ÚúÔì«Î|Mü2ä [ 486.565461][T10975] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1054'. [ 487.147537][T10986] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1057'. [ 488.145007][T10995] FAULT_INJECTION: forcing a failure. [ 488.145007][T10995] name failslab, interval 1, probability 0, space 0, times 0 [ 488.259051][T10995] CPU: 0 UID: 0 PID: 10995 Comm: syz.2.1061 Tainted: G U 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(full) [ 488.259092][T10995] Tainted: [U]=USER [ 488.259100][T10995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 488.259114][T10995] Call Trace: [ 488.259122][T10995] [ 488.259132][T10995] dump_stack_lvl+0x16c/0x1f0 [ 488.259177][T10995] should_fail_ex+0x512/0x640 [ 488.259204][T10995] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 488.259241][T10995] should_failslab+0xc2/0x120 [ 488.259264][T10995] __kmalloc_cache_noprof+0x6a/0x3e0 [ 488.259296][T10995] ? lockdep_init_map_type+0x5c/0x280 [ 488.259330][T10995] ? nci_hci_allocate+0x45/0x330 [ 488.259358][T10995] nci_hci_allocate+0x45/0x330 [ 488.259382][T10995] nci_allocate_device+0x26f/0x430 [ 488.259418][T10995] virtual_ncidev_open+0x6f/0x220 [ 488.259456][T10995] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 488.259493][T10995] misc_open+0x35d/0x420 [ 488.259530][T10995] ? __pfx_misc_open+0x10/0x10 [ 488.259567][T10995] chrdev_open+0x234/0x6a0 [ 488.259588][T10995] ? __pfx_apparmor_file_open+0x10/0x10 [ 488.259627][T10995] ? __pfx_chrdev_open+0x10/0x10 [ 488.259651][T10995] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 488.259690][T10995] do_dentry_open+0x741/0x1c10 [ 488.259727][T10995] ? __pfx_chrdev_open+0x10/0x10 [ 488.259754][T10995] vfs_open+0x82/0x3f0 [ 488.259785][T10995] path_openat+0x1de4/0x2cb0 [ 488.259830][T10995] ? __pfx_path_openat+0x10/0x10 [ 488.259868][T10995] ? __lock_acquire+0xb8a/0x1c90 [ 488.259903][T10995] do_filp_open+0x20b/0x470 [ 488.259940][T10995] ? __pfx_do_filp_open+0x10/0x10 [ 488.260009][T10995] ? alloc_fd+0x471/0x7d0 [ 488.260054][T10995] do_sys_openat2+0x11b/0x1d0 [ 488.260092][T10995] ? __pfx_do_sys_openat2+0x10/0x10 [ 488.260127][T10995] __x64_sys_openat+0x174/0x210 [ 488.260151][T10995] ? __pfx___x64_sys_openat+0x10/0x10 [ 488.260186][T10995] do_syscall_64+0xcd/0x490 [ 488.260208][T10995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.260229][T10995] RIP: 0033:0x7f86f1b8e929 [ 488.260245][T10995] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 488.260266][T10995] RSP: 002b:00007f86f2944038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 488.260285][T10995] RAX: ffffffffffffffda RBX: 00007f86f1db5fa0 RCX: 00007f86f1b8e929 [ 488.260299][T10995] RDX: 0000000000000002 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 488.260313][T10995] RBP: 00007f86f1c10b39 R08: 0000000000000000 R09: 0000000000000000 [ 488.260326][T10995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 488.260339][T10995] R13: 0000000000000000 R14: 00007f86f1db5fa0 R15: 00007ffe8650eb08 [ 488.260365][T10995] [ 488.528653][ C0] vkms_vblank_simulate: vblank timer overrun [ 489.065441][T11006] sd 0:0:1:0: PR command failed: 1026 [ 489.087382][T11000] [U] Z³{:n«í¾úØîñ‰¹#cÓ98Jòk}G•=‚„\›f¥¼½dÉáÆÙ«]* IÑ—j0š¾ž[?žb2B±Ø›ÃiÑE§Š›ßT=¿þ‰Ÿù6` £°BJcFµ0ÚÙï#ñ6¡ r‡ŽWóÂÞE­ð¡Ã(à[—LªF²æᦺ qÀd·©I{ä  ±qb­ýM{dúóx*’3:Л„ŠµôÑU4¸Ää=É`K0øÓI²È“ÃQBer‘éÝf¿”ê2h’ƒ»‰]¼ [ 489.121176][T11007] Setting dangerous option i915.mitigations - tainting kernel [ 489.172371][T11006] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 489.179122][T11006] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 489.192660][T11000] [U] —rÖâPÉt5i‰‹}H¬ìÝò€ÏmÔºÁª9(e…\ê°âóO7Ý쎥‡üMï‚V°«*nÊÄ b½B¢+ãw [ 489.266782][ C0] vkms_vblank_simulate: vblank timer overrun [ 489.364202][T11011] netlink: 338 bytes leftover after parsing attributes in process `syz.1.1064'. [ 489.403901][T11000] [U] µ˜À7¸ð‰Ï‹ BªûjÉ$ÏU-ñX§õœ&æ/?Ï2Ø`Â%œ±³Šw?óϺùÅ°hÚÞ\×w©‡ [ 489.411908][T11000] [U] R!Cu+3°‰½ò³ƒ‡·.ŠS96b>Ööï”ÝüÊ{ò [ 489.420722][T11011] netlink: 338 bytes leftover after parsing attributes in process `syz.1.1064'. [ 489.464863][T11000] [U] oäP =í³jW5^%ÿW›\c _H@~Ί|lO[%‚ao [ 489.473004][T11000] [U] kº˜À¢ƒUûÜîÉâdRÃ_ŠÙ?–ò.Y"Ô?oÜ ùâ°÷¨–`N¤óÄ0QBŒÉÛ²Œ* `ž@;^’§'¯§g±ù}ó5îr–†À>LÁŠ¥JØ+@<ÆÁÿcAU`A}}HðiÉ%Ê?Î`ÊzÇgýßaÊö/:¶}­?¯Ã4>Aœ.—U>Ê­X¿ q’çnš¼\›é6qŠº2Í}¼Æ¼cJFQ9mŲGø8™y̵eÆFfÛq4Ñ\ÿZèù5¥¼²<ªÎ.Ý+7§&W^<°Rà^ÝŸãëawg¶¥W( [ 490.061892][T11000] [U] (‹R¯D¡`{`c†~\VÄIhýP›Yƒúæ±îû/Œî ´›‹Vœñ;w­¼"Η,×zÅqîA¤FÑ91øIÕclr™–³nÈAqýâ`¤à—pÏhu‘§˜3®dsÅÀú«–ï >axÔ…Rm¿w\”2Lv½Jòe.6±Ì [ 490.114617][T11020] FAULT_INJECTION: forcing a failure. [ 490.114617][T11020] name failslab, interval 1, probability 0, space 0, times 0 [ 490.168791][T11000] [U] =ð\’2înï|OF¦ÏŠÑ`­zºi(¿kó­áÑ5©eÄ¢²ƒHWÚgþ™"/¿³º§Muþ)*ßØ/Ë“%·ê‚jRU–TçmIJ7M•5úÏÍJ²HãˆÅ»Š [ 490.196241][T11020] CPU: 0 UID: 0 PID: 11020 Comm: syz.1.1066 Tainted: G U 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(full) [ 490.196273][T11020] Tainted: [U]=USER [ 490.196280][T11020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 490.196292][T11020] Call Trace: [ 490.196299][T11020] [ 490.196307][T11020] dump_stack_lvl+0x16c/0x1f0 [ 490.196344][T11020] should_fail_ex+0x512/0x640 [ 490.196366][T11020] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 490.196401][T11020] should_failslab+0xc2/0x120 [ 490.196422][T11020] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 490.196454][T11020] ? __alloc_skb+0x2b2/0x380 [ 490.196489][T11020] __alloc_skb+0x2b2/0x380 [ 490.196521][T11020] ? __pfx___alloc_skb+0x10/0x10 [ 490.196555][T11020] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 490.196585][T11020] netlink_alloc_large_skb+0x69/0x130 [ 490.196611][T11020] netlink_sendmsg+0x6a1/0xdd0 [ 490.196639][T11020] ? __pfx_netlink_sendmsg+0x10/0x10 [ 490.196673][T11020] ____sys_sendmsg+0xa95/0xc70 [ 490.196700][T11020] ? copy_msghdr_from_user+0x10a/0x160 [ 490.196719][T11020] ? __pfx_____sys_sendmsg+0x10/0x10 [ 490.196757][T11020] ___sys_sendmsg+0x134/0x1d0 [ 490.196778][T11020] ? __pfx____sys_sendmsg+0x10/0x10 [ 490.196795][T11020] ? __lock_acquire+0x622/0x1c90 [ 490.196852][T11020] __sys_sendmsg+0x16d/0x220 [ 490.196872][T11020] ? __pfx___sys_sendmsg+0x10/0x10 [ 490.196908][T11020] do_syscall_64+0xcd/0x490 [ 490.196935][T11020] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.196956][T11020] RIP: 0033:0x7fbda2d8e929 [ 490.196972][T11020] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 490.196992][T11020] RSP: 002b:00007fbda3b8d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 490.197011][T11020] RAX: ffffffffffffffda RBX: 00007fbda2fb5fa0 RCX: 00007fbda2d8e929 [ 490.197024][T11020] RDX: 0000000004040010 RSI: 0000200000001b40 RDI: 0000000000000003 [ 490.197036][T11020] RBP: 00007fbda3b8d090 R08: 0000000000000000 R09: 0000000000000000 [ 490.197049][T11020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 490.197061][T11020] R13: 0000000000000000 R14: 00007fbda2fb5fa0 R15: 00007fff33b10638 [ 490.197086][T11020] [ 490.421430][ C0] vkms_vblank_simulate: vblank timer overrun [ 490.482883][T11000] [U] ÁQ±U~A×Æ%Æz±Å [ 490.486836][T11000] [U] o¹{¡\Ucî¤K!©>­o{ý…n(x/ [ 490.492090][T11000] [U] ÐPDÙ›—9ÒÌë†Ï&¬ëà‰¨a4 ýầƒ*0ê.`R¸~ám~(¾CÑ+²¶y7Ý&¨®¸Oï/-R÷R2¤ [ 490.500646][T11000] [U] ªoj3KQÒu)Øn¥Î‡Ebùù=¤]$B$¹6üí;eŠ»çª [ 490.506404][T11000] [U] Pé~epDpÚöèŠ3Ï/ÿ΂?RŠ´~£T"ñDs6f"šàŒü~a$wBêN< 8®|{Áî—\ƒyg.LïĘ”«s»¢X [ 490.515653][T11000] [U] ÄvÌV¶t‹ŽÛ³z?ÚúÔì«Î|Mü2ä [ 490.671848][T11030] sd 0:0:1:0: PR command failed: 1026 [ 490.677326][T11030] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 490.822988][T11038] Setting dangerous option i915.mitigations - tainting kernel [ 490.876184][T11030] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 494.337390][T11071] netlink: 338 bytes leftover after parsing attributes in process `syz.0.1076'. [ 494.363678][T11072] sd 0:0:1:0: PR command failed: 1026 [ 494.402646][T11072] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 494.410218][T11071] netlink: 338 bytes leftover after parsing attributes in process `syz.0.1076'. [ 494.433011][T11072] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 494.462794][T11071] netlink: 342 bytes leftover after parsing attributes in process `syz.0.1076'. [ 494.474305][T11069] Setting dangerous option i915.mitigations - tainting kernel [ 494.788588][T11078] FAULT_INJECTION: forcing a failure. [ 494.788588][T11078] name failslab, interval 1, probability 0, space 0, times 0 [ 494.814377][T11079] netlink: 342 bytes leftover after parsing attributes in process `syz.0.1077'. [ 494.854775][T11078] CPU: 0 UID: 0 PID: 11078 Comm: syz.3.1078 Tainted: G U 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(full) [ 494.854808][T11078] Tainted: [U]=USER [ 494.854815][T11078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 494.854828][T11078] Call Trace: [ 494.854835][T11078] [ 494.854843][T11078] dump_stack_lvl+0x16c/0x1f0 [ 494.854886][T11078] should_fail_ex+0x512/0x640 [ 494.854909][T11078] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 494.854942][T11078] should_failslab+0xc2/0x120 [ 494.854962][T11078] __kmalloc_cache_noprof+0x6a/0x3e0 [ 494.854992][T11078] ? snd_pcm_oss_change_params_locked+0x211/0x3a30 [ 494.855021][T11078] ? kasan_save_track+0x14/0x30 [ 494.855055][T11078] snd_pcm_oss_change_params_locked+0x211/0x3a30 [ 494.855085][T11078] ? rcu_is_watching+0x12/0xc0 [ 494.855109][T11078] ? __mutex_lock+0x1ca/0xb90 [ 494.855132][T11078] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 494.855162][T11078] ? __pfx___mutex_lock+0x10/0x10 [ 494.855188][T11078] ? __fsnotify_parent+0x24b/0xc40 [ 494.855222][T11078] snd_pcm_oss_make_ready+0xe6/0x1b0 [ 494.855250][T11078] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 494.855277][T11078] snd_pcm_oss_sync+0x1de/0x840 [ 494.855306][T11078] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 494.855334][T11078] snd_pcm_oss_release+0x28b/0x310 [ 494.855362][T11078] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 494.855388][T11078] __fput+0x3ff/0xb70 [ 494.855415][T11078] task_work_run+0x150/0x240 [ 494.855447][T11078] ? __pfx_task_work_run+0x10/0x10 [ 494.855478][T11078] ? __pfx___do_sys_close_range+0x10/0x10 [ 494.855516][T11078] exit_to_user_mode_loop+0xeb/0x110 [ 494.855589][T11078] do_syscall_64+0x3f6/0x490 [ 494.855614][T11078] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.855638][T11078] RIP: 0033:0x7fdd7c78e929 [ 494.855656][T11078] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 494.855679][T11078] RSP: 002b:00007fdd7d518038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 494.855701][T11078] RAX: 0000000000000000 RBX: 00007fdd7c9b5fa0 RCX: 00007fdd7c78e929 [ 494.855716][T11078] RDX: 0000000000000000 RSI: fffffffffffff000 RDI: 0000000000000000 [ 494.855730][T11078] RBP: 00007fdd7c810b39 R08: 0000000000000000 R09: 0000000000000000 [ 494.855744][T11078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 494.855758][T11078] R13: 0000000000000000 R14: 00007fdd7c9b5fa0 R15: 00007ffe74848de8 [ 494.855787][T11078] [ 495.480113][T11087] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1082'. [ 495.644075][T11092] sd 0:0:1:0: PR command failed: 1026 [ 495.651671][T11092] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 495.702775][T11092] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 495.721204][T11094] Setting dangerous option i915.mitigations - tainting kernel [ 496.469969][T11097] FAULT_INJECTION: forcing a failure. [ 496.469969][T11097] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 496.559877][T11097] CPU: 0 UID: 0 PID: 11097 Comm: syz.1.1083 Tainted: G U 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(full) [ 496.559916][T11097] Tainted: [U]=USER [ 496.559924][T11097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 496.559939][T11097] Call Trace: [ 496.559947][T11097] [ 496.559956][T11097] dump_stack_lvl+0x16c/0x1f0 [ 496.560012][T11097] should_fail_ex+0x512/0x640 [ 496.560043][T11097] _copy_to_user+0x32/0xd0 [ 496.560081][T11097] simple_read_from_buffer+0xcb/0x170 [ 496.560111][T11097] proc_fail_nth_read+0x197/0x270 [ 496.560136][T11097] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 496.560162][T11097] ? rw_verify_area+0xcf/0x680 [ 496.560188][T11097] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 496.560212][T11097] vfs_read+0x1e1/0xc60 [ 496.560243][T11097] ? __pfx___mutex_lock+0x10/0x10 [ 496.560262][T11097] ? __pfx_vfs_read+0x10/0x10 [ 496.560297][T11097] ? __fget_files+0x20e/0x3c0 [ 496.560323][T11097] ? rcu_watching_snap_stopped_since+0x70/0x110 [ 496.560353][T11097] ksys_read+0x12a/0x250 [ 496.560381][T11097] ? __pfx_ksys_read+0x10/0x10 [ 496.560416][T11097] do_syscall_64+0xcd/0x490 [ 496.560437][T11097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.560463][T11097] RIP: 0033:0x7fbda2d8d33c [ 496.560478][T11097] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 496.560498][T11097] RSP: 002b:00007fbda3b6c030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 496.560516][T11097] RAX: ffffffffffffffda RBX: 00007fbda2fb6080 RCX: 00007fbda2d8d33c [ 496.560530][T11097] RDX: 000000000000000f RSI: 00007fbda3b6c0a0 RDI: 0000000000000005 [ 496.560542][T11097] RBP: 00007fbda3b6c090 R08: 0000000000000000 R09: 0000000000000000 [ 496.560555][T11097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 496.560567][T11097] R13: 0000000000000000 R14: 00007fbda2fb6080 R15: 00007fff33b10638 [ 496.560592][T11097] [ 500.037710][T11141] sd 0:0:1:0: PR command failed: 1026 [ 500.102560][T11142] Setting dangerous option i915.mitigations - tainting kernel [ 500.321853][T11141] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 500.397216][T11141] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 500.423406][T11144] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1093'. [ 500.870438][T11150] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1094'. [ 501.973521][T11173] FAULT_INJECTION: forcing a failure. [ 501.973521][T11173] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 502.040090][T11173] CPU: 0 UID: 0 PID: 11173 Comm: syz.0.1100 Tainted: G U 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(full) [ 502.040124][T11173] Tainted: [U]=USER [ 502.040131][T11173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 502.040143][T11173] Call Trace: [ 502.040150][T11173] [ 502.040158][T11173] dump_stack_lvl+0x16c/0x1f0 [ 502.040195][T11173] should_fail_ex+0x512/0x640 [ 502.040223][T11173] _copy_from_iter+0x463/0x16f0 [ 502.040252][T11173] ? __sk_mem_raise_allocated+0x895/0x1700 [ 502.040275][T11173] ? __pfx__copy_from_iter+0x10/0x10 [ 502.040299][T11173] ? alloc_pages_noprof+0x23c/0x390 [ 502.040324][T11173] ? __sk_mem_schedule+0xd0/0x100 [ 502.040349][T11173] tcp_sendmsg_locked+0x297e/0x4300 [ 502.040398][T11173] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 502.040430][T11173] ? do_raw_spin_lock+0x12c/0x2b0 [ 502.040462][T11173] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 502.040498][T11173] ? __local_bh_enable_ip+0xa4/0x120 [ 502.040524][T11173] tcp_sendmsg+0x2e/0x50 [ 502.040551][T11173] ? __pfx_tcp_sendmsg+0x10/0x10 [ 502.040580][T11173] inet_sendmsg+0xb9/0x140 [ 502.040612][T11173] sock_write_iter+0x4aa/0x5b0 [ 502.040639][T11173] ? __pfx_sock_write_iter+0x10/0x10 [ 502.040675][T11173] ? __lock_acquire+0x622/0x1c90 [ 502.040701][T11173] ? copy_iovec_from_user+0x131/0x170 [ 502.040727][T11173] do_iter_readv_writev+0x654/0x950 [ 502.040758][T11173] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 502.040790][T11173] ? bpf_lsm_file_permission+0x9/0x10 [ 502.040812][T11173] ? security_file_permission+0x71/0x210 [ 502.040852][T11173] ? rw_verify_area+0xcf/0x680 [ 502.040880][T11173] vfs_writev+0x35f/0xde0 [ 502.040914][T11173] ? __pfx_vfs_writev+0x10/0x10 [ 502.040960][T11173] ? __fget_files+0x20e/0x3c0 [ 502.040995][T11173] ? __fget_files+0x150/0x3c0 [ 502.041029][T11173] ? do_writev+0x28c/0x340 [ 502.041054][T11173] do_writev+0x28c/0x340 [ 502.041082][T11173] ? __pfx_do_writev+0x10/0x10 [ 502.041117][T11173] do_syscall_64+0xcd/0x490 [ 502.041139][T11173] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.041160][T11173] RIP: 0033:0x7fbb04f8e929 [ 502.041175][T11173] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 502.041195][T11173] RSP: 002b:00007fbb05d28038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 502.041213][T11173] RAX: ffffffffffffffda RBX: 00007fbb051b5fa0 RCX: 00007fbb04f8e929 [ 502.041227][T11173] RDX: 0000000000000008 RSI: 00002000000000c0 RDI: 0000000000000003 [ 502.041239][T11173] RBP: 00007fbb05d28090 R08: 0000000000000000 R09: 0000000000000000 [ 502.041250][T11173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 502.041262][T11173] R13: 0000000000000000 R14: 00007fbb051b5fa0 R15: 00007ffc33279898 [ 502.041286][T11173] [ 503.202394][T11192] sd 0:0:1:0: PR command failed: 1026 [ 503.207823][T11192] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 503.372126][T11192] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 503.554597][T11187] Setting dangerous option i915.mitigations - tainting kernel [ 504.196277][T11200] can: request_module (can-proto-3) failed. [ 504.977941][T11209] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 505.626040][T11221] sd 0:0:1:0: PR command failed: 1026 [ 505.631578][T11221] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 505.722344][T11215] Setting dangerous option i915.mitigations - tainting kernel [ 505.775849][T11221] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 506.143343][T11229] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1110'. [ 506.455950][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.462352][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 506.792720][T11234] FAULT_INJECTION: forcing a failure. [ 506.792720][T11234] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 506.834062][T11234] CPU: 0 UID: 0 PID: 11234 Comm: syz.1.1111 Tainted: G U 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(full) [ 506.834096][T11234] Tainted: [U]=USER [ 506.834103][T11234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 506.834132][T11234] Call Trace: [ 506.834139][T11234] [ 506.834148][T11234] dump_stack_lvl+0x16c/0x1f0 [ 506.834186][T11234] should_fail_ex+0x512/0x640 [ 506.834215][T11234] _copy_to_user+0x32/0xd0 [ 506.834243][T11234] simple_read_from_buffer+0xcb/0x170 [ 506.834274][T11234] proc_fail_nth_read+0x197/0x270 [ 506.834301][T11234] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 506.834330][T11234] ? rw_verify_area+0xcf/0x680 [ 506.834357][T11234] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 506.834383][T11234] vfs_read+0x1e1/0xc60 [ 506.834417][T11234] ? __pfx___mutex_lock+0x10/0x10 [ 506.834439][T11234] ? __pfx_vfs_read+0x10/0x10 [ 506.834476][T11234] ? __fget_files+0x20e/0x3c0 [ 506.834514][T11234] ksys_read+0x12a/0x250 [ 506.834544][T11234] ? __pfx_ksys_read+0x10/0x10 [ 506.834583][T11234] do_syscall_64+0xcd/0x490 [ 506.834606][T11234] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.834633][T11234] RIP: 0033:0x7fbda2d8d33c [ 506.834649][T11234] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 506.834670][T11234] RSP: 002b:00007fbda3b8d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 506.834690][T11234] RAX: ffffffffffffffda RBX: 00007fbda2fb5fa0 RCX: 00007fbda2d8d33c [ 506.834704][T11234] RDX: 000000000000000f RSI: 00007fbda3b8d0a0 RDI: 0000000000000003 [ 506.834717][T11234] RBP: 00007fbda3b8d090 R08: 0000000000000000 R09: 0000000000000000 [ 506.834731][T11234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 506.834743][T11234] R13: 0000000000000000 R14: 00007fbda2fb5fa0 R15: 00007fff33b10638 [ 506.834770][T11234] [ 508.418978][T11253] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1114'. [ 511.264342][T11287] FAULT_INJECTION: forcing a failure. [ 511.264342][T11287] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 511.315328][T11287] CPU: 0 UID: 0 PID: 11287 Comm: syz.2.1123 Tainted: G U 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(full) [ 511.315360][T11287] Tainted: [U]=USER [ 511.315367][T11287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 511.315380][T11287] Call Trace: [ 511.315386][T11287] [ 511.315394][T11287] dump_stack_lvl+0x16c/0x1f0 [ 511.315431][T11287] should_fail_ex+0x512/0x640 [ 511.315458][T11287] _copy_from_user+0x2e/0xd0 [ 511.315483][T11287] copy_msghdr_from_user+0x98/0x160 [ 511.315504][T11287] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 511.315528][T11287] ? kfree+0x24f/0x4d0 [ 511.315553][T11287] ? __pfx__kstrtoull+0x10/0x10 [ 511.315588][T11287] ___sys_sendmsg+0xfe/0x1d0 [ 511.315608][T11287] ? __pfx____sys_sendmsg+0x10/0x10 [ 511.315650][T11287] ? __pfx___might_resched+0x10/0x10 [ 511.315677][T11287] __sys_sendmmsg+0x200/0x420 [ 511.315699][T11287] ? __pfx___sys_sendmmsg+0x10/0x10 [ 511.315727][T11287] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 511.315758][T11287] ? fput+0x70/0xf0 [ 511.315778][T11287] ? ksys_write+0x1ac/0x250 [ 511.315807][T11287] ? __pfx_ksys_write+0x10/0x10 [ 511.315841][T11287] __x64_sys_sendmmsg+0x9c/0x100 [ 511.315860][T11287] ? lockdep_hardirqs_on+0x7c/0x110 [ 511.315891][T11287] do_syscall_64+0xcd/0x490 [ 511.315913][T11287] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.315934][T11287] RIP: 0033:0x7f86f1b8e929 [ 511.315949][T11287] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 511.315970][T11287] RSP: 002b:00007f86f2923038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 511.315989][T11287] RAX: ffffffffffffffda RBX: 00007f86f1db6080 RCX: 00007f86f1b8e929 [ 511.316002][T11287] RDX: 00000000000009a6 RSI: 0000000000000000 RDI: 0000000000000004 [ 511.316014][T11287] RBP: 00007f86f2923090 R08: 0000000000000000 R09: 0000000000000000 [ 511.316026][T11287] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000002 [ 511.316038][T11287] R13: 0000000000000001 R14: 00007f86f1db6080 R15: 00007ffe8650eb08 [ 511.316063][T11287] [ 511.862644][T11289] FAULT_INJECTION: forcing a failure. [ 511.862644][T11289] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 511.877529][T11289] CPU: 0 UID: 0 PID: 11289 Comm: syz.0.1124 Tainted: G U 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(full) [ 511.877559][T11289] Tainted: [U]=USER [ 511.877566][T11289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 511.877578][T11289] Call Trace: [ 511.877585][T11289] [ 511.877593][T11289] dump_stack_lvl+0x16c/0x1f0 [ 511.877629][T11289] should_fail_ex+0x512/0x640 [ 511.877655][T11289] _copy_from_user+0x2e/0xd0 [ 511.877681][T11289] snd_rawmidi_kernel_write1+0x50a/0x8a0 [ 511.877719][T11289] snd_rawmidi_write+0x26e/0xc10 [ 511.877754][T11289] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 511.877784][T11289] ? __pfx_default_wake_function+0x10/0x10 [ 511.877807][T11289] ? bpf_lsm_file_permission+0x9/0x10 [ 511.877830][T11289] ? security_file_permission+0x71/0x210 [ 511.877864][T11289] ? rw_verify_area+0xcf/0x680 [ 511.877892][T11289] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 511.877924][T11289] vfs_write+0x2a0/0x1150 [ 511.877958][T11289] ? __pfx_vfs_write+0x10/0x10 [ 511.877986][T11289] ? find_held_lock+0x2b/0x80 [ 511.878007][T11289] ? __fget_files+0x204/0x3c0 [ 511.878039][T11289] ? __fget_files+0x20e/0x3c0 [ 511.878073][T11289] ksys_write+0x1f8/0x250 [ 511.878102][T11289] ? __pfx_ksys_write+0x10/0x10 [ 511.878139][T11289] do_syscall_64+0xcd/0x490 [ 511.878160][T11289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.878199][T11289] RIP: 0033:0x7fbb04f8e929 [ 511.878216][T11289] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 511.878237][T11289] RSP: 002b:00007fbb05d28038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 511.878261][T11289] RAX: ffffffffffffffda RBX: 00007fbb051b5fa0 RCX: 00007fbb04f8e929 [ 511.878276][T11289] RDX: 000000100000a3d9 RSI: 0000200000000400 RDI: 0000000000000003 [ 511.878290][T11289] RBP: 00007fbb05d28090 R08: 0000000000000000 R09: 0000000000000000 [ 511.878303][T11289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 511.878327][T11289] R13: 0000000000000000 R14: 00007fbb051b5fa0 R15: 00007ffc33279898 [ 511.878351][T11289] [ 512.498785][T11306] sd 0:0:1:0: PR command failed: 1026 [ 512.521908][T11306] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 512.528653][T11306] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 513.496323][T11320] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1129'. [ 514.202922][T11337] Setting dangerous option i915.mitigations - tainting kernel [ 514.613665][T11344] ima: policy update failed [ 514.661717][ T30] audit: type=1802 audit(6044062135.040:14): pid=11344 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.1135" res=0 errno=0 [ 514.736286][T11344] FAULT_INJECTION: forcing a failure. [ 514.736286][T11344] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 514.875784][T11344] CPU: 0 UID: 0 PID: 11344 Comm: syz.1.1135 Tainted: G U 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(full) [ 514.875816][T11344] Tainted: [U]=USER [ 514.875823][T11344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 514.875836][T11344] Call Trace: [ 514.875842][T11344] [ 514.875850][T11344] dump_stack_lvl+0x16c/0x1f0 [ 514.875888][T11344] should_fail_ex+0x512/0x640 [ 514.875914][T11344] should_fail_alloc_page+0xe7/0x130 [ 514.875937][T11344] prepare_alloc_pages+0x3c2/0x610 [ 514.875967][T11344] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 514.876000][T11344] ? copy_splice_read+0x1a8/0xba0 [ 514.876033][T11344] ? stack_trace_save+0x8e/0xc0 [ 514.876055][T11344] ? __pfx_stack_trace_save+0x10/0x10 [ 514.876077][T11344] ? stack_depot_save_flags+0x28/0xa40 [ 514.876102][T11344] ? bpf_ksym_find+0x124/0x1c0 [ 514.876127][T11344] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 514.876158][T11344] ? kasan_save_stack+0x33/0x60 [ 514.876188][T11344] ? __kasan_kmalloc+0xaa/0xb0 [ 514.876217][T11344] ? copy_splice_read+0x1a8/0xba0 [ 514.876241][T11344] ? do_splice_read+0x285/0x370 [ 514.876264][T11344] ? splice_direct_to_actor+0x2a1/0xa30 [ 514.876290][T11344] ? do_splice_direct+0x174/0x240 [ 514.876314][T11344] ? do_sendfile+0xb06/0xe50 [ 514.876340][T11344] ? __x64_sys_sendfile64+0x1d8/0x220 [ 514.876359][T11344] ? do_syscall_64+0xcd/0x490 [ 514.876396][T11344] alloc_pages_bulk_noprof+0x71c/0x1410 [ 514.876436][T11344] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 514.876473][T11344] ? trace_kmalloc+0x2b/0xd0 [ 514.876493][T11344] ? __kmalloc_noprof+0x242/0x510 [ 514.876530][T11344] copy_splice_read+0x1e1/0xba0 [ 514.876561][T11344] ? __pfx_copy_splice_read+0x10/0x10 [ 514.876589][T11344] ? look_up_lock_class+0x6b/0x150 [ 514.876625][T11344] ? lockdep_init_map_type+0x5c/0x280 [ 514.876654][T11344] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 514.876685][T11344] ? __pfx_copy_splice_read+0x10/0x10 [ 514.876711][T11344] do_splice_read+0x285/0x370 [ 514.876739][T11344] splice_direct_to_actor+0x2a1/0xa30 [ 514.876767][T11344] ? __pfx_direct_splice_actor+0x10/0x10 [ 514.876799][T11344] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 514.876825][T11344] ? get_pid_task+0xfc/0x250 [ 514.876858][T11344] do_splice_direct+0x174/0x240 [ 514.876885][T11344] ? __pfx_do_splice_direct+0x10/0x10 [ 514.876912][T11344] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 514.876961][T11344] ? rw_verify_area+0xcf/0x680 [ 514.876990][T11344] do_sendfile+0xb06/0xe50 [ 514.877029][T11344] ? __pfx_do_sendfile+0x10/0x10 [ 514.877059][T11344] ? __fget_files+0x20e/0x3c0 [ 514.877095][T11344] __x64_sys_sendfile64+0x1d8/0x220 [ 514.877115][T11344] ? ksys_write+0x1ac/0x250 [ 514.877145][T11344] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 514.877175][T11344] do_syscall_64+0xcd/0x490 [ 514.877196][T11344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.877218][T11344] RIP: 0033:0x7fbda2d8e929 [ 514.877234][T11344] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 514.877254][T11344] RSP: 002b:00007fbda3b8d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 514.877274][T11344] RAX: ffffffffffffffda RBX: 00007fbda2fb5fa0 RCX: 00007fbda2d8e929 [ 514.877288][T11344] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 514.877300][T11344] RBP: 00007fbda3b8d090 R08: 0000000000000000 R09: 0000000000000000 [ 514.877313][T11344] R10: 000000007fffe000 R11: 0000000000000246 R12: 0000000000000001 [ 514.877326][T11344] R13: 0000000000000000 R14: 00007fbda2fb5fa0 R15: 00007fff33b10638 [ 514.877352][T11344] [ 515.709038][T11351] netlink: 330 bytes leftover after parsing attributes in process `syz.3.1136'. [ 515.945227][T11351] platform regulatory.0: loading /lib/firmware/regulatory.db.p7s failed with error -4 [ 515.974608][T11351] platform regulatory.0: Direct firmware load for regulatory.db.p7s failed with error -4 [ 516.041968][T11351] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db.p7s [ 516.057205][ T30] audit: type=1800 audit(6044062136.330:15): pid=11351 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1136" name="regulatory.db.p7s" dev="sda1" ino=449 res=0 errno=0 [ 516.265564][T11351] syz.3.1136 (11351) used greatest stack depth: 19800 bytes left [ 517.140926][T11369] sd 0:0:1:0: PR command failed: 1026 [ 517.261026][T11369] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 517.341625][T11372] netlink: 338 bytes leftover after parsing attributes in process `syz.3.1140'. [ 517.407336][T11366] Setting dangerous option i915.mitigations - tainting kernel [ 517.458070][T11372] netlink: 338 bytes leftover after parsing attributes in process `syz.3.1140'. [ 517.482442][T11369] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 517.631002][T11375] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1140'. [ 518.258787][T11391] sd 0:0:1:0: PR command failed: 1026 [ 518.392327][T11392] Setting dangerous option i915.mitigations - tainting kernel [ 518.467444][T11391] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 518.592646][T11391] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 519.019333][T11399] Setting dangerous option i915.mitigations - tainting kernel [ 519.499647][T11401] tipc: Started in network mode [ 519.541858][T11401] tipc: Node identity ee00, cluster identity 4711 [ 519.548302][T11401] tipc: Node number set to 60928 [ 521.801908][T11437] sd 0:0:1:0: PR command failed: 1026 [ 521.880666][T11439] Setting dangerous option i915.mitigations - tainting kernel [ 521.961901][T11437] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 522.075273][T11437] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 522.307803][T11447] Setting dangerous option i915.mitigations - tainting kernel [ 523.316015][T11458] can: request_module (can-proto-0) failed. [ 523.747117][ T30] audit: type=1800 audit(6044062144.140:16): pid=11468 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1163" name="dbroot" dev="configfs" ino=25979 res=0 errno=0 [ 524.056466][T11475] netlink: 338 bytes leftover after parsing attributes in process `syz.0.1166'. [ 524.104098][T11475] netlink: 338 bytes leftover after parsing attributes in process `syz.0.1166'. [ 524.524835][T11487] FAULT_INJECTION: forcing a failure. [ 524.524835][T11487] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 524.591478][T11487] CPU: 0 UID: 0 PID: 11487 Comm: syz.0.1167 Tainted: G U 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(full) [ 524.591513][T11487] Tainted: [U]=USER [ 524.591521][T11487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 524.591534][T11487] Call Trace: [ 524.591552][T11487] [ 524.591560][T11487] dump_stack_lvl+0x16c/0x1f0 [ 524.591597][T11487] should_fail_ex+0x512/0x640 [ 524.591623][T11487] _copy_from_user+0x2e/0xd0 [ 524.591648][T11487] copy_msghdr_from_user+0x98/0x160 [ 524.591669][T11487] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 524.591693][T11487] ? __pfx__kstrtoull+0x10/0x10 [ 524.591728][T11487] ___sys_sendmsg+0xfe/0x1d0 [ 524.591749][T11487] ? __pfx____sys_sendmsg+0x10/0x10 [ 524.591787][T11487] ? find_held_lock+0x2b/0x80 [ 524.591815][T11487] ? proc_fail_nth_write+0x9f/0x250 [ 524.591841][T11487] ? find_held_lock+0x2b/0x80 [ 524.591862][T11487] __sys_sendmmsg+0x200/0x420 [ 524.591885][T11487] ? __pfx___sys_sendmmsg+0x10/0x10 [ 524.591929][T11487] ? do_sys_openat2+0x157/0x1d0 [ 524.591954][T11487] ? __pfx_do_sys_openat2+0x10/0x10 [ 524.591991][T11487] ? ksys_write+0x1ac/0x250 [ 524.592022][T11487] ? __pfx_ksys_write+0x10/0x10 [ 524.592057][T11487] __x64_sys_sendmmsg+0x9c/0x100 [ 524.592078][T11487] ? lockdep_hardirqs_on+0x7c/0x110 [ 524.592112][T11487] do_syscall_64+0xcd/0x490 [ 524.592134][T11487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.592156][T11487] RIP: 0033:0x7fbb04f8e929 [ 524.592172][T11487] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 524.592192][T11487] RSP: 002b:00007fbb02dd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 524.592211][T11487] RAX: ffffffffffffffda RBX: 00007fbb051b6160 RCX: 00007fbb04f8e929 [ 524.592224][T11487] RDX: 00000000000009a6 RSI: 0000000000000000 RDI: 0000000000000003 [ 524.592237][T11487] RBP: 00007fbb02dd5090 R08: 0000000000000000 R09: 0000000000000000 [ 524.592250][T11487] R10: 0000000007000000 R11: 0000000000000246 R12: 0000000000000001 [ 524.592267][T11487] R13: 0000000000000000 R14: 00007fbb051b6160 R15: 00007ffc33279898 [ 524.592294][T11487] [ 525.461748][T11498] sd 0:0:1:0: PR command failed: 1026 [ 525.467290][T11498] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 525.504081][T11498] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 525.594510][T11493] Setting dangerous option i915.mitigations - tainting kernel [ 525.722361][T11501] mkiss: ax0: crc mode is auto. [ 526.349256][T11516] FAULT_INJECTION: forcing a failure. [ 526.349256][T11516] name failslab, interval 1, probability 0, space 0, times 0 [ 526.415550][T11516] CPU: 0 UID: 0 PID: 11516 Comm: syz.0.1172 Tainted: G U 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(full) [ 526.415583][T11516] Tainted: [U]=USER [ 526.415590][T11516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 526.415602][T11516] Call Trace: [ 526.415609][T11516] [ 526.415617][T11516] dump_stack_lvl+0x16c/0x1f0 [ 526.415654][T11516] should_fail_ex+0x512/0x640 [ 526.415677][T11516] ? fs_reclaim_acquire+0xae/0x150 [ 526.415704][T11516] ? tomoyo_encode2+0x100/0x3e0 [ 526.415723][T11516] should_failslab+0xc2/0x120 [ 526.415743][T11516] __kmalloc_noprof+0xd2/0x510 [ 526.415774][T11516] ? d_absolute_path+0x136/0x1a0 [ 526.415800][T11516] tomoyo_encode2+0x100/0x3e0 [ 526.415823][T11516] tomoyo_encode+0x29/0x50 [ 526.415842][T11516] tomoyo_realpath_from_path+0x18f/0x6e0 [ 526.415870][T11516] tomoyo_path_number_perm+0x245/0x580 [ 526.415900][T11516] ? tomoyo_path_number_perm+0x237/0x580 [ 526.415932][T11516] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 526.415964][T11516] ? find_held_lock+0x2b/0x80 [ 526.416006][T11516] ? find_held_lock+0x2b/0x80 [ 526.416025][T11516] ? hook_file_ioctl_common+0x145/0x410 [ 526.416060][T11516] ? __fget_files+0x20e/0x3c0 [ 526.416092][T11516] security_file_ioctl+0x9b/0x240 [ 526.416125][T11516] __x64_sys_ioctl+0xb7/0x210 [ 526.416152][T11516] do_syscall_64+0xcd/0x490 [ 526.416174][T11516] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 526.416195][T11516] RIP: 0033:0x7fbb04f8e929 [ 526.416210][T11516] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 526.416230][T11516] RSP: 002b:00007fbb05d28038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 526.416248][T11516] RAX: ffffffffffffffda RBX: 00007fbb051b5fa0 RCX: 00007fbb04f8e929 [ 526.416261][T11516] RDX: 0000200000000040 RSI: 0000000000005415 RDI: 0000000000000003 [ 526.416273][T11516] RBP: 00007fbb05d28090 R08: 0000000000000000 R09: 0000000000000000 [ 526.416286][T11516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 526.416297][T11516] R13: 0000000000000000 R14: 00007fbb051b5fa0 R15: 00007ffc33279898 [ 526.416322][T11516] [ 526.416338][T11516] ERROR: Out of memory at tomoyo_realpath_from_path. [ 528.240160][T11547] sd 0:0:1:0: PR command failed: 1026 [ 528.279916][T11547] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 528.346568][T11547] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 528.402846][T11548] Setting dangerous option i915.mitigations - tainting kernel [ 528.484033][ T30] audit: type=1326 audit(6044062148.880:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11550 comm="syz.1.1180" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbda2d8e929 code=0x0 [ 528.949230][T11557] netlink: 338 bytes leftover after parsing attributes in process `syz.2.1181'. [ 529.006426][T11557] netlink: 338 bytes leftover after parsing attributes in process `syz.2.1181'. [ 529.876775][T11568] FAULT_INJECTION: forcing a failure. [ 529.876775][T11568] name failslab, interval 1, probability 0, space 0, times 0 [ 529.966757][T11568] CPU: 0 UID: 0 PID: 11568 Comm: syz.3.1184 Tainted: G U 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(full) [ 529.966792][T11568] Tainted: [U]=USER [ 529.966799][T11568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 529.966811][T11568] Call Trace: [ 529.966818][T11568] [ 529.966826][T11568] dump_stack_lvl+0x16c/0x1f0 [ 529.966863][T11568] should_fail_ex+0x512/0x640 [ 529.966886][T11568] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 529.966928][T11568] should_failslab+0xc2/0x120 [ 529.966949][T11568] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 529.966980][T11568] ? d_instantiate+0x77/0x90 [ 529.966999][T11568] ? alloc_empty_file+0x55/0x1e0 [ 529.967025][T11568] alloc_empty_file+0x55/0x1e0 [ 529.967047][T11568] alloc_file_pseudo+0x13a/0x230 [ 529.967071][T11568] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 529.967094][T11568] ? alloc_fd+0x471/0x7d0 [ 529.967126][T11568] sock_alloc_file+0x50/0x210 [ 529.967150][T11568] __sys_socket+0x1c0/0x260 [ 529.967180][T11568] ? __pfx___sys_socket+0x10/0x10 [ 529.967208][T11568] ? xfd_validate_state+0x61/0x180 [ 529.967241][T11568] __x64_sys_socket+0x72/0xb0 [ 529.967267][T11568] ? lockdep_hardirqs_on+0x7c/0x110 [ 529.967300][T11568] do_syscall_64+0xcd/0x490 [ 529.967322][T11568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.967342][T11568] RIP: 0033:0x7fdd7c78e929 [ 529.967358][T11568] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 529.967379][T11568] RSP: 002b:00007fdd7d518038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 529.967398][T11568] RAX: ffffffffffffffda RBX: 00007fdd7c9b5fa0 RCX: 00007fdd7c78e929 [ 529.967412][T11568] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 529.967425][T11568] RBP: 00007fdd7c810b39 R08: 0000000000000000 R09: 0000000000000000 [ 529.967437][T11568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 529.967450][T11568] R13: 0000000000000000 R14: 00007fdd7c9b5fa0 R15: 00007ffe74848de8 [ 529.967475][T11568] [ 531.763946][T11597] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1190'. [ 531.860804][T11581] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 531.878618][T11581] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 531.885545][T11597] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1190'. [ 531.932588][T11581] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 531.951084][T11581] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 531.958251][T11597] nbd: must specify a size in bytes for the device [ 532.090963][T11600] netlink: 338 bytes leftover after parsing attributes in process `syz.0.1191'. [ 532.234097][T11604] netlink: 338 bytes leftover after parsing attributes in process `syz.0.1191'. [ 532.294659][T11603] netlink: 338 bytes leftover after parsing attributes in process `syz.3.1192'. [ 532.351096][T11606] netlink: 338 bytes leftover after parsing attributes in process `syz.3.1192'. [ 532.404328][T11603] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1192'. [ 532.833814][ T30] audit: type=1800 audit(6044062153.230:18): pid=11613 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1196" name="dbroot" dev="configfs" ino=26468 res=0 errno=0 [ 533.252008][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 533.806718][T11624] sd 0:0:1:0: PR command failed: 1026 [ 533.847059][T11624] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 533.891289][T11624] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 533.900686][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 533.947945][T11622] Setting dangerous option i915.mitigations - tainting kernel [ 533.971904][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 533.977948][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 533.998767][T11628] FAULT_INJECTION: forcing a failure. [ 533.998767][T11628] name failslab, interval 1, probability 0, space 0, times 0 [ 534.109487][T11628] CPU: 0 UID: 0 PID: 11628 Comm: syz.0.1199 Tainted: G U 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(full) [ 534.109528][T11628] Tainted: [U]=USER [ 534.109541][T11628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 534.109555][T11628] Call Trace: [ 534.109563][T11628] [ 534.109573][T11628] dump_stack_lvl+0x16c/0x1f0 [ 534.109617][T11628] should_fail_ex+0x512/0x640 [ 534.109643][T11628] ? __kmalloc_noprof+0xbf/0x510 [ 534.109683][T11628] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 534.109719][T11628] should_failslab+0xc2/0x120 [ 534.109743][T11628] __kmalloc_noprof+0xd2/0x510 [ 534.109779][T11628] ? __pfx___mutex_lock+0x10/0x10 [ 534.109807][T11628] genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 534.109850][T11628] genl_start+0x18f/0x980 [ 534.109885][T11628] __netlink_dump_start+0x60e/0x990 [ 534.109918][T11628] genl_family_rcv_msg_dumpit+0x1e2/0x2e0 [ 534.109955][T11628] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 534.110000][T11628] ? find_held_lock+0x2b/0x80 [ 534.110025][T11628] ? __pfx_genl_get_cmd+0x10/0x10 [ 534.110061][T11628] ? __pfx_genl_start+0x10/0x10 [ 534.110085][T11628] ? __pfx_genl_dumpit+0x10/0x10 [ 534.110109][T11628] ? __pfx_genl_done+0x10/0x10 [ 534.110139][T11628] ? __radix_tree_lookup+0x21f/0x2c0 [ 534.110172][T11628] genl_rcv_msg+0x46e/0x800 [ 534.110202][T11628] ? __pfx_genl_rcv_msg+0x10/0x10 [ 534.110229][T11628] ? __pfx_devlink_nl_sb_tc_pool_bind_get_dumpit+0x10/0x10 [ 534.110270][T11628] netlink_rcv_skb+0x155/0x420 [ 534.110294][T11628] ? __pfx_genl_rcv_msg+0x10/0x10 [ 534.110322][T11628] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 534.110356][T11628] ? netlink_deliver_tap+0x1ae/0xd30 [ 534.110382][T11628] genl_rcv+0x28/0x40 [ 534.110406][T11628] netlink_unicast+0x53d/0x7f0 [ 534.110432][T11628] ? __pfx_netlink_unicast+0x10/0x10 [ 534.110463][T11628] netlink_sendmsg+0x8d1/0xdd0 [ 534.110490][T11628] ? __pfx_netlink_sendmsg+0x10/0x10 [ 534.110523][T11628] ____sys_sendmsg+0xa95/0xc70 [ 534.110557][T11628] ? copy_msghdr_from_user+0x10a/0x160 [ 534.110577][T11628] ? __pfx_____sys_sendmsg+0x10/0x10 [ 534.110614][T11628] ___sys_sendmsg+0x134/0x1d0 [ 534.110635][T11628] ? __pfx____sys_sendmsg+0x10/0x10 [ 534.110652][T11628] ? __lock_acquire+0x622/0x1c90 [ 534.110709][T11628] __sys_sendmsg+0x16d/0x220 [ 534.110729][T11628] ? __pfx___sys_sendmsg+0x10/0x10 [ 534.110765][T11628] do_syscall_64+0xcd/0x490 [ 534.110788][T11628] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.110809][T11628] RIP: 0033:0x7fbb04f8e929 [ 534.110824][T11628] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 534.110844][T11628] RSP: 002b:00007fbb05d28038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 534.110863][T11628] RAX: ffffffffffffffda RBX: 00007fbb051b5fa0 RCX: 00007fbb04f8e929 [ 534.110877][T11628] RDX: 0000000000004000 RSI: 0000200000000700 RDI: 0000000000000004 [ 534.110889][T11628] RBP: 00007fbb05d28090 R08: 0000000000000000 R09: 0000000000000000 [ 534.110901][T11628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 534.110913][T11628] R13: 0000000000000000 R14: 00007fbb051b5fa0 R15: 00007ffc33279898 [ 534.110939][T11628] [ 535.461923][T11644] sd 0:0:1:0: PR command failed: 1026 [ 535.622190][T11644] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 535.628943][T11644] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 535.742933][T11649] netlink: 338 bytes leftover after parsing attributes in process `syz.1.1204'. [ 535.767125][T11641] Setting dangerous option i915.mitigations - tainting kernel [ 535.796058][T11649] netlink: 338 bytes leftover after parsing attributes in process `syz.1.1204'. [ 536.103292][ T30] audit: type=1800 audit(6044062156.440:19): pid=11657 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1205" name="dbroot" dev="configfs" ino=26558 res=0 errno=0 [ 536.299384][T11659] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1206'. [ 536.939760][T11673] sd 0:0:1:0: PR command failed: 1026 [ 536.976216][T11673] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 537.037694][T11677] Setting dangerous option i915.mitigations - tainting kernel [ 537.102193][T11673] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 537.122427][T11665] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1207'. [ 537.830333][T11687] netlink: 338 bytes leftover after parsing attributes in process `syz.2.1214'. [ 537.864654][T11691] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1214'. [ 538.011038][T11689] netlink: 338 bytes leftover after parsing attributes in process `syz.2.1214'. [ 538.482498][T11701] sd 0:0:1:0: PR command failed: 1026 [ 538.598104][T11701] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 538.786965][T11700] Setting dangerous option i915.mitigations - tainting kernel [ 538.827892][T11701] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 543.108391][T11757] netlink: 338 bytes leftover after parsing attributes in process `syz.0.1228'. [ 543.215614][T11759] netlink: 338 bytes leftover after parsing attributes in process `syz.0.1228'. [ 543.888406][T11772] sd 0:0:1:0: PR command failed: 1026 [ 543.999121][T11772] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 544.046408][T11773] Setting dangerous option i915.mitigations - tainting kernel [ 544.108210][T11772] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 546.011880][T11797] sd 0:0:1:0: PR command failed: 1026 [ 546.033612][T11797] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 546.040356][T11797] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 546.125775][T11795] Setting dangerous option i915.mitigations - tainting kernel [ 546.874856][T11808] FAULT_INJECTION: forcing a failure. [ 546.874856][T11808] name failslab, interval 1, probability 0, space 0, times 0 [ 546.965101][T11808] CPU: 0 UID: 0 PID: 11808 Comm: syz.2.1238 Tainted: G U 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(full) [ 546.965133][T11808] Tainted: [U]=USER [ 546.965140][T11808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 546.965152][T11808] Call Trace: [ 546.965159][T11808] [ 546.965166][T11808] dump_stack_lvl+0x16c/0x1f0 [ 546.965204][T11808] should_fail_ex+0x512/0x640 [ 546.965231][T11808] should_failslab+0xc2/0x120 [ 546.965251][T11808] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 546.965284][T11808] ? skb_clone+0x190/0x3f0 [ 546.965307][T11808] skb_clone+0x190/0x3f0 [ 546.965327][T11808] netlink_deliver_tap+0xabd/0xd30 [ 546.965355][T11808] netlink_unicast+0x6b2/0x7f0 [ 546.965382][T11808] ? __pfx_netlink_unicast+0x10/0x10 [ 546.965405][T11808] ? genl_rcv_msg+0x4bb/0x800 [ 546.965438][T11808] netlink_ack+0x696/0xb80 [ 546.965469][T11808] netlink_rcv_skb+0x332/0x420 [ 546.965493][T11808] ? __pfx_genl_rcv_msg+0x10/0x10 [ 546.965521][T11808] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 546.965564][T11808] ? netlink_deliver_tap+0x1ae/0xd30 [ 546.965590][T11808] genl_rcv+0x28/0x40 [ 546.965615][T11808] netlink_unicast+0x53d/0x7f0 [ 546.965642][T11808] ? __pfx_netlink_unicast+0x10/0x10 [ 546.965673][T11808] netlink_sendmsg+0x8d1/0xdd0 [ 546.965702][T11808] ? __pfx_netlink_sendmsg+0x10/0x10 [ 546.965736][T11808] ____sys_sendmsg+0xa95/0xc70 [ 546.965762][T11808] ? copy_msghdr_from_user+0x10a/0x160 [ 546.965782][T11808] ? __pfx_____sys_sendmsg+0x10/0x10 [ 546.965819][T11808] ___sys_sendmsg+0x134/0x1d0 [ 546.965841][T11808] ? __pfx____sys_sendmsg+0x10/0x10 [ 546.965858][T11808] ? __lock_acquire+0x622/0x1c90 [ 546.965916][T11808] __sys_sendmsg+0x16d/0x220 [ 546.965935][T11808] ? __pfx___sys_sendmsg+0x10/0x10 [ 546.965972][T11808] do_syscall_64+0xcd/0x490 [ 546.965994][T11808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.966014][T11808] RIP: 0033:0x7f86f1b8e929 [ 546.966029][T11808] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 546.966050][T11808] RSP: 002b:00007f86f2944038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 546.966068][T11808] RAX: ffffffffffffffda RBX: 00007f86f1db5fa0 RCX: 00007f86f1b8e929 [ 546.966081][T11808] RDX: 0000000000008014 RSI: 00002000000001c0 RDI: 0000000000000003 [ 546.966093][T11808] RBP: 00007f86f2944090 R08: 0000000000000000 R09: 0000000000000000 [ 546.966105][T11808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 546.966117][T11808] R13: 0000000000000000 R14: 00007f86f1db5fa0 R15: 00007ffe8650eb08 [ 546.966141][T11808] [ 547.736183][T11813] netlink: 338 bytes leftover after parsing attributes in process `syz.2.1239'. [ 547.765966][T11814] netlink: 338 bytes leftover after parsing attributes in process `syz.2.1239'. [ 548.151902][T11822] sd 0:0:1:0: PR command failed: 1026 [ 548.158290][T11822] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 548.224046][T11822] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 548.254428][T11817] Setting dangerous option i915.mitigations - tainting kernel [ 550.144240][T11853] netlink: 338 bytes leftover after parsing attributes in process `syz.3.1249'. [ 550.182399][T11853] netlink: 338 bytes leftover after parsing attributes in process `syz.3.1249'. [ 552.020994][T11875] sd 0:0:1:0: PR command failed: 1026 [ 552.114411][T11875] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 552.121157][T11875] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 552.440966][T11871] Setting dangerous option i915.mitigations - tainting kernel [ 553.560595][T11897] netlink: 338 bytes leftover after parsing attributes in process `syz.0.1260'. [ 553.599640][T11897] netlink: 338 bytes leftover after parsing attributes in process `syz.0.1260'. [ 554.546071][T11909] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1263'. [ 554.709085][T11909] team0: Port device team_slave_0 removed [ 555.235324][T11917] sd 0:0:1:0: PR command failed: 1026 [ 555.240756][T11917] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 555.391979][T11914] Setting dangerous option i915.mitigations - tainting kernel [ 555.453771][T11917] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 556.038652][T11922] Setting dangerous option i915.mitigations - tainting kernel [ 556.761329][T11925] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1266'. [ 557.073612][T11937] netlink: 338 bytes leftover after parsing attributes in process `syz.0.1270'. [ 557.130897][T11937] netlink: 338 bytes leftover after parsing attributes in process `syz.0.1270'. [ 557.653890][T11954] Setting dangerous option i915.mitigations - tainting kernel [ 557.911272][ T9] Process accounting resumed [ 558.083224][ T5898] Process accounting resumed [ 558.440416][T11963] input: f¬ as /devices/virtual/input/input14 [ 558.500169][T11967] FAULT_INJECTION: forcing a failure. [ 558.500169][T11967] name failslab, interval 1, probability 0, space 0, times 0 [ 558.609424][T11967] CPU: 0 UID: 0 PID: 11967 Comm: syz.2.1268 Tainted: G U 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(full) [ 558.609463][T11967] Tainted: [U]=USER [ 558.609471][T11967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 558.609485][T11967] Call Trace: [ 558.609493][T11967] [ 558.609502][T11967] dump_stack_lvl+0x16c/0x1f0 [ 558.609545][T11967] should_fail_ex+0x512/0x640 [ 558.609576][T11967] should_failslab+0xc2/0x120 [ 558.609600][T11967] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 558.609639][T11967] ? skb_clone+0x190/0x3f0 [ 558.609666][T11967] skb_clone+0x190/0x3f0 [ 558.609691][T11967] netlink_deliver_tap+0xabd/0xd30 [ 558.609725][T11967] netlink_unicast+0x5df/0x7f0 [ 558.609757][T11967] ? __pfx_netlink_unicast+0x10/0x10 [ 558.609784][T11967] ? __build_skb_around+0x278/0x3b0 [ 558.609818][T11967] ? is_vmalloc_addr+0x86/0xa0 [ 558.609858][T11967] netlink_sendmsg+0x8d1/0xdd0 [ 558.609892][T11967] ? __pfx_netlink_sendmsg+0x10/0x10 [ 558.609932][T11967] ____sys_sendmsg+0xa95/0xc70 [ 558.609965][T11967] ? __pfx_____sys_sendmsg+0x10/0x10 [ 558.610001][T11967] ? __pfx__kstrtoull+0x10/0x10 [ 558.610059][T11967] ___sys_sendmsg+0x134/0x1d0 [ 558.610092][T11967] ? __pfx____sys_sendmsg+0x10/0x10 [ 558.610123][T11967] ? find_held_lock+0x2b/0x80 [ 558.610158][T11967] __sys_sendmmsg+0x200/0x420 [ 558.610181][T11967] ? __pfx___sys_sendmmsg+0x10/0x10 [ 558.610209][T11967] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 558.610240][T11967] ? fput+0x70/0xf0 [ 558.610260][T11967] ? ksys_write+0x1ac/0x250 [ 558.610289][T11967] ? __pfx_ksys_write+0x10/0x10 [ 558.610322][T11967] __x64_sys_sendmmsg+0x9c/0x100 [ 558.610341][T11967] ? lockdep_hardirqs_on+0x7c/0x110 [ 558.610373][T11967] do_syscall_64+0xcd/0x490 [ 558.610394][T11967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.610415][T11967] RIP: 0033:0x7f86f1b8e929 [ 558.610430][T11967] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 558.610449][T11967] RSP: 002b:00007f86f2944038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 558.610471][T11967] RAX: ffffffffffffffda RBX: 00007f86f1db5fa0 RCX: 00007f86f1b8e929 [ 558.610485][T11967] RDX: 0000000000000007 RSI: 0000200000000200 RDI: 0000000000000005 [ 558.610498][T11967] RBP: 00007f86f2944090 R08: 0000000000000000 R09: 0000000000000000 [ 558.610511][T11967] R10: 0000000000004008 R11: 0000000000000246 R12: 0000000000000001 [ 558.610523][T11967] R13: 0000000000000000 R14: 00007f86f1db5fa0 R15: 00007ffe8650eb08 [ 558.610548][T11967] [ 559.468082][T11980] netlink: 338 bytes leftover after parsing attributes in process `syz.0.1280'. [ 559.494742][T11980] netlink: 338 bytes leftover after parsing attributes in process `syz.0.1280'. [ 559.765011][T11986] FAULT_INJECTION: forcing a failure. [ 559.765011][T11986] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 559.782848][T11985] ptp ptp0: max value is 20 [ 559.834212][T11986] CPU: 0 UID: 0 PID: 11986 Comm: syz.0.1281 Tainted: G U 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(full) [ 559.834244][T11986] Tainted: [U]=USER [ 559.834251][T11986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 559.834263][T11986] Call Trace: [ 559.834270][T11986] [ 559.834277][T11986] dump_stack_lvl+0x16c/0x1f0 [ 559.834315][T11986] should_fail_ex+0x512/0x640 [ 559.834341][T11986] _copy_to_user+0x32/0xd0 [ 559.834368][T11986] simple_read_from_buffer+0xcb/0x170 [ 559.834397][T11986] proc_fail_nth_read+0x197/0x270 [ 559.834423][T11986] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 559.834449][T11986] ? rw_verify_area+0xcf/0x680 [ 559.834476][T11986] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 559.834500][T11986] vfs_read+0x1e1/0xc60 [ 559.834532][T11986] ? __pfx___mutex_lock+0x10/0x10 [ 559.834552][T11986] ? __pfx_vfs_read+0x10/0x10 [ 559.834588][T11986] ? __fget_files+0x20e/0x3c0 [ 559.834623][T11986] ksys_read+0x12a/0x250 [ 559.834662][T11986] ? __pfx_ksys_read+0x10/0x10 [ 559.834698][T11986] do_syscall_64+0xcd/0x490 [ 559.834719][T11986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 559.834740][T11986] RIP: 0033:0x7fbb04f8d33c [ 559.834755][T11986] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 559.834776][T11986] RSP: 002b:00007fbb05d28030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 559.834795][T11986] RAX: ffffffffffffffda RBX: 00007fbb051b5fa0 RCX: 00007fbb04f8d33c [ 559.834809][T11986] RDX: 000000000000000f RSI: 00007fbb05d280a0 RDI: 0000000000000004 [ 559.834821][T11986] RBP: 00007fbb05d28090 R08: 0000000000000000 R09: 0000000000000000 [ 559.834834][T11986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 559.834846][T11986] R13: 0000000000000000 R14: 00007fbb051b5fa0 R15: 00007ffc33279898 [ 559.834872][T11986] [ 560.663884][T12000] sd 0:0:1:0: PR command failed: 1026 [ 560.739398][T12000] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 560.807549][T11996] Setting dangerous option i915.mitigations - tainting kernel [ 560.857039][T12000] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 561.483890][T12010] Setting dangerous option i915.mitigations - tainting kernel [ 561.674587][T12008] netlink: 338 bytes leftover after parsing attributes in process `syz.1.1286'. [ 561.808621][T12013] netlink: 338 bytes leftover after parsing attributes in process `syz.1.1286'. [ 562.776250][T12024] netlink: 338 bytes leftover after parsing attributes in process `syz.1.1289'. [ 562.813963][T12024] netlink: 338 bytes leftover after parsing attributes in process `syz.1.1289'. [ 563.877504][T12040] netlink: 338 bytes leftover after parsing attributes in process `syz.3.1296'. [ 563.967890][T12044] netlink: 338 bytes leftover after parsing attributes in process `syz.3.1296'. [ 564.443172][T12057] netlink: 338 bytes leftover after parsing attributes in process `syz.3.1300'. [ 564.523849][T12058] netlink: 338 bytes leftover after parsing attributes in process `syz.3.1300'. [ 565.417168][T12064] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1302'. [ 565.507392][T12064] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 565.575594][T12064] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 565.706454][T12064] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 565.741703][T12081] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1306'. [ 565.771266][T12064] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 565.790911][T12081] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1306'. [ 565.814044][T12085] FAULT_INJECTION: forcing a failure. [ 565.814044][T12085] name failslab, interval 1, probability 0, space 0, times 0 [ 565.826901][T12085] CPU: 0 UID: 0 PID: 12085 Comm: syz.2.1307 Tainted: G U 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(full) [ 565.826932][T12085] Tainted: [U]=USER [ 565.826939][T12085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 565.826951][T12085] Call Trace: [ 565.826957][T12085] [ 565.826965][T12085] dump_stack_lvl+0x16c/0x1f0 [ 565.827002][T12085] should_fail_ex+0x512/0x640 [ 565.827028][T12085] should_failslab+0xc2/0x120 [ 565.827048][T12085] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 565.827080][T12085] ? __inet_hash_connect+0x7cb/0x1e30 [ 565.827109][T12085] __inet_hash_connect+0x7cb/0x1e30 [ 565.827135][T12085] ? __pfx___inet_check_established+0x10/0x10 [ 565.827173][T12085] ? __pfx___inet_hash_connect+0x10/0x10 [ 565.827199][T12085] ? inet_hash_connect+0x125/0x260 [ 565.827221][T12085] tcp_v4_connect+0xe1b/0x1bd0 [ 565.827258][T12085] ? __pfx_tcp_v4_connect+0x10/0x10 [ 565.827287][T12085] ? __lock_acquire+0xb8a/0x1c90 [ 565.827318][T12085] __inet_stream_connect+0x3c8/0x1020 [ 565.827355][T12085] ? __pfx___inet_stream_connect+0x10/0x10 [ 565.827385][T12085] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 565.827419][T12085] ? __pfx_inet_stream_connect+0x10/0x10 [ 565.827450][T12085] ? __local_bh_enable_ip+0xa4/0x120 [ 565.827475][T12085] ? __pfx_inet_stream_connect+0x10/0x10 [ 565.827504][T12085] inet_stream_connect+0x57/0xa0 [ 565.827536][T12085] __sys_connect_file+0x13e/0x1a0 [ 565.827568][T12085] __sys_connect+0x13b/0x160 [ 565.827596][T12085] ? __pfx___sys_connect+0x10/0x10 [ 565.827634][T12085] ? __pfx_ksys_write+0x10/0x10 [ 565.827669][T12085] __x64_sys_connect+0x72/0xb0 [ 565.827696][T12085] ? lockdep_hardirqs_on+0x7c/0x110 [ 565.827728][T12085] do_syscall_64+0xcd/0x490 [ 565.827749][T12085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 565.827769][T12085] RIP: 0033:0x7f86f1b8e929 [ 565.827785][T12085] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 565.827805][T12085] RSP: 002b:00007f86f2923038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 565.827824][T12085] RAX: ffffffffffffffda RBX: 00007f86f1db6080 RCX: 00007f86f1b8e929 [ 565.827838][T12085] RDX: 0000000000000054 RSI: 0000200000000080 RDI: 0000000000000003 [ 565.827850][T12085] RBP: 00007f86f2923090 R08: 0000000000000000 R09: 0000000000000000 [ 565.827863][T12085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 565.827876][T12085] R13: 0000000000000000 R14: 00007f86f1db6080 R15: 00007ffe8650eb08 [ 565.827901][T12085] [ 566.688648][T12089] Format for adding new device is "id port_count num_queues" (uint uint unit). [ 567.111854][T12101] sd 0:0:1:0: PR command failed: 1026 [ 567.117292][T12101] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 567.195276][T12096] Setting dangerous option i915.mitigations - tainting kernel [ 567.312224][T12101] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 567.896055][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 567.902905][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 570.163430][T12147] __nla_validate_parse: 2 callbacks suppressed [ 570.163446][T12147] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1318'. [ 570.883714][T12151] Setting dangerous option i915.mitigations - tainting kernel [ 571.473231][T12166] FAULT_INJECTION: forcing a failure. [ 571.473231][T12166] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 571.616761][T12171] sd 0:0:1:0: PR command failed: 1026 [ 571.782314][T12171] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 571.789064][T12171] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 571.864932][T12166] CPU: 0 UID: 0 PID: 12166 Comm: syz.0.1323 Tainted: G U 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(full) [ 571.864964][T12166] Tainted: [U]=USER [ 571.864971][T12166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 571.864984][T12166] Call Trace: [ 571.864990][T12166] [ 571.864998][T12166] dump_stack_lvl+0x16c/0x1f0 [ 571.865036][T12166] should_fail_ex+0x512/0x640 [ 571.865063][T12166] _copy_to_user+0x32/0xd0 [ 571.865090][T12166] simple_read_from_buffer+0xcb/0x170 [ 571.865120][T12166] proc_fail_nth_read+0x197/0x270 [ 571.865145][T12166] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 571.865171][T12166] ? rw_verify_area+0xcf/0x680 [ 571.865198][T12166] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 571.865223][T12166] vfs_read+0x1e1/0xc60 [ 571.865255][T12166] ? __pfx___mutex_lock+0x10/0x10 [ 571.865274][T12166] ? __pfx_vfs_read+0x10/0x10 [ 571.865310][T12166] ? __fget_files+0x20e/0x3c0 [ 571.865346][T12166] ksys_read+0x12a/0x250 [ 571.865374][T12166] ? __pfx_ksys_read+0x10/0x10 [ 571.865410][T12166] do_syscall_64+0xcd/0x490 [ 571.865432][T12166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.865453][T12166] RIP: 0033:0x7fbb04f8d33c [ 571.865468][T12166] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 571.865488][T12166] RSP: 002b:00007fbb05d28030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 571.865507][T12166] RAX: ffffffffffffffda RBX: 00007fbb051b5fa0 RCX: 00007fbb04f8d33c [ 571.865521][T12166] RDX: 000000000000000f RSI: 00007fbb05d280a0 RDI: 0000000000000004 [ 571.865534][T12166] RBP: 00007fbb05d28090 R08: 0000000000000000 R09: 0000000000000000 [ 571.865547][T12166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 571.865560][T12166] R13: 0000000000000000 R14: 00007fbb051b5fa0 R15: 00007ffc33279898 [ 571.865585][T12166] [ 572.058078][ C0] vkms_vblank_simulate: vblank timer overrun [ 572.075964][T12175] netlink: 338 bytes leftover after parsing attributes in process `syz.1.1326'. [ 572.086312][T12175] netlink: 338 bytes leftover after parsing attributes in process `syz.1.1326'. [ 572.121309][T12168] Setting dangerous option i915.mitigations - tainting kernel [ 572.911072][T12183] netlink: 296 bytes leftover after parsing attributes in process `syz.3.1325'. [ 574.481927][T12211] sd 0:0:1:0: PR command failed: 1026 [ 574.487455][T12211] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 574.620620][T12208] Setting dangerous option i915.mitigations - tainting kernel [ 574.738593][T12211] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 575.491041][T12221] netlink: 338 bytes leftover after parsing attributes in process `syz.3.1336'. [ 575.619425][T12222] netlink: 338 bytes leftover after parsing attributes in process `syz.3.1336'. [ 575.935337][T12226] Setting dangerous option i915.mitigations - tainting kernel [ 576.737110][T12241] FAULT_INJECTION: forcing a failure. [ 576.737110][T12241] name fail_futex, interval 1, probability 0, space 0, times 0 [ 576.965448][T12241] CPU: 0 UID: 0 PID: 12241 Comm: syz.0.1339 Tainted: G U 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(full) [ 576.965487][T12241] Tainted: [U]=USER [ 576.965494][T12241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 576.965511][T12241] Call Trace: [ 576.965518][T12241] [ 576.965527][T12241] dump_stack_lvl+0x16c/0x1f0 [ 576.965567][T12241] should_fail_ex+0x512/0x640 [ 576.965596][T12241] get_futex_key+0x1d0/0x1540 [ 576.965624][T12241] ? __pfx_get_futex_key+0x10/0x10 [ 576.965650][T12241] ? wake_up_q+0xb0/0x160 [ 576.965669][T12241] ? lockdep_hardirqs_on+0x7c/0x110 [ 576.965708][T12241] futex_wait_setup+0x9d/0x550 [ 576.965746][T12241] __futex_wait+0x194/0x2f0 [ 576.965778][T12241] ? __pfx___futex_wait+0x10/0x10 [ 576.965809][T12241] ? do_user_addr_fault+0x829/0x1370 [ 576.965843][T12241] ? __pfx_futex_wake_mark+0x10/0x10 [ 576.965889][T12241] futex_wait+0xe8/0x380 [ 576.965920][T12241] ? __pfx_futex_wait+0x10/0x10 [ 576.965959][T12241] ? io_uring_setup+0x1789/0x2080 [ 576.965985][T12241] do_futex+0x229/0x350 [ 576.966011][T12241] ? __pfx_do_futex+0x10/0x10 [ 576.966037][T12241] ? find_held_lock+0x2b/0x80 [ 576.966059][T12241] ? handle_mm_fault+0x2ab/0xd10 [ 576.966091][T12241] __x64_sys_futex+0x1e0/0x4c0 [ 576.966122][T12241] ? __pfx___x64_sys_futex+0x10/0x10 [ 576.966149][T12241] ? xfd_validate_state+0x61/0x180 [ 576.966186][T12241] do_syscall_64+0xcd/0x490 [ 576.966209][T12241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.966231][T12241] RIP: 0033:0x7fbb04f8e929 [ 576.966248][T12241] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 576.966278][T12241] RSP: 002b:00007fbb02df60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 576.966299][T12241] RAX: ffffffffffffffda RBX: 00007fbb051b6088 RCX: 00007fbb04f8e929 [ 576.966313][T12241] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fbb051b6088 [ 576.966327][T12241] RBP: 00007fbb051b6080 R08: 0000000000000000 R09: 0000000000000000 [ 576.966340][T12241] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbb051b608c [ 576.966354][T12241] R13: 0000000000000000 R14: 00007ffc332797b0 R15: 00007ffc33279898 [ 576.966381][T12241] [ 578.057142][T12270] sd 0:0:1:0: PR command failed: 1026 [ 578.065287][T12270] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 578.144106][T12270] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 578.263228][T12259] ================================================================== [ 578.271322][T12259] BUG: KASAN: slab-out-of-bounds in afs_proc_addr_prefs_write+0x13a9/0x15f0 [ 578.280022][T12259] Read of size 1 at addr ffff888032fb7d47 by task syz.3.1341/12259 [ 578.287923][T12259] [ 578.290251][T12259] CPU: 0 UID: 0 PID: 12259 Comm: syz.3.1341 Tainted: G U 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(full) [ 578.290283][T12259] Tainted: [U]=USER [ 578.290290][T12259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 578.290303][T12259] Call Trace: [ 578.290311][T12259] [ 578.290319][T12259] dump_stack_lvl+0x116/0x1f0 [ 578.290355][T12259] print_report+0xcd/0x680 [ 578.290375][T12259] ? __virt_addr_valid+0x81/0x610 [ 578.290396][T12259] ? __phys_addr+0xe8/0x180 [ 578.290417][T12259] ? afs_proc_addr_prefs_write+0x13a9/0x15f0 [ 578.290440][T12259] kasan_report+0xe0/0x110 [ 578.290459][T12259] ? afs_proc_addr_prefs_write+0x13a9/0x15f0 [ 578.290485][T12259] afs_proc_addr_prefs_write+0x13a9/0x15f0 [ 578.290509][T12259] ? __lock_acquire+0xb8a/0x1c90 [ 578.290539][T12259] ? __pfx_afs_proc_addr_prefs_write+0x10/0x10 [ 578.290565][T12259] ? find_held_lock+0x2b/0x80 [ 578.290584][T12259] ? __might_fault+0xe3/0x190 [ 578.290614][T12259] ? __might_fault+0xe3/0x190 [ 578.290643][T12259] ? __might_fault+0x13b/0x190 [ 578.290678][T12259] ? proc_simple_write+0x114/0x1b0 [ 578.290699][T12259] proc_simple_write+0x114/0x1b0 [ 578.290720][T12259] ? __pfx_proc_simple_write+0x10/0x10 [ 578.290742][T12259] proc_reg_write+0x23d/0x330 [ 578.290773][T12259] ? __pfx_proc_reg_write+0x10/0x10 [ 578.290803][T12259] vfs_writev+0x5df/0xde0 [ 578.290830][T12259] ? __pfx___mutex_trylock_common+0x10/0x10 [ 578.290862][T12259] ? __pfx_vfs_writev+0x10/0x10 [ 578.290889][T12259] ? __mutex_lock+0x1ca/0xb90 [ 578.290908][T12259] ? kmem_cache_free+0x2d1/0x4d0 [ 578.290940][T12259] ? __pfx___mutex_lock+0x10/0x10 [ 578.290964][T12259] ? __fget_files+0x20e/0x3c0 [ 578.290995][T12259] ? do_writev+0x132/0x340 [ 578.291021][T12259] do_writev+0x132/0x340 [ 578.291048][T12259] ? __pfx_do_writev+0x10/0x10 [ 578.291080][T12259] do_syscall_64+0xcd/0x490 [ 578.291100][T12259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.291122][T12259] RIP: 0033:0x7fdd7c78e929 [ 578.291138][T12259] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 578.291159][T12259] RSP: 002b:00007fdd7a5d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 578.291183][T12259] RAX: ffffffffffffffda RBX: 00007fdd7c9b6160 RCX: 00007fdd7c78e929 [ 578.291197][T12259] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 000000000000000b [ 578.291210][T12259] RBP: 00007fdd7c810b39 R08: 0000000000000000 R09: 0000000000000000 [ 578.291223][T12259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 578.291236][T12259] R13: 0000000000000000 R14: 00007fdd7c9b6160 R15: 00007ffe74848de8 [ 578.291257][T12259] [ 578.291264][T12259] [ 578.555896][T12259] Allocated by task 12259: [ 578.560307][T12259] kasan_save_stack+0x33/0x60 [ 578.565008][T12259] kasan_save_track+0x14/0x30 [ 578.569698][T12259] __kasan_kmalloc+0xaa/0xb0 [ 578.574312][T12259] __kmalloc_node_track_caller_noprof+0x221/0x510 [ 578.580764][T12259] memdup_user_nul+0x2b/0x120 [ 578.585443][T12259] proc_simple_write+0xc7/0x1b0 [ 578.590296][T12259] proc_reg_write+0x23d/0x330 [ 578.594993][T12259] vfs_writev+0x5df/0xde0 [ 578.599333][T12259] do_writev+0x132/0x340 [ 578.603592][T12259] do_syscall_64+0xcd/0x490 [ 578.608114][T12259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.614013][T12259] [ 578.616332][T12259] The buggy address belongs to the object at ffff888032fb7d40 [ 578.616332][T12259] which belongs to the cache kmalloc-8 of size 8 [ 578.630048][T12259] The buggy address is located 0 bytes to the right of [ 578.630048][T12259] allocated 7-byte region [ffff888032fb7d40, ffff888032fb7d47) [ 578.644361][T12259] [ 578.646682][T12259] The buggy address belongs to the physical page: [ 578.653091][T12259] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x32fb7 [ 578.661851][T12259] anon flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 578.669393][T12259] page_type: f5(slab) [ 578.673377][T12259] raw: 00fff00000000000 ffff88801b441500 0000000000000000 dead000000000001 [ 578.681957][T12259] raw: 0000000000000000 0000000080800080 00000000f5000000 0000000000000000 [ 578.690534][T12259] page dumped because: kasan: bad access detected [ 578.696941][T12259] page_owner tracks the page as allocated [ 578.702650][T12259] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5830, tgid 5830 (syz-executor), ts 143687106127, free_ts 143687085092 [ 578.722098][T12259] post_alloc_hook+0x1c0/0x230 [ 578.726875][T12259] get_page_from_freelist+0x1321/0x3890 [ 578.732430][T12259] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 578.738332][T12259] alloc_pages_mpol+0x1fb/0x550 [ 578.743179][T12259] new_slab+0x23b/0x330 [ 578.747338][T12259] ___slab_alloc+0xd9c/0x1940 [ 578.752019][T12259] __slab_alloc.constprop.0+0x56/0xb0 [ 578.757399][T12259] __kmalloc_node_noprof+0x2ed/0x500 [ 578.762707][T12259] __vmalloc_node_range_noprof+0x3e5/0x14b0 [ 578.768611][T12259] __vmalloc_node_noprof+0xad/0xf0 [ 578.773734][T12259] do_ip6t_get_ctl+0x63f/0xa50 [ 578.778509][T12259] nf_getsockopt+0x7c/0xe0 [ 578.782928][T12259] ipv6_getsockopt+0x1f7/0x280 [ 578.787696][T12259] tcp_getsockopt+0xa1/0x100 [ 578.792287][T12259] do_sock_getsockopt+0x3fc/0x800 [ 578.797313][T12259] __sys_getsockopt+0x123/0x1b0 [ 578.802173][T12259] page last free pid 5830 tgid 5830 stack trace: [ 578.808492][T12259] __free_frozen_pages+0x7fe/0x1180 [ 578.813694][T12259] kasan_populate_vmalloc+0x13d/0x1f0 [ 578.819079][T12259] alloc_vmap_area+0x959/0x29c0 [ 578.823942][T12259] __get_vm_area_node+0x1ca/0x330 [ 578.828975][T12259] __vmalloc_node_range_noprof+0x271/0x14b0 [ 578.834881][T12259] __vmalloc_node_noprof+0xad/0xf0 [ 578.840019][T12259] do_ip6t_get_ctl+0x63f/0xa50 [ 578.844808][T12259] nf_getsockopt+0x7c/0xe0 [ 578.849233][T12259] ipv6_getsockopt+0x1f7/0x280 [ 578.854011][T12259] tcp_getsockopt+0xa1/0x100 [ 578.858600][T12259] do_sock_getsockopt+0x3fc/0x800 [ 578.863629][T12259] __sys_getsockopt+0x123/0x1b0 [ 578.868488][T12259] __x64_sys_getsockopt+0xbd/0x160 [ 578.873608][T12259] do_syscall_64+0xcd/0x490 [ 578.878109][T12259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.884005][T12259] [ 578.886333][T12259] Memory state around the buggy address: [ 578.891977][T12259] ffff888032fb7c00: fa fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc [ 578.900042][T12259] ffff888032fb7c80: fa fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc [ 578.908116][T12259] >ffff888032fb7d00: fa fc fc fc fa fc fc fc 07 fc fc fc fa fc fc fc [ 578.916199][T12259] ^ [ 578.922346][T12259] ffff888032fb7d80: fa fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc [ 578.930403][T12259] ffff888032fb7e00: fa fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc [ 578.938455][T12259] ================================================================== [ 581.725847][T12259] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 581.733171][T12259] CPU: 0 UID: 0 PID: 12259 Comm: syz.3.1341 Tainted: G U 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(full) [ 581.746457][T12259] Tainted: [U]=USER [ 581.750253][T12259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 581.760322][T12259] Call Trace: [ 581.763606][T12259] [ 581.766539][T12259] dump_stack_lvl+0x3d/0x1f0 [ 581.771151][T12259] panic+0x71c/0x800 [ 581.775066][T12259] ? __pfx_panic+0x10/0x10 [ 581.779497][T12259] ? mark_held_locks+0x49/0x80 [ 581.784278][T12259] ? preempt_schedule_thunk+0x16/0x30 [ 581.789658][T12259] ? afs_proc_addr_prefs_write+0x13a9/0x15f0 [ 581.795651][T12259] ? preempt_schedule_common+0x44/0xc0 [ 581.801126][T12259] ? afs_proc_addr_prefs_write+0x13a9/0x15f0 [ 581.807109][T12259] check_panic_on_warn+0xab/0xb0 [ 581.812053][T12259] end_report+0x107/0x170 [ 581.816382][T12259] kasan_report+0xee/0x110 [ 581.820796][T12259] ? afs_proc_addr_prefs_write+0x13a9/0x15f0 [ 581.826781][T12259] afs_proc_addr_prefs_write+0x13a9/0x15f0 [ 581.832588][T12259] ? __lock_acquire+0xb8a/0x1c90 [ 581.837533][T12259] ? __pfx_afs_proc_addr_prefs_write+0x10/0x10 [ 581.843692][T12259] ? find_held_lock+0x2b/0x80 [ 581.848372][T12259] ? __might_fault+0xe3/0x190 [ 581.853067][T12259] ? __might_fault+0xe3/0x190 [ 581.857751][T12259] ? __might_fault+0x13b/0x190 [ 581.862529][T12259] ? proc_simple_write+0x114/0x1b0 [ 581.867643][T12259] proc_simple_write+0x114/0x1b0 [ 581.872588][T12259] ? __pfx_proc_simple_write+0x10/0x10 [ 581.878055][T12259] proc_reg_write+0x23d/0x330 [ 581.882762][T12259] ? __pfx_proc_reg_write+0x10/0x10 [ 581.887969][T12259] vfs_writev+0x5df/0xde0 [ 581.892309][T12259] ? __pfx___mutex_trylock_common+0x10/0x10 [ 581.898213][T12259] ? __pfx_vfs_writev+0x10/0x10 [ 581.903070][T12259] ? __mutex_lock+0x1ca/0xb90 [ 581.907763][T12259] ? kmem_cache_free+0x2d1/0x4d0 [ 581.912718][T12259] ? __pfx___mutex_lock+0x10/0x10 [ 581.917750][T12259] ? __fget_files+0x20e/0x3c0 [ 581.922444][T12259] ? do_writev+0x132/0x340 [ 581.926871][T12259] do_writev+0x132/0x340 [ 581.931133][T12259] ? __pfx_do_writev+0x10/0x10 [ 581.935913][T12259] do_syscall_64+0xcd/0x490 [ 581.940507][T12259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 581.946399][T12259] RIP: 0033:0x7fdd7c78e929 [ 581.950813][T12259] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 581.970419][T12259] RSP: 002b:00007fdd7a5d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 581.978832][T12259] RAX: ffffffffffffffda RBX: 00007fdd7c9b6160 RCX: 00007fdd7c78e929 [ 581.986855][T12259] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 000000000000000b [ 581.994825][T12259] RBP: 00007fdd7c810b39 R08: 0000000000000000 R09: 0000000000000000 [ 582.002790][T12259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 582.010761][T12259] R13: 0000000000000000 R14: 00007fdd7c9b6160 R15: 00007ffe74848de8 [ 582.018738][T12259] [ 582.021806][T12259] Kernel Offset: disabled [ 582.026127][T12259] Rebooting in 86400 seconds..