last executing test programs: 1.584223786s ago: executing program 2 (id=395): unshare(0x0) 1.584017813s ago: executing program 2 (id=397): get_mempolicy(&(0x7f0000000000), &(0x7f0000000000), 0x0, 0x0, 0x0) 1.563132339s ago: executing program 2 (id=400): syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) syz_open_dev$I2C(&(0x7f0000000080), 0x0, 0x1) syz_open_dev$I2C(&(0x7f00000000c0), 0x0, 0x2) syz_open_dev$I2C(&(0x7f0000000100), 0x0, 0x800) syz_open_dev$I2C(&(0x7f0000000140), 0x1, 0x0) syz_open_dev$I2C(&(0x7f0000000180), 0x1, 0x1) syz_open_dev$I2C(&(0x7f00000001c0), 0x1, 0x2) syz_open_dev$I2C(&(0x7f0000000200), 0x1, 0x800) syz_open_dev$I2C(&(0x7f0000000240), 0x2, 0x0) syz_open_dev$I2C(&(0x7f0000000280), 0x2, 0x1) syz_open_dev$I2C(&(0x7f00000002c0), 0x2, 0x2) syz_open_dev$I2C(&(0x7f0000000300), 0x2, 0x800) syz_open_dev$I2C(&(0x7f0000000340), 0x3, 0x0) syz_open_dev$I2C(&(0x7f0000000380), 0x3, 0x1) syz_open_dev$I2C(&(0x7f00000003c0), 0x3, 0x2) syz_open_dev$I2C(&(0x7f0000000400), 0x3, 0x800) syz_open_dev$I2C(&(0x7f0000000440), 0x4, 0x0) syz_open_dev$I2C(&(0x7f0000000480), 0x4, 0x1) syz_open_dev$I2C(&(0x7f00000004c0), 0x4, 0x2) syz_open_dev$I2C(&(0x7f0000000500), 0x4, 0x800) 1.512087476s ago: executing program 2 (id=403): rt_sigprocmask(0x0, &(0x7f0000000000), 0x0, 0x0) 1.510528574s ago: executing program 2 (id=406): openat(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/create', 0x2, 0x0) 1.444282992s ago: executing program 2 (id=410): rt_sigreturn() 358.700381ms ago: executing program 1 (id=546): openat(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/smackfs/ptrace', 0x2, 0x0) 308.036827ms ago: executing program 1 (id=550): syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x1) syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x2) syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x800) syz_open_dev$evdev(&(0x7f0000000140), 0x1, 0x0) syz_open_dev$evdev(&(0x7f0000000180), 0x1, 0x1) syz_open_dev$evdev(&(0x7f00000001c0), 0x1, 0x2) syz_open_dev$evdev(&(0x7f0000000200), 0x1, 0x800) syz_open_dev$evdev(&(0x7f0000000240), 0x2, 0x0) syz_open_dev$evdev(&(0x7f0000000280), 0x2, 0x1) syz_open_dev$evdev(&(0x7f00000002c0), 0x2, 0x2) syz_open_dev$evdev(&(0x7f0000000300), 0x2, 0x800) syz_open_dev$evdev(&(0x7f0000000340), 0x3, 0x0) syz_open_dev$evdev(&(0x7f0000000380), 0x3, 0x1) syz_open_dev$evdev(&(0x7f00000003c0), 0x3, 0x2) syz_open_dev$evdev(&(0x7f0000000400), 0x3, 0x800) syz_open_dev$evdev(&(0x7f0000000440), 0x4, 0x0) syz_open_dev$evdev(&(0x7f0000000480), 0x4, 0x1) syz_open_dev$evdev(&(0x7f00000004c0), 0x4, 0x2) syz_open_dev$evdev(&(0x7f0000000500), 0x4, 0x800) 215.174286ms ago: executing program 4 (id=562): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video37', 0x2, 0x0) 172.352169ms ago: executing program 1 (id=564): socket$hf(0x13, 0x2, 0x0) 172.112922ms ago: executing program 4 (id=565): syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x0) syz_open_dev$vbi(&(0x7f0000000080), 0x0, 0x1) syz_open_dev$vbi(&(0x7f00000000c0), 0x0, 0x2) syz_open_dev$vbi(&(0x7f0000000100), 0x0, 0x800) 171.773738ms ago: executing program 3 (id=566): clock_settime(0x0, &(0x7f0000000000)) 171.696128ms ago: executing program 0 (id=567): socket$inet6_sctp(0xa, 0x1, 0x84) 154.118065ms ago: executing program 3 (id=568): syz_open_dev$mouse(&(0x7f0000000040), 0x0, 0x0) syz_open_dev$mouse(&(0x7f0000000080), 0x0, 0x1) syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2) syz_open_dev$mouse(&(0x7f0000000100), 0x0, 0x800) syz_open_dev$mouse(&(0x7f0000000140), 0x1, 0x0) syz_open_dev$mouse(&(0x7f0000000180), 0x1, 0x1) syz_open_dev$mouse(&(0x7f00000001c0), 0x1, 0x2) syz_open_dev$mouse(&(0x7f0000000200), 0x1, 0x800) syz_open_dev$mouse(&(0x7f0000000240), 0x2, 0x0) syz_open_dev$mouse(&(0x7f0000000280), 0x2, 0x1) syz_open_dev$mouse(&(0x7f00000002c0), 0x2, 0x2) syz_open_dev$mouse(&(0x7f0000000300), 0x2, 0x800) syz_open_dev$mouse(&(0x7f0000000340), 0x3, 0x0) syz_open_dev$mouse(&(0x7f0000000380), 0x3, 0x1) syz_open_dev$mouse(&(0x7f00000003c0), 0x3, 0x2) syz_open_dev$mouse(&(0x7f0000000400), 0x3, 0x800) syz_open_dev$mouse(&(0x7f0000000440), 0x4, 0x0) syz_open_dev$mouse(&(0x7f0000000480), 0x4, 0x1) syz_open_dev$mouse(&(0x7f00000004c0), 0x4, 0x2) syz_open_dev$mouse(&(0x7f0000000500), 0x4, 0x800) 133.535073ms ago: executing program 0 (id=569): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ashmem', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ashmem', 0x800, 0x0) 80.423704ms ago: executing program 3 (id=570): openat(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/checkreqprot', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/checkreqprot', 0x800, 0x0) 80.155013ms ago: executing program 4 (id=571): open_tree(0xffffffffffffffff, &(0x7f0000000000), 0x0) 79.988826ms ago: executing program 0 (id=572): openat2(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000000), 0x0) 79.808852ms ago: executing program 1 (id=573): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cdrom', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cdrom', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cdrom', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cdrom', 0x800, 0x0) 79.650467ms ago: executing program 4 (id=574): symlinkat(&(0x7f0000000000), 0xffffffffffffffff, &(0x7f0000000000)) 79.336824ms ago: executing program 3 (id=575): readlinkat(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000000), 0x0) 63.011774ms ago: executing program 0 (id=576): socket$rds(0x15, 0x5, 0x0) 62.905986ms ago: executing program 1 (id=577): socket$nl_netfilter(0x10, 0x3, 0xc) 55.205666ms ago: executing program 4 (id=578): lseek(0xffffffffffffffff, 0x0, 0x0) 482.556µs ago: executing program 3 (id=579): epoll_pwait2(0xffffffffffffffff, &(0x7f0000000000), 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x0) 292.33µs ago: executing program 1 (id=580): syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000080), 0x0, 0x1) syz_open_dev$audion(&(0x7f00000000c0), 0x0, 0x2) syz_open_dev$audion(&(0x7f0000000100), 0x0, 0x800) syz_open_dev$audion(&(0x7f0000000140), 0x1, 0x0) syz_open_dev$audion(&(0x7f0000000180), 0x1, 0x1) syz_open_dev$audion(&(0x7f00000001c0), 0x1, 0x2) syz_open_dev$audion(&(0x7f0000000200), 0x1, 0x800) syz_open_dev$audion(&(0x7f0000000240), 0x2, 0x0) syz_open_dev$audion(&(0x7f0000000280), 0x2, 0x1) syz_open_dev$audion(&(0x7f00000002c0), 0x2, 0x2) syz_open_dev$audion(&(0x7f0000000300), 0x2, 0x800) syz_open_dev$audion(&(0x7f0000000340), 0x3, 0x0) syz_open_dev$audion(&(0x7f0000000380), 0x3, 0x1) syz_open_dev$audion(&(0x7f00000003c0), 0x3, 0x2) syz_open_dev$audion(&(0x7f0000000400), 0x3, 0x800) syz_open_dev$audion(&(0x7f0000000440), 0x4, 0x0) syz_open_dev$audion(&(0x7f0000000480), 0x4, 0x1) syz_open_dev$audion(&(0x7f00000004c0), 0x4, 0x2) syz_open_dev$audion(&(0x7f0000000500), 0x4, 0x800) 171.434µs ago: executing program 0 (id=581): fchown(0xffffffffffffffff, 0x0, 0x0) 121.067µs ago: executing program 0 (id=582): process_mrelease(0xffffffffffffffff, 0x0) 49.962µs ago: executing program 4 (id=583): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/iommu', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/iommu', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/iommu', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/iommu', 0x800, 0x0) 0s ago: executing program 3 (id=584): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse', 0x2, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.178' (ED25519) to the list of known hosts. [ 49.216779][ T5214] cgroup: Unknown subsys name 'net' [ 49.338825][ T5214] cgroup: Unknown subsys name 'cpuset' [ 49.347207][ T5214] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 50.661166][ T5214] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 53.857916][ T5401] mmap: syz.0.167 (5401) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 56.032302][ T5707] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 56.628527][ T5781] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 57.026632][ T5826] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] PREEMPT SMP KASAN PTI [ 57.039521][ T5826] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 57.047963][ T5826] CPU: 0 UID: 0 PID: 5826 Comm: syz.3.584 Not tainted 6.11.0-next-20240916-syzkaller #0 [ 57.057699][ T5826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 57.067782][ T5826] RIP: 0010:fuse_get_req+0x699/0xd40 [ 57.073111][ T5826] Code: 24 50 48 83 c3 08 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 55 e1 e9 fe 48 8b 1b 48 83 c3 58 48 89 d8 48 c1 e8 03 <42> 80 3c 28 00 74 08 48 89 df e8 38 e1 e9 fe 48 8b 1b 81 e3 00 20 [ 57.092737][ T5826] RSP: 0018:ffffc9000483f4c0 EFLAGS: 00010202 [ 57.098852][ T5826] RAX: 000000000000000b RBX: 0000000000000058 RCX: ffffffff8314d542 [ 57.106845][ T5826] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffff888031478030 [ 57.114835][ T5826] RBP: ffffc9000483f5e8 R08: ffff888031478037 R09: 1ffff1100628f006 [ 57.122831][ T5826] R10: dffffc0000000000 R11: ffffed100628f007 R12: ffff888031478000 [ 57.130910][ T5826] R13: dffffc0000000000 R14: ffff888078a3f840 R15: ffff888031478000 [ 57.138908][ T5826] FS: 0000555561645500(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 57.148033][ T5826] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 57.154643][ T5826] CR2: 00007f732a507040 CR3: 0000000028444000 CR4: 00000000003506f0 [ 57.162723][ T5826] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 57.170710][ T5826] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 57.178707][ T5826] Call Trace: [ 57.182086][ T5826] [ 57.185024][ T5826] ? __die_body+0x5f/0xb0 [ 57.189372][ T5826] ? die_addr+0xb0/0xe0 [ 57.193551][ T5826] ? exc_general_protection+0x3dd/0x5d0 [ 57.199131][ T5826] ? asm_exc_general_protection+0x26/0x30 [ 57.204891][ T5826] ? fuse_get_req+0x602/0xd40 [ 57.209609][ T5826] ? fuse_get_req+0x699/0xd40 [ 57.214319][ T5826] ? __pfx_fuse_get_req+0x10/0x10 [ 57.219370][ T5826] fuse_simple_background+0x9d/0xb10 [ 57.224684][ T5826] ? __kmalloc_cache_noprof+0x19c/0x2c0 [ 57.230437][ T5826] cuse_channel_open+0x447/0x670 [ 57.235409][ T5826] ? __pfx_cuse_channel_open+0x10/0x10 [ 57.240976][ T5826] misc_open+0x2cc/0x340 [ 57.245253][ T5826] chrdev_open+0x521/0x600 [ 57.249691][ T5826] ? __pfx_apparmor_file_open+0x10/0x10 [ 57.255355][ T5826] ? __pfx_chrdev_open+0x10/0x10 [ 57.260318][ T5826] ? security_file_open+0x513/0x990 [ 57.265540][ T5826] ? __pfx_chrdev_open+0x10/0x10 [ 57.270717][ T5826] do_dentry_open+0x978/0x1460 [ 57.275509][ T5826] vfs_open+0x3e/0x330 [ 57.279603][ T5826] path_openat+0x2cb5/0x3b40 [ 57.284229][ T5826] ? mark_lock+0x9a/0x360 [ 57.288592][ T5826] ? __pfx_stack_trace_save+0x10/0x10 [ 57.294034][ T5826] ? __pfx_path_openat+0x10/0x10 [ 57.299078][ T5826] ? __lock_acquire+0x1384/0x2050 [ 57.304134][ T5826] do_filp_open+0x235/0x490 [ 57.308660][ T5826] ? __pfx_do_filp_open+0x10/0x10 [ 57.313757][ T5826] ? _raw_spin_unlock+0x28/0x50 [ 57.318630][ T5826] ? alloc_fd+0x5a1/0x640 [ 57.323105][ T5826] do_sys_openat2+0x13e/0x1d0 [ 57.327808][ T5826] ? __pfx_do_sys_openat2+0x10/0x10 [ 57.333039][ T5826] __x64_sys_openat+0x247/0x2a0 [ 57.337923][ T5826] ? __pfx___x64_sys_openat+0x10/0x10 [ 57.343320][ T5826] ? exc_page_fault+0x590/0x8c0 [ 57.348199][ T5826] ? do_syscall_64+0xb6/0x230 [ 57.352915][ T5826] do_syscall_64+0xf3/0x230 [ 57.357453][ T5826] ? clear_bhb_loop+0x35/0x90 [ 57.362157][ T5826] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.368165][ T5826] RIP: 0033:0x7f732a57def9 [ 57.372609][ T5826] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 57.392376][ T5826] RSP: 002b:00007fff199d6f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 57.401083][ T5826] RAX: ffffffffffffffda RBX: 00007f732a735f80 RCX: 00007f732a57def9 [ 57.409077][ T5826] RDX: 0000000000000002 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 57.417065][ T5826] RBP: 00007f732a5f0b76 R08: 0000000000000000 R09: 0000000000000000 [ 57.425065][ T5826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 57.433137][ T5826] R13: 00007f732a735f80 R14: 00007f732a735f80 R15: 0000000000000b44 [ 57.441132][ T5826] [ 57.444165][ T5826] Modules linked in: [ 57.448450][ T5826] ---[ end trace 0000000000000000 ]--- [ 57.487576][ T5798] coredump: 132(syz.0.554): interrupted: fatal signal pending [ 57.507172][ T5798] coredump: 132(syz.0.554): written to core: VMAs: 17, size 53436416; core: 27627346 bytes, pos 39776256 [ 57.535150][ T5826] RIP: 0010:fuse_get_req+0x699/0xd40 [ 57.545588][ T5826] Code: 24 50 48 83 c3 08 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 55 e1 e9 fe 48 8b 1b 48 83 c3 58 48 89 d8 48 c1 e8 03 <42> 80 3c 28 00 74 08 48 89 df e8 38 e1 e9 fe 48 8b 1b 81 e3 00 20 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 57.583096][ T5647] coredump: 93(syz.2.410): written to core: VMAs: 17, size 53436416; core: 41295824 bytes, pos 53440512 [ 57.610698][ T5826] RSP: 0018:ffffc9000483f4c0 EFLAGS: 00010202 [ 57.617121][ T5826] RAX: 000000000000000b RBX: 0000000000000058 RCX: ffffffff8314d542 [ 57.645705][ T5826] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffff888031478030 [ 57.654089][ T5826] RBP: ffffc9000483f5e8 R08: ffff888031478037 R09: 1ffff1100628f006 [ 57.662948][ T5826] R10: dffffc0000000000 R11: ffffed100628f007 R12: ffff888031478000 [ 57.672532][ T5826] R13: dffffc0000000000 R14: ffff888078a3f840 R15: ffff888031478000 [ 57.683718][ T5826] FS: 0000555561645500(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 57.692778][ T5826] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 57.701239][ T5826] CR2: 000055efae3f1038 CR3: 0000000028444000 CR4: 00000000003506f0 [ 57.710675][ T5826] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 57.719131][ T5826] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 57.727619][ T5826] Kernel panic - not syncing: Fatal exception [ 57.734134][ T5826] Kernel Offset: disabled [ 57.738459][ T5826] Rebooting in 86400 seconds..