last executing test programs: 9.022757365s ago: executing program 3 (id=706): acct$auto(&(0x7f0000000000)='/proc/12/smp_ity_list\x00\x00\x00\x00\x00\x00') close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) sendmsg$auto_OVS_DP_CMD_DEL(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB='Q\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0101000000000000df2502"], 0x14}, 0x1, 0x0, 0x0, 0x8044}, 0x4001090) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x400008, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r0 = io_uring_setup$auto(0x6, 0x0) close_range$auto(r0, r0, 0x8) madvise$auto(0x0, 0x200007, 0x19) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3) mmap$auto(0x0, 0x408, 0x3, 0x20000000eb1, 0xffffffffffffffff, 0x4000008000) socket(0x10, 0x2, 0xc) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) socket(0x8, 0x6, 0xfffffffa) add_key$auto(&(0x7f0000000000)='\x00', 0x0, &(0x7f0000000240), 0x2, 0x31f) madvise$auto(0x0, 0xffffffffffff0005, 0x17) clone$auto(0x21, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6) mmap$auto(0x200000000000000, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='R'], 0x1ac}}, 0x40000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r1 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 6.686484402s ago: executing program 1 (id=711): r0 = socket(0xa, 0x1, 0x0) mmap$auto(0x0, 0x9, 0x3ff57697, 0x9b72, 0x2, 0x8000000000008000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000240), r0) socket(0xf, 0x3, 0x2) socket(0xf, 0x3, 0x10000000000002) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) clock_nanosleep$auto(0x1, 0x200, &(0x7f0000000140)={0x0, 0x2800000a}, 0x0) io_uring_setup$auto(0x6, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) r1 = semctl$auto_IPC_RMID(0x7, 0x2, 0x0, 0x8001) capget$auto(&(0x7f00000000c0)={0x347, r1}, &(0x7f0000000200)={0xfffffc01, 0x6}) ioperm$auto(0x2002, 0x3, 0x4a2e97a0) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000000040)=""/87, 0x57) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000012c0)='/sys/devices/virtual/block/ram7/queue/iostats\x00', 0x8502, 0x0) write$auto(r3, &(0x7f0000000100)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3C', 0x4) shmat$auto(0x0, 0x0, 0xfffffffa) setsockopt$auto(0x3, 0x0, 0x33, 0x0, 0x4) listen$auto(r0, 0x1) 6.094883744s ago: executing program 3 (id=713): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) sysfs$auto(0x2, 0x47, 0x0) mmap$auto(0x0, 0x80000400008, 0xdf, 0x13, 0x2, 0x48ff) socket(0x29, 0x5, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x3ec0) sendmmsg$auto(0x3, 0x0, 0x9a5, 0x47ffff7a) connect$auto(0x3, 0x0, 0x55) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xac}, 0x5, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x2, 0x9) recvmmsg$auto(0x4, 0x0, 0x7, 0xe, 0x0) 6.061811298s ago: executing program 2 (id=714): close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) read$auto(0x3, 0x0, 0x80) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r0 = io_uring_setup$auto(0x406, 0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) r1 = syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) r2 = socket(0x11, 0x80003, 0x300) io_uring_enter$auto(0x3, 0xa84, 0x80000001, 0xa, 0x0, 0x46) sendmsg$auto_NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0xf4, r1, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0x8001}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x4a, 0xac, "6080b1a71b853ad2beb8ed2e643247a640da425cf600ea9cd8e449a87e70c1fa7274a1fbc67d231bef0133ff7271606ad2391124c12cd0937a6f31c33eb54cd67468a46084e7"}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x4}, @NL80211_ATTR_SAE_PASSWORD={0x71, 0x115, "deb97e7fd42a4279fcfa695c9e4d098e6cf6662f3de1edec5f81cdf576d97483361f80d5ce56abd13e4ba67227cd8698db4ef8867c7ca9957b8a2a6959eef53260b2143317d73c11d8051e921f4b8d532090225353df2d395fb4e0b6200b8da8758248a6d2969b6f6d7b34d171"}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x8}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x6}]}, 0xf4}, 0x1, 0x0, 0x0, 0x4004091}, 0x40850) io_uring_enter$auto(r0, 0x7, 0x7ffffffb, 0x3, 0x0, 0x3) move_pages$auto(0x0, 0xa, 0x0, 0x0, 0x0, 0x2) io_uring_enter$auto(0x3, 0x5, 0x5f3, 0x3, 0x0, 0x2) 5.596285192s ago: executing program 1 (id=715): bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x2, 0x4, 0x3, 0x2, 0x8, 0xc, 0xe3, 0x400000000a, 0x3}, 0x6f6) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) init_module$auto(0x0, 0xffff9, &(0x7f0000000140)='/sys/devices/platform/dummy_hcd.6/usb7/power/wakeup_active_count\x00') prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x8000000000000000, 0x15) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/cifs/Stats\x00', 0x28102, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x0) madvise$auto(0x0, 0x2000000080000001, 0x3) capget$auto(0x0, 0xfffffffffffffffe) capset$auto(0x0, &(0x7f0000000000)={0x3, 0x7, 0x8}) move_mount$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x91e4) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x30, 0x80000006, 0x4) r0 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x408, 0x7, 0x1ff, 0x7, 0x42, 0x4909b6f8, 0x1ffdf, 0x7, 0x200003, 0x2, 0xa121, 0x3, 0x6, 0x4, 0xb4, 0xa, 0x6, 0x10001, 0x80, 0x100000000, 0x0, 0x7, 0x2100, 0x200, 0x0, 0x84, [0x0, 0x0, 0x0, 0x50100000000000, 0x6, 0x2000, 0x0, 0x6, 0x70624ce7, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x0, 0x0, 0x5, 0xfffffffffffffffe, 0xffffffffffffbfff, 0xfffffffffffffffd, 0x1, 0x0, 0xffffffffffffffff, 0x4, 0xfffffffffffffffe, 0x2000000000000000, 0x0, 0x0, 0x400000000005b8, 0xc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x88e, 0x8000000000008, 0xfffffffffffffffc, 0x9, 0xa38, 0x0, 0x3, 0xfffffffffffffffa, 0x8, 0x4000000000, 0x7]}, 0x1fe, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) madvise$auto(0x0, 0xffffffffffff0005, 0x19) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_seg6(0x0, 0xffffffffffffffff) 5.537631491s ago: executing program 0 (id=716): semctl$auto_SETVAL(0x7, 0x7, 0x10, 0xfff) socket(0x1d, 0xa, 0x7fffffff) mmap$auto(0x0, 0x7f, 0x1, 0xeb1, 0x401, 0x8000) pread64$auto(0xffffffffffffffff, 0x0, 0x80, 0x6) ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(0xffffffffffffffff, 0x40603d07, 0x0) msgget$auto(0xa, 0x77d9) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) msgctl$auto(0x0, 0x0, 0x0) ustat$auto(0x5, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x40000b, 0xde, 0x9b72, 0x2, 0x8000) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp1\x00', 0x802, 0x0) ioctl$auto_SNDCTL_DSP_STEREO(r0, 0xc0045003, 0x0) 4.970040872s ago: executing program 0 (id=717): openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) clone3$auto(&(0x7f0000000400)={0x100008000, 0x980, 0x4, 0x6, 0x0, 0x2, 0x1, 0x8, 0x1, 0x0, 0x3}, 0x40) io_uring_setup$auto(0x6, 0x0) write$auto(0x3, 0x0, 0xfdef) r0 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x123201, 0x0) ioctl$auto(r0, 0x400c55cb, r0) mmap$auto(0x0, 0xe986, 0x100df, 0xeb1, 0x401, 0x8000) r1 = socket$nl_generic(0x11, 0x3, 0x10) getsockname$auto(r1, &(0x7f0000000080)=@generic={0x2, "4cfb00da5050627285b4246d5d4c"}, &(0x7f00000000c0)=0x5) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) process_madvise$auto(0xffffffffffffffff, &(0x7f0000002dc0)={0x0, 0xc0b}, 0x2e5, 0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x806, 0x0) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "abe6de3d6468fe8000"}, 0x55) setsockopt$auto(0x3, 0x1, 0xd, 0x0, 0x8) close_range$auto(0x2, 0x8000, 0x0) socket(0x11, 0x80003, 0x300) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1040, 0x0) r2 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r2, 0xaf01, 0x5) 4.626884092s ago: executing program 0 (id=718): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket(0x10, 0x2, 0x0) socket(0x2, 0x6, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/rpc/auth.unix.gid/content\x00', 0x20000, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x73) socket(0xa, 0x2, 0x0) inotify_init1$auto(0x3000000000000) socket(0xa, 0x2, 0x3a) r0 = io_uring_setup$auto(0x4, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x1c8340, 0x0) openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x482, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, r0, 0x0) open(0x0, 0x22240, 0x55) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$auto(0x3, 0x40106f52, r1) 4.369919176s ago: executing program 0 (id=719): r0 = socket(0x11, 0x3, 0x9) socket(0x28, 0x1, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x214000, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x20940, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_taskstats(0x0, r2) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)={0x8c42, 0x10}, 0x18) ioctl$auto(0xffffffffffffffff, 0xf9b4, r0) statx$auto(r3, &(0x7f0000000280)='./file0\x00', 0x0, 0xfffffff4, &(0x7f0000000580)={0x8, 0x100, 0x3, 0x4, 0x0, 0x0, 0x4, 0x2, 0x3ff, 0xf96, 0xffffffffffffffff, 0x0, {0x8, 0x7f}, {0x8000000000000001, 0x7f}, {0x4, 0xfffffff8}, {0xba8a, 0x10001}, 0x1, 0x4, 0x10, 0x5, 0x9, 0x1, 0x10001, 0x3, 0x0, 0x5, 0x0, 0x2, [0x80000001, 0xfffffffffffffffe, 0x3, 0x3, 0x200, 0x8, 0x363, 0x1, 0xff]}) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) r4 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x101001, 0x0) ioctl$auto_UI_DEV_CREATE(r4, 0x5501, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000340)={[0x4000001ff, 0x7, 0xb, 0x1, 0x948b, 0x4460, 0x15f4da0a, 0x1, 0x5, 0x300000000000000, 0x80000001, 0x7, 0x0, 0x5, 0x2]}, 0x0) ioctl$auto_SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, 0x0) 4.191130269s ago: executing program 1 (id=720): shmctl$auto_SHM_INFO(0x3, 0xe, &(0x7f0000000100)={{0x600, 0x0, 0x0, 0x80000001, 0x10000000, 0x3cf4c3, 0xe64}, 0x9f, 0x2, 0x5, 0x4, @raw=0x4, @raw, 0x3, 0x0, &(0x7f0000000080)='Vd', 0x0}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) init_module$auto(0x0, 0xffff9, 0x0) socket(0x2, 0x2, 0x0) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="130026bd7000dddbdf25020000000800", @ANYRES32=r4], 0x24}, 0x1, 0x0, 0x0, 0x4004080}, 0x20040894) shmctl$auto_IPC_SET(0x5, 0x1, &(0x7f00000001c0)={{0x0, r0, r1, 0x0, 0x80, 0x119800, 0x9}, 0x1, 0x9, 0xfffffffffffffff8, 0x800, @raw=0x8, @raw=0xfffffff9, 0x5, 0x0, &(0x7f0000000280)="5f70ec21b9e5494c0217b6c23d39f0687837235f98b5482afb439344a92a5d78e6452abb20c9fb8205b95347c71c98c3c711d6a084b229e588f8393b6a7d4d4566db9628031a614ac905d9ac0e81da9fa0c10404fbcecaf5d7fe099b51f78219993ccec012aa8d1a47ab47f48c16cf843fe950ef09a12fd9717189e0e2859f59c18926cb243014e0b7cd8a0c5b64398d7ca86ffa6f85fd55de7b00bec27390aac530de275b34da5d98293c1f729333a9041110e1e27bc0f37c687aeb5c1dd0c2283ab17df32dd486b7cf88d752476d312a0f60a053864f11ededce7e44", &(0x7f0000000380)="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"}) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$auto_ftrace_event_format_fops_trace_events(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/events/vmalloc/alloc_vmap_area/format\x00', 0x54800, 0x0) ioctl$auto(0x3, 0x80000541b, 0x38) shutdown$auto(0x200000003, 0x2) recvmmsg$auto(0x3, 0x0, 0x10000, 0x300, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2, 0x6, 0x0) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f00000018c0)=@l2={0x1f, 0xa, @none, 0x8, 0x1}, 0x55) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x5, 0x0) shutdown$auto(0x200000003, 0x2) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00032abd7000fedbdf250100000008000200", @ANYRES32, @ANYBLOB='\b\x00\t\x00', @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x1) unshare$auto(0x40000080) capset$auto(0x0, &(0x7f0000000040)={0x80000000, 0x26, 0x80000001}) 4.032760428s ago: executing program 2 (id=721): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_DEL_STATION(r0, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f00000000c0)={0x34, r1, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NL80211_ATTR_HE_CAPABILITY={0x20, 0x10d, "6f46be20118d67c9229d9ccfa2594d3a7be63f9fffc7b6e31f883768"}]}, 0x34}, 0x1, 0x0, 0x0, 0x4800}, 0x10) mmap$auto(0x2, 0x3, 0x4000000000df, 0x40eb2, 0x402, 0x8) mmap$auto(0x0, 0x7d1, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, 0x0, 0x1a1382, 0x0) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/bonding/bond0\x00', 0x18b000, 0x0) pread64$auto(r2, &(0x7f0000000000)='/proc/NesH\x1fk\xdd\x00\x00\x00\x00\x88\x00\x00\x00\x00\x00:\x19\xf4\xe2\xb7:\x81\xf8\xedl\x9d\x9a\'\xf8D,\xc0x\x1d\xf5JE\xcd7\xc3^\xbc2\xc7\xbf\xe5\x7f\xb93 \xcd${!\x9a`\x96\x86\x96D|\xf0H\x8c\x05:\xae\xa6\x88x\t\x18\x8b\xec\xd7\xe80x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="130026bd7000dddbdf25020000000800", @ANYRES32=r2, @ANYBLOB='\b\x00a\x00@\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x4004080}, 0x20040894) shmctl$auto_IPC_SET(0x5, 0x1, 0x0) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$auto_ftrace_event_format_fops_trace_events(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/events/vmalloc/alloc_vmap_area/format\x00', 0x54800, 0x0) ioctl$auto(0x3, 0x80000541b, 0x38) shutdown$auto(0x200000003, 0x2) recvmmsg$auto(0x3, 0x0, 0x10000, 0x300, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2, 0x6, 0x0) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f00000018c0)=@l2={0x1f, 0xa, @none, 0x8, 0x1}, 0x55) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x5, 0x0) shutdown$auto(0x200000003, 0x2) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00032abd7000fedbdf250100000008000200", @ANYRES32, @ANYBLOB='\b\x00\t\x00', @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x1) unshare$auto(0x40000080) capset$auto(0x0, &(0x7f0000000040)={0x80000000, 0x26, 0x80000001}) 1.456022407s ago: executing program 3 (id=728): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x2180, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) r0 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x0, 0x1, 0x9, 0x7, 0x3b, 0x4909b6fb, 0x1ffde, 0x7, 0x6, 0x2, 0x9, 0x3, 0x6, 0x4, 0xb4, 0x9, 0x2, 0x10000, 0x80, 0x7, 0x40000, 0x7, 0x2000, 0x200, 0x0, 0x84, [0x0, 0x0, 0x0, 0x50100000000000, 0x4, 0x0, 0x100, 0xa, 0x70624ce7, 0x0, 0x6, 0xb, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffd, 0x7, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x400000000005b8, 0x10, 0x0, 0x804, 0x0, 0x7, 0xffffffffffffffff, 0x5, 0x8000000000008, 0xfffffffffffffffc, 0x3, 0xa38, 0x4, 0x4000000000000, 0xfffffffffffffffc, 0x2, 0x3fffffffff, 0x0, 0x2, 0xffff]}, 0x202, 0xd) ppoll$auto(&(0x7f0000000140)={0xffffffffffffffff, 0x3ff, 0x4}, 0x7f, 0x0, 0x0, 0x8) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, 0x0, 0x1a1382, 0x0) r2 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) recvmmsg$auto(0x4, 0x0, 0xffffffff, 0x0, 0x0) acct$auto(&(0x7f0000000000)='/dev/ptyw5\x00') prctl$auto(0x41, 0x3, 0x0, 0x0, 0x0) getuid() syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), r0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) sendmsg$auto_NETDEV_CMD_NAPI_GET(0xffffffffffffffff, 0x0, 0x0) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r2) sendmsg$auto_NL80211_CMD_SET_CQM(r2, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYRES64=r1, @ANYRES16=r3, @ANYBLOB="00082cbd7000fcdbdf253f00000005008900910000000600480002000000080009000200000004001601040093009000e380f6461d49fd0c121b1dced731001c140fc5fe657d4e1fe8560670a45b8aec06dea5c1c736bffaa004eedbe2cc318dfa2ba2fa3bcd9b16830db0133d814dec86b7c5372292d5ffd0047adb0b205faf9796254ae3c5a12f6744adfda3b3389aa14e8b191a23e57a3750c7b99901863e5c088e2f6656c7d19a5ddb0f81e96c34448b5edc48a5ac6224"], 0xc4}, 0x1, 0x0, 0x0, 0x20048091}, 0x14) socket(0x11, 0x3, 0x2) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r4 = openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$auto(r4, 0x0, 0x4d52) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptyw5\x00', 0x0, 0x0) acct$auto(&(0x7f0000000080)='%\x00') mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) socket(0xa, 0x3, 0x3a) 1.332032639s ago: executing program 1 (id=729): r0 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffc000/0x4000)=nil, 0x401f, 0x1, 0x8e051, r0, 0x0) bpf$auto(0xd, 0x0, 0x6f5) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) init_module$auto(0x0, 0xffff9, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2000000080000001, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) capset$auto(0x0, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/tty48\x00', 0x800, 0x0) setresuid$auto(0x2, 0x7, 0x0) ioctl$auto(r1, 0x4b65, r1) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x80, 0x0) move_mount$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x91e4) madvise$auto(0x401, 0x80000000, 0x217) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x1, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_wakeup_sources_stats_fops_wakeup(0xffffffffffffff9c, &(0x7f0000000180), 0x4000, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0) prctl$auto(0x43, 0x0, 0x0, 0x0, 0x0) prctl$auto(0x1000000003b, 0x1, 0x0, 0x5, 0x3) r2 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, 0x0, 0x1fe, 0xd) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x20048800) sendmmsg$auto(r2, 0x0, 0x7, 0x4008) madvise$auto(0x0, 0xffffffffffff0005, 0x19) 1.033259883s ago: executing program 3 (id=730): set_mempolicy$auto(0x6, &(0x7f0000000000)=0x7fffffffffffffff, 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) fsopen$auto(0x0, 0x1) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x8000, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x1, 0x4000000000df, 0x44eb2, 0x3, 0x300000000000) fcntl$auto(0x8000000000000001, 0x26, 0x8) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r0, 0x5606, r0) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0xe, 0xb5, 0x14, 0x4, 0x4, 0xffffffffffffffff, 0xa, "2af051b26b658a20d8dc6b36c83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0x7, 0x6}, 0x10) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) 1.032378539s ago: executing program 2 (id=738): shmctl$auto_SHM_INFO(0x3, 0xe, &(0x7f0000000100)={{0x600, 0x0, 0x0, 0x80000001, 0x10000000, 0x3cf4c3, 0xe64}, 0x9f, 0x2, 0x5, 0x4, @raw=0x4, @raw, 0x3, 0x0, &(0x7f0000000080)='Vd', 0x0}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) init_module$auto(0x0, 0xffff9, 0x0) socket(0x2, 0x2, 0x0) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="130026bd7000dddbdf25020000000800", @ANYRES32=r4], 0x24}, 0x1, 0x0, 0x0, 0x4004080}, 0x20040894) shmctl$auto_IPC_SET(0x5, 0x1, &(0x7f00000001c0)={{0x0, r0, r1, 0x0, 0x80, 0x119800, 0x9}, 0x1, 0x9, 0xfffffffffffffff8, 0x800, @raw=0x8, @raw=0xfffffff9, 0x5, 0x0, &(0x7f0000000280)="5f70ec21b9e5494c0217b6c23d39f0687837235f98b5482afb439344a92a5d78e6452abb20c9fb8205b95347c71c98c3c711d6a084b229e588f8393b6a7d4d4566db9628031a614ac905d9ac0e81da9fa0c10404fbcecaf5d7fe099b51f78219993ccec012aa8d1a47ab47f48c16cf843fe950ef09a12fd9717189e0e2859f59c18926cb243014e0b7cd8a0c5b64398d7ca86ffa6f85fd55de7b00bec27390aac530de275b34da5d98293c1f729333a9041110e1e27bc0f37c687aeb5c1dd0c2283ab17df32dd486b7cf88d752476d312a0f60a053864f11ededce7e44", &(0x7f0000000380)="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"}) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$auto_ftrace_event_format_fops_trace_events(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/events/vmalloc/alloc_vmap_area/format\x00', 0x54800, 0x0) ioctl$auto(0x3, 0x80000541b, 0x38) shutdown$auto(0x200000003, 0x2) recvmmsg$auto(0x3, 0x0, 0x10000, 0x300, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2, 0x6, 0x0) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f00000018c0)=@l2={0x1f, 0xa, @none, 0x8, 0x1}, 0x55) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x5, 0x0) shutdown$auto(0x200000003, 0x2) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00032abd7000fedbdf250100000008000200", @ANYRES32, @ANYBLOB='\b\x00\t\x00', @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x1) unshare$auto(0x40000080) capset$auto(0x0, &(0x7f0000000040)={0x80000000, 0x26, 0x80000001}) 132.655581ms ago: executing program 0 (id=731): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) sysfs$auto(0x2, 0x47, 0x0) mmap$auto(0x0, 0x80000400008, 0xdf, 0x13, 0x2, 0x48ff) socket(0x29, 0x5, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x3ec0) sendmmsg$auto(0x3, 0x0, 0x9a5, 0x47ffff7a) connect$auto(0x3, 0x0, 0x55) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xac}, 0x5, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x2, 0x9) recvmmsg$auto(0x4, 0x0, 0x7, 0xe, 0x0) 132.134288ms ago: executing program 1 (id=732): r0 = socket(0x11, 0x3, 0x9) socket(0x28, 0x1, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x214000, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x20940, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_taskstats(0x0, r2) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)={0x8c42, 0x10}, 0x18) ioctl$auto(0xffffffffffffffff, 0xf9b4, r0) statx$auto(r3, &(0x7f0000000280)='./file0\x00', 0x0, 0xfffffff4, &(0x7f0000000580)={0x8, 0x100, 0x3, 0x4, 0x0, 0x0, 0x4, 0x2, 0x3ff, 0xf96, 0xffffffffffffffff, 0x0, {0x8, 0x7f}, {0x8000000000000001, 0x7f}, {0x4, 0xfffffff8}, {0xba8a, 0x10001}, 0x1, 0x4, 0x10, 0x5, 0x9, 0x1, 0x10001, 0x3, 0x0, 0x5, 0x0, 0x2, [0x80000001, 0xfffffffffffffffe, 0x3, 0x3, 0x200, 0x8, 0x363, 0x1, 0xff]}) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) r4 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x101001, 0x0) ioctl$auto_UI_DEV_CREATE(r4, 0x5501, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000340)={[0x4000001ff, 0x7, 0xb, 0x1, 0x948b, 0x4460, 0x15f4da0a, 0x1, 0x5, 0x300000000000000, 0x80000001, 0x7, 0x0, 0x5, 0x2]}, 0x0) ioctl$auto_SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, 0x0) 0s ago: executing program 2 (id=733): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000040), 0x8300, 0x0) keyctl$auto(0xb, 0xffffffff80000000, 0xd, 0xfffffffffffffff6, 0x2) r1 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, 0x0, 0x200000, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0x15, 0x5, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, 0x0) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r2, 0x0, 0x800) ioctl$auto_RTC_PIE_ON(r0, 0x7005, 0x0) pipe2$auto(&(0x7f00000000c0), 0x0) writev$auto(0xca, &(0x7f0000000080)={0x0, 0x2}, 0x2000000000000003) setsockopt$auto(0x3, 0x1, 0x1d, 0x0, 0x8) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/tcp\x00', 0x181800, 0x0) pread64$auto(r3, 0x0, 0x3ef, 0x9) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) ioctl$auto_UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000100)={0x5eea, 0x7, [{r4, 0x0, 0x8, 0x954}, {r4, 0x0, 0xffffffff, 0x6114}, {r4, 0x0, 0x5, 0x4}, {r4, 0x0, 0x5, 0x100}]}) syz_genetlink_get_family_id$auto_ioam6(0x0, r5) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) getsockopt$auto_SO_INCOMING_NAPI_ID(r4, 0x1, 0x38, &(0x7f0000000000)='/dev/kvm\x00', &(0x7f0000000080)) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) socket(0x15, 0x5, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x8000, 0x0) kernel console output (not intermixed with test programs): 0xc0 [ 86.294637][ T6113] ? trace_kmalloc+0x2d/0xd0 [ 86.294663][ T6113] ? __kmalloc_node_noprof.cold+0x5a/0x5f [ 86.294691][ T6113] ? __do_sys_listmount+0x1bf/0xeb0 [ 86.294723][ T6113] __kvmalloc_node_noprof+0x14f/0x1a0 [ 86.294755][ T6113] ? __do_sys_listmount+0x1bf/0xeb0 [ 86.294787][ T6113] __do_sys_listmount+0x1bf/0xeb0 [ 86.294823][ T6113] ? __x64_sys_futex+0x1e1/0x4c0 [ 86.294851][ T6113] ? __x64_sys_futex+0x1ea/0x4c0 [ 86.294885][ T6113] ? __pfx___do_sys_listmount+0x10/0x10 [ 86.294915][ T6113] ? xfd_validate_state+0x5d/0x180 [ 86.294961][ T6113] do_syscall_64+0xcd/0x250 [ 86.294995][ T6113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.295047][ T6113] RIP: 0033:0x7f50c2b8d169 [ 86.295068][ T6113] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.295091][ T6113] RSP: 002b:00007f50c3973038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ca [ 86.295115][ T6113] RAX: ffffffffffffffda RBX: 00007f50c2da5fa0 RCX: 00007f50c2b8d169 [ 86.295132][ T6113] RDX: 00000000000f4240 RSI: 0000000000000000 RDI: 0000400000000100 [ 86.295147][ T6113] RBP: 00007f50c2c0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 86.295171][ T6113] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 86.295186][ T6113] R13: 0000000000000000 R14: 00007f50c2da5fa0 R15: 00007fffdf87d9d8 [ 86.295218][ T6113] [ 86.295462][ T6113] syz.2.69: vmalloc error: size 8000000, vm_struct allocation failed, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 86.736934][ T6113] CPU: 1 UID: 0 PID: 6113 Comm: syz.2.69 Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 86.736968][ T6113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 86.736982][ T6113] Call Trace: [ 86.736989][ T6113] [ 86.736998][ T6113] dump_stack_lvl+0x16c/0x1f0 [ 86.737034][ T6113] warn_alloc+0x24d/0x3a0 [ 86.737071][ T6113] ? __pfx_warn_alloc+0x10/0x10 [ 86.737106][ T6113] ? kfree+0x2c4/0x4d0 [ 86.737142][ T6113] ? __get_vm_area_node+0x1dc/0x2f0 [ 86.737191][ T6113] __vmalloc_node_range_noprof+0xd24/0x1530 [ 86.737228][ T6113] ? find_held_lock+0x2d/0x110 [ 86.737257][ T6113] ? __do_sys_listmount+0x1bf/0xeb0 [ 86.737295][ T6113] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 86.737328][ T6113] ? rcu_is_watching+0x12/0xc0 [ 86.737356][ T6113] ? trace_kmalloc+0x2d/0xd0 [ 86.737377][ T6113] ? __kmalloc_node_noprof.cold+0x5a/0x5f [ 86.737402][ T6113] ? __do_sys_listmount+0x1bf/0xeb0 [ 86.737430][ T6113] __kvmalloc_node_noprof+0x14f/0x1a0 [ 86.737460][ T6113] ? __do_sys_listmount+0x1bf/0xeb0 [ 86.737491][ T6113] __do_sys_listmount+0x1bf/0xeb0 [ 86.737525][ T6113] ? __x64_sys_futex+0x1e1/0x4c0 [ 86.737552][ T6113] ? __x64_sys_futex+0x1ea/0x4c0 [ 86.737581][ T6113] ? __pfx___do_sys_listmount+0x10/0x10 [ 86.737611][ T6113] ? xfd_validate_state+0x5d/0x180 [ 86.737656][ T6113] do_syscall_64+0xcd/0x250 [ 86.737690][ T6113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.737722][ T6113] RIP: 0033:0x7f50c2b8d169 [ 86.737741][ T6113] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.737761][ T6113] RSP: 002b:00007f50c3973038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ca [ 86.737784][ T6113] RAX: ffffffffffffffda RBX: 00007f50c2da5fa0 RCX: 00007f50c2b8d169 [ 86.737799][ T6113] RDX: 00000000000f4240 RSI: 0000000000000000 RDI: 0000400000000100 [ 86.737814][ T6113] RBP: 00007f50c2c0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 86.737827][ T6113] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 86.737841][ T6113] R13: 0000000000000000 R14: 00007f50c2da5fa0 R15: 00007fffdf87d9d8 [ 86.737871][ T6113] [ 86.961362][ T6113] Mem-Info: [ 86.964621][ T6113] active_anon:11623 inactive_anon:16 isolated_anon:0 [ 86.964621][ T6113] active_file:1013 inactive_file:43705 isolated_file:0 [ 86.964621][ T6113] unevictable:768 dirty:6061 writeback:0 [ 86.964621][ T6113] slab_reclaimable:9929 slab_unreclaimable:93799 [ 86.964621][ T6113] mapped:29550 shmem:7260 pagetables:813 [ 86.964621][ T6113] sec_pagetables:0 bounce:0 [ 86.964621][ T6113] kernel_misc_reclaimable:0 [ 86.964621][ T6113] free:1347333 free_pcp:2695 free_cma:0 [ 87.011369][ T6113] Node 0 active_anon:42592kB inactive_anon:64kB active_file:4052kB inactive_file:174744kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:114500kB dirty:23932kB writeback:200kB shmem:27704kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10456kB pagetables:3252kB sec_pagetables:0kB all_unreclaimable? no [ 87.045076][ T6113] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:12kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 87.077081][ T6113] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 87.104341][ T6113] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 87.110289][ T6113] Node 0 DMA32 free:1475020kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB active_anon:42584kB inactive_anon:64kB active_file:4052kB inactive_file:174652kB unevictable:1536kB writepending:22928kB present:3129332kB managed:2547512kB mlocked:0kB bounce:0kB free_pcp:8640kB local_pcp:8172kB free_cma:0kB [ 87.143444][ T6113] lowmem_reserve[]: 0 0 0 0 0 [ 87.148282][ T6113] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:92kB unevictable:0kB writepending:4kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 87.175176][ T6113] lowmem_reserve[]: 0 0 0 0 0 [ 87.180169][ T6113] Node 1 Normal free:3904772kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:12kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:64kB local_pcp:64kB free_cma:0kB [ 87.260370][ T6113] lowmem_reserve[]: 0 0 0 0 0 [ 87.265175][ T6113] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 87.300572][ T6114] Invalid ELF header magic: != ELF [ 87.309389][ T9] cfg80211: failed to load regulatory.db [ 87.388396][ T6113] Node 0 DMA32: 77*4kB (ME) 156*8kB (ME) 106*16kB (UME) 80*32kB (UME) 21*64kB (UME) 10*128kB (UME) 6*256kB (UME) 1*512kB (M) 2*1024kB (U) 2*2048kB (UM) 357*4096kB (ME) = 1478900kB [ 87.467609][ T6113] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 87.506702][ T6113] Node 1 Normal: 185*4kB (U) 51*8kB (UME) 37*16kB (UME) 208*32kB (UME) 90*64kB (UME) 34*128kB (UME) 19*256kB (UME) 7*512kB (UME) 1*1024kB (M) 3*2048kB (UE) 945*4096kB (M) = 3904844kB [ 87.570992][ T6113] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 87.632967][ T6113] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 87.671764][ T6113] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 87.727570][ T6113] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 87.747617][ T6113] 52122 total pagecache pages [ 87.759646][ T6113] 32 pages in swap cache [ 87.777305][ T6113] Free swap = 124580kB [ 87.794713][ T6113] Total swap = 124996kB [ 87.804836][ T6113] 2097051 pages RAM [ 87.811559][ T6113] 0 pages HighMem/MovableOnly [ 87.826735][ T6113] 428515 pages reserved [ 87.836908][ T6113] 0 pages cma reserved [ 88.158937][ T6125] Invalid ELF header magic: != ELF [ 88.191561][ T6127] netlink: 'syz.2.73': attribute type 72 has an invalid length. [ 88.219223][ T6127] netlink: 8 bytes leftover after parsing attributes in process `syz.2.73'. [ 88.781845][ T6132] Invalid ELF header magic: != ELF [ 89.563620][ T6142] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 90.519824][ T6174] Invalid ELF header magic: != ELF [ 90.716378][ T6172] Invalid ELF header magic: != ELF [ 91.578159][ T6198] Invalid ELF header magic: != ELF [ 91.608475][ T6198] netlink: 'syz.2.86': attribute type 72 has an invalid length. [ 91.645389][ T6198] netlink: 8 bytes leftover after parsing attributes in process `syz.2.86'. [ 92.100109][ T6208] FAULT_INJECTION: forcing a failure. [ 92.100109][ T6208] name failslab, interval 1, probability 0, space 0, times 0 [ 92.140082][ T6211] FAULT_INJECTION: forcing a failure. [ 92.140082][ T6211] name failslab, interval 1, probability 0, space 0, times 0 [ 92.175824][ T6208] CPU: 0 UID: 0 PID: 6208 Comm: syz.3.89 Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 92.175861][ T6208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 92.175875][ T6208] Call Trace: [ 92.175883][ T6208] [ 92.175894][ T6208] dump_stack_lvl+0x16c/0x1f0 [ 92.175935][ T6208] should_fail_ex+0x50a/0x650 [ 92.175960][ T6208] ? fs_reclaim_acquire+0xae/0x150 [ 92.175994][ T6208] ? kobject_uevent_env+0x265/0x1870 [ 92.176018][ T6208] should_failslab+0xc2/0x120 [ 92.176043][ T6208] __kmalloc_cache_noprof+0x68/0x410 [ 92.176085][ T6208] kobject_uevent_env+0x265/0x1870 [ 92.176108][ T6208] ? __x64_sys_unshare+0x20/0x40 [ 92.176147][ T6208] netdev_queue_update_kobjects+0x151/0x5b0 [ 92.176198][ T6208] netdev_register_kobject+0x28c/0x3a0 [ 92.176237][ T6208] register_netdevice+0x147b/0x1eb0 [ 92.176267][ T6208] ? __pfx_register_netdevice+0x10/0x10 [ 92.176303][ T6208] __ip_tunnel_create+0x4aa/0x690 [ 92.176340][ T6208] ? __pfx___ip_tunnel_create+0x10/0x10 [ 92.176384][ T6208] ip_tunnel_init_net+0x22a/0x790 [ 92.176421][ T6208] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 92.176461][ T6208] ? __kmalloc_noprof+0x23b/0x510 [ 92.176501][ T6208] ? __pfx_ipgre_init_net+0x10/0x10 [ 92.176567][ T6208] ops_init+0x1df/0x5f0 [ 92.176598][ T6208] setup_net+0x21f/0x860 [ 92.176626][ T6208] ? __pfx_setup_net+0x10/0x10 [ 92.176648][ T6208] ? down_read_killable+0xcc/0x380 [ 92.176683][ T6208] ? __pfx_down_read_killable+0x10/0x10 [ 92.176714][ T6208] ? __raw_spin_lock_init+0x3a/0x110 [ 92.176741][ T6208] ? debug_mutex_init+0x37/0x70 [ 92.176772][ T6208] copy_net_ns+0x2a6/0x5f0 [ 92.176801][ T6208] create_new_namespaces+0x3ea/0xad0 [ 92.176850][ T6208] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 92.176892][ T6208] ksys_unshare+0x45d/0xa40 [ 92.176920][ T6208] ? __pfx_ksys_unshare+0x10/0x10 [ 92.176945][ T6208] ? xfd_validate_state+0x5d/0x180 [ 92.176991][ T6208] __x64_sys_unshare+0x31/0x40 [ 92.177016][ T6208] do_syscall_64+0xcd/0x250 [ 92.177050][ T6208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.177082][ T6208] RIP: 0033:0x7f9757f8d169 [ 92.177102][ T6208] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 92.177124][ T6208] RSP: 002b:00007f9758e76038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 92.177149][ T6208] RAX: ffffffffffffffda RBX: 00007f97581a5fa0 RCX: 00007f9757f8d169 [ 92.177165][ T6208] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 92.177179][ T6208] RBP: 00007f975800e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 92.177192][ T6208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 92.177204][ T6208] R13: 0000000000000000 R14: 00007f97581a5fa0 R15: 00007ffe45ccda58 [ 92.177234][ T6208] [ 92.248150][ T6211] CPU: 1 UID: 0 PID: 6211 Comm: syz.1.90 Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 92.248183][ T6211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 92.248198][ T6211] Call Trace: [ 92.248206][ T6211] [ 92.248215][ T6211] dump_stack_lvl+0x16c/0x1f0 [ 92.248254][ T6211] should_fail_ex+0x50a/0x650 [ 92.248277][ T6211] ? fs_reclaim_acquire+0xae/0x150 [ 92.248310][ T6211] ? dccp_feat_entry_new+0x1a2/0x380 [ 92.248341][ T6211] should_failslab+0xc2/0x120 [ 92.248364][ T6211] __kmalloc_cache_noprof+0x68/0x410 [ 92.248394][ T6211] ? lock_acquire.part.0+0x81/0x380 [ 92.248424][ T6211] ? dccp_feat_clone_sp_val+0x96/0x130 [ 92.248461][ T6211] dccp_feat_entry_new+0x1a2/0x380 [ 92.248494][ T6211] __feat_register_sp+0x374/0x5a0 [ 92.248529][ T6211] ? __pfx___feat_register_sp+0x10/0x10 [ 92.248563][ T6211] ? __debug_object_init+0x2dd/0x3e0 [ 92.248591][ T6211] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 92.248623][ T6211] dccp_feat_init+0x2ae/0x800 [ 92.248659][ T6211] ? __pfx_dccp_feat_init+0x10/0x10 [ 92.248691][ T6211] ? lockdep_init_map_type+0xe0/0x7d0 [ 92.248726][ T6211] ? do_init_timer+0xc9/0x110 [ 92.248763][ T6211] ? __pfx_dccp_keepalive_timer+0x10/0x10 [ 92.248792][ T6211] ? __pfx_dccp_delack_timer+0x10/0x10 [ 92.248823][ T6211] dccp_init_sock+0x327/0x420 [ 92.248850][ T6211] dccp_v4_init_sock+0x1f/0xa0 [ 92.248884][ T6211] ? __pfx_dccp_v4_init_sock+0x10/0x10 [ 92.248918][ T6211] inet_create+0x94a/0x10a0 [ 92.248941][ T6211] ? inet_create+0x90/0x10a0 [ 92.248966][ T6211] __sock_create+0x335/0x8d0 [ 92.248999][ T6211] __sys_socket+0x14f/0x260 [ 92.249027][ T6211] ? __pfx___sys_socket+0x10/0x10 [ 92.249054][ T6211] ? rcu_is_watching+0x12/0xc0 [ 92.249085][ T6211] __x64_sys_socket+0x72/0xb0 [ 92.249111][ T6211] ? lockdep_hardirqs_on+0x7c/0x110 [ 92.249140][ T6211] do_syscall_64+0xcd/0x250 [ 92.249172][ T6211] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.249204][ T6211] RIP: 0033:0x7fdb7558d169 [ 92.249223][ T6211] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 92.249244][ T6211] RSP: 002b:00007fdb76430038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 92.249266][ T6211] RAX: ffffffffffffffda RBX: 00007fdb757a5fa0 RCX: 00007fdb7558d169 [ 92.249283][ T6211] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000002 [ 92.249298][ T6211] RBP: 00007fdb7560e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 92.249312][ T6211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 92.249326][ T6211] R13: 0000000000000000 R14: 00007fdb757a5fa0 R15: 00007fffeac24048 [ 92.249356][ T6211] [ 92.981215][ T6214] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 93.432752][ T30] audit: type=1326 audit(1741532813.560:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6203 comm="syz.0.88" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5813b8d169 code=0x0 [ 93.583032][ T6221] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 94.197054][ T6225] Invalid ELF header magic: != ELF [ 94.466752][ T6237] Invalid ELF header magic: != ELF [ 94.572596][ T6239] Invalid ELF header magic: != ELF [ 95.339598][ T6249] FAULT_INJECTION: forcing a failure. [ 95.339598][ T6249] name failslab, interval 1, probability 0, space 0, times 0 [ 95.394861][ T6249] CPU: 1 UID: 0 PID: 6249 Comm: syz.2.101 Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 95.394895][ T6249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 95.394910][ T6249] Call Trace: [ 95.394917][ T6249] [ 95.394926][ T6249] dump_stack_lvl+0x16c/0x1f0 [ 95.394964][ T6249] should_fail_ex+0x50a/0x650 [ 95.394985][ T6249] ? fs_reclaim_acquire+0xae/0x150 [ 95.395020][ T6249] should_failslab+0xc2/0x120 [ 95.395048][ T6249] kmem_cache_alloc_lru_noprof+0x73/0x3d0 [ 95.395089][ T6249] ? alloc_inode+0xbf/0x230 [ 95.395117][ T6249] alloc_inode+0xbf/0x230 [ 95.395142][ T6249] iget_locked+0x2ee/0x8a0 [ 95.395167][ T6249] ? __pfx_rwsem_read_trylock+0x10/0x10 [ 95.395207][ T6249] ? __pfx_iget_locked+0x10/0x10 [ 95.395231][ T6249] ? kernfs_iop_lookup+0xa3/0x330 [ 95.395281][ T6249] kernfs_get_inode+0x48/0x460 [ 95.395314][ T6249] kernfs_iop_lookup+0x1ec/0x330 [ 95.395349][ T6249] ? __pfx_kernfs_iop_lookup+0x10/0x10 [ 95.395390][ T6249] lookup_open.isra.0+0x4d9/0x1580 [ 95.395431][ T6249] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 95.395470][ T6249] ? path_openat+0x88a/0x2d80 [ 95.395514][ T6249] ? mnt_get_write_access+0x20c/0x300 [ 95.395550][ T6249] path_openat+0x904/0x2d80 [ 95.395599][ T6249] ? __pfx_path_openat+0x10/0x10 [ 95.395634][ T6249] ? __pfx___lock_acquire+0x10/0x10 [ 95.395665][ T6249] ? lock_acquire.part.0+0x11b/0x380 [ 95.395697][ T6249] ? find_held_lock+0x2d/0x110 [ 95.395728][ T6249] do_filp_open+0x20c/0x470 [ 95.395762][ T6249] ? __pfx_do_filp_open+0x10/0x10 [ 95.395793][ T6249] ? find_held_lock+0x2d/0x110 [ 95.395840][ T6249] ? alloc_fd+0x41f/0x760 [ 95.395880][ T6249] do_sys_openat2+0x17a/0x1e0 [ 95.395903][ T6249] ? __pfx_do_sys_openat2+0x10/0x10 [ 95.395924][ T6249] ? lock_acquire+0x2f/0xb0 [ 95.395963][ T6249] __x64_sys_openat+0x175/0x210 [ 95.395986][ T6249] ? __pfx___x64_sys_openat+0x10/0x10 [ 95.396022][ T6249] do_syscall_64+0xcd/0x250 [ 95.396051][ T6249] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.396077][ T6249] RIP: 0033:0x7f50c2b8d169 [ 95.396094][ T6249] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.396114][ T6249] RSP: 002b:00007f50c3973038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 95.396136][ T6249] RAX: ffffffffffffffda RBX: 00007f50c2da5fa0 RCX: 00007f50c2b8d169 [ 95.396150][ T6249] RDX: 0000000000124001 RSI: 0000400000000040 RDI: ffffffffffffff9c [ 95.396163][ T6249] RBP: 00007f50c2c0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 95.396175][ T6249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 95.396187][ T6249] R13: 0000000000000000 R14: 00007f50c2da5fa0 R15: 00007fffdf87d9d8 [ 95.396219][ T6249] [ 95.785663][ T6255] FAULT_INJECTION: forcing a failure. [ 95.785663][ T6255] name failslab, interval 1, probability 0, space 0, times 0 [ 95.842046][ T6255] CPU: 0 UID: 0 PID: 6255 Comm: syz.2.103 Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 95.842083][ T6255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 95.842099][ T6255] Call Trace: [ 95.842106][ T6255] [ 95.842116][ T6255] dump_stack_lvl+0x16c/0x1f0 [ 95.842157][ T6255] should_fail_ex+0x50a/0x650 [ 95.842181][ T6255] ? fs_reclaim_acquire+0xae/0x150 [ 95.842217][ T6255] should_failslab+0xc2/0x120 [ 95.842243][ T6255] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 95.842281][ T6255] ? __kernfs_new_node+0xd3/0x890 [ 95.842319][ T6255] __kernfs_new_node+0xd3/0x890 [ 95.842369][ T6255] ? __pfx___kernfs_new_node+0x10/0x10 [ 95.842402][ T6255] ? __pfx_lock_release+0x10/0x10 [ 95.842435][ T6255] ? kernfs_add_one+0x39d/0x520 [ 95.842483][ T6255] ? up_write+0x1b2/0x520 [ 95.842522][ T6255] kernfs_new_node+0x186/0x240 [ 95.842565][ T6255] __kernfs_create_file+0x53/0x350 [ 95.842597][ T6255] sysfs_add_file_mode_ns+0x1ff/0x3b0 [ 95.842637][ T6255] internal_create_group+0x56c/0xf10 [ 95.842679][ T6255] ? __pfx_internal_create_group+0x10/0x10 [ 95.842718][ T6255] ? kernfs_create_link+0x1bd/0x240 [ 95.842751][ T6255] internal_create_groups+0x9d/0x150 [ 95.842788][ T6255] device_add+0x6d3/0x1a70 [ 95.842825][ T6255] ? __pfx_device_add+0x10/0x10 [ 95.842862][ T6255] ? __init_waitqueue_head+0xca/0x150 [ 95.842899][ T6255] netdev_register_kobject+0x183/0x3a0 [ 95.842941][ T6255] register_netdevice+0x147b/0x1eb0 [ 95.842973][ T6255] ? __pfx_register_netdevice+0x10/0x10 [ 95.843009][ T6255] internal_dev_create+0x2d3/0x520 [ 95.843045][ T6255] ovs_vport_add+0x144/0x4d0 [ 95.843078][ T6255] new_vport+0x16/0x1d0 [ 95.843104][ T6255] ovs_dp_cmd_new+0x6b0/0xe50 [ 95.843140][ T6255] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 95.843175][ T6255] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 95.843214][ T6255] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 95.843261][ T6255] genl_family_rcv_msg_doit+0x202/0x2f0 [ 95.843300][ T6255] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 95.843345][ T6255] ? trace_cap_capable+0x1a2/0x210 [ 95.843385][ T6255] ? bpf_lsm_capable+0x9/0x10 [ 95.843411][ T6255] ? security_capable+0x7e/0x260 [ 95.843437][ T6255] ? ns_capable+0xd7/0x110 [ 95.843473][ T6255] genl_rcv_msg+0x565/0x800 [ 95.843501][ T6255] ? __pfx_genl_rcv_msg+0x10/0x10 [ 95.843526][ T6255] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 95.843566][ T6255] netlink_rcv_skb+0x16b/0x440 [ 95.843599][ T6255] ? __pfx_genl_rcv_msg+0x10/0x10 [ 95.843625][ T6255] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 95.843674][ T6255] ? down_read+0xc9/0x330 [ 95.843706][ T6255] ? __pfx_down_read+0x10/0x10 [ 95.843742][ T6255] ? netlink_deliver_tap+0x1ae/0xd30 [ 95.843780][ T6255] genl_rcv+0x28/0x40 [ 95.843812][ T6255] netlink_unicast+0x53c/0x7f0 [ 95.843849][ T6255] ? __pfx_netlink_unicast+0x10/0x10 [ 95.843884][ T6255] ? __phys_addr_symbol+0x30/0x80 [ 95.843908][ T6255] ? __check_object_size+0x488/0x710 [ 95.843939][ T6255] netlink_sendmsg+0x8b8/0xd70 [ 95.843978][ T6255] ? __pfx_netlink_sendmsg+0x10/0x10 [ 95.844026][ T6255] ____sys_sendmsg+0xaaf/0xc90 [ 95.844055][ T6255] ? copy_msghdr_from_user+0x10b/0x160 [ 95.844090][ T6255] ? __pfx_____sys_sendmsg+0x10/0x10 [ 95.844135][ T6255] ___sys_sendmsg+0x135/0x1e0 [ 95.844174][ T6255] ? __pfx____sys_sendmsg+0x10/0x10 [ 95.844225][ T6255] ? __pfx_lock_release+0x10/0x10 [ 95.844256][ T6255] ? trace_lock_acquire+0x14e/0x1f0 [ 95.844297][ T6255] ? __fget_files+0x206/0x3a0 [ 95.844348][ T6255] __sys_sendmsg+0x16e/0x220 [ 95.844386][ T6255] ? __pfx___sys_sendmsg+0x10/0x10 [ 95.844423][ T6255] ? __x64_sys_futex+0x1e1/0x4c0 [ 95.844477][ T6255] do_syscall_64+0xcd/0x250 [ 95.844513][ T6255] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.844546][ T6255] RIP: 0033:0x7f50c2b8d169 [ 95.844567][ T6255] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.844589][ T6255] RSP: 002b:00007f50c3973038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 95.844613][ T6255] RAX: ffffffffffffffda RBX: 00007f50c2da5fa0 RCX: 00007f50c2b8d169 [ 95.844630][ T6255] RDX: 0000000000000080 RSI: 0000400000000140 RDI: 0000000000000006 [ 95.844645][ T6255] RBP: 00007f50c2c0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 95.844659][ T6255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 95.844673][ T6255] R13: 0000000000000000 R14: 00007f50c2da5fa0 R15: 00007fffdf87d9d8 [ 95.844708][ T6255] [ 96.777345][ T6264] netlink: 342 bytes leftover after parsing attributes in process `syz.1.107'. [ 96.833057][ T6264] netlink: 342 bytes leftover after parsing attributes in process `syz.1.107'. [ 96.869410][ T6264] netlink: 342 bytes leftover after parsing attributes in process `syz.1.107'. [ 96.879432][ T6266] netlink: 'syz.1.107': attribute type 2 has an invalid length. [ 96.884766][ T6264] netlink: 342 bytes leftover after parsing attributes in process `syz.1.107'. [ 96.887107][ T6266] netlink: 'syz.1.107': attribute type 3 has an invalid length. [ 96.898434][ T6264] netlink: 342 bytes leftover after parsing attributes in process `syz.1.107'. [ 97.087712][ T6266] netlink: 294 bytes leftover after parsing attributes in process `syz.1.107'. [ 97.604898][ T6275] Invalid ELF header magic: != ELF [ 98.941258][ T6291] Invalid ELF header magic: != ELF [ 99.756259][ T6314] netlink: 'syz.3.125': attribute type 4 has an invalid length. [ 99.789873][ T6314] netlink: 78 bytes leftover after parsing attributes in process `syz.3.125'. [ 99.934084][ T6316] ima: policy update failed [ 99.948520][ T30] audit: type=1802 audit(1741532820.080:3): pid=6316 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.124" res=0 errno=0 [ 101.175034][ T6343] Invalid ELF header magic: != ELF [ 102.109515][ T6356] netlink: 28 bytes leftover after parsing attributes in process `syz.0.135'. [ 102.120237][ T6356] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 102.406328][ T6363] random: crng reseeded on system resumption [ 103.333076][ T6371] FAULT_INJECTION: forcing a failure. [ 103.333076][ T6371] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 103.350224][ T6371] CPU: 1 UID: 0 PID: 6371 Comm: syz.2.140 Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 103.350261][ T6371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 103.350275][ T6371] Call Trace: [ 103.350281][ T6371] [ 103.350291][ T6371] dump_stack_lvl+0x16c/0x1f0 [ 103.350331][ T6371] should_fail_ex+0x50a/0x650 [ 103.350360][ T6371] _copy_to_user+0x32/0xd0 [ 103.350390][ T6371] snd_pcm_oss_read2+0x292/0x3e0 [ 103.350420][ T6371] ? __pfx_snd_pcm_oss_read2+0x10/0x10 [ 103.350445][ T6371] ? snd_pcm_kernel_ioctl+0x267/0x2e0 [ 103.350484][ T6371] snd_pcm_oss_read+0x5a3/0x750 [ 103.350524][ T6371] ? rw_verify_area+0xcf/0x680 [ 103.350554][ T6371] ? __pfx_snd_pcm_oss_read+0x10/0x10 [ 103.350583][ T6371] vfs_read+0x1df/0xbf0 [ 103.350615][ T6371] ? __fget_files+0x1fc/0x3a0 [ 103.350644][ T6371] ? __pfx_lock_release+0x10/0x10 [ 103.350678][ T6371] ? __pfx_vfs_read+0x10/0x10 [ 103.350706][ T6371] ? do_futex+0x123/0x350 [ 103.350733][ T6371] ? lock_acquire+0x2f/0xb0 [ 103.350760][ T6371] ? __fget_files+0x40/0x3a0 [ 103.350797][ T6371] ? __fget_files+0x206/0x3a0 [ 103.350836][ T6371] ksys_read+0x12b/0x250 [ 103.350866][ T6371] ? __pfx_ksys_read+0x10/0x10 [ 103.350906][ T6371] do_syscall_64+0xcd/0x250 [ 103.350942][ T6371] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.350971][ T6371] RIP: 0033:0x7f50c2b8d169 [ 103.350991][ T6371] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.351013][ T6371] RSP: 002b:00007f50c3973038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 103.351037][ T6371] RAX: ffffffffffffffda RBX: 00007f50c2da5fa0 RCX: 00007f50c2b8d169 [ 103.351051][ T6371] RDX: 000000000cefbce6 RSI: 0000000000000000 RDI: 0000000000000005 [ 103.351064][ T6371] RBP: 00007f50c2c0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 103.351076][ T6371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 103.351088][ T6371] R13: 0000000000000000 R14: 00007f50c2da5fa0 R15: 00007fffdf87d9d8 [ 103.351119][ T6371] [ 104.240252][ T6393] FAULT_INJECTION: forcing a failure. [ 104.240252][ T6393] name failslab, interval 1, probability 0, space 0, times 0 [ 104.259771][ T6393] CPU: 0 UID: 0 PID: 6393 Comm: syz.3.147 Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 104.259803][ T6393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 104.259816][ T6393] Call Trace: [ 104.259824][ T6393] [ 104.259833][ T6393] dump_stack_lvl+0x16c/0x1f0 [ 104.259871][ T6393] should_fail_ex+0x50a/0x650 [ 104.259893][ T6393] ? fs_reclaim_acquire+0xae/0x150 [ 104.259924][ T6393] ? snd_seq_queue_alloc+0x56/0x550 [ 104.259950][ T6393] should_failslab+0xc2/0x120 [ 104.259973][ T6393] __kmalloc_cache_noprof+0x68/0x410 [ 104.260000][ T6393] ? __lock_acquire+0x15a9/0x3c40 [ 104.260037][ T6393] snd_seq_queue_alloc+0x56/0x550 [ 104.260072][ T6393] snd_seq_ioctl_create_queue+0xa9/0x380 [ 104.260109][ T6393] snd_seq_kernel_client_ctl+0x107/0x1c0 [ 104.260135][ T6393] alloc_seq_queue+0xda/0x180 [ 104.260177][ T6393] ? __pfx_alloc_seq_queue+0x10/0x10 [ 104.260219][ T6393] ? mark_held_locks+0x9f/0xe0 [ 104.260253][ T6393] ? _raw_spin_unlock_irq+0x23/0x50 [ 104.260284][ T6393] snd_seq_oss_open+0x38c/0xa20 [ 104.260315][ T6393] odev_open+0x6f/0x90 [ 104.260336][ T6393] ? __pfx_odev_open+0x10/0x10 [ 104.260369][ T6393] soundcore_open+0x409/0x580 [ 104.260397][ T6393] ? __pfx_soundcore_open+0x10/0x10 [ 104.260420][ T6393] chrdev_open+0x237/0x6a0 [ 104.260456][ T6393] ? __pfx_chrdev_open+0x10/0x10 [ 104.260492][ T6393] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 104.260529][ T6393] do_dentry_open+0x735/0x1c40 [ 104.260561][ T6393] ? __pfx_chrdev_open+0x10/0x10 [ 104.260595][ T6393] ? inode_permission+0xdd/0x5f0 [ 104.260624][ T6393] vfs_open+0x82/0x3f0 [ 104.260646][ T6393] ? may_open+0x1f2/0x400 [ 104.260675][ T6393] path_openat+0x1e88/0x2d80 [ 104.260719][ T6393] ? __pfx_path_openat+0x10/0x10 [ 104.260750][ T6393] ? __pfx___lock_acquire+0x10/0x10 [ 104.260780][ T6393] ? lock_acquire.part.0+0x11b/0x380 [ 104.260810][ T6393] ? find_held_lock+0x2d/0x110 [ 104.260839][ T6393] do_filp_open+0x20c/0x470 [ 104.260872][ T6393] ? __pfx_do_filp_open+0x10/0x10 [ 104.260902][ T6393] ? find_held_lock+0x2d/0x110 [ 104.260950][ T6393] ? alloc_fd+0x41f/0x760 [ 104.260990][ T6393] do_sys_openat2+0x17a/0x1e0 [ 104.261015][ T6393] ? __pfx_do_sys_openat2+0x10/0x10 [ 104.261042][ T6393] ? do_raw_spin_unlock+0x172/0x230 [ 104.261073][ T6393] __x64_sys_openat+0x175/0x210 [ 104.261099][ T6393] ? __pfx___x64_sys_openat+0x10/0x10 [ 104.261138][ T6393] do_syscall_64+0xcd/0x250 [ 104.261172][ T6393] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.261203][ T6393] RIP: 0033:0x7f9757f8d169 [ 104.261223][ T6393] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.261244][ T6393] RSP: 002b:00007f9758e76038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 104.261267][ T6393] RAX: ffffffffffffffda RBX: 00007f97581a5fa0 RCX: 00007f9757f8d169 [ 104.261284][ T6393] RDX: 0000000000000080 RSI: 0000400000000500 RDI: ffffffffffffff9c [ 104.261299][ T6393] RBP: 00007f975800e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 104.261312][ T6393] R10: 0000000000000600 R11: 0000000000000246 R12: 0000000000000000 [ 104.261325][ T6393] R13: 0000000000000000 R14: 00007f97581a5fa0 R15: 00007ffe45ccda58 [ 104.261361][ T6393] [ 104.614620][ T30] audit: type=1326 audit(1741532824.750:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6379 comm="syz.2.144" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f50c2b8d169 code=0x0 [ 107.059133][ T6439] netlink: 346 bytes leftover after parsing attributes in process `syz.1.161'. [ 107.578800][ T6446] Invalid ELF header magic: != ELF [ 108.275069][ T6459] FAULT_INJECTION: forcing a failure. [ 108.275069][ T6459] name failslab, interval 1, probability 0, space 0, times 0 [ 108.314945][ T6459] CPU: 1 UID: 0 PID: 6459 Comm: syz.0.166 Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 108.314981][ T6459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 108.314995][ T6459] Call Trace: [ 108.315002][ T6459] [ 108.315011][ T6459] dump_stack_lvl+0x16c/0x1f0 [ 108.315051][ T6459] should_fail_ex+0x50a/0x650 [ 108.315074][ T6459] ? fs_reclaim_acquire+0xae/0x150 [ 108.315110][ T6459] should_failslab+0xc2/0x120 [ 108.315135][ T6459] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 108.315172][ T6459] ? __kernfs_new_node+0xd3/0x890 [ 108.315211][ T6459] __kernfs_new_node+0xd3/0x890 [ 108.315265][ T6459] ? __pfx___kernfs_new_node+0x10/0x10 [ 108.315296][ T6459] ? __pfx_lock_release+0x10/0x10 [ 108.315324][ T6459] ? kernfs_add_one+0x39d/0x520 [ 108.315362][ T6459] ? up_write+0x1b2/0x520 [ 108.315398][ T6459] kernfs_new_node+0x186/0x240 [ 108.315434][ T6459] __kernfs_create_file+0x53/0x350 [ 108.315463][ T6459] sysfs_add_file_mode_ns+0x1ff/0x3b0 [ 108.315502][ T6459] internal_create_group+0x56c/0xf10 [ 108.315542][ T6459] ? __pfx_internal_create_group+0x10/0x10 [ 108.315595][ T6459] ? kernfs_create_link+0x1bd/0x240 [ 108.315630][ T6459] internal_create_groups+0x9d/0x150 [ 108.315678][ T6459] device_add+0xf33/0x1a70 [ 108.315717][ T6459] ? __pfx_device_add+0x10/0x10 [ 108.315754][ T6459] ? __init_waitqueue_head+0xca/0x150 [ 108.315790][ T6459] netdev_register_kobject+0x183/0x3a0 [ 108.315830][ T6459] register_netdevice+0x147b/0x1eb0 [ 108.315861][ T6459] ? __pfx_register_netdevice+0x10/0x10 [ 108.315889][ T6459] ? __local_bh_enable_ip+0xa4/0x120 [ 108.315929][ T6459] slip_open+0xb7e/0x1140 [ 108.315966][ T6459] ? __pfx_slip_open+0x10/0x10 [ 108.315996][ T6459] ? down_write+0x14e/0x200 [ 108.316034][ T6459] ? __pfx_slip_open+0x10/0x10 [ 108.316064][ T6459] tty_ldisc_open+0x9c/0x120 [ 108.316094][ T6459] tty_set_ldisc+0x318/0x720 [ 108.316127][ T6459] tty_ioctl+0xbd0/0x15d0 [ 108.316158][ T6459] ? __pfx_tty_ioctl+0x10/0x10 [ 108.316200][ T6459] ? do_raw_spin_unlock+0x172/0x230 [ 108.316236][ T6459] ? xfd_validate_state+0x5d/0x180 [ 108.316274][ T6459] ? __pfx_tty_ioctl+0x10/0x10 [ 108.316305][ T6459] __x64_sys_ioctl+0x190/0x200 [ 108.316338][ T6459] do_syscall_64+0xcd/0x250 [ 108.316373][ T6459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.316405][ T6459] RIP: 0033:0x7f5813b8d169 [ 108.316426][ T6459] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 108.316449][ T6459] RSP: 002b:00007f5814986038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 108.316473][ T6459] RAX: ffffffffffffffda RBX: 00007f5813da5fa0 RCX: 00007f5813b8d169 [ 108.316490][ T6459] RDX: 0000000000000000 RSI: 0000000000005423 RDI: 0000000000000001 [ 108.316504][ T6459] RBP: 00007f5813c0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 108.316518][ T6459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 108.316531][ T6459] R13: 0000000000000000 R14: 00007f5813da5fa0 R15: 00007fffafc6ca88 [ 108.316564][ T6459] [ 109.200018][ T6468] netlink: 12 bytes leftover after parsing attributes in process `syz.1.169'. [ 109.256212][ T6468] HfR: entered promiscuous mode [ 109.519069][ T6474] netlink: 106 bytes leftover after parsing attributes in process `syz.1.170'. [ 109.799900][ T6481] Invalid ELF header magic: != ELF [ 110.507828][ T6487] Invalid ELF header magic: != ELF [ 110.794075][ T6490] Invalid ELF header magic: != ELF [ 111.162345][ T6499] Invalid ELF header magic: != ELF [ 113.000143][ T6531] netlink: 330 bytes leftover after parsing attributes in process `syz.1.187'. [ 113.027989][ T6531] mac80211_hwsim hwsim7 : renamed from wlan0 (while UP) [ 113.618558][ T6534] Invalid ELF header magic: != ELF [ 113.797837][ T6544] can: request_module (can-proto-0) failed. [ 113.869680][ T6544] FAULT_INJECTION: forcing a failure. [ 113.869680][ T6544] name fail_futex, interval 1, probability 0, space 0, times 1 [ 113.912632][ T6541] usb usb28: usbfs: process 6541 (syz.2.190) did not claim interface 1 before use [ 113.960870][ T6544] CPU: 1 UID: 0 PID: 6544 Comm: syz.0.192 Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 113.960904][ T6544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 113.960918][ T6544] Call Trace: [ 113.960925][ T6544] [ 113.960934][ T6544] dump_stack_lvl+0x16c/0x1f0 [ 113.960985][ T6544] should_fail_ex+0x50a/0x650 [ 113.961015][ T6544] get_futex_key+0x4a3/0x1000 [ 113.961047][ T6544] ? __pfx_get_futex_key+0x10/0x10 [ 113.961155][ T6544] futex_wake+0xe8/0x4e0 [ 113.961205][ T6544] ? __pfx_futex_wake+0x10/0x10 [ 113.961243][ T6544] ? kmem_cache_free+0x2e2/0x4d0 [ 113.961277][ T6544] ? putname+0x13c/0x180 [ 113.961305][ T6544] do_futex+0x1e5/0x350 [ 113.961335][ T6544] ? __pfx_do_futex+0x10/0x10 [ 113.961373][ T6544] __x64_sys_futex+0x1e1/0x4c0 [ 113.961404][ T6544] ? __x64_sys_openat+0x175/0x210 [ 113.961431][ T6544] ? __pfx___x64_sys_futex+0x10/0x10 [ 113.961472][ T6544] do_syscall_64+0xcd/0x250 [ 113.961503][ T6544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.961532][ T6544] RIP: 0033:0x7f5813b8d169 [ 113.961551][ T6544] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 113.961572][ T6544] RSP: 002b:00007f58149860e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 113.961595][ T6544] RAX: ffffffffffffffda RBX: 00007f5813da5fa8 RCX: 00007f5813b8d169 [ 113.961610][ T6544] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f5813da5fac [ 113.961624][ T6544] RBP: 00007f5813da5fa0 R08: 00007f5814987000 R09: 0000000000000000 [ 113.961639][ T6544] R10: 0000000000000005 R11: 0000000000000246 R12: 00007f5813da5fac [ 113.961653][ T6544] R13: 0000000000000000 R14: 00007fffafc6c9a0 R15: 00007fffafc6ca88 [ 113.961683][ T6544] [ 114.389377][ T6552] netlink: 28 bytes leftover after parsing attributes in process `syz.1.194'. [ 114.399520][ T6552] veth1_macvtap: left promiscuous mode [ 114.405045][ T6552] macsec0: entered allmulticast mode [ 114.541984][ T6555] Invalid ELF header magic: != ELF [ 114.587803][ T6554] netlink: 'syz.2.195': attribute type 72 has an invalid length. [ 114.595783][ T6554] netlink: 8 bytes leftover after parsing attributes in process `syz.2.195'. [ 115.133914][ T6567] capability: warning: `syz.1.198' uses 32-bit capabilities (legacy support in use) [ 117.841810][ T6615] mmap: syz.1.212 (6615) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 117.964932][ T6609] Invalid ELF header magic: != ELF [ 118.262131][ T6616] Invalid ELF header magic: != ELF [ 118.879912][ T6623] Invalid ELF header magic: != ELF [ 119.256819][ T6627] Invalid ELF header magic: != ELF [ 121.873057][ T6666] Invalid ELF header magic: != ELF [ 122.236034][ T6672] Invalid ELF header magic: != ELF [ 123.900615][ T6707] FAULT_INJECTION: forcing a failure. [ 123.900615][ T6707] name failslab, interval 1, probability 0, space 0, times 0 [ 123.913969][ T6707] CPU: 1 UID: 0 PID: 6707 Comm: syz.0.233 Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 123.914000][ T6707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 123.914014][ T6707] Call Trace: [ 123.914021][ T6707] [ 123.914031][ T6707] dump_stack_lvl+0x16c/0x1f0 [ 123.914082][ T6707] should_fail_ex+0x50a/0x650 [ 123.914106][ T6707] ? fs_reclaim_acquire+0xae/0x150 [ 123.914140][ T6707] should_failslab+0xc2/0x120 [ 123.914162][ T6707] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 123.914197][ T6707] ? vma_merge_new_range+0x40a/0xbb0 [ 123.914230][ T6707] ? vm_area_alloc+0x1f/0x230 [ 123.914270][ T6707] vm_area_alloc+0x1f/0x230 [ 123.914303][ T6707] __mmap_region+0x108d/0x2760 [ 123.914329][ T6707] ? __pfx___mmap_region+0x10/0x10 [ 123.914351][ T6707] ? finish_task_switch.isra.0+0x217/0xcc0 [ 123.914385][ T6707] ? __switch_to+0x749/0x1190 [ 123.914417][ T6707] ? hlock_class+0x4e/0x130 [ 123.914441][ T6707] ? mark_lock+0xb5/0xc60 [ 123.914485][ T6707] ? __pfx___schedule+0x10/0x10 [ 123.914554][ T6707] ? cap_capable+0xb3/0x250 [ 123.914586][ T6707] mmap_region+0x1ab/0x3f0 [ 123.914616][ T6707] do_mmap+0xd8d/0x11b0 [ 123.914653][ T6707] ? __pfx_do_mmap+0x10/0x10 [ 123.914717][ T6707] ? __pfx_down_write_killable+0x10/0x10 [ 123.914762][ T6707] vm_mmap_pgoff+0x203/0x3a0 [ 123.914804][ T6707] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 123.914842][ T6707] ? __x64_sys_futex+0x1e1/0x4c0 [ 123.914869][ T6707] ? __x64_sys_futex+0x1ea/0x4c0 [ 123.914920][ T6707] ksys_mmap_pgoff+0x7d/0x5c0 [ 123.914951][ T6707] ? rcu_is_watching+0x12/0xc0 [ 123.914981][ T6707] __x64_sys_mmap+0x125/0x190 [ 123.915021][ T6707] do_syscall_64+0xcd/0x250 [ 123.915055][ T6707] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.915088][ T6707] RIP: 0033:0x7f5813b8d169 [ 123.915115][ T6707] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 123.915138][ T6707] RSP: 002b:00007f5814986038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 123.915161][ T6707] RAX: ffffffffffffffda RBX: 00007f5813da5fa0 RCX: 00007f5813b8d169 [ 123.915178][ T6707] RDX: 0000000000000003 RSI: 0000000002020009 RDI: 0000000000000000 [ 123.915193][ T6707] RBP: 00007f5813c0e2a0 R08: fffffffffffffffa R09: 0000000000008000 [ 123.915208][ T6707] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 123.915222][ T6707] R13: 0000000000000000 R14: 00007f5813da5fa0 R15: 00007fffafc6ca88 [ 123.915256][ T6707] [ 125.969837][ T6729] Invalid ELF header magic: != ELF [ 126.196496][ T6736] FAULT_INJECTION: forcing a failure. [ 126.196496][ T6736] name failslab, interval 1, probability 0, space 0, times 0 [ 126.220976][ T6736] CPU: 1 UID: 0 PID: 6736 Comm: syz.2.241 Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 126.221008][ T6736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 126.221021][ T6736] Call Trace: [ 126.221027][ T6736] [ 126.221036][ T6736] dump_stack_lvl+0x16c/0x1f0 [ 126.221073][ T6736] should_fail_ex+0x50a/0x650 [ 126.221096][ T6736] ? fs_reclaim_acquire+0xae/0x150 [ 126.221128][ T6736] should_failslab+0xc2/0x120 [ 126.221153][ T6736] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 126.221191][ T6736] ? __alloc_skb+0x2b1/0x380 [ 126.221229][ T6736] __alloc_skb+0x2b1/0x380 [ 126.221260][ T6736] ? __pfx___alloc_skb+0x10/0x10 [ 126.221292][ T6736] ? find_held_lock+0x2d/0x110 [ 126.221322][ T6736] ? tipc_node_find+0x2dd/0x500 [ 126.221361][ T6736] tipc_buf_acquire+0x26/0xe0 [ 126.221396][ T6736] tipc_msg_build+0x10c/0x1120 [ 126.221427][ T6736] ? __pfx_tipc_msg_build+0x10/0x10 [ 126.221467][ T6736] __tipc_sendmsg+0xa2a/0x1990 [ 126.221510][ T6736] ? __pfx___tipc_sendmsg+0x10/0x10 [ 126.221556][ T6736] ? __pfx_mark_lock+0x10/0x10 [ 126.221590][ T6736] ? lock_acquire.part.0+0x11b/0x380 [ 126.221627][ T6736] ? __pfx_woken_wake_function+0x10/0x10 [ 126.221669][ T6736] ? mark_held_locks+0x9f/0xe0 [ 126.221707][ T6736] tipc_sendmsg+0x4f/0x70 [ 126.221740][ T6736] ____sys_sendmsg+0xaaf/0xc90 [ 126.221768][ T6736] ? copy_msghdr_from_user+0x10b/0x160 [ 126.221801][ T6736] ? __pfx_____sys_sendmsg+0x10/0x10 [ 126.221826][ T6736] ? __lock_acquire+0xcc5/0x3c40 [ 126.221861][ T6736] ? hlock_class+0x4e/0x130 [ 126.221886][ T6736] ? __lock_acquire+0x15a9/0x3c40 [ 126.221925][ T6736] ___sys_sendmsg+0x135/0x1e0 [ 126.221961][ T6736] ? __pfx____sys_sendmsg+0x10/0x10 [ 126.221993][ T6736] ? __pfx___lock_acquire+0x10/0x10 [ 126.222055][ T6736] ? __pfx___might_resched+0x10/0x10 [ 126.222090][ T6736] ? __might_fault+0xe3/0x190 [ 126.222121][ T6736] __sys_sendmmsg+0x201/0x420 [ 126.222160][ T6736] ? __pfx___sys_sendmmsg+0x10/0x10 [ 126.222205][ T6736] ? __pfx_do_futex+0x10/0x10 [ 126.222250][ T6736] ? xfd_validate_state+0x5d/0x180 [ 126.222284][ T6736] ? rcu_is_watching+0x12/0xc0 [ 126.222316][ T6736] __x64_sys_sendmmsg+0x9c/0x100 [ 126.222349][ T6736] ? lockdep_hardirqs_on+0x7c/0x110 [ 126.222380][ T6736] do_syscall_64+0xcd/0x250 [ 126.222413][ T6736] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.222445][ T6736] RIP: 0033:0x7f50c2b8d169 [ 126.222466][ T6736] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.222488][ T6736] RSP: 002b:00007f50c3973038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 126.222510][ T6736] RAX: ffffffffffffffda RBX: 00007f50c2da5fa0 RCX: 00007f50c2b8d169 [ 126.222526][ T6736] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000003 [ 126.222540][ T6736] RBP: 00007f50c2c0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 126.222563][ T6736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 126.222577][ T6736] R13: 0000000000000000 R14: 00007f50c2da5fa0 R15: 00007fffdf87d9d8 [ 126.222610][ T6736] [ 127.463911][ T6750] Invalid ELF header magic: != ELF [ 127.518038][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 128.455755][ T6770] netlink: 252 bytes leftover after parsing attributes in process `syz.2.249'. [ 128.468258][ T6770] unsupported nla_type 65535 [ 129.497949][ T6778] FAULT_INJECTION: forcing a failure. [ 129.497949][ T6778] name failslab, interval 1, probability 0, space 0, times 0 [ 129.563976][ T6778] CPU: 1 UID: 0 PID: 6778 Comm: syz.1.251 Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 129.564014][ T6778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 129.564029][ T6778] Call Trace: [ 129.564037][ T6778] [ 129.564050][ T6778] dump_stack_lvl+0x16c/0x1f0 [ 129.564090][ T6778] should_fail_ex+0x50a/0x650 [ 129.564113][ T6778] ? fs_reclaim_acquire+0xae/0x150 [ 129.564148][ T6778] should_failslab+0xc2/0x120 [ 129.564174][ T6778] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 129.564211][ T6778] ? __kernfs_new_node+0xd3/0x890 [ 129.564249][ T6778] __kernfs_new_node+0xd3/0x890 [ 129.564286][ T6778] ? __pfx___kernfs_new_node+0x10/0x10 [ 129.564317][ T6778] ? __pfx_lock_release+0x10/0x10 [ 129.564350][ T6778] ? kernfs_add_one+0x39d/0x520 [ 129.564398][ T6778] ? up_write+0x1b2/0x520 [ 129.564446][ T6778] kernfs_new_node+0x186/0x240 [ 129.564490][ T6778] __kernfs_create_file+0x53/0x350 [ 129.564522][ T6778] sysfs_add_file_mode_ns+0x1ff/0x3b0 [ 129.564562][ T6778] sysfs_merge_group+0x1b1/0x340 [ 129.564594][ T6778] ? __pfx_sysfs_merge_group+0x10/0x10 [ 129.564632][ T6778] ? __pfx_dev_add_physical_location+0x10/0x10 [ 129.564664][ T6778] ? bus_to_subsys+0x12d/0x160 [ 129.564704][ T6778] dpm_sysfs_add+0x237/0x280 [ 129.564737][ T6778] device_add+0x9a8/0x1a70 [ 129.564773][ T6778] ? __pfx_device_add+0x10/0x10 [ 129.564809][ T6778] ? lockdep_init_map_type+0x16d/0x7d0 [ 129.564850][ T6778] nfc_register_device+0x41/0x3c0 [ 129.564884][ T6778] nci_register_device+0x7f4/0xb80 [ 129.564911][ T6778] ? __pfx_nci_register_device+0x10/0x10 [ 129.565002][ T6778] virtual_ncidev_open+0x141/0x220 [ 129.565040][ T6778] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 129.565075][ T6778] misc_open+0x35a/0x420 [ 129.565101][ T6778] ? __pfx_misc_open+0x10/0x10 [ 129.565126][ T6778] chrdev_open+0x237/0x6a0 [ 129.565162][ T6778] ? __pfx_chrdev_open+0x10/0x10 [ 129.565200][ T6778] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 129.565238][ T6778] do_dentry_open+0x735/0x1c40 [ 129.565272][ T6778] ? __pfx_chrdev_open+0x10/0x10 [ 129.565308][ T6778] ? inode_permission+0xdd/0x5f0 [ 129.565339][ T6778] vfs_open+0x82/0x3f0 [ 129.565362][ T6778] ? may_open+0x1f2/0x400 [ 129.565394][ T6778] path_openat+0x1e88/0x2d80 [ 129.565448][ T6778] ? __pfx_path_openat+0x10/0x10 [ 129.565485][ T6778] ? __pfx___lock_acquire+0x10/0x10 [ 129.565516][ T6778] ? lock_acquire.part.0+0x11b/0x380 [ 129.565550][ T6778] ? find_held_lock+0x2d/0x110 [ 129.565581][ T6778] do_filp_open+0x20c/0x470 [ 129.565617][ T6778] ? __pfx_do_filp_open+0x10/0x10 [ 129.565649][ T6778] ? find_held_lock+0x2d/0x110 [ 129.565701][ T6778] ? alloc_fd+0x41f/0x760 [ 129.565745][ T6778] do_sys_openat2+0x17a/0x1e0 [ 129.565770][ T6778] ? __pfx_do_sys_openat2+0x10/0x10 [ 129.565811][ T6778] __x64_sys_openat+0x175/0x210 [ 129.565838][ T6778] ? __pfx___x64_sys_openat+0x10/0x10 [ 129.565880][ T6778] do_syscall_64+0xcd/0x250 [ 129.565914][ T6778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.565945][ T6778] RIP: 0033:0x7fdb7558d169 [ 129.565966][ T6778] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 129.565990][ T6778] RSP: 002b:00007fdb76430038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 129.566013][ T6778] RAX: ffffffffffffffda RBX: 00007fdb757a5fa0 RCX: 00007fdb7558d169 [ 129.566030][ T6778] RDX: 0000000000000002 RSI: 0000400000000400 RDI: ffffffffffffff9c [ 129.566045][ T6778] RBP: 00007fdb7560e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 129.566060][ T6778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 129.566074][ T6778] R13: 0000000000000000 R14: 00007fdb757a5fa0 R15: 00007fffeac24048 [ 129.566109][ T6778] [ 130.942850][ T6795] Invalid ELF header magic: != ELF [ 131.228075][ T6802] Invalid ELF header magic: != ELF [ 131.306716][ T6810] bridge0: mtu greater than device maximum [ 131.484352][ T6806] Invalid ELF header magic: != ELF [ 133.191033][ T6830] Invalid ELF header magic: != ELF [ 133.280852][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.297823][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.816131][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 134.386855][ T6846] Invalid ELF header magic: != ELF [ 136.282976][ T6870] Invalid ELF header magic: != ELF [ 136.693088][ T6882] Invalid ELF header magic: != ELF [ 137.661644][ T6892] netlink: 330 bytes leftover after parsing attributes in process `syz.3.279'. [ 137.671945][ T6892] mac80211_hwsim hwsim6 : renamed from wlan0 (while UP) [ 137.841801][ T6896] Invalid ELF header magic: != ELF [ 138.161234][ T6900] FAULT_INJECTION: forcing a failure. [ 138.161234][ T6900] name failslab, interval 1, probability 0, space 0, times 0 [ 138.196676][ T6900] CPU: 0 UID: 0 PID: 6900 Comm: syz.2.281 Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 138.196711][ T6900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 138.196726][ T6900] Call Trace: [ 138.196733][ T6900] [ 138.196743][ T6900] dump_stack_lvl+0x16c/0x1f0 [ 138.196783][ T6900] should_fail_ex+0x50a/0x650 [ 138.196813][ T6900] ? sctp_add_bind_addr+0x9a/0x3d0 [ 138.196840][ T6900] should_failslab+0xc2/0x120 [ 138.196866][ T6900] __kmalloc_cache_noprof+0x68/0x410 [ 138.196907][ T6900] sctp_add_bind_addr+0x9a/0x3d0 [ 138.196939][ T6900] sctp_copy_local_addr_list+0x39e/0x5a0 [ 138.196977][ T6900] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 138.197014][ T6900] ? sctp_auth_asoc_copy_shkeys+0x2a7/0x360 [ 138.197055][ T6900] ? sctp_bind_addr_copy+0xe0/0x530 [ 138.197081][ T6900] sctp_bind_addr_copy+0xe0/0x530 [ 138.197116][ T6900] sctp_connect_new_asoc+0x1d8/0x790 [ 138.197155][ T6900] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 138.197193][ T6900] ? mark_held_locks+0x9f/0xe0 [ 138.197229][ T6900] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 138.197268][ T6900] sctp_sendmsg+0x1610/0x1eb0 [ 138.197315][ T6900] ? __pfx_sctp_sendmsg+0x10/0x10 [ 138.197372][ T6900] ? __pfx_aa_sk_perm+0x10/0x10 [ 138.197407][ T6900] ? __pfx_sctp_sendmsg+0x10/0x10 [ 138.197454][ T6900] inet_sendmsg+0x119/0x140 [ 138.197481][ T6900] ____sys_sendmsg+0x98c/0xc90 [ 138.197514][ T6900] ? __pfx_____sys_sendmsg+0x10/0x10 [ 138.197540][ T6900] ? __lock_acquire+0xcc5/0x3c40 [ 138.197588][ T6900] ___sys_sendmsg+0x135/0x1e0 [ 138.197623][ T6900] ? __pfx____sys_sendmsg+0x10/0x10 [ 138.197667][ T6900] ? trace_lock_acquire+0x14e/0x1f0 [ 138.197717][ T6900] __sys_sendmmsg+0x201/0x420 [ 138.197756][ T6900] ? __pfx___sys_sendmmsg+0x10/0x10 [ 138.197803][ T6900] ? __pfx_do_futex+0x10/0x10 [ 138.197849][ T6900] ? xfd_validate_state+0x5d/0x180 [ 138.197883][ T6900] ? rcu_is_watching+0x12/0xc0 [ 138.197916][ T6900] __x64_sys_sendmmsg+0x9c/0x100 [ 138.197950][ T6900] ? lockdep_hardirqs_on+0x7c/0x110 [ 138.197982][ T6900] do_syscall_64+0xcd/0x250 [ 138.198015][ T6900] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.198048][ T6900] RIP: 0033:0x7f50c2b8d169 [ 138.198068][ T6900] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 138.198090][ T6900] RSP: 002b:00007f50c3952038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 138.198114][ T6900] RAX: ffffffffffffffda RBX: 00007f50c2da6080 RCX: 00007f50c2b8d169 [ 138.198129][ T6900] RDX: 0000000000000005 RSI: 0000400000000140 RDI: 0000000000000006 [ 138.198143][ T6900] RBP: 00007f50c2c0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 138.198157][ T6900] R10: 0000000000000311 R11: 0000000000000246 R12: 0000000000000000 [ 138.198170][ T6900] R13: 0000000000000000 R14: 00007f50c2da6080 R15: 00007fffdf87d9d8 [ 138.198202][ T6900] [ 138.773074][ T6905] FAULT_INJECTION: forcing a failure. [ 138.773074][ T6905] name failslab, interval 1, probability 0, space 0, times 0 [ 138.813311][ T6905] CPU: 1 UID: 0 PID: 6905 Comm: syz.3.283 Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 138.813350][ T6905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 138.813364][ T6905] Call Trace: [ 138.813370][ T6905] [ 138.813379][ T6905] dump_stack_lvl+0x16c/0x1f0 [ 138.813418][ T6905] should_fail_ex+0x50a/0x650 [ 138.813444][ T6905] ? fs_reclaim_acquire+0xae/0x150 [ 138.813480][ T6905] should_failslab+0xc2/0x120 [ 138.813505][ T6905] __kmalloc_cache_node_noprof+0x6e/0x420 [ 138.813545][ T6905] ? bdi_alloc+0x44/0x170 [ 138.813581][ T6905] bdi_alloc+0x44/0x170 [ 138.813612][ T6905] __alloc_disk_node+0xa9/0x610 [ 138.813641][ T6905] ? blk_alloc_queue+0x1a3/0x700 [ 138.813676][ T6905] __blk_alloc_disk+0xd8/0x170 [ 138.813708][ T6905] ? __pfx___blk_alloc_disk+0x10/0x10 [ 138.813763][ T6905] ? __pfx_idr_alloc+0x10/0x10 [ 138.813796][ T6905] ? __raw_spin_lock_init+0x3a/0x110 [ 138.813820][ T6905] ? __pfx_hot_add_show+0x10/0x10 [ 138.813852][ T6905] zram_add+0x160/0x6b0 [ 138.813884][ T6905] ? __pfx_zram_add+0x10/0x10 [ 138.813936][ T6905] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 138.813970][ T6905] ? rcu_is_watching+0x12/0xc0 [ 138.814003][ T6905] ? __pfx_hot_add_show+0x10/0x10 [ 138.814036][ T6905] hot_add_show+0x21/0x80 [ 138.814069][ T6905] class_attr_show+0x6f/0xa0 [ 138.814102][ T6905] ? __pfx_class_attr_show+0x10/0x10 [ 138.814142][ T6905] sysfs_kf_seq_show+0x23e/0x410 [ 138.814182][ T6905] seq_read_iter+0x4f4/0x12b0 [ 138.814233][ T6905] kernfs_fop_read_iter+0x414/0x580 [ 138.814259][ T6905] ? rw_verify_area+0xcf/0x680 [ 138.814293][ T6905] vfs_read+0x886/0xbf0 [ 138.814333][ T6905] ? __pfx_vfs_read+0x10/0x10 [ 138.814388][ T6905] ksys_read+0x12b/0x250 [ 138.814418][ T6905] ? __pfx_ksys_read+0x10/0x10 [ 138.814462][ T6905] do_syscall_64+0xcd/0x250 [ 138.814497][ T6905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.814530][ T6905] RIP: 0033:0x7f9757f8d169 [ 138.814551][ T6905] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 138.814573][ T6905] RSP: 002b:00007f9758e76038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 138.814597][ T6905] RAX: ffffffffffffffda RBX: 00007f97581a5fa0 RCX: 00007f9757f8d169 [ 138.814613][ T6905] RDX: 0000000000001000 RSI: 0000400000000ec0 RDI: 0000000000000008 [ 138.814628][ T6905] RBP: 00007f975800e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 138.814644][ T6905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 138.814659][ T6905] R13: 0000000000000000 R14: 00007f97581a5fa0 R15: 00007ffe45ccda58 [ 138.814695][ T6905] [ 139.139171][ T6905] zram: Error allocating disk structure for device 1 [ 139.217697][ T6908] Invalid ELF header magic: != ELF [ 140.352527][ T6918] HfR: entered promiscuous mode [ 140.403894][ T6918] netlink: 12 bytes leftover after parsing attributes in process `syz.0.286'. [ 140.439224][ T6918] HfR: left promiscuous mode [ 140.523735][ T6923] HfR: entered promiscuous mode [ 141.071663][ T6930] Invalid ELF header magic: != ELF [ 142.518405][ T6945] random: crng reseeded on system resumption [ 142.660121][ T6942] Invalid ELF header magic: != ELF [ 142.799805][ T6950] FAULT_INJECTION: forcing a failure. [ 142.799805][ T6950] name failslab, interval 1, probability 0, space 0, times 0 [ 142.844404][ T6950] CPU: 1 UID: 0 PID: 6950 Comm: syz.1.295 Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 142.844440][ T6950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 142.844455][ T6950] Call Trace: [ 142.844462][ T6950] [ 142.844472][ T6950] dump_stack_lvl+0x16c/0x1f0 [ 142.844510][ T6950] should_fail_ex+0x50a/0x650 [ 142.844532][ T6950] ? fs_reclaim_acquire+0xae/0x150 [ 142.844564][ T6950] should_failslab+0xc2/0x120 [ 142.844587][ T6950] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 142.844618][ T6950] ? acpi_ex_resolve_to_value+0xfc/0x7e0 [ 142.844649][ T6950] ? acpi_ut_create_generic_state+0x5c/0xb0 [ 142.844678][ T6950] acpi_ut_create_generic_state+0x5c/0xb0 [ 142.844706][ T6950] acpi_ds_result_push+0x195/0x380 [ 142.844737][ T6950] acpi_ds_evaluate_name_path+0x208/0x470 [ 142.844767][ T6950] ? __pfx_acpi_ds_evaluate_name_path+0x10/0x10 [ 142.844795][ T6950] ? acpi_ps_get_next_namepath+0x11d/0x730 [ 142.844819][ T6950] ? acpi_ps_get_next_namepath+0x1bf/0x730 [ 142.844848][ T6950] acpi_ds_exec_end_op+0x3b0/0x1460 [ 142.844874][ T6950] ? __pfx_acpi_ds_exec_end_op+0x10/0x10 [ 142.844919][ T6950] acpi_ps_parse_loop+0x429/0x1ce0 [ 142.844952][ T6950] ? __pfx_acpi_ps_parse_loop+0x10/0x10 [ 142.844975][ T6950] ? trace_kmem_cache_alloc+0x2d/0xd0 [ 142.844999][ T6950] ? kmem_cache_alloc_noprof+0x279/0x3d0 [ 142.845030][ T6950] ? acpi_ut_create_thread_state+0x63/0x170 [ 142.845059][ T6950] acpi_ps_parse_aml+0x3c1/0xcb0 [ 142.845086][ T6950] acpi_ps_execute_method+0x55a/0xb30 [ 142.845114][ T6950] ? acpi_ut_acquire_mutex+0x125/0x1d0 [ 142.845144][ T6950] acpi_ns_evaluate+0x76c/0xca0 [ 142.845177][ T6950] acpi_evaluate_object+0x1fb/0xa90 [ 142.845202][ T6950] ? __lock_acquire+0xcc5/0x3c40 [ 142.845228][ T6950] ? __pfx_acpi_evaluate_object+0x10/0x10 [ 142.845258][ T6950] acpi_evaluate_integer+0xde/0x200 [ 142.845277][ T6950] ? __pfx___lock_acquire+0x10/0x10 [ 142.845301][ T6950] ? __pfx_acpi_evaluate_integer+0x10/0x10 [ 142.845320][ T6950] ? rcu_is_watching+0x12/0xc0 [ 142.845339][ T6950] ? trace_contention_end+0xee/0x140 [ 142.845375][ T6950] ? __pfx_status_show+0x10/0x10 [ 142.845397][ T6950] status_show+0xa1/0x120 [ 142.845422][ T6950] ? __pfx_status_show+0x10/0x10 [ 142.845452][ T6950] dev_attr_show+0x53/0xe0 [ 142.845479][ T6950] ? __pfx_dev_attr_show+0x10/0x10 [ 142.845503][ T6950] sysfs_kf_seq_show+0x23e/0x410 [ 142.845532][ T6950] seq_read_iter+0x4f4/0x12b0 [ 142.845575][ T6950] kernfs_fop_read_iter+0x414/0x580 [ 142.845598][ T6950] ? rw_verify_area+0xcf/0x680 [ 142.845626][ T6950] vfs_read+0x886/0xbf0 [ 142.845658][ T6950] ? __pfx_vfs_read+0x10/0x10 [ 142.845702][ T6950] ksys_read+0x12b/0x250 [ 142.845726][ T6950] ? __pfx_ksys_read+0x10/0x10 [ 142.845759][ T6950] do_syscall_64+0xcd/0x250 [ 142.845787][ T6950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.845813][ T6950] RIP: 0033:0x7fdb7558d169 [ 142.845830][ T6950] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.845847][ T6950] RSP: 002b:00007fdb76430038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 142.845867][ T6950] RAX: ffffffffffffffda RBX: 00007fdb757a5fa0 RCX: 00007fdb7558d169 [ 142.845880][ T6950] RDX: 0000000000000070 RSI: 0000400000000000 RDI: 0000000000000006 [ 142.845896][ T6950] RBP: 00007fdb7560e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 142.845908][ T6950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 142.845919][ T6950] R13: 0000000000000000 R14: 00007fdb757a5fa0 R15: 00007fffeac24048 [ 142.845945][ T6950] [ 142.845975][ T6950] ACPI Error: Failed to extend the result stack (20240827/dswstate-130) [ 143.226377][ T6950] ACPI Error: Aborting method \_SB.LNKA._STA due to previous error (AE_NO_MEMORY) (20240827/psparse-529) [ 143.521602][ T6959] FAULT_INJECTION: forcing a failure. [ 143.521602][ T6959] name failslab, interval 1, probability 0, space 0, times 0 [ 143.585506][ T6959] CPU: 1 UID: 0 PID: 6959 Comm: syz.1.296 Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 143.585544][ T6959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 143.585557][ T6959] Call Trace: [ 143.585564][ T6959] [ 143.585575][ T6959] dump_stack_lvl+0x16c/0x1f0 [ 143.585615][ T6959] should_fail_ex+0x50a/0x650 [ 143.585646][ T6959] ? fs_reclaim_acquire+0xae/0x150 [ 143.585680][ T6959] ? __register_sysctl_table+0xb4/0x1910 [ 143.585703][ T6959] should_failslab+0xc2/0x120 [ 143.585726][ T6959] __kmalloc_noprof+0xcb/0x510 [ 143.585767][ T6959] __register_sysctl_table+0xb4/0x1910 [ 143.585791][ T6959] ? rcu_is_watching+0x12/0xc0 [ 143.585819][ T6959] ? __pfx___register_sysctl_table+0x10/0x10 [ 143.585851][ T6959] ? is_module_address+0x2a/0x50 [ 143.585880][ T6959] ? register_net_sysctl_sz+0x228/0x3e0 [ 143.585912][ T6959] ? __asan_memcpy+0x3c/0x60 [ 143.585944][ T6959] xfrm_sysctl_init+0x1f5/0x2d0 [ 143.585973][ T6959] xfrm_net_init+0x83f/0xcb0 [ 143.586002][ T6959] ? __pfx_xfrm_net_init+0x10/0x10 [ 143.586025][ T6959] ops_init+0x1df/0x5f0 [ 143.586050][ T6959] setup_net+0x21f/0x860 [ 143.586076][ T6959] ? __pfx_setup_net+0x10/0x10 [ 143.586097][ T6959] ? down_read_killable+0xcc/0x380 [ 143.586133][ T6959] ? __pfx_down_read_killable+0x10/0x10 [ 143.586165][ T6959] ? __raw_spin_lock_init+0x3a/0x110 [ 143.586191][ T6959] ? debug_mutex_init+0x37/0x70 [ 143.586219][ T6959] copy_net_ns+0x2a6/0x5f0 [ 143.586247][ T6959] create_new_namespaces+0x3ea/0xad0 [ 143.586291][ T6959] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 143.586329][ T6959] ksys_unshare+0x45d/0xa40 [ 143.586354][ T6959] ? __pfx_ksys_unshare+0x10/0x10 [ 143.586376][ T6959] ? xfd_validate_state+0x5d/0x180 [ 143.586420][ T6959] __x64_sys_unshare+0x31/0x40 [ 143.586443][ T6959] do_syscall_64+0xcd/0x250 [ 143.586476][ T6959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.586507][ T6959] RIP: 0033:0x7fdb7558d169 [ 143.586527][ T6959] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 143.586549][ T6959] RSP: 002b:00007fdb76430038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 143.586572][ T6959] RAX: ffffffffffffffda RBX: 00007fdb757a5fa0 RCX: 00007fdb7558d169 [ 143.586589][ T6959] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 143.586604][ T6959] RBP: 00007fdb7560e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 143.586616][ T6959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 143.586637][ T6959] R13: 0000000000000000 R14: 00007fdb757a5fa0 R15: 00007fffeac24048 [ 143.586666][ T6959] [ 144.285314][ T6963] Invalid ELF header magic: != ELF [ 145.077298][ T6977] Invalid ELF header magic: != ELF [ 145.260476][ T6980] Invalid ELF header magic: != ELF [ 146.225014][ T6990] Invalid ELF header magic: != ELF [ 147.359958][ T7017] Invalid ELF header magic: != ELF [ 147.753693][ T7024] Invalid ELF header magic: != ELF [ 147.972257][ T7027] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 148.523441][ T7040] Invalid ELF header magic: != ELF [ 148.542827][ T7038] Invalid ELF header magic: != ELF [ 149.360258][ T7053] netlink: 'syz.0.321': attribute type 72 has an invalid length. [ 149.400929][ T7051] Invalid ELF header magic: != ELF [ 149.432049][ T7053] netlink: 8 bytes leftover after parsing attributes in process `syz.0.321'. [ 150.361508][ T7061] Invalid ELF header magic: != ELF [ 150.393704][ T7058] Invalid ELF header magic: != ELF [ 151.930916][ T7085] Invalid ELF header magic: != ELF [ 152.610111][ T7102] Invalid ELF header magic: != ELF [ 152.614665][ T7099] Invalid ELF header magic: != ELF [ 152.666194][ T7104] FAULT_INJECTION: forcing a failure. [ 152.666194][ T7104] name failslab, interval 1, probability 0, space 0, times 0 [ 152.672122][ T7102] netlink: 'syz.2.336': attribute type 72 has an invalid length. [ 152.686759][ T7102] netlink: 8 bytes leftover after parsing attributes in process `syz.2.336'. [ 152.704406][ T7104] CPU: 1 UID: 0 PID: 7104 Comm: syz.3.335 Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 152.704443][ T7104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 152.704457][ T7104] Call Trace: [ 152.704465][ T7104] [ 152.704474][ T7104] dump_stack_lvl+0x16c/0x1f0 [ 152.704514][ T7104] should_fail_ex+0x50a/0x650 [ 152.704545][ T7104] ? fs_reclaim_acquire+0xae/0x150 [ 152.704581][ T7104] ? snd_pcm_oss_change_params_locked+0x6d9/0x3a60 [ 152.704613][ T7104] should_failslab+0xc2/0x120 [ 152.704638][ T7104] __kmalloc_cache_noprof+0x68/0x410 [ 152.704670][ T7104] ? _snd_pcm_hw_param_min+0x259/0x630 [ 152.704703][ T7104] snd_pcm_oss_change_params_locked+0x6d9/0x3a60 [ 152.704747][ T7104] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 152.704779][ T7104] ? __pfx___mutex_lock+0x10/0x10 [ 152.704834][ T7104] snd_pcm_oss_make_ready+0xe6/0x1b0 [ 152.704865][ T7104] snd_pcm_oss_sync+0x1d7/0x7f0 [ 152.704901][ T7104] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 152.704929][ T7104] snd_pcm_oss_release+0x28b/0x310 [ 152.704959][ T7104] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 152.704985][ T7104] __fput+0x3ff/0xb70 [ 152.705018][ T7104] task_work_run+0x14e/0x250 [ 152.705052][ T7104] ? __pfx_task_work_run+0x10/0x10 [ 152.705083][ T7104] ? __pfx___do_sys_close_range+0x10/0x10 [ 152.705127][ T7104] syscall_exit_to_user_mode+0x27b/0x2a0 [ 152.705160][ T7104] do_syscall_64+0xda/0x250 [ 152.705194][ T7104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.705226][ T7104] RIP: 0033:0x7f9757f8d169 [ 152.705246][ T7104] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 152.705268][ T7104] RSP: 002b:00007f9758e76038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 152.705292][ T7104] RAX: 0000000000000000 RBX: 00007f97581a5fa0 RCX: 00007f9757f8d169 [ 152.705307][ T7104] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 152.705321][ T7104] RBP: 00007f975800e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 152.705335][ T7104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 152.705349][ T7104] R13: 0000000000000000 R14: 00007f97581a5fa0 R15: 00007ffe45ccda58 [ 152.705381][ T7104] [ 153.466718][ T7110] Invalid ELF header magic: != ELF [ 154.639921][ T7119] Invalid ELF header magic: != ELF [ 155.887205][ T7142] Invalid ELF header magic: != ELF [ 156.539274][ T7148] Invalid ELF header magic: != ELF [ 156.743884][ T7157] Invalid ELF header magic: != ELF [ 156.770016][ T7160] netlink: 'syz.1.349': attribute type 72 has an invalid length. [ 156.796180][ T7160] netlink: 8 bytes leftover after parsing attributes in process `syz.1.349'. [ 157.685172][ T7171] Invalid ELF header magic: != ELF [ 157.893230][ T7173] bridge0: port 3(team0) entered blocking state [ 157.910153][ T7173] bridge0: port 3(team0) entered disabled state [ 157.927408][ T7173] team0: entered allmulticast mode [ 157.932714][ T7173] team_slave_0: entered allmulticast mode [ 157.962390][ T7173] team_slave_1: entered allmulticast mode [ 158.009172][ T7173] team0: entered promiscuous mode [ 158.022798][ T7173] team_slave_0: entered promiscuous mode [ 158.197879][ T7173] team_slave_1: entered promiscuous mode [ 158.204570][ T7173] bridge0: port 3(team0) entered blocking state [ 158.211451][ T7173] bridge0: port 3(team0) entered forwarding state [ 158.710447][ T7182] Invalid ELF header magic: != ELF [ 159.032400][ T7196] Invalid ELF header magic: != ELF [ 159.195812][ T7200] Invalid ELF header magic: != ELF [ 159.506289][ T7204] Invalid ELF header magic: != ELF [ 160.095823][ T7212] Invalid ELF header magic: != ELF [ 160.169082][ T7212] netlink: 'syz.0.363': attribute type 72 has an invalid length. [ 160.196834][ T7212] netlink: 8 bytes leftover after parsing attributes in process `syz.0.363'. [ 161.247743][ T7222] Invalid ELF header magic: != ELF [ 161.488501][ T7230] Invalid ELF header magic: != ELF [ 161.589332][ T7235] netlink: 4 bytes leftover after parsing attributes in process `syz.3.368'. [ 162.521359][ T7252] Invalid ELF header magic: != ELF [ 162.845492][ T7255] Invalid ELF header magic: != ELF [ 163.160701][ T7266] netlink: 'syz.1.377': attribute type 72 has an invalid length. [ 163.187228][ T7266] netlink: 8 bytes leftover after parsing attributes in process `syz.1.377'. [ 163.201383][ T7263] Invalid ELF header magic: != ELF [ 163.766541][ T7273] Console: switching to colour VGA+ 80x25 [ 164.955027][ T7290] Invalid ELF header magic: != ELF [ 165.018890][ T7294] Invalid ELF header magic: != ELF [ 165.059583][ T7293] Invalid ELF header magic: != ELF [ 166.294106][ T7310] Invalid ELF header magic: != ELF [ 166.906810][ T7325] netlink: 4 bytes leftover after parsing attributes in process `syz.1.391'. [ 169.253237][ T7352] FAULT_INJECTION: forcing a failure. [ 169.253237][ T7352] name failslab, interval 1, probability 0, space 0, times 0 [ 169.266398][ T7352] CPU: 0 UID: 0 PID: 7352 Comm: syz.2.399 Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 169.266431][ T7352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 169.266445][ T7352] Call Trace: [ 169.266452][ T7352] [ 169.266461][ T7352] dump_stack_lvl+0x16c/0x1f0 [ 169.266500][ T7352] should_fail_ex+0x50a/0x650 [ 169.266524][ T7352] ? fs_reclaim_acquire+0xae/0x150 [ 169.266556][ T7352] ? lsm_blob_alloc+0x68/0x90 [ 169.266591][ T7352] should_failslab+0xc2/0x120 [ 169.266615][ T7352] __kmalloc_noprof+0xcb/0x510 [ 169.266656][ T7352] lsm_blob_alloc+0x68/0x90 [ 169.266691][ T7352] security_prepare_creds+0x30/0x270 [ 169.266725][ T7352] prepare_creds+0x540/0x750 [ 169.266752][ T7352] ? __pfx_get_random_u64+0x10/0x10 [ 169.266779][ T7352] copy_creds+0xa7/0xa50 [ 169.266811][ T7352] copy_process+0x10b2/0x8c50 [ 169.266835][ T7352] ? plist_add+0x458/0x600 [ 169.266862][ T7352] ? lock_acquire+0x2f/0xb0 [ 169.266893][ T7352] ? schedule+0x1fd/0x350 [ 169.266921][ T7352] ? futex_wait_queue+0x41/0x1f0 [ 169.266960][ T7352] ? schedule+0xf1/0x350 [ 169.266990][ T7352] ? futex_unqueue+0xba/0x140 [ 169.267024][ T7352] ? __pfx_copy_process+0x10/0x10 [ 169.267046][ T7352] ? __pfx___futex_wait+0x10/0x10 [ 169.267082][ T7352] ? try_to_wake_up+0x158/0x1490 [ 169.267118][ T7352] ? __pfx_futex_wake_mark+0x10/0x10 [ 169.267171][ T7352] kernel_clone+0xfd/0x960 [ 169.267195][ T7352] ? __pfx_kernel_clone+0x10/0x10 [ 169.267237][ T7352] __do_sys_clone+0xcf/0x120 [ 169.267259][ T7352] ? __pfx___do_sys_clone+0x10/0x10 [ 169.267281][ T7352] ? __pfx___might_resched+0x10/0x10 [ 169.267325][ T7352] ? rcu_is_watching+0x12/0xc0 [ 169.267355][ T7352] do_syscall_64+0xcd/0x250 [ 169.267386][ T7352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.267416][ T7352] RIP: 0033:0x7f50c2b8d169 [ 169.267437][ T7352] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 169.267459][ T7352] RSP: 002b:00007f50c3972fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 169.267482][ T7352] RAX: ffffffffffffffda RBX: 00007f50c2da5fa0 RCX: 00007f50c2b8d169 [ 169.267499][ T7352] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 169.267512][ T7352] RBP: 00007f50c2c0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 169.267527][ T7352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 169.267541][ T7352] R13: 0000000000000000 R14: 00007f50c2da5fa0 R15: 00007fffdf87d9d8 [ 169.267573][ T7352] [ 169.579817][ T7347] Invalid ELF header magic: != ELF [ 170.896812][ T7368] Invalid ELF header magic: != ELF [ 170.911224][ T7375] Invalid ELF header magic: != ELF [ 172.116699][ T7388] Invalid ELF header magic: != ELF [ 173.518275][ T7404] Invalid ELF header magic: != ELF [ 174.217709][ T7413] netlink: 'syz.1.415': attribute type 1 has an invalid length. [ 176.133519][ T7442] cougar: G6 mapped to space [ 176.279403][ T7444] Invalid ELF header magic: != ELF [ 177.574609][ T7459] FAULT_INJECTION: forcing a failure. [ 177.574609][ T7459] name failslab, interval 1, probability 0, space 0, times 0 [ 177.588851][ T7459] CPU: 1 UID: 0 PID: 7459 Comm: syz.1.427 Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 177.588884][ T7459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 177.588898][ T7459] Call Trace: [ 177.588905][ T7459] [ 177.588915][ T7459] dump_stack_lvl+0x16c/0x1f0 [ 177.588955][ T7459] should_fail_ex+0x50a/0x650 [ 177.588978][ T7459] ? fs_reclaim_acquire+0xae/0x150 [ 177.589012][ T7459] should_failslab+0xc2/0x120 [ 177.589036][ T7459] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 177.589071][ T7459] ? getname_kernel+0x52/0x370 [ 177.589100][ T7459] getname_kernel+0x52/0x370 [ 177.589125][ T7459] do_file_open_root+0x19e/0x610 [ 177.589162][ T7459] ? __pfx_do_file_open_root+0x10/0x10 [ 177.589192][ T7459] ? __lock_acquire+0x2077/0x3c40 [ 177.589242][ T7459] ? lock_acquire.part.0+0x11b/0x380 [ 177.589271][ T7459] ? find_held_lock+0x2d/0x110 [ 177.589293][ T7459] ? find_held_lock+0x2d/0x110 [ 177.589319][ T7459] file_open_root+0x2a8/0x450 [ 177.589351][ T7459] ? __pfx_file_open_root+0x10/0x10 [ 177.589384][ T7459] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 177.589405][ T7459] ? lockref_get+0x15/0x50 [ 177.589438][ T7459] kernel_read_file_from_path_initns+0x18a/0x260 [ 177.589471][ T7459] ? __pfx_kernel_read_file_from_path_initns+0x10/0x10 [ 177.589503][ T7459] ? _request_firmware+0x505/0x1480 [ 177.589531][ T7459] _request_firmware+0x74b/0x1480 [ 177.589567][ T7459] ? __pfx__request_firmware+0x10/0x10 [ 177.589591][ T7459] ? __pfx___mutex_lock+0x10/0x10 [ 177.589634][ T7459] request_firmware+0x35/0x50 [ 177.589656][ T7459] reg_reload_regdb+0x8a/0x460 [ 177.589691][ T7459] ? __pfx_reg_reload_regdb+0x10/0x10 [ 177.589733][ T7459] ? nl80211_pre_doit+0x1b0/0xb10 [ 177.589767][ T7459] genl_family_rcv_msg_doit+0x202/0x2f0 [ 177.589808][ T7459] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 177.589844][ T7459] ? trace_cap_capable+0x1a2/0x210 [ 177.589878][ T7459] ? bpf_lsm_capable+0x9/0x10 [ 177.589903][ T7459] ? security_capable+0x7e/0x260 [ 177.589936][ T7459] genl_rcv_msg+0x565/0x800 [ 177.589963][ T7459] ? __pfx_genl_rcv_msg+0x10/0x10 [ 177.589989][ T7459] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 177.590015][ T7459] ? __pfx_nl80211_reload_regdb+0x10/0x10 [ 177.590045][ T7459] ? __pfx_nl80211_post_doit+0x10/0x10 [ 177.590088][ T7459] netlink_rcv_skb+0x16b/0x440 [ 177.590119][ T7459] ? __pfx_genl_rcv_msg+0x10/0x10 [ 177.590144][ T7459] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 177.590191][ T7459] ? down_read+0xc9/0x330 [ 177.590223][ T7459] ? __pfx_down_read+0x10/0x10 [ 177.590256][ T7459] ? netlink_deliver_tap+0x1ae/0xd30 [ 177.590291][ T7459] genl_rcv+0x28/0x40 [ 177.590320][ T7459] netlink_unicast+0x53c/0x7f0 [ 177.590354][ T7459] ? __pfx_netlink_unicast+0x10/0x10 [ 177.590386][ T7459] ? __phys_addr_symbol+0x30/0x80 [ 177.590409][ T7459] ? __check_object_size+0x488/0x710 [ 177.590440][ T7459] netlink_sendmsg+0x8b8/0xd70 [ 177.590478][ T7459] ? __pfx_netlink_sendmsg+0x10/0x10 [ 177.590524][ T7459] ____sys_sendmsg+0xaaf/0xc90 [ 177.590553][ T7459] ? copy_msghdr_from_user+0x10b/0x160 [ 177.590589][ T7459] ? __pfx_____sys_sendmsg+0x10/0x10 [ 177.590630][ T7459] ___sys_sendmsg+0x135/0x1e0 [ 177.590668][ T7459] ? __pfx____sys_sendmsg+0x10/0x10 [ 177.590714][ T7459] ? __pfx_lock_release+0x10/0x10 [ 177.590756][ T7459] ? trace_lock_acquire+0x14e/0x1f0 [ 177.590797][ T7459] ? __fget_files+0x206/0x3a0 [ 177.590843][ T7459] __sys_sendmsg+0x16e/0x220 [ 177.590878][ T7459] ? __pfx___sys_sendmsg+0x10/0x10 [ 177.590910][ T7459] ? __x64_sys_futex+0x1e1/0x4c0 [ 177.590956][ T7459] do_syscall_64+0xcd/0x250 [ 177.590996][ T7459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.591032][ T7459] RIP: 0033:0x7fdb7558d169 [ 177.591054][ T7459] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 177.591078][ T7459] RSP: 002b:00007fdb76430038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 177.591102][ T7459] RAX: ffffffffffffffda RBX: 00007fdb757a5fa0 RCX: 00007fdb7558d169 [ 177.591119][ T7459] RDX: 0000000000000000 RSI: 0000400000000580 RDI: 0000000000000009 [ 177.591135][ T7459] RBP: 00007fdb7560e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 177.591150][ T7459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 177.591165][ T7459] R13: 0000000000000000 R14: 00007fdb757a5fa0 R15: 00007fffeac24048 [ 177.591198][ T7459] [ 177.594981][ T7459] platform regulatory.0: loading /lib/firmware/updates/6.14.0-rc5-syzkaller-00268-g1110ce6a1e34/regulatory.db failed with error -12 [ 178.091128][ T7459] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 178.100819][ T7459] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 178.164587][ T7461] Invalid ELF header magic: != ELF [ 178.779619][ T7475] Invalid ELF header magic: != ELF [ 181.176344][ T7504] syz.1.439 uses obsolete (PF_INET,SOCK_PACKET) [ 181.194098][ T7508] netlink: 28 bytes leftover after parsing attributes in process `syz.2.440'. [ 181.218700][ T7508] bridge_slave_1: left allmulticast mode [ 181.224414][ T7508] bridge_slave_1: left promiscuous mode [ 181.253516][ T7508] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.286719][ T7508] bridge_slave_0: left allmulticast mode [ 181.293136][ T7508] bridge_slave_0: left promiscuous mode [ 181.299734][ T7508] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.880990][ T7506] Invalid ELF header magic: != ELF [ 182.052937][ T7515] Invalid ELF header magic: != ELF [ 182.070255][ T7518] Invalid ELF header magic: != ELF [ 182.078875][ T7520] netlink: 'syz.2.443': attribute type 72 has an invalid length. [ 182.087551][ T7520] netlink: 8 bytes leftover after parsing attributes in process `syz.2.443'. [ 184.572090][ T7544] Invalid ELF header magic: != ELF [ 186.284741][ T7575] netlink: 'syz.0.453': attribute type 72 has an invalid length. [ 186.297859][ T7575] netlink: 8 bytes leftover after parsing attributes in process `syz.0.453'. [ 186.385410][ T7576] Invalid ELF header magic: != ELF [ 186.938272][ T7582] Invalid ELF header magic: != ELF [ 187.171747][ T7581] Invalid ELF header magic: != ELF [ 189.012800][ T7619] [U] [ 189.015786][ T7619] [U] [ 189.018554][ T7619] [U] [ 189.021297][ T7619] [U] [ 189.062329][ T7619] [U] [ 189.065109][ T7619] [U] [ 189.067831][ T7619] [U] [ 189.070553][ T7619] [U] [ 189.116112][ T7619] [U] [ 189.118880][ T7619] [U] [ 189.121605][ T7619] [U] [ 189.124330][ T7619] [U] [ 189.197774][ T7619] [U] [ 189.197844][ T7619] [U] [ 189.197879][ T7619] [U] [ 189.197922][ T7619] [U] [ 189.198098][ T7619] [U] [ 189.198141][ T7619] [U] [ 189.198184][ T7619] [U] [ 189.198225][ T7619] [U] [ 189.198415][ T7619] [U] [ 189.198460][ T7619] [U] [ 189.198505][ T7619] [U] [ 189.198550][ T7619] [U] [ 189.198725][ T7619] [U] [ 189.198767][ T7619] [U] [ 189.198807][ T7619] [U] [ 189.198849][ T7619] [U] [ 189.199024][ T7619] [U] [ 189.199065][ T7619] [U] [ 189.199101][ T7619] [U] [ 189.199143][ T7619] [U] [ 189.199317][ T7619] [U] [ 189.199362][ T7619] [U] [ 189.199406][ T7619] [U] [ 189.199450][ T7619] [U] [ 189.199608][ T7619] [U] [ 189.228460][ T7627] warn_alloc: 1 callbacks suppressed [ 189.228479][ T7627] syz.2.465: vmalloc error: size 176128, failed to allocate pages, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null) [ 189.229466][ T7619] [U] [ 189.233954][ T7627] ,cpuset= [ 189.235184][ T7619] [U] [ 189.244073][ T7627] / [ 189.246112][ T7619] [U] [ 189.332126][ T7627] ,mems_allowed=0-1 [ 189.338274][ T7619] [U] [ 189.338317][ T7619] [U] [ 189.338362][ T7619] [U] [ 189.338401][ T7619] [U] [ 189.338581][ T7619] [U] [ 189.338619][ T7619] [U] [ 189.338656][ T7619] [U] [ 189.338694][ T7619] [U] [ 189.338859][ T7619] [U] [ 189.338895][ T7619] [U] [ 189.338932][ T7619] [U] [ 189.338967][ T7619] [U] [ 189.339134][ T7619] [U] [ 189.339172][ T7619] [U] [ 189.339208][ T7619] [U] [ 189.339244][ T7619] [U] [ 189.339407][ T7619] [U] [ 189.339462][ T7619] [U] [ 189.339508][ T7619] [U] [ 189.339544][ T7619] [U] [ 189.339779][ T7619] [U] [ 189.339821][ T7619] [U] [ 189.339857][ T7619] [U] [ 189.339892][ T7619] [U] [ 189.341524][ T7627] [ 189.341563][ T7627] CPU: 0 UID: 0 PID: 7627 Comm: syz.2.465 Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 189.341594][ T7627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 189.341608][ T7627] Call Trace: [ 189.341615][ T7627] [ 189.341625][ T7627] dump_stack_lvl+0x16c/0x1f0 [ 189.341666][ T7627] warn_alloc+0x24d/0x3a0 [ 189.341703][ T7627] ? __pfx_warn_alloc+0x10/0x10 [ 189.341739][ T7627] ? alloc_pages_mpol+0x25b/0x540 [ 189.341764][ T7627] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 189.341790][ T7627] ? trace_kmalloc+0x2d/0xd0 [ 189.341825][ T7627] __vmalloc_node_range_noprof+0x12bd/0x1530 [ 189.341870][ T7627] ? vb2_vmalloc_alloc+0x11e/0x3d0 [ 189.341912][ T7627] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 189.341955][ T7627] ? vb2_vmalloc_alloc+0x11e/0x3d0 [ 189.341990][ T7627] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 189.342024][ T7627] vmalloc_user_noprof+0x6b/0x90 [ 189.342055][ T7627] ? vb2_vmalloc_alloc+0x11e/0x3d0 [ 189.342087][ T7627] vb2_vmalloc_alloc+0x11e/0x3d0 [ 189.342123][ T7627] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 189.342153][ T7627] __vb2_queue_alloc+0x896/0x1230 [ 189.342204][ T7627] vb2_core_reqbufs+0xa73/0xfb0 [ 189.342243][ T7627] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 189.342296][ T7627] __vb2_init_fileio+0x3f3/0x1110 [ 189.342327][ T7627] ? lockdep_hardirqs_on+0x7c/0x110 [ 189.342357][ T7627] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 189.342386][ T7627] ? __pollwait+0x26d/0x4c0 [ 189.342421][ T7627] vb2_core_poll+0x486/0x700 [ 189.342455][ T7627] vb2_poll+0x33/0x150 [ 189.342486][ T7627] vb2_fop_poll+0x10f/0x2c0 [ 189.342519][ T7627] ? __pfx_vb2_fop_poll+0x10/0x10 [ 189.342549][ T7627] v4l2_poll+0x160/0x320 [ 189.342583][ T7627] ? __pfx_v4l2_poll+0x10/0x10 [ 189.342607][ T7627] do_sys_poll+0x524/0xde0 [ 189.342653][ T7627] ? __pfx_do_sys_poll+0x10/0x10 [ 189.342716][ T7627] ? futex_wait_queue+0x103/0x1f0 [ 189.342747][ T7627] ? futex_unqueue+0xba/0x140 [ 189.342775][ T7627] ? __futex_wait+0x324/0x3c0 [ 189.342805][ T7627] ? __pfx___pollwait+0x10/0x10 [ 189.342840][ T7627] ? __pfx_pollwake+0x10/0x10 [ 189.342924][ T7627] ? __pfx_timespec64_add_safe+0x10/0x10 [ 189.342960][ T7627] ? ktime_get_ts64+0x2d2/0x400 [ 189.342991][ T7627] ? read_tsc+0x9/0x20 [ 189.343015][ T7627] ? ktime_get_ts64+0x256/0x400 [ 189.343054][ T7627] __x64_sys_poll+0x1a8/0x450 [ 189.343087][ T7627] ? __pfx___x64_sys_poll+0x10/0x10 [ 189.343130][ T7627] do_syscall_64+0xcd/0x250 [ 189.343182][ T7627] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.343216][ T7627] RIP: 0033:0x7f50c2b8d169 [ 189.343237][ T7627] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 189.343258][ T7627] RSP: 002b:00007f50c3952038 EFLAGS: 00000246 ORIG_RAX: 0000000000000007 [ 189.343281][ T7627] RAX: ffffffffffffffda RBX: 00007f50c2da6080 RCX: 00007f50c2b8d169 [ 189.343297][ T7627] RDX: 0000000000000008 RSI: 0000000000000006 RDI: 0000400000000480 [ 189.343311][ T7627] RBP: 00007f50c2c0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 189.343325][ T7627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 189.343337][ T7627] R13: 0000000000000000 R14: 00007f50c2da6080 R15: 00007fffdf87d9d8 [ 189.343367][ T7627] [ 189.343376][ T7627] Mem-Info: [ 189.343389][ T7627] active_anon:25132 inactive_anon:1 isolated_anon:0 [ 189.343389][ T7627] active_file:17725 inactive_file:39108 isolated_file:0 [ 189.343389][ T7627] unevictable:768 dirty:320 writeback:0 [ 189.343389][ T7627] slab_reclaimable:10833 slab_unreclaimable:93815 [ 189.343389][ T7627] mapped:31395 shmem:18210 pagetables:886 [ 189.343389][ T7627] sec_pagetables:0 bounce:0 [ 189.343389][ T7627] kernel_misc_reclaimable:0 [ 189.343389][ T7627] free:1315530 free_pcp:5371 free_cma:0 [ 189.343450][ T7627] Node 0 active_anon:100528kB inactive_anon:4kB active_file:70900kB inactive_file:156356kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:125580kB dirty:1276kB writeback:0kB shmem:71304kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10804kB pagetables:3544kB sec_pagetables:0kB all_unreclaimable? no [ 189.343512][ T7627] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 189.394779][ T7627] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 189.394865][ T7627] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 189.394923][ T7627] Node 0 DMA32 free:1346168kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB active_anon:100488kB inactive_anon:0kB active_file:70904kB inactive_file:156264kB unevictable:1536kB writepending:1308kB present:3129332kB managed:2547512kB mlocked:0kB bounce:0kB free_pcp:17304kB local_pcp:236kB free_cma:0kB [ 189.394995][ T7627] lowmem_reserve[]: 0 0 0 0 0 [ 189.395049][ T7627] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:92kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 189.395114][ T7627] lowmem_reserve[]: 0 0 0 0 0 [ 189.395170][ T7627] Node 1 Normal free:3904772kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:244kB local_pcp:0kB free_cma:0kB [ 189.395239][ T7627] lowmem_reserve[]: 0 0 0 0 0 [ 189.395294][ T7627] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 189.395527][ T7627] Node 0 DMA32: 903*4kB (UME) 355*8kB (UME) 119*16kB (UME) 146*32kB (UME) 66*64kB (UME) 57*128kB (UME) 78*256kB (UME) 56*512kB (ME) 29*1024kB (ME) 5*2048kB (UME) 301*4096kB (M) = 1346020kB [ 189.395768][ T7627] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 189.395915][ T7627] Node 1 Normal: 130*4kB (U) 50*8kB (UME) 38*16kB (UME) 208*32kB (UME) 91*64kB (UME) 33*128kB (UME) 18*256kB (UME) 6*512kB (UME) 2*1024kB (UM) 3*2048kB (UE) 945*4096kB (M) = 3904824kB [ 189.396168][ T7627] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 189.396360][ T7627] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 189.396383][ T7627] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 189.396404][ T7627] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 189.396427][ T7627] 75053 total pagecache pages [ 189.396437][ T7627] 0 pages in swap cache [ 189.396448][ T7627] Free swap = 124876kB [ 189.396458][ T7627] Total swap = 124996kB [ 189.396470][ T7627] 2097051 pages RAM [ 189.396480][ T7627] 0 pages HighMem/MovableOnly [ 189.396489][ T7627] 428515 pages reserved [ 189.396499][ T7627] 0 pages cma reserved [ 189.409099][ T7619] [U] [ 189.409146][ T7619] [U] [ 189.409183][ T7619] [U] [ 189.409224][ T7619] [U] [ 189.409369][ T7619] [U] [ 189.409408][ T7619] [U] [ 189.409447][ T7619] [U] [ 189.409486][ T7619] [U] [ 189.409659][ T7619] [U] [ 189.409694][ T7619] [U] [ 189.409734][ T7619] [U] [ 189.409778][ T7619] [U] [ 189.409942][ T7619] [U] [ 189.409978][ T7619] [U] [ 189.410012][ T7619] [U] [ 189.410049][ T7619] [U] [ 189.410205][ T7619] [U] [ 189.410244][ T7619] [U] [ 189.410282][ T7619] [U] [ 189.410315][ T7619] [U] [ 189.410478][ T7619] [U] [ 189.410517][ T7619] [U] [ 189.410588][ T7619] [U] [ 189.410628][ T7619] [U] [ 189.410797][ T7619] [U] [ 189.410837][ T7619] [U] [ 189.410876][ T7619] [U] [ 189.410917][ T7619] [U] [ 189.411083][ T7619] [U] [ 189.411121][ T7619] [U] [ 189.411160][ T7619] [U] [ 189.411199][ T7619] [U] [ 189.411366][ T7619] [U] [ 189.411406][ T7619] [U] [ 189.411445][ T7619] [U] [ 189.411485][ T7619] [U] [ 189.411660][ T7619] [U] [ 189.411694][ T7619] [U] [ 189.411734][ T7619] [U] [ 189.411774][ T7619] [U] [ 189.411936][ T7619] [U] [ 189.411976][ T7619] [U] [ 189.412016][ T7619] [U] [ 189.412050][ T7619] [U] [ 189.412218][ T7619] [U] [ 189.412259][ T7619] [U] [ 189.412299][ T7619] [U] [ 189.412340][ T7619] [U] [ 189.412513][ T7619] [U] [ 189.412558][ T7619] [U] [ 189.412600][ T7619] [U] [ 189.412640][ T7619] [U] [ 189.412812][ T7619] [U] [ 189.412854][ T7619] [U] [ 189.412892][ T7619] [U] [ 189.412933][ T7619] [U] [ 190.568939][ T7616] [U] [ 193.611611][ T7679] netlink: 'syz.2.479': attribute type 72 has an invalid length. [ 193.709970][ T7679] netlink: 8 bytes leftover after parsing attributes in process `syz.2.479'. [ 193.774080][ T7675] Invalid ELF header magic: != ELF [ 194.730671][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.737039][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.227865][ T7704] Invalid ELF header magic: != ELF [ 196.824659][ T5843] Bluetooth: hci0: command 0x0406 tx timeout [ 196.830946][ T5843] Bluetooth: hci1: command 0x0406 tx timeout [ 196.837090][ T5843] Bluetooth: hci2: command 0x0406 tx timeout [ 196.843227][ T5840] Bluetooth: hci3: command 0x0406 tx timeout [ 197.677921][ T30] audit: type=1326 audit(6036500213.815:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7722 comm="syz.0.490" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5813b8d169 code=0x0 [ 199.616982][ T7761] netlink: 334 bytes leftover after parsing attributes in process `syz.1.499'. [ 200.104121][ T7766] Invalid ELF header magic: != ELF [ 200.183291][ T7766] netlink: 'syz.3.500': attribute type 72 has an invalid length. [ 200.202739][ T7766] netlink: 8 bytes leftover after parsing attributes in process `syz.3.500'. [ 200.306141][ T7768] Invalid ELF header magic: != ELF [ 200.316635][ T7770] Invalid ELF header magic: != ELF [ 200.788557][ T7782] netlink: 8 bytes leftover after parsing attributes in process `syz.0.504'. [ 201.872446][ T7803] FAULT_INJECTION: forcing a failure. [ 201.872446][ T7803] name failslab, interval 1, probability 0, space 0, times 0 [ 201.887582][ T7803] CPU: 1 UID: 0 PID: 7803 Comm: syz.1.507 Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 201.887618][ T7803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 201.887633][ T7803] Call Trace: [ 201.887640][ T7803] [ 201.887649][ T7803] dump_stack_lvl+0x16c/0x1f0 [ 201.887690][ T7803] should_fail_ex+0x50a/0x650 [ 201.887716][ T7803] ? fs_reclaim_acquire+0xae/0x150 [ 201.887749][ T7803] ? snd_seq_queue_alloc+0x56/0x550 [ 201.887780][ T7803] should_failslab+0xc2/0x120 [ 201.887806][ T7803] __kmalloc_cache_noprof+0x68/0x410 [ 201.887836][ T7803] ? __lock_acquire+0x15a9/0x3c40 [ 201.887875][ T7803] snd_seq_queue_alloc+0x56/0x550 [ 201.887919][ T7803] snd_seq_ioctl_create_queue+0xa9/0x380 [ 201.887960][ T7803] snd_seq_kernel_client_ctl+0x107/0x1c0 [ 201.887991][ T7803] alloc_seq_queue+0xda/0x180 [ 201.888017][ T7803] ? __pfx_alloc_seq_queue+0x10/0x10 [ 201.888060][ T7803] ? mark_held_locks+0x9f/0xe0 [ 201.888094][ T7803] ? _raw_spin_unlock_irq+0x23/0x50 [ 201.888126][ T7803] snd_seq_oss_open+0x38c/0xa20 [ 201.888159][ T7803] odev_open+0x6f/0x90 [ 201.888175][ T7803] ? __pfx_odev_open+0x10/0x10 [ 201.888197][ T7803] soundcore_open+0x409/0x580 [ 201.888225][ T7803] ? __pfx_soundcore_open+0x10/0x10 [ 201.888249][ T7803] chrdev_open+0x237/0x6a0 [ 201.888285][ T7803] ? __pfx_apparmor_file_open+0x10/0x10 [ 201.888316][ T7803] ? __pfx_chrdev_open+0x10/0x10 [ 201.888353][ T7803] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 201.888391][ T7803] do_dentry_open+0x735/0x1c40 [ 201.888425][ T7803] ? __pfx_chrdev_open+0x10/0x10 [ 201.888460][ T7803] ? inode_permission+0xdd/0x5f0 [ 201.888494][ T7803] vfs_open+0x82/0x3f0 [ 201.888516][ T7803] ? may_open+0x1f2/0x400 [ 201.888547][ T7803] path_openat+0x1e88/0x2d80 [ 201.888596][ T7803] ? __pfx_path_openat+0x10/0x10 [ 201.888630][ T7803] ? __pfx___lock_acquire+0x10/0x10 [ 201.888658][ T7803] ? lock_acquire.part.0+0x11b/0x380 [ 201.888687][ T7803] ? find_held_lock+0x2d/0x110 [ 201.888715][ T7803] do_filp_open+0x20c/0x470 [ 201.888749][ T7803] ? __pfx_do_filp_open+0x10/0x10 [ 201.888780][ T7803] ? find_held_lock+0x2d/0x110 [ 201.888831][ T7803] ? alloc_fd+0x41f/0x760 [ 201.888874][ T7803] do_sys_openat2+0x17a/0x1e0 [ 201.888900][ T7803] ? __pfx_do_sys_openat2+0x10/0x10 [ 201.888933][ T7803] ? do_raw_spin_unlock+0x172/0x230 [ 201.888965][ T7803] __x64_sys_openat+0x175/0x210 [ 201.888990][ T7803] ? __pfx___x64_sys_openat+0x10/0x10 [ 201.889032][ T7803] do_syscall_64+0xcd/0x250 [ 201.889067][ T7803] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.889098][ T7803] RIP: 0033:0x7fdb7558d169 [ 201.889119][ T7803] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 201.889143][ T7803] RSP: 002b:00007fdb76430038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 201.889165][ T7803] RAX: ffffffffffffffda RBX: 00007fdb757a5fa0 RCX: 00007fdb7558d169 [ 201.889182][ T7803] RDX: 0000000000000080 RSI: 0000400000000500 RDI: ffffffffffffff9c [ 201.889198][ T7803] RBP: 00007fdb7560e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 201.889213][ T7803] R10: 0000000000000600 R11: 0000000000000246 R12: 0000000000000000 [ 201.889228][ T7803] R13: 0000000000000000 R14: 00007fdb757a5fa0 R15: 00007fffeac24048 [ 201.889260][ T7803] [ 202.606359][ T7816] Invalid ELF header magic: != ELF [ 202.659245][ T7816] netlink: 'syz.0.514': attribute type 72 has an invalid length. [ 202.673071][ T7816] netlink: 8 bytes leftover after parsing attributes in process `syz.0.514'. [ 203.451084][ T7830] Invalid ELF header magic: != ELF [ 203.678289][ T7836] Invalid ELF header magic: != ELF [ 204.337402][ T7845] futex_wake_op: syz.2.519 tries to shift op by 64; fix this program [ 205.361548][ T7869] sp0: Synchronizing with TNC [ 206.003831][ T7876] netlink: 28 bytes leftover after parsing attributes in process `syz.3.528'. [ 206.077773][ T7876] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 206.176578][ T7876] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 206.406604][ T7881] Invalid ELF header magic: != ELF [ 207.155697][ T7895] Invalid ELF header magic: != ELF [ 208.646041][ T7947] Invalid ELF header magic: != ELF [ 208.656794][ T7950] netlink: 'syz.0.541': attribute type 72 has an invalid length. [ 208.692053][ T7950] netlink: 8 bytes leftover after parsing attributes in process `syz.0.541'. [ 208.950281][ T7953] usb usb28: usbfs: process 7953 (syz.3.542) did not claim interface 1 before use [ 209.366235][ T7969] tipc: Can't bind to reserved service type 2 [ 210.023353][ T7977] Invalid ELF header magic: != ELF [ 210.206206][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 210.275835][ T7981] Invalid ELF header magic: != ELF [ 211.593883][ T8005] netlink: 338 bytes leftover after parsing attributes in process `syz.0.554'. [ 211.662712][ T8005] netlink: 338 bytes leftover after parsing attributes in process `syz.0.554'. [ 211.717229][ T8005] netlink: 4 bytes leftover after parsing attributes in process `syz.0.554'. [ 211.736075][ T8008] Invalid ELF header magic: != ELF [ 211.780219][ T8008] netlink: 'syz.2.555': attribute type 72 has an invalid length. [ 211.788307][ T8008] netlink: 8 bytes leftover after parsing attributes in process `syz.2.555'. [ 211.908992][ T8006] usb usb28: usbfs: process 8006 (syz.1.553) did not claim interface 1 before use [ 212.324393][ T8017] FAULT_INJECTION: forcing a failure. [ 212.324393][ T8017] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 212.342223][ T8017] CPU: 1 UID: 0 PID: 8017 Comm: syz.3.557 Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 212.342254][ T8017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 212.342269][ T8017] Call Trace: [ 212.342277][ T8017] [ 212.342287][ T8017] dump_stack_lvl+0x16c/0x1f0 [ 212.342326][ T8017] should_fail_ex+0x50a/0x650 [ 212.342353][ T8017] _copy_to_user+0x32/0xd0 [ 212.342381][ T8017] snd_pcm_oss_read2+0x292/0x3e0 [ 212.342410][ T8017] ? __pfx_snd_pcm_oss_read2+0x10/0x10 [ 212.342435][ T8017] ? snd_pcm_kernel_ioctl+0x267/0x2e0 [ 212.342474][ T8017] snd_pcm_oss_read+0x5a3/0x750 [ 212.342500][ T8017] ? rw_verify_area+0xcf/0x680 [ 212.342526][ T8017] ? __pfx_snd_pcm_oss_read+0x10/0x10 [ 212.342550][ T8017] vfs_read+0x1df/0xbf0 [ 212.342574][ T8017] ? __fget_files+0x1fc/0x3a0 [ 212.342605][ T8017] ? __pfx_lock_release+0x10/0x10 [ 212.342635][ T8017] ? __pfx_vfs_read+0x10/0x10 [ 212.342662][ T8017] ? do_futex+0x123/0x350 [ 212.342687][ T8017] ? lock_acquire+0x2f/0xb0 [ 212.342714][ T8017] ? __fget_files+0x40/0x3a0 [ 212.342779][ T8017] ? __fget_files+0x206/0x3a0 [ 212.342827][ T8017] ksys_read+0x12b/0x250 [ 212.342858][ T8017] ? __pfx_ksys_read+0x10/0x10 [ 212.342895][ T8017] do_syscall_64+0xcd/0x250 [ 212.342927][ T8017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.342956][ T8017] RIP: 0033:0x7f9757f8d169 [ 212.342973][ T8017] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 212.343002][ T8017] RSP: 002b:00007f9758e76038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 212.343024][ T8017] RAX: ffffffffffffffda RBX: 00007f97581a5fa0 RCX: 00007f9757f8d169 [ 212.343041][ T8017] RDX: 000000000cefbce6 RSI: 0000000000000000 RDI: 0000000000000006 [ 212.343056][ T8017] RBP: 00007f975800e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 212.343071][ T8017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 212.343085][ T8017] R13: 0000000000000000 R14: 00007f97581a5fa0 R15: 00007ffe45ccda58 [ 212.343117][ T8017] [ 212.935987][ T8033] Invalid ELF header magic: != ELF [ 213.267664][ T8036] can: request_module (can-proto-0) failed. [ 213.315890][ T8036] FAULT_INJECTION: forcing a failure. [ 213.315890][ T8036] name fail_futex, interval 1, probability 0, space 0, times 0 [ 213.331396][ T8036] CPU: 0 UID: 0 PID: 8036 Comm: syz.1.561 Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 213.331433][ T8036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 213.331449][ T8036] Call Trace: [ 213.331456][ T8036] [ 213.331465][ T8036] dump_stack_lvl+0x16c/0x1f0 [ 213.331506][ T8036] should_fail_ex+0x50a/0x650 [ 213.331536][ T8036] get_futex_key+0x4a3/0x1000 [ 213.331569][ T8036] ? __pfx_get_futex_key+0x10/0x10 [ 213.331609][ T8036] futex_wake+0xe8/0x4e0 [ 213.331644][ T8036] ? __pfx_futex_wake+0x10/0x10 [ 213.331681][ T8036] ? kmem_cache_free+0x2e2/0x4d0 [ 213.331716][ T8036] ? putname+0x13c/0x180 [ 213.331746][ T8036] do_futex+0x1e5/0x350 [ 213.331775][ T8036] ? __pfx_do_futex+0x10/0x10 [ 213.331813][ T8036] __x64_sys_futex+0x1e1/0x4c0 [ 213.331852][ T8036] ? __x64_sys_openat+0x175/0x210 [ 213.331881][ T8036] ? __pfx___x64_sys_futex+0x10/0x10 [ 213.331924][ T8036] do_syscall_64+0xcd/0x250 [ 213.331961][ T8036] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.331993][ T8036] RIP: 0033:0x7fdb7558d169 [ 213.332014][ T8036] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 213.332037][ T8036] RSP: 002b:00007fdb764300e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 213.332065][ T8036] RAX: ffffffffffffffda RBX: 00007fdb757a5fa8 RCX: 00007fdb7558d169 [ 213.332082][ T8036] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fdb757a5fac [ 213.332098][ T8036] RBP: 00007fdb757a5fa0 R08: 00007fdb76431000 R09: 0000000000000000 [ 213.332114][ T8036] R10: 0000000000000005 R11: 0000000000000246 R12: 00007fdb757a5fac [ 213.332129][ T8036] R13: 0000000000000000 R14: 00007fffeac23f60 R15: 00007fffeac24048 [ 213.332161][ T8036] [ 213.477755][ T8034] netlink: 28 bytes leftover after parsing attributes in process `syz.3.560'. syzkaller syzkaller login: [ 213.874773][ T8034] geneve1: entered promiscuous mode [ 213.884926][ T8034] geneve1: entered allmulticast mode [ 216.662252][ T8089] netlink: 'syz.3.571': attribute type 72 has an invalid length. [ 216.678769][ T8086] Invalid ELF header magic: != ELF [ 216.685268][ T8089] netlink: 8 bytes leftover after parsing attributes in process `syz.3.571'. [ 217.320547][ T8100] openvswitch: HfR: Dropping previously announced user features [ 217.366472][ T8100] netlink: 12 bytes leftover after parsing attributes in process `syz.1.577'. [ 217.376463][ T8100] HfR: left promiscuous mode [ 217.449151][ T8101] Invalid ELF header magic: != ELF [ 219.027889][ T8130] netlink: 'syz.1.585': attribute type 11 has an invalid length. [ 219.062988][ T8130] netlink: 28 bytes leftover after parsing attributes in process `syz.1.585'. [ 219.129758][ T8134] netlink: 8 bytes leftover after parsing attributes in process `syz.1.585'. [ 219.184511][ T8129] ima: policy update failed [ 219.202074][ T30] audit: type=1802 audit(6036500235.345:6): pid=8129 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.585" res=0 errno=0 [ 220.950711][ T8170] netlink: 'syz.0.592': attribute type 72 has an invalid length. [ 220.997475][ T8170] netlink: 8 bytes leftover after parsing attributes in process `syz.0.592'. [ 221.016000][ T8168] Invalid ELF header magic: != ELF [ 221.063313][ T8166] Invalid ELF header magic: != ELF [ 221.705272][ T8178] Process accounting resumed [ 222.285874][ T8186] netlink: 12 bytes leftover after parsing attributes in process `syz.2.596'. [ 223.733912][ T8209] Invalid ELF header magic: != ELF [ 224.203002][ T8211] FAULT_INJECTION: forcing a failure. [ 224.203002][ T8211] name failslab, interval 1, probability 0, space 0, times 0 [ 224.228904][ T8211] CPU: 0 UID: 0 PID: 8211 Comm: syz.1.602 Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 224.228940][ T8211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 224.228954][ T8211] Call Trace: [ 224.228961][ T8211] [ 224.228970][ T8211] dump_stack_lvl+0x16c/0x1f0 [ 224.229008][ T8211] should_fail_ex+0x50a/0x650 [ 224.229030][ T8211] ? fs_reclaim_acquire+0xae/0x150 [ 224.229065][ T8211] should_failslab+0xc2/0x120 [ 224.229090][ T8211] __kmalloc_node_track_caller_noprof+0xcf/0x510 [ 224.229129][ T8211] ? kstrdup_const+0x63/0x80 [ 224.229165][ T8211] kstrdup+0x53/0x100 [ 224.229195][ T8211] kstrdup_const+0x63/0x80 [ 224.229223][ T8211] __kernfs_new_node+0x9c/0x890 [ 224.229258][ T8211] ? mark_lock+0xb5/0xc60 [ 224.229288][ T8211] ? __pfx___kernfs_new_node+0x10/0x10 [ 224.229325][ T8211] ? __pfx_mark_lock+0x10/0x10 [ 224.229357][ T8211] ? find_held_lock+0x2d/0x110 [ 224.229388][ T8211] ? cgroup_bpf_inherit+0x189/0x980 [ 224.229425][ T8211] kernfs_new_node+0x186/0x240 [ 224.229467][ T8211] __kernfs_create_file+0x53/0x350 [ 224.229498][ T8211] cgroup_addrm_files+0x547/0xc20 [ 224.229564][ T8211] ? __pfx_cgroup_addrm_files+0x10/0x10 [ 224.229614][ T8211] ? css_next_child+0xcf/0x2d0 [ 224.229649][ T8211] ? css_next_descendant_pre+0x58/0x1a0 [ 224.229689][ T8211] css_populate_dir+0x386/0x530 [ 224.229722][ T8211] cgroup_mkdir+0x37c/0x1150 [ 224.229762][ T8211] ? __pfx_cgroup_mkdir+0x10/0x10 [ 224.229798][ T8211] kernfs_iop_mkdir+0x14a/0x1d0 [ 224.229830][ T8211] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 224.229865][ T8211] vfs_mkdir+0x57d/0x860 [ 224.229899][ T8211] do_mkdirat+0x301/0x3a0 [ 224.229934][ T8211] ? __pfx_do_mkdirat+0x10/0x10 [ 224.229972][ T8211] ? getname_flags.part.0+0x1c5/0x550 [ 224.230004][ T8211] __x64_sys_mkdir+0xef/0x140 [ 224.230040][ T8211] do_syscall_64+0xcd/0x250 [ 224.230075][ T8211] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.230109][ T8211] RIP: 0033:0x7fdb7558d169 [ 224.230130][ T8211] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 224.230152][ T8211] RSP: 002b:00007fdb76430038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 224.230177][ T8211] RAX: ffffffffffffffda RBX: 00007fdb757a5fa0 RCX: 00007fdb7558d169 [ 224.230194][ T8211] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00004000000002c0 [ 224.230209][ T8211] RBP: 00007fdb7560e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 224.230224][ T8211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 224.230239][ T8211] R13: 0000000000000000 R14: 00007fdb757a5fa0 R15: 00007fffeac24048 [ 224.230274][ T8211] [ 224.230286][ T8211] cgroup: cgroup_addrm_files: failed to add cgroup.type, err=-12 [ 229.255200][ T8299] netlink: 28 bytes leftover after parsing attributes in process `syz.1.618'. [ 229.330673][ T8299] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.414700][ T8299] bridge_slave_1 (unregistering): left allmulticast mode [ 229.428165][ T8299] bridge_slave_1 (unregistering): left promiscuous mode [ 229.454358][ T8299] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.329590][ T8337] netlink: 8 bytes leftover after parsing attributes in process `syz.2.627'. [ 231.361216][ T8332] netlink: 4 bytes leftover after parsing attributes in process `syz.3.626'. [ 231.393220][ T8332] netlink: 28 bytes leftover after parsing attributes in process `syz.3.626'. [ 231.517222][ T8337] FAULT_INJECTION: forcing a failure. [ 231.517222][ T8337] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 231.566937][ T8337] CPU: 1 UID: 0 PID: 8337 Comm: syz.2.627 Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 231.566970][ T8337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 231.566983][ T8337] Call Trace: [ 231.566990][ T8337] [ 231.566999][ T8337] dump_stack_lvl+0x16c/0x1f0 [ 231.567036][ T8337] should_fail_ex+0x50a/0x650 [ 231.567059][ T8337] ? __pfx___might_resched+0x10/0x10 [ 231.567094][ T8337] should_fail_alloc_page+0xe7/0x130 [ 231.567118][ T8337] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 231.567156][ T8337] __alloc_frozen_pages_noprof+0x18e/0x2470 [ 231.567192][ T8337] ? hlock_class+0x4e/0x130 [ 231.567213][ T8337] ? mark_lock+0xb5/0xc60 [ 231.567246][ T8337] ? __pfx_mark_lock+0x10/0x10 [ 231.567278][ T8337] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 231.567315][ T8337] ? hlock_class+0x4e/0x130 [ 231.567337][ T8337] ? mark_lock+0xb5/0xc60 [ 231.567372][ T8337] ? hlock_class+0x4e/0x130 [ 231.567402][ T8337] ? hlock_class+0x4e/0x130 [ 231.567425][ T8337] ? __lock_acquire+0xcc5/0x3c40 [ 231.567457][ T8337] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 231.567495][ T8337] ? policy_nodemask+0xea/0x4e0 [ 231.567520][ T8337] alloc_pages_mpol+0x1fc/0x540 [ 231.567544][ T8337] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 231.567566][ T8337] ? __lock_acquire+0x15a9/0x3c40 [ 231.567603][ T8337] folio_alloc_mpol_noprof+0x36/0x2f0 [ 231.567634][ T8337] vma_alloc_folio_noprof+0xee/0x1b0 [ 231.567661][ T8337] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 231.567687][ T8337] ? find_held_lock+0x2d/0x110 [ 231.567719][ T8337] do_pte_missing+0x202f/0x3e10 [ 231.567776][ T8337] __handle_mm_fault+0x1166/0x2c60 [ 231.567822][ T8337] ? __pfx___handle_mm_fault+0x10/0x10 [ 231.567854][ T8337] ? follow_page_pte+0x3ac/0x1490 [ 231.567886][ T8337] ? __pfx_lock_release+0x10/0x10 [ 231.567945][ T8337] handle_mm_fault+0x3fa/0xaa0 [ 231.567986][ T8337] __get_user_pages+0x773/0x36f0 [ 231.568029][ T8337] ? __pfx_mt_find+0x10/0x10 [ 231.568061][ T8337] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 231.568094][ T8337] ? __pfx___get_user_pages+0x10/0x10 [ 231.568131][ T8337] ? __mm_populate+0x21d/0x380 [ 231.568172][ T8337] populate_vma_page_range+0x27f/0x3a0 [ 231.568211][ T8337] ? __pfx_populate_vma_page_range+0x10/0x10 [ 231.568246][ T8337] ? __pfx_find_vma_intersection+0x10/0x10 [ 231.568278][ T8337] ? vm_mmap_pgoff+0x29b/0x3a0 [ 231.568316][ T8337] __mm_populate+0x1d6/0x380 [ 231.568351][ T8337] ? __pfx___mm_populate+0x10/0x10 [ 231.568389][ T8337] ? up_write+0x1b2/0x520 [ 231.568426][ T8337] vm_mmap_pgoff+0x2d3/0x3a0 [ 231.568463][ T8337] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 231.568501][ T8337] ? __x64_sys_futex+0x1e1/0x4c0 [ 231.568528][ T8337] ? __x64_sys_futex+0x1ea/0x4c0 [ 231.568561][ T8337] ksys_mmap_pgoff+0x7d/0x5c0 [ 231.568590][ T8337] ? rcu_is_watching+0x12/0xc0 [ 231.568619][ T8337] __x64_sys_mmap+0x125/0x190 [ 231.568653][ T8337] do_syscall_64+0xcd/0x250 [ 231.568687][ T8337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.568721][ T8337] RIP: 0033:0x7f50c2b8d169 [ 231.568742][ T8337] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 231.568774][ T8337] RSP: 002b:00007f50c3952038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 231.568798][ T8337] RAX: ffffffffffffffda RBX: 00007f50c2da6080 RCX: 00007f50c2b8d169 [ 231.568815][ T8337] RDX: 00000000000000df RSI: 0000000000040009 RDI: 0000000000000000 [ 231.568831][ T8337] RBP: 00007f50c2c0e2a0 R08: 0000000000000007 R09: 0000000000028000 [ 231.568847][ T8337] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 231.568863][ T8337] R13: 0000000000000000 R14: 00007f50c2da6080 R15: 00007fffdf87d9d8 [ 231.568895][ T8337] [ 234.748578][ T8387] FAULT_INJECTION: forcing a failure. [ 234.748578][ T8387] name fail_futex, interval 1, probability 0, space 0, times 0 [ 234.775303][ T8387] CPU: 0 UID: 0 PID: 8387 Comm: syz.3.638 Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 234.775347][ T8387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 234.775362][ T8387] Call Trace: [ 234.775368][ T8387] [ 234.775378][ T8387] dump_stack_lvl+0x16c/0x1f0 [ 234.775416][ T8387] should_fail_ex+0x50a/0x650 [ 234.775446][ T8387] get_futex_key+0x4a3/0x1000 [ 234.775472][ T8387] ? __pfx_lock_release+0x10/0x10 [ 234.775507][ T8387] ? __pfx_get_futex_key+0x10/0x10 [ 234.775534][ T8387] ? dl_scaled_delta_exec+0xdd/0x2e0 [ 234.775563][ T8387] ? find_held_lock+0x2d/0x110 [ 234.775591][ T8387] futex_wait_setup+0x78/0x290 [ 234.775628][ T8387] __futex_wait+0x267/0x3c0 [ 234.775663][ T8387] ? __pfx___futex_wait+0x10/0x10 [ 234.775697][ T8387] ? try_to_wake_up+0x158/0x1490 [ 234.775732][ T8387] ? __pfx_futex_wake_mark+0x10/0x10 [ 234.775781][ T8387] futex_wait+0xe9/0x380 [ 234.775813][ T8387] ? __pfx_futex_wait+0x10/0x10 [ 234.775853][ T8387] ? lock_acquire+0x2f/0xb0 [ 234.775882][ T8387] ? __fget_files+0x40/0x3a0 [ 234.775919][ T8387] do_futex+0x22b/0x350 [ 234.775947][ T8387] ? __pfx_do_futex+0x10/0x10 [ 234.775975][ T8387] ? fdget+0x187/0x210 [ 234.776005][ T8387] ? __sys_sendmsg+0x19a/0x220 [ 234.776043][ T8387] __x64_sys_futex+0x1e1/0x4c0 [ 234.776075][ T8387] ? __pfx___x64_sys_futex+0x10/0x10 [ 234.776120][ T8387] do_syscall_64+0xcd/0x250 [ 234.776157][ T8387] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.776191][ T8387] RIP: 0033:0x7f9757f8d169 [ 234.776210][ T8387] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 234.776235][ T8387] RSP: 002b:00007f9758e760e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 234.776258][ T8387] RAX: ffffffffffffffda RBX: 00007f97581a5fa8 RCX: 00007f9757f8d169 [ 234.776275][ T8387] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f97581a5fa8 [ 234.776289][ T8387] RBP: 00007f97581a5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 234.776303][ T8387] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f97581a5fac [ 234.776317][ T8387] R13: 0000000000000000 R14: 00007ffe45ccd970 R15: 00007ffe45ccda58 [ 234.776356][ T8387] [ 235.886812][ T8408] Invalid ELF header magic: != ELF [ 235.920251][ T8408] netlink: 'syz.2.644': attribute type 72 has an invalid length. [ 235.933676][ T8408] netlink: 8 bytes leftover after parsing attributes in process `syz.2.644'. syzkaller syzkaller login: [ 238.540530][ T8452] input: f as /devices/virtual/input/input7 [ 239.337229][ T8469] could not allocate digest TFM handle [ 239.677883][ T8481] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input8 [ 239.727923][ T8481] FAULT_INJECTION: forcing a failure. [ 239.727923][ T8481] name failslab, interval 1, probability 0, space 0, times 0 [ 239.798519][ T8481] CPU: 0 UID: 0 PID: 8481 Comm: syz.2.658 Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 239.798557][ T8481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 239.798572][ T8481] Call Trace: [ 239.798579][ T8481] [ 239.798588][ T8481] dump_stack_lvl+0x16c/0x1f0 [ 239.798627][ T8481] should_fail_ex+0x50a/0x650 [ 239.798650][ T8481] ? fs_reclaim_acquire+0xae/0x150 [ 239.798683][ T8481] should_failslab+0xc2/0x120 [ 239.798707][ T8481] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 239.798741][ T8481] ? __kernfs_new_node+0xd3/0x890 [ 239.798776][ T8481] __kernfs_new_node+0xd3/0x890 [ 239.798822][ T8481] ? __pfx___kernfs_new_node+0x10/0x10 [ 239.798853][ T8481] ? vsnprintf+0x320/0x1180 [ 239.798889][ T8481] ? lock_acquire.part.0+0x11b/0x380 [ 239.798921][ T8481] ? find_held_lock+0x2d/0x110 [ 239.798954][ T8481] kernfs_new_node+0x186/0x240 [ 239.798993][ T8481] kernfs_create_link+0xcc/0x240 [ 239.799021][ T8481] sysfs_do_create_link_sd+0x90/0x140 [ 239.799052][ T8481] sysfs_create_link+0x61/0xc0 [ 239.799080][ T8481] device_add+0xb17/0x1a70 [ 239.799115][ T8481] ? __pfx_device_add+0x10/0x10 [ 239.799144][ T8481] ? __pfx_exact_lock+0x10/0x10 [ 239.799180][ T8481] ? kobject_get+0xbb/0x150 [ 239.799216][ T8481] cdev_device_add+0xc2/0x1e0 [ 239.799253][ T8481] evdev_connect+0x3a4/0x4c0 [ 239.799284][ T8481] input_attach_handler.isra.0+0x181/0x260 [ 239.799317][ T8481] input_register_device+0xa84/0x1130 [ 239.799345][ T8481] ? input_ff_create+0x256/0x350 [ 239.799381][ T8481] uinput_ioctl_handler.isra.0+0x130c/0x1d70 [ 239.799419][ T8481] ? __pfx_uinput_ioctl_handler.isra.0+0x10/0x10 [ 239.799459][ T8481] ? __pfx_lock_release+0x10/0x10 [ 239.799491][ T8481] ? trace_lock_acquire+0x14e/0x1f0 [ 239.799532][ T8481] ? __fget_files+0x206/0x3a0 [ 239.799571][ T8481] ? __pfx_uinput_ioctl+0x10/0x10 [ 239.799608][ T8481] __x64_sys_ioctl+0x190/0x200 [ 239.799639][ T8481] do_syscall_64+0xcd/0x250 [ 239.799671][ T8481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.799701][ T8481] RIP: 0033:0x7f50c2b8d169 [ 239.799720][ T8481] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 239.799741][ T8481] RSP: 002b:00007f50c3973038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 239.799762][ T8481] RAX: ffffffffffffffda RBX: 00007f50c2da5fa0 RCX: 00007f50c2b8d169 [ 239.799777][ T8481] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000008 [ 239.799799][ T8481] RBP: 00007f50c2c0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 239.799814][ T8481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 239.799828][ T8481] R13: 0000000000000000 R14: 00007f50c2da5fa0 R15: 00007fffdf87d9d8 [ 239.799857][ T8481] [ 239.867542][ T8481] input: failed to attach handler evdev to device input8, error: -12 [ 239.978580][ T8471] netlink: 28 bytes leftover after parsing attributes in process `syz.0.656'. [ 240.593767][ T8492] netlink: 'syz.3.659': attribute type 72 has an invalid length. [ 240.631434][ T8490] Invalid ELF header magic: != ELF [ 240.778880][ T8492] netlink: 8 bytes leftover after parsing attributes in process `syz.3.659'. [ 241.440795][ T30] audit: type=1326 audit(6036500278.561:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8496 comm="syz.1.661" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdb7558d169 code=0x0 [ 243.154866][ T8541] zram: Removed device: zram0 [ 243.243639][ T8543] FAULT_INJECTION: forcing a failure. [ 243.243639][ T8543] name failslab, interval 1, probability 0, space 0, times 0 [ 243.256516][ T8543] CPU: 1 UID: 0 PID: 8543 Comm: syz.1.669 Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 243.256548][ T8543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 243.256563][ T8543] Call Trace: [ 243.256569][ T8543] [ 243.256578][ T8543] dump_stack_lvl+0x16c/0x1f0 [ 243.256616][ T8543] should_fail_ex+0x50a/0x650 [ 243.256639][ T8543] ? fs_reclaim_acquire+0xae/0x150 [ 243.256673][ T8543] should_failslab+0xc2/0x120 [ 243.256697][ T8543] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 243.256732][ T8543] ? __pmd_alloc+0xc3/0x870 [ 243.256766][ T8543] __pmd_alloc+0xc3/0x870 [ 243.256798][ T8543] __handle_mm_fault+0x9fb/0x2c60 [ 243.256839][ T8543] ? __pfx___handle_mm_fault+0x10/0x10 [ 243.256901][ T8543] handle_mm_fault+0x3fa/0xaa0 [ 243.256941][ T8543] __get_user_pages+0x773/0x36f0 [ 243.257002][ T8543] ? __pfx_mt_find+0x10/0x10 [ 243.257031][ T8543] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 243.257064][ T8543] ? __pfx___get_user_pages+0x10/0x10 [ 243.257098][ T8543] ? __mm_populate+0x21d/0x380 [ 243.257137][ T8543] populate_vma_page_range+0x27f/0x3a0 [ 243.257172][ T8543] ? __pfx_populate_vma_page_range+0x10/0x10 [ 243.257215][ T8543] ? __pfx_find_vma_intersection+0x10/0x10 [ 243.257249][ T8543] ? vm_mmap_pgoff+0x29b/0x3a0 [ 243.257289][ T8543] __mm_populate+0x1d6/0x380 [ 243.257325][ T8543] ? __pfx___mm_populate+0x10/0x10 [ 243.257363][ T8543] ? up_write+0x1b2/0x520 [ 243.257398][ T8543] vm_mmap_pgoff+0x2d3/0x3a0 [ 243.257432][ T8543] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 243.257470][ T8543] ? __x64_sys_futex+0x1e1/0x4c0 [ 243.257497][ T8543] ? __x64_sys_futex+0x1ea/0x4c0 [ 243.257531][ T8543] ksys_mmap_pgoff+0x7d/0x5c0 [ 243.257560][ T8543] ? rcu_is_watching+0x12/0xc0 [ 243.257590][ T8543] __x64_sys_mmap+0x125/0x190 [ 243.257627][ T8543] do_syscall_64+0xcd/0x250 [ 243.257662][ T8543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.257695][ T8543] RIP: 0033:0x7fdb7558d169 [ 243.257715][ T8543] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 243.257739][ T8543] RSP: 002b:00007fdb76430038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 243.257763][ T8543] RAX: ffffffffffffffda RBX: 00007fdb757a5fa0 RCX: 00007fdb7558d169 [ 243.257780][ T8543] RDX: 0000001000000003 RSI: 0000000000000008 RDI: 000000800000f000 [ 243.257795][ T8543] RBP: 00007fdb7560e2a0 R08: 0000000000000002 R09: 0000000000008000 [ 243.257811][ T8543] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 243.257826][ T8543] R13: 0000000000000000 R14: 00007fdb757a5fa0 R15: 00007fffeac24048 [ 243.257859][ T8543] [ 244.136497][ T8558] Invalid ELF header magic: != ELF [ 244.212633][ T8558] netlink: 'syz.2.674': attribute type 72 has an invalid length. [ 244.232979][ T8558] netlink: 8 bytes leftover after parsing attributes in process `syz.2.674'. [ 246.972051][ T8601] netlink: 28 bytes leftover after parsing attributes in process `syz.3.685'. [ 249.054080][ T8623] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 249.631673][ T8634] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.869229][ T8648] Invalid ELF header magic: != ELF [ 250.909289][ T8650] netlink: 'syz.2.694': attribute type 72 has an invalid length. [ 250.917085][ T8650] netlink: 8 bytes leftover after parsing attributes in process `syz.2.694'. [ 251.493796][ T8658] ptrace attach of "./syz-executor exec"[5831] was attempted by ""[8658] [ 251.824685][ T8654] Process accounting paused [ 251.837142][ T30] audit: type=1326 audit(6036500288.971:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8656 comm="syz.3.696" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9757f8d169 code=0x0 [ 252.998830][ T8668] HfR: entered promiscuous mode [ 253.035764][ T8668] netlink: 12 bytes leftover after parsing attributes in process `syz.2.698'. [ 253.108620][ T8668] HfR: left promiscuous mode [ 253.169721][ T8670] device-mapper: ioctl: Unable to rename non-existent device, to [ 253.273746][ T8672] netlink: 4 bytes leftover after parsing attributes in process `syz.1.699'. [ 253.304275][ T8672] netlink: 354 bytes leftover after parsing attributes in process `syz.1.699'. [ 253.700456][ T8678] netlink: 12 bytes leftover after parsing attributes in process `syz.1.701'. [ 254.170740][ T8689] ptrace attach of "./syz-executor exec"[5832] was attempted by "KN'1\x5c5$rMu 7Q_ b,B7M\x0cf-$+v3DzC\x5cm3Xi> DKew\x0a!v-:XyGn\x1bxs׫/џ\x0aon!}>dK@]\x0cp=ʊ\x09!v1et:$QXh4\x0cj+T (R6OԔ*kRzw]#d\x0cl=\x0akmxCOv  E5=9}J!zz͸D0y=2\x0aM)JB\x09|-HI0 7|~6侇)U92bE:-1FW7bP/ 3!͜R\x5csb٦m(ɈF(=<1IxXq.6UUO~!%9j8\x1boPo=/D'j)KC\x0bz\x5c4E7X4,>'|O$q[t;Td•YoGFPdm dflԼHo5g39y\x5cK9E3K~E\x1b>ӿmb|¢ #\x0dKiX;?ʖHst'Ψ'<'v}ˆx<[n|yS/M)Jz2N? g<͋O(b=qo\x0axh\x0b?]j3>aU2\x0bkA3np[5]  tMtg􌙰m [ 264.197982][ T5895] dump_stack_lvl+0x116/0x1f0 [ 264.198012][ T5895] print_report+0xc3/0x670 [ 264.198034][ T5895] ? __virt_addr_valid+0x5e/0x590 [ 264.198056][ T5895] ? __phys_addr+0xc6/0x150 [ 264.198080][ T5895] kasan_report+0xd9/0x110 [ 264.198100][ T5895] ? vgacon_save_screen+0x1b3/0x220 [ 264.198122][ T5895] ? vgacon_save_screen+0x1b3/0x220 [ 264.198146][ T5895] kasan_check_range+0xef/0x1a0 [ 264.198172][ T5895] __asan_memcpy+0x23/0x60 [ 264.198200][ T5895] vgacon_save_screen+0x1b3/0x220 [ 264.198222][ T5895] ? __pfx_vgacon_save_screen+0x10/0x10 [ 264.198256][ T5895] save_screen+0xc2/0x160 [ 264.198278][ T5895] redraw_screen+0x653/0x760 [ 264.198305][ T5895] ? __pfx_redraw_screen+0x10/0x10 [ 264.198329][ T5895] ? __pfx_lock_release+0x10/0x10 [ 264.198362][ T5895] complete_change_console+0x109/0x600 [ 264.198385][ T5895] ? vgacon_set_cursor_size+0x3f/0x390 [ 264.198409][ T5895] change_console+0x1ac/0x560 [ 264.198433][ T5895] console_callback+0x1a2/0x4c0 [ 264.198462][ T5895] ? __pfx_console_callback+0x10/0x10 [ 264.198491][ T5895] ? lock_acquire+0x2f/0xb0 [ 264.198519][ T5895] ? process_one_work+0x921/0x1ba0 [ 264.198550][ T5895] process_one_work+0x9c5/0x1ba0 [ 264.198583][ T5895] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 264.198614][ T5895] ? __pfx_process_one_work+0x10/0x10 [ 264.198646][ T5895] ? assign_work+0x1a0/0x250 [ 264.198683][ T5895] worker_thread+0x6c8/0xf00 [ 264.198715][ T5895] ? __kthread_parkme+0x148/0x220 [ 264.198738][ T5895] ? __pfx_worker_thread+0x10/0x10 [ 264.198768][ T5895] kthread+0x3af/0x750 [ 264.198795][ T5895] ? __pfx_kthread+0x10/0x10 [ 264.198820][ T5895] ? lock_acquire+0x2f/0xb0 [ 264.198848][ T5895] ? __pfx_kthread+0x10/0x10 [ 264.198870][ T5895] ret_from_fork+0x45/0x80 [ 264.198896][ T5895] ? __pfx_kthread+0x10/0x10 [ 264.198922][ T5895] ret_from_fork_asm+0x1a/0x30 [ 264.198953][ T5895] [ 264.198961][ T5895] [ 264.198966][ T5895] Allocated by task 6766: [ 264.198978][ T5895] kasan_save_stack+0x33/0x60 [ 264.199007][ T5895] kasan_save_track+0x14/0x30 [ 264.199035][ T5895] __kasan_kmalloc+0xaa/0xb0 [ 264.199064][ T5895] __kmalloc_node_track_caller_noprof+0x222/0x510 [ 264.199098][ T5895] kmalloc_reserve+0xef/0x2c0 [ 264.199137][ T5895] __alloc_skb+0x164/0x380 [ 264.199164][ T5895] nsim_dev_trap_report_work+0x2af/0xd00 [ 264.199191][ T5895] process_one_work+0x9c5/0x1ba0 [ 264.199218][ T5895] worker_thread+0x6c8/0xf00 [ 264.199244][ T5895] kthread+0x3af/0x750 [ 264.199268][ T5895] ret_from_fork+0x45/0x80 [ 264.199294][ T5895] ret_from_fork_asm+0x1a/0x30 [ 264.199315][ T5895] [ 264.199321][ T5895] Freed by task 6766: [ 264.199331][ T5895] kasan_save_stack+0x33/0x60 [ 264.199360][ T5895] kasan_save_track+0x14/0x30 [ 264.199388][ T5895] kasan_save_free_info+0x3b/0x60 [ 264.199413][ T5895] __kasan_slab_free+0x51/0x70 [ 264.199443][ T5895] kfree+0x2c4/0x4d0 [ 264.199468][ T5895] skb_free_head+0x108/0x1d0 [ 264.199493][ T5895] skb_release_data+0x560/0x730 [ 264.199523][ T5895] consume_skb+0xbf/0x100 [ 264.199541][ T5895] nsim_dev_trap_report_work+0x8cf/0xd00 [ 264.199567][ T5895] process_one_work+0x9c5/0x1ba0 [ 264.199593][ T5895] worker_thread+0x6c8/0xf00 [ 264.199619][ T5895] kthread+0x3af/0x750 [ 264.199642][ T5895] ret_from_fork+0x45/0x80 [ 264.199681][ T5895] ret_from_fork_asm+0x1a/0x30 [ 264.199703][ T5895] [ 264.199709][ T5895] The buggy address belongs to the object at ffff88814779c000 [ 264.199709][ T5895] which belongs to the cache kmalloc-4k of size 4096 [ 264.199728][ T5895] The buggy address is located 3936 bytes to the right of [ 264.199728][ T5895] allocated 4096-byte region [ffff88814779c000, ffff88814779d000) [ 264.199751][ T5895] [ 264.199757][ T5895] The buggy address belongs to the physical page: [ 264.199775][ T5895] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x147798 [ 264.199797][ T5895] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 264.199815][ T5895] anon flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff) [ 264.199837][ T5895] page_type: f5(slab) [ 264.199856][ T5895] raw: 057ff00000000040 ffff88801b042140 0000000000000000 dead000000000001 [ 264.199876][ T5895] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 264.199897][ T5895] head: 057ff00000000040 ffff88801b042140 0000000000000000 dead000000000001 [ 264.199916][ T5895] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 264.199936][ T5895] head: 057ff00000000003 ffffea00051de601 ffffffffffffffff 0000000000000000 [ 264.199956][ T5895] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 264.199968][ T5895] page dumped because: kasan: bad access detected [ 264.199984][ T5895] page_owner tracks the page as allocated [ 264.199991][ T5895] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 17298163022, free_ts 0 [ 264.200029][ T5895] post_alloc_hook+0x181/0x1b0 [ 264.200058][ T5895] get_page_from_freelist+0xfce/0x2f80 [ 264.200089][ T5895] __alloc_frozen_pages_noprof+0x221/0x2470 [ 264.200121][ T5895] alloc_pages_mpol+0x1fc/0x540 [ 264.200141][ T5895] new_slab+0x23d/0x330 [ 264.200166][ T5895] ___slab_alloc+0xc5d/0x1720 [ 264.200192][ T5895] __slab_alloc.constprop.0+0x56/0xb0 [ 264.200220][ T5895] __kmalloc_cache_noprof+0xfa/0x410 [ 264.200248][ T5895] kobject_uevent_env+0x265/0x1870 [ 264.200268][ T5895] device_add+0x10e0/0x1a70 [ 264.200296][ T5895] platform_device_add+0x316/0x810 [ 264.200327][ T5895] vim2m_init+0x16/0x80 [ 264.200348][ T5895] do_one_initcall+0x128/0x700 [ 264.200369][ T5895] kernel_init_freeable+0x5c7/0x900 [ 264.200389][ T5895] kernel_init+0x1c/0x2b0 [ 264.200408][ T5895] ret_from_fork+0x45/0x80 [ 264.200434][ T5895] page_owner free stack trace missing [ 264.200442][ T5895] [ 264.200447][ T5895] Memory state around the buggy address: [ 264.200459][ T5895] ffff88814779de00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 264.200474][ T5895] ffff88814779de80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 264.200490][ T5895] >ffff88814779df00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 264.200502][ T5895] ^ [ 264.200515][ T5895] ffff88814779df80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 264.200531][ T5895] ffff88814779e000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 264.200543][ T5895] ================================================================== [ 264.200556][ T5895] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 264.200568][ T5895] CPU: 0 UID: 0 PID: 5895 Comm: kworker/0:5 Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 264.200594][ T5895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 264.200609][ T5895] Workqueue: events console_callback [ 264.200638][ T5895] Call Trace: [ 264.200646][ T5895] [ 264.200654][ T5895] dump_stack_lvl+0x3d/0x1f0 [ 264.200697][ T5895] panic+0x71d/0x800 [ 264.200722][ T5895] ? __pfx_panic+0x10/0x10 [ 264.200747][ T5895] ? rcu_is_watching+0x12/0xc0 [ 264.200774][ T5895] ? __pfx_lock_release+0x10/0x10 [ 264.200805][ T5895] ? check_panic_on_warn+0x1f/0xb0 [ 264.200833][ T5895] check_panic_on_warn+0xab/0xb0 [ 264.200859][ T5895] end_report+0x117/0x180 [ 264.200880][ T5895] kasan_report+0xe9/0x110 [ 264.200901][ T5895] ? vgacon_save_screen+0x1b3/0x220 [ 264.200924][ T5895] ? vgacon_save_screen+0x1b3/0x220 [ 264.200949][ T5895] kasan_check_range+0xef/0x1a0 [ 264.200974][ T5895] __asan_memcpy+0x23/0x60 [ 264.201003][ T5895] vgacon_save_screen+0x1b3/0x220 [ 264.201025][ T5895] ? __pfx_vgacon_save_screen+0x10/0x10 [ 264.201059][ T5895] save_screen+0xc2/0x160 [ 264.201081][ T5895] redraw_screen+0x653/0x760 [ 264.201108][ T5895] ? __pfx_redraw_screen+0x10/0x10 [ 264.201133][ T5895] ? __pfx_lock_release+0x10/0x10 [ 264.201166][ T5895] complete_change_console+0x109/0x600 [ 264.201190][ T5895] ? vgacon_set_cursor_size+0x3f/0x390 [ 264.201214][ T5895] change_console+0x1ac/0x560 [ 264.201239][ T5895] console_callback+0x1a2/0x4c0 [ 264.201268][ T5895] ? __pfx_console_callback+0x10/0x10 [ 264.201297][ T5895] ? lock_acquire+0x2f/0xb0 [ 264.201325][ T5895] ? process_one_work+0x921/0x1ba0 [ 264.201356][ T5895] process_one_work+0x9c5/0x1ba0 [ 264.201389][ T5895] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 264.201421][ T5895] ? __pfx_process_one_work+0x10/0x10 [ 264.201454][ T5895] ? assign_work+0x1a0/0x250 [ 264.201482][ T5895] worker_thread+0x6c8/0xf00 [ 264.201514][ T5895] ? __kthread_parkme+0x148/0x220 [ 264.201537][ T5895] ? __pfx_worker_thread+0x10/0x10 [ 264.201567][ T5895] kthread+0x3af/0x750 [ 264.201593][ T5895] ? __pfx_kthread+0x10/0x10 [ 264.201619][ T5895] ? lock_acquire+0x2f/0xb0 [ 264.201651][ T5895] ? __pfx_kthread+0x10/0x10 [ 264.201748][ T5895] ret_from_fork+0x45/0x80 [ 264.201776][ T5895] ? __pfx_kthread+0x10/0x10 [ 264.201802][ T5895] ret_from_fork_asm+0x1a/0x30 [ 264.201833][ T5895] [ 264.202107][ T5895] Kernel Offset: disabled