last executing test programs: 4.911708589s ago: executing program 0 (id=4372): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x3, 0x5, 0x7, 0x0) socket(0xa, 0x1, 0x0) socket(0x2, 0x1, 0x84) connect$auto(0x3, 0x0, 0x55) listen$auto(0x3, 0x81) accept$auto(0x3, 0x0, 0x0) 4.869443702s ago: executing program 2 (id=4365): mmap$auto(0x0, 0x20009, 0x7, 0xeb1, 0x405, 0x8000) ioperm$auto(0x7fb, 0x1, 0x4000007) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x5, 0x2000000000002) socket$nl_generic(0x10, 0x3, 0x10) socket(0x26, 0x80805, 0x0) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) pidfd_getfd$auto(0x3, 0x1, 0x100000000) 4.782223828s ago: executing program 2 (id=4366): mmap$auto(0x0, 0x4, 0xffffffffffffffff, 0x400eb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x3, 0xff) io_uring_setup$auto(0x406, 0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) io_uring_enter$auto(0x3, 0xa84, 0x7ffffffe, 0xa, 0x0, 0x46) 4.257256789s ago: executing program 2 (id=4371): mmap$auto(0x0, 0xa, 0x72, 0x8b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0xa, 0x801, 0x84) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x10, 0x0, 0x9) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20008054}, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x6) 3.951950311s ago: executing program 0 (id=4375): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socket(0x11, 0x5, 0x10300) socket(0x11, 0x80003, 0x300) madvise$auto(0x0, 0xffffffffffff0002, 0x2) mmap$auto(0x1, 0x9, 0xc, 0x8100000000000010, 0x401, 0x300000000000) landlock_restrict_self$auto(0x5, 0x1b7) madvise$auto(0x0, 0xffffffffffff0001, 0x9) mlockall$auto(0x3) 3.76363398s ago: executing program 2 (id=4376): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) fanotify_init$auto(0x5, 0x2000000000002) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vbi15\x00', 0x802, 0x0) r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vbi15\x00', 0x802, 0x0) ppoll$auto(&(0x7f0000000040)={r0, 0x5, 0xf}, 0x4, 0x0, 0x0, 0x8) ioctl$auto(0x3, 0x40045613, 0x38) 2.698485945s ago: executing program 0 (id=4381): r0 = socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="120087045f06"], 0x1ac}}, 0x810) recvmmsg$auto(r1, &(0x7f0000000140)={{0x0, 0x4, &(0x7f0000000180)={0x0, 0x800}, 0x5, 0x0, 0x2, 0x8}, 0x800}, 0x10a, 0x8, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) setsockopt$auto(r0, 0x10000000084, 0x0, 0x0, 0x10) 2.625689582s ago: executing program 2 (id=4382): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r0 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x8a403, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r0, 0x7a7, 0x0) prctl$auto_PR_GET_TSC(0x19, 0x7, 0x0, 0x0, 0xe) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, 0x6) ioctl$auto_SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, 0x0) ioctl$auto_IOCTL_VMCI_CTX_ADD_NOTIFICATION(r0, 0x7af, 0x0) 2.592421274s ago: executing program 1 (id=4383): socket(0x10, 0x2, 0x4) mmap$auto(0x0, 0x2000d, 0x4000000200df, 0xeb1, 0x404, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff050006000100", @ANYRES32=0x0, @ANYBLOB="0400b3800000003d003b800400a4800c009a00008000000000000004008680c16ab1b1b39dcaa14b6af7dcc011b43cf706e562811c62b28a702b72e0a87126700294f2350000000c000180080003"], 0xd4}, 0x1, 0x0, 0x0, 0x20000010}, 0x20008000) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000) mount$auto(0x0, &(0x7f00000001c0)='}[,&*}\x00', 0x0, 0x7fff, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 2.395900158s ago: executing program 3 (id=4385): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x9, 0x7) ioperm$auto(0x7, 0x6, 0x2) r0 = open(0x0, 0x22240, 0x154) fcntl$auto(r0, 0x400, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) unshare$auto(0x101) sigaltstack$auto(0x0, 0x0) 2.361252953s ago: executing program 1 (id=4386): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) open_by_handle_at$auto(0xffffffffffffffff, &(0x7f0000000300)={0x48, 0x0, "c292b0bcc2136c38e30baae6690e8d7c8506ba8f41a3e671f2d166cf15d22ee3c1e3b6ae574fb04763b2f8e35d0690ace6f82bcac5ba0ce1978d0f93165fbfd4afcecb85145b6e29"}, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x15) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1100af"], 0x1ac}, 0x1, 0x0, 0x0, 0x26004814}, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 2.205628689s ago: executing program 3 (id=4387): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0xfffffffb) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f0, 0x15) madvise$auto(0x0, 0x200007, 0x19) timerfd_create$auto(0x9, 0x0) 2.195424281s ago: executing program 2 (id=4388): remap_file_pages$auto(0x6a2b, 0x3000, 0x2, 0x3, 0x10000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x405, 0x8000) r0 = open(&(0x7f0000000040)='./file0\x00', 0x22240, 0x154) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptyye\x00', 0x101142, 0x0) write$auto(0x3, 0x0, 0xfffffdef) ioctl$auto(0x3, 0x541a, r0) 2.147358086s ago: executing program 1 (id=4389): socket(0x10, 0x2, 0x4) mmap$auto(0x0, 0x2000d, 0x4000000200df, 0xeb1, 0x404, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) bpf$auto(0x9, &(0x7f00000001c0)=@raw_tracepoint={0x1006, 0xffffffffffffffff, 0x0, 0x11}, 0x6f3) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff0500060001000000840002803d00488013b37090badc49d6dc93876646d25a4d297d01cd3b7da38d12889cc50d505f353dc42d0a3c0a14c7b46428910708003600", @ANYRES32=0x0, @ANYBLOB="0400b3800000003d003b800400a4800c009a00008000000000000004008680c16ab1b1b39dcaa14b6af7dcc011b43cf706e562811c62b28a702b72e0a87126700294f2350000000c000180080003"], 0xd4}, 0x1, 0x0, 0x0, 0x20000010}, 0x20008000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv6/neigh/nlmon0/retrans_time_ms\x00', 0x200, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 2.005330514s ago: executing program 3 (id=4390): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030004020000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a000500dd000000000000000a000100987874e64b8500000a0001007572c85c318e0000060007000a00000008000200", @ANYRES32=0x0, @ANYBLOB="080004"], 0x68}, 0x1, 0x0, 0x0, 0x18a64d47ddeca1f0}, 0x40090) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 1.943692917s ago: executing program 1 (id=4391): mmap$auto(0x0, 0x20008, 0xdf, 0xeb1, 0x7, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000100)={{0x0, 0x10, &(0x7f0000000000)={0x0, 0xd6c6}, 0x2, 0x0, 0xe, 0x4}, 0x3}, 0x200, 0xb07e) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="f2000000", @ANYBLOB='O\x00', @ANYBLOB="edd2cb1af6b69aed5f16093845"], 0x1ac}, 0x1, 0x0, 0x0, 0x24040840}, 0x94) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x5}, 0x3, 0x0) 1.688965063s ago: executing program 0 (id=4392): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0\x00'}) close_range$auto(0x0, 0xffffffffffffffff, 0x2) socket(0xa, 0x2, 0x0) r1 = socket(0x18, 0x5, 0x1) connect$auto(r1, &(0x7f0000000000)=@in={0x2, 0x100}, 0x3a) r2 = socket(0x18, 0x5, 0x1) connect$auto(r2, &(0x7f0000000000)=@in={0x2, 0x100}, 0x3a) 1.598004447s ago: executing program 1 (id=4393): mmap$auto(0x0, 0x9, 0xdf, 0x1000000eb1, 0x401, 0x8000) socket(0x18, 0x80000, 0x7) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/nr11/tx_queue_len\x00', 0x2000, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0x68a80, 0x0) unshare$auto(0x40000080) 1.468501323s ago: executing program 0 (id=4394): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/tty/ttyc7/dev\x00', 0x4000, 0x0) ppoll$auto(&(0x7f0000000080)={0xffffffffffffffff, 0xe73, 0xbb}, 0x20, 0x0, 0x0, 0x8) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f00000000c0), 0xffffffffffffffff) r0 = getpid() process_vm_readv$auto(r0, &(0x7f0000000000)={0x0, 0xfff}, 0x800000001, &(0x7f0000000280)={&(0x7f0000000080), 0x1ffffffff}, 0x6, 0x0) setsockopt$auto(0x3, 0x0, 0x60, 0x0, 0x10001) 1.436449035s ago: executing program 3 (id=4395): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(0x3, 0x0, 0x1f40) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r0, &(0x7f0000000200)={0x0, 0x7}, 0x3) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x400000, 0x0) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) 392.974318ms ago: executing program 3 (id=4396): r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, 0x0, 0x54) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmsg$auto_NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x4000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) 346.873506ms ago: executing program 0 (id=4397): openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000240), 0xd2082, 0x0) socket(0x2, 0x802, 0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x1d, 0x2, 0x3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) mprotect$auto(0x110c238000, 0x1, 0x3) madvise$auto(0x110c230000, 0x8031ca, 0x9) 231.629794ms ago: executing program 3 (id=4398): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = io_uring_setup$auto(0x4, 0x0) close_range$auto(0x2, r0, 0x0) open(0x0, 0x22240, 0x55) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$auto(0x3, 0x80286f4e, r1) ioctl$auto(0x3, 0x400454ca, 0x38) 0s ago: executing program 1 (id=4399): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0xa, 0x0) r0 = socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) read$auto(0xc8, 0x0, 0x200) fcntl$auto(r0, 0x6, 0x0) kernel console output (not intermixed with test programs): Call Trace: [ 462.355739][T13790] [ 462.355747][T13790] dump_stack_lvl+0x16c/0x1f0 [ 462.355781][T13790] should_fail_ex+0x512/0x640 [ 462.355814][T13790] should_fail_alloc_page+0xe7/0x130 [ 462.355843][T13790] prepare_alloc_pages+0x3c2/0x610 [ 462.355874][T13790] ? rcu_is_watching+0x12/0xc0 [ 462.355896][T13790] __alloc_frozen_pages_noprof+0x18f/0x23a0 [ 462.355926][T13790] ? stack_trace_save+0x8e/0xc0 [ 462.355947][T13790] ? __pfx_stack_trace_save+0x10/0x10 [ 462.355967][T13790] ? stack_depot_save_flags+0x28/0xa50 [ 462.355999][T13790] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 462.356024][T13790] ? kasan_save_stack+0x42/0x60 [ 462.356044][T13790] ? kasan_save_stack+0x33/0x60 [ 462.356063][T13790] ? kasan_save_track+0x14/0x30 [ 462.356087][T13790] ? vfs_open+0x82/0x3f0 [ 462.356117][T13790] ? path_openat+0x1e5e/0x2d40 [ 462.356135][T13790] ? do_filp_open+0x20b/0x470 [ 462.356151][T13790] ? do_sys_openat2+0x11b/0x1d0 [ 462.356177][T13790] ? __x64_sys_openat+0x174/0x210 [ 462.356204][T13790] ? do_syscall_64+0xcd/0x230 [ 462.356233][T13790] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.356256][T13790] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 462.356283][T13790] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 462.356312][T13790] ? policy_nodemask+0xea/0x4e0 [ 462.356338][T13790] alloc_pages_mpol+0x1fb/0x550 [ 462.356364][T13790] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 462.356396][T13790] alloc_pages_noprof+0x131/0x390 [ 462.356422][T13790] get_zeroed_page_noprof+0x14/0x50 [ 462.356451][T13790] get_image_page+0x18/0x190 [ 462.356485][T13790] alloc_rtree_node+0x3c/0xb0 [ 462.356518][T13790] memory_bm_create+0x515/0x810 [ 462.356547][T13790] create_basic_memory_bitmaps+0x10f/0x680 [ 462.356574][T13790] snapshot_open+0x235/0x2b0 [ 462.356596][T13790] ? __pfx_snapshot_open+0x10/0x10 [ 462.356620][T13790] misc_open+0x35a/0x420 [ 462.356653][T13790] ? __pfx_misc_open+0x10/0x10 [ 462.356684][T13790] chrdev_open+0x231/0x6a0 [ 462.356704][T13790] ? __pfx_apparmor_file_open+0x10/0x10 [ 462.356735][T13790] ? __pfx_chrdev_open+0x10/0x10 [ 462.356759][T13790] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 462.356795][T13790] do_dentry_open+0x741/0x1c10 [ 462.356816][T13790] ? __pfx_chrdev_open+0x10/0x10 [ 462.356842][T13790] vfs_open+0x82/0x3f0 [ 462.356871][T13790] path_openat+0x1e5e/0x2d40 [ 462.356900][T13790] ? __pfx_path_openat+0x10/0x10 [ 462.356926][T13790] do_filp_open+0x20b/0x470 [ 462.356945][T13790] ? __pfx_do_filp_open+0x10/0x10 [ 462.356983][T13790] ? alloc_fd+0x471/0x7d0 [ 462.357021][T13790] do_sys_openat2+0x11b/0x1d0 [ 462.357048][T13790] ? __pfx_do_sys_openat2+0x10/0x10 [ 462.357085][T13790] __x64_sys_openat+0x174/0x210 [ 462.357118][T13790] ? __pfx___x64_sys_openat+0x10/0x10 [ 462.357148][T13790] ? rcu_is_watching+0x12/0xc0 [ 462.357174][T13790] do_syscall_64+0xcd/0x230 [ 462.357205][T13790] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.357225][T13790] RIP: 0033:0x7f8dd7f8e969 [ 462.357241][T13790] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 462.357261][T13790] RSP: 002b:00007f8dd5df6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 462.357279][T13790] RAX: ffffffffffffffda RBX: 00007f8dd81b5fa0 RCX: 00007f8dd7f8e969 [ 462.357293][T13790] RDX: 0000000000184b01 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 462.357306][T13790] RBP: 00007f8dd8010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 462.357319][T13790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 462.357331][T13790] R13: 0000000000000000 R14: 00007f8dd81b5fa0 R15: 00007fffeef9e138 [ 462.357356][T13790] [ 463.464114][T13800] netlink: 122 bytes leftover after parsing attributes in process `syz.2.3113'. [ 463.818299][T13805] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3114'. [ 464.761485][T13825] netlink: 'syz.0.3120': attribute type 33 has an invalid length. [ 464.799482][T13825] netlink: 322 bytes leftover after parsing attributes in process `syz.0.3120'. [ 464.848216][T13825] netlink: 'syz.0.3120': attribute type 33 has an invalid length. [ 464.878346][T13825] netlink: 322 bytes leftover after parsing attributes in process `syz.0.3120'. [ 464.966707][T13829] FAULT_INJECTION: forcing a failure. [ 464.966707][T13829] name failslab, interval 1, probability 0, space 0, times 0 [ 465.105845][T13829] CPU: 1 UID: 0 PID: 13829 Comm: syz.1.3121 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(full) [ 465.105876][T13829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 465.105888][T13829] Call Trace: [ 465.105894][T13829] [ 465.105902][T13829] dump_stack_lvl+0x16c/0x1f0 [ 465.105935][T13829] should_fail_ex+0x512/0x640 [ 465.105964][T13829] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 465.105990][T13829] should_failslab+0xc2/0x120 [ 465.106015][T13829] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 465.106039][T13829] ? mas_alloc_nodes+0x18b/0x8b0 [ 465.106067][T13829] mas_alloc_nodes+0x18b/0x8b0 [ 465.106097][T13829] mas_node_count_gfp+0x105/0x130 [ 465.106124][T13829] mas_preallocate+0x53e/0xcd0 [ 465.106161][T13829] ? __pfx_mas_preallocate+0x10/0x10 [ 465.106201][T13829] ? vm_area_alloc+0x1f/0x160 [ 465.106225][T13829] ? lockdep_init_map_type+0x5c/0x280 [ 465.106256][T13829] __mmap_region+0x139b/0x27c0 [ 465.106282][T13829] ? __pfx___mmap_region+0x10/0x10 [ 465.106305][T13829] ? kernel_text_address+0x8d/0x100 [ 465.106355][T13829] ? stack_depot_save_flags+0x28/0xa50 [ 465.106412][T13829] ? trace_cap_capable+0x18d/0x200 [ 465.106434][T13829] ? cap_capable+0xb3/0x250 [ 465.106456][T13829] mmap_region+0x1ab/0x3f0 [ 465.106484][T13829] do_mmap+0xd8e/0x11b0 [ 465.106519][T13829] ? __pfx_do_mmap+0x10/0x10 [ 465.106549][T13829] ? __pfx_down_write_killable+0x10/0x10 [ 465.106586][T13829] vm_mmap_pgoff+0x281/0x450 [ 465.106640][T13829] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 465.106670][T13829] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 465.106700][T13829] ? hugetlbfs_get_inode+0x31f/0x730 [ 465.106734][T13829] ksys_mmap_pgoff+0x1c8/0x5c0 [ 465.106766][T13829] ? rcu_is_watching+0x12/0xc0 [ 465.106788][T13829] __x64_sys_mmap+0x125/0x190 [ 465.106812][T13829] do_syscall_64+0xcd/0x230 [ 465.106854][T13829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.106878][T13829] RIP: 0033:0x7fb44738e969 [ 465.106895][T13829] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 465.106916][T13829] RSP: 002b:00007fb4451f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 465.106937][T13829] RAX: ffffffffffffffda RBX: 00007fb4475b5fa0 RCX: 00007fb44738e969 [ 465.106962][T13829] RDX: 00004000000000e3 RSI: 0000000000200004 RDI: 0000000000000000 [ 465.106974][T13829] RBP: 00007fb447410ab1 R08: 000000000000000d R09: 0000300000000000 [ 465.106986][T13829] R10: 0000000000040eb2 R11: 0000000000000246 R12: 0000000000000000 [ 465.106999][T13829] R13: 0000000000000000 R14: 00007fb4475b5fa0 R15: 00007ffc12f08f28 [ 465.107023][T13829] [ 465.483959][T13829] Process accounting resumed [ 466.657432][T13856] ERROR: Out of memory at tomoyo_memory_ok. [ 466.691450][T13856] ERROR: Domain ' /sbin/init /etc/init.d/rcS /etc/init.d/S50sshd /usr/sbin/sshd /usr/sbin/sshd /bin/sh /root/syz-executor /root/syz-executor /newroot/797/:,' not defined. [ 467.076626][T13866] netlink: 334 bytes leftover after parsing attributes in process `syz.2.3135'. syzkaller syzkaller login: [ 468.353153][T13890] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3143'. [ 469.075357][T13909] sctp: [Deprecated]: syz.3.3152 (pid 13909) Use of struct sctp_assoc_value in delayed_ack socket option. [ 469.075357][T13909] Use struct sctp_sack_info instead [ 469.268106][T13911] netlink: 330 bytes leftover after parsing attributes in process `syz.0.3161'. syzkaller syzkaller login: [ 469.716461][T13921] netlink: 342 bytes leftover after parsing attributes in process `syz.0.3155'. [ 469.961133][T13906] raw_sendmsg: syz.2.3150 forgot to set AF_INET. Fix it! [ 471.062388][T13948] FAULT_INJECTION: forcing a failure. [ 471.062388][T13948] name failslab, interval 1, probability 0, space 0, times 0 [ 471.190069][T13948] CPU: 1 UID: 0 PID: 13948 Comm: syz.0.3167 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(full) [ 471.190099][T13948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 471.190111][T13948] Call Trace: [ 471.190117][T13948] [ 471.190125][T13948] dump_stack_lvl+0x16c/0x1f0 [ 471.190158][T13948] should_fail_ex+0x512/0x640 [ 471.190187][T13948] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 471.190213][T13948] should_failslab+0xc2/0x120 [ 471.190244][T13948] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 471.190267][T13948] ? security_file_alloc+0x34/0x2b0 [ 471.190297][T13948] security_file_alloc+0x34/0x2b0 [ 471.190324][T13948] init_file+0x93/0x4c0 [ 471.190349][T13948] alloc_empty_file+0x73/0x1e0 [ 471.190375][T13948] alloc_file_pseudo+0x13a/0x230 [ 471.190402][T13948] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 471.190429][T13948] ? do_raw_spin_unlock+0x172/0x230 [ 471.190465][T13948] __anon_inode_getfile+0xf7/0x370 [ 471.190507][T13948] do_epoll_create+0x31b/0x470 [ 471.190536][T13948] __x64_sys_epoll_create+0x45/0x70 [ 471.190566][T13948] do_syscall_64+0xcd/0x230 [ 471.190597][T13948] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.190617][T13948] RIP: 0033:0x7f8dd7f8e969 [ 471.190651][T13948] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 471.190675][T13948] RSP: 002b:00007f8dd5df6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d5 [ 471.190697][T13948] RAX: ffffffffffffffda RBX: 00007f8dd81b5fa0 RCX: 00007f8dd7f8e969 [ 471.190713][T13948] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 471.190726][T13948] RBP: 00007f8dd8010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 471.190741][T13948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 471.190755][T13948] R13: 0000000000000000 R14: 00007f8dd81b5fa0 R15: 00007fffeef9e138 [ 471.190784][T13948] [ 472.042749][T13966] netlink: 'syz.0.3174': attribute type 4 has an invalid length. [ 472.269653][T13973] netlink: 'syz.3.3176': attribute type 33 has an invalid length. [ 472.293711][T13973] netlink: 322 bytes leftover after parsing attributes in process `syz.3.3176'. [ 472.701906][T13979] ima: policy update failed [ 472.731373][ T30] audit: type=1802 audit(4294967493.290:16): pid=13979 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.3182" res=0 errno=0 [ 472.790030][T13984] netlink: 330 bytes leftover after parsing attributes in process `syz.1.3184'. [ 472.834470][T13983] FAULT_INJECTION: forcing a failure. [ 472.834470][T13983] name failslab, interval 1, probability 0, space 0, times 0 [ 472.962237][T13983] CPU: 1 UID: 0 PID: 13983 Comm: syz.2.3181 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(full) [ 472.962269][T13983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 472.962284][T13983] Call Trace: [ 472.962291][T13983] [ 472.962299][T13983] dump_stack_lvl+0x16c/0x1f0 [ 472.962333][T13983] should_fail_ex+0x512/0x640 [ 472.962363][T13983] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 472.962402][T13983] should_failslab+0xc2/0x120 [ 472.962428][T13983] __kmalloc_cache_noprof+0x6a/0x3e0 [ 472.962464][T13983] ? mousedev_open+0xdc/0x580 [ 472.962489][T13983] mousedev_open+0xdc/0x580 [ 472.962512][T13983] ? __pfx_mousedev_open+0x10/0x10 [ 472.962536][T13983] misc_open+0x35a/0x420 [ 472.962581][T13983] ? __pfx_misc_open+0x10/0x10 [ 472.962615][T13983] chrdev_open+0x231/0x6a0 [ 472.962636][T13983] ? __pfx_apparmor_file_open+0x10/0x10 [ 472.962663][T13983] ? __pfx_chrdev_open+0x10/0x10 [ 472.962687][T13983] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 472.962723][T13983] do_dentry_open+0x741/0x1c10 [ 472.962744][T13983] ? __pfx_chrdev_open+0x10/0x10 [ 472.962770][T13983] vfs_open+0x82/0x3f0 [ 472.962799][T13983] path_openat+0x1e5e/0x2d40 [ 472.962827][T13983] ? __pfx_path_openat+0x10/0x10 [ 472.962853][T13983] do_filp_open+0x20b/0x470 [ 472.962872][T13983] ? __pfx_do_filp_open+0x10/0x10 [ 472.962910][T13983] ? alloc_fd+0x471/0x7d0 [ 472.962948][T13983] do_sys_openat2+0x11b/0x1d0 [ 472.962975][T13983] ? __pfx_do_sys_openat2+0x10/0x10 [ 472.963011][T13983] __x64_sys_openat+0x174/0x210 [ 472.963047][T13983] ? __pfx___x64_sys_openat+0x10/0x10 [ 472.963077][T13983] ? rcu_is_watching+0x12/0xc0 [ 472.963104][T13983] do_syscall_64+0xcd/0x230 [ 472.963135][T13983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.963156][T13983] RIP: 0033:0x7fdd37b8e969 [ 472.963172][T13983] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 472.963192][T13983] RSP: 002b:00007fdd38a04038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 472.963210][T13983] RAX: ffffffffffffffda RBX: 00007fdd37db5fa0 RCX: 00007fdd37b8e969 [ 472.963224][T13983] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 472.963236][T13983] RBP: 00007fdd37c10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 472.963248][T13983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 472.963261][T13983] R13: 0000000000000000 R14: 00007fdd37db5fa0 R15: 00007ffe0bfec588 [ 472.963286][T13983] [ 473.621314][T13996] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 474.967492][T12313] Bluetooth: hci1: unexpected event 0x05 length: 440 > 4 [ 474.982841][T14014] random: crng reseeded on system resumption [ 476.781168][T14065] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3214'. [ 476.842027][T14065] netlink: 25 bytes leftover after parsing attributes in process `syz.2.3214'. [ 476.864486][T14067] netlink: 'syz.0.3215': attribute type 27 has an invalid length. [ 476.872374][T14067] netlink: 334 bytes leftover after parsing attributes in process `syz.0.3215'. [ 477.204186][T14075] vivid-007: ================= START STATUS ================= [ 477.231042][T14075] vivid-007: Generate PTS: true [ 477.250504][T14075] vivid-007: Generate SCR: true [ 477.268396][T14075] tpg source WxH: 640x360 (Y'CbCr) [ 477.288342][T14075] tpg field: 1 [ 477.300605][T14075] tpg crop: (0,0)/640x360 [ 477.315595][T14075] tpg compose: (0,0)/640x360 [ 477.335288][T14075] tpg colorspace: 8 [ 477.350118][T14075] tpg transfer function: 0/0 [ 477.367158][T14075] tpg Y'CbCr encoding: 0/0 [ 477.387242][T14075] tpg quantization: 0/0 [ 477.398891][T14075] tpg RGB range: 0/2 [ 477.437320][T14075] vivid-007: ================== END STATUS ================== [ 477.724865][T14092] netlink: 146 bytes leftover after parsing attributes in process `syz.0.3224'. [ 479.359545][T14124] bridge0: port 2(macvlan0) entered blocking state [ 479.394837][T14124] bridge0: port 2(macvlan0) entered disabled state [ 479.432785][T14124] macvlan0: entered allmulticast mode [ 479.463877][T14126] FAULT_INJECTION: forcing a failure. [ 479.463877][T14126] name failslab, interval 1, probability 0, space 0, times 0 [ 479.482692][T14124] veth1_vlan: entered allmulticast mode [ 479.499359][T14124] macvlan0: entered promiscuous mode [ 479.523826][T14124] bridge0: port 2(macvlan0) entered blocking state [ 479.530485][T14124] bridge0: port 2(macvlan0) entered forwarding state [ 479.571909][T14130] netlink: 342 bytes leftover after parsing attributes in process `syz.1.3239'. [ 479.624852][T14126] CPU: 1 UID: 0 PID: 14126 Comm: syz.0.3235 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(full) [ 479.624882][T14126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 479.624898][T14126] Call Trace: [ 479.624904][T14126] [ 479.624912][T14126] dump_stack_lvl+0x16c/0x1f0 [ 479.624944][T14126] should_fail_ex+0x512/0x640 [ 479.624974][T14126] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 479.625011][T14126] should_failslab+0xc2/0x120 [ 479.625036][T14126] __kmalloc_cache_noprof+0x6a/0x3e0 [ 479.625070][T14126] ? trace_kmalloc+0x2b/0xd0 [ 479.625096][T14126] ? snd_virmidi_output_open+0xc4/0x670 [ 479.625129][T14126] snd_virmidi_output_open+0xc4/0x670 [ 479.625160][T14126] open_substream+0x478/0x9b0 [ 479.625194][T14126] rawmidi_open_priv+0x543/0x6e0 [ 479.625230][T14126] snd_rawmidi_open+0x4cc/0xbf0 [ 479.625254][T14126] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 479.625274][T14126] ? __pfx_default_wake_function+0x10/0x10 [ 479.625297][T14126] ? do_raw_spin_lock+0x12c/0x2b0 [ 479.625331][T14126] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 479.625350][T14126] snd_open+0x1fe/0x450 [ 479.625375][T14126] ? __pfx_snd_open+0x10/0x10 [ 479.625400][T14126] chrdev_open+0x231/0x6a0 [ 479.625423][T14126] ? __pfx_chrdev_open+0x10/0x10 [ 479.625446][T14126] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 479.625482][T14126] do_dentry_open+0x741/0x1c10 [ 479.625503][T14126] ? __pfx_chrdev_open+0x10/0x10 [ 479.625529][T14126] vfs_open+0x82/0x3f0 [ 479.625558][T14126] path_openat+0x1e5e/0x2d40 [ 479.625586][T14126] ? __pfx_path_openat+0x10/0x10 [ 479.625612][T14126] do_filp_open+0x20b/0x470 [ 479.625631][T14126] ? __pfx_do_filp_open+0x10/0x10 [ 479.625669][T14126] ? alloc_fd+0x471/0x7d0 [ 479.625715][T14126] do_sys_openat2+0x11b/0x1d0 [ 479.625742][T14126] ? __pfx_do_sys_openat2+0x10/0x10 [ 479.625770][T14126] ? find_held_lock+0x2b/0x80 [ 479.625796][T14126] __x64_sys_openat+0x174/0x210 [ 479.625824][T14126] ? __pfx___x64_sys_openat+0x10/0x10 [ 479.625854][T14126] ? rcu_is_watching+0x12/0xc0 [ 479.625880][T14126] do_syscall_64+0xcd/0x230 [ 479.625911][T14126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.625932][T14126] RIP: 0033:0x7f8dd7f8e969 [ 479.625949][T14126] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 479.625969][T14126] RSP: 002b:00007f8dd5df6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 479.625987][T14126] RAX: ffffffffffffffda RBX: 00007f8dd81b5fa0 RCX: 00007f8dd7f8e969 [ 479.626000][T14126] RDX: 0000000000000001 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 479.626013][T14126] RBP: 00007f8dd8010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 479.626025][T14126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 479.626038][T14126] R13: 0000000000000000 R14: 00007f8dd81b5fa0 R15: 00007fffeef9e138 [ 479.626063][T14126] [ 479.914427][ C1] vkms_vblank_simulate: vblank timer overrun [ 480.469775][T14132] netlink: 330 bytes leftover after parsing attributes in process `syz.1.3241'. [ 480.575331][T14136] i2c i2c-0: Invalid 7-bit I2C address 0x00 [ 480.846361][T14142] netlink: 146 bytes leftover after parsing attributes in process `syz.1.3246'. [ 481.925632][T14165] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3253'. [ 482.166077][T14169] netlink: 'syz.1.3255': attribute type 1 has an invalid length. [ 482.245563][T14169] netlink: 318 bytes leftover after parsing attributes in process `syz.1.3255'. [ 482.574553][T14179] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3259'. [ 482.662509][T14181] netlink: 13 bytes leftover after parsing attributes in process `syz.2.3259'. [ 482.750987][T14181] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3259'. [ 482.923744][T14184] netlink: 322 bytes leftover after parsing attributes in process `syz.1.3261'. [ 483.795612][T14200] netlink: 338 bytes leftover after parsing attributes in process `syz.1.3268'. [ 484.248230][T14207] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3271'. [ 484.263920][T14198] netlink: 74 bytes leftover after parsing attributes in process `syz.0.3267'. [ 484.321346][T14207] netlink: 25 bytes leftover after parsing attributes in process `syz.3.3271'. [ 490.309117][T14304] bridge0: port 3(macvlan0) entered blocking state [ 490.345053][T14304] bridge0: port 3(macvlan0) entered disabled state [ 490.376390][T14304] macvlan0: entered allmulticast mode [ 490.381782][T14304] veth1_vlan: entered allmulticast mode [ 490.443971][T14304] macvlan0: entered promiscuous mode [ 490.472198][T14304] bridge0: port 3(macvlan0) entered blocking state [ 490.478826][T14304] bridge0: port 3(macvlan0) entered forwarding state [ 491.011150][T14314] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 494.752126][T14375] netlink: 342 bytes leftover after parsing attributes in process `syz.1.3334'. [ 495.580205][T14382] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3337'. [ 495.631659][T14383] netlink: 25 bytes leftover after parsing attributes in process `syz.1.3337'. [ 495.828139][T14383] Process accounting paused [ 496.033413][T14388] netlink: 330 bytes leftover after parsing attributes in process `syz.3.3339'. [ 496.050075][T14386] netlink: 326 bytes leftover after parsing attributes in process `syz.2.3338'. [ 497.279094][T14406] FAULT_INJECTION: forcing a failure. [ 497.279094][T14406] name failslab, interval 1, probability 0, space 0, times 0 [ 497.357487][T14404] FAULT_INJECTION: forcing a failure. [ 497.357487][T14404] name failslab, interval 1, probability 0, space 0, times 0 [ 497.408382][T14406] CPU: 1 UID: 0 PID: 14406 Comm: syz.1.3347 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(full) [ 497.408411][T14406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 497.408424][T14406] Call Trace: [ 497.408430][T14406] [ 497.408438][T14406] dump_stack_lvl+0x16c/0x1f0 [ 497.408470][T14406] should_fail_ex+0x512/0x640 [ 497.408499][T14406] ? __kvmalloc_node_noprof+0x122/0x600 [ 497.408523][T14406] should_failslab+0xc2/0x120 [ 497.408548][T14406] __kvmalloc_node_noprof+0x135/0x600 [ 497.408571][T14406] ? io_alloc_cache_init+0x33/0x170 [ 497.408595][T14406] ? io_alloc_cache_init+0x33/0x170 [ 497.408613][T14406] io_alloc_cache_init+0x33/0x170 [ 497.408634][T14406] io_uring_setup+0x5e1/0x1ff0 [ 497.408666][T14406] ? __pfx_io_uring_setup+0x10/0x10 [ 497.408691][T14406] ? do_futex+0x122/0x350 [ 497.408713][T14406] ? __pfx_do_futex+0x10/0x10 [ 497.408735][T14406] ? fd_install+0x225/0x750 [ 497.408778][T14406] ? rcu_is_watching+0x12/0xc0 [ 497.408801][T14406] __x64_sys_io_uring_setup+0xc2/0x170 [ 497.408828][T14406] do_syscall_64+0xcd/0x230 [ 497.408859][T14406] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.408879][T14406] RIP: 0033:0x7fb44738e969 [ 497.408895][T14406] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 497.408914][T14406] RSP: 002b:00007fb4451f6038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 497.408933][T14406] RAX: ffffffffffffffda RBX: 00007fb4475b5fa0 RCX: 00007fb44738e969 [ 497.408946][T14406] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000001 [ 497.408958][T14406] RBP: 00007fb447410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 497.408970][T14406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 497.408982][T14406] R13: 0000000000000000 R14: 00007fb4475b5fa0 R15: 00007ffc12f08f28 [ 497.409007][T14406] [ 497.864850][T14404] CPU: 1 UID: 0 PID: 14404 Comm: syz.3.3345 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(full) [ 497.864884][T14404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 497.864897][T14404] Call Trace: [ 497.864903][T14404] [ 497.864911][T14404] dump_stack_lvl+0x16c/0x1f0 [ 497.864945][T14404] should_fail_ex+0x512/0x640 [ 497.864987][T14404] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 497.865013][T14404] should_failslab+0xc2/0x120 [ 497.865038][T14404] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 497.865061][T14404] ? __kernfs_new_node+0xd2/0x8a0 [ 497.865098][T14404] __kernfs_new_node+0xd2/0x8a0 [ 497.865131][T14404] ? kernfs_add_one+0x37d/0x840 [ 497.865153][T14404] ? __pfx___kernfs_new_node+0x10/0x10 [ 497.865193][T14404] ? find_held_lock+0x2b/0x80 [ 497.865221][T14404] ? kernfs_root+0xee/0x2a0 [ 497.865245][T14404] kernfs_new_node+0x13c/0x1e0 [ 497.865271][T14404] kernfs_create_dir_ns+0x4c/0x1a0 [ 497.865297][T14404] internal_create_group+0x34d/0xf30 [ 497.865322][T14404] ? __pfx_internal_create_group+0x10/0x10 [ 497.865342][T14404] ? __pfx_internal_create_group+0x10/0x10 [ 497.865365][T14404] ? __pfx_dev_add_physical_location+0x10/0x10 [ 497.865390][T14404] ? bus_to_subsys+0x131/0x160 [ 497.865423][T14404] dpm_sysfs_add+0x80/0x280 [ 497.865449][T14404] device_add+0x9a6/0x1a70 [ 497.865479][T14404] ? __pfx_device_add+0x10/0x10 [ 497.865505][T14404] ? lockdep_init_map_type+0x5c/0x280 [ 497.865533][T14404] ? __init_waitqueue_head+0xca/0x150 [ 497.865572][T14404] rfkill_register+0x1ad/0xb40 [ 497.865596][T14404] nfc_register_device+0x11f/0x3c0 [ 497.865635][T14404] nci_register_device+0x7f1/0xb80 [ 497.865661][T14404] ? __pfx_nci_register_device+0x10/0x10 [ 497.865690][T14404] ? lockdep_init_map_type+0x5c/0x280 [ 497.865722][T14404] virtual_ncidev_open+0x141/0x220 [ 497.865753][T14404] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 497.865782][T14404] misc_open+0x35a/0x420 [ 497.865814][T14404] ? __pfx_misc_open+0x10/0x10 [ 497.865845][T14404] chrdev_open+0x231/0x6a0 [ 497.865869][T14404] ? __pfx_chrdev_open+0x10/0x10 [ 497.865896][T14404] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 497.865932][T14404] do_dentry_open+0x741/0x1c10 [ 497.865954][T14404] ? __pfx_chrdev_open+0x10/0x10 [ 497.865980][T14404] vfs_open+0x82/0x3f0 [ 497.866010][T14404] path_openat+0x1e5e/0x2d40 [ 497.866039][T14404] ? __pfx_path_openat+0x10/0x10 [ 497.866065][T14404] do_filp_open+0x20b/0x470 [ 497.866085][T14404] ? __pfx_do_filp_open+0x10/0x10 [ 497.866123][T14404] ? alloc_fd+0x471/0x7d0 [ 497.866162][T14404] do_sys_openat2+0x11b/0x1d0 [ 497.866188][T14404] ? __pfx_do_sys_openat2+0x10/0x10 [ 497.866226][T14404] __x64_sys_openat+0x174/0x210 [ 497.866254][T14404] ? __pfx___x64_sys_openat+0x10/0x10 [ 497.866283][T14404] ? rcu_is_watching+0x12/0xc0 [ 497.866309][T14404] do_syscall_64+0xcd/0x230 [ 497.866339][T14404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.866360][T14404] RIP: 0033:0x7fae5078e969 [ 497.866376][T14404] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 497.866397][T14404] RSP: 002b:00007fae51540038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 497.866416][T14404] RAX: ffffffffffffffda RBX: 00007fae509b5fa0 RCX: 00007fae5078e969 [ 497.866429][T14404] RDX: 0000000000000002 RSI: 0000200000000400 RDI: ffffffffffffff9c [ 497.866442][T14404] RBP: 00007fae50810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 497.866454][T14404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 497.866466][T14404] R13: 0000000000000000 R14: 00007fae509b5fa0 R15: 00007ffda41c29a8 [ 497.866492][T14404] [ 500.545942][T14435] netlink: 74 bytes leftover after parsing attributes in process `syz.2.3355'. [ 502.092378][T14453] netlink: 342 bytes leftover after parsing attributes in process `syz.3.3365'. [ 502.809447][T14447] futex_wake_op: syz.0.3359 tries to shift op by 64; fix this program [ 503.660322][T14473] ERROR: Out of memory at tomoyo_memory_ok. [ 504.494672][T14487] netlink: 'syz.3.3378': attribute type 27 has an invalid length. [ 504.532870][T14487] netlink: 334 bytes leftover after parsing attributes in process `syz.3.3378'. [ 505.416187][T14497] netlink: 330 bytes leftover after parsing attributes in process `syz.2.3381'. [ 505.434003][T14498] netlink: 334 bytes leftover after parsing attributes in process `syz.1.3382'. [ 505.490667][T14501] netlink: 334 bytes leftover after parsing attributes in process `syz.1.3382'. [ 506.192813][T14512] netlink: 186 bytes leftover after parsing attributes in process `syz.1.3386'. [ 506.266425][T14507] netlink: 186 bytes leftover after parsing attributes in process `syz.1.3386'. [ 506.488686][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.495058][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.354157][T14526] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3392'. [ 507.395033][T14530] netlink: 504 bytes leftover after parsing attributes in process `syz.3.3394'. [ 509.655562][T14565] block2mtd: illegal erase size [ 511.313401][T12313] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 511.355821][T14601] FAULT_INJECTION: forcing a failure. [ 511.355821][T14601] name failslab, interval 1, probability 0, space 0, times 0 [ 511.471506][T14601] CPU: 1 UID: 0 PID: 14601 Comm: syz.2.3419 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(full) [ 511.471544][T14601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 511.471558][T14601] Call Trace: [ 511.471566][T14601] [ 511.471574][T14601] dump_stack_lvl+0x16c/0x1f0 [ 511.471613][T14601] should_fail_ex+0x512/0x640 [ 511.471646][T14601] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 511.471677][T14601] should_failslab+0xc2/0x120 [ 511.471706][T14601] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 511.471731][T14601] ? __pfx___might_resched+0x10/0x10 [ 511.471759][T14601] ? __anon_vma_prepare+0xae/0x5e0 [ 511.471788][T14601] __anon_vma_prepare+0xae/0x5e0 [ 511.471826][T14601] __vmf_anon_prepare+0x11c/0x240 [ 511.471859][T14601] do_wp_page+0x11a6/0x58e0 [ 511.471896][T14601] ? __pfx_do_wp_page+0x10/0x10 [ 511.471927][T14601] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 511.471957][T14601] ? ___pte_offset_map+0x1bc/0x540 [ 511.471991][T14601] __handle_mm_fault+0x1ada/0x2a40 [ 511.472018][T14601] ? __pfx___handle_mm_fault+0x10/0x10 [ 511.472052][T14601] ? find_vma+0xbf/0x140 [ 511.472079][T14601] ? __pfx_find_vma+0x10/0x10 [ 511.472110][T14601] handle_mm_fault+0x3fe/0xad0 [ 511.472153][T14601] do_user_addr_fault+0x7a6/0x1370 [ 511.472178][T14601] ? rcu_is_watching+0x12/0xc0 [ 511.472200][T14601] exc_page_fault+0x5c/0xc0 [ 511.472229][T14601] asm_exc_page_fault+0x26/0x30 [ 511.472255][T14601] RIP: 0010:__put_user_4+0xd/0x20 [ 511.472286][T14601] Code: 66 89 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 0f 1f 80 00 00 00 00 90 90 90 [ 511.472319][T14601] RSP: 0018:ffffc900030e7cc0 EFLAGS: 00050202 [ 511.472335][T14601] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000004 [ 511.472347][T14601] RDX: 0000000000080000 RSI: ffffffff8236526c RDI: ffffffff8bf46c60 [ 511.472360][T14601] RBP: 1ffff9200061cf9b R08: 192076e9d3864c5e R09: 0000000000000001 [ 511.472374][T14601] R10: 0000000000000000 R11: 0000000000000000 R12: 00000000ffffffea [ 511.472386][T14601] R13: 0000000000000004 R14: 0000000000000000 R15: 0000000000000000 [ 511.472406][T14601] ? do_vfs_ioctl+0x110c/0x1990 [ 511.472436][T14601] do_vfs_ioctl+0x1117/0x1990 [ 511.472464][T14601] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 511.472508][T14601] ? find_held_lock+0x2b/0x80 [ 511.472526][T14601] ? hook_file_ioctl_common+0x145/0x410 [ 511.472558][T14601] ? __fget_files+0x20e/0x3c0 [ 511.472597][T14601] __x64_sys_ioctl+0x11d/0x200 [ 511.472627][T14601] do_syscall_64+0xcd/0x230 [ 511.472657][T14601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.472677][T14601] RIP: 0033:0x7fdd37b8e969 [ 511.472693][T14601] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 511.472712][T14601] RSP: 002b:00007fdd38a04038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 511.472730][T14601] RAX: ffffffffffffffda RBX: 00007fdd37db5fa0 RCX: 00007fdd37b8e969 [ 511.472743][T14601] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000003 [ 511.472754][T14601] RBP: 00007fdd37c10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 511.472766][T14601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 511.472778][T14601] R13: 0000000000000000 R14: 00007fdd37db5fa0 R15: 00007ffe0bfec588 [ 511.472803][T14601] [ 513.003961][T14621] [U]  [ 513.006789][T14621] [U] [ 513.009499][T14621] [U] [ 513.012198][T14621] [U] [ 513.043761][T14621] [U] [ 513.046512][T14621] [U] [ 513.049211][T14621] [U] [ 513.051904][T14621] [U] [ 513.084769][T14621] [U] [ 513.087498][T14621] [U] [ 513.090200][T14621] [U] [ 513.092899][T14621] [U] [ 513.123699][T14621] [U] [ 513.126429][T14621] [U] [ 513.129127][T14621] [U] [ 513.131858][T14621] [U] [ 513.164092][T14621] [U] [ 513.166847][T14621] [U] [ 513.169549][T14621] [U] [ 513.172257][T14621] [U] [ 513.206268][T14625] [U] [ 514.187308][T14644] netlink: 334 bytes leftover after parsing attributes in process `syz.0.3443'. [ 514.416301][T14647] netlink: 334 bytes leftover after parsing attributes in process `syz.1.3437'. [ 516.676026][T14694] netlink: 'syz.2.3454': attribute type 33 has an invalid length. [ 516.775067][T14694] netlink: 322 bytes leftover after parsing attributes in process `syz.2.3454'. [ 516.908958][T14694] netlink: 'syz.2.3454': attribute type 33 has an invalid length. [ 516.999936][T14694] netlink: 322 bytes leftover after parsing attributes in process `syz.2.3454'. [ 517.961119][T14720] netlink: 342 bytes leftover after parsing attributes in process `syz.1.3464'. [ 518.646602][T14730] FAULT_INJECTION: forcing a failure. [ 518.646602][T14730] name failslab, interval 1, probability 0, space 0, times 0 [ 518.713968][T14730] CPU: 1 UID: 0 PID: 14730 Comm: syz.0.3469 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(full) [ 518.714000][T14730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 518.714024][T14730] Call Trace: [ 518.714030][T14730] [ 518.714038][T14730] dump_stack_lvl+0x16c/0x1f0 [ 518.714070][T14730] should_fail_ex+0x512/0x640 [ 518.714100][T14730] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 518.714126][T14730] should_failslab+0xc2/0x120 [ 518.714151][T14730] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 518.714173][T14730] ? d_instantiate+0x77/0x90 [ 518.714194][T14730] ? alloc_empty_file+0x55/0x1e0 [ 518.714222][T14730] alloc_empty_file+0x55/0x1e0 [ 518.714249][T14730] alloc_file_pseudo+0x13a/0x230 [ 518.714276][T14730] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 518.714303][T14730] ? alloc_fd+0x471/0x7d0 [ 518.714338][T14730] sock_alloc_file+0x50/0x210 [ 518.714364][T14730] __sys_socket+0x1c0/0x260 [ 518.714395][T14730] ? __pfx___sys_socket+0x10/0x10 [ 518.714426][T14730] ? rcu_is_watching+0x12/0xc0 [ 518.714449][T14730] __x64_sys_socket+0x72/0xb0 [ 518.714478][T14730] ? lockdep_hardirqs_on+0x7c/0x110 [ 518.714505][T14730] do_syscall_64+0xcd/0x230 [ 518.714536][T14730] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.714561][T14730] RIP: 0033:0x7f8dd7f8e969 [ 518.714577][T14730] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 518.714597][T14730] RSP: 002b:00007f8dd5df6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 518.714615][T14730] RAX: ffffffffffffffda RBX: 00007f8dd81b5fa0 RCX: 00007f8dd7f8e969 [ 518.714629][T14730] RDX: 0000000000000002 RSI: 0000000000000003 RDI: 000000000000000f [ 518.714640][T14730] RBP: 00007f8dd8010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 518.714652][T14730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 518.714664][T14730] R13: 0000000000000000 R14: 00007f8dd81b5fa0 R15: 00007fffeef9e138 [ 518.714689][T14730] [ 519.147768][T14732] netlink: 334 bytes leftover after parsing attributes in process `syz.2.3470'. [ 519.651669][T14741] netlink: 338 bytes leftover after parsing attributes in process `syz.2.3473'. [ 522.929928][T14807] FAULT_INJECTION: forcing a failure. [ 522.929928][T14807] name failslab, interval 1, probability 0, space 0, times 0 [ 523.033715][T14807] CPU: 1 UID: 0 PID: 14807 Comm: syz.2.3498 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(full) [ 523.033744][T14807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 523.033757][T14807] Call Trace: [ 523.033763][T14807] [ 523.033771][T14807] dump_stack_lvl+0x16c/0x1f0 [ 523.033803][T14807] should_fail_ex+0x512/0x640 [ 523.033832][T14807] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 523.033858][T14807] should_failslab+0xc2/0x120 [ 523.033883][T14807] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 523.033906][T14807] ? security_file_alloc+0x34/0x2b0 [ 523.033938][T14807] security_file_alloc+0x34/0x2b0 [ 523.033965][T14807] init_file+0x93/0x4c0 [ 523.033993][T14807] alloc_empty_file+0x73/0x1e0 [ 523.034019][T14807] alloc_file_pseudo+0x13a/0x230 [ 523.034047][T14807] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 523.034075][T14807] ? do_raw_spin_unlock+0x172/0x230 [ 523.034111][T14807] __anon_inode_getfile+0xf7/0x370 [ 523.034153][T14807] do_epoll_create+0x31b/0x470 [ 523.034183][T14807] __x64_sys_epoll_create+0x45/0x70 [ 523.034212][T14807] do_syscall_64+0xcd/0x230 [ 523.034243][T14807] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 523.034264][T14807] RIP: 0033:0x7fdd37b8e969 [ 523.034280][T14807] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 523.034300][T14807] RSP: 002b:00007fdd38a04038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d5 [ 523.034318][T14807] RAX: ffffffffffffffda RBX: 00007fdd37db5fa0 RCX: 00007fdd37b8e969 [ 523.034331][T14807] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 523.034343][T14807] RBP: 00007fdd37c10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 523.034355][T14807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 523.034367][T14807] R13: 0000000000000000 R14: 00007fdd37db5fa0 R15: 00007ffe0bfec588 [ 523.034391][T14807] [ 523.627765][T14816] FAULT_INJECTION: forcing a failure. [ 523.627765][T14816] name failslab, interval 1, probability 0, space 0, times 0 [ 523.641744][T14816] CPU: 1 UID: 0 PID: 14816 Comm: syz.3.3502 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(full) [ 523.641778][T14816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 523.641792][T14816] Call Trace: [ 523.641813][T14816] [ 523.641820][T14816] dump_stack_lvl+0x16c/0x1f0 [ 523.641852][T14816] should_fail_ex+0x512/0x640 [ 523.641881][T14816] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 523.641918][T14816] should_failslab+0xc2/0x120 [ 523.641943][T14816] __kmalloc_cache_noprof+0x6a/0x3e0 [ 523.641977][T14816] ? mousedev_open+0xdc/0x580 [ 523.642001][T14816] mousedev_open+0xdc/0x580 [ 523.642024][T14816] ? __pfx_mousedev_open+0x10/0x10 [ 523.642054][T14816] misc_open+0x35a/0x420 [ 523.642086][T14816] ? __pfx_misc_open+0x10/0x10 [ 523.642117][T14816] chrdev_open+0x231/0x6a0 [ 523.642138][T14816] ? __pfx_apparmor_file_open+0x10/0x10 [ 523.642164][T14816] ? __pfx_chrdev_open+0x10/0x10 [ 523.642188][T14816] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 523.642223][T14816] do_dentry_open+0x741/0x1c10 [ 523.642244][T14816] ? __pfx_chrdev_open+0x10/0x10 [ 523.642271][T14816] vfs_open+0x82/0x3f0 [ 523.642301][T14816] path_openat+0x1e5e/0x2d40 [ 523.642333][T14816] ? __pfx_path_openat+0x10/0x10 [ 523.642359][T14816] do_filp_open+0x20b/0x470 [ 523.642378][T14816] ? __pfx_do_filp_open+0x10/0x10 [ 523.642416][T14816] ? alloc_fd+0x471/0x7d0 [ 523.642454][T14816] do_sys_openat2+0x11b/0x1d0 [ 523.642482][T14816] ? __pfx_do_sys_openat2+0x10/0x10 [ 523.642519][T14816] __x64_sys_openat+0x174/0x210 [ 523.642550][T14816] ? __pfx___x64_sys_openat+0x10/0x10 [ 523.642580][T14816] ? rcu_is_watching+0x12/0xc0 [ 523.642605][T14816] do_syscall_64+0xcd/0x230 [ 523.642637][T14816] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 523.642658][T14816] RIP: 0033:0x7fae5078e969 [ 523.642673][T14816] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 523.642693][T14816] RSP: 002b:00007fae51540038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 523.642711][T14816] RAX: ffffffffffffffda RBX: 00007fae509b5fa0 RCX: 00007fae5078e969 [ 523.642724][T14816] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 523.642737][T14816] RBP: 00007fae50810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 523.642749][T14816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 523.642761][T14816] R13: 0000000000000000 R14: 00007fae509b5fa0 R15: 00007ffda41c29a8 [ 523.642786][T14816] [ 524.396958][T14820] netlink: 330 bytes leftover after parsing attributes in process `syz.0.3503'. [ 525.678125][T14853] FAULT_INJECTION: forcing a failure. [ 525.678125][T14853] name failslab, interval 1, probability 0, space 0, times 0 [ 525.728824][T14853] CPU: 1 UID: 0 PID: 14853 Comm: syz.3.3518 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(full) [ 525.728861][T14853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 525.728874][T14853] Call Trace: [ 525.728881][T14853] [ 525.728889][T14853] dump_stack_lvl+0x16c/0x1f0 [ 525.728922][T14853] should_fail_ex+0x512/0x640 [ 525.728953][T14853] ? __kmalloc_noprof+0xbf/0x510 [ 525.728999][T14853] ? fib_default_rule_add+0x4f/0x420 [ 525.729024][T14853] should_failslab+0xc2/0x120 [ 525.729053][T14853] __kmalloc_noprof+0xd2/0x510 [ 525.729094][T14853] ? lockdep_init_map_type+0x5c/0x280 [ 525.729134][T14853] fib_default_rule_add+0x4f/0x420 [ 525.729161][T14853] ? __pfx_ipmr_net_init+0x10/0x10 [ 525.729187][T14853] ipmr_net_init+0x1ee/0x4e0 [ 525.729213][T14853] ? __pfx_ipmr_net_init+0x10/0x10 [ 525.729238][T14853] ops_init+0x1df/0x5f0 [ 525.729270][T14853] setup_net+0x21e/0x850 [ 525.729302][T14853] ? __pfx_setup_net+0x10/0x10 [ 525.729328][T14853] ? lockdep_init_map_type+0x5c/0x280 [ 525.729361][T14853] ? __pfx_down_read_killable+0x10/0x10 [ 525.729402][T14853] ? debug_mutex_init+0x37/0x70 [ 525.729427][T14853] copy_net_ns+0x2a6/0x5f0 [ 525.729462][T14853] create_new_namespaces+0x3ea/0xad0 [ 525.729495][T14853] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 525.729525][T14853] ksys_unshare+0x45b/0xa40 [ 525.729558][T14853] ? __pfx_ksys_unshare+0x10/0x10 [ 525.729589][T14853] ? xfd_validate_state+0x5d/0x180 [ 525.729630][T14853] ? rcu_is_watching+0x12/0xc0 [ 525.729659][T14853] __x64_sys_unshare+0x31/0x40 [ 525.729690][T14853] do_syscall_64+0xcd/0x230 [ 525.729726][T14853] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.729750][T14853] RIP: 0033:0x7fae5078e969 [ 525.729769][T14853] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 525.729792][T14853] RSP: 002b:00007fae51540038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 525.729814][T14853] RAX: ffffffffffffffda RBX: 00007fae509b5fa0 RCX: 00007fae5078e969 [ 525.729830][T14853] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 525.729844][T14853] RBP: 00007fae50810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 525.729872][T14853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 525.729886][T14853] R13: 0000000000000000 R14: 00007fae509b5fa0 R15: 00007ffda41c29a8 [ 525.729916][T14853] [ 525.968573][ C1] vkms_vblank_simulate: vblank timer overrun [ 526.700856][T14858] Process accounting resumed [ 528.262086][T14881] netlink: 'syz.1.3528': attribute type 33 has an invalid length. [ 528.324758][T14900] netlink: 338 bytes leftover after parsing attributes in process `syz.0.3534'. [ 528.353872][T14881] netlink: 322 bytes leftover after parsing attributes in process `syz.1.3528'. [ 528.726238][ T30] audit: type=1800 audit(4294967549.290:17): pid=14904 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3536" name="dbroot" dev="configfs" ino=45073 res=0 errno=0 [ 528.888373][T14906] netlink: 330 bytes leftover after parsing attributes in process `syz.3.3538'. [ 529.275951][T14915] netlink: 'syz.3.3543': attribute type 4 has an invalid length. [ 529.314202][T14915] netlink: 314 bytes leftover after parsing attributes in process `syz.3.3543'. [ 529.481672][T14919] netlink: 'syz.2.3544': attribute type 27 has an invalid length. [ 529.526230][T14919] netlink: 334 bytes leftover after parsing attributes in process `syz.2.3544'. [ 529.768132][ T5834] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 529.801235][T14928] netlink: 342 bytes leftover after parsing attributes in process `syz.2.3547'. [ 529.813472][T12313] Bluetooth: hci2: unexpected event 0x05 length: 440 > 4 [ 530.546667][T14941] FAULT_INJECTION: forcing a failure. [ 530.546667][T14941] name failslab, interval 1, probability 0, space 0, times 0 [ 530.667397][T14941] CPU: 1 UID: 0 PID: 14941 Comm: syz.3.3551 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(full) [ 530.667436][T14941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 530.667449][T14941] Call Trace: [ 530.667455][T14941] [ 530.667463][T14941] dump_stack_lvl+0x16c/0x1f0 [ 530.667497][T14941] should_fail_ex+0x512/0x640 [ 530.667528][T14941] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 530.667555][T14941] should_failslab+0xc2/0x120 [ 530.667582][T14941] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 530.667607][T14941] ? __kernfs_new_node+0xd2/0x8a0 [ 530.667646][T14941] __kernfs_new_node+0xd2/0x8a0 [ 530.667684][T14941] ? __pfx___kernfs_new_node+0x10/0x10 [ 530.667726][T14941] ? find_held_lock+0x2b/0x80 [ 530.667748][T14941] ? kernfs_root+0xee/0x2a0 [ 530.667772][T14941] kernfs_new_node+0x13c/0x1e0 [ 530.667801][T14941] __kernfs_create_file+0x53/0x350 [ 530.667833][T14941] sysfs_add_file_mode_ns+0x207/0x3c0 [ 530.667874][T14941] internal_create_group+0x578/0xf30 [ 530.667901][T14941] ? __pfx_internal_create_group+0x10/0x10 [ 530.667933][T14941] sysfs_slab_add+0x1a3/0x1e0 [ 530.667956][T14941] do_kmem_cache_create+0x530/0x730 [ 530.667981][T14941] ? __kmem_cache_create_args+0x205/0x390 [ 530.668009][T14941] __kmem_cache_create_args+0x225/0x390 [ 530.668036][T14941] mon_text_open+0x313/0x4f0 [ 530.668070][T14941] ? __pfx_mon_text_open+0x10/0x10 [ 530.668101][T14941] ? __debugfs_file_get+0x1fe/0x840 [ 530.668126][T14941] ? __pfx_mon_text_ctor+0x10/0x10 [ 530.668168][T14941] ? __pfx_apparmor_file_open+0x10/0x10 [ 530.668193][T14941] ? lockdown_is_locked_down+0x3f/0x130 [ 530.668223][T14941] ? bpf_lsm_locked_down+0x9/0x10 [ 530.668247][T14941] ? __pfx_mon_text_open+0x10/0x10 [ 530.668275][T14941] full_proxy_open_regular+0x1b6/0x360 [ 530.668303][T14941] do_dentry_open+0x741/0x1c10 [ 530.668324][T14941] ? __pfx_full_proxy_open_regular+0x10/0x10 [ 530.668354][T14941] vfs_open+0x82/0x3f0 [ 530.668384][T14941] path_openat+0x1e5e/0x2d40 [ 530.668415][T14941] ? __pfx_path_openat+0x10/0x10 [ 530.668449][T14941] do_filp_open+0x20b/0x470 [ 530.668469][T14941] ? __pfx_do_filp_open+0x10/0x10 [ 530.668507][T14941] ? alloc_fd+0x471/0x7d0 [ 530.668546][T14941] do_sys_openat2+0x11b/0x1d0 [ 530.668573][T14941] ? __pfx_do_sys_openat2+0x10/0x10 [ 530.668610][T14941] __x64_sys_openat+0x174/0x210 [ 530.668639][T14941] ? __pfx___x64_sys_openat+0x10/0x10 [ 530.668668][T14941] ? rcu_is_watching+0x12/0xc0 [ 530.668694][T14941] do_syscall_64+0xcd/0x230 [ 530.668725][T14941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.668745][T14941] RIP: 0033:0x7fae5078e969 [ 530.668761][T14941] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 530.668781][T14941] RSP: 002b:00007fae51540038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 530.668800][T14941] RAX: ffffffffffffffda RBX: 00007fae509b5fa0 RCX: 00007fae5078e969 [ 530.668813][T14941] RDX: 0000000000000000 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 530.668826][T14941] RBP: 00007fae50810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 530.668838][T14941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 530.668850][T14941] R13: 0000000000000000 R14: 00007fae509b5fa0 R15: 00007ffda41c29a8 [ 530.668876][T14941] [ 531.005102][T14941] SLUB: Unable to add cache mon_text_ffff888033f8c400 to sysfs [ 533.279926][T14965] netlink: 'syz.3.3558': attribute type 27 has an invalid length. [ 533.317005][T14965] netlink: 334 bytes leftover after parsing attributes in process `syz.3.3558'. [ 533.496065][T14970] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 533.995333][T14980] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3566'. [ 534.689005][T14993] netlink: 'syz.3.3570': attribute type 4 has an invalid length. [ 535.157141][T15004] netlink: 'syz.3.3575': attribute type 8 has an invalid length. [ 535.213948][T15004] netlink: 'syz.3.3575': attribute type 8 has an invalid length. [ 538.291074][T15046] netlink: 346 bytes leftover after parsing attributes in process `syz.1.3590'. [ 538.527357][T15054] FAULT_INJECTION: forcing a failure. [ 538.527357][T15054] name fail_futex, interval 1, probability 0, space 0, times 0 [ 538.588918][T15054] CPU: 1 UID: 0 PID: 15054 Comm: syz.2.3593 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(full) [ 538.588949][T15054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 538.588962][T15054] Call Trace: [ 538.588968][T15054] [ 538.588975][T15054] dump_stack_lvl+0x16c/0x1f0 [ 538.589008][T15054] should_fail_ex+0x512/0x640 [ 538.589041][T15054] get_futex_key+0x49e/0x1000 [ 538.589064][T15054] ? __pfx_get_futex_key+0x10/0x10 [ 538.589094][T15054] futex_wait_setup+0x78/0x290 [ 538.589126][T15054] __futex_wait+0x266/0x3c0 [ 538.589155][T15054] ? __pfx___futex_wait+0x10/0x10 [ 538.589187][T15054] ? __pfx_futex_wake_mark+0x10/0x10 [ 538.589218][T15054] ? __pfx_userfaultfd_unmap_complete+0x10/0x10 [ 538.589251][T15054] futex_wait+0xe8/0x380 [ 538.589276][T15054] ? __pfx_futex_wait+0x10/0x10 [ 538.589308][T15054] ? __do_sys_mremap+0x5d4/0x15d0 [ 538.589337][T15054] do_futex+0x229/0x350 [ 538.589359][T15054] ? __pfx_do_futex+0x10/0x10 [ 538.589379][T15054] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 538.589415][T15054] __x64_sys_futex+0x1e0/0x4c0 [ 538.589441][T15054] ? __pfx___x64_sys_futex+0x10/0x10 [ 538.589464][T15054] ? rcu_is_watching+0x12/0xc0 [ 538.589489][T15054] do_syscall_64+0xcd/0x230 [ 538.589519][T15054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.589540][T15054] RIP: 0033:0x7fdd37b8e969 [ 538.589556][T15054] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 538.589584][T15054] RSP: 002b:00007fdd38a040e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 538.589604][T15054] RAX: ffffffffffffffda RBX: 00007fdd37db5fa8 RCX: 00007fdd37b8e969 [ 538.589617][T15054] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fdd37db5fa8 [ 538.589630][T15054] RBP: 00007fdd37db5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 538.589642][T15054] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdd37db5fac [ 538.589655][T15054] R13: 0000000000000000 R14: 00007ffe0bfec4a0 R15: 00007ffe0bfec588 [ 538.589680][T15054] [ 539.929421][T15083] netlink: 'syz.3.3606': attribute type 21 has an invalid length. [ 539.960766][T15083] netlink: 334 bytes leftover after parsing attributes in process `syz.3.3606'. [ 540.250409][T15092] netlink: 334 bytes leftover after parsing attributes in process `syz.2.3610'. [ 540.731048][T15109] netlink: 334 bytes leftover after parsing attributes in process `syz.2.3617'. [ 541.995873][T15142] netlink: 'syz.1.3631': attribute type 29 has an invalid length. [ 542.031994][T15142] netlink: 334 bytes leftover after parsing attributes in process `syz.1.3631'. [ 544.293426][T15204] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 545.298121][T15226] netlink: 330 bytes leftover after parsing attributes in process `syz.1.3664'. [ 545.504864][T15230] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3667'. [ 545.585841][T15234] netlink: 334 bytes leftover after parsing attributes in process `syz.0.3666'. [ 546.271295][T15252] netlink: 'syz.3.3676': attribute type 16 has an invalid length. [ 546.299242][T15252] netlink: 306 bytes leftover after parsing attributes in process `syz.3.3676'. [ 546.666497][T15261] netlink: 'syz.1.3679': attribute type 1 has an invalid length. [ 546.695299][T15261] netlink: 230 bytes leftover after parsing attributes in process `syz.1.3679'. [ 547.565654][T15275] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3683'. [ 547.623135][T15275] veth1_vlan: left allmulticast mode [ 549.416964][T15312] netlink: 342 bytes leftover after parsing attributes in process `syz.0.3698'. [ 549.677262][T15314] netlink: 326 bytes leftover after parsing attributes in process `syz.1.3699'. [ 549.978328][T15320] netlink: 330 bytes leftover after parsing attributes in process `syz.1.3702'. [ 550.735605][T15341] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 551.183691][T15349] netlink: 'syz.3.3713': attribute type 14 has an invalid length. [ 551.224995][T15349] netlink: 330 bytes leftover after parsing attributes in process `syz.3.3713'. [ 551.352444][T15352] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3714'. [ 552.215600][T15377] netlink: 342 bytes leftover after parsing attributes in process `syz.2.3727'. [ 552.235852][T15377] netlink: 342 bytes leftover after parsing attributes in process `syz.2.3727'. [ 552.608676][T15387] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3729'. [ 552.981091][T15394] netlink: 504 bytes leftover after parsing attributes in process `syz.2.3730'. [ 554.184534][T15423] input: jJG8-69c%vx{(lPQ J86V as /devices/virtual/input/input10 [ 554.718397][T15436] hub 8-0:1.0: USB hub found [ 554.747732][T15436] hub 8-0:1.0: 1 port detected [ 555.108188][T15445] netlink: 186 bytes leftover after parsing attributes in process `syz.2.3751'. [ 555.128217][T15445] netlink: 186 bytes leftover after parsing attributes in process `syz.2.3751'. [ 556.506878][T15477] [U]  [ 556.509715][T15477] [U] [ 556.512411][T15477] [U] [ 556.515126][T15477] [U] [ 556.534125][T15477] [U] [ 556.536847][T15477] [U] [ 556.539542][T15477] [U] [ 556.542235][T15477] [U] [ 556.561748][T15477] [U] [ 556.564477][T15477] [U] [ 556.567184][T15477] [U] [ 556.569886][T15477] [U] [ 556.590162][T15477] [U] [ 556.592917][T15477] [U] [ 556.595616][T15477] [U] [ 556.598308][T15477] [U] [ 556.614900][T15477] [U] [ 556.617608][T15477] [U] [ 556.620303][T15477] [U] [ 556.622993][T15477] [U] [ 556.640448][T15477] [U] [ 556.643191][T15477] [U] [ 556.645890][T15477] [U] [ 556.648587][T15477] [U] [ 556.667655][T15477] [U] [ 556.670366][T15477] [U] [ 556.673080][T15477] [U] [ 556.675789][T15477] [U] [ 556.693520][T15477] [U] [ 556.696257][T15477] [U] [ 556.698954][T15477] [U] [ 556.701657][T15477] [U] [ 556.718401][T15477] [U] [ 556.721136][T15477] [U] [ 556.723841][T15477] [U] [ 556.726542][T15477] [U] [ 556.751071][T15477] [U] [ 556.753801][T15477] [U] [ 556.756501][T15477] [U] [ 556.759198][T15477] [U] [ 556.778058][T15477] [U] [ 556.780779][T15477] [U] [ 556.783483][T15477] [U] [ 556.786176][T15477] [U] [ 556.805248][T15477] [U] [ 556.807960][T15477] [U] [ 556.810691][T15477] [U] [ 556.813397][T15477] [U] [ 556.830941][T15477] [U] [ 556.833694][T15477] [U] [ 556.836410][T15477] [U] [ 556.839128][T15477] [U] [ 556.855759][T15477] [U] [ 556.858469][T15477] [U] [ 556.861172][T15477] [U] [ 556.863885][T15477] [U] [ 556.881230][T15477] [U] [ 556.883970][T15477] [U] [ 556.886665][T15477] [U] [ 556.889356][T15477] [U] [ 556.909270][T15477] [U] [ 556.911986][T15477] [U] [ 556.914680][T15477] [U] [ 556.917371][T15477] [U] [ 556.935632][T15477] [U] [ 556.938341][T15477] [U] [ 556.941042][T15477] [U] [ 556.943739][T15477] [U] [ 556.959805][T15477] [U] [ 556.962517][T15477] [U] [ 556.965214][T15477] [U] [ 556.967913][T15477] [U] [ 556.986445][T15477] [U] [ 556.989163][T15477] [U] [ 556.991902][T15477] [U] [ 556.994614][T15477] [U] [ 557.013516][T15477] [U] [ 557.016231][T15477] [U] [ 557.018924][T15477] [U] [ 557.021628][T15477] [U] [ 557.044073][T15477] [U] [ 557.046788][T15477] [U] [ 557.049488][T15477] [U] [ 557.052236][T15477] [U] [ 557.069198][T15477] [U] [ 557.071919][T15477] [U] [ 557.074624][T15477] [U] [ 557.077319][T15477] [U] [ 557.097177][T15477] [U] [ 557.099902][T15477] [U] [ 557.102603][T15477] [U] [ 557.105297][T15477] [U] [ 557.123883][T15477] [U] [ 557.126601][T15477] [U] [ 557.129294][T15477] [U] [ 557.131985][T15477] [U] [ 557.148829][T15477] [U] [ 557.151552][T15477] [U] [ 557.154267][T15477] [U] [ 557.156961][T15477] [U] [ 557.173988][T15477] [U] [ 557.176711][T15477] [U] [ 557.179415][T15477] [U] [ 557.182106][T15477] [U] [ 557.199627][T15477] [U] [ 557.202335][T15477] [U] [ 557.205027][T15477] [U] [ 557.207730][T15477] [U] [ 557.244613][T15477] [U] [ 557.247344][T15477] [U] [ 557.250068][T15477] [U] [ 557.252804][T15477] [U] [ 557.281099][T15477] [U] [ 557.283854][T15477] [U] [ 557.286561][T15477] [U] [ 557.289275][T15477] [U] [ 557.320297][T15477] [U] [ 557.323023][T15477] [U] [ 557.325742][T15477] [U] [ 557.328445][T15477] [U] [ 557.349283][T15481] netlink: 338 bytes leftover after parsing attributes in process `syz.3.3764'. [ 557.383871][T15481] bridge0: entered promiscuous mode [ 557.395417][T15477] [U] [ 557.398132][T15477] [U] [ 557.400856][T15477] [U] [ 557.403553][T15477] [U] [ 557.468156][T15477] [U] [ 558.140181][T15496] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3770'. [ 558.171540][T15496] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3770'. [ 558.192431][T15501] netlink: 346 bytes leftover after parsing attributes in process `syz.0.3772'. [ 559.497451][T15526] random: crng reseeded on system resumption [ 559.777338][T15531] netlink: 342 bytes leftover after parsing attributes in process `syz.3.3786'. [ 561.685199][T15553] Process accounting paused [ 564.536516][T15629] netlink: 330 bytes leftover after parsing attributes in process `syz.1.3822'. [ 565.183144][T15641] netlink: 334 bytes leftover after parsing attributes in process `syz.0.3826'. [ 565.391623][T15645] netlink: 'syz.1.3827': attribute type 28 has an invalid length. [ 565.442689][T15645] netlink: 326 bytes leftover after parsing attributes in process `syz.1.3827'. [ 565.475590][T15645] netlink: 'syz.1.3827': attribute type 28 has an invalid length. [ 565.524304][T15645] netlink: 326 bytes leftover after parsing attributes in process `syz.1.3827'. [ 566.194168][T15661] FAULT_INJECTION: forcing a failure. [ 566.194168][T15661] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 566.210353][T15662] netlink: 326 bytes leftover after parsing attributes in process `syz.0.3844'. [ 566.262153][T15661] CPU: 1 UID: 0 PID: 15661 Comm: syz.2.3835 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(full) [ 566.262188][T15661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 566.262218][T15661] Call Trace: [ 566.262225][T15661] [ 566.262233][T15661] dump_stack_lvl+0x16c/0x1f0 [ 566.262268][T15661] should_fail_ex+0x512/0x640 [ 566.262301][T15661] _copy_to_user+0x32/0xd0 [ 566.262335][T15661] poll_select_finish+0x33a/0x6b0 [ 566.262368][T15661] ? __pfx_poll_select_finish+0x10/0x10 [ 566.262403][T15661] ? read_tsc+0x9/0x20 [ 566.262429][T15661] ? ktime_get_ts64+0x256/0x400 [ 566.262460][T15661] kern_select+0x16e/0x1e0 [ 566.262492][T15661] ? __pfx_kern_select+0x10/0x10 [ 566.262525][T15661] ? xfd_validate_state+0x5d/0x180 [ 566.262564][T15661] ? rcu_is_watching+0x12/0xc0 [ 566.262587][T15661] __x64_sys_select+0xbd/0x160 [ 566.262619][T15661] ? do_syscall_64+0x91/0x230 [ 566.262649][T15661] ? lockdep_hardirqs_on+0x7c/0x110 [ 566.262677][T15661] do_syscall_64+0xcd/0x230 [ 566.262709][T15661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.262731][T15661] RIP: 0033:0x7fdd37b8e969 [ 566.262758][T15661] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 566.262778][T15661] RSP: 002b:00007fdd38a04038 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 566.262796][T15661] RAX: ffffffffffffffda RBX: 00007fdd37db5fa0 RCX: 00007fdd37b8e969 [ 566.262809][T15661] RDX: 0000200000000500 RSI: 0000200000000480 RDI: 0000000000000009 [ 566.262822][T15661] RBP: 00007fdd37c10ab1 R08: 0000200000000600 R09: 0000000000000000 [ 566.262834][T15661] R10: 0000200000000580 R11: 0000000000000246 R12: 0000000000000000 [ 566.262847][T15661] R13: 0000000000000000 R14: 00007fdd37db5fa0 R15: 00007ffe0bfec588 [ 566.262871][T15661] [ 567.926552][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 567.933028][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 569.240128][T15706] netlink: 342 bytes leftover after parsing attributes in process `syz.3.3850'. [ 569.365760][T15706] IPv6: NLM_F_CREATE should be specified when creating new route [ 571.752836][T15758] netlink: 334 bytes leftover after parsing attributes in process `syz.2.3872'. [ 572.004396][T15761] netlink: 334 bytes leftover after parsing attributes in process `syz.1.3874'. [ 575.179979][T15814] netlink: 334 bytes leftover after parsing attributes in process `syz.0.3900'. [ 579.205344][T15881] netlink: 342 bytes leftover after parsing attributes in process `syz.2.3917'. [ 579.334156][T15880] netlink: 334 bytes leftover after parsing attributes in process `syz.0.3919'. [ 581.010216][T15899] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3926'. [ 581.129919][T15899] veth1_vlan: left allmulticast mode [ 581.255205][T15899] bridge0: port 3(macvlan0) entered disabled state [ 581.489750][T15899] macvlan0 (unregistering): left allmulticast mode [ 581.549242][T15899] macvlan0 (unregistering): left promiscuous mode [ 581.658903][T15899] bridge0: port 3(macvlan0) entered disabled state [ 583.910568][T15938] FAULT_INJECTION: forcing a failure. [ 583.910568][T15938] name failslab, interval 1, probability 0, space 0, times 0 [ 584.045365][T15938] CPU: 1 UID: 0 PID: 15938 Comm: syz.1.3938 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(full) [ 584.045396][T15938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 584.045409][T15938] Call Trace: [ 584.045416][T15938] [ 584.045424][T15938] dump_stack_lvl+0x16c/0x1f0 [ 584.045460][T15938] should_fail_ex+0x512/0x640 [ 584.045491][T15938] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 584.045519][T15938] should_failslab+0xc2/0x120 [ 584.045549][T15938] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 584.045574][T15938] ? mas_alloc_nodes+0x18b/0x8b0 [ 584.045605][T15938] mas_alloc_nodes+0x18b/0x8b0 [ 584.045636][T15938] mas_node_count_gfp+0x105/0x130 [ 584.045665][T15938] mas_preallocate+0x53e/0xcd0 [ 584.045700][T15938] ? __memcg_slab_post_alloc_hook+0x4d0/0x940 [ 584.045731][T15938] ? __pfx_mas_preallocate+0x10/0x10 [ 584.045779][T15938] ? anon_vma_name+0x75/0x100 [ 584.045813][T15938] __split_vma+0x33b/0x1030 [ 584.045839][T15938] ? __pfx___split_vma+0x10/0x10 [ 584.045873][T15938] vms_gather_munmap_vmas+0x392/0x1310 [ 584.045902][T15938] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 584.045941][T15938] do_vmi_align_munmap+0x27c/0x7d0 [ 584.045969][T15938] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 584.046029][T15938] do_vmi_munmap+0x208/0x3e0 [ 584.046056][T15938] move_vma+0xb67/0x1740 [ 584.046085][T15938] ? __pfx_move_vma+0x10/0x10 [ 584.046120][T15938] ? mm_get_unmapped_area_vmflags+0x97/0xe0 [ 584.046163][T15938] ? vrm_set_new_addr+0x208/0x290 [ 584.046191][T15938] __do_sys_mremap+0xe38/0x15d0 [ 584.046219][T15938] ? __pfx___do_sys_mremap+0x10/0x10 [ 584.046250][T15938] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 584.046290][T15938] ? __x64_sys_futex+0x1e0/0x4c0 [ 584.046321][T15938] ? rcu_is_watching+0x12/0xc0 [ 584.046348][T15938] do_syscall_64+0xcd/0x230 [ 584.046382][T15938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.046403][T15938] RIP: 0033:0x7fb44738e969 [ 584.046420][T15938] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 584.046441][T15938] RSP: 002b:00007fb4451f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 584.046461][T15938] RAX: ffffffffffffffda RBX: 00007fb4475b5fa0 RCX: 00007fb44738e969 [ 584.046475][T15938] RDX: 0000000000000004 RSI: 0000000000000004 RDI: 0000200000001000 [ 584.046488][T15938] RBP: 00007fb447410ab1 R08: 0000000100000000 R09: 0000000000000000 [ 584.046502][T15938] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 584.046515][T15938] R13: 0000000000000000 R14: 00007fb4475b5fa0 R15: 00007ffc12f08f28 [ 584.046541][T15938] [ 584.910612][T15941] netlink: 342 bytes leftover after parsing attributes in process `syz.0.3942'. [ 585.011193][T15944] netlink: 342 bytes leftover after parsing attributes in process `syz.3.3941'. [ 585.534163][T15953] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3939'. [ 587.104258][T15987] netlink: 330 bytes leftover after parsing attributes in process `syz.3.3952'. [ 588.372014][T16014] netlink: 'syz.0.3965': attribute type 29 has an invalid length. [ 588.384653][T16012] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3964'. [ 588.409139][T16014] netlink: 334 bytes leftover after parsing attributes in process `syz.0.3965'. [ 588.465664][T16012] vcan0: entered promiscuous mode [ 589.544415][T16031] FAULT_INJECTION: forcing a failure. [ 589.544415][T16031] name failslab, interval 1, probability 0, space 0, times 0 [ 589.568288][T16033] netlink: 17 bytes leftover after parsing attributes in process `syz.2.3972'. [ 589.603653][T16031] CPU: 1 UID: 0 PID: 16031 Comm: syz.0.3978 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(full) [ 589.603683][T16031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 589.603696][T16031] Call Trace: [ 589.603703][T16031] [ 589.603710][T16031] dump_stack_lvl+0x16c/0x1f0 [ 589.603744][T16031] should_fail_ex+0x512/0x640 [ 589.603773][T16031] ? __kvmalloc_node_noprof+0x122/0x600 [ 589.603796][T16031] should_failslab+0xc2/0x120 [ 589.603822][T16031] __kvmalloc_node_noprof+0x135/0x600 [ 589.603844][T16031] ? udmabuf_create+0x335/0x11a0 [ 589.603869][T16031] ? udmabuf_create+0x335/0x11a0 [ 589.603888][T16031] udmabuf_create+0x335/0x11a0 [ 589.603913][T16031] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 589.603944][T16031] ? __pfx_udmabuf_create+0x10/0x10 [ 589.603964][T16031] ? find_held_lock+0x2b/0x80 [ 589.603983][T16031] ? __might_fault+0xe3/0x190 [ 589.604005][T16031] ? __might_fault+0xe3/0x190 [ 589.604026][T16031] ? __might_fault+0x13b/0x190 [ 589.604058][T16031] udmabuf_ioctl+0x192/0x310 [ 589.604078][T16031] ? __pfx_udmabuf_ioctl+0x10/0x10 [ 589.604096][T16031] ? find_held_lock+0x2b/0x80 [ 589.604121][T16031] ? __fget_files+0x20e/0x3c0 [ 589.604156][T16031] ? __pfx_udmabuf_ioctl+0x10/0x10 [ 589.604178][T16031] __x64_sys_ioctl+0x190/0x200 [ 589.604208][T16031] do_syscall_64+0xcd/0x230 [ 589.604238][T16031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.604259][T16031] RIP: 0033:0x7f8dd7f8e969 [ 589.604275][T16031] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 589.604295][T16031] RSP: 002b:00007f8dd5df6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 589.604313][T16031] RAX: ffffffffffffffda RBX: 00007f8dd81b5fa0 RCX: 00007f8dd7f8e969 [ 589.604327][T16031] RDX: 00002000000000c0 RSI: 0000000040187542 RDI: 0000000000000003 [ 589.604339][T16031] RBP: 00007f8dd8010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 589.604351][T16031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 589.604363][T16031] R13: 0000000000000000 R14: 00007f8dd81b5fa0 R15: 00007fffeef9e138 [ 589.604387][T16031] [ 590.251021][T16045] netlink: 334 bytes leftover after parsing attributes in process `syz.2.3976'. [ 590.262033][T16047] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3975'. [ 590.283765][T16047] netlink: 13 bytes leftover after parsing attributes in process `syz.0.3975'. [ 590.452245][T16053] netlink: 'syz.0.3979': attribute type 4 has an invalid length. [ 590.755621][T16058] netlink: 330 bytes leftover after parsing attributes in process `syz.0.3981'. [ 591.034867][T16064] netlink: 'syz.0.3984': attribute type 19 has an invalid length. [ 591.069447][T16064] netlink: 334 bytes leftover after parsing attributes in process `syz.0.3984'. [ 591.355303][T16072] netlink: 'syz.0.3987': attribute type 22 has an invalid length. [ 591.389542][T16072] netlink: 330 bytes leftover after parsing attributes in process `syz.0.3987'. [ 591.535128][T16076] netlink: 342 bytes leftover after parsing attributes in process `syz.3.3990'. [ 591.644612][T16078] netlink: 342 bytes leftover after parsing attributes in process `syz.2.3989'. [ 591.759226][T16081] Process accounting resumed [ 592.684689][T16110] FAULT_INJECTION: forcing a failure. [ 592.684689][T16110] name failslab, interval 1, probability 0, space 0, times 0 [ 592.711481][T16107] kvm: kvm [16106]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0xc1) = 0x3fc [ 592.776145][T16110] CPU: 1 UID: 0 PID: 16110 Comm: syz.1.4003 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(full) [ 592.776175][T16110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 592.776188][T16110] Call Trace: [ 592.776195][T16110] [ 592.776203][T16110] dump_stack_lvl+0x16c/0x1f0 [ 592.776256][T16110] should_fail_ex+0x512/0x640 [ 592.776285][T16110] ? fs_reclaim_acquire+0xae/0x150 [ 592.776319][T16110] should_failslab+0xc2/0x120 [ 592.776345][T16110] __kmalloc_cache_noprof+0x6a/0x3e0 [ 592.776378][T16110] ? tomoyo_write_log2+0x33d/0xc10 [ 592.776409][T16110] tomoyo_write_log2+0x33d/0xc10 [ 592.776440][T16110] tomoyo_supervisor+0x15e/0x13b0 [ 592.776476][T16110] ? __pfx_tomoyo_supervisor+0x10/0x10 [ 592.776518][T16110] ? lockdep_hardirqs_on+0x7c/0x110 [ 592.776548][T16110] ? tomoyo_check_path_acl+0xad/0x210 [ 592.776571][T16110] ? tomoyo_check_acl+0x1f7/0x410 [ 592.776594][T16110] tomoyo_path_permission+0x270/0x3b0 [ 592.776619][T16110] tomoyo_check_open_permission+0x37b/0x3c0 [ 592.776643][T16110] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 592.776692][T16110] ? do_raw_spin_lock+0x12c/0x2b0 [ 592.776729][T16110] tomoyo_file_open+0x6b/0x90 [ 592.776761][T16110] security_file_open+0x84/0x1e0 [ 592.776788][T16110] do_dentry_open+0x596/0x1c10 [ 592.776815][T16110] vfs_open+0x82/0x3f0 [ 592.776843][T16110] path_openat+0x1e5e/0x2d40 [ 592.776871][T16110] ? __pfx_path_openat+0x10/0x10 [ 592.776896][T16110] do_filp_open+0x20b/0x470 [ 592.776915][T16110] ? __pfx_do_filp_open+0x10/0x10 [ 592.776952][T16110] ? alloc_fd+0x471/0x7d0 [ 592.776989][T16110] do_sys_openat2+0x11b/0x1d0 [ 592.777015][T16110] ? __pfx_do_sys_openat2+0x10/0x10 [ 592.777050][T16110] __x64_sys_openat+0x174/0x210 [ 592.777077][T16110] ? __pfx___x64_sys_openat+0x10/0x10 [ 592.777105][T16110] ? rcu_is_watching+0x12/0xc0 [ 592.777130][T16110] do_syscall_64+0xcd/0x230 [ 592.777165][T16110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.777186][T16110] RIP: 0033:0x7fb44738e969 [ 592.777201][T16110] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 592.777221][T16110] RSP: 002b:00007fb4451f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 592.777244][T16110] RAX: ffffffffffffffda RBX: 00007fb4475b5fa0 RCX: 00007fb44738e969 [ 592.777258][T16110] RDX: 0000000000080000 RSI: 0000200000000340 RDI: ffffffffffffff9c [ 592.777270][T16110] RBP: 00007fb447410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 592.777283][T16110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 592.777295][T16110] R13: 0000000000000000 R14: 00007fb4475b5fa0 R15: 00007ffc12f08f28 [ 592.777321][T16110] [ 593.508642][T16118] netlink: 330 bytes leftover after parsing attributes in process `syz.0.4006'. [ 594.867184][T16144] netlink: 186 bytes leftover after parsing attributes in process `syz.1.4015'. [ 595.598147][T16160] netlink: 330 bytes leftover after parsing attributes in process `syz.1.4022'. [ 595.808422][T16167] FAULT_INJECTION: forcing a failure. [ 595.808422][T16167] name failslab, interval 1, probability 0, space 0, times 0 [ 595.836316][T16167] CPU: 1 UID: 0 PID: 16167 Comm: syz.1.4024 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(full) [ 595.836346][T16167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 595.836359][T16167] Call Trace: [ 595.836367][T16167] [ 595.836374][T16167] dump_stack_lvl+0x16c/0x1f0 [ 595.836408][T16167] should_fail_ex+0x512/0x640 [ 595.836439][T16167] ? fs_reclaim_acquire+0xae/0x150 [ 595.836474][T16167] ? tomoyo_init_log+0x1385/0x2140 [ 595.836502][T16167] should_failslab+0xc2/0x120 [ 595.836528][T16167] __kmalloc_noprof+0xd2/0x510 [ 595.836558][T16167] tomoyo_init_log+0x1385/0x2140 [ 595.836601][T16167] ? __pfx_tomoyo_init_log+0x10/0x10 [ 595.836638][T16167] tomoyo_write_log2+0x2f7/0xc10 [ 595.836672][T16167] tomoyo_supervisor+0x15e/0x13b0 [ 595.836711][T16167] ? __pfx_tomoyo_supervisor+0x10/0x10 [ 595.836757][T16167] ? lockdep_hardirqs_on+0x7c/0x110 [ 595.836790][T16167] ? tomoyo_check_path_acl+0xad/0x210 [ 595.836820][T16167] ? tomoyo_check_acl+0x1f7/0x410 [ 595.836846][T16167] tomoyo_path_permission+0x270/0x3b0 [ 595.836873][T16167] tomoyo_check_open_permission+0x37b/0x3c0 [ 595.836901][T16167] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 595.836960][T16167] ? do_raw_spin_lock+0x12c/0x2b0 [ 595.837001][T16167] tomoyo_file_open+0x6b/0x90 [ 595.837038][T16167] security_file_open+0x84/0x1e0 [ 595.837067][T16167] do_dentry_open+0x596/0x1c10 [ 595.837097][T16167] vfs_open+0x82/0x3f0 [ 595.837127][T16167] path_openat+0x1e5e/0x2d40 [ 595.837158][T16167] ? __pfx_path_openat+0x10/0x10 [ 595.837185][T16167] do_filp_open+0x20b/0x470 [ 595.837206][T16167] ? __pfx_do_filp_open+0x10/0x10 [ 595.837246][T16167] ? alloc_fd+0x471/0x7d0 [ 595.837296][T16167] do_sys_openat2+0x11b/0x1d0 [ 595.837323][T16167] ? __pfx_do_sys_openat2+0x10/0x10 [ 595.837360][T16167] __x64_sys_openat+0x174/0x210 [ 595.837388][T16167] ? __pfx___x64_sys_openat+0x10/0x10 [ 595.837417][T16167] ? rcu_is_watching+0x12/0xc0 [ 595.837442][T16167] do_syscall_64+0xcd/0x230 [ 595.837473][T16167] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 595.837494][T16167] RIP: 0033:0x7fb44738e969 [ 595.837510][T16167] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 595.837530][T16167] RSP: 002b:00007fb4451f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 595.837549][T16167] RAX: ffffffffffffffda RBX: 00007fb4475b5fa0 RCX: 00007fb44738e969 [ 595.837563][T16167] RDX: 0000000000020540 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 595.837576][T16167] RBP: 00007fb447410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 595.837588][T16167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 595.837601][T16167] R13: 0000000000000000 R14: 00007fb4475b5fa0 R15: 00007ffc12f08f28 [ 595.837626][T16167] [ 596.354231][T16174] netlink: 'syz.0.4026': attribute type 4 has an invalid length. [ 597.360378][T16193] netlink: 342 bytes leftover after parsing attributes in process `syz.0.4034'. [ 599.137045][T16222] netlink: 342 bytes leftover after parsing attributes in process `syz.1.4046'. [ 600.603703][T16246] FAULT_INJECTION: forcing a failure. [ 600.603703][T16246] name failslab, interval 1, probability 0, space 0, times 0 [ 600.700387][T16246] CPU: 1 UID: 0 PID: 16246 Comm: syz.1.4054 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(full) [ 600.700418][T16246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 600.700432][T16246] Call Trace: [ 600.700439][T16246] [ 600.700447][T16246] dump_stack_lvl+0x16c/0x1f0 [ 600.700481][T16246] should_fail_ex+0x512/0x640 [ 600.700512][T16246] ? __kvmalloc_node_noprof+0x122/0x600 [ 600.700538][T16246] should_failslab+0xc2/0x120 [ 600.700565][T16246] __kvmalloc_node_noprof+0x135/0x600 [ 600.700589][T16246] ? udmabuf_create+0x2dd/0x11a0 [ 600.700619][T16246] ? udmabuf_create+0x2dd/0x11a0 [ 600.700639][T16246] udmabuf_create+0x2dd/0x11a0 [ 600.700687][T16246] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 600.700725][T16246] ? __pfx_udmabuf_create+0x10/0x10 [ 600.700748][T16246] ? find_held_lock+0x2b/0x80 [ 600.700770][T16246] ? __might_fault+0xe3/0x190 [ 600.700802][T16246] ? __might_fault+0xe3/0x190 [ 600.700827][T16246] ? __might_fault+0x13b/0x190 [ 600.700865][T16246] udmabuf_ioctl+0x192/0x310 [ 600.700889][T16246] ? __pfx_udmabuf_ioctl+0x10/0x10 [ 600.700912][T16246] ? find_held_lock+0x2b/0x80 [ 600.700941][T16246] ? __fget_files+0x20e/0x3c0 [ 600.700983][T16246] ? __pfx_udmabuf_ioctl+0x10/0x10 [ 600.701009][T16246] __x64_sys_ioctl+0x190/0x200 [ 600.701045][T16246] do_syscall_64+0xcd/0x230 [ 600.701081][T16246] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.701106][T16246] RIP: 0033:0x7fb44738e969 [ 600.701124][T16246] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 600.701148][T16246] RSP: 002b:00007fb4451f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 600.701170][T16246] RAX: ffffffffffffffda RBX: 00007fb4475b5fa0 RCX: 00007fb44738e969 [ 600.701186][T16246] RDX: 00002000000000c0 RSI: 0000000040187542 RDI: 0000000000000003 [ 600.701200][T16246] RBP: 00007fb447410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 600.701215][T16246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 600.701229][T16246] R13: 0000000000000000 R14: 00007fb4475b5fa0 R15: 00007ffc12f08f28 [ 600.701257][T16246] [ 602.164262][T16263] netlink: 'syz.0.4062': attribute type 1 has an invalid length. [ 602.172016][T16263] netlink: 306 bytes leftover after parsing attributes in process `syz.0.4062'. [ 602.238509][T16266] netlink: 'syz.1.4061': attribute type 28 has an invalid length. [ 602.305507][T16266] netlink: 334 bytes leftover after parsing attributes in process `syz.1.4061'. [ 602.807465][T16273] netlink: 338 bytes leftover after parsing attributes in process `syz.1.4067'. [ 603.024721][T16279] netlink: 342 bytes leftover after parsing attributes in process `syz.3.4070'. [ 603.074186][T16283] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4071'. [ 603.137307][T16283] netlink: 25 bytes leftover after parsing attributes in process `syz.2.4071'. [ 603.310727][T16288] FAULT_INJECTION: forcing a failure. [ 603.310727][T16288] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 603.470830][T16288] CPU: 1 UID: 0 PID: 16288 Comm: syz.1.4073 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(full) [ 603.470866][T16288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 603.470880][T16288] Call Trace: [ 603.470888][T16288] [ 603.470896][T16288] dump_stack_lvl+0x16c/0x1f0 [ 603.470934][T16288] should_fail_ex+0x512/0x640 [ 603.470973][T16288] should_fail_alloc_page+0xe7/0x130 [ 603.471005][T16288] prepare_alloc_pages+0x3c2/0x610 [ 603.471047][T16288] __alloc_frozen_pages_noprof+0x18f/0x23a0 [ 603.471075][T16288] ? psi_task_switch+0x201/0x8e0 [ 603.471106][T16288] ? lock_acquire+0x179/0x350 [ 603.471137][T16288] ? find_held_lock+0x2b/0x80 [ 603.471163][T16288] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 603.471200][T16288] ? __lock_acquire+0xaa4/0x1ba0 [ 603.471238][T16288] ? __lock_acquire+0x5ca/0x1ba0 [ 603.471270][T16288] ? __lock_acquire+0xaa4/0x1ba0 [ 603.471300][T16288] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 603.471335][T16288] ? policy_nodemask+0xea/0x4e0 [ 603.471367][T16288] alloc_pages_mpol+0x1fb/0x550 [ 603.471398][T16288] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 603.471425][T16288] ? page_table_check_set+0x96f/0xb50 [ 603.471462][T16288] alloc_pages_noprof+0x131/0x390 [ 603.471493][T16288] pte_alloc_one+0x19/0x380 [ 603.471520][T16288] __pte_alloc+0x6d/0x3c0 [ 603.471552][T16288] ? __pfx___pte_alloc+0x10/0x10 [ 603.471587][T16288] ? __lock_acquire+0xaa4/0x1ba0 [ 603.471619][T16288] do_pte_missing+0x2925/0x3fb0 [ 603.471652][T16288] __handle_mm_fault+0x103d/0x2a40 [ 603.471682][T16288] ? const_folio_flags+0x5b/0x100 [ 603.471711][T16288] ? __pfx___handle_mm_fault+0x10/0x10 [ 603.471735][T16288] ? __pfx_folio_mark_accessed+0x10/0x10 [ 603.471768][T16288] ? vm_normal_page+0x13b/0x2b0 [ 603.471811][T16288] ? find_held_lock+0x2b/0x80 [ 603.471831][T16288] ? find_held_lock+0x2b/0x80 [ 603.471885][T16288] handle_mm_fault+0x3fe/0xad0 [ 603.471909][T16288] __get_user_pages+0x771/0x36f0 [ 603.471949][T16288] ? process_vm_rw_core.constprop.0+0x1d8/0x9a0 [ 603.471975][T16288] ? look_up_lock_class+0x59/0x150 [ 603.472002][T16288] ? __pfx___get_user_pages+0x10/0x10 [ 603.472034][T16288] ? process_vm_rw+0x216/0x2c0 [ 603.472056][T16288] ? __x64_sys_process_vm_readv+0xe2/0x1c0 [ 603.472081][T16288] ? do_syscall_64+0xcd/0x230 [ 603.472117][T16288] __gup_longterm_locked+0x20d/0x1850 [ 603.472158][T16288] ? __pfx___gup_longterm_locked+0x10/0x10 [ 603.472207][T16288] pin_user_pages_remote+0xed/0x140 [ 603.472241][T16288] ? __pfx_pin_user_pages_remote+0x10/0x10 [ 603.472273][T16288] ? mm_access+0x22d/0x2e0 [ 603.472307][T16288] process_vm_rw_core.constprop.0+0x41b/0x9a0 [ 603.472346][T16288] ? __pfx_process_vm_rw_core.constprop.0+0x10/0x10 [ 603.472388][T16288] ? iovec_from_user+0xbb/0x140 [ 603.472423][T16288] process_vm_rw+0x216/0x2c0 [ 603.472450][T16288] ? __pfx_process_vm_rw+0x10/0x10 [ 603.472482][T16288] ? ksys_write+0x190/0x240 [ 603.472526][T16288] ? xfd_validate_state+0x5d/0x180 [ 603.472565][T16288] __x64_sys_process_vm_readv+0xe2/0x1c0 [ 603.472592][T16288] ? do_syscall_64+0x91/0x230 [ 603.472620][T16288] ? lockdep_hardirqs_on+0x7c/0x110 [ 603.472646][T16288] do_syscall_64+0xcd/0x230 [ 603.472676][T16288] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 603.472697][T16288] RIP: 0033:0x7fb44738e969 [ 603.472713][T16288] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 603.472733][T16288] RSP: 002b:00007fb4451f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000136 [ 603.472752][T16288] RAX: ffffffffffffffda RBX: 00007fb4475b5fa0 RCX: 00007fb44738e969 [ 603.472765][T16288] RDX: 0000040000000001 RSI: 0000200000000000 RDI: 0000000000000994 [ 603.472778][T16288] RBP: 00007fb447410ab1 R08: 000000000000000a R09: 0000000000000000 [ 603.472790][T16288] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000000 [ 603.472802][T16288] R13: 0000000000000000 R14: 00007fb4475b5fa0 R15: 00007ffc12f08f28 [ 603.472828][T16288] [ 604.071129][T16297] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 604.560281][T16317] netlink: 330 bytes leftover after parsing attributes in process `syz.3.4085'. [ 606.425195][T16358] netlink: 'syz.0.4101': attribute type 28 has an invalid length. [ 606.479927][T16360] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4102'. [ 606.490096][T16358] netlink: 334 bytes leftover after parsing attributes in process `syz.0.4101'. [ 606.953755][T16375] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4109'. [ 607.582582][T16392] netlink: 'syz.2.4115': attribute type 28 has an invalid length. [ 607.662726][T16392] __nla_validate_parse: 2 callbacks suppressed [ 607.662743][T16392] netlink: 334 bytes leftover after parsing attributes in process `syz.2.4115'. [ 608.224474][T16409] FAULT_INJECTION: forcing a failure. [ 608.224474][T16409] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 608.323798][T16409] CPU: 1 UID: 0 PID: 16409 Comm: syz.2.4122 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(full) [ 608.323828][T16409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 608.323842][T16409] Call Trace: [ 608.323849][T16409] [ 608.323856][T16409] dump_stack_lvl+0x16c/0x1f0 [ 608.323891][T16409] should_fail_ex+0x512/0x640 [ 608.323926][T16409] _copy_from_user+0x2e/0xd0 [ 608.323960][T16409] copy_from_sockptr_offset.constprop.0+0x153/0x1a0 [ 608.323994][T16409] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 608.324026][T16409] ? trace_kmalloc+0x2b/0xd0 [ 608.324055][T16409] ? __local_bh_enable_ip+0xa4/0x120 [ 608.324080][T16409] ? ip_setsockopt+0x59/0xf0 [ 608.324108][T16409] ? lockdep_hardirqs_on+0x7c/0x110 [ 608.324140][T16409] do_ip_setsockopt+0x23e7/0x3130 [ 608.324179][T16409] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 608.324233][T16409] ? try_to_wake_up+0xa2f/0x1680 [ 608.324264][T16409] ip_setsockopt+0x59/0xf0 [ 608.324299][T16409] sctp_setsockopt+0x169/0xb870 [ 608.324331][T16409] ? __pfx_sctp_setsockopt+0x10/0x10 [ 608.324353][T16409] ? __lock_acquire+0x5ca/0x1ba0 [ 608.324383][T16409] ? __pfx_aa_sk_perm+0x10/0x10 [ 608.324410][T16409] ? percpu_counter_add_batch+0xb8/0x1f0 [ 608.324443][T16409] ? sock_common_setsockopt+0x2e/0xf0 [ 608.324476][T16409] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 608.324508][T16409] do_sock_setsockopt+0x221/0x470 [ 608.324539][T16409] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 608.324588][T16409] __sys_setsockopt+0x120/0x1a0 [ 608.324617][T16409] __x64_sys_setsockopt+0xbd/0x160 [ 608.324639][T16409] ? do_syscall_64+0x91/0x230 [ 608.324672][T16409] ? lockdep_hardirqs_on+0x7c/0x110 [ 608.324708][T16409] do_syscall_64+0xcd/0x230 [ 608.324743][T16409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 608.324767][T16409] RIP: 0033:0x7fdd37b8e969 [ 608.324785][T16409] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 608.324807][T16409] RSP: 002b:00007fdd38a04038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 608.324829][T16409] RAX: ffffffffffffffda RBX: 00007fdd37db5fa0 RCX: 00007fdd37b8e969 [ 608.324844][T16409] RDX: 0000000000000029 RSI: 0000000000000000 RDI: 0000000000000003 [ 608.324857][T16409] RBP: 00007fdd37c10ab1 R08: 0000000000020000 R09: 0000000000000000 [ 608.324872][T16409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 608.324885][T16409] R13: 0000000000000000 R14: 00007fdd37db5fa0 R15: 00007ffe0bfec588 [ 608.324915][T16409] [ 609.036796][T16424] netlink: 326 bytes leftover after parsing attributes in process `syz.3.4129'. [ 609.393776][T16428] FAULT_INJECTION: forcing a failure. [ 609.393776][T16428] name failslab, interval 1, probability 0, space 0, times 0 [ 609.430838][T16428] CPU: 1 UID: 0 PID: 16428 Comm: syz.3.4131 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(full) [ 609.430874][T16428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 609.430888][T16428] Call Trace: [ 609.430896][T16428] [ 609.430905][T16428] dump_stack_lvl+0x16c/0x1f0 [ 609.430943][T16428] should_fail_ex+0x512/0x640 [ 609.430977][T16428] ? fs_reclaim_acquire+0xae/0x150 [ 609.431016][T16428] should_failslab+0xc2/0x120 [ 609.431046][T16428] __kmalloc_cache_noprof+0x6a/0x3e0 [ 609.431088][T16428] ? tomoyo_init_log+0x197/0x2140 [ 609.431124][T16428] tomoyo_init_log+0x197/0x2140 [ 609.431155][T16428] ? format_decode+0x1ad/0xd40 [ 609.431183][T16428] ? __pfx_format_decode+0x10/0x10 [ 609.431219][T16428] ? __pfx_tomoyo_init_log+0x10/0x10 [ 609.431260][T16428] tomoyo_write_log2+0x2f7/0xc10 [ 609.431290][T16428] ? tomoyo_domain_quota_is_ok+0x2c0/0x5a0 [ 609.431322][T16428] tomoyo_supervisor+0x15e/0x13b0 [ 609.431365][T16428] ? __pfx_tomoyo_supervisor+0x10/0x10 [ 609.431417][T16428] ? lockdep_hardirqs_on+0x7c/0x110 [ 609.431453][T16428] ? tomoyo_check_path_acl+0xad/0x210 [ 609.431482][T16428] ? tomoyo_check_acl+0x1f7/0x410 [ 609.431510][T16428] tomoyo_path_permission+0x270/0x3b0 [ 609.431540][T16428] tomoyo_check_open_permission+0x349/0x3c0 [ 609.431571][T16428] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 609.431639][T16428] ? find_held_lock+0x2b/0x80 [ 609.431670][T16428] tomoyo_file_open+0x6b/0x90 [ 609.431710][T16428] security_file_open+0x84/0x1e0 [ 609.431743][T16428] do_dentry_open+0x596/0x1c10 [ 609.431776][T16428] vfs_open+0x82/0x3f0 [ 609.431811][T16428] path_openat+0x1e5e/0x2d40 [ 609.431845][T16428] ? __pfx_path_openat+0x10/0x10 [ 609.431887][T16428] do_filp_open+0x20b/0x470 [ 609.431909][T16428] ? __pfx_do_filp_open+0x10/0x10 [ 609.431952][T16428] ? alloc_fd+0x471/0x7d0 [ 609.431996][T16428] do_sys_openat2+0x11b/0x1d0 [ 609.432026][T16428] ? __pfx_do_sys_openat2+0x10/0x10 [ 609.432059][T16428] ? __pfx___might_resched+0x10/0x10 [ 609.432092][T16428] __x64_sys_openat+0x174/0x210 [ 609.432135][T16428] ? __pfx___x64_sys_openat+0x10/0x10 [ 609.432167][T16428] ? rcu_is_watching+0x12/0xc0 [ 609.432195][T16428] do_syscall_64+0xcd/0x230 [ 609.432227][T16428] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.432249][T16428] RIP: 0033:0x7fae5078e969 [ 609.432265][T16428] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 609.432286][T16428] RSP: 002b:00007fae51540038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 609.432306][T16428] RAX: ffffffffffffffda RBX: 00007fae509b5fa0 RCX: 00007fae5078e969 [ 609.432321][T16428] RDX: 0000000000143642 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 609.432334][T16428] RBP: 00007fae50810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 609.432347][T16428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 609.432360][T16428] R13: 0000000000000000 R14: 00007fae509b5fa0 R15: 00007ffda41c29a8 [ 609.432387][T16428] [ 610.153885][T16435] FAULT_INJECTION: forcing a failure. [ 610.153885][T16435] name failslab, interval 1, probability 0, space 0, times 0 [ 610.208843][T16440] netlink: 'syz.3.4132': attribute type 28 has an invalid length. [ 610.222443][T16435] CPU: 1 UID: 0 PID: 16435 Comm: syz.0.4140 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(full) [ 610.222470][T16435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 610.222483][T16435] Call Trace: [ 610.222490][T16435] [ 610.222497][T16435] dump_stack_lvl+0x16c/0x1f0 [ 610.222538][T16435] should_fail_ex+0x512/0x640 [ 610.222568][T16435] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 610.222594][T16435] should_failslab+0xc2/0x120 [ 610.222619][T16435] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 610.222641][T16435] ? d_instantiate+0x77/0x90 [ 610.222662][T16435] ? alloc_empty_file+0x55/0x1e0 [ 610.222691][T16435] alloc_empty_file+0x55/0x1e0 [ 610.222717][T16435] alloc_file_pseudo+0x13a/0x230 [ 610.222744][T16435] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 610.222771][T16435] ? alloc_fd+0x471/0x7d0 [ 610.222806][T16435] sock_alloc_file+0x50/0x210 [ 610.222831][T16435] __sys_socket+0x1c0/0x260 [ 610.222862][T16435] ? __pfx___sys_socket+0x10/0x10 [ 610.222893][T16435] ? rcu_is_watching+0x12/0xc0 [ 610.222916][T16435] __x64_sys_socket+0x72/0xb0 [ 610.222945][T16435] ? lockdep_hardirqs_on+0x7c/0x110 [ 610.222972][T16435] do_syscall_64+0xcd/0x230 [ 610.223002][T16435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 610.223022][T16435] RIP: 0033:0x7f8dd7f8e969 [ 610.223038][T16435] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 610.223057][T16435] RSP: 002b:00007f8dd5df6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 610.223076][T16435] RAX: ffffffffffffffda RBX: 00007f8dd81b5fa0 RCX: 00007f8dd7f8e969 [ 610.223089][T16435] RDX: 0000000000000003 RSI: 0000000000000002 RDI: 0000000000000022 [ 610.223100][T16435] RBP: 00007f8dd8010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 610.223112][T16435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 610.223124][T16435] R13: 0000000000000000 R14: 00007f8dd81b5fa0 R15: 00007fffeef9e138 [ 610.223148][T16435] [ 610.593025][T16439] FAULT_INJECTION: forcing a failure. [ 610.593025][T16439] name failslab, interval 1, probability 0, space 0, times 0 [ 610.605936][T16439] CPU: 1 UID: 0 PID: 16439 Comm: syz.1.4133 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(full) [ 610.605965][T16439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 610.605978][T16439] Call Trace: [ 610.605985][T16439] [ 610.605993][T16439] dump_stack_lvl+0x16c/0x1f0 [ 610.606028][T16439] should_fail_ex+0x512/0x640 [ 610.606058][T16439] ? __kvmalloc_node_noprof+0x122/0x600 [ 610.606083][T16439] should_failslab+0xc2/0x120 [ 610.606110][T16439] __kvmalloc_node_noprof+0x135/0x600 [ 610.606145][T16439] ? __pfx_net_ctl_permissions+0x10/0x10 [ 610.606177][T16439] ? proc_sys_call_handler+0x2a6/0x5c0 [ 610.606222][T16439] ? proc_sys_call_handler+0x2a6/0x5c0 [ 610.606243][T16439] proc_sys_call_handler+0x2a6/0x5c0 [ 610.606268][T16439] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 610.606297][T16439] ? rw_verify_area+0xcf/0x680 [ 610.606343][T16439] vfs_read+0x8c8/0xc70 [ 610.606364][T16439] ? __pfx___mutex_lock+0x10/0x10 [ 610.606393][T16439] ? __pfx_vfs_read+0x10/0x10 [ 610.606427][T16439] ksys_read+0x12a/0x240 [ 610.606445][T16439] ? __pfx_ksys_read+0x10/0x10 [ 610.606471][T16439] do_syscall_64+0xcd/0x230 [ 610.606512][T16439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 610.606533][T16439] RIP: 0033:0x7fb44738e969 [ 610.606548][T16439] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 610.606568][T16439] RSP: 002b:00007fb4451d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 610.606587][T16439] RAX: ffffffffffffffda RBX: 00007fb4475b6080 RCX: 00007fb44738e969 [ 610.606601][T16439] RDX: 0000000000000007 RSI: 0000000000000000 RDI: 0000000000000005 [ 610.606630][T16439] RBP: 00007fb447410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 610.606643][T16439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 610.606656][T16439] R13: 0000000000000000 R14: 00007fb4475b6080 R15: 00007ffc12f08f28 [ 610.606683][T16439] [ 610.807363][T16440] netlink: 334 bytes leftover after parsing attributes in process `syz.3.4132'. [ 611.608636][T16459] netlink: 342 bytes leftover after parsing attributes in process `syz.1.4142'. [ 611.649973][T16459] IPv6: NLM_F_CREATE should be specified when creating new route [ 611.694011][T16459] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 611.701431][T16459] IPv6: NLM_F_CREATE should be set when creating new route [ 611.708681][T16459] IPv6: NLM_F_CREATE should be set when creating new route [ 612.153985][T16469] netlink: 334 bytes leftover after parsing attributes in process `syz.3.4148'. [ 613.089973][T16500] netlink: 330 bytes leftover after parsing attributes in process `syz.2.4161'. [ 613.998551][T16519] netlink: 330 bytes leftover after parsing attributes in process `syz.0.4169'. [ 614.075612][T16520] netlink: zone id is out of range [ 614.107065][T16520] netlink: zone id is out of range [ 614.141635][T16520] netlink: zone id is out of range [ 614.170989][T16520] netlink: zone id is out of range [ 614.213858][T16520] netlink: zone id is out of range [ 614.229619][T16520] netlink: zone id is out of range [ 614.244696][T16520] netlink: zone id is out of range [ 614.282086][T16520] netlink: zone id is out of range [ 614.301700][T16520] netlink: zone id is out of range [ 614.325859][T16520] netlink: zone id is out of range [ 614.559641][T16531] netlink: 330 bytes leftover after parsing attributes in process `syz.1.4175'. [ 614.598584][T16533] netlink: 186 bytes leftover after parsing attributes in process `syz.2.4176'. [ 615.057574][T16542] netlink: 330 bytes leftover after parsing attributes in process `syz.3.4180'. [ 615.441464][T16548] netlink: 'syz.0.4190': attribute type 19 has an invalid length. [ 615.482741][T16548] netlink: 334 bytes leftover after parsing attributes in process `syz.0.4190'. [ 615.779597][T16555] FAULT_INJECTION: forcing a failure. [ 615.779597][T16555] name failslab, interval 1, probability 0, space 0, times 0 [ 615.816673][T16557] FAULT_INJECTION: forcing a failure. [ 615.816673][T16557] name failslab, interval 1, probability 0, space 0, times 0 [ 615.849635][T16555] CPU: 1 UID: 0 PID: 16555 Comm: syz.0.4184 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(full) [ 615.849664][T16555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 615.849676][T16555] Call Trace: [ 615.849682][T16555] [ 615.849690][T16555] dump_stack_lvl+0x16c/0x1f0 [ 615.849722][T16555] should_fail_ex+0x512/0x640 [ 615.849751][T16555] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 615.849789][T16555] should_failslab+0xc2/0x120 [ 615.849814][T16555] __kmalloc_cache_noprof+0x6a/0x3e0 [ 615.849847][T16555] ? ktime_get_coarse_real_ts64_mg+0x26c/0x320 [ 615.849873][T16555] ? ktime_get_coarse_real_ts64_mg+0x200/0x320 [ 615.849903][T16555] ? hugetlb_vma_lock_alloc+0xbc/0x1f0 [ 615.849928][T16555] hugetlb_vma_lock_alloc+0xbc/0x1f0 [ 615.849950][T16555] hugetlb_reserve_pages+0x149/0xd90 [ 615.849992][T16555] ? __pfx_hugetlb_reserve_pages+0x10/0x10 [ 615.850024][T16555] ? atime_needs_update+0x8b/0x710 [ 615.850059][T16555] hugetlbfs_file_mmap+0x4a1/0x730 [ 615.850088][T16555] __mmap_region+0x1485/0x27c0 [ 615.850114][T16555] ? __pfx___mmap_region+0x10/0x10 [ 615.850136][T16555] ? kernel_text_address+0x8d/0x100 [ 615.850187][T16555] ? stack_depot_save_flags+0x28/0xa50 [ 615.850246][T16555] ? mm_get_unmapped_area_vmflags+0x97/0xe0 [ 615.850286][T16555] mmap_region+0x32b/0x3f0 [ 615.850314][T16555] do_mmap+0xd8e/0x11b0 [ 615.850348][T16555] ? __pfx_do_mmap+0x10/0x10 [ 615.850379][T16555] ? __pfx_down_write_killable+0x10/0x10 [ 615.850416][T16555] vm_mmap_pgoff+0x281/0x450 [ 615.850450][T16555] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 615.850478][T16555] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 615.850506][T16555] ? hugetlbfs_get_inode+0x31f/0x730 [ 615.850538][T16555] ksys_mmap_pgoff+0x1c8/0x5c0 [ 615.850568][T16555] ? rcu_is_watching+0x12/0xc0 [ 615.850589][T16555] __x64_sys_mmap+0x125/0x190 [ 615.850611][T16555] do_syscall_64+0xcd/0x230 [ 615.850642][T16555] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 615.850682][T16555] RIP: 0033:0x7f8dd7f8e969 [ 615.850701][T16555] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 615.850725][T16555] RSP: 002b:00007f8dd5df6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 615.850747][T16555] RAX: ffffffffffffffda RBX: 00007f8dd81b5fa0 RCX: 00007f8dd7f8e969 [ 615.850763][T16555] RDX: 0000000000000002 RSI: 0000000000a00006 RDI: 0000000000c00000 [ 615.850777][T16555] RBP: 00007f8dd8010ab1 R08: 0000000000000602 R09: 0000300000000000 [ 615.850792][T16555] R10: 0000000000040eb1 R11: 0000000000000246 R12: 0000000000000000 [ 615.850806][T16555] R13: 0000000000000000 R14: 00007f8dd81b5fa0 R15: 00007fffeef9e138 [ 615.850836][T16555] [ 615.850866][T16555] HugeTLB: unable to allocate vma specific lock [ 616.148835][T16557] CPU: 1 UID: 0 PID: 16557 Comm: syz.1.4185 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(full) [ 616.148865][T16557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 616.148877][T16557] Call Trace: [ 616.148883][T16557] [ 616.148890][T16557] dump_stack_lvl+0x16c/0x1f0 [ 616.148923][T16557] should_fail_ex+0x512/0x640 [ 616.148962][T16557] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 616.148992][T16557] should_failslab+0xc2/0x120 [ 616.149017][T16557] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 616.149040][T16557] ? d_instantiate+0x77/0x90 [ 616.149061][T16557] ? alloc_empty_file+0x55/0x1e0 [ 616.149091][T16557] alloc_empty_file+0x55/0x1e0 [ 616.149118][T16557] alloc_file_pseudo+0x13a/0x230 [ 616.149145][T16557] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 616.149178][T16557] __anon_inode_getfile+0xf7/0x370 [ 616.149215][T16557] new_userfaultfd+0x25e/0x3d0 [ 616.149239][T16557] __x64_sys_userfaultfd+0x4b/0xb0 [ 616.149266][T16557] do_syscall_64+0xcd/0x230 [ 616.149296][T16557] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 616.149317][T16557] RIP: 0033:0x7fb44738e969 [ 616.149332][T16557] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 616.149352][T16557] RSP: 002b:00007fb4451f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000143 [ 616.149371][T16557] RAX: ffffffffffffffda RBX: 00007fb4475b5fa0 RCX: 00007fb44738e969 [ 616.149384][T16557] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 616.149395][T16557] RBP: 00007fb447410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 616.149407][T16557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 616.149419][T16557] R13: 0000000000000000 R14: 00007fb4475b5fa0 R15: 00007ffc12f08f28 [ 616.149443][T16557] [ 616.330740][ C1] vkms_vblank_simulate: vblank timer overrun [ 616.584928][T16569] sp0: Synchronizing with TNC [ 617.724880][T16591] netlink: 146 bytes leftover after parsing attributes in process `syz.1.4200'. [ 618.033671][T16605] netlink: 146 bytes leftover after parsing attributes in process `syz.2.4204'. [ 618.241789][T16611] FAULT_INJECTION: forcing a failure. [ 618.241789][T16611] name failslab, interval 1, probability 0, space 0, times 0 [ 618.281085][T16611] CPU: 1 UID: 0 PID: 16611 Comm: syz.2.4207 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(full) [ 618.281119][T16611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 618.281133][T16611] Call Trace: [ 618.281141][T16611] [ 618.281149][T16611] dump_stack_lvl+0x16c/0x1f0 [ 618.281186][T16611] should_fail_ex+0x512/0x640 [ 618.281221][T16611] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 618.281251][T16611] should_failslab+0xc2/0x120 [ 618.281281][T16611] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 618.281309][T16611] ? mpol_new+0x11b/0x2d0 [ 618.281333][T16611] ? _copy_from_user+0x59/0xd0 [ 618.281371][T16611] mpol_new+0x11b/0x2d0 [ 618.281398][T16611] do_set_mempolicy+0x83/0x480 [ 618.281426][T16611] ? __pfx_do_set_mempolicy+0x10/0x10 [ 618.281458][T16611] ? __x64_sys_futex+0x1e0/0x4c0 [ 618.281488][T16611] kernel_set_mempolicy+0x1c4/0x1e0 [ 618.281518][T16611] ? __pfx_kernel_set_mempolicy+0x10/0x10 [ 618.281547][T16611] ? rcu_is_watching+0x12/0xc0 [ 618.281577][T16611] do_syscall_64+0xcd/0x230 [ 618.281613][T16611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 618.281637][T16611] RIP: 0033:0x7fdd37b8e969 [ 618.281655][T16611] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 618.281679][T16611] RSP: 002b:00007fdd38a04038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ee [ 618.281700][T16611] RAX: ffffffffffffffda RBX: 00007fdd37db5fa0 RCX: 00007fdd37b8e969 [ 618.281722][T16611] RDX: 0000000000000004 RSI: 0000200000000080 RDI: 0000000000000002 [ 618.281737][T16611] RBP: 00007fdd37c10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 618.281751][T16611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 618.281765][T16611] R13: 0000000000000000 R14: 00007fdd37db5fa0 R15: 00007ffe0bfec588 [ 618.281794][T16611] [ 618.465136][ C1] vkms_vblank_simulate: vblank timer overrun [ 618.771956][T16623] netlink: 330 bytes leftover after parsing attributes in process `syz.2.4212'. [ 618.889431][ T53] bridge0: port 2(macvlan0) entered disabled state [ 619.486996][T16636] netlink: 334 bytes leftover after parsing attributes in process `syz.1.4217'. [ 619.553195][T16638] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4218'. [ 619.598042][T16638] netlink: 354 bytes leftover after parsing attributes in process `syz.3.4218'. [ 619.887026][T16646] FAULT_INJECTION: forcing a failure. [ 619.887026][T16646] name failslab, interval 1, probability 0, space 0, times 0 [ 619.943794][T16646] CPU: 1 UID: 0 PID: 16646 Comm: syz.3.4221 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(full) [ 619.943823][T16646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 619.943836][T16646] Call Trace: [ 619.943842][T16646] [ 619.943850][T16646] dump_stack_lvl+0x16c/0x1f0 [ 619.943882][T16646] should_fail_ex+0x512/0x640 [ 619.943911][T16646] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 619.943937][T16646] should_failslab+0xc2/0x120 [ 619.943962][T16646] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 619.943984][T16646] ? tipc_node_find+0x2dc/0x500 [ 619.944006][T16646] ? __d_alloc+0x31/0xaa0 [ 619.944029][T16646] __d_alloc+0x31/0xaa0 [ 619.944048][T16646] ? __pfx_tipc_node_find+0x10/0x10 [ 619.944072][T16646] d_alloc_pseudo+0x1c/0xc0 [ 619.944098][T16646] alloc_file_pseudo+0xcf/0x230 [ 619.944126][T16646] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 619.944152][T16646] ? tipc_sk_finish_conn+0x580/0x790 [ 619.944187][T16646] sock_alloc_file+0x50/0x210 [ 619.944213][T16646] __sys_socketpair+0x31c/0x5a0 [ 619.944245][T16646] ? __pfx___sys_socketpair+0x10/0x10 [ 619.944276][T16646] ? xfd_validate_state+0x5d/0x180 [ 619.944311][T16646] ? rcu_is_watching+0x12/0xc0 [ 619.944334][T16646] __x64_sys_socketpair+0x96/0x100 [ 619.944365][T16646] ? lockdep_hardirqs_on+0x7c/0x110 [ 619.944392][T16646] do_syscall_64+0xcd/0x230 [ 619.944422][T16646] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.944442][T16646] RIP: 0033:0x7fae5078e969 [ 619.944457][T16646] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 619.944477][T16646] RSP: 002b:00007fae51540038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 619.944495][T16646] RAX: ffffffffffffffda RBX: 00007fae509b5fa0 RCX: 00007fae5078e969 [ 619.944509][T16646] RDX: 8000000000000000 RSI: 0000000000000004 RDI: 000000000000001e [ 619.944521][T16646] RBP: 00007fae50810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 619.944533][T16646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 619.944545][T16646] R13: 0000000000000000 R14: 00007fae509b5fa0 R15: 00007ffda41c29a8 [ 619.944576][T16646] [ 620.165213][ C1] vkms_vblank_simulate: vblank timer overrun [ 620.578501][T16649] netlink: 334 bytes leftover after parsing attributes in process `syz.3.4223'. [ 620.934467][T16658] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4226'. [ 620.971706][T16658] netlink: 25 bytes leftover after parsing attributes in process `syz.3.4226'. [ 622.428601][T16675] netlink: 342 bytes leftover after parsing attributes in process `syz.3.4232'. [ 622.501110][T16675] netlink: 114 bytes leftover after parsing attributes in process `syz.3.4232'. [ 622.577987][T16642] Process accounting paused [ 624.068935][T16705] netlink: 330 bytes leftover after parsing attributes in process `syz.1.4242'. [ 625.478546][T16736] netlink: 326 bytes leftover after parsing attributes in process `syz.3.4256'. [ 626.501056][T16753] netlink: 30 bytes leftover after parsing attributes in process `syz.0.4261'. [ 627.408377][T16781] netlink: 326 bytes leftover after parsing attributes in process `syz.3.4272'. [ 627.538117][T16784] netlink: 'syz.2.4273': attribute type 17 has an invalid length. [ 627.559595][T16777] FAULT_INJECTION: forcing a failure. [ 627.559595][T16777] name failslab, interval 1, probability 0, space 0, times 0 [ 627.582304][T16784] netlink: 326 bytes leftover after parsing attributes in process `syz.2.4273'. [ 627.604341][T16777] CPU: 1 UID: 0 PID: 16777 Comm: syz.1.4270 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(full) [ 627.604375][T16777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 627.604389][T16777] Call Trace: [ 627.604396][T16777] [ 627.604405][T16777] dump_stack_lvl+0x16c/0x1f0 [ 627.604442][T16777] should_fail_ex+0x512/0x640 [ 627.604476][T16777] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 627.604507][T16777] should_failslab+0xc2/0x120 [ 627.604540][T16777] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 627.604568][T16777] ? sock_alloc_inode+0x25/0x1c0 [ 627.604604][T16777] ? __pfx_sock_alloc_inode+0x10/0x10 [ 627.604635][T16777] sock_alloc_inode+0x25/0x1c0 [ 627.604666][T16777] alloc_inode+0x61/0x240 [ 627.604695][T16777] sock_alloc+0x40/0x280 [ 627.604725][T16777] __sock_create+0xc1/0x8d0 [ 627.604764][T16777] __sys_socket+0x14d/0x260 [ 627.604808][T16777] ? __pfx___sys_socket+0x10/0x10 [ 627.604845][T16777] ? rcu_is_watching+0x12/0xc0 [ 627.604873][T16777] __x64_sys_socket+0x72/0xb0 [ 627.604907][T16777] ? lockdep_hardirqs_on+0x7c/0x110 [ 627.604939][T16777] do_syscall_64+0xcd/0x230 [ 627.604975][T16777] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 627.604999][T16777] RIP: 0033:0x7fb44738e969 [ 627.605017][T16777] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 627.605040][T16777] RSP: 002b:00007fb4451f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 627.605061][T16777] RAX: ffffffffffffffda RBX: 00007fb4475b5fa0 RCX: 00007fb44738e969 [ 627.605077][T16777] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 000000000000002c [ 627.605091][T16777] RBP: 00007fb447410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 627.605105][T16777] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 627.605119][T16777] R13: 0000000000000000 R14: 00007fb4475b5fa0 R15: 00007ffc12f08f28 [ 627.605148][T16777] [ 627.607651][T16777] net_ratelimit: 22 callbacks suppressed [ 627.607666][T16777] socket: no more sockets [ 628.812011][T16813] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4282'. [ 629.055726][T16815] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4286'. [ 629.100762][T16815] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4286'. [ 629.369225][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.375655][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 629.476459][T16835] netlink: 146 bytes leftover after parsing attributes in process `syz.2.4295'. [ 630.100365][T16848] zram0: detected capacity change from 0 to 8 [ 630.356518][T16860] FAULT_INJECTION: forcing a failure. [ 630.356518][T16860] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 630.389514][T16860] CPU: 1 UID: 0 PID: 16860 Comm: syz.3.4305 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(full) [ 630.389548][T16860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 630.389560][T16860] Call Trace: [ 630.389568][T16860] [ 630.389575][T16860] dump_stack_lvl+0x16c/0x1f0 [ 630.389607][T16860] should_fail_ex+0x512/0x640 [ 630.389639][T16860] should_fail_alloc_page+0xe7/0x130 [ 630.389665][T16860] prepare_alloc_pages+0x3c2/0x610 [ 630.389696][T16860] ? rcu_is_watching+0x12/0xc0 [ 630.389717][T16860] __alloc_frozen_pages_noprof+0x18f/0x23a0 [ 630.389753][T16860] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 630.389776][T16860] ? do_raw_spin_lock+0x12c/0x2b0 [ 630.389807][T16860] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 630.389836][T16860] ? find_held_lock+0x2b/0x80 [ 630.389862][T16860] ? __lock_acquire+0xaa4/0x1ba0 [ 630.389888][T16860] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 630.389917][T16860] ? policy_nodemask+0xea/0x4e0 [ 630.389942][T16860] alloc_pages_mpol+0x1fb/0x550 [ 630.389967][T16860] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 630.389998][T16860] folio_alloc_mpol_noprof+0x36/0x2f0 [ 630.390027][T16860] shmem_alloc_folio+0x135/0x160 [ 630.390048][T16860] shmem_alloc_and_add_folio+0x499/0xc20 [ 630.390076][T16860] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 630.390102][T16860] ? shmem_allowable_huge_orders+0xcb/0x2f0 [ 630.390131][T16860] shmem_get_folio_gfp+0x687/0x1530 [ 630.390160][T16860] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 630.390185][T16860] ? __pfx___might_resched+0x10/0x10 [ 630.390210][T16860] shmem_fallocate+0x795/0xf50 [ 630.390245][T16860] ? __pfx_shmem_fallocate+0x10/0x10 [ 630.390267][T16860] ? aa_file_perm+0x4d6/0xfb0 [ 630.390301][T16860] ? __lock_acquire+0xaa4/0x1ba0 [ 630.390328][T16860] ? __lock_acquire+0x5ca/0x1ba0 [ 630.390368][T16860] ? __pfx_shmem_fallocate+0x10/0x10 [ 630.390393][T16860] vfs_fallocate+0x608/0x10b0 [ 630.390415][T16860] ? __pfx_vfs_fallocate+0x10/0x10 [ 630.390434][T16860] ? xrstors+0x70/0x70 [ 630.390471][T16860] __x64_sys_fallocate+0xd5/0x150 [ 630.390495][T16860] do_syscall_64+0xcd/0x230 [ 630.390533][T16860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 630.390554][T16860] RIP: 0033:0x7fae5078e969 [ 630.390570][T16860] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 630.390590][T16860] RSP: 002b:00007fae51540038 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 630.390609][T16860] RAX: ffffffffffffffda RBX: 00007fae509b5fa0 RCX: 00007fae5078e969 [ 630.390622][T16860] RDX: 000000000000000d RSI: 0000000000000000 RDI: 8000000000000003 [ 630.390635][T16860] RBP: 00007fae50810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 630.390647][T16860] R10: 00000000000cbd5d R11: 0000000000000246 R12: 0000000000000000 [ 630.390659][T16860] R13: 0000000000000000 R14: 00007fae509b5fa0 R15: 00007ffda41c29a8 [ 630.390704][T16860] [ 631.590399][T16877] sp0: Synchronizing with TNC [ 632.734285][T16906] netlink: 326 bytes leftover after parsing attributes in process `syz.2.4319'. [ 633.796665][T16930] sp0: Synchronizing with TNC [ 634.048434][T16939] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4330'. [ 634.098927][T16939] netlink: 25 bytes leftover after parsing attributes in process `syz.1.4330'. [ 634.309225][T16944] netlink: 342 bytes leftover after parsing attributes in process `syz.2.4333'. [ 634.363039][T16944] IPv6: Can't replace route, no match found [ 635.156524][T16965] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4349'. [ 635.189691][T16967] netlink: 'syz.3.4341': attribute type 17 has an invalid length. [ 635.231792][T16967] netlink: 326 bytes leftover after parsing attributes in process `syz.3.4341'. [ 635.252624][T16969] netlink: 330 bytes leftover after parsing attributes in process `syz.0.4342'. [ 635.728222][T16984] netlink: 266 bytes leftover after parsing attributes in process `syz.3.4350'. [ 635.761309][T16984] IPv6: NLM_F_CREATE should be specified when creating new route [ 636.799606][T17012] FAULT_INJECTION: forcing a failure. [ 636.799606][T17012] name failslab, interval 1, probability 0, space 0, times 0 [ 636.828846][T17012] CPU: 1 UID: 0 PID: 17012 Comm: syz.1.4360 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(full) [ 636.828874][T17012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 636.828892][T17012] Call Trace: [ 636.828898][T17012] [ 636.828905][T17012] dump_stack_lvl+0x16c/0x1f0 [ 636.828938][T17012] should_fail_ex+0x512/0x640 [ 636.828967][T17012] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 636.829005][T17012] should_failslab+0xc2/0x120 [ 636.829030][T17012] __kmalloc_cache_noprof+0x6a/0x3e0 [ 636.829063][T17012] ? rcu_is_watching+0x12/0xc0 [ 636.829081][T17012] ? call_usermodehelper_setup+0xaf/0x360 [ 636.829102][T17012] ? __pfx_free_modprobe_argv+0x10/0x10 [ 636.829133][T17012] call_usermodehelper_setup+0xaf/0x360 [ 636.829157][T17012] __request_module+0x3bd/0x690 [ 636.829186][T17012] ? __pfx___request_module+0x10/0x10 [ 636.829214][T17012] ? aa_get_newest_label+0x375/0x680 [ 636.829236][T17012] ? __pfx_aa_get_newest_label+0x10/0x10 [ 636.829264][T17012] ? apparmor_capable+0x114/0x1d0 [ 636.829291][T17012] dev_load+0x221/0x240 [ 636.829309][T17012] dev_ioctl+0x4e4/0x1060 [ 636.829331][T17012] sock_do_ioctl+0x19d/0x280 [ 636.829359][T17012] ? __pfx_sock_do_ioctl+0x10/0x10 [ 636.829399][T17012] sock_ioctl+0x227/0x6b0 [ 636.829430][T17012] ? __pfx_sock_ioctl+0x10/0x10 [ 636.829458][T17012] ? hook_file_ioctl_common+0x145/0x410 [ 636.829485][T17012] ? __fget_files+0x20e/0x3c0 [ 636.829520][T17012] ? __pfx_sock_ioctl+0x10/0x10 [ 636.829551][T17012] __x64_sys_ioctl+0x190/0x200 [ 636.829581][T17012] do_syscall_64+0xcd/0x230 [ 636.829611][T17012] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 636.829632][T17012] RIP: 0033:0x7fb44738e969 [ 636.829648][T17012] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 636.829668][T17012] RSP: 002b:00007fb4451f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 636.829686][T17012] RAX: ffffffffffffffda RBX: 00007fb4475b5fa0 RCX: 00007fb44738e969 [ 636.829700][T17012] RDX: 0000000000000000 RSI: 0000000000008933 RDI: 0000000000000006 [ 636.829712][T17012] RBP: 00007fb447410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 636.829728][T17012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 636.829740][T17012] R13: 0000000000000000 R14: 00007fb4475b5fa0 R15: 00007ffc12f08f28 [ 636.829764][T17012] [ 637.381490][T17022] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 638.266039][T17039] netlink: 326 bytes leftover after parsing attributes in process `syz.3.4369'. [ 638.299129][T17041] netlink: 146 bytes leftover after parsing attributes in process `syz.1.4370'. [ 640.202063][T17078] netlink: 146 bytes leftover after parsing attributes in process `syz.1.4386'. [ 640.649626][T17089] netlink: 222 bytes leftover after parsing attributes in process `syz.1.4391'. [ 640.708235][T17089] netlink: 222 bytes leftover after parsing attributes in process `syz.1.4391'. [ 640.788239][T17087] netlink: 330 bytes leftover after parsing attributes in process `syz.3.4390'. [ 641.093032][T17094] FAULT_INJECTION: forcing a failure. [ 641.093032][T17094] name failslab, interval 1, probability 0, space 0, times 0 [ 641.144036][T17098] FAULT_INJECTION: forcing a failure. [ 641.144036][T17098] name failslab, interval 1, probability 0, space 0, times 0 [ 641.169977][T17094] CPU: 1 UID: 0 PID: 17094 Comm: syz.1.4393 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(full) [ 641.170005][T17094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 641.170017][T17094] Call Trace: [ 641.170023][T17094] [ 641.170031][T17094] dump_stack_lvl+0x16c/0x1f0 [ 641.170063][T17094] should_fail_ex+0x512/0x640 [ 641.170092][T17094] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 641.170119][T17094] should_failslab+0xc2/0x120 [ 641.170144][T17094] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 641.170167][T17094] ? __kernfs_new_node+0xd2/0x8a0 [ 641.170204][T17094] __kernfs_new_node+0xd2/0x8a0 [ 641.170239][T17094] ? __pfx___kernfs_new_node+0x10/0x10 [ 641.170279][T17094] ? find_held_lock+0x2b/0x80 [ 641.170299][T17094] ? kernfs_root+0xee/0x2a0 [ 641.170321][T17094] kernfs_new_node+0x13c/0x1e0 [ 641.170348][T17094] __kernfs_create_file+0x53/0x350 [ 641.170378][T17094] sysfs_add_file_mode_ns+0x207/0x3c0 [ 641.170415][T17094] internal_create_group+0x578/0xf30 [ 641.170442][T17094] ? __pfx_internal_create_group+0x10/0x10 [ 641.170465][T17094] ? kernfs_create_link+0x1bd/0x240 [ 641.170501][T17094] internal_create_groups+0x9d/0x150 [ 641.170524][T17094] device_add+0x6d1/0x1a70 [ 641.170554][T17094] ? __pfx_device_add+0x10/0x10 [ 641.170581][T17094] ? lockdep_init_map_type+0x5c/0x280 [ 641.170609][T17094] ? __init_waitqueue_head+0xca/0x150 [ 641.170650][T17094] netdev_register_kobject+0x182/0x3a0 [ 641.170702][T17094] register_netdevice+0x13dc/0x2270 [ 641.170739][T17094] ? __pfx_register_netdevice+0x10/0x10 [ 641.170778][T17094] __ip_tunnel_create+0x4a8/0x680 [ 641.170808][T17094] ? __pfx___ip_tunnel_create+0x10/0x10 [ 641.170846][T17094] ip_tunnel_init_net+0x22f/0x7d0 [ 641.170879][T17094] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 641.170914][T17094] ? trace_kmalloc+0x2b/0xd0 [ 641.170945][T17094] ? lockdep_init_map_type+0x5c/0x280 [ 641.170981][T17094] ? __pfx_ipgre_tap_init_net+0x10/0x10 [ 641.171004][T17094] ops_init+0x1df/0x5f0 [ 641.171039][T17094] setup_net+0x21e/0x850 [ 641.171071][T17094] ? __pfx_setup_net+0x10/0x10 [ 641.171098][T17094] ? lockdep_init_map_type+0x5c/0x280 [ 641.171130][T17094] ? __pfx_down_read_killable+0x10/0x10 [ 641.171172][T17094] ? debug_mutex_init+0x37/0x70 [ 641.171197][T17094] copy_net_ns+0x2a6/0x5f0 [ 641.171232][T17094] create_new_namespaces+0x3ea/0xad0 [ 641.171265][T17094] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 641.171295][T17094] ksys_unshare+0x45b/0xa40 [ 641.171328][T17094] ? __pfx_ksys_unshare+0x10/0x10 [ 641.171359][T17094] ? xfd_validate_state+0x5d/0x180 [ 641.171400][T17094] ? rcu_is_watching+0x12/0xc0 [ 641.171429][T17094] __x64_sys_unshare+0x31/0x40 [ 641.171461][T17094] do_syscall_64+0xcd/0x230 [ 641.171501][T17094] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.171526][T17094] RIP: 0033:0x7fb44738e969 [ 641.171545][T17094] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 641.171568][T17094] RSP: 002b:00007fb4451f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 641.171590][T17094] RAX: ffffffffffffffda RBX: 00007fb4475b5fa0 RCX: 00007fb44738e969 [ 641.171606][T17094] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 641.171620][T17094] RBP: 00007fb447410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 641.171635][T17094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 641.171649][T17094] R13: 0000000000000000 R14: 00007fb4475b5fa0 R15: 00007ffc12f08f28 [ 641.171678][T17094] [ 641.603838][T17098] CPU: 1 UID: 0 PID: 17098 Comm: syz.3.4395 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(full) [ 641.603871][T17098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 641.603884][T17098] Call Trace: [ 641.603891][T17098] [ 641.603899][T17098] dump_stack_lvl+0x16c/0x1f0 [ 641.603933][T17098] should_fail_ex+0x512/0x640 [ 641.603965][T17098] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 641.604004][T17098] ? __pfx_dvb_frontend_thread+0x10/0x10 [ 641.604035][T17098] should_failslab+0xc2/0x120 [ 641.604062][T17098] __kmalloc_cache_noprof+0x6a/0x3e0 [ 641.604097][T17098] ? lockdep_init_map_type+0x5c/0x280 [ 641.604126][T17098] ? __kthread_create_on_node+0xce/0x3f0 [ 641.604157][T17098] ? __pfx_dvb_frontend_thread+0x10/0x10 [ 641.604187][T17098] __kthread_create_on_node+0xce/0x3f0 [ 641.604215][T17098] ? __pfx___mutex_trylock_common+0x10/0x10 [ 641.604246][T17098] ? __pfx___kthread_create_on_node+0x10/0x10 [ 641.604288][T17098] ? __pfx_dvb_frontend_thread+0x10/0x10 [ 641.604319][T17098] kthread_create_on_node+0xc7/0x100 [ 641.604348][T17098] ? __pfx_kthread_create_on_node+0x10/0x10 [ 641.604382][T17098] ? mark_held_locks+0x49/0x80 [ 641.604424][T17098] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 641.604470][T17098] ? lockdep_hardirqs_on+0x7c/0x110 [ 641.604506][T17098] dvb_frontend_open+0xf47/0x1730 [ 641.604546][T17098] ? __pfx_dvb_frontend_open+0x10/0x10 [ 641.604579][T17098] dvb_device_open+0x26d/0x3b0 [ 641.604612][T17098] ? __pfx_dvb_device_open+0x10/0x10 [ 641.604645][T17098] chrdev_open+0x231/0x6a0 [ 641.604668][T17098] ? __pfx_apparmor_file_open+0x10/0x10 [ 641.604699][T17098] ? __pfx_chrdev_open+0x10/0x10 [ 641.604725][T17098] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 641.604766][T17098] do_dentry_open+0x741/0x1c10 [ 641.604790][T17098] ? __pfx_chrdev_open+0x10/0x10 [ 641.604824][T17098] vfs_open+0x82/0x3f0 [ 641.604857][T17098] path_openat+0x1e5e/0x2d40 [ 641.604891][T17098] ? __pfx_path_openat+0x10/0x10 [ 641.604920][T17098] do_filp_open+0x20b/0x470 [ 641.604943][T17098] ? __pfx_do_filp_open+0x10/0x10 [ 641.604987][T17098] ? alloc_fd+0x471/0x7d0 [ 641.605030][T17098] do_sys_openat2+0x11b/0x1d0 [ 641.605061][T17098] ? __pfx_do_sys_openat2+0x10/0x10 [ 641.605094][T17098] ? __pfx___might_resched+0x10/0x10 [ 641.605127][T17098] __x64_sys_openat+0x174/0x210 [ 641.605159][T17098] ? __pfx___x64_sys_openat+0x10/0x10 [ 641.605192][T17098] ? rcu_is_watching+0x12/0xc0 [ 641.605222][T17098] do_syscall_64+0xcd/0x230 [ 641.605257][T17098] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.605280][T17098] RIP: 0033:0x7fae5078e969 [ 641.605299][T17098] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 641.605321][T17098] RSP: 002b:00007fae51540038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 641.605342][T17098] RAX: ffffffffffffffda RBX: 00007fae509b5fa0 RCX: 00007fae5078e969 [ 641.605357][T17098] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 641.605372][T17098] RBP: 00007fae50810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 641.605386][T17098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 641.605399][T17098] R13: 0000000000000000 R14: 00007fae509b5fa0 R15: 00007ffda41c29a8 [ 641.605433][T17098] [ 641.605503][T17098] i2c i2c-0: dvb_frontend_start: failed to start kthread (-12) [ 642.350601][T17103] can: request_module (can-proto-3) failed. [ 642.495670][T17105] ================================================================== [ 642.503772][T17105] BUG: KASAN: slab-use-after-free in dvb_device_open+0x36a/0x3b0 [ 642.511512][T17105] Read of size 8 at addr ffff888141283418 by task syz.3.4398/17105 [ 642.519416][T17105] [ 642.521761][T17105] CPU: 1 UID: 0 PID: 17105 Comm: syz.3.4398 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(full) [ 642.521793][T17105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 642.521808][T17105] Call Trace: [ 642.521816][T17105] [ 642.521825][T17105] dump_stack_lvl+0x116/0x1f0 [ 642.521862][T17105] print_report+0xc3/0x670 [ 642.521889][T17105] ? __virt_addr_valid+0x5e/0x590 [ 642.521920][T17105] ? __phys_addr+0xc6/0x150 [ 642.521952][T17105] ? dvb_device_open+0x36a/0x3b0 [ 642.521984][T17105] kasan_report+0xe0/0x110 [ 642.522013][T17105] ? dvb_device_open+0x36a/0x3b0 [ 642.522048][T17105] ? __pfx_dvb_device_open+0x10/0x10 [ 642.522082][T17105] dvb_device_open+0x36a/0x3b0 [ 642.522115][T17105] ? __pfx_dvb_device_open+0x10/0x10 [ 642.522148][T17105] chrdev_open+0x231/0x6a0 [ 642.522173][T17105] ? __pfx_apparmor_file_open+0x10/0x10 [ 642.522203][T17105] ? __pfx_chrdev_open+0x10/0x10 [ 642.522229][T17105] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 642.522270][T17105] do_dentry_open+0x741/0x1c10 [ 642.522295][T17105] ? __pfx_chrdev_open+0x10/0x10 [ 642.522323][T17105] vfs_open+0x82/0x3f0 [ 642.522360][T17105] path_openat+0x1e5e/0x2d40 [ 642.522388][T17105] ? __pfx_path_openat+0x10/0x10 [ 642.522414][T17105] do_filp_open+0x20b/0x470 [ 642.522436][T17105] ? __pfx_do_filp_open+0x10/0x10 [ 642.522469][T17105] ? alloc_fd+0x471/0x7d0 [ 642.522510][T17105] do_sys_openat2+0x11b/0x1d0 [ 642.522541][T17105] ? __pfx_do_sys_openat2+0x10/0x10 [ 642.522573][T17105] ? __pfx_do_sys_openat2+0x10/0x10 [ 642.522605][T17105] ? __pfx___might_resched+0x10/0x10 [ 642.522636][T17105] __x64_sys_openat+0x174/0x210 [ 642.522668][T17105] ? __pfx___x64_sys_openat+0x10/0x10 [ 642.522702][T17105] ? rcu_is_watching+0x12/0xc0 [ 642.522728][T17105] do_syscall_64+0xcd/0x230 [ 642.522763][T17105] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 642.522788][T17105] RIP: 0033:0x7fae5078e969 [ 642.522807][T17105] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 642.522831][T17105] RSP: 002b:00007fae51540038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 642.522853][T17105] RAX: ffffffffffffffda RBX: 00007fae509b5fa0 RCX: 00007fae5078e969 [ 642.522869][T17105] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 642.522885][T17105] RBP: 00007fae50810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 642.522900][T17105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 642.522914][T17105] R13: 0000000000000000 R14: 00007fae509b5fa0 R15: 00007ffda41c29a8 [ 642.522937][T17105] [ 642.522945][T17105] [ 642.780900][T17105] Allocated by task 1: [ 642.784968][T17105] kasan_save_stack+0x33/0x60 [ 642.789654][T17105] kasan_save_track+0x14/0x30 [ 642.794335][T17105] __kasan_kmalloc+0xaa/0xb0 [ 642.798925][T17105] dvb_register_device+0x1e4/0x2370 [ 642.804152][T17105] dvb_register_frontend+0x5a6/0x880 [ 642.809464][T17105] vidtv_bridge_probe+0x459/0xa90 [ 642.814499][T17105] platform_probe+0xff/0x1f0 [ 642.819093][T17105] really_probe+0x23e/0xa90 [ 642.823593][T17105] __driver_probe_device+0x1de/0x440 [ 642.828874][T17105] driver_probe_device+0x4c/0x1b0 [ 642.833898][T17105] __driver_attach+0x283/0x580 [ 642.838664][T17105] bus_for_each_dev+0x13b/0x1d0 [ 642.843529][T17105] bus_add_driver+0x2e9/0x690 [ 642.848201][T17105] driver_register+0x15c/0x4b0 [ 642.852971][T17105] vidtv_bridge_init+0x45/0x80 [ 642.857755][T17105] do_one_initcall+0x120/0x6e0 [ 642.862534][T17105] kernel_init_freeable+0x5c2/0x900 [ 642.867741][T17105] kernel_init+0x1c/0x2b0 [ 642.872072][T17105] ret_from_fork+0x45/0x80 [ 642.876508][T17105] ret_from_fork_asm+0x1a/0x30 [ 642.881287][T17105] [ 642.883613][T17105] Freed by task 17098: [ 642.887679][T17105] kasan_save_stack+0x33/0x60 [ 642.892376][T17105] kasan_save_track+0x14/0x30 [ 642.897065][T17105] kasan_save_free_info+0x3b/0x60 [ 642.902109][T17105] __kasan_slab_free+0x51/0x70 [ 642.906884][T17105] kfree+0x2b6/0x4d0 [ 642.910784][T17105] dvb_device_put.part.0+0x60/0x90 [ 642.915912][T17105] dvb_device_open+0x2a4/0x3b0 [ 642.920690][T17105] chrdev_open+0x231/0x6a0 [ 642.925113][T17105] do_dentry_open+0x741/0x1c10 [ 642.929885][T17105] vfs_open+0x82/0x3f0 [ 642.933964][T17105] path_openat+0x1e5e/0x2d40 [ 642.938557][T17105] do_filp_open+0x20b/0x470 [ 642.943061][T17105] do_sys_openat2+0x11b/0x1d0 [ 642.947835][T17105] __x64_sys_openat+0x174/0x210 [ 642.952700][T17105] do_syscall_64+0xcd/0x230 [ 642.957221][T17105] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 642.963118][T17105] [ 642.965445][T17105] The buggy address belongs to the object at ffff888141283400 [ 642.965445][T17105] which belongs to the cache kmalloc-256 of size 256 [ 642.979502][T17105] The buggy address is located 24 bytes inside of [ 642.979502][T17105] freed 256-byte region [ffff888141283400, ffff888141283500) [ 642.993216][T17105] [ 642.995540][T17105] The buggy address belongs to the physical page: [ 643.001954][T17105] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x141282 [ 643.010803][T17105] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 643.019313][T17105] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff) [ 643.026938][T17105] page_type: f5(slab) [ 643.030938][T17105] raw: 057ff00000000040 ffff88801b441b40 dead000000000122 0000000000000000 [ 643.039522][T17105] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 643.048117][T17105] head: 057ff00000000040 ffff88801b441b40 dead000000000122 0000000000000000 [ 643.056783][T17105] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 643.065454][T17105] head: 057ff00000000001 ffffea000504a081 00000000ffffffff 00000000ffffffff [ 643.074133][T17105] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 643.082812][T17105] page dumped because: kasan: bad access detected [ 643.089221][T17105] page_owner tracks the page as allocated [ 643.094939][T17105] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 23511752945, free_ts 0 [ 643.114659][T17105] post_alloc_hook+0x181/0x1b0 [ 643.119424][T17105] get_page_from_freelist+0x135c/0x3920 [ 643.124969][T17105] __alloc_frozen_pages_noprof+0x263/0x23a0 [ 643.131482][T17105] alloc_pages_mpol+0x1fb/0x550 [ 643.136338][T17105] new_slab+0x244/0x340 [ 643.140497][T17105] ___slab_alloc+0xd9c/0x1940 [ 643.145184][T17105] __slab_alloc.constprop.0+0x56/0xb0 [ 643.150578][T17105] __kmalloc_cache_noprof+0xfb/0x3e0 [ 643.155877][T17105] bus_add_driver+0x92/0x690 [ 643.160467][T17105] driver_register+0x15c/0x4b0 [ 643.165243][T17105] usb_register_driver+0x216/0x4d0 [ 643.170367][T17105] do_one_initcall+0x120/0x6e0 [ 643.175139][T17105] kernel_init_freeable+0x5c2/0x900 [ 643.180361][T17105] kernel_init+0x1c/0x2b0 [ 643.184691][T17105] ret_from_fork+0x45/0x80 [ 643.189148][T17105] ret_from_fork_asm+0x1a/0x30 [ 643.193916][T17105] page_owner free stack trace missing [ 643.199270][T17105] [ 643.201601][T17105] Memory state around the buggy address: [ 643.207286][T17105] ffff888141283300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 643.215341][T17105] ffff888141283380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 643.223395][T17105] >ffff888141283400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 643.231452][T17105] ^ [ 643.236296][T17105] ffff888141283480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 643.244358][T17105] ffff888141283500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 643.252427][T17105] ================================================================== SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 645.160883][ T53] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 645.280244][T17105] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 645.287462][T17105] CPU: 1 UID: 0 PID: 17105 Comm: syz.3.4398 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(full) [ 645.299538][T17105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 645.309602][T17105] Call Trace: [ 645.312874][T17105] [ 645.315797][T17105] dump_stack_lvl+0x3d/0x1f0 [ 645.320393][T17105] panic+0x71c/0x800 [ 645.324300][T17105] ? __pfx_panic+0x10/0x10 [ 645.328741][T17105] ? mark_held_locks+0x49/0x80 [ 645.333520][T17105] ? preempt_schedule_thunk+0x16/0x30 [ 645.338923][T17105] ? dvb_device_open+0x36a/0x3b0 [ 645.343873][T17105] ? preempt_schedule_common+0x44/0xc0 [ 645.349340][T17105] ? dvb_device_open+0x36a/0x3b0 [ 645.354282][T17105] check_panic_on_warn+0xab/0xb0 [ 645.359227][T17105] end_report+0x107/0x170 [ 645.363558][T17105] kasan_report+0xee/0x110 [ 645.367977][T17105] ? dvb_device_open+0x36a/0x3b0 [ 645.372922][T17105] ? __pfx_dvb_device_open+0x10/0x10 [ 645.378218][T17105] dvb_device_open+0x36a/0x3b0 [ 645.382993][T17105] ? __pfx_dvb_device_open+0x10/0x10 [ 645.388308][T17105] chrdev_open+0x231/0x6a0 [ 645.392723][T17105] ? __pfx_apparmor_file_open+0x10/0x10 [ 645.398279][T17105] ? __pfx_chrdev_open+0x10/0x10 [ 645.403222][T17105] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 645.409996][T17105] do_dentry_open+0x741/0x1c10 [ 645.414761][T17105] ? __pfx_chrdev_open+0x10/0x10 [ 645.419704][T17105] vfs_open+0x82/0x3f0 [ 645.423782][T17105] path_openat+0x1e5e/0x2d40 [ 645.428382][T17105] ? __pfx_path_openat+0x10/0x10 [ 645.433320][T17105] do_filp_open+0x20b/0x470 [ 645.437817][T17105] ? __pfx_do_filp_open+0x10/0x10 [ 645.442849][T17105] ? alloc_fd+0x471/0x7d0 [ 645.447216][T17105] do_sys_openat2+0x11b/0x1d0 [ 645.451925][T17105] ? __pfx_do_sys_openat2+0x10/0x10 [ 645.457141][T17105] ? __pfx_do_sys_openat2+0x10/0x10 [ 645.462367][T17105] ? __pfx___might_resched+0x10/0x10 [ 645.467674][T17105] __x64_sys_openat+0x174/0x210 [ 645.472529][T17105] ? __pfx___x64_sys_openat+0x10/0x10 [ 645.477906][T17105] ? rcu_is_watching+0x12/0xc0 [ 645.482670][T17105] do_syscall_64+0xcd/0x230 [ 645.487181][T17105] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 645.493070][T17105] RIP: 0033:0x7fae5078e969 [ 645.497479][T17105] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 645.517088][T17105] RSP: 002b:00007fae51540038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 645.525507][T17105] RAX: ffffffffffffffda RBX: 00007fae509b5fa0 RCX: 00007fae5078e969 [ 645.533479][T17105] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 645.541448][T17105] RBP: 00007fae50810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 645.549427][T17105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 645.557398][T17105] R13: 0000000000000000 R14: 00007fae509b5fa0 R15: 00007ffda41c29a8 [ 645.565419][T17105] [ 645.568519][T17105] Kernel Offset: disabled [ 645.572849][T17105] Rebooting in 86400 seconds..