last executing test programs: 6.302434919s ago: executing program 3 (id=1870): openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, &(0x7f0000000040), 0x480, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0xd, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x800000000008000) mlockall$auto(0x7) ioctl$auto_BLKRRPART(r0, 0x125f, 0x0) ioctl$auto_XFS_IOC_READLINK_BY_HANDLE(0xffffffffffffffff, 0xc038586c, &(0x7f00000001c0)={r0, &(0x7f0000000080)='\r', 0x2009, &(0x7f00000000c0)="9de4e489192329b6c29cae953b827bd083c91619f951d5f39a1684e41738c9112321e950872f02e2c54e6a198b3afc740c", 0x6, &(0x7f0000000200)="c9eee23b3202f04dfb1b73445a8b0e4ba7aa30015348091efa5633487a9a6748b4c4335a5bea9ce6917b11c9b7395f34ba9ec00600000000000000e6067931f6f4df314e8f6e9b259269805da7a8f558ff9c4763d9e0d735c6dd8799b3", &(0x7f0000000180)=0x5}) ioctl$auto_BTRFS_IOC_SCAN_DEV(r1, 0x50009404, &(0x7f0000000440)={@inferred, "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"}) 5.281029025s ago: executing program 3 (id=1877): rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) r0 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg$auto(r1, &(0x7f00000007c0)={&(0x7f00000006c0), 0x200, &(0x7f0000000000)={&(0x7f0000000080)="4767b896850baecfa30ed44b745ac8cf2848ce309a394ba5d8ffb9dc5318b5c4aba8671d3afe57a5a2598d8124a8410ea6047405e04c7fcc38c3fa5b41091db359869122fd3ec7ce959b49279bf8579e7458d1036083339069a1cc6d1c7aa7d377edd708118ef8020f63cc2181a2660538883574e3", 0xf}, 0x13, 0x0, 0xe, 0x466d}, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000003680)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_NEW_KEY(r5, &(0x7f00000048c0)={0x0, 0x0, &(0x7f0000004880)={&(0x7f00000003c0)={0x24, r4, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_KEY={0x8, 0x50, 0x0, 0x1, [@typed={0x4, 0x6, 0x0, 0x0, @binary}]}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x890) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'rose0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)={0xffffffffffffff86, r0, 0x1, 0x70bd2c, 0x25dfdbfa, {}, [@ETHTOOL_A_TSINFO_HEADER={0x0, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x0, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x0, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x0, 0x3, 0x68}, @ETHTOOL_A_HEADER_FLAGS={0x0, 0x3, 0x7bea}, @ETHTOOL_A_HEADER_DEV_NAME={0x0, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x0, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x0, 0x3, 0xfff}, @ETHTOOL_A_HEADER_DEV_NAME={0x0, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x0, 0x1, r7}]}, @ETHTOOL_A_TSINFO_HEADER={0x0, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x0, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x0, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x0, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x0, 0x1, r7}]}, @ETHTOOL_A_TSINFO_HEADER={0x0, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x0, 0x3, 0x8}, @ETHTOOL_A_HEADER_FLAGS={0x0, 0x3, 0xbb16}]}, @ETHTOOL_A_TSINFO_HEADER={0x0, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x0, 0x3, 0x8b}, @ETHTOOL_A_HEADER_DEV_NAME={0x0, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x0, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x0, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_NAME={0x0, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x0, 0x3, 0x956}, @ETHTOOL_A_HEADER_FLAGS={0x0, 0x3, 0x80000000}, @ETHTOOL_A_HEADER_DEV_NAME={0x0, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x0, 0x3, 0x6}, @ETHTOOL_A_HEADER_FLAGS={0x0, 0x3, 0x2}]}, @ETHTOOL_A_TSINFO_HWTSTAMP_PROVIDER={0x0, 0x7, 0x0, 0x1, [@ETHTOOL_A_TS_HWTSTAMP_PROVIDER_QUALIFIER={0x0, 0x2, 0xfff}, @ETHTOOL_A_TS_HWTSTAMP_PROVIDER_INDEX={0x0, 0x1, 0xfffffff2}, @ETHTOOL_A_TS_HWTSTAMP_PROVIDER_QUALIFIER={0x0, 0x2, 0x78}, @ETHTOOL_A_TS_HWTSTAMP_PROVIDER_INDEX, @ETHTOOL_A_TS_HWTSTAMP_PROVIDER_QUALIFIER, @ETHTOOL_A_TS_HWTSTAMP_PROVIDER_INDEX={0x0, 0x1, 0x5}, @ETHTOOL_A_TS_HWTSTAMP_PROVIDER_INDEX={0x0, 0x1, 0xffffffff}, @ETHTOOL_A_TS_HWTSTAMP_PROVIDER_INDEX, @ETHTOOL_A_TS_HWTSTAMP_PROVIDER_INDEX={0x0, 0x1, 0xf3}]}, @ETHTOOL_A_TSINFO_HEADER={0x0, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x0, 0x2, 'veth0_to_bridge\x00'}]}, @ETHTOOL_A_TSINFO_HEADER={0x0, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS, @ETHTOOL_A_HEADER_DEV_NAME={0x0, 0x2, 'pimreg0\x00'}]}, @ETHTOOL_A_TSINFO_HEADER={0x0, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x0, 0x3, 0x9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x0, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x0, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x0, 0x3, 0x9c90}]}, @ETHTOOL_A_TSINFO_HWTSTAMP_PROVIDER={0x0, 0x7, 0x0, 0x1, [@ETHTOOL_A_TS_HWTSTAMP_PROVIDER_INDEX={0x0, 0x1, 0x7fff}, @ETHTOOL_A_TS_HWTSTAMP_PROVIDER_QUALIFIER={0x0, 0x2, 0x2}, @ETHTOOL_A_TS_HWTSTAMP_PROVIDER_QUALIFIER, @ETHTOOL_A_TS_HWTSTAMP_PROVIDER_INDEX={0x0, 0x1, 0x1}, @ETHTOOL_A_TS_HWTSTAMP_PROVIDER_QUALIFIER={0x0, 0x2, 0x1d}, @ETHTOOL_A_TS_HWTSTAMP_PROVIDER_INDEX={0x0, 0x1, 0x18000}, @ETHTOOL_A_TS_HWTSTAMP_PROVIDER_QUALIFIER={0x0, 0x2, 0x7fffffff}, @ETHTOOL_A_TS_HWTSTAMP_PROVIDER_INDEX={0x0, 0x1, 0x8000000}, @ETHTOOL_A_TS_HWTSTAMP_PROVIDER_INDEX={0x0, 0x1, 0x8}]}, @ETHTOOL_A_TSINFO_HWTSTAMP_PROVIDER={0x0, 0x7, 0x0, 0x1, [@ETHTOOL_A_TS_HWTSTAMP_PROVIDER_QUALIFIER={0x0, 0x2, 0x853}, @ETHTOOL_A_TS_HWTSTAMP_PROVIDER_INDEX={0x0, 0x1, 0xfffffffb}, @ETHTOOL_A_TS_HWTSTAMP_PROVIDER_INDEX, @ETHTOOL_A_TS_HWTSTAMP_PROVIDER_QUALIFIER={0x0, 0x2, 0x8}]}]}, 0x14}, 0x1, 0x0, 0x0, 0x400c820}, 0x0) 5.190287531s ago: executing program 0 (id=1878): read$auto(0xffffffffffffffff, 0x0, 0x4020) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000340), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00'}) sendmsg$auto_NL80211_CMD_DISCONNECT(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)={0x24, r2, 0x1, 0x70bd29, 0x25dfdbfc}, 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x4040800) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) socketpair$auto(0x805, 0x2, 0xa, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x22340, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) chmod$auto(0x0, 0x4) 4.869805957s ago: executing program 1 (id=1880): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='J\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7020f8dbdf250100000008000200", @ANYRES32=0x4, @ANYBLOB="080001003a66520008000200", @ANYRES32=0x9, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x80) (async) sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='J\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7020f8dbdf250100000008000200", @ANYRES32=0x4, @ANYBLOB="080001003a66520008000200", @ANYRES32=0x9, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x80) 4.710094818s ago: executing program 1 (id=1881): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), r0) sendmsg$auto_TIPC_NL_MON_SET(r0, &(0x7f0000002580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x85}, 0x4000) r1 = socket(0x2, 0x2, 0x1) r2 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) sendmsg$auto_NL80211_CMD_PROBE_CLIENT(r1, 0x0, 0x4000) write$auto_console_fops_tty_io(r2, &(0x7f0000000440)="671d264add69b6440843b6e6688a2b5ad9df2669e6f9cd236532b20ed763ac8caf4b9b4c30b530ac6ebbff", 0x2b) 4.611735107s ago: executing program 1 (id=1882): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) select$auto(0x3, 0x0, 0x0, 0x0, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/fs/nfs/exports\x00', 0x101, 0x0) syslog$auto(0x2, 0x0, 0xcf) close_range$auto(0x2, 0x8, 0x0) shmget$auto(0x400, 0x10563, 0x568c12f2) sendmsg$auto_NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x24048800) write$auto_tomoyo_operations_securityfs_if(0xffffffffffffffff, &(0x7f0000001300), 0x0) shmat$auto(0x0, &(0x7f0000000580)='(\x00', 0xfffffffa) syz_clone(0x25342080, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0xc76, 0x8000) shmdt$auto(&(0x7f0000000000)=':-h!/-^@(\']@%]/\x00') mmap$auto(0x0, 0xc, 0x4000000000df, 0x44eb2, 0x10006, 0x300000000001) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$auto(0x3, 0xae44, 0x10000000000402) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) 4.485942656s ago: executing program 3 (id=1883): mmap$auto(0x0, 0x2, 0xff, 0xeb1, 0xffffffffffffffff, 0xc) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/veth0/mldv1_unsolicited_report_interval\x00', 0x101c41, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio1\x00', 0x503b42, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2b, 0x1, 0x0) (async) socket(0x2b, 0x1, 0x0) setsockopt$auto(0x3, 0x6, 0x7, 0x0, 0xffffff01) socket(0xa, 0x801, 0x84) (async) socket(0xa, 0x801, 0x84) socket(0x2c, 0x4, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) recvfrom$auto(0x4, 0x0, 0x1, 0x3ffffd, 0x0, 0x0) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x1, 0x6, 0x0, 0x1, 0x368e, 0x2, {0x100000000, 0x10000}, 0x400000000000005, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x80000080000004, 0x81, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x804}) (async) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x1, 0x6, 0x0, 0x1, 0x368e, 0x2, {0x100000000, 0x10000}, 0x400000000000005, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x80000080000004, 0x81, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x804}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) timer_create$auto_CLOCK_MONOTONIC(0x1, 0x0, &(0x7f0000000200)=0x1) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) msgctl$auto(0x4000009, 0xffffffbb, &(0x7f0000000180)={{0x80000001, 0xffffffffffffffff, 0x0, 0xfffffa9b, 0x2, 0x100003e9, 0x4}, 0x0, 0x0, 0x8000, 0x3, 0x4, 0x2acb, 0x1, 0x4, 0xa, 0x4, @raw=0xfffffff8}) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x2) landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x400, 0x7}, 0x9, 0x0) (async) landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x400, 0x7}, 0x9, 0x0) landlock_add_rule$auto(r1, 0x1, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) socket$nl_generic(0x10, 0x3, 0x10) write$auto(0x3, 0x0, 0x100082) unshare$auto(0x40000080) (async) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) 4.445084782s ago: executing program 0 (id=1884): mmap$auto(0x0, 0x88b, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x2020009, 0xaa, 0xeb1, 0xffffffffffffffff, 0x8000) socket(0x9, 0x6, 0x5) epoll_create$auto(0x3) epoll_ctl$auto(0x5, 0x1, 0x8000000000000000, 0x0) socket(0x11, 0x80003, 0x300) rt_sigqueueinfo$auto(0x0, 0xc74, &(0x7f0000000000)={@siginfo_0_0={0xf9, 0x14, 0x7e73, @_timer={0x0, 0x80000001, @sival_ptr=0x0, 0x5}}}) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0F:02/hid\x00', 0x5111c2, 0x0) unshare$auto(0x40000080) r0 = socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000040)='./file0\x00', 0x44, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f00000003c0)=""/192, 0xc0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/card1/pcm0p/sub0/info\x00', 0x1c1282, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x5c9e) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000140)="0b98e27abc9d2702e7ee7c13e5c65cf80937a407e73ad8e6dde6f1f62128ddf151cf2b93b10f6de57150f9028aa81c2c038d2e1dba3507e64428d3d18e83334e0c1ac27cdf3d83279be634bd3b97956622043e8af71f0341464b4361ada6", 0x3) mbind$auto(0x4d, 0x100000101, 0xfffffffd, 0x0, 0x6, 0x7fff) syz_clone3(&(0x7f0000000400)={0x9840100, 0x0, 0x0, 0x0, {0x2f}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap$auto(0x0, 0x10000, 0x8000, 0xeb1, r0, 0x8000) ppoll$auto(0x0, 0x9, 0x0, 0x0, 0x8) madvise$auto(0x0, 0x200007, 0x19) write$auto(r1, &(0x7f0000000240)='F)z\xae\x820\x11%\xb1\xa9\x13BA\x7f\xc3\xc3\xd2\xc4\x85\xc0\x96\xa1\xaa\x16\xa8\r^\xd9\xb9\xcb\xe5\x05&\xa80%\xee-\xf8\x86(\xf7J\xd3\xbf\x1d\xf6\xfb \x807l\xf2-\xe5\xd2\x9f\xfe\xea1\xfbZ', 0x8) syz_clone3(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x3, 0xa) open(0x0, 0x22240, 0x154) 3.358474769s ago: executing program 2 (id=1888): r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) r2 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8000, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f000000fc00), 0x3, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) madvise$auto(0x1000, 0x5, 0x15) r4 = socket(0x23, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'wg0\x00', 0x0}) r7 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000400)='/proc/tty/driver/serial\x00', 0x43102, 0x0) sendfile$auto(r7, r7, &(0x7f0000000000)=0x7, 0xb9) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r6, r5, 0x4, 0x1ff, r4, @relative_id=0x13, 0xe600}, 0xf) bpf$auto(0x2, &(0x7f00000000c0)=@raw_tracepoint={0x5, r1, 0x0, 0x3}, 0x91) write$auto_console_fops_tty_io(r0, &(0x7f0000000440)="671d264add69b6440843b6e6688a2b5ad9df2669e6f9cd236532b20ed763ac8caf4bde4c30b530ac6ebbff950e1a647d6a08a1b55dde5a409b63", 0x3a) 2.861690856s ago: executing program 1 (id=1889): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000600), r0) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x101280, 0x0) ioctl$auto_SNDCTL_DSP_MAPINBUF(r2, 0x80105013, &(0x7f0000000040)="60a62562c9baace1ab3a67bb87a7cb94148bfd10a77c079f02924ca48d58cd61be7cd1f8ab660bbc78849d356e") sendmsg$auto_IOAM6_CMD_NS_SET_SCHEMA(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)={0x20, r1, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@IOAM6_ATTR_SC_NONE={0x4}, @IOAM6_ATTR_NS_ID={0x6, 0x1, 0x4a}]}, 0x20}, 0x1, 0x0, 0x34000000, 0x40}, 0x80) 2.75061206s ago: executing program 3 (id=1890): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), r0) sendmsg$auto_TIPC_NL_MON_SET(r0, &(0x7f0000002580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x85}, 0x4000) r1 = socket(0x2, 0x2, 0x1) r2 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) sendmsg$auto_NL80211_CMD_PROBE_CLIENT(r1, 0x0, 0x4000) write$auto_console_fops_tty_io(r2, &(0x7f0000000440)="671d264add69b6440843b6e6688a2b5ad9df2669e6f9cd236532b20ed763ac8caf4b9b4c30b530ac6ebbff950e1a647d6a08", 0x32) 2.748836577s ago: executing program 2 (id=1891): unshare$auto(0x40000080) name_to_handle_at$auto(0xffffffffffffffff, &(0x7f00000000c0)='/proc/sys/vm/dirty_background_ratio\x00', &(0x7f00000001c0)={0xe8, 0x6, "f3fdc69daea7433376fb03db1432fd6abb0884e6c7875ff9736fb1aea75150821fc9b412c4e40249ea43db13415e753e3dd831cdaa1327a3df847bf0acbc18e114e60fcb673f4cdfc6424c2354a33cb6620d283ecb591d6d39c17a849bc079b28b8983e6943b0884d79eed65e0ca39a9c338d649e9acb1276c3d871af9f6ab4d02fc8704370ab19e3be607b4b4a27a5382e5a7e5248157636eebb83366bc06c51cd11012d8a12bf883a48fca6628176603590d14b437d78d22185c0d589399eea5660581fac89f22a765215730d0273903d9a4a8724edb5dee1c1cd17e064514bb1519f08fb8d5e6"}, &(0x7f0000000100)="59cd658b218ec15d2222fe7777fe12e9645a9e16b16a7e84fdd5e21f4328fc168788f38e72ea22db830dfdfd203efb2198ef9d97c84ef6ffc844aeb8513443c23af9fdf886725d6354a17805a1403b58c1de14868bdeff02294bf161f19941", 0xfffffff7) bpf$auto_BPF_MAP_LOOKUP_ELEM(0x1, 0x0, 0x3) socket(0x2, 0x1, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/nbd9/queue/atomic_write_unit_max_bytes\x00', 0x0, 0x0) r1 = openat$auto_xfs_dir_file_operations_xfs_file(0xffffffffffffff9c, &(0x7f0000000300)='/sys/devices/virtual/mac80211_hwsim/hwsim13\x00', 0x80001, 0x0) ioctl$auto_XFS_IOC_FSGROWFSDATA(r1, 0x4010586e, &(0x7f0000000340)={0xfffffffffffffbff, 0x2}) r2 = openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/cmdline\x00', 0x40, 0x0) lseek$auto(r2, 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000003c0)=""/4096, 0x1000) mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4) r3 = open(&(0x7f0000000000)='./file0\x00', 0x101800, 0xbf) ppoll$auto(&(0x7f0000000180)={r3, 0x4, 0x8}, 0x6, 0x0, 0x0, 0x8) open(&(0x7f0000000800)='./file0\x00', 0x183242, 0x154) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000840)='/proc/sys/vm/dirty_background_ratio\x00', 0x80000, 0x0) sched_get_priority_min$auto(0x40) socket(0x2, 0xa, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, 0x0, 0x8880, 0x0) getsockopt$auto(0x3, 0x200000000001, 0x19, 0x0, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) unshare$auto(0x40000080) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) faccessat2$auto(0x1, 0x0, 0x4, 0x1000) write$auto(0xca, &(0x7f00000002c0)='\x04>\x01\x01\x00\x00\x00\x01\x00\xb6', 0x7c) 2.723575024s ago: executing program 0 (id=1892): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/handlers\x00', 0xc00, 0x0) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x10bc02, 0x0) pread64$auto(r1, 0x0, 0x8100000041, 0x413e) mmap$auto(0xfffffffffffffffc, 0x40009, 0xe2, 0x9b72, 0xffffffffffffffff, 0x28000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x20) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/fs/cifs/cifsFYI\x00', 0x40c01, 0x0) write$auto_proc_reg_file_ops_compat_inode(r3, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x7) socket(0x2, 0x80002, 0x73) r4 = socket(0xa, 0x1, 0x84) mmap$auto(0x3, 0x2, 0x9, 0xff, r4, 0x1) bind$auto(0x3, 0x0, 0x6a) r5 = gettid() rt_sigqueueinfo$auto(r5, 0x1, 0x0) syz_open_procfs$namespace(r5, &(0x7f00000000c0)='ns/time_for_children\x00') unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x1000, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x501, 0x0) ioctl$auto_FUSE_DEV_IOC_CLONE(r6, 0x8004e500, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0xd551) r7 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/ip6_mr_vif\x00', 0x0, 0x0) read$auto(r7, &(0x7f0000000000)='/proc/threaZ-sml\x01/net/ip6_mr_vif<', 0x205) read$auto_proc_reg_file_ops_compat_inode(r7, &(0x7f00000000c0)=""/4087, 0xff7) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd) read$auto(r0, 0x0, 0x5) 2.609010313s ago: executing program 1 (id=1893): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000003040), 0xffffffffffffffff) sendmsg$auto_OVS_METER_CMD_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x28, r1, 0x82652360e804c8d3, 0x9, 0x25dfdbfe, {}, [@OVS_METER_ATTR_KBPS={0x4}, @OVS_METER_ATTR_BANDS={0x4}, @OVS_METER_ATTR_ID={0x8, 0x1, 0xfffffff8}, @OVS_METER_ATTR_CLEAR={0x4}]}, 0x28}, 0x1, 0x0, 0xfffffff0}, 0x8080) 2.433096294s ago: executing program 1 (id=1894): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/cifs/Stats\x00', 0x28102, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, 0x0, 0x2dc08f24db163610, 0x0) adjtimex$auto(&(0x7f0000000140)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0xd4, 0x1, 0x3, 0x0, 0x1, 0x368a, 0x2, {0x100000000, 0x10000}, 0x5, 0x8, 0xfffffffffffffffd, 0x1008000, 0x0, 0x9, 0x81, 0xdfffffffffff628e, 0x6, 0xdeb1, 0x808}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D1\x00', 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0xa3db) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$auto(r1, 0x5453, r1) getrandom$auto(0x0, 0x6000000, 0x3) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) mbind$auto(0x3, 0x2091d2, 0x4, 0x0, 0x6, 0x2) madvise$auto(0x110c230000, 0x1, 0x9) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x43102, 0x0) futex$auto(0x0, 0xc, 0xffffffff, 0x0, 0x0, 0x4) read$auto_proc_iter_file_ops_compat_inode(r2, &(0x7f00000007c0)=""/153, 0x99) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) statx$auto(0xffffff9c, 0x0, 0x1000, 0x803, 0x0) setsockopt$auto(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x56b) mmap$auto(0x7fff, 0x4000b, 0x36, 0x9b72, r2, 0x28000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003f0, 0x18) mlock$auto(0x5, 0xffff) openat2$dir(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00', &(0x7f0000000040)={0x202002, 0x0, 0x35}, 0x18) r3 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r3, &(0x7f0000000440)="671d264add69b6440843b6e6688a2b5ad9df2669e6f9cd236532b20ed763ac8caf4bde4c30b530ac6ebbff950e1a647d6a08a1b55dde5a409b63", 0x3a) 2.433018715s ago: executing program 3 (id=1895): r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/oom_adj\x00', 0x48402, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) read$auto(r0, 0x0, 0x1f40) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f00000000c0)={0x0, 0xffffffff}, 0x6) ioctl$auto_RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0) socket(0x25, 0xa, 0x1) set_mempolicy$auto(0x8003, 0x0, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) close_range$auto(0x0, 0xe903, 0x2) 2.262015149s ago: executing program 3 (id=1896): read$auto(0xffffffffffffffff, 0x0, 0x4020) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) socketpair$auto(0x805, 0x2, 0xa, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x22340, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) chmod$auto(0x0, 0x408) openat$auto_proc_mounts_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/mounts\x00', 0x90800, 0x0) 1.618588842s ago: executing program 2 (id=1897): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) openat$auto_trace_options_core_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/options/hash-ptr\x00', 0x10b000, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL802154_CMD_SET_PAN_ID(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010027bd7000fddbdf250a00050007000000000000000800"], 0x24}, 0x1, 0x0, 0x0, 0x4088}, 0x20000010) sendmsg$auto_TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f00000079c0)={0x0, 0x0, &(0x7f0000007980)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="010072e0fa60fddbdf2500000000000000003c1b73"], 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x2) futex_waitv$auto(&(0x7f0000000000)={0xf, 0x5d94, 0x4002, 0x4}, 0x77, 0xfffffffc, 0x0, 0x62bd) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1c003b"], 0x1ac}, 0x1, 0x0, 0x0, 0x800}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000580)='/proc/bus/pci/00/01.3\x00', 0x48041, 0x0) write$auto(r1, 0x0, 0x100000001) r2 = openat$auto_ucma_fops_ucma(0xffffffffffffff9c, 0x0, 0xc02, 0x0) write$auto(r2, 0x0, 0xc3) r3 = getpid() sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x24040004}, 0x800) write$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000080)="3700b8", 0x3) process_vm_readv$auto(r3, &(0x7f0000000000)={0x0, 0xfff}, 0x1, 0x0, 0x6, 0x0) r4 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000200), 0x103001, 0x0) ioctl$auto_I2C_RDWR(r4, 0x707, 0x0) 1.511491192s ago: executing program 0 (id=1898): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/dummy_hcd.0/usb1/authorized\x00', 0x0, 0x0) lseek$auto(0x3, 0x908, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/tunl0/napi_defer_hard_irqs\x00', 0x28b42, 0x0) sendfile$auto(r0, r0, 0x0, 0x4f64a1d2) madvise$auto(0x0, 0xffffffffffff0005, 0x19) openat$auto_dfs_sched_itmt_fops_itmt(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/fail_io_timeout/task-filter\x00', 0x719401, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x1, 0x100) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x101100, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) keyctl$auto_KEYCTL_SET_REQKEY_KEYRING(0xe, 0x4, 0x4, 0x1ff, 0x3) syz_genetlink_get_family_id$auto_psample(&(0x7f00000001c0), 0xffffffffffffffff) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) mmap$auto(0x7, 0x20009, 0x5, 0xffffffff, 0x405, 0x8000) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x50b41, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) listen$auto(0x3, 0x8d) ioctl$auto_EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f00000000c0)={0x1fff, 0x800004, 0x106}) ioctl$auto(0xffffffffffffffff, 0x8, r1) 1.146176656s ago: executing program 2 (id=1899): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r0, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800ffff", @ANYRES16=r1, @ANYBLOB="0100253d7000fddbdf2501000000180007800c000180080001800000000008002300", @ANYRES32=0x0, @ANYBLOB="0c00020006000000eeffffff"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x8880) 824.064313ms ago: executing program 2 (id=1900): mmap$auto(0x0, 0x88b, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x2020009, 0xaa, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = open(&(0x7f00000001c0)='./cgroup\x00', 0x0, 0x2d) socket(0x2, 0x1, 0x0) epoll_create$auto(0x3) epoll_ctl$auto(0x5, 0x1, 0x8000000000000000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ram5\x00', 0x80, 0x0) ioctl$auto_BLKDISCARD(r2, 0x1277, 0x0) getsockopt$auto(r0, 0x767, 0x8, &(0x7f0000000180)=',\x00', &(0x7f0000000200)=0xffffffff) epoll_ctl$auto(0x5, 0x1, r1, 0x0) getdents$auto(r1, &(0x7f0000000000)={0x100, 0xffffffff, 0x3ff, "d9400bf0acac907ed6a281f749214cd64e0c6afd2e2b266e6a6421f4943b3d54efd98bebda3503526742fb762ed8d7e3bdd4e5a1efd785342a7d5cf3ffdd5fea7d91fc024403aff9b83386c6b10596aaea6db4ae1a77109cdcae1d52f823e43544e88e9c0d894f15dcf44ea96f217ab60b1434ac9c36c587fb4b8a5f5cb77bf1dd04b67b5fc7c2269bcfdc964483bbe3bab0042635b1e3aa2d40cb3933f80ccfa936a67aa72c6ce78d3a0fe672f0a33cb672fa5d03dda0ddfed10763359c03c83703f2f55b23476d1773f8c72c690ca68801f6b6a330e0923c767e5cc6ee3de8f0f5e329100523c10522245299e308c8a9c9fc7e4e"}, 0x80000001) openat$auto_proc_projid_map_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/projid_map\x00', 0x20000, 0x0) 333.90248ms ago: executing program 0 (id=1901): r0 = socket(0x10, 0x3, 0x6) r1 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0xa01, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0xf0ffffffffffffff, 0x4048000}, 0x0) 116.182749ms ago: executing program 0 (id=1902): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), r0) sendmsg$auto_TIPC_NL_MON_SET(r0, &(0x7f0000002580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x85}, 0x4000) r1 = socket(0x2, 0x2, 0x1) r2 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) sendmsg$auto_NL80211_CMD_PROBE_CLIENT(r1, 0x0, 0x4000) write$auto_console_fops_tty_io(r2, &(0x7f0000000440)="671d264add69b6440843b6e6688a2b5ad9df2669e6f9cd236532b20ed763ac8caf4b9b4c30b530ac6ebbff950e1a647d6a08", 0x32) 0s ago: executing program 2 (id=1903): lsm_list_modules$auto(0x0, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) r0 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r0, 0x0, 0x0) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/sctp/plpmtud_probe_interval\x00', 0x88002, 0x0) r1 = socket(0x10, 0x2, 0x0) socket(0x2d, 0x2, 0x0) socket(0x2, 0x80002, 0x73) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYBLOB='B\x00'], 0x1ac}, 0x1, 0xf0ffffff, 0x0, 0x8841}, 0x40000) kernel console output (not intermixed with test programs): [ T9981] ? __pfx_ksys_read+0x10/0x10 [ 381.129099][ T9981] ? rcu_is_watching+0x12/0xc0 [ 381.129124][ T9981] syscall_exit_to_user_mode+0x150/0x2a0 [ 381.129154][ T9981] do_syscall_64+0xda/0x230 [ 381.129184][ T9981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.129207][ T9981] RIP: 0033:0x7f1dd378e969 [ 381.129224][ T9981] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 381.129251][ T9981] RSP: 002b:00007f1dd46a0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 381.129272][ T9981] RAX: 0000000000010b24 RBX: 00007f1dd39b6160 RCX: 00007f1dd378e969 [ 381.129287][ T9981] RDX: 000000000cefbce6 RSI: 0000000000000000 RDI: 0000000000000009 [ 381.129301][ T9981] RBP: 00007f1dd3810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 381.129315][ T9981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 381.129333][ T9981] R13: 0000000000000000 R14: 00007f1dd39b6160 R15: 00007ffce69b9538 [ 381.129361][ T9981] [ 381.402899][ T9989] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1046'. [ 381.608579][ T9989] veth0_macvtap: left promiscuous mode [ 381.649520][ T9989] macvtap0: entered promiscuous mode [ 381.655588][ T9989] macvtap0: entered allmulticast mode [ 383.146614][T10016] device-mapper: ioctl: device name cannot contain '/' [ 383.778029][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.786217][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.866692][T10039] ptrace attach of "./syz-executor exec"[5834] was attempted by "./syz-executor exec"[10039] [ 385.846107][T10052] FAULT_INJECTION: forcing a failure. [ 385.846107][T10052] name failslab, interval 1, probability 0, space 0, times 0 [ 385.936281][T10052] CPU: 0 UID: 0 PID: 10052 Comm: syz.2.1061 Not tainted 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(full) [ 385.936316][T10052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 385.936330][T10052] Call Trace: [ 385.936337][T10052] [ 385.936345][T10052] dump_stack_lvl+0x16c/0x1f0 [ 385.936378][T10052] should_fail_ex+0x512/0x640 [ 385.936410][T10052] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 385.936439][T10052] should_failslab+0xc2/0x120 [ 385.936466][T10052] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 385.936489][T10052] ? __pfx_acct_collect+0x10/0x10 [ 385.936519][T10052] ? taskstats_exit+0x654/0xbe0 [ 385.936551][T10052] taskstats_exit+0x654/0xbe0 [ 385.936581][T10052] ? __pfx_taskstats_exit+0x10/0x10 [ 385.936617][T10052] do_exit+0x85f/0x2c30 [ 385.936646][T10052] ? __pfx_futex_wake_mark+0x10/0x10 [ 385.936680][T10052] ? __pfx_do_exit+0x10/0x10 [ 385.936710][T10052] ? do_raw_spin_lock+0x12c/0x2b0 [ 385.936743][T10052] ? find_held_lock+0x2b/0x80 [ 385.936768][T10052] do_group_exit+0xd3/0x2a0 [ 385.936801][T10052] get_signal+0x2673/0x26d0 [ 385.936834][T10052] ? lock_acquire+0x179/0x350 [ 385.936862][T10052] ? __pfx_get_signal+0x10/0x10 [ 385.936887][T10052] ? do_futex+0x122/0x350 [ 385.936918][T10052] ? __pfx_do_futex+0x10/0x10 [ 385.936945][T10052] arch_do_signal_or_restart+0x8f/0x7a0 [ 385.936978][T10052] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 385.937019][T10052] ? rcu_is_watching+0x12/0xc0 [ 385.937045][T10052] syscall_exit_to_user_mode+0x150/0x2a0 [ 385.937074][T10052] do_syscall_64+0xda/0x230 [ 385.937104][T10052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.937127][T10052] RIP: 0033:0x7fe11eb8e969 [ 385.937145][T10052] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 385.937168][T10052] RSP: 002b:00007fe11fa350e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 385.937190][T10052] RAX: fffffffffffffe00 RBX: 00007fe11edb5fa8 RCX: 00007fe11eb8e969 [ 385.937205][T10052] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fe11edb5fa8 [ 385.937219][T10052] RBP: 00007fe11edb5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 385.937233][T10052] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe11edb5fac [ 385.937247][T10052] R13: 0000000000000000 R14: 00007fffb1d6beb0 R15: 00007fffb1d6bf98 [ 385.937275][T10052] [ 388.385984][T10078] openvswitch: netlink: Key type 14608 is out of range max 32 [ 388.493561][T10078] netlink: 'syz.3.1068': attribute type 3 has an invalid length. [ 388.540008][T10078] netlink: 332 bytes leftover after parsing attributes in process `syz.3.1068'. [ 390.968278][T10108] random: crng reseeded on system resumption [ 392.713552][T10140] FAULT_INJECTION: forcing a failure. [ 392.713552][T10140] name failslab, interval 1, probability 0, space 0, times 0 [ 392.772864][T10140] CPU: 0 UID: 0 PID: 10140 Comm: syz.0.1083 Not tainted 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(full) [ 392.772900][T10140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 392.772918][T10140] Call Trace: [ 392.772925][T10140] [ 392.772934][T10140] dump_stack_lvl+0x16c/0x1f0 [ 392.772967][T10140] should_fail_ex+0x512/0x640 [ 392.772999][T10140] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 392.773028][T10140] should_failslab+0xc2/0x120 [ 392.773057][T10140] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 392.773082][T10140] ? vma_merge_new_range+0x3f8/0xc10 [ 392.773106][T10140] ? vm_area_alloc+0x1f/0x160 [ 392.773136][T10140] vm_area_alloc+0x1f/0x160 [ 392.773161][T10140] __mmap_region+0xfd0/0x27c0 [ 392.773186][T10140] ? rcu_is_watching+0x12/0xc0 [ 392.773208][T10140] ? __pfx___mmap_region+0x10/0x10 [ 392.773233][T10140] ? finish_task_switch.isra.0+0x221/0xc10 [ 392.773262][T10140] ? __schedule+0x1186/0x5de0 [ 392.773284][T10140] ? kvm_sched_clock_read+0x11/0x20 [ 392.773308][T10140] ? sched_clock+0x38/0x60 [ 392.773384][T10140] ? trace_cap_capable+0x18d/0x200 [ 392.773408][T10140] ? cap_capable+0xb3/0x250 [ 392.773433][T10140] mmap_region+0x1ab/0x3f0 [ 392.773464][T10140] do_mmap+0xd8e/0x11b0 [ 392.773503][T10140] ? __pfx_do_mmap+0x10/0x10 [ 392.773537][T10140] ? __pfx_down_write_killable+0x10/0x10 [ 392.773574][T10140] vm_mmap_pgoff+0x281/0x450 [ 392.773613][T10140] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 392.773645][T10140] ? do_set_mempolicy+0x220/0x480 [ 392.773677][T10140] ? __x64_sys_futex+0x1e0/0x4c0 [ 392.773700][T10140] ? __x64_sys_futex+0x1e9/0x4c0 [ 392.773728][T10140] ksys_mmap_pgoff+0x7d/0x5c0 [ 392.773760][T10140] ? rcu_is_watching+0x12/0xc0 [ 392.773783][T10140] __x64_sys_mmap+0x125/0x190 [ 392.773808][T10140] do_syscall_64+0xcd/0x230 [ 392.773839][T10140] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.773870][T10140] RIP: 0033:0x7f1dd378e969 [ 392.773889][T10140] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 392.773913][T10140] RSP: 002b:00007f1dd46e2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 392.773936][T10140] RAX: ffffffffffffffda RBX: 00007f1dd39b5fa0 RCX: 00007f1dd378e969 [ 392.773951][T10140] RDX: 0000000000000003 RSI: 0000000002020009 RDI: 0000000000000000 [ 392.773965][T10140] RBP: 00007f1dd3810ab1 R08: fffffffffffffffa R09: 000000000000a000 [ 392.773980][T10140] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 392.773994][T10140] R13: 0000000000000000 R14: 00007f1dd39b5fa0 R15: 00007ffce69b9538 [ 392.774023][T10140] [ 393.626684][T10146] netlink: 226 bytes leftover after parsing attributes in process `syz.2.1086'. [ 393.733606][T10146] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1086'. [ 393.762113][T10146] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 397.298937][T10195] netlink: 226 bytes leftover after parsing attributes in process `syz.3.1096'. [ 397.369533][T10195] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1096'. [ 397.477114][T10195] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 397.573188][T10202] blktrace: Concurrent blktraces are not allowed on loop5 [ 398.254067][T10190] kexec: Could not allocate control_code_buffer [ 399.484999][T10226] random: crng reseeded on system resumption [ 401.608842][ T5141] Bluetooth: hci2: unexpected subevent 0x01 length: 120 > 18 [ 405.931912][T10332] random: crng reseeded on system resumption [ 407.919611][T10359] FAULT_INJECTION: forcing a failure. [ 407.919611][T10359] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 408.138302][T10359] CPU: 0 UID: 0 PID: 10359 Comm: syz.2.1130 Not tainted 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(full) [ 408.138337][T10359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 408.138352][T10359] Call Trace: [ 408.138359][T10359] [ 408.138368][T10359] dump_stack_lvl+0x16c/0x1f0 [ 408.138401][T10359] should_fail_ex+0x512/0x640 [ 408.138439][T10359] should_fail_alloc_page+0xe7/0x130 [ 408.138471][T10359] prepare_alloc_pages+0x3c2/0x610 [ 408.138520][T10359] __alloc_frozen_pages_noprof+0x18f/0x23a0 [ 408.138553][T10359] ? cgroup_rstat_updated+0x2a/0xb20 [ 408.138597][T10359] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 408.138625][T10359] ? weighted_interleave_nid+0x3e9/0x5a0 [ 408.138662][T10359] ? __pfx_weighted_interleave_nid+0x10/0x10 [ 408.138693][T10359] ? __lock_acquire+0x5ca/0x1ba0 [ 408.138727][T10359] ? policy_nodemask+0xea/0x4e0 [ 408.138756][T10359] alloc_pages_mpol+0x1fb/0x550 [ 408.138785][T10359] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 408.138814][T10359] ? __lock_acquire+0x5ca/0x1ba0 [ 408.138848][T10359] folio_alloc_mpol_noprof+0x36/0x2f0 [ 408.138882][T10359] vma_alloc_folio_noprof+0xed/0x1e0 [ 408.138914][T10359] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 408.138956][T10359] do_pte_missing+0x223d/0x3fb0 [ 408.138992][T10359] __handle_mm_fault+0x103d/0x2a40 [ 408.139023][T10359] ? __pfx___handle_mm_fault+0x10/0x10 [ 408.139044][T10359] ? __pte_offset_map_lock+0x155/0x2f0 [ 408.139077][T10359] ? find_held_lock+0x2b/0x80 [ 408.139097][T10359] ? find_held_lock+0x2b/0x80 [ 408.139137][T10359] handle_mm_fault+0x3fe/0xad0 [ 408.139165][T10359] __get_user_pages+0x771/0x36f0 [ 408.139209][T10359] ? __pfx_mt_find+0x10/0x10 [ 408.139241][T10359] ? __pfx___get_user_pages+0x10/0x10 [ 408.139287][T10359] populate_vma_page_range+0x278/0x3a0 [ 408.139327][T10359] ? __pfx_populate_vma_page_range+0x10/0x10 [ 408.139367][T10359] ? __pfx_find_vma_intersection+0x10/0x10 [ 408.139402][T10359] ? do_mmap+0x69c/0x11b0 [ 408.139438][T10359] __mm_populate+0x1d8/0x380 [ 408.139460][T10359] ? __pfx___mm_populate+0x10/0x10 [ 408.139504][T10359] ? up_write+0x1b2/0x520 [ 408.139539][T10359] vm_mmap_pgoff+0x362/0x450 [ 408.139577][T10359] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 408.139610][T10359] ? do_set_mempolicy+0x220/0x480 [ 408.139642][T10359] ? __x64_sys_futex+0x1e0/0x4c0 [ 408.139665][T10359] ? __x64_sys_futex+0x1e9/0x4c0 [ 408.139692][T10359] ksys_mmap_pgoff+0x7d/0x5c0 [ 408.139725][T10359] ? rcu_is_watching+0x12/0xc0 [ 408.139749][T10359] __x64_sys_mmap+0x125/0x190 [ 408.139775][T10359] do_syscall_64+0xcd/0x230 [ 408.139806][T10359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.139830][T10359] RIP: 0033:0x7fe11eb8e969 [ 408.139849][T10359] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 408.139873][T10359] RSP: 002b:00007fe11fa35038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 408.139895][T10359] RAX: ffffffffffffffda RBX: 00007fe11edb5fa0 RCX: 00007fe11eb8e969 [ 408.139910][T10359] RDX: 0000000000000003 RSI: 0000000000040009 RDI: 0000000000000000 [ 408.139924][T10359] RBP: 00007fe11ec10ab1 R08: 0000000000000007 R09: 0000000000028000 [ 408.139938][T10359] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 408.139953][T10359] R13: 0000000000000000 R14: 00007fe11edb5fa0 R15: 00007fffb1d6bf98 [ 408.139982][T10359] [ 408.984440][ T5836] Bluetooth: hci3: unexpected event 0x1d length: 6 > 5 [ 411.467119][T10387] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.607327][ T5836] Bluetooth: hci3: unexpected subevent 0x01 length: 120 > 18 [ 413.615748][ T5836] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 416.103538][T10441] device-mapper: ioctl: device name cannot contain '/' [ 416.743776][ T5141] Bluetooth: hci0: unexpected subevent 0x01 length: 120 > 18 [ 416.980285][ T5836] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 417.077915][T10460] tc_dump_action: action bad kind [ 418.231024][T10486] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 418.322065][T10486] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 418.923107][ T5836] Bluetooth: hci3: unexpected subevent 0x01 length: 120 > 18 [ 418.931396][ T5836] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 420.530227][T10518] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1173'. [ 420.594658][T10518] ipvlan1: entered allmulticast mode [ 420.600513][T10518] veth0_vlan: entered allmulticast mode [ 420.983541][T10539] blktrace: Concurrent blktraces are not allowed on loop5 [ 421.305820][ T30] audit: type=1326 audit(6040651103.442:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10547 comm="syz.3.1180" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3e0538e969 code=0x0 [ 422.433181][ T5141] Bluetooth: hci1: unexpected subevent 0x01 length: 120 > 18 [ 422.441744][ T5141] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 424.775741][T10607] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1195'. [ 425.511387][T10625] blktrace: Concurrent blktraces are not allowed on loop5 [ 427.957362][T10668] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1217'. [ 428.007461][T10668] netlink: 25 bytes leftover after parsing attributes in process `syz.2.1217'. [ 428.861228][T10683] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1222'. [ 430.528604][T10718] netlink: 'syz.1.1232': attribute type 2 has an invalid length. [ 430.916094][T10725] netlink: 198 bytes leftover after parsing attributes in process `syz.3.1234'. [ 431.880935][T10744] netlink: 'syz.1.1242': attribute type 11 has an invalid length. [ 431.960370][T10744] netlink: 'syz.1.1242': attribute type 1 has an invalid length. [ 432.135694][ T30] audit: type=1326 audit(6040651114.272:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10745 comm="syz.3.1243" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3e0538e969 code=0x0 [ 432.528470][ T5836] Bluetooth: hci0: unexpected subevent 0x01 length: 120 > 18 [ 432.539736][ T5836] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 433.321390][T10771] netlink: 338 bytes leftover after parsing attributes in process `syz.1.1256'. [ 434.867179][T10781] netlink: 'syz.2.1251': attribute type 28 has an invalid length. [ 434.926020][T10781] netlink: 326 bytes leftover after parsing attributes in process `syz.2.1251'. [ 435.260324][T10806] Invalid ELF header magic: != ELF [ 436.136346][T10830] netlink: 330 bytes leftover after parsing attributes in process `syz.0.1263'. [ 436.186607][ T5141] Bluetooth: hci2: unexpected subevent 0x01 length: 120 > 18 [ 436.196324][ T5141] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 436.237030][T10830] : renamed from lo (while UP) [ 439.149687][T10878] FAULT_INJECTION: forcing a failure. [ 439.149687][T10878] name failslab, interval 1, probability 0, space 0, times 0 [ 439.249775][T10878] CPU: 0 UID: 0 PID: 10878 Comm: syz.2.1276 Not tainted 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(full) [ 439.249812][T10878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 439.249827][T10878] Call Trace: [ 439.249835][T10878] [ 439.249845][T10878] dump_stack_lvl+0x16c/0x1f0 [ 439.249890][T10878] should_fail_ex+0x512/0x640 [ 439.249923][T10878] ? __kmalloc_cache_node_noprof+0x5a/0x420 [ 439.249952][T10878] should_failslab+0xc2/0x120 [ 439.249980][T10878] __kmalloc_cache_node_noprof+0x6d/0x420 [ 439.250006][T10878] ? __get_vm_area_node+0x101/0x300 [ 439.250045][T10878] __get_vm_area_node+0x101/0x300 [ 439.250084][T10878] __vmalloc_node_range_noprof+0x277/0x1540 [ 439.250122][T10878] ? n_tty_open+0x1a/0x170 [ 439.250163][T10878] ? n_tty_open+0x1a/0x170 [ 439.250197][T10878] ? __ldsem_down_write_nested+0x10e/0x850 [ 439.250231][T10878] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 439.250278][T10878] ? n_tty_open+0x1a/0x170 [ 439.250314][T10878] vzalloc_noprof+0x6b/0x90 [ 439.250350][T10878] ? n_tty_open+0x1a/0x170 [ 439.250379][T10878] ? __pfx_n_tty_open+0x10/0x10 [ 439.250408][T10878] n_tty_open+0x1a/0x170 [ 439.250438][T10878] ? __pfx_n_tty_open+0x10/0x10 [ 439.250467][T10878] tty_ldisc_open+0x9c/0x120 [ 439.250490][T10878] tty_ldisc_setup+0x40/0x100 [ 439.250514][T10878] tty_init_dev.part.0+0x1ec/0x500 [ 439.250546][T10878] tty_open+0xa50/0xf90 [ 439.250579][T10878] ? __pfx_tty_open+0x10/0x10 [ 439.250608][T10878] ? chrdev_open+0x10b/0x6a0 [ 439.250639][T10878] ? __pfx_tty_open+0x10/0x10 [ 439.250666][T10878] chrdev_open+0x231/0x6a0 [ 439.250689][T10878] ? __pfx_apparmor_file_open+0x10/0x10 [ 439.250718][T10878] ? __pfx_chrdev_open+0x10/0x10 [ 439.250745][T10878] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 439.250789][T10878] do_dentry_open+0x741/0x1c10 [ 439.250814][T10878] ? __pfx_chrdev_open+0x10/0x10 [ 439.250844][T10878] vfs_open+0x82/0x3f0 [ 439.250881][T10878] path_openat+0x1e5e/0x2d40 [ 439.250915][T10878] ? __pfx_path_openat+0x10/0x10 [ 439.250945][T10878] do_filp_open+0x20b/0x470 [ 439.250967][T10878] ? __pfx_do_filp_open+0x10/0x10 [ 439.251010][T10878] ? alloc_fd+0x471/0x7d0 [ 439.251054][T10878] do_sys_openat2+0x11b/0x1d0 [ 439.251083][T10878] ? __pfx_do_sys_openat2+0x10/0x10 [ 439.251112][T10878] ? __sock_release+0x20b/0x270 [ 439.251146][T10878] __x64_sys_openat+0x174/0x210 [ 439.251177][T10878] ? __pfx___x64_sys_openat+0x10/0x10 [ 439.251210][T10878] ? rcu_is_watching+0x12/0xc0 [ 439.251239][T10878] do_syscall_64+0xcd/0x230 [ 439.251270][T10878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.251295][T10878] RIP: 0033:0x7fe11eb8e969 [ 439.251313][T10878] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 439.251337][T10878] RSP: 002b:00007fe11fa35038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 439.251359][T10878] RAX: ffffffffffffffda RBX: 00007fe11edb5fa0 RCX: 00007fe11eb8e969 [ 439.251375][T10878] RDX: 0000000000000800 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 439.251390][T10878] RBP: 00007fe11ec10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 439.251404][T10878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 439.251418][T10878] R13: 0000000000000000 R14: 00007fe11edb5fa0 R15: 00007fffb1d6bf98 [ 439.251448][T10878] [ 439.986892][T10878] syz.2.1276: vmalloc error: size 9128, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 440.044277][T10878] CPU: 0 UID: 0 PID: 10878 Comm: syz.2.1276 Not tainted 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(full) [ 440.044312][T10878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 440.044327][T10878] Call Trace: [ 440.044335][T10878] [ 440.044345][T10878] dump_stack_lvl+0x16c/0x1f0 [ 440.044378][T10878] warn_alloc+0x248/0x3a0 [ 440.044406][T10878] ? __pfx_warn_alloc+0x10/0x10 [ 440.044433][T10878] ? __kmalloc_cache_node_noprof+0x272/0x420 [ 440.044462][T10878] ? __kasan_kmalloc+0x8a/0xb0 [ 440.044487][T10878] ? __get_vm_area_node+0x1e5/0x300 [ 440.044529][T10878] __vmalloc_node_range_noprof+0xd31/0x1540 [ 440.044576][T10878] ? n_tty_open+0x1a/0x170 [ 440.044610][T10878] ? __ldsem_down_write_nested+0x10e/0x850 [ 440.044644][T10878] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 440.044690][T10878] ? n_tty_open+0x1a/0x170 [ 440.044720][T10878] vzalloc_noprof+0x6b/0x90 [ 440.044756][T10878] ? n_tty_open+0x1a/0x170 [ 440.044785][T10878] ? __pfx_n_tty_open+0x10/0x10 [ 440.044813][T10878] n_tty_open+0x1a/0x170 [ 440.044843][T10878] ? __pfx_n_tty_open+0x10/0x10 [ 440.044872][T10878] tty_ldisc_open+0x9c/0x120 [ 440.044895][T10878] tty_ldisc_setup+0x40/0x100 [ 440.044918][T10878] tty_init_dev.part.0+0x1ec/0x500 [ 440.044950][T10878] tty_open+0xa50/0xf90 [ 440.044987][T10878] ? __pfx_tty_open+0x10/0x10 [ 440.045015][T10878] ? chrdev_open+0x10b/0x6a0 [ 440.045043][T10878] ? __pfx_tty_open+0x10/0x10 [ 440.045070][T10878] chrdev_open+0x231/0x6a0 [ 440.045101][T10878] ? __pfx_apparmor_file_open+0x10/0x10 [ 440.045131][T10878] ? __pfx_chrdev_open+0x10/0x10 [ 440.045158][T10878] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 440.045198][T10878] do_dentry_open+0x741/0x1c10 [ 440.045223][T10878] ? __pfx_chrdev_open+0x10/0x10 [ 440.045253][T10878] vfs_open+0x82/0x3f0 [ 440.045286][T10878] path_openat+0x1e5e/0x2d40 [ 440.045319][T10878] ? __pfx_path_openat+0x10/0x10 [ 440.045348][T10878] do_filp_open+0x20b/0x470 [ 440.045370][T10878] ? __pfx_do_filp_open+0x10/0x10 [ 440.045414][T10878] ? alloc_fd+0x471/0x7d0 [ 440.045457][T10878] do_sys_openat2+0x11b/0x1d0 [ 440.045487][T10878] ? __pfx_do_sys_openat2+0x10/0x10 [ 440.045515][T10878] ? __sock_release+0x20b/0x270 [ 440.045553][T10878] __x64_sys_openat+0x174/0x210 [ 440.045586][T10878] ? __pfx___x64_sys_openat+0x10/0x10 [ 440.045618][T10878] ? rcu_is_watching+0x12/0xc0 [ 440.045648][T10878] do_syscall_64+0xcd/0x230 [ 440.045680][T10878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.045703][T10878] RIP: 0033:0x7fe11eb8e969 [ 440.045723][T10878] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 440.045746][T10878] RSP: 002b:00007fe11fa35038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 440.045768][T10878] RAX: ffffffffffffffda RBX: 00007fe11edb5fa0 RCX: 00007fe11eb8e969 [ 440.045783][T10878] RDX: 0000000000000800 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 440.045798][T10878] RBP: 00007fe11ec10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 440.045813][T10878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 440.045827][T10878] R13: 0000000000000000 R14: 00007fe11edb5fa0 R15: 00007fffb1d6bf98 [ 440.045857][T10878] [ 440.045866][T10878] Mem-Info: [ 440.976833][T10878] active_anon:12116 inactive_anon:2 isolated_anon:0 [ 440.976833][T10878] active_file:20085 inactive_file:40842 isolated_file:0 [ 440.976833][T10878] unevictable:768 dirty:1305 writeback:512 [ 440.976833][T10878] slab_reclaimable:10723 slab_unreclaimable:99047 [ 440.976833][T10878] mapped:26397 shmem:2428 pagetables:886 [ 440.976833][T10878] sec_pagetables:0 bounce:0 [ 440.976833][T10878] kernel_misc_reclaimable:0 [ 440.976833][T10878] free:1322430 free_pcp:2775 free_cma:0 [ 441.246016][T10878] Node 0 active_anon:48828kB inactive_anon:8kB active_file:80340kB inactive_file:163296kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:105640kB dirty:3176kB writeback:2048kB shmem:7792kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10512kB pagetables:3700kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 441.407560][T10878] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1920kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 441.573694][T10878] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 441.713848][T10878] lowmem_reserve[]: 0 2484 2486 2486 2486 [ 441.753822][T10878] Node 0 DMA32 free:1384032kB boost:0kB min:34108kB low:42632kB high:51156kB reserved_highatomic:0KB active_anon:48056kB inactive_anon:8kB active_file:80340kB inactive_file:155308kB unevictable:1536kB writepending:1128kB present:3129332kB managed:2544212kB mlocked:0kB bounce:0kB free_pcp:836kB local_pcp:836kB free_cma:0kB [ 441.912305][T10878] lowmem_reserve[]: 0 0 1 1 1 [ 441.933327][T10878] Node 0 Normal free:4kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1844kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 442.073172][T10878] lowmem_reserve[]: 0 0 0 0 0 [ 442.107361][T10878] Node 1 Normal free:3897348kB boost:0kB min:55768kB low:69708kB high:83648kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:8872kB local_pcp:8872kB free_cma:0kB [ 442.284453][T10878] lowmem_reserve[]: 0 0 0 0 0 [ 442.317021][T10878] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 442.403452][T10878] Node 0 DMA32: 656*4kB (UM) 1978*8kB (ME) 1803*16kB (ME) 1408*32kB (UM) 834*64kB (UM) 354*128kB (UM) 119*256kB (UM) 61*512kB (UM) 17*1024kB (UME) 6*2048kB (UME) 267*4096kB (UM) = 1376064kB [ 442.531147][T10878] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 442.600148][T10878] Node 1 Normal: 161*4kB (UE) 28*8kB (UE) 50*16kB (UME) 230*32kB (UE) 99*64kB (UE) 40*128kB (UME) 14*256kB (UM) 5*512kB (UM) 2*1024kB (U) 3*2048kB (UM) 943*4096kB (UME) = 3897348kB [ 442.728166][T10878] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 442.783774][T10878] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 442.840307][T10878] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 442.875835][T10908] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1282'. [ 442.925321][T10878] Node 1 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 442.979492][T10878] 61845 total pagecache pages [ 443.019089][T10878] 18 pages in swap cache [ 443.060411][T10878] Free swap = 120880kB [ 443.081527][T10878] Total swap = 124996kB [ 443.100911][T10878] 2097051 pages RAM [ 443.118940][T10878] 0 pages HighMem/MovableOnly [ 443.143279][T10878] 428892 pages reserved [ 443.180007][T10878] 0 pages cma reserved [ 443.211432][T10878] tty tty12: ldisc open failed (-12), clearing slot 11 [ 444.071784][ T30] audit: type=1326 audit(6040651126.202:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10931 comm="syz.1.1289" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb572b8e969 code=0x0 [ 445.198724][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.208066][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.274026][ T5836] Bluetooth: hci0: unexpected subevent 0x01 length: 120 > 18 [ 445.282688][ T5836] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 446.578148][T10978] FAULT_INJECTION: forcing a failure. [ 446.578148][T10978] name failslab, interval 1, probability 0, space 0, times 0 [ 446.646191][T10978] CPU: 0 UID: 0 PID: 10978 Comm: syz.0.1303 Not tainted 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(full) [ 446.646227][T10978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 446.646242][T10978] Call Trace: [ 446.646250][T10978] [ 446.646259][T10978] dump_stack_lvl+0x16c/0x1f0 [ 446.646292][T10978] should_fail_ex+0x512/0x640 [ 446.646324][T10978] ? fs_reclaim_acquire+0xae/0x150 [ 446.646362][T10978] should_failslab+0xc2/0x120 [ 446.646390][T10978] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 446.646416][T10978] ? security_inode_alloc+0x3b/0x2b0 [ 446.646445][T10978] security_inode_alloc+0x3b/0x2b0 [ 446.646471][T10978] inode_init_always_gfp+0xce4/0x1030 [ 446.646512][T10978] alloc_inode+0x86/0x240 [ 446.646540][T10978] new_inode+0x22/0x1c0 [ 446.646565][T10978] ? trace_cap_capable+0x18d/0x200 [ 446.646589][T10978] shmem_get_inode+0x19a/0xfb0 [ 446.646626][T10978] ? __vm_enough_memory+0x184/0x3f0 [ 446.646662][T10978] __shmem_file_setup+0x16f/0x300 [ 446.646688][T10978] shmem_zero_setup+0x93/0x1a0 [ 446.646718][T10978] __mmap_region+0x2036/0x27c0 [ 446.646748][T10978] ? __pfx___mmap_region+0x10/0x10 [ 446.646773][T10978] ? finish_task_switch.isra.0+0x221/0xc10 [ 446.646803][T10978] ? __schedule+0x1186/0x5de0 [ 446.646826][T10978] ? kvm_sched_clock_read+0x11/0x20 [ 446.646849][T10978] ? sched_clock+0x38/0x60 [ 446.646927][T10978] ? mm_get_unmapped_area+0x95/0xe0 [ 446.646968][T10978] mmap_region+0x1ab/0x3f0 [ 446.646999][T10978] do_mmap+0xd8e/0x11b0 [ 446.647038][T10978] ? __pfx_do_mmap+0x10/0x10 [ 446.647079][T10978] ? __pfx_down_write_killable+0x10/0x10 [ 446.647118][T10978] vm_mmap_pgoff+0x281/0x450 [ 446.647157][T10978] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 446.647195][T10978] ? do_set_mempolicy+0x220/0x480 [ 446.647227][T10978] ? __x64_sys_futex+0x1e0/0x4c0 [ 446.647250][T10978] ? __x64_sys_futex+0x1e9/0x4c0 [ 446.647278][T10978] ksys_mmap_pgoff+0x7d/0x5c0 [ 446.647311][T10978] ? rcu_is_watching+0x12/0xc0 [ 446.647335][T10978] __x64_sys_mmap+0x125/0x190 [ 446.647360][T10978] do_syscall_64+0xcd/0x230 [ 446.647390][T10978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.647414][T10978] RIP: 0033:0x7f1dd378e969 [ 446.647433][T10978] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 446.647456][T10978] RSP: 002b:00007f1dd46e2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 446.647478][T10978] RAX: ffffffffffffffda RBX: 00007f1dd39b5fa0 RCX: 00007f1dd378e969 [ 446.647495][T10978] RDX: 0000000000000003 RSI: 0000000002020009 RDI: 00007ffffdfde000 [ 446.647509][T10978] RBP: 00007f1dd3810ab1 R08: fffffffffffffffa R09: 0000000000008000 [ 446.647524][T10978] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 446.647538][T10978] R13: 0000000000000000 R14: 00007f1dd39b5fa0 R15: 00007ffce69b9538 [ 446.647568][T10978] [ 447.197274][T10985] FAULT_INJECTION: forcing a failure. [ 447.197274][T10985] name failslab, interval 1, probability 0, space 0, times 0 [ 447.211612][T10985] CPU: 0 UID: 0 PID: 10985 Comm: syz.2.1305 Not tainted 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(full) [ 447.211644][T10985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 447.211658][T10985] Call Trace: [ 447.211666][T10985] [ 447.211674][T10985] dump_stack_lvl+0x16c/0x1f0 [ 447.211707][T10985] should_fail_ex+0x512/0x640 [ 447.211739][T10985] ? __kvmalloc_node_noprof+0x122/0x600 [ 447.211766][T10985] should_failslab+0xc2/0x120 [ 447.211794][T10985] __kvmalloc_node_noprof+0x135/0x600 [ 447.211819][T10985] ? fib4_semantics_init+0x25/0x100 [ 447.211855][T10985] ? fib4_semantics_init+0x25/0x100 [ 447.211884][T10985] ? fib4_rules_init+0x151/0x1c0 [ 447.211912][T10985] fib4_semantics_init+0x25/0x100 [ 447.211943][T10985] fib_net_init+0x1fc/0x3f0 [ 447.211963][T10985] ? __pfx___register_sysctl_table+0x10/0x10 [ 447.212001][T10985] ? __pfx_fib_net_init+0x10/0x10 [ 447.212023][T10985] ? lockdep_init_map_type+0x5c/0x280 [ 447.212055][T10985] ? do_init_timer+0xc9/0x110 [ 447.212081][T10985] ? devinet_init_net+0x5c2/0x910 [ 447.212108][T10985] ? __pfx_fib_net_init+0x10/0x10 [ 447.212129][T10985] ops_init+0x1df/0x5f0 [ 447.212155][T10985] setup_net+0x21e/0x850 [ 447.212181][T10985] ? __pfx_setup_net+0x10/0x10 [ 447.212203][T10985] ? lockdep_init_map_type+0x5c/0x280 [ 447.212233][T10985] ? __pfx_down_read_killable+0x10/0x10 [ 447.212268][T10985] ? debug_mutex_init+0x37/0x70 [ 447.212308][T10985] copy_net_ns+0x2a6/0x5f0 [ 447.212336][T10985] create_new_namespaces+0x3ea/0xad0 [ 447.212369][T10985] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 447.212397][T10985] ksys_unshare+0x45b/0xa40 [ 447.212428][T10985] ? __pfx_ksys_unshare+0x10/0x10 [ 447.212457][T10985] ? xfd_validate_state+0x5d/0x180 [ 447.212496][T10985] ? rcu_is_watching+0x12/0xc0 [ 447.212523][T10985] __x64_sys_unshare+0x31/0x40 [ 447.212553][T10985] do_syscall_64+0xcd/0x230 [ 447.212584][T10985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.212607][T10985] RIP: 0033:0x7fe11eb8e969 [ 447.212626][T10985] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 447.212649][T10985] RSP: 002b:00007fe11fa14038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 447.212671][T10985] RAX: ffffffffffffffda RBX: 00007fe11edb6080 RCX: 00007fe11eb8e969 [ 447.212686][T10985] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 447.212700][T10985] RBP: 00007fe11ec10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 447.212713][T10985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 447.212727][T10985] R13: 0000000000000000 R14: 00007fe11edb6080 R15: 00007fffb1d6bf98 [ 447.212756][T10985] [ 448.632087][ T30] audit: type=1326 audit(6040651130.752:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11007 comm="syz.3.1312" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3e0538e969 code=0x0 [ 450.505252][T11042] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1321'. [ 450.566065][T11042] hsr0: entered allmulticast mode [ 450.592585][T11042] hsr_slave_0: entered allmulticast mode [ 450.646068][T11042] hsr_slave_1: entered allmulticast mode [ 451.352355][ T5141] Bluetooth: hci0: unexpected subevent 0x01 length: 120 > 18 [ 451.362029][ T5141] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 452.371359][T11083] Invalid ELF header magic: != ELF [ 457.939934][T11183] FAULT_INJECTION: forcing a failure. [ 457.939934][T11183] name failslab, interval 1, probability 0, space 0, times 0 [ 458.013576][T11183] CPU: 0 UID: 0 PID: 11183 Comm: syz.0.1360 Not tainted 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(full) [ 458.013612][T11183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 458.013626][T11183] Call Trace: [ 458.013633][T11183] [ 458.013642][T11183] dump_stack_lvl+0x16c/0x1f0 [ 458.013675][T11183] should_fail_ex+0x512/0x640 [ 458.013707][T11183] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 458.013736][T11183] should_failslab+0xc2/0x120 [ 458.013764][T11183] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 458.013789][T11183] ? dup_fd+0x4e/0xb90 [ 458.013834][T11183] ? do_futex+0x122/0x350 [ 458.013860][T11183] dup_fd+0x4e/0xb90 [ 458.013896][T11183] ? find_held_lock+0x2b/0x80 [ 458.013924][T11183] __do_sys_close_range+0x4ca/0x730 [ 458.013946][T11183] ? xfd_validate_state+0x5d/0x180 [ 458.013985][T11183] ? __pfx___do_sys_close_range+0x10/0x10 [ 458.014005][T11183] ? rcu_is_watching+0x12/0xc0 [ 458.014034][T11183] do_syscall_64+0xcd/0x230 [ 458.014067][T11183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.014090][T11183] RIP: 0033:0x7f1dd378e969 [ 458.014108][T11183] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 458.014132][T11183] RSP: 002b:00007f1dd46e2038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 458.014153][T11183] RAX: ffffffffffffffda RBX: 00007f1dd39b5fa0 RCX: 00007f1dd378e969 [ 458.014168][T11183] RDX: 0000000000000002 RSI: 000000000000e903 RDI: 0000000000000000 [ 458.014182][T11183] RBP: 00007f1dd3810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 458.014196][T11183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 458.014210][T11183] R13: 0000000000000000 R14: 00007f1dd39b5fa0 R15: 00007ffce69b9538 [ 458.014238][T11183] [ 459.405265][ T30] audit: type=1326 audit(6040651141.542:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11199 comm="syz.0.1365" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1dd378e969 code=0x0 [ 459.989217][T11211] kafs: addr_prefs: Too many elements in string [ 460.048393][T11211] Console: switching to colour VGA+ 80x25 [ 460.216090][T11219] kafs: addr_prefs: Too many elements in string [ 460.247290][T11211] Console: switching to colour frame buffer device 128x48 [ 460.354426][T11223] Console: switching to colour VGA+ 80x25 [ 464.261366][T11290] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1393'. [ 464.772808][T11302] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1396'. [ 466.149545][T11332] netlink: 'syz.3.1404': attribute type 1 has an invalid length. [ 467.860660][ T30] audit: type=1326 audit(6040651149.992:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11373 comm="syz.2.1417" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe11eb8e969 code=0x0 [ 471.543320][T11410] FAULT_INJECTION: forcing a failure. [ 471.543320][T11410] name failslab, interval 1, probability 0, space 0, times 0 [ 471.609578][T11410] CPU: 0 UID: 0 PID: 11410 Comm: syz.0.1424 Not tainted 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(full) [ 471.609614][T11410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 471.609629][T11410] Call Trace: [ 471.609636][T11410] [ 471.609645][T11410] dump_stack_lvl+0x16c/0x1f0 [ 471.609680][T11410] should_fail_ex+0x512/0x640 [ 471.609712][T11410] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 471.609740][T11410] should_failslab+0xc2/0x120 [ 471.609769][T11410] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 471.609794][T11410] ? dup_fd+0x4e/0xb90 [ 471.609828][T11410] ? do_futex+0x122/0x350 [ 471.609854][T11410] dup_fd+0x4e/0xb90 [ 471.609889][T11410] ? find_held_lock+0x2b/0x80 [ 471.609917][T11410] __do_sys_close_range+0x4ca/0x730 [ 471.609940][T11410] ? xfd_validate_state+0x5d/0x180 [ 471.609979][T11410] ? __pfx___do_sys_close_range+0x10/0x10 [ 471.610000][T11410] ? rcu_is_watching+0x12/0xc0 [ 471.610028][T11410] do_syscall_64+0xcd/0x230 [ 471.610059][T11410] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.610082][T11410] RIP: 0033:0x7f1dd378e969 [ 471.610099][T11410] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 471.610121][T11410] RSP: 002b:00007f1dd46e2038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 471.610143][T11410] RAX: ffffffffffffffda RBX: 00007f1dd39b5fa0 RCX: 00007f1dd378e969 [ 471.610158][T11410] RDX: 0000000000000002 RSI: 000000000000e903 RDI: 0000000000000000 [ 471.610172][T11410] RBP: 00007f1dd3810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 471.610186][T11410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 471.610200][T11410] R13: 0000000000000000 R14: 00007f1dd39b5fa0 R15: 00007ffce69b9538 [ 471.610228][T11410] [ 474.670975][ T5836] Bluetooth: hci1: unexpected subevent 0x01 length: 120 > 18 [ 474.679478][ T5836] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 476.168105][ T5141] Bluetooth: hci2: unexpected subevent 0x01 length: 120 > 18 [ 476.176458][ T5141] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 478.083061][ T30] audit: type=1326 audit(6040651160.212:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11500 comm="syz.2.1449" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe11eb8e969 code=0x0 [ 480.693791][T11540] FAULT_INJECTION: forcing a failure. [ 480.693791][T11540] name failslab, interval 1, probability 0, space 0, times 0 [ 480.791303][T11521] FAULT_INJECTION: forcing a failure. [ 480.791303][T11521] name fail_futex, interval 1, probability 0, space 0, times 0 [ 480.844452][T11540] CPU: 0 UID: 0 PID: 11540 Comm: syz.2.1458 Not tainted 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(full) [ 480.844488][T11540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 480.844503][T11540] Call Trace: [ 480.844511][T11540] [ 480.844520][T11540] dump_stack_lvl+0x16c/0x1f0 [ 480.844555][T11540] should_fail_ex+0x512/0x640 [ 480.844587][T11540] ? __kmalloc_noprof+0xbf/0x510 [ 480.844615][T11540] ? sk_prot_alloc+0x1a8/0x2a0 [ 480.844641][T11540] should_failslab+0xc2/0x120 [ 480.844670][T11540] __kmalloc_noprof+0xd2/0x510 [ 480.844694][T11540] ? evm_inode_alloc_security+0x49/0xc0 [ 480.844735][T11540] sk_prot_alloc+0x1a8/0x2a0 [ 480.844765][T11540] sk_alloc+0x36/0xc20 [ 480.844801][T11540] __netlink_create+0x5e/0x2c0 [ 480.844838][T11540] __netlink_kernel_create+0xed/0x750 [ 480.844864][T11540] ? __pfx___netlink_kernel_create+0x10/0x10 [ 480.844897][T11540] fib_net_init+0x26d/0x3f0 [ 480.844918][T11540] ? __pfx___register_sysctl_table+0x10/0x10 [ 480.844946][T11540] ? __pfx_fib_net_init+0x10/0x10 [ 480.844967][T11540] ? lockdep_init_map_type+0x5c/0x280 [ 480.844999][T11540] ? __pfx_nl_fib_input+0x10/0x10 [ 480.845025][T11540] ? devinet_init_net+0x5c2/0x910 [ 480.845053][T11540] ? __pfx_fib_net_init+0x10/0x10 [ 480.845073][T11540] ops_init+0x1df/0x5f0 [ 480.845100][T11540] setup_net+0x21e/0x850 [ 480.845126][T11540] ? __pfx_setup_net+0x10/0x10 [ 480.845148][T11540] ? lockdep_init_map_type+0x5c/0x280 [ 480.845178][T11540] ? __pfx_down_read_killable+0x10/0x10 [ 480.845215][T11540] ? debug_mutex_init+0x37/0x70 [ 480.845255][T11540] copy_net_ns+0x2a6/0x5f0 [ 480.845284][T11540] create_new_namespaces+0x3ea/0xad0 [ 480.845326][T11540] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 480.845355][T11540] ksys_unshare+0x45b/0xa40 [ 480.845388][T11540] ? __pfx_ksys_unshare+0x10/0x10 [ 480.845418][T11540] ? xfd_validate_state+0x5d/0x180 [ 480.845461][T11540] ? rcu_is_watching+0x12/0xc0 [ 480.845489][T11540] __x64_sys_unshare+0x31/0x40 [ 480.845519][T11540] do_syscall_64+0xcd/0x230 [ 480.845551][T11540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.845574][T11540] RIP: 0033:0x7fe11eb8e969 [ 480.845592][T11540] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 480.845616][T11540] RSP: 002b:00007fe11fa14038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 480.845638][T11540] RAX: ffffffffffffffda RBX: 00007fe11edb6080 RCX: 00007fe11eb8e969 [ 480.845654][T11540] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 480.845668][T11540] RBP: 00007fe11ec10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 480.845683][T11540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 480.845697][T11540] R13: 0000000000000000 R14: 00007fe11edb6080 R15: 00007fffb1d6bf98 [ 480.845726][T11540] [ 481.378799][T11521] CPU: 0 UID: 0 PID: 11521 Comm: syz.0.1452 Not tainted 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(full) [ 481.378836][T11521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 481.378851][T11521] Call Trace: [ 481.378859][T11521] [ 481.378867][T11521] dump_stack_lvl+0x16c/0x1f0 [ 481.378901][T11521] should_fail_ex+0x512/0x640 [ 481.378938][T11521] get_futex_key+0x49e/0x1000 [ 481.378965][T11521] ? __pfx_get_futex_key+0x10/0x10 [ 481.378986][T11521] ? kfree+0x252/0x4d0 [ 481.379030][T11521] futex_wake+0xe7/0x4e0 [ 481.379061][T11521] ? __pfx_futex_wake+0x10/0x10 [ 481.379089][T11521] ? __pfx_vfs_writev+0x10/0x10 [ 481.379127][T11521] ? do_writev+0x218/0x330 [ 481.379167][T11521] do_futex+0x1e3/0x350 [ 481.379191][T11521] ? __pfx_do_futex+0x10/0x10 [ 481.379213][T11521] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 481.379259][T11521] __x64_sys_futex+0x1e0/0x4c0 [ 481.379285][T11521] ? __pfx_native_tss_update_io_bitmap+0x10/0x10 [ 481.379311][T11521] ? __pfx___x64_sys_futex+0x10/0x10 [ 481.379337][T11521] ? __pfx_do_writev+0x10/0x10 [ 481.379370][T11521] ? rcu_is_watching+0x12/0xc0 [ 481.379398][T11521] do_syscall_64+0xcd/0x230 [ 481.379429][T11521] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.379452][T11521] RIP: 0033:0x7f1dd378e969 [ 481.379470][T11521] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 481.379494][T11521] RSP: 002b:00007f1dd46a00e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 481.379516][T11521] RAX: ffffffffffffffda RBX: 00007f1dd39b6168 RCX: 00007f1dd378e969 [ 481.379532][T11521] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f1dd39b616c [ 481.379548][T11521] RBP: 00007f1dd39b6160 R08: 00007f1dd46e3000 R09: 0000000000000000 [ 481.379563][T11521] R10: 0000000000000009 R11: 0000000000000246 R12: 00007f1dd39b616c [ 481.379577][T11521] R13: 0000000000000000 R14: 00007ffce69b9450 R15: 00007ffce69b9538 [ 481.379606][T11521] [ 483.669401][T11568] FAULT_INJECTION: forcing a failure. [ 483.669401][T11568] name failslab, interval 1, probability 0, space 0, times 0 [ 483.757275][T11568] CPU: 0 UID: 0 PID: 11568 Comm: syz.2.1466 Not tainted 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(full) [ 483.757310][T11568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 483.757325][T11568] Call Trace: [ 483.757332][T11568] [ 483.757341][T11568] dump_stack_lvl+0x16c/0x1f0 [ 483.757374][T11568] should_fail_ex+0x512/0x640 [ 483.757407][T11568] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 483.757436][T11568] should_failslab+0xc2/0x120 [ 483.757466][T11568] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 483.757490][T11568] ? __pfx___might_resched+0x10/0x10 [ 483.757517][T11568] ? __anon_vma_prepare+0xae/0x5e0 [ 483.757545][T11568] __anon_vma_prepare+0xae/0x5e0 [ 483.757574][T11568] __vmf_anon_prepare+0x11c/0x240 [ 483.757610][T11568] do_wp_page+0x11a6/0x58e0 [ 483.757653][T11568] ? __pfx_do_wp_page+0x10/0x10 [ 483.757690][T11568] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 483.757725][T11568] ? ___pte_offset_map+0x1bc/0x540 [ 483.757763][T11568] __handle_mm_fault+0x1ada/0x2a40 [ 483.757794][T11568] ? __pfx___handle_mm_fault+0x10/0x10 [ 483.757834][T11568] ? find_vma+0xbf/0x140 [ 483.757866][T11568] ? __pfx_find_vma+0x10/0x10 [ 483.757901][T11568] handle_mm_fault+0x3fe/0xad0 [ 483.757929][T11568] do_user_addr_fault+0x7a6/0x1370 [ 483.757956][T11568] ? rcu_is_watching+0x12/0xc0 [ 483.757980][T11568] exc_page_fault+0x5c/0xc0 [ 483.758007][T11568] asm_exc_page_fault+0x26/0x30 [ 483.758039][T11568] RIP: 0010:__put_user_4+0xd/0x20 [ 483.758068][T11568] Code: 66 89 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 0f 1f 80 00 00 00 00 90 90 90 [ 483.758092][T11568] RSP: 0018:ffffc90003d1fcc0 EFLAGS: 00050206 [ 483.758111][T11568] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000005 [ 483.758125][T11568] RDX: 0000000000080000 RSI: ffffffff8236518c RDI: ffffffff8bf467a0 [ 483.758141][T11568] RBP: 1ffff920007a3f9b R08: a23edf14cf8df726 R09: 0000000000000001 [ 483.758156][T11568] R10: 0000000000000000 R11: 0000000000000000 R12: 00000000ffffffea [ 483.758170][T11568] R13: 0000000000000005 R14: 0000000000000000 R15: 0000000000000000 [ 483.758193][T11568] ? do_vfs_ioctl+0x110c/0x1990 [ 483.758228][T11568] do_vfs_ioctl+0x1117/0x1990 [ 483.758261][T11568] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 483.758318][T11568] ? find_held_lock+0x2b/0x80 [ 483.758338][T11568] ? hook_file_ioctl_common+0x145/0x410 [ 483.758370][T11568] ? __fget_files+0x20e/0x3c0 [ 483.758413][T11568] __x64_sys_ioctl+0x11d/0x200 [ 483.758446][T11568] do_syscall_64+0xcd/0x230 [ 483.758477][T11568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.758499][T11568] RIP: 0033:0x7fe11eb8e969 [ 483.758517][T11568] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 483.758539][T11568] RSP: 002b:00007fe11f9f3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 483.758559][T11568] RAX: ffffffffffffffda RBX: 00007fe11edb6160 RCX: 00007fe11eb8e969 [ 483.758575][T11568] RDX: 0000000000000005 RSI: 0000000000000001 RDI: 0000000000000004 [ 483.758588][T11568] RBP: 00007fe11ec10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 483.758602][T11568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 483.758615][T11568] R13: 0000000000000000 R14: 00007fe11edb6160 R15: 00007fffb1d6bf98 [ 483.758644][T11568] [ 484.513455][ T30] audit: type=1326 audit(6040651166.602:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11581 comm="syz.0.1470" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1dd378e969 code=0x0 [ 486.510063][T11624] netlink: 'syz.0.1482': attribute type 8 has an invalid length. [ 486.765099][T11629] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1484'. [ 486.920892][T11629] hsr0: entered allmulticast mode [ 486.950423][T11629] hsr_slave_0: entered allmulticast mode [ 487.002493][T11629] hsr_slave_1: entered allmulticast mode [ 488.872658][ T30] audit: type=1326 audit(6040651171.002:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11662 comm="syz.0.1491" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1dd378e969 code=0x0 [ 489.328729][ T5141] Bluetooth: hci1: unexpected subevent 0x01 length: 120 > 18 [ 489.341395][ T5141] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 489.636759][T11671] FAULT_INJECTION: forcing a failure. [ 489.636759][T11671] name fail_futex, interval 1, probability 0, space 0, times 0 [ 489.720146][T11671] CPU: 0 UID: 0 PID: 11671 Comm: syz.0.1491 Not tainted 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(full) [ 489.720185][T11671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 489.720201][T11671] Call Trace: [ 489.720210][T11671] [ 489.720220][T11671] dump_stack_lvl+0x16c/0x1f0 [ 489.720258][T11671] should_fail_ex+0x512/0x640 [ 489.720301][T11671] get_futex_key+0x49e/0x1000 [ 489.720334][T11671] ? __pfx_get_futex_key+0x10/0x10 [ 489.720402][T11671] futex_wake+0xe7/0x4e0 [ 489.720429][T11671] ? rcu_is_watching+0x12/0xc0 [ 489.720452][T11671] ? __pfx_futex_wake+0x10/0x10 [ 489.720493][T11671] do_futex+0x1e3/0x350 [ 489.720517][T11671] ? __pfx_do_futex+0x10/0x10 [ 489.720538][T11671] ? __might_fault+0xe3/0x190 [ 489.720571][T11671] mm_release+0x24e/0x300 [ 489.720598][T11671] do_exit+0x898/0x2c30 [ 489.720626][T11671] ? __pfx___might_resched+0x10/0x10 [ 489.720656][T11671] ? __pfx_do_exit+0x10/0x10 [ 489.720686][T11671] ? do_raw_spin_lock+0x12c/0x2b0 [ 489.720719][T11671] ? find_held_lock+0x2b/0x80 [ 489.720744][T11671] do_group_exit+0xd3/0x2a0 [ 489.720777][T11671] get_signal+0x2673/0x26d0 [ 489.720813][T11671] ? __pfx_get_signal+0x10/0x10 [ 489.720839][T11671] ? task_work_add+0x1d5/0x360 [ 489.720877][T11671] arch_do_signal_or_restart+0x8f/0x7a0 [ 489.720911][T11671] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 489.720950][T11671] ? ksys_read+0x1b9/0x240 [ 489.720970][T11671] ? __pfx_ksys_read+0x10/0x10 [ 489.720988][T11671] ? rcu_is_watching+0x12/0xc0 [ 489.721013][T11671] syscall_exit_to_user_mode+0x150/0x2a0 [ 489.721043][T11671] do_syscall_64+0xda/0x230 [ 489.721073][T11671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.721096][T11671] RIP: 0033:0x7f1dd378e969 [ 489.721114][T11671] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 489.721136][T11671] RSP: 002b:00007f1dd46a0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 489.721158][T11671] RAX: 0000000000009650 RBX: 00007f1dd39b6160 RCX: 00007f1dd378e969 [ 489.721173][T11671] RDX: 000000000cefbce6 RSI: 0000000000000000 RDI: 0000000000000009 [ 489.721186][T11671] RBP: 00007f1dd3810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 489.721200][T11671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 489.721214][T11671] R13: 0000000000000000 R14: 00007f1dd39b6160 R15: 00007ffce69b9538 [ 489.721241][T11671] [ 493.349053][T11734] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 493.975089][T11741] program syz.0.1516 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 494.871601][T11755] FAULT_INJECTION: forcing a failure. [ 494.871601][T11755] name fail_futex, interval 1, probability 0, space 0, times 0 [ 494.963105][T11755] CPU: 0 UID: 0 PID: 11755 Comm: syz.2.1520 Not tainted 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(full) [ 494.963141][T11755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 494.963155][T11755] Call Trace: [ 494.963162][T11755] [ 494.963170][T11755] dump_stack_lvl+0x16c/0x1f0 [ 494.963204][T11755] should_fail_ex+0x512/0x640 [ 494.963240][T11755] get_futex_key+0x49e/0x1000 [ 494.963266][T11755] ? __pfx_get_futex_key+0x10/0x10 [ 494.963298][T11755] futex_wake+0xe7/0x4e0 [ 494.963323][T11755] ? rcu_is_watching+0x12/0xc0 [ 494.963347][T11755] ? __pfx_futex_wake+0x10/0x10 [ 494.963388][T11755] do_futex+0x1e3/0x350 [ 494.963411][T11755] ? __pfx_do_futex+0x10/0x10 [ 494.963433][T11755] ? __might_fault+0xe3/0x190 [ 494.963466][T11755] mm_release+0x24e/0x300 [ 494.963492][T11755] do_exit+0x898/0x2c30 [ 494.963522][T11755] ? __pfx_futex_wake_mark+0x10/0x10 [ 494.963555][T11755] ? __pfx_do_exit+0x10/0x10 [ 494.963585][T11755] ? do_raw_spin_lock+0x12c/0x2b0 [ 494.963618][T11755] ? find_held_lock+0x2b/0x80 [ 494.963643][T11755] do_group_exit+0xd3/0x2a0 [ 494.963676][T11755] get_signal+0x2673/0x26d0 [ 494.963712][T11755] ? __pfx_get_signal+0x10/0x10 [ 494.963737][T11755] ? do_futex+0x122/0x350 [ 494.963760][T11755] ? __pfx_do_futex+0x10/0x10 [ 494.963786][T11755] arch_do_signal_or_restart+0x8f/0x7a0 [ 494.963827][T11755] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 494.963868][T11755] ? __pfx___do_sys_close_range+0x10/0x10 [ 494.963890][T11755] ? rcu_is_watching+0x12/0xc0 [ 494.963915][T11755] syscall_exit_to_user_mode+0x150/0x2a0 [ 494.963944][T11755] do_syscall_64+0xda/0x230 [ 494.963975][T11755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.963998][T11755] RIP: 0033:0x7fe11eb8e969 [ 494.964016][T11755] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 494.964039][T11755] RSP: 002b:00007fe11fa350e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 494.964065][T11755] RAX: fffffffffffffe00 RBX: 00007fe11edb5fa8 RCX: 00007fe11eb8e969 [ 494.964080][T11755] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fe11edb5fa8 [ 494.964094][T11755] RBP: 00007fe11edb5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 494.964108][T11755] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe11edb5fac [ 494.964122][T11755] R13: 0000000000000000 R14: 00007fffb1d6beb0 R15: 00007fffb1d6bf98 [ 494.964150][T11755] [ 496.630138][ T5141] Bluetooth: hci1: unexpected subevent 0x01 length: 120 > 18 [ 496.638564][ T5141] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 497.252749][T11798] openvswitch: netlink: Key type 261 is out of range max 32 [ 499.068236][ T30] audit: type=1326 audit(6040651181.202:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11822 comm="syz.2.1539" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe11eb8e969 code=0x0 [ 499.830130][ T5141] Bluetooth: hci3: unexpected subevent 0x01 length: 120 > 18 [ 499.844276][ T5141] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 500.450808][T11857] FAULT_INJECTION: forcing a failure. [ 500.450808][T11857] name fail_futex, interval 1, probability 0, space 0, times 0 [ 500.558706][T11857] CPU: 0 UID: 0 PID: 11857 Comm: syz.2.1547 Not tainted 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(full) [ 500.558742][T11857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 500.558756][T11857] Call Trace: [ 500.558763][T11857] [ 500.558772][T11857] dump_stack_lvl+0x16c/0x1f0 [ 500.558804][T11857] should_fail_ex+0x512/0x640 [ 500.558840][T11857] get_futex_key+0x49e/0x1000 [ 500.558867][T11857] ? __pfx_get_futex_key+0x10/0x10 [ 500.558899][T11857] futex_wake+0xe7/0x4e0 [ 500.558924][T11857] ? rcu_is_watching+0x12/0xc0 [ 500.558947][T11857] ? __pfx_futex_wake+0x10/0x10 [ 500.558988][T11857] do_futex+0x1e3/0x350 [ 500.559012][T11857] ? __pfx_do_futex+0x10/0x10 [ 500.559034][T11857] ? __might_fault+0xe3/0x190 [ 500.559067][T11857] mm_release+0x24e/0x300 [ 500.559092][T11857] do_exit+0x898/0x2c30 [ 500.559121][T11857] ? __pfx_futex_wake_mark+0x10/0x10 [ 500.559155][T11857] ? __pfx_do_exit+0x10/0x10 [ 500.559194][T11857] ? do_raw_spin_lock+0x12c/0x2b0 [ 500.559228][T11857] ? find_held_lock+0x2b/0x80 [ 500.559253][T11857] do_group_exit+0xd3/0x2a0 [ 500.559287][T11857] get_signal+0x2673/0x26d0 [ 500.559322][T11857] ? __pfx_get_signal+0x10/0x10 [ 500.559347][T11857] ? do_futex+0x122/0x350 [ 500.559370][T11857] ? __pfx_do_futex+0x10/0x10 [ 500.559400][T11857] arch_do_signal_or_restart+0x8f/0x7a0 [ 500.559434][T11857] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 500.559475][T11857] ? __pfx___do_sys_close_range+0x10/0x10 [ 500.559496][T11857] ? rcu_is_watching+0x12/0xc0 [ 500.559521][T11857] syscall_exit_to_user_mode+0x150/0x2a0 [ 500.559551][T11857] do_syscall_64+0xda/0x230 [ 500.559581][T11857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.559604][T11857] RIP: 0033:0x7fe11eb8e969 [ 500.559622][T11857] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 500.559644][T11857] RSP: 002b:00007fe11fa350e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 500.559666][T11857] RAX: fffffffffffffe00 RBX: 00007fe11edb5fa8 RCX: 00007fe11eb8e969 [ 500.559681][T11857] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fe11edb5fa8 [ 500.559695][T11857] RBP: 00007fe11edb5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 500.559708][T11857] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe11edb5fac [ 500.559722][T11857] R13: 0000000000000000 R14: 00007fffb1d6beb0 R15: 00007fffb1d6bf98 [ 500.559750][T11857] [ 501.617467][T11878] FAULT_INJECTION: forcing a failure. [ 501.617467][T11878] name failslab, interval 1, probability 0, space 0, times 0 [ 501.680034][T11878] CPU: 0 UID: 0 PID: 11878 Comm: syz.2.1553 Not tainted 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(full) [ 501.680070][T11878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 501.680085][T11878] Call Trace: [ 501.680092][T11878] [ 501.680102][T11878] dump_stack_lvl+0x16c/0x1f0 [ 501.680134][T11878] should_fail_ex+0x512/0x640 [ 501.680167][T11878] ? __kmalloc_cache_node_noprof+0x5a/0x420 [ 501.680196][T11878] should_failslab+0xc2/0x120 [ 501.680224][T11878] __kmalloc_cache_node_noprof+0x6d/0x420 [ 501.680249][T11878] ? __get_vm_area_node+0x101/0x300 [ 501.680289][T11878] __get_vm_area_node+0x101/0x300 [ 501.680329][T11878] __vmalloc_node_range_noprof+0x277/0x1540 [ 501.680373][T11878] ? n_tty_open+0x1a/0x170 [ 501.680415][T11878] ? n_tty_open+0x1a/0x170 [ 501.680448][T11878] ? __ldsem_down_write_nested+0x10e/0x850 [ 501.680483][T11878] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 501.680529][T11878] ? n_tty_open+0x1a/0x170 [ 501.680561][T11878] vzalloc_noprof+0x6b/0x90 [ 501.680596][T11878] ? n_tty_open+0x1a/0x170 [ 501.680625][T11878] ? __pfx_n_tty_open+0x10/0x10 [ 501.680654][T11878] n_tty_open+0x1a/0x170 [ 501.680683][T11878] ? __pfx_n_tty_open+0x10/0x10 [ 501.680713][T11878] tty_ldisc_open+0x9c/0x120 [ 501.680735][T11878] tty_ldisc_setup+0x40/0x100 [ 501.680760][T11878] tty_init_dev.part.0+0x1ec/0x500 [ 501.680791][T11878] tty_open+0xa50/0xf90 [ 501.680825][T11878] ? __pfx_tty_open+0x10/0x10 [ 501.680853][T11878] ? chrdev_open+0x10b/0x6a0 [ 501.680881][T11878] ? __pfx_tty_open+0x10/0x10 [ 501.680908][T11878] chrdev_open+0x231/0x6a0 [ 501.680931][T11878] ? __pfx_apparmor_file_open+0x10/0x10 [ 501.680960][T11878] ? __pfx_chrdev_open+0x10/0x10 [ 501.680987][T11878] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 501.681033][T11878] do_dentry_open+0x741/0x1c10 [ 501.681057][T11878] ? __pfx_chrdev_open+0x10/0x10 [ 501.681087][T11878] vfs_open+0x82/0x3f0 [ 501.681120][T11878] path_openat+0x1e5e/0x2d40 [ 501.681160][T11878] ? __pfx_path_openat+0x10/0x10 [ 501.681190][T11878] do_filp_open+0x20b/0x470 [ 501.681212][T11878] ? __pfx_do_filp_open+0x10/0x10 [ 501.681256][T11878] ? alloc_fd+0x471/0x7d0 [ 501.681301][T11878] do_sys_openat2+0x11b/0x1d0 [ 501.681331][T11878] ? __pfx_do_sys_openat2+0x10/0x10 [ 501.681364][T11878] ? __sock_release+0x20b/0x270 [ 501.681404][T11878] __x64_sys_openat+0x174/0x210 [ 501.681435][T11878] ? __pfx___x64_sys_openat+0x10/0x10 [ 501.681469][T11878] ? rcu_is_watching+0x12/0xc0 [ 501.681499][T11878] do_syscall_64+0xcd/0x230 [ 501.681531][T11878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.681554][T11878] RIP: 0033:0x7fe11eb8e969 [ 501.681573][T11878] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 501.681596][T11878] RSP: 002b:00007fe11fa35038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 501.681617][T11878] RAX: ffffffffffffffda RBX: 00007fe11edb5fa0 RCX: 00007fe11eb8e969 [ 501.681633][T11878] RDX: 0000000000000800 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 501.681648][T11878] RBP: 00007fe11ec10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 501.681662][T11878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 501.681676][T11878] R13: 0000000000000000 R14: 00007fe11edb5fa0 R15: 00007fffb1d6bf98 [ 501.681705][T11878] [ 502.187064][T11878] syz.2.1553: vmalloc error: size 9128, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 502.203893][T11878] CPU: 0 UID: 0 PID: 11878 Comm: syz.2.1553 Not tainted 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(full) [ 502.203927][T11878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 502.203941][T11878] Call Trace: [ 502.203948][T11878] [ 502.203962][T11878] dump_stack_lvl+0x16c/0x1f0 [ 502.203996][T11878] warn_alloc+0x248/0x3a0 [ 502.204024][T11878] ? __pfx_warn_alloc+0x10/0x10 [ 502.204055][T11878] ? __kmalloc_cache_node_noprof+0x272/0x420 [ 502.204084][T11878] ? __kasan_kmalloc+0x8a/0xb0 [ 502.204110][T11878] ? __get_vm_area_node+0x1e5/0x300 [ 502.204151][T11878] __vmalloc_node_range_noprof+0xd31/0x1540 [ 502.204199][T11878] ? n_tty_open+0x1a/0x170 [ 502.204234][T11878] ? __ldsem_down_write_nested+0x10e/0x850 [ 502.204269][T11878] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 502.204315][T11878] ? n_tty_open+0x1a/0x170 [ 502.204347][T11878] vzalloc_noprof+0x6b/0x90 [ 502.204383][T11878] ? n_tty_open+0x1a/0x170 [ 502.204412][T11878] ? __pfx_n_tty_open+0x10/0x10 [ 502.204441][T11878] n_tty_open+0x1a/0x170 [ 502.204470][T11878] ? __pfx_n_tty_open+0x10/0x10 [ 502.204500][T11878] tty_ldisc_open+0x9c/0x120 [ 502.204523][T11878] tty_ldisc_setup+0x40/0x100 [ 502.204547][T11878] tty_init_dev.part.0+0x1ec/0x500 [ 502.204578][T11878] tty_open+0xa50/0xf90 [ 502.204612][T11878] ? __pfx_tty_open+0x10/0x10 [ 502.204641][T11878] ? chrdev_open+0x10b/0x6a0 [ 502.204668][T11878] ? __pfx_tty_open+0x10/0x10 [ 502.204696][T11878] chrdev_open+0x231/0x6a0 [ 502.204719][T11878] ? __pfx_apparmor_file_open+0x10/0x10 [ 502.204748][T11878] ? __pfx_chrdev_open+0x10/0x10 [ 502.204775][T11878] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 502.204816][T11878] do_dentry_open+0x741/0x1c10 [ 502.204839][T11878] ? __pfx_chrdev_open+0x10/0x10 [ 502.204869][T11878] vfs_open+0x82/0x3f0 [ 502.204903][T11878] path_openat+0x1e5e/0x2d40 [ 502.204936][T11878] ? __pfx_path_openat+0x10/0x10 [ 502.204974][T11878] do_filp_open+0x20b/0x470 [ 502.204996][T11878] ? __pfx_do_filp_open+0x10/0x10 [ 502.205041][T11878] ? alloc_fd+0x471/0x7d0 [ 502.205086][T11878] do_sys_openat2+0x11b/0x1d0 [ 502.205116][T11878] ? __pfx_do_sys_openat2+0x10/0x10 [ 502.205145][T11878] ? __sock_release+0x20b/0x270 [ 502.205180][T11878] __x64_sys_openat+0x174/0x210 [ 502.205212][T11878] ? __pfx___x64_sys_openat+0x10/0x10 [ 502.205245][T11878] ? rcu_is_watching+0x12/0xc0 [ 502.205275][T11878] do_syscall_64+0xcd/0x230 [ 502.205307][T11878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.205330][T11878] RIP: 0033:0x7fe11eb8e969 [ 502.205349][T11878] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 502.205373][T11878] RSP: 002b:00007fe11fa35038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 502.205394][T11878] RAX: ffffffffffffffda RBX: 00007fe11edb5fa0 RCX: 00007fe11eb8e969 [ 502.205409][T11878] RDX: 0000000000000800 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 502.205424][T11878] RBP: 00007fe11ec10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 502.205438][T11878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 502.205452][T11878] R13: 0000000000000000 R14: 00007fe11edb5fa0 R15: 00007fffb1d6bf98 [ 502.205481][T11878] [ 502.864379][T11878] Mem-Info: [ 502.867838][T11878] active_anon:15054 inactive_anon:2 isolated_anon:0 [ 502.867838][T11878] active_file:18246 inactive_file:39262 isolated_file:0 [ 502.867838][T11878] unevictable:768 dirty:609 writeback:0 [ 502.867838][T11878] slab_reclaimable:10901 slab_unreclaimable:101737 [ 502.867838][T11878] mapped:24345 shmem:2446 pagetables:949 [ 502.867838][T11878] sec_pagetables:0 bounce:0 [ 502.867838][T11878] kernel_misc_reclaimable:0 [ 502.867838][T11878] free:1323113 free_pcp:342 free_cma:0 [ 502.918244][T11878] Node 0 active_anon:60216kB inactive_anon:8kB active_file:72984kB inactive_file:156976kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:97380kB dirty:2436kB writeback:0kB shmem:7864kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10320kB pagetables:3796kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 503.009901][T11878] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1920kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 503.068345][T11878] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 503.100112][T11878] lowmem_reserve[]: 0 2484 2486 2486 2486 [ 503.110477][T11878] Node 0 DMA32 free:1371432kB boost:0kB min:34108kB low:42632kB high:51156kB reserved_highatomic:0KB active_anon:60588kB inactive_anon:8kB active_file:72984kB inactive_file:155132kB unevictable:1536kB writepending:2436kB present:3129332kB managed:2544212kB mlocked:0kB bounce:0kB free_pcp:960kB local_pcp:960kB free_cma:0kB [ 503.156448][T11878] lowmem_reserve[]: 0 0 1 1 1 [ 503.162865][T11878] Node 0 Normal free:12kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1844kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 503.202824][T11878] lowmem_reserve[]: 0 0 0 0 0 [ 503.209750][T11878] Node 1 Normal free:3905512kB boost:0kB min:55768kB low:69708kB high:83648kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:284kB local_pcp:284kB free_cma:0kB [ 503.267576][T11878] lowmem_reserve[]: 0 0 0 0 0 [ 503.291530][T11878] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 503.349167][T11878] Node 0 DMA32: 2827*4kB (UME) 2295*8kB (UME) 1928*16kB (UM) 1082*32kB (UME) 828*64kB (UM) 357*128kB (UME) 121*256kB (UME) 62*512kB (ME) 16*1024kB (ME) 5*2048kB (ME) 266*4096kB (UM) = 1372708kB [ 503.451851][T11878] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 503.533798][T11878] Node 1 Normal: 154*4kB (UME) 62*8kB (UME) 51*16kB (UME) 217*32kB (UME) 101*64kB (UME) 40*128kB (UME) 16*256kB (UM) 6*512kB (UM) 3*1024kB (UM) 2*2048kB (U) 945*4096kB (UME) = 3905512kB [ 503.612765][T11878] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 503.656582][T11878] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 503.698377][T11878] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 503.737895][T11878] Node 1 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 503.784763][T11878] 59956 total pagecache pages [ 503.789951][T11878] 2 pages in swap cache [ 503.821785][T11878] Free swap = 124988kB [ 503.842080][T11878] Total swap = 124996kB [ 503.859190][T11878] 2097051 pages RAM [ 503.874758][T11878] 0 pages HighMem/MovableOnly [ 503.898324][T11878] 428892 pages reserved [ 503.923046][T11878] 0 pages cma reserved [ 503.942138][T11878] tty tty12: ldisc open failed (-12), clearing slot 11 [ 503.974713][T11884] tty tty5: ldisc open failed (-12), clearing slot 4 [ 506.098609][T11922] FAULT_INJECTION: forcing a failure. [ 506.098609][T11922] name failslab, interval 1, probability 0, space 0, times 0 [ 506.302582][T11922] CPU: 0 UID: 0 PID: 11922 Comm: syz.0.1570 Not tainted 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(full) [ 506.302616][T11922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 506.302631][T11922] Call Trace: [ 506.302638][T11922] [ 506.302647][T11922] dump_stack_lvl+0x16c/0x1f0 [ 506.302680][T11922] should_fail_ex+0x512/0x640 [ 506.302712][T11922] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 506.302741][T11922] should_failslab+0xc2/0x120 [ 506.302769][T11922] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 506.302794][T11922] ? __proc_create+0xc3/0x8c0 [ 506.302818][T11922] ? __proc_create+0x2ce/0x8c0 [ 506.302847][T11922] __proc_create+0x2ce/0x8c0 [ 506.302872][T11922] ? __pfx___proc_create+0x10/0x10 [ 506.302897][T11922] ? find_held_lock+0x2b/0x80 [ 506.302921][T11922] ? mark_held_locks+0x49/0x80 [ 506.302953][T11922] proc_create_reg+0x7d/0x180 [ 506.302981][T11922] proc_create_net_data+0x8e/0x1b0 [ 506.303008][T11922] ? __pfx_proc_create_net_data+0x10/0x10 [ 506.303035][T11922] ? __pfx___netlink_kernel_create+0x10/0x10 [ 506.303067][T11922] fib_proc_init+0x58/0x1b0 [ 506.303103][T11922] fib_net_init+0x2af/0x3f0 [ 506.303123][T11922] ? __pfx___register_sysctl_table+0x10/0x10 [ 506.303150][T11922] ? __pfx_fib_net_init+0x10/0x10 [ 506.303171][T11922] ? lockdep_init_map_type+0x5c/0x280 [ 506.303201][T11922] ? __pfx_nl_fib_input+0x10/0x10 [ 506.303227][T11922] ? devinet_init_net+0x5c2/0x910 [ 506.303255][T11922] ? __pfx_fib_net_init+0x10/0x10 [ 506.303275][T11922] ops_init+0x1df/0x5f0 [ 506.303302][T11922] setup_net+0x21e/0x850 [ 506.303328][T11922] ? __pfx_setup_net+0x10/0x10 [ 506.303350][T11922] ? lockdep_init_map_type+0x5c/0x280 [ 506.303380][T11922] ? __pfx_down_read_killable+0x10/0x10 [ 506.303416][T11922] ? debug_mutex_init+0x37/0x70 [ 506.303456][T11922] copy_net_ns+0x2a6/0x5f0 [ 506.303485][T11922] create_new_namespaces+0x3ea/0xad0 [ 506.303517][T11922] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 506.303553][T11922] ksys_unshare+0x45b/0xa40 [ 506.303586][T11922] ? __pfx_ksys_unshare+0x10/0x10 [ 506.303619][T11922] ? xfd_validate_state+0x5d/0x180 [ 506.303658][T11922] ? rcu_is_watching+0x12/0xc0 [ 506.303685][T11922] __x64_sys_unshare+0x31/0x40 [ 506.303716][T11922] do_syscall_64+0xcd/0x230 [ 506.303747][T11922] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.303771][T11922] RIP: 0033:0x7f1dd378e969 [ 506.303789][T11922] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 506.303812][T11922] RSP: 002b:00007f1dd46c1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 506.303834][T11922] RAX: ffffffffffffffda RBX: 00007f1dd39b6080 RCX: 00007f1dd378e969 [ 506.303849][T11922] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 506.303864][T11922] RBP: 00007f1dd3810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 506.303878][T11922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 506.303891][T11922] R13: 0000000000000000 R14: 00007f1dd39b6080 R15: 00007ffce69b9538 [ 506.303921][T11922] [ 507.165211][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 507.172249][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.356888][T11934] Invalid ELF header magic: != ELF [ 508.480102][ T5141] Bluetooth: hci1: unexpected subevent 0x01 length: 120 > 18 [ 508.490646][ T5141] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 509.477332][T11967] FAULT_INJECTION: forcing a failure. [ 509.477332][T11967] name fail_futex, interval 1, probability 0, space 0, times 0 [ 509.558313][T11967] CPU: 0 UID: 0 PID: 11967 Comm: syz.0.1581 Not tainted 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(full) [ 509.558349][T11967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 509.558363][T11967] Call Trace: [ 509.558370][T11967] [ 509.558379][T11967] dump_stack_lvl+0x16c/0x1f0 [ 509.558413][T11967] should_fail_ex+0x512/0x640 [ 509.558450][T11967] get_futex_key+0x49e/0x1000 [ 509.558477][T11967] ? __pfx_get_futex_key+0x10/0x10 [ 509.558504][T11967] ? do_raw_spin_lock+0x12c/0x2b0 [ 509.558539][T11967] ? find_held_lock+0x2b/0x80 [ 509.558563][T11967] futex_wait_setup+0x78/0x290 [ 509.558601][T11967] __futex_wait+0x266/0x3c0 [ 509.558633][T11967] ? __pfx___futex_wait+0x10/0x10 [ 509.558669][T11967] ? __pfx_futex_wake_mark+0x10/0x10 [ 509.558706][T11967] ? rcu_is_watching+0x12/0xc0 [ 509.558731][T11967] futex_wait+0xe8/0x380 [ 509.558761][T11967] ? __pfx_futex_wait+0x10/0x10 [ 509.558806][T11967] do_futex+0x229/0x350 [ 509.558831][T11967] ? __pfx_do_futex+0x10/0x10 [ 509.558856][T11967] ? find_held_lock+0x2b/0x80 [ 509.558883][T11967] __x64_sys_futex+0x1e0/0x4c0 [ 509.558909][T11967] ? __do_sys_close_range+0x278/0x730 [ 509.558933][T11967] ? __pfx___x64_sys_futex+0x10/0x10 [ 509.558959][T11967] ? __pfx___do_sys_close_range+0x10/0x10 [ 509.558980][T11967] ? rcu_is_watching+0x12/0xc0 [ 509.559009][T11967] do_syscall_64+0xcd/0x230 [ 509.559041][T11967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 509.559064][T11967] RIP: 0033:0x7f1dd378e969 [ 509.559081][T11967] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 509.559104][T11967] RSP: 002b:00007f1dd46e20e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 509.559126][T11967] RAX: ffffffffffffffda RBX: 00007f1dd39b5fa8 RCX: 00007f1dd378e969 [ 509.559141][T11967] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f1dd39b5fa8 [ 509.559155][T11967] RBP: 00007f1dd39b5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 509.559169][T11967] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1dd39b5fac [ 509.559183][T11967] R13: 0000000000000000 R14: 00007ffce69b9450 R15: 00007ffce69b9538 [ 509.559217][T11967] [ 510.592605][T11983] FAULT_INJECTION: forcing a failure. [ 510.592605][T11983] name failslab, interval 1, probability 0, space 0, times 0 [ 510.751008][T11983] CPU: 0 UID: 0 PID: 11983 Comm: syz.0.1587 Not tainted 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(full) [ 510.751043][T11983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 510.751057][T11983] Call Trace: [ 510.751065][T11983] [ 510.751074][T11983] dump_stack_lvl+0x16c/0x1f0 [ 510.751107][T11983] should_fail_ex+0x512/0x640 [ 510.751140][T11983] ? fs_reclaim_acquire+0xae/0x150 [ 510.751177][T11983] should_failslab+0xc2/0x120 [ 510.751206][T11983] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 510.751232][T11983] ? security_inode_alloc+0x3b/0x2b0 [ 510.751261][T11983] security_inode_alloc+0x3b/0x2b0 [ 510.751293][T11983] inode_init_always_gfp+0xce4/0x1030 [ 510.751336][T11983] alloc_inode+0x86/0x240 [ 510.751364][T11983] sock_alloc+0x40/0x280 [ 510.751391][T11983] sock_create_lite+0x82/0x120 [ 510.751419][T11983] __netlink_kernel_create+0xbd/0x750 [ 510.751442][T11983] ? __kvmalloc_node_noprof+0x296/0x600 [ 510.751467][T11983] ? __pfx___netlink_kernel_create+0x10/0x10 [ 510.751501][T11983] fib_net_init+0x26d/0x3f0 [ 510.751523][T11983] ? __pfx___register_sysctl_table+0x10/0x10 [ 510.751550][T11983] ? __pfx_fib_net_init+0x10/0x10 [ 510.751571][T11983] ? lockdep_init_map_type+0x5c/0x280 [ 510.751603][T11983] ? __pfx_nl_fib_input+0x10/0x10 [ 510.751629][T11983] ? devinet_init_net+0x5c2/0x910 [ 510.751657][T11983] ? __pfx_fib_net_init+0x10/0x10 [ 510.751677][T11983] ops_init+0x1df/0x5f0 [ 510.751705][T11983] setup_net+0x21e/0x850 [ 510.751731][T11983] ? __pfx_setup_net+0x10/0x10 [ 510.751753][T11983] ? lockdep_init_map_type+0x5c/0x280 [ 510.751783][T11983] ? __pfx_down_read_killable+0x10/0x10 [ 510.751819][T11983] ? debug_mutex_init+0x37/0x70 [ 510.751859][T11983] copy_net_ns+0x2a6/0x5f0 [ 510.751889][T11983] create_new_namespaces+0x3ea/0xad0 [ 510.751921][T11983] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 510.751950][T11983] ksys_unshare+0x45b/0xa40 [ 510.751982][T11983] ? __pfx_ksys_unshare+0x10/0x10 [ 510.752012][T11983] ? xfd_validate_state+0x5d/0x180 [ 510.752071][T11983] ? rcu_is_watching+0x12/0xc0 [ 510.752099][T11983] __x64_sys_unshare+0x31/0x40 [ 510.752131][T11983] do_syscall_64+0xcd/0x230 [ 510.752162][T11983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.752185][T11983] RIP: 0033:0x7f1dd378e969 [ 510.752203][T11983] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 510.752226][T11983] RSP: 002b:00007f1dd46c1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 510.752248][T11983] RAX: ffffffffffffffda RBX: 00007f1dd39b6080 RCX: 00007f1dd378e969 [ 510.752263][T11983] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 510.752277][T11983] RBP: 00007f1dd3810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 510.752297][T11983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 510.752311][T11983] R13: 0000000000000000 R14: 00007f1dd39b6080 R15: 00007ffce69b9538 [ 510.752340][T11983] [ 513.638060][ T30] audit: type=1326 audit(6040651195.772:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12036 comm="syz.2.1605" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe11eb8e969 code=0x0 [ 514.419594][ T5836] Bluetooth: hci0: unexpected subevent 0x01 length: 120 > 18 [ 514.436283][T12042] FAULT_INJECTION: forcing a failure. [ 514.436283][T12042] name fail_futex, interval 1, probability 0, space 0, times 0 [ 514.450557][ T5836] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 514.506762][T12042] CPU: 0 UID: 0 PID: 12042 Comm: syz.2.1605 Not tainted 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(full) [ 514.506796][T12042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 514.506809][T12042] Call Trace: [ 514.506816][T12042] [ 514.506825][T12042] dump_stack_lvl+0x16c/0x1f0 [ 514.506865][T12042] should_fail_ex+0x512/0x640 [ 514.506902][T12042] get_futex_key+0xabc/0x1000 [ 514.506929][T12042] ? __pfx_get_futex_key+0x10/0x10 [ 514.506961][T12042] futex_wake+0xe7/0x4e0 [ 514.506987][T12042] ? rcu_is_watching+0x12/0xc0 [ 514.507010][T12042] ? __pfx_futex_wake+0x10/0x10 [ 514.507051][T12042] do_futex+0x1e3/0x350 [ 514.507075][T12042] ? __pfx_do_futex+0x10/0x10 [ 514.507096][T12042] ? __might_fault+0xe3/0x190 [ 514.507129][T12042] mm_release+0x24e/0x300 [ 514.507155][T12042] do_exit+0x898/0x2c30 [ 514.507184][T12042] ? __pfx___might_resched+0x10/0x10 [ 514.507214][T12042] ? __pfx_do_exit+0x10/0x10 [ 514.507243][T12042] ? do_raw_spin_lock+0x12c/0x2b0 [ 514.507277][T12042] ? find_held_lock+0x2b/0x80 [ 514.507302][T12042] do_group_exit+0xd3/0x2a0 [ 514.507335][T12042] get_signal+0x2673/0x26d0 [ 514.507371][T12042] ? __pfx_get_signal+0x10/0x10 [ 514.507397][T12042] ? task_work_add+0x1d5/0x360 [ 514.507435][T12042] arch_do_signal_or_restart+0x8f/0x7a0 [ 514.507469][T12042] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 514.507508][T12042] ? ksys_read+0x1b9/0x240 [ 514.507528][T12042] ? __pfx_ksys_read+0x10/0x10 [ 514.507546][T12042] ? rcu_is_watching+0x12/0xc0 [ 514.507571][T12042] syscall_exit_to_user_mode+0x150/0x2a0 [ 514.507601][T12042] do_syscall_64+0xda/0x230 [ 514.507636][T12042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.507659][T12042] RIP: 0033:0x7fe11eb8e969 [ 514.507677][T12042] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 514.507699][T12042] RSP: 002b:00007fe11f9f3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 514.507721][T12042] RAX: 000000000000d9c4 RBX: 00007fe11edb6160 RCX: 00007fe11eb8e969 [ 514.507736][T12042] RDX: 000000000cefbce6 RSI: 0000000000000000 RDI: 0000000000000009 [ 514.507749][T12042] RBP: 00007fe11ec10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 514.507763][T12042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 514.507776][T12042] R13: 0000000000000000 R14: 00007fe11edb6160 R15: 00007fffb1d6bf98 [ 514.507804][T12042] [ 515.730017][T12082] FAULT_INJECTION: forcing a failure. [ 515.730017][T12082] name failslab, interval 1, probability 0, space 0, times 0 [ 515.820338][T12082] CPU: 0 UID: 0 PID: 12082 Comm: syz.0.1618 Not tainted 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(full) [ 515.820373][T12082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 515.820388][T12082] Call Trace: [ 515.820395][T12082] [ 515.820405][T12082] dump_stack_lvl+0x16c/0x1f0 [ 515.820439][T12082] should_fail_ex+0x512/0x640 [ 515.820472][T12082] ? __kmalloc_cache_node_noprof+0x5a/0x420 [ 515.820508][T12082] should_failslab+0xc2/0x120 [ 515.820537][T12082] __kmalloc_cache_node_noprof+0x6d/0x420 [ 515.820563][T12082] ? __get_vm_area_node+0x101/0x300 [ 515.820602][T12082] __get_vm_area_node+0x101/0x300 [ 515.820641][T12082] __vmalloc_node_range_noprof+0x277/0x1540 [ 515.820679][T12082] ? n_tty_open+0x1a/0x170 [ 515.820719][T12082] ? n_tty_open+0x1a/0x170 [ 515.820752][T12082] ? __ldsem_down_write_nested+0x10e/0x850 [ 515.820786][T12082] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 515.820832][T12082] ? n_tty_open+0x1a/0x170 [ 515.820862][T12082] vzalloc_noprof+0x6b/0x90 [ 515.820897][T12082] ? n_tty_open+0x1a/0x170 [ 515.820926][T12082] ? __pfx_n_tty_open+0x10/0x10 [ 515.820954][T12082] n_tty_open+0x1a/0x170 [ 515.820984][T12082] ? __pfx_n_tty_open+0x10/0x10 [ 515.821013][T12082] tty_ldisc_open+0x9c/0x120 [ 515.821035][T12082] tty_ldisc_setup+0x40/0x100 [ 515.821059][T12082] tty_init_dev.part.0+0x1ec/0x500 [ 515.821090][T12082] tty_open+0xa50/0xf90 [ 515.821123][T12082] ? __pfx_tty_open+0x10/0x10 [ 515.821151][T12082] ? chrdev_open+0x10b/0x6a0 [ 515.821179][T12082] ? __pfx_tty_open+0x10/0x10 [ 515.821206][T12082] chrdev_open+0x231/0x6a0 [ 515.821229][T12082] ? __pfx_apparmor_file_open+0x10/0x10 [ 515.821258][T12082] ? __pfx_chrdev_open+0x10/0x10 [ 515.821284][T12082] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 515.821325][T12082] do_dentry_open+0x741/0x1c10 [ 515.821348][T12082] ? __pfx_chrdev_open+0x10/0x10 [ 515.821378][T12082] vfs_open+0x82/0x3f0 [ 515.821411][T12082] path_openat+0x1e5e/0x2d40 [ 515.821444][T12082] ? __pfx_path_openat+0x10/0x10 [ 515.821474][T12082] do_filp_open+0x20b/0x470 [ 515.821495][T12082] ? __pfx_do_filp_open+0x10/0x10 [ 515.821545][T12082] ? alloc_fd+0x471/0x7d0 [ 515.821589][T12082] do_sys_openat2+0x11b/0x1d0 [ 515.821619][T12082] ? __pfx_do_sys_openat2+0x10/0x10 [ 515.821648][T12082] ? __sock_release+0x20b/0x270 [ 515.821684][T12082] __x64_sys_openat+0x174/0x210 [ 515.821715][T12082] ? __pfx___x64_sys_openat+0x10/0x10 [ 515.821747][T12082] ? rcu_is_watching+0x12/0xc0 [ 515.821776][T12082] do_syscall_64+0xcd/0x230 [ 515.821808][T12082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.821832][T12082] RIP: 0033:0x7f1dd378e969 [ 515.821850][T12082] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 515.821874][T12082] RSP: 002b:00007f1dd46e2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 515.821896][T12082] RAX: ffffffffffffffda RBX: 00007f1dd39b5fa0 RCX: 00007f1dd378e969 [ 515.821911][T12082] RDX: 0000000000000800 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 515.821926][T12082] RBP: 00007f1dd3810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 515.821940][T12082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 515.821953][T12082] R13: 0000000000000000 R14: 00007f1dd39b5fa0 R15: 00007ffce69b9538 [ 515.821982][T12082] [ 515.821993][T12082] syz.0.1618: vmalloc error: size 9128, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 517.239119][T12104] kstrtoul() returned -22 for lu_gp_id [ 517.288785][ T30] audit: type=1800 audit(6040651199.372:26): pid=12104 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1625" name="lu_gp_id" dev="configfs" ino=33863 res=0 errno=0 [ 517.400432][T12082] ,cpuset=/,mems_allowed=0-1 [ 517.428072][T12082] CPU: 0 UID: 0 PID: 12082 Comm: syz.0.1618 Not tainted 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(full) [ 517.428107][T12082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 517.428122][T12082] Call Trace: [ 517.428129][T12082] [ 517.428138][T12082] dump_stack_lvl+0x16c/0x1f0 [ 517.428171][T12082] warn_alloc+0x248/0x3a0 [ 517.428199][T12082] ? __pfx_warn_alloc+0x10/0x10 [ 517.428225][T12082] ? __kmalloc_cache_node_noprof+0x272/0x420 [ 517.428254][T12082] ? __kasan_kmalloc+0x8a/0xb0 [ 517.428279][T12082] ? __get_vm_area_node+0x1e5/0x300 [ 517.428321][T12082] __vmalloc_node_range_noprof+0xd31/0x1540 [ 517.428374][T12082] ? n_tty_open+0x1a/0x170 [ 517.428409][T12082] ? __ldsem_down_write_nested+0x10e/0x850 [ 517.428444][T12082] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 517.428490][T12082] ? n_tty_open+0x1a/0x170 [ 517.428521][T12082] vzalloc_noprof+0x6b/0x90 [ 517.428556][T12082] ? n_tty_open+0x1a/0x170 [ 517.428585][T12082] ? __pfx_n_tty_open+0x10/0x10 [ 517.428613][T12082] n_tty_open+0x1a/0x170 [ 517.428642][T12082] ? __pfx_n_tty_open+0x10/0x10 [ 517.428672][T12082] tty_ldisc_open+0x9c/0x120 [ 517.428695][T12082] tty_ldisc_setup+0x40/0x100 [ 517.428719][T12082] tty_init_dev.part.0+0x1ec/0x500 [ 517.428750][T12082] tty_open+0xa50/0xf90 [ 517.428783][T12082] ? __pfx_tty_open+0x10/0x10 [ 517.428811][T12082] ? chrdev_open+0x10b/0x6a0 [ 517.428839][T12082] ? __pfx_tty_open+0x10/0x10 [ 517.428867][T12082] chrdev_open+0x231/0x6a0 [ 517.428890][T12082] ? __pfx_apparmor_file_open+0x10/0x10 [ 517.428919][T12082] ? __pfx_chrdev_open+0x10/0x10 [ 517.428945][T12082] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 517.428986][T12082] do_dentry_open+0x741/0x1c10 [ 517.429010][T12082] ? __pfx_chrdev_open+0x10/0x10 [ 517.429040][T12082] vfs_open+0x82/0x3f0 [ 517.429073][T12082] path_openat+0x1e5e/0x2d40 [ 517.429111][T12082] ? __pfx_path_openat+0x10/0x10 [ 517.429141][T12082] do_filp_open+0x20b/0x470 [ 517.429163][T12082] ? __pfx_do_filp_open+0x10/0x10 [ 517.429206][T12082] ? alloc_fd+0x471/0x7d0 [ 517.429250][T12082] do_sys_openat2+0x11b/0x1d0 [ 517.429280][T12082] ? __pfx_do_sys_openat2+0x10/0x10 [ 517.429308][T12082] ? __sock_release+0x20b/0x270 [ 517.429347][T12082] __x64_sys_openat+0x174/0x210 [ 517.429379][T12082] ? __pfx___x64_sys_openat+0x10/0x10 [ 517.429417][T12082] ? rcu_is_watching+0x12/0xc0 [ 517.429447][T12082] do_syscall_64+0xcd/0x230 [ 517.429478][T12082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.429502][T12082] RIP: 0033:0x7f1dd378e969 [ 517.429519][T12082] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 517.429543][T12082] RSP: 002b:00007f1dd46e2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 517.429564][T12082] RAX: ffffffffffffffda RBX: 00007f1dd39b5fa0 RCX: 00007f1dd378e969 [ 517.429579][T12082] RDX: 0000000000000800 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 517.429594][T12082] RBP: 00007f1dd3810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 517.429608][T12082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 517.429622][T12082] R13: 0000000000000000 R14: 00007f1dd39b5fa0 R15: 00007ffce69b9538 [ 517.429651][T12082] [ 517.807652][T12082] Mem-Info: [ 517.811109][T12082] active_anon:16610 inactive_anon:2 isolated_anon:0 [ 517.811109][T12082] active_file:18419 inactive_file:39300 isolated_file:0 [ 517.811109][T12082] unevictable:768 dirty:655 writeback:0 [ 517.811109][T12082] slab_reclaimable:10954 slab_unreclaimable:102755 [ 517.811109][T12082] mapped:24469 shmem:3472 pagetables:894 [ 517.811109][T12082] sec_pagetables:0 bounce:0 [ 517.811109][T12082] kernel_misc_reclaimable:0 [ 517.811109][T12082] free:1320239 free_pcp:418 free_cma:0 [ 517.861366][T12082] Node 0 active_anon:66440kB inactive_anon:8kB active_file:73676kB inactive_file:157128kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:97876kB dirty:2620kB writeback:0kB shmem:11968kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10224kB pagetables:3576kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 517.898474][T12082] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1920kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 517.934622][T12082] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 517.965854][T12082] lowmem_reserve[]: 0 2484 2486 2486 2486 [ 517.972233][T12082] Node 0 DMA32 free:1359400kB boost:0kB min:34108kB low:42632kB high:51156kB reserved_highatomic:0KB active_anon:66396kB inactive_anon:8kB active_file:73676kB inactive_file:155284kB unevictable:1536kB writepending:2620kB present:3129332kB managed:2544212kB mlocked:0kB bounce:0kB free_pcp:1672kB local_pcp:1672kB free_cma:0kB [ 518.006157][T12082] lowmem_reserve[]: 0 0 1 1 1 [ 518.013544][T12082] Node 0 Normal free:12kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1844kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 518.043699][T12082] lowmem_reserve[]: 0 0 0 0 0 [ 518.048956][T12082] Node 1 Normal free:3906184kB boost:0kB min:55768kB low:69708kB high:83648kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 518.080906][T12082] lowmem_reserve[]: 0 0 0 0 0 [ 518.086326][T12082] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 518.100435][T12082] Node 0 DMA32: 1042*4kB (UME) 1728*8kB (UME) 1864*16kB (UME) 1331*32kB (UME) 764*64kB (UME) 336*128kB (UME) 118*256kB (UM) 64*512kB (UME) 18*1024kB (UME) 5*2048kB (ME) 265*4096kB (UM) = 1359400kB [ 518.123009][T12082] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 518.137511][T12082] Node 1 Normal: 218*4kB (UME) 62*8kB (UME) 51*16kB (UME) 227*32kB (UME) 99*64kB (UME) 42*128kB (UME) 16*256kB (UM) 6*512kB (UM) 3*1024kB (UM) 2*2048kB (U) 945*4096kB (UME) = 3906216kB [ 518.175124][T12082] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 518.196733][T12082] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 518.216554][T12082] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 518.227257][T12082] Node 1 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 518.237598][T12082] 60205 total pagecache pages [ 518.242739][T12082] 2 pages in swap cache [ 518.247527][T12082] Free swap = 123552kB [ 518.252283][T12082] Total swap = 124996kB [ 518.256953][T12082] 2097051 pages RAM [ 518.261146][T12082] 0 pages HighMem/MovableOnly [ 518.266425][T12082] 428892 pages reserved [ 518.271399][T12082] 0 pages cma reserved [ 518.275988][T12082] tty tty12: ldisc open failed (-12), clearing slot 11 [ 518.767563][ T5141] Bluetooth: hci3: unexpected subevent 0x01 length: 120 > 18 [ 518.776825][ T5141] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 519.231222][ T30] audit: type=1326 audit(6040651201.332:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12130 comm="syz.2.1633" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe11eb8e969 code=0x0 [ 521.604631][ T5836] Bluetooth: hci1: unexpected subevent 0x01 length: 120 > 18 [ 521.612808][ T5836] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 522.337864][ T30] audit: type=1326 audit(6040651204.472:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12195 comm="syz.0.1654" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1dd378e969 code=0x0 [ 523.450212][T12201] FAULT_INJECTION: forcing a failure. [ 523.450212][T12201] name fail_futex, interval 1, probability 0, space 0, times 0 [ 523.556608][T12201] CPU: 0 UID: 0 PID: 12201 Comm: syz.0.1654 Not tainted 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(full) [ 523.556643][T12201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 523.556657][T12201] Call Trace: [ 523.556664][T12201] [ 523.556672][T12201] dump_stack_lvl+0x16c/0x1f0 [ 523.556710][T12201] should_fail_ex+0x512/0x640 [ 523.556747][T12201] get_futex_key+0x49e/0x1000 [ 523.556773][T12201] ? __pfx_get_futex_key+0x10/0x10 [ 523.556805][T12201] futex_wake+0xe7/0x4e0 [ 523.556830][T12201] ? rcu_is_watching+0x12/0xc0 [ 523.556853][T12201] ? __pfx_futex_wake+0x10/0x10 [ 523.556893][T12201] do_futex+0x1e3/0x350 [ 523.556917][T12201] ? __pfx_do_futex+0x10/0x10 [ 523.556938][T12201] ? __might_fault+0xe3/0x190 [ 523.556971][T12201] mm_release+0x24e/0x300 [ 523.556997][T12201] do_exit+0x898/0x2c30 [ 523.557025][T12201] ? __pfx___might_resched+0x10/0x10 [ 523.557055][T12201] ? __pfx_do_exit+0x10/0x10 [ 523.557085][T12201] ? do_raw_spin_lock+0x12c/0x2b0 [ 523.557118][T12201] ? find_held_lock+0x2b/0x80 [ 523.557142][T12201] do_group_exit+0xd3/0x2a0 [ 523.557175][T12201] get_signal+0x2673/0x26d0 [ 523.557210][T12201] ? __pfx_get_signal+0x10/0x10 [ 523.557236][T12201] ? task_work_add+0x1d5/0x360 [ 523.557274][T12201] arch_do_signal_or_restart+0x8f/0x7a0 [ 523.557307][T12201] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 523.557345][T12201] ? ksys_read+0x1b9/0x240 [ 523.557365][T12201] ? __pfx_ksys_read+0x10/0x10 [ 523.557384][T12201] ? rcu_is_watching+0x12/0xc0 [ 523.557408][T12201] syscall_exit_to_user_mode+0x150/0x2a0 [ 523.557437][T12201] do_syscall_64+0xda/0x230 [ 523.557467][T12201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 523.557490][T12201] RIP: 0033:0x7f1dd378e969 [ 523.557507][T12201] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 523.557530][T12201] RSP: 002b:00007f1dd46a0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 523.557552][T12201] RAX: 00000000000142b8 RBX: 00007f1dd39b6160 RCX: 00007f1dd378e969 [ 523.557567][T12201] RDX: 000000000cefbce6 RSI: 0000000000000000 RDI: 0000000000000009 [ 523.557581][T12201] RBP: 00007f1dd3810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 523.557595][T12201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 523.557608][T12201] R13: 0000000000000000 R14: 00007f1dd39b6160 R15: 00007ffce69b9538 [ 523.557636][T12201] [ 524.326751][ T5836] Bluetooth: hci3: unexpected subevent 0x01 length: 120 > 18 [ 524.336836][ T5836] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 524.407896][ T5836] Bluetooth: hci1: unexpected subevent 0x01 length: 120 > 18 [ 524.418305][ T5836] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 525.540699][T12245] FAULT_INJECTION: forcing a failure. [ 525.540699][T12245] name failslab, interval 1, probability 0, space 0, times 0 [ 525.702403][T12245] CPU: 0 UID: 0 PID: 12245 Comm: syz.0.1665 Not tainted 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(full) [ 525.702437][T12245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 525.702452][T12245] Call Trace: [ 525.702459][T12245] [ 525.702468][T12245] dump_stack_lvl+0x16c/0x1f0 [ 525.702500][T12245] should_fail_ex+0x512/0x640 [ 525.702533][T12245] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 525.702563][T12245] should_failslab+0xc2/0x120 [ 525.702592][T12245] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 525.702618][T12245] ? sock_alloc_inode+0x25/0x1c0 [ 525.702649][T12245] ? __pfx_sock_alloc_inode+0x10/0x10 [ 525.702675][T12245] sock_alloc_inode+0x25/0x1c0 [ 525.702700][T12245] alloc_inode+0x61/0x240 [ 525.702735][T12245] sock_alloc+0x40/0x280 [ 525.702760][T12245] sock_create_lite+0x82/0x120 [ 525.702788][T12245] __netlink_kernel_create+0xbd/0x750 [ 525.702812][T12245] ? __kvmalloc_node_noprof+0x296/0x600 [ 525.702837][T12245] ? __pfx___netlink_kernel_create+0x10/0x10 [ 525.702870][T12245] fib_net_init+0x26d/0x3f0 [ 525.702891][T12245] ? __pfx___register_sysctl_table+0x10/0x10 [ 525.702918][T12245] ? __pfx_fib_net_init+0x10/0x10 [ 525.702939][T12245] ? lockdep_init_map_type+0x5c/0x280 [ 525.702971][T12245] ? __pfx_nl_fib_input+0x10/0x10 [ 525.702997][T12245] ? devinet_init_net+0x5c2/0x910 [ 525.703025][T12245] ? __pfx_fib_net_init+0x10/0x10 [ 525.703045][T12245] ops_init+0x1df/0x5f0 [ 525.703071][T12245] setup_net+0x21e/0x850 [ 525.703097][T12245] ? __pfx_setup_net+0x10/0x10 [ 525.703119][T12245] ? lockdep_init_map_type+0x5c/0x280 [ 525.703149][T12245] ? __pfx_down_read_killable+0x10/0x10 [ 525.703184][T12245] ? debug_mutex_init+0x37/0x70 [ 525.703224][T12245] copy_net_ns+0x2a6/0x5f0 [ 525.703253][T12245] create_new_namespaces+0x3ea/0xad0 [ 525.703284][T12245] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 525.703312][T12245] ksys_unshare+0x45b/0xa40 [ 525.703343][T12245] ? __pfx_ksys_unshare+0x10/0x10 [ 525.703372][T12245] ? xfd_validate_state+0x5d/0x180 [ 525.703411][T12245] ? rcu_is_watching+0x12/0xc0 [ 525.703444][T12245] __x64_sys_unshare+0x31/0x40 [ 525.703475][T12245] do_syscall_64+0xcd/0x230 [ 525.703505][T12245] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.703529][T12245] RIP: 0033:0x7f1dd378e969 [ 525.703547][T12245] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 525.703572][T12245] RSP: 002b:00007f1dd46c1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 525.703594][T12245] RAX: ffffffffffffffda RBX: 00007f1dd39b6080 RCX: 00007f1dd378e969 [ 525.703610][T12245] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 525.703624][T12245] RBP: 00007f1dd3810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 525.703639][T12245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 525.703653][T12245] R13: 0000000000000000 R14: 00007f1dd39b6080 R15: 00007ffce69b9538 [ 525.703684][T12245] [ 529.219659][ T5836] Bluetooth: hci3: unexpected subevent 0x01 length: 120 > 18 [ 529.228396][ T5836] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 529.258914][T12283] Bluetooth: hci0: unexpected subevent 0x01 length: 120 > 18 [ 529.267238][T12283] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 532.524424][T12283] Bluetooth: hci0: unexpected subevent 0x01 length: 120 > 18 [ 532.532736][T12283] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 532.598462][ T30] audit: type=1326 audit(6040651214.732:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12333 comm="syz.1.1692" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb572b8e969 code=0x0 [ 539.588352][T12428] FAULT_INJECTION: forcing a failure. [ 539.588352][T12428] name failslab, interval 1, probability 0, space 0, times 0 [ 539.680250][T12428] CPU: 0 UID: 0 PID: 12428 Comm: syz.2.1715 Not tainted 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(full) [ 539.680286][T12428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 539.680300][T12428] Call Trace: [ 539.680307][T12428] [ 539.680316][T12428] dump_stack_lvl+0x16c/0x1f0 [ 539.680349][T12428] should_fail_ex+0x512/0x640 [ 539.680382][T12428] ? __kmalloc_noprof+0xbf/0x510 [ 539.680409][T12428] ? sk_prot_alloc+0x1a8/0x2a0 [ 539.680435][T12428] should_failslab+0xc2/0x120 [ 539.680466][T12428] __kmalloc_noprof+0xd2/0x510 [ 539.680490][T12428] ? evm_inode_alloc_security+0x49/0xc0 [ 539.680531][T12428] sk_prot_alloc+0x1a8/0x2a0 [ 539.680560][T12428] sk_alloc+0x36/0xc20 [ 539.680597][T12428] __netlink_create+0x5e/0x2c0 [ 539.680633][T12428] __netlink_kernel_create+0xed/0x750 [ 539.680660][T12428] ? __pfx___netlink_kernel_create+0x10/0x10 [ 539.680693][T12428] fib_net_init+0x26d/0x3f0 [ 539.680714][T12428] ? __pfx___register_sysctl_table+0x10/0x10 [ 539.680741][T12428] ? __pfx_fib_net_init+0x10/0x10 [ 539.680762][T12428] ? lockdep_init_map_type+0x5c/0x280 [ 539.680794][T12428] ? __pfx_nl_fib_input+0x10/0x10 [ 539.680820][T12428] ? devinet_init_net+0x5c2/0x910 [ 539.680847][T12428] ? __pfx_fib_net_init+0x10/0x10 [ 539.680868][T12428] ops_init+0x1df/0x5f0 [ 539.680894][T12428] setup_net+0x21e/0x850 [ 539.680920][T12428] ? __pfx_setup_net+0x10/0x10 [ 539.680949][T12428] ? lockdep_init_map_type+0x5c/0x280 [ 539.680978][T12428] ? __pfx_down_read_killable+0x10/0x10 [ 539.681015][T12428] ? debug_mutex_init+0x37/0x70 [ 539.681055][T12428] copy_net_ns+0x2a6/0x5f0 [ 539.681084][T12428] create_new_namespaces+0x3ea/0xad0 [ 539.681116][T12428] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 539.681145][T12428] ksys_unshare+0x45b/0xa40 [ 539.681176][T12428] ? __pfx_ksys_unshare+0x10/0x10 [ 539.681205][T12428] ? xfd_validate_state+0x5d/0x180 [ 539.681243][T12428] ? rcu_is_watching+0x12/0xc0 [ 539.681271][T12428] __x64_sys_unshare+0x31/0x40 [ 539.681301][T12428] do_syscall_64+0xcd/0x230 [ 539.681331][T12428] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.681354][T12428] RIP: 0033:0x7fe11eb8e969 [ 539.681373][T12428] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 539.681396][T12428] RSP: 002b:00007fe11fa14038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 539.681417][T12428] RAX: ffffffffffffffda RBX: 00007fe11edb6080 RCX: 00007fe11eb8e969 [ 539.681432][T12428] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 539.681446][T12428] RBP: 00007fe11ec10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 539.681460][T12428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 539.681474][T12428] R13: 0000000000000000 R14: 00007fe11edb6080 R15: 00007fffb1d6bf98 [ 539.681503][T12428] [ 541.348489][T12455] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1722'. [ 541.821155][T12283] Bluetooth: hci3: unexpected event 0x3e length: 726 > 260 [ 541.821189][T12283] Bluetooth: hci3: unexpected subevent 0x0d length: 725 > 260 [ 541.838570][T12283] Bluetooth: hci3: Unknown advertising packet type: 0x7f [ 541.838619][T12283] Bluetooth: hci3: Malformed LE Event: 0x0d [ 545.181467][ T30] audit: type=1326 audit(6040651227.312:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12534 comm="syz.1.1746" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb572b8e969 code=0x0 [ 547.113202][T12589] FAULT_INJECTION: forcing a failure. [ 547.113202][T12589] name failslab, interval 1, probability 0, space 0, times 0 [ 547.225488][T12589] CPU: 0 UID: 0 PID: 12589 Comm: syz.0.1762 Not tainted 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(full) [ 547.225524][T12589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 547.225539][T12589] Call Trace: [ 547.225547][T12589] [ 547.225555][T12589] dump_stack_lvl+0x16c/0x1f0 [ 547.225589][T12589] should_fail_ex+0x512/0x640 [ 547.225621][T12589] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 547.225650][T12589] should_failslab+0xc2/0x120 [ 547.225678][T12589] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 547.225702][T12589] ? __pfx___might_resched+0x10/0x10 [ 547.225727][T12589] ? __anon_vma_prepare+0x344/0x5e0 [ 547.225755][T12589] __anon_vma_prepare+0x344/0x5e0 [ 547.225782][T12589] __vmf_anon_prepare+0x11c/0x240 [ 547.225817][T12589] do_wp_page+0x11a6/0x58e0 [ 547.225858][T12589] ? __pfx_do_wp_page+0x10/0x10 [ 547.225894][T12589] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 547.225931][T12589] ? ___pte_offset_map+0x1bc/0x540 [ 547.225968][T12589] __handle_mm_fault+0x1ada/0x2a40 [ 547.225999][T12589] ? __pfx___handle_mm_fault+0x10/0x10 [ 547.226038][T12589] ? find_vma+0xbf/0x140 [ 547.226067][T12589] ? __pfx_find_vma+0x10/0x10 [ 547.226102][T12589] handle_mm_fault+0x3fe/0xad0 [ 547.226137][T12589] do_user_addr_fault+0x7a6/0x1370 [ 547.226163][T12589] ? rcu_is_watching+0x12/0xc0 [ 547.226187][T12589] exc_page_fault+0x5c/0xc0 [ 547.226213][T12589] asm_exc_page_fault+0x26/0x30 [ 547.226235][T12589] RIP: 0010:__put_user_4+0xd/0x20 [ 547.226263][T12589] Code: 66 89 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 0f 1f 80 00 00 00 00 90 90 90 [ 547.226286][T12589] RSP: 0018:ffffc90004d07cc0 EFLAGS: 00050206 [ 547.226304][T12589] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000005 [ 547.226317][T12589] RDX: 0000000000080000 RSI: ffffffff8236518c RDI: ffffffff8bf467a0 [ 547.226332][T12589] RBP: 1ffff920009a0f9b R08: a23edf14cf8df726 R09: 0000000000000001 [ 547.226346][T12589] R10: 0000000000000000 R11: 0000000000000000 R12: 00000000ffffffea [ 547.226360][T12589] R13: 0000000000000005 R14: 0000000000000000 R15: 0000000000000000 [ 547.226383][T12589] ? do_vfs_ioctl+0x110c/0x1990 [ 547.226417][T12589] do_vfs_ioctl+0x1117/0x1990 [ 547.226448][T12589] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 547.226498][T12589] ? find_held_lock+0x2b/0x80 [ 547.226518][T12589] ? hook_file_ioctl_common+0x145/0x410 [ 547.226549][T12589] ? __fget_files+0x20e/0x3c0 [ 547.226592][T12589] __x64_sys_ioctl+0x11d/0x200 [ 547.226624][T12589] do_syscall_64+0xcd/0x230 [ 547.226654][T12589] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.226676][T12589] RIP: 0033:0x7f1dd378e969 [ 547.226694][T12589] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 547.226716][T12589] RSP: 002b:00007f1dd46c1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 547.226736][T12589] RAX: ffffffffffffffda RBX: 00007f1dd39b6080 RCX: 00007f1dd378e969 [ 547.226751][T12589] RDX: 0000000000000005 RSI: 0000000000000001 RDI: 0000000000000004 [ 547.226765][T12589] RBP: 00007f1dd3810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 547.226779][T12589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 547.226792][T12589] R13: 0000000000000000 R14: 00007f1dd39b6080 R15: 00007ffce69b9538 [ 547.226822][T12589] [ 549.405434][T12633] FAULT_INJECTION: forcing a failure. [ 549.405434][T12633] name failslab, interval 1, probability 0, space 0, times 0 [ 549.492698][T12633] CPU: 0 UID: 0 PID: 12633 Comm: syz.0.1773 Not tainted 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(full) [ 549.492734][T12633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 549.492748][T12633] Call Trace: [ 549.492756][T12633] [ 549.492765][T12633] dump_stack_lvl+0x16c/0x1f0 [ 549.492798][T12633] should_fail_ex+0x512/0x640 [ 549.492830][T12633] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 549.492865][T12633] should_failslab+0xc2/0x120 [ 549.492894][T12633] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 549.492918][T12633] ? __pfx___might_resched+0x10/0x10 [ 549.492943][T12633] ? __anon_vma_prepare+0xae/0x5e0 [ 549.492971][T12633] __anon_vma_prepare+0xae/0x5e0 [ 549.492998][T12633] __vmf_anon_prepare+0x11c/0x240 [ 549.493033][T12633] do_wp_page+0x11a6/0x58e0 [ 549.493074][T12633] ? __pfx_do_wp_page+0x10/0x10 [ 549.493113][T12633] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 549.493146][T12633] ? ___pte_offset_map+0x1bc/0x540 [ 549.493183][T12633] __handle_mm_fault+0x1ada/0x2a40 [ 549.493214][T12633] ? __pfx___handle_mm_fault+0x10/0x10 [ 549.493253][T12633] ? find_vma+0xbf/0x140 [ 549.493282][T12633] ? __pfx_find_vma+0x10/0x10 [ 549.493316][T12633] handle_mm_fault+0x3fe/0xad0 [ 549.493343][T12633] do_user_addr_fault+0x7a6/0x1370 [ 549.493370][T12633] ? rcu_is_watching+0x12/0xc0 [ 549.493393][T12633] exc_page_fault+0x5c/0xc0 [ 549.493419][T12633] asm_exc_page_fault+0x26/0x30 [ 549.493441][T12633] RIP: 0010:__put_user_4+0xd/0x20 [ 549.493468][T12633] Code: 66 89 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 0f 1f 80 00 00 00 00 90 90 90 [ 549.493491][T12633] RSP: 0018:ffffc90004b57cc0 EFLAGS: 00050206 [ 549.493509][T12633] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000005 [ 549.493523][T12633] RDX: 0000000000080000 RSI: ffffffff8236518c RDI: ffffffff8bf467a0 [ 549.493537][T12633] RBP: 1ffff9200096af9b R08: a23edf14cf8df726 R09: 0000000000000001 [ 549.493551][T12633] R10: 0000000000000000 R11: 0000000000000000 R12: 00000000ffffffea [ 549.493565][T12633] R13: 0000000000000005 R14: 0000000000000000 R15: 0000000000000000 [ 549.493587][T12633] ? do_vfs_ioctl+0x110c/0x1990 [ 549.493622][T12633] do_vfs_ioctl+0x1117/0x1990 [ 549.493653][T12633] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 549.493707][T12633] ? find_held_lock+0x2b/0x80 [ 549.493727][T12633] ? hook_file_ioctl_common+0x145/0x410 [ 549.493759][T12633] ? __fget_files+0x20e/0x3c0 [ 549.493802][T12633] __x64_sys_ioctl+0x11d/0x200 [ 549.493835][T12633] do_syscall_64+0xcd/0x230 [ 549.493871][T12633] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.493894][T12633] RIP: 0033:0x7f1dd378e969 [ 549.493912][T12633] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 549.493934][T12633] RSP: 002b:00007f1dd46c1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 549.493954][T12633] RAX: ffffffffffffffda RBX: 00007f1dd39b6080 RCX: 00007f1dd378e969 [ 549.493970][T12633] RDX: 0000000000000005 RSI: 0000000000000001 RDI: 0000000000000004 [ 549.493983][T12633] RBP: 00007f1dd3810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 549.493997][T12633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 549.494011][T12633] R13: 0000000000000000 R14: 00007f1dd39b6080 R15: 00007ffce69b9538 [ 549.494040][T12633] [ 550.363257][ T30] audit: type=1326 audit(6040651232.472:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12650 comm="syz.1.1778" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb572b8e969 code=0x0 [ 552.176353][T12283] Bluetooth: hci1: unexpected subevent 0x01 length: 120 > 18 [ 552.184726][T12283] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 554.210175][T12729] can: request_module (can-proto-3) failed. [ 554.905451][ T30] audit: type=1800 audit(6040651237.042:32): pid=12746 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1801" name="ram7" dev="tmpfs" ino=872 res=0 errno=0 [ 555.228669][T12751] FAULT_INJECTION: forcing a failure. [ 555.228669][T12751] name failslab, interval 1, probability 0, space 0, times 0 [ 555.379287][T12751] CPU: 0 UID: 0 PID: 12751 Comm: syz.0.1802 Not tainted 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(full) [ 555.379320][T12751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 555.379335][T12751] Call Trace: [ 555.379342][T12751] [ 555.379351][T12751] dump_stack_lvl+0x16c/0x1f0 [ 555.379385][T12751] should_fail_ex+0x512/0x640 [ 555.379421][T12751] ? __kvmalloc_node_noprof+0x122/0x600 [ 555.379449][T12751] should_failslab+0xc2/0x120 [ 555.379477][T12751] __kvmalloc_node_noprof+0x135/0x600 [ 555.379503][T12751] ? fib4_semantics_init+0x25/0x100 [ 555.379541][T12751] ? fib4_semantics_init+0x25/0x100 [ 555.379570][T12751] ? fib4_rules_init+0x151/0x1c0 [ 555.379598][T12751] fib4_semantics_init+0x25/0x100 [ 555.379629][T12751] fib_net_init+0x1fc/0x3f0 [ 555.379649][T12751] ? __pfx___register_sysctl_table+0x10/0x10 [ 555.379676][T12751] ? __pfx_fib_net_init+0x10/0x10 [ 555.379698][T12751] ? lockdep_init_map_type+0x5c/0x280 [ 555.379730][T12751] ? do_init_timer+0xc9/0x110 [ 555.379762][T12751] ? devinet_init_net+0x5c2/0x910 [ 555.379790][T12751] ? __pfx_fib_net_init+0x10/0x10 [ 555.379811][T12751] ops_init+0x1df/0x5f0 [ 555.379838][T12751] setup_net+0x21e/0x850 [ 555.379865][T12751] ? __pfx_setup_net+0x10/0x10 [ 555.379886][T12751] ? lockdep_init_map_type+0x5c/0x280 [ 555.379917][T12751] ? __pfx_down_read_killable+0x10/0x10 [ 555.379953][T12751] ? debug_mutex_init+0x37/0x70 [ 555.379993][T12751] copy_net_ns+0x2a6/0x5f0 [ 555.380023][T12751] create_new_namespaces+0x3ea/0xad0 [ 555.380055][T12751] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 555.380084][T12751] ksys_unshare+0x45b/0xa40 [ 555.380116][T12751] ? __pfx_ksys_unshare+0x10/0x10 [ 555.380145][T12751] ? xfd_validate_state+0x5d/0x180 [ 555.380183][T12751] ? rcu_is_watching+0x12/0xc0 [ 555.380212][T12751] __x64_sys_unshare+0x31/0x40 [ 555.380247][T12751] do_syscall_64+0xcd/0x230 [ 555.380279][T12751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.380303][T12751] RIP: 0033:0x7f1dd378e969 [ 555.380325][T12751] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 555.380349][T12751] RSP: 002b:00007f1dd46c1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 555.380371][T12751] RAX: ffffffffffffffda RBX: 00007f1dd39b6080 RCX: 00007f1dd378e969 [ 555.380387][T12751] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 555.380400][T12751] RBP: 00007f1dd3810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 555.380414][T12751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 555.380428][T12751] R13: 0000000000000000 R14: 00007f1dd39b6080 R15: 00007ffce69b9538 [ 555.380457][T12751] [ 557.299907][T12789] program syz.2.1812 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 558.416588][T12811] FAULT_INJECTION: forcing a failure. [ 558.416588][T12811] name failslab, interval 1, probability 0, space 0, times 0 [ 558.560918][T12811] CPU: 0 UID: 0 PID: 12811 Comm: syz.0.1815 Not tainted 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(full) [ 558.560954][T12811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 558.560967][T12811] Call Trace: [ 558.560975][T12811] [ 558.560984][T12811] dump_stack_lvl+0x16c/0x1f0 [ 558.561017][T12811] should_fail_ex+0x512/0x640 [ 558.561050][T12811] ? __kmalloc_noprof+0xbf/0x510 [ 558.561077][T12811] ? sk_prot_alloc+0x1a8/0x2a0 [ 558.561103][T12811] should_failslab+0xc2/0x120 [ 558.561131][T12811] __kmalloc_noprof+0xd2/0x510 [ 558.561155][T12811] ? evm_inode_alloc_security+0x49/0xc0 [ 558.561196][T12811] sk_prot_alloc+0x1a8/0x2a0 [ 558.561225][T12811] sk_alloc+0x36/0xc20 [ 558.561262][T12811] __netlink_create+0x5e/0x2c0 [ 558.561298][T12811] __netlink_kernel_create+0xed/0x750 [ 558.561325][T12811] ? __pfx___netlink_kernel_create+0x10/0x10 [ 558.561358][T12811] fib_net_init+0x26d/0x3f0 [ 558.561380][T12811] ? __pfx___register_sysctl_table+0x10/0x10 [ 558.561407][T12811] ? __pfx_fib_net_init+0x10/0x10 [ 558.561429][T12811] ? lockdep_init_map_type+0x5c/0x280 [ 558.561459][T12811] ? __pfx_nl_fib_input+0x10/0x10 [ 558.561486][T12811] ? devinet_init_net+0x5c2/0x910 [ 558.561514][T12811] ? __pfx_fib_net_init+0x10/0x10 [ 558.561535][T12811] ops_init+0x1df/0x5f0 [ 558.561562][T12811] setup_net+0x21e/0x850 [ 558.561588][T12811] ? __pfx_setup_net+0x10/0x10 [ 558.561611][T12811] ? lockdep_init_map_type+0x5c/0x280 [ 558.561641][T12811] ? __pfx_down_read_killable+0x10/0x10 [ 558.561677][T12811] ? debug_mutex_init+0x37/0x70 [ 558.561718][T12811] copy_net_ns+0x2a6/0x5f0 [ 558.561747][T12811] create_new_namespaces+0x3ea/0xad0 [ 558.561779][T12811] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 558.561807][T12811] ksys_unshare+0x45b/0xa40 [ 558.561839][T12811] ? __pfx_ksys_unshare+0x10/0x10 [ 558.561868][T12811] ? xfd_validate_state+0x5d/0x180 [ 558.561914][T12811] ? rcu_is_watching+0x12/0xc0 [ 558.561945][T12811] __x64_sys_unshare+0x31/0x40 [ 558.561976][T12811] do_syscall_64+0xcd/0x230 [ 558.562008][T12811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.562031][T12811] RIP: 0033:0x7f1dd378e969 [ 558.562049][T12811] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 558.562072][T12811] RSP: 002b:00007f1dd46c1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 558.562093][T12811] RAX: ffffffffffffffda RBX: 00007f1dd39b6080 RCX: 00007f1dd378e969 [ 558.562109][T12811] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 558.562122][T12811] RBP: 00007f1dd3810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 558.562136][T12811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 558.562149][T12811] R13: 0000000000000000 R14: 00007f1dd39b6080 R15: 00007ffce69b9538 [ 558.562178][T12811] [ 560.513059][T12835] FAULT_INJECTION: forcing a failure. [ 560.513059][T12835] name failslab, interval 1, probability 0, space 0, times 0 [ 560.575872][T12835] CPU: 0 UID: 0 PID: 12835 Comm: syz.0.1823 Not tainted 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(full) [ 560.575906][T12835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 560.575920][T12835] Call Trace: [ 560.575927][T12835] [ 560.575935][T12835] dump_stack_lvl+0x16c/0x1f0 [ 560.575968][T12835] should_fail_ex+0x512/0x640 [ 560.576000][T12835] ? __kvmalloc_node_noprof+0x122/0x600 [ 560.576027][T12835] should_failslab+0xc2/0x120 [ 560.576054][T12835] __kvmalloc_node_noprof+0x135/0x600 [ 560.576079][T12835] ? file_tty_write.constprop.0+0x6ed/0x9b0 [ 560.576112][T12835] ? file_tty_write.constprop.0+0x6ed/0x9b0 [ 560.576138][T12835] file_tty_write.constprop.0+0x6ed/0x9b0 [ 560.576174][T12835] redirected_tty_write+0xd4/0x150 [ 560.576200][T12835] vfs_write+0x5ba/0x1180 [ 560.576222][T12835] ? __pfx_redirected_tty_write+0x10/0x10 [ 560.576252][T12835] ? __pfx_vfs_write+0x10/0x10 [ 560.576271][T12835] ? find_held_lock+0x2b/0x80 [ 560.576311][T12835] ksys_write+0x12a/0x240 [ 560.576332][T12835] ? __pfx_ksys_write+0x10/0x10 [ 560.576351][T12835] ? rcu_is_watching+0x12/0xc0 [ 560.576380][T12835] do_syscall_64+0xcd/0x230 [ 560.576411][T12835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 560.576434][T12835] RIP: 0033:0x7f1dd378e969 [ 560.576453][T12835] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 560.576480][T12835] RSP: 002b:00007f1dd46e2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 560.576501][T12835] RAX: ffffffffffffffda RBX: 00007f1dd39b5fa0 RCX: 00007f1dd378e969 [ 560.576516][T12835] RDX: 000000000000003a RSI: 0000200000000440 RDI: 0000000000000003 [ 560.576530][T12835] RBP: 00007f1dd46e2090 R08: 0000000000000000 R09: 0000000000000000 [ 560.576544][T12835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 560.576557][T12835] R13: 0000000000000000 R14: 00007f1dd39b5fa0 R15: 00007ffce69b9538 [ 560.576586][T12835] [ 563.577585][T12860] can: request_module (can-proto-3) failed. [ 564.513111][T12875] zram: Removed device: zram0 [ 565.090082][ T30] audit: type=1326 audit(6040651247.222:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12887 comm="syz.2.1839" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe11eb8e969 code=0x0 [ 568.079056][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.088137][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.505991][ T30] audit: type=1326 audit(6040651250.632:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12954 comm="syz.2.1859" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe11eb8e969 code=0x0 [ 570.687203][T12996] FAULT_INJECTION: forcing a failure. [ 570.687203][T12996] name failslab, interval 1, probability 0, space 0, times 0 [ 570.793187][T12996] CPU: 0 UID: 0 PID: 12996 Comm: syz.2.1872 Not tainted 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(full) [ 570.793222][T12996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 570.793237][T12996] Call Trace: [ 570.793244][T12996] [ 570.793253][T12996] dump_stack_lvl+0x16c/0x1f0 [ 570.793286][T12996] should_fail_ex+0x512/0x640 [ 570.793319][T12996] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 570.793350][T12996] should_failslab+0xc2/0x120 [ 570.793379][T12996] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 570.793403][T12996] ? __proc_create+0xc3/0x8c0 [ 570.793428][T12996] ? __proc_create+0x2ce/0x8c0 [ 570.793457][T12996] __proc_create+0x2ce/0x8c0 [ 570.793484][T12996] ? __pfx___proc_create+0x10/0x10 [ 570.793514][T12996] ? _raw_write_unlock+0x28/0x50 [ 570.793539][T12996] ? proc_register+0x314/0x5f0 [ 570.793568][T12996] proc_create_reg+0x7d/0x180 [ 570.793597][T12996] proc_create_seq_private+0x8e/0x1d0 [ 570.793626][T12996] ? __pfx_proc_create_seq_private+0x10/0x10 [ 570.793656][T12996] ? __pfx_nl_fib_input+0x10/0x10 [ 570.793686][T12996] ? __pfx_ip_rt_do_proc_init+0x10/0x10 [ 570.793712][T12996] ip_rt_do_proc_init+0xac/0x1b0 [ 570.793740][T12996] ops_init+0x1df/0x5f0 [ 570.793767][T12996] setup_net+0x21e/0x850 [ 570.793795][T12996] ? __pfx_setup_net+0x10/0x10 [ 570.793817][T12996] ? lockdep_init_map_type+0x5c/0x280 [ 570.793850][T12996] ? __pfx_down_read_killable+0x10/0x10 [ 570.793895][T12996] ? debug_mutex_init+0x37/0x70 [ 570.793935][T12996] copy_net_ns+0x2a6/0x5f0 [ 570.793965][T12996] create_new_namespaces+0x3ea/0xad0 [ 570.793997][T12996] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 570.794029][T12996] ksys_unshare+0x45b/0xa40 [ 570.794061][T12996] ? __pfx_ksys_unshare+0x10/0x10 [ 570.794090][T12996] ? xfd_validate_state+0x5d/0x180 [ 570.794129][T12996] ? rcu_is_watching+0x12/0xc0 [ 570.794157][T12996] __x64_sys_unshare+0x31/0x40 [ 570.794188][T12996] do_syscall_64+0xcd/0x230 [ 570.794218][T12996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 570.794242][T12996] RIP: 0033:0x7fe11eb8e969 [ 570.794260][T12996] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 570.794282][T12996] RSP: 002b:00007fe11fa14038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 570.794304][T12996] RAX: ffffffffffffffda RBX: 00007fe11edb6080 RCX: 00007fe11eb8e969 [ 570.794320][T12996] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 570.794334][T12996] RBP: 00007fe11ec10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 570.794348][T12996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 570.794362][T12996] R13: 0000000000000000 R14: 00007fe11edb6080 R15: 00007fffb1d6bf98 [ 570.794391][T12996] [ 571.427849][T13011] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1878'. [ 572.838794][ T30] audit: type=1800 audit(6040651254.962:35): pid=13030 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1882" name="SYSV0000000a" dev="hugetlbfs" ino=0 res=0 errno=0 [ 574.303588][T12283] Bluetooth: hci2: unexpected subevent 0x01 length: 120 > 18 [ 574.311825][T12283] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 576.585295][T13092] ================================================================== [ 576.585311][T13092] BUG: KASAN: slab-out-of-bounds in do_con_write+0x3367/0x7c90 [ 576.585345][T13092] Write of size 2 at addr ffff88807d8dbffc by task syz.0.1902/13092 [ 576.585364][T13092] [ 576.585375][T13092] CPU: 0 UID: 0 PID: 13092 Comm: syz.0.1902 Not tainted 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(full) [ 576.585405][T13092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 576.585419][T13092] Call Trace: [ 576.585427][T13092] [ 576.585435][T13092] dump_stack_lvl+0x116/0x1f0 [ 576.585464][T13092] print_report+0xc3/0x670 [ 576.585490][T13092] ? __virt_addr_valid+0x5e/0x590 [ 576.585519][T13092] ? __phys_addr+0xc6/0x150 [ 576.585547][T13092] ? do_con_write+0x3367/0x7c90 [ 576.585573][T13092] kasan_report+0xe0/0x110 [ 576.585599][T13092] ? do_con_write+0x3367/0x7c90 [ 576.585629][T13092] do_con_write+0x3367/0x7c90 [ 576.585664][T13092] ? __pfx_do_con_write+0x10/0x10 [ 576.585698][T13092] con_write+0x23/0xb0 [ 576.585724][T13092] n_tty_write+0x40f/0x1160 [ 576.585761][T13092] ? __pfx_n_tty_write+0x10/0x10 [ 576.585791][T13092] ? rcu_is_watching+0x12/0xc0 [ 576.585813][T13092] ? __pfx_woken_wake_function+0x10/0x10 [ 576.585849][T13092] ? kfree+0x252/0x4d0 [ 576.585892][T13092] ? file_tty_write.constprop.0+0x6ed/0x9b0 [ 576.585920][T13092] ? __pfx_n_tty_write+0x10/0x10 [ 576.585953][T13092] file_tty_write.constprop.0+0x4ff/0x9b0 [ 576.585984][T13092] redirected_tty_write+0xd4/0x150 [ 576.586009][T13092] vfs_write+0x5ba/0x1180 [ 576.586031][T13092] ? __pfx_redirected_tty_write+0x10/0x10 [ 576.586060][T13092] ? __pfx_vfs_write+0x10/0x10 [ 576.586079][T13092] ? find_held_lock+0x2b/0x80 [ 576.586108][T13092] ksys_write+0x12a/0x240 [ 576.586128][T13092] ? __pfx_ksys_write+0x10/0x10 [ 576.586148][T13092] ? rcu_is_watching+0x12/0xc0 [ 576.586172][T13092] do_syscall_64+0xcd/0x230 [ 576.586201][T13092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.586224][T13092] RIP: 0033:0x7f1dd378e969 [ 576.586241][T13092] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 576.586264][T13092] RSP: 002b:00007f1dd46e2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 576.586286][T13092] RAX: ffffffffffffffda RBX: 00007f1dd39b5fa0 RCX: 00007f1dd378e969 [ 576.586302][T13092] RDX: 0000000000000032 RSI: 0000200000000440 RDI: 0000000000000005 [ 576.586317][T13092] RBP: 00007f1dd3810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 576.586332][T13092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 576.586346][T13092] R13: 0000000000000000 R14: 00007f1dd39b5fa0 R15: 00007ffce69b9538 [ 576.586368][T13092] [ 576.586375][T13092] [ 576.586382][T13092] Allocated by task 11223: [ 576.586393][T13092] kasan_save_stack+0x33/0x60 [ 576.586415][T13092] kasan_save_track+0x14/0x30 [ 576.586436][T13092] __kasan_kmalloc+0xaa/0xb0 [ 576.586456][T13092] __kmalloc_noprof+0x223/0x510 [ 576.586477][T13092] vc_do_resize+0x1de/0x10e0 [ 576.586497][T13092] vgacon_init+0x37c/0x440 [ 576.586527][T13092] visual_init+0x31d/0x620 [ 576.586559][T13092] do_bind_con_driver.isra.0+0x57a/0xbf0 [ 576.586582][T13092] do_unbind_con_driver+0x571/0x6d0 [ 576.586604][T13092] store_bind+0x421/0x760 [ 576.586624][T13092] dev_attr_store+0x55/0x80 [ 576.586649][T13092] sysfs_kf_write+0xef/0x150 [ 576.586678][T13092] kernfs_fop_write_iter+0x351/0x510 [ 576.586705][T13092] vfs_write+0x5ba/0x1180 [ 576.586723][T13092] ksys_write+0x12a/0x240 [ 576.586741][T13092] do_syscall_64+0xcd/0x230 [ 576.586766][T13092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.586788][T13092] [ 576.586793][T13092] The buggy address belongs to the object at ffff88807d8da000 [ 576.586793][T13092] which belongs to the cache kmalloc-4k of size 4096 [ 576.586810][T13092] The buggy address is located 4188 bytes to the right of [ 576.586810][T13092] allocated 4000-byte region [ffff88807d8da000, ffff88807d8dafa0) [ 576.586833][T13092] [ 576.586838][T13092] The buggy address belongs to the physical page: [ 576.586848][T13092] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7d8d8 [ 576.586868][T13092] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 576.586894][T13092] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 576.586914][T13092] page_type: f5(slab) [ 576.586934][T13092] raw: 00fff00000000040 ffff88801b442140 ffffea0001f00e00 dead000000000002 [ 576.586955][T13092] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 576.586977][T13092] head: 00fff00000000040 ffff88801b442140 ffffea0001f00e00 dead000000000002 [ 576.586998][T13092] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 576.587019][T13092] head: 00fff00000000003 ffffea0001f63601 00000000ffffffff 00000000ffffffff [ 576.587040][T13092] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 576.587053][T13092] page dumped because: kasan: bad access detected [ 576.587070][T13092] page_owner tracks the page as allocated [ 576.587078][T13092] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5452, tgid 5452 (v4l_id), ts 58295736575, free_ts 58216247001 [ 576.587120][T13092] post_alloc_hook+0x181/0x1b0 [ 576.587141][T13092] get_page_from_freelist+0x135c/0x3920 [ 576.587163][T13092] __alloc_frozen_pages_noprof+0x263/0x23a0 [ 576.587187][T13092] alloc_pages_mpol+0x1fb/0x550 [ 576.587212][T13092] new_slab+0x244/0x340 [ 576.587243][T13092] ___slab_alloc+0xd9c/0x1940 [ 576.587276][T13092] __slab_alloc.constprop.0+0x56/0xb0 [ 576.587311][T13092] __kmalloc_noprof+0x2f2/0x510 [ 576.587332][T13092] tomoyo_realpath_from_path+0xc2/0x6e0 [ 576.587363][T13092] tomoyo_path_perm+0x274/0x460 [ 576.587386][T13092] security_inode_getattr+0x116/0x290 [ 576.587411][T13092] vfs_fstat+0x4b/0xd0 [ 576.587435][T13092] vfs_fstatat+0xbc/0xf0 [ 576.587459][T13092] __do_sys_newfstatat+0xa1/0x130 [ 576.587486][T13092] do_syscall_64+0xcd/0x230 [ 576.587511][T13092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.587532][T13092] page last free pid 5454 tgid 5454 stack trace: [ 576.587544][T13092] __free_frozen_pages+0x69d/0xff0 [ 576.587579][T13092] __put_partials+0x16d/0x1c0 [ 576.587597][T13092] qlist_free_all+0x4e/0x120 [ 576.587616][T13092] kasan_quarantine_reduce+0x195/0x1e0 [ 576.587637][T13092] __kasan_slab_alloc+0x69/0x90 [ 576.587660][T13092] kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 576.587683][T13092] getname_flags.part.0+0x4c/0x550 [ 576.587710][T13092] getname_flags+0x93/0xf0 [ 576.587741][T13092] do_sys_openat2+0xb8/0x1d0 [ 576.587768][T13092] __x64_sys_openat+0x174/0x210 [ 576.587796][T13092] do_syscall_64+0xcd/0x230 [ 576.587822][T13092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.587844][T13092] [ 576.587848][T13092] Memory state around the buggy address: [ 576.587861][T13092] ffff88807d8dbe80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 576.587893][T13092] ffff88807d8dbf00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 576.587910][T13092] >ffff88807d8dbf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 576.587923][T13092] ^ [ 576.587937][T13092] ffff88807d8dc000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 576.587953][T13092] ffff88807d8dc080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 576.587966][T13092] ================================================================== [ 576.587979][T13092] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 576.587993][T13092] CPU: 0 UID: 0 PID: 13092 Comm: syz.0.1902 Not tainted 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(full) [ 576.588021][T13092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 576.588035][T13092] Call Trace: [ 576.588042][T13092] [ 576.588051][T13092] dump_stack_lvl+0x3d/0x1f0 [ 576.588080][T13092] panic+0x71c/0x800 [ 576.588113][T13092] ? __pfx_panic+0x10/0x10 [ 576.588149][T13092] ? __pfx__printk+0x10/0x10 [ 576.588184][T13092] ? do_con_write+0x3367/0x7c90 [ 576.588211][T13092] check_panic_on_warn+0xab/0xb0 [ 576.588247][T13092] end_report+0x107/0x170 [ 576.588274][T13092] kasan_report+0xee/0x110 [ 576.588301][T13092] ? do_con_write+0x3367/0x7c90 [ 576.588332][T13092] do_con_write+0x3367/0x7c90 [ 576.588369][T13092] ? __pfx_do_con_write+0x10/0x10 [ 576.588404][T13092] con_write+0x23/0xb0 [ 576.588430][T13092] n_tty_write+0x40f/0x1160 [ 576.588469][T13092] ? __pfx_n_tty_write+0x10/0x10 [ 576.588501][T13092] ? rcu_is_watching+0x12/0xc0 [ 576.588522][T13092] ? __pfx_woken_wake_function+0x10/0x10 [ 576.588561][T13092] ? kfree+0x252/0x4d0 [ 576.588595][T13092] ? file_tty_write.constprop.0+0x6ed/0x9b0 [ 576.588658][T13092] ? __pfx_n_tty_write+0x10/0x10 [ 576.588692][T13092] file_tty_write.constprop.0+0x4ff/0x9b0 [ 576.588724][T13092] redirected_tty_write+0xd4/0x150 [ 576.588751][T13092] vfs_write+0x5ba/0x1180 [ 576.588773][T13092] ? __pfx_redirected_tty_write+0x10/0x10 [ 576.588802][T13092] ? __pfx_vfs_write+0x10/0x10 [ 576.588821][T13092] ? find_held_lock+0x2b/0x80 [ 576.588851][T13092] ksys_write+0x12a/0x240 [ 576.588877][T13092] ? __pfx_ksys_write+0x10/0x10 [ 576.588898][T13092] ? rcu_is_watching+0x12/0xc0 [ 576.588922][T13092] do_syscall_64+0xcd/0x230 [ 576.588953][T13092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.588977][T13092] RIP: 0033:0x7f1dd378e969 [ 576.588994][T13092] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 576.589018][T13092] RSP: 002b:00007f1dd46e2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 576.589040][T13092] RAX: ffffffffffffffda RBX: 00007f1dd39b5fa0 RCX: 00007f1dd378e969 [ 576.589057][T13092] RDX: 0000000000000032 RSI: 0000200000000440 RDI: 0000000000000005 [ 576.589072][T13092] RBP: 00007f1dd3810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 576.589087][T13092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 576.589102][T13092] R13: 0000000000000000 R14: 00007f1dd39b5fa0 R15: 00007ffce69b9538 [ 576.589125][T13092] [ 576.589195][T13092] Kernel Offset: disabled