last executing test programs: 6.754974781s ago: executing program 3 (id=2015): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f00000000c0), 0x20a000, 0x0) openat$auto_urandom_fops_random(0xffffffffffffff9c, &(0x7f0000000100), 0xc82, 0x0) mmap$auto(0x0, 0x0, 0x1ff, 0x9b72, 0x2, 0x8000) sysfs$auto(0x2, 0x3, 0x80000000000000) mmap$auto(0xffffffffffffffff, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) r1 = prctl$auto(0x3c, 0x1000000000001, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) epoll_create$auto(0x4) mq_open$auto(&(0x7f0000000000)='/dey/sequancer2\x00', 0xfffffffe, 0x7, &(0x7f0000000040)={0xe7a2, 0xffff, 0x1, 0x103}) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000840)='/proc/sys/vm/dirty_background_ratio\x00', 0x80000, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x100000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1000000001ff, 0x7, 0xd, 0x1, 0x948b, 0x80000000003, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x2800000000000, 0xd, 0x9, 0x5, 0xfffffffffffffffa]}, 0x0) sched_get_priority_min$auto(0x40) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) openat$auto_proc_mounts_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/mounts\x00', 0x40800, 0x0) shmctl$auto_SHM_STAT_ANY(0x9, 0xf, &(0x7f0000000500)={{0x9, 0xffffffffffffffff, 0xffffffffffffffff, 0x702, 0x7ffffffe, 0xfffffff8, 0xf}, 0x8bc, 0xfffffffffffffffe, 0x1, 0x1aa, @raw=0x3, @inferred, 0x27, 0x0, &(0x7f00000003c0)="5c884edd1a21b665cbba8b67a43ed67fde0e57bc02", 0x0}) setreuid$auto(0x0, r3) chroot$auto(0x0) ioperm$auto(0x3, 0x38c, 0x9) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) ioctl$auto_RTC_PARAM_GET(r0, 0x40187013, 0x0) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="00000400", @ANYRES16=r2, @ANYRES64=r2], 0x5c}, 0x1, 0x0, 0x0, 0x44040}, 0x0) 6.492750585s ago: executing program 3 (id=2017): openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/netfilter/nf_log/3\x00', 0xa2202, 0x0) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon9\x00', 0x80000, 0x0) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0x60800, 0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82000, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/cifs/Stats\x00', 0x28102, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, 0x0, 0x2023c1, 0x0) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0x20000000000000d4, 0x1, 0x6, 0x0, 0x7, 0x368a, 0x2, {0x100000000, 0x8000000000000000}, 0x5, 0x8, 0xfffffffffffffffd, 0x1007fff, 0x0, 0x8, 0x81, 0xdfffffffffff628e, 0x6, 0xdeb1, 0x808}) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) mmap$auto(0xc79, 0x400007, 0xffffffffffffffff, 0x9b72, 0x2, 0x8) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto(0x3, 0x89e2, 0x91) ioctl$auto(0x3, 0x89e2, 0x91) madvise$auto(0x0, 0xffffffffffff0001, 0x15) msync$auto(0x0, 0xe0, 0x6) socket(0xa, 0x2, 0x3a) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D1\x00', 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0xa3db) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$auto(r3, 0x5453, r3) remap_file_pages$auto(0x6a27, 0x3ff, 0xfffffffffffffff9, 0x3, 0x4) madvise$auto(0x110c230000, 0x1, 0x9) futex$auto(0x0, 0xc, 0x7, 0x0, 0x0, 0x7) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/i8042/serio0/force_release\x00', 0xc2082, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, 0x0) 4.895542461s ago: executing program 3 (id=2023): socket(0x10, 0x2, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xfffffdcb, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x200040c4}, 0x440c5) (async) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x38, 0x100000001, 0xffffffff, 0x0, 0x0, 0x0, 0x1000000006, 0x10001, 0x7, 0x400, 0x7ffffffb, 0x5, 0xffffffff80000000, 0x5, 0x61, 0x103}) (async) mmap$auto(0x0, 0x4020008, 0xdf, 0xeb1, 0x401, 0x8000) (async) sysfs$auto(0x2, 0x21, 0x0) (async) r0 = fsopen$auto(0x0, 0x1) fsconfig$auto(r0, 0x8, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) (async) statmount$auto(0x0, &(0x7f0000000180)={0x9, 0x1, 0x9, 0x7, 0x3c, 0x4909b6fb, 0x1ffe0, 0x7, 0x6, 0x7fffffffffffffff, 0x0, 0x3, 0x6, 0x4, 0xb4, 0x9, 0x2, 0x10000, 0x82, 0x7, 0x0, 0x7, 0x8, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x800000000]}, 0x202, 0xd) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/bdi/7:6/power/runtime_active_time\x00', 0xa0440, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000080)=""/58, 0x3a) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) adjtimex$auto(&(0x7f00000004c0)={0xf332b6c, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffe, 0x5, 0x1, 0x6, 0x0, 0x100000000001, 0x0, 0x8, {0x4, 0x10000}, 0x5, 0x6, 0xfffffffffffffffd, 0x9, 0x0, 0x80000004, 0x81, 0xffffffffffff628e, 0xa747, 0xdeb4, 0x9}) (async) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) (async) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000500)='/dev/video0\x00', 0x0, 0x0) prctl$auto_PR_PPC_SET_DEXCR(0x49, 0x9, 0x7, 0x7a4d, 0xa7) (async) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) socketpair$auto(0x9, 0x4, 0xfffa, 0x0) (async) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x2, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x9, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2]}, 0x0) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket(0xa, 0x3, 0x3a) ioctl$auto(0x4000000000000c8, 0x800454cf, 0x3) r4 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r4, 0x107, 0x12, 0x0, 0x4) (async) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) (async) setsockopt$auto(r4, 0x1, 0x21, 0x0, 0x9) 4.440762853s ago: executing program 2 (id=2025): bpf$auto(0x0, 0x0, 0x6f3) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket$nl_generic(0x11, 0x3, 0x10) getsockname$auto(r0, 0x0, 0x0) (fail_nth: 5) 4.228402026s ago: executing program 3 (id=2026): pwrite64$auto(0xc8, 0x0, 0xfdef, 0x3) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14f602, 0x0) r0 = socket(0xa, 0x2, 0x3a) open_by_handle_at$auto(r0, 0x0, 0xffffffff) r1 = socket(0x25, 0x1, 0x0) connect$auto(r1, 0x0, 0x0) prctl$auto_PR_PAC_RESET_KEYS(0x36, 0x0, 0xffffffffffffffff, 0x9, 0x7) write$auto(0xffffffffffffffff, 0x0, 0x4) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket(0xa, 0x801, 0x84) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x300, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, 0x0, 0x0) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0xd4, 0x3, 0x6, 0x0, 0x10000, 0x1, 0x2, {0x2100000000, 0x10000}, 0x3, 0x6, 0xffffffffffffffdd, 0x1008000, 0x0, 0x80000004, 0x83, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x1800}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/maps\x00', 0x21000, 0x0) tgkill$auto(0x1, 0x1, 0x5) select$auto(0x1, &(0x7f0000000040)={[0xffffffff00000001, 0xfffffffffffffff7, 0x100, 0x7fff, 0x75, 0x3, 0x9, 0x6, 0xa80d, 0x8000000010000, 0x0, 0x7c43, 0x9, 0x0, 0x4, 0xd133]}, 0x0, 0x0, &(0x7f00000000c0)={0x100}) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) write$auto(0x3, 0x0, 0xfffffdef) r4 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC1\x00', 0x400, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(r4, 0xc4c85512, &(0x7f00000012c0)={{@raw=0x6, 0x0, 0x3, 0x6, "0582a820061b5c51a65a6dd72b0b15addbdf55cb4b0f2381f2673e3a1ebe21e1bf1b26f0db7b62b67bd764f9"}, 0x0, @integer64=@value_ptr=0x0, "528d458095d42b72adda0cac2d45bdaacfc82245992af763188bf00ab57d5d73b094925aa92857fd2f672f85343275f8080000ca41e93023ab4510269ed959a79a789527276d90375018fc08050559d8936b8d72087a5689d4338da78b8b8bdcea8188ca43202fb78dacb3fea1258074885c899d75cd52751f9be959d90fa5c2"}) 3.572348106s ago: executing program 2 (id=2027): mmap$auto(0x0, 0x24009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/platform/vhci_hcd.0/usb10/product\x00', 0x16e82, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000000)=""/189, 0xbd) r1 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x14a402, 0x0) read$auto(0x3, 0x0, 0x1f40) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r2 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000200)='/dev/mtd0ro\x00', 0x7bb900, 0x0) ioctl$auto(r2, 0xc0184d13, 0xd3) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, 0x0, 0x0) set_mempolicy$auto(0x9, &(0x7f0000000240)=0x10000009, 0x7) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$auto_SIOCSIFHWADDR2(0xffffffffffffffff, 0x8924, &(0x7f00000001c0)="b01604b6eb024941cd27f29fcb9003e1f5824cc088ab63ddf91e1543d4366ce811007d9a5d80fccc843f769fb9c8da5db1ae") mprotect$auto(0xa1f, 0x5, 0x3) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x0) socket(0x1a, 0x80000, 0x84) unshare$auto(0x40000080) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x8081, 0x0) openat$auto_proc_sessionid_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/sessionid\x00', 0x1c801, 0x0) openat$auto_proc_mountstats_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) openat$auto_sync_info_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000140), 0x68082, 0x0) mmap$auto(0xfffffffffffffffd, 0x400000202000d, 0x3, 0x1010, 0xfffffffffffffffa, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810005, 0x7, 0xdd, r1, 0x80000800a) sysfs$auto(0x2, 0x10000000000002f, 0x0) madvise$auto(0x0, 0x2, 0x9) socket(0x2, 0x1, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) 3.415499892s ago: executing program 0 (id=2028): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r0 = socket(0x1e, 0x1, 0x0) socket(0x28, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2b, 0x1, 0x1) openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/media11\x00', 0x1, 0x0) ioctl$auto(0x3, 0x541b, 0x10000000000402) r1 = pipe2$auto(0x0, 0x80) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0xa, 0xa) mmap$auto(0x1, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r2 = getgid() setresgid$auto(0xffffffffffffffff, r2, 0x0) r3 = gettid() kill$auto(r3, 0x11) listen$auto(r0, 0x30) msgctl$auto_IPC_SET(0x6, 0x1, &(0x7f0000000100)={{0x9, 0xee00, r2, 0x0, 0x3f3, 0x84e3, 0x8}, &(0x7f0000000080)=0x2, &(0x7f00000000c0)=0x8, 0x80, 0x8, 0x7fffffff, 0x8001, 0x5, 0x6, 0xbed, 0x1, @inferred=r3, @raw=0xc00}) ioctl$auto_XFS_IOC_FSGETXATTRA(r1, 0x801c582d, &(0x7f0000000000)={0x1ff, 0x3, 0x3f68, @inferred=r2, 0xe}) r4 = memfd_create$auto(0x0, 0xb) write$auto(r4, 0x0, 0xfd94) fcntl$auto(0xff80000000000000, 0x409, 0x3f) ftruncate$auto(r4, 0xff) setresuid$auto(0x4006, 0xff, 0x6) ioctl$auto(0x1, 0x89a0, 0x8) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) 3.184924549s ago: executing program 0 (id=2029): r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x412a00, 0x0) write$auto_seq_oss_f_ops_seq_oss(r0, 0x0, 0x0) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/psaux\x00', 0x2, 0x0) close_range$auto(0x2, 0xa, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/hugetlb.1GB.limit_in_bytes\x00', 0xa001, 0x0) setsockopt$auto_SO_WIFI_STATUS(r1, 0xfffffff9, 0x29, &(0x7f00000003c0)='/[\xc3\xeexN h\x11\'\x98(%\xc3O\xdc\xe2\x8b\xa9\xf9\xbf!\xfa\xb3\xbf&&\x87[\xd1\xe1\xa0\xd8\x8d\x9e\x02\xd0\xda\xd0\xfd\x02\x97\xe5\xf9\xf8\xee$\x157\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaa9\xd4\x96\xd4\\b_Z\xb3\xcd\xd0@5\xcd\xe5\xf1\xa1\xd9\xb2\x04\xdf\x89\xee\v\x9a\xf0\xe1-\xf4\x8a\xb8+W\xf4\x8c)j\r-\x00\x8b\x88\xf7\xbfv\n5;o\xdf\x97\xbc\xadPiQ\xf7\xd1||i\xb7XX\x19\xa0\xef\x0f?\x9c\x1c7N\xd5\x0f\xfa\xb9(j\xa4\xac\xf0\xec\xb7<\xca|f\x0f\xdd\x01\xdf\x96p\x87GYY\xac \x12>4a\xf4\xdd\x1d\xe1YN\xf6\xb3\x91[q\x9e\xdd`\x84_\r\xc2\x17\xb1\xaf\xd2\f\xfd[Iy\xbb*$\xec\xca\x8b\xde\xdcV@\x04+\x00\x00\t\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\xc3\xa2\x1a\xf1\xdf\x12\b?Q\xec*\b`\'\xfe\xcb\xe9\xc0\xf4\x119\xf6f\v\xf7\x13\xe6\xd8\xa2\xd3\xfd\xa7', 0xba) shmctl$auto_SHM_LOCK(0x1, 0xb, &(0x7f00000003c0)={{0x4, 0x0, 0xee01, 0x18, 0x9, 0x21, 0x6}, 0xe, 0xc4, 0x1, 0x4, @inferred, @raw=0x4c000, 0x3, 0x0, 0x0, 0x0}) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x810}, 0x4000080) remap_file_pages$auto(0x6a27, 0xffc, 0x0, 0x3, 0x4) close_range$auto(0x2, 0xa, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0) r3 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) read$auto(r3, 0x0, 0xb4d3) write$auto(r1, 0x0, 0x7ff) write$auto(0x3, 0x0, 0xffd8) sendmsg$auto_NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_DISABLE_EHT={0x4}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8, 0xc9, 0x9}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x9884}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}, @NL80211_ATTR_BSS_BASIC_RATES={0x12, 0x24, "055284ef4faa5d1cdea7994c7777"}]}, 0x40}, 0x1, 0x0, 0x0, 0x240000c0}, 0x4008000) kernel console output (not intermixed with test programs): LT_INJECTION: forcing a failure. [ 529.853518][T12951] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 529.876308][T12951] CPU: 0 UID: 0 PID: 12951 Comm: syz.3.1615 Not tainted 6.15.0-rc5-syzkaller-00207-g1a33418a69cc #0 PREEMPT(full) [ 529.876353][T12951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 529.876372][T12951] Call Trace: [ 529.876382][T12951] [ 529.876394][T12951] dump_stack_lvl+0x16c/0x1f0 [ 529.876444][T12951] should_fail_ex+0x512/0x640 [ 529.876495][T12951] _copy_to_user+0x32/0xd0 [ 529.876545][T12951] simple_read_from_buffer+0xcb/0x170 [ 529.876595][T12951] proc_fail_nth_read+0x197/0x270 [ 529.876642][T12951] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 529.876690][T12951] ? rw_verify_area+0xcf/0x680 [ 529.876736][T12951] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 529.876780][T12951] vfs_read+0x1de/0xc70 [ 529.876818][T12951] ? __pfx_vfs_read+0x10/0x10 [ 529.876855][T12951] ? find_held_lock+0x2b/0x80 [ 529.876885][T12951] ? __receive_sock+0x1f4/0x870 [ 529.876937][T12951] ksys_read+0x12a/0x240 [ 529.876966][T12951] ? __pfx_ksys_read+0x10/0x10 [ 529.876993][T12951] ? fput+0x70/0xf0 [ 529.877040][T12951] do_syscall_64+0xcd/0x230 [ 529.877087][T12951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.877118][T12951] RIP: 0033:0x7fb6d118d37c [ 529.877156][T12951] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 529.877188][T12951] RSP: 002b:00007fb6d1f66030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 529.877217][T12951] RAX: ffffffffffffffda RBX: 00007fb6d13b5fa0 RCX: 00007fb6d118d37c [ 529.877239][T12951] RDX: 000000000000000f RSI: 00007fb6d1f660a0 RDI: 0000000000000004 [ 529.877258][T12951] RBP: 00007fb6d1f66090 R08: 0000000000000000 R09: 0000000000000000 [ 529.877277][T12951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 529.877296][T12951] R13: 0000000000000000 R14: 00007fb6d13b5fa0 R15: 00007ffec335d388 [ 529.877337][T12951] [ 530.990714][T12967] lo: entered allmulticast mode [ 531.317363][T12966] lo: left allmulticast mode [ 532.079555][T12993] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 532.086127][T12993] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 533.320945][T12996] kexec: Could not allocate control_code_buffer [ 534.861615][T13041] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 534.868279][T13041] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 535.060559][T13045] __nla_validate_parse: 56 callbacks suppressed [ 535.060586][T13045] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1637'. [ 536.096280][T13053] netlink: 'syz.3.1638': attribute type 11 has an invalid length. [ 537.072808][T13055] kexec: Could not allocate control_code_buffer [ 537.134985][T13068] openvswitch: netlink: Key 18 has unexpected len 20 expected 2 [ 537.775770][T13075] snd_virmidi snd_virmidi.0: control 5:9:1:IAªƒ>/Æ[k<÷ÎÇmgx­Ž¬<Ú5ºœ+-Cî°ÜYÈÝ5:0 is already present [ 537.934675][T13084] netlink: Unknown conntrack attr (type=146, max=9) [ 538.328813][T13088] FAULT_INJECTION: forcing a failure. [ 538.328813][T13088] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 538.409467][T13088] CPU: 1 UID: 0 PID: 13088 Comm: syz.2.1649 Not tainted 6.15.0-rc5-syzkaller-00207-g1a33418a69cc #0 PREEMPT(full) [ 538.409513][T13088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 538.409533][T13088] Call Trace: [ 538.409543][T13088] [ 538.409554][T13088] dump_stack_lvl+0x16c/0x1f0 [ 538.409604][T13088] should_fail_ex+0x512/0x640 [ 538.409654][T13088] _copy_to_user+0x32/0xd0 [ 538.409707][T13088] simple_read_from_buffer+0xcb/0x170 [ 538.409757][T13088] proc_fail_nth_read+0x197/0x270 [ 538.409804][T13088] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 538.409852][T13088] ? rw_verify_area+0xcf/0x680 [ 538.409898][T13088] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 538.409941][T13088] vfs_read+0x1de/0xc70 [ 538.409977][T13088] ? __pfx___mutex_lock+0x10/0x10 [ 538.410022][T13088] ? __pfx_vfs_read+0x10/0x10 [ 538.410064][T13088] ? __fget_files+0x20e/0x3c0 [ 538.410126][T13088] ksys_read+0x12a/0x240 [ 538.410156][T13088] ? __pfx_ksys_read+0x10/0x10 [ 538.410182][T13088] ? rcu_is_watching+0x12/0xc0 [ 538.410224][T13088] do_syscall_64+0xcd/0x230 [ 538.410274][T13088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.410306][T13088] RIP: 0033:0x7f4892f8d37c [ 538.410331][T13088] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 538.410362][T13088] RSP: 002b:00007f4890df6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 538.410393][T13088] RAX: ffffffffffffffda RBX: 00007f48931b5fa0 RCX: 00007f4892f8d37c [ 538.410423][T13088] RDX: 000000000000000f RSI: 00007f4890df60a0 RDI: 0000000000000004 [ 538.410444][T13088] RBP: 00007f4890df6090 R08: 0000000000000000 R09: 0000000000000000 [ 538.410463][T13088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 538.410482][T13088] R13: 0000000000000000 R14: 00007f48931b5fa0 R15: 00007ffef302d718 [ 538.410527][T13088] [ 539.288993][T13108] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1652'. [ 539.422850][T13107] FAULT_INJECTION: forcing a failure. [ 539.422850][T13107] name failslab, interval 1, probability 0, space 0, times 0 [ 539.462949][T13107] CPU: 1 UID: 0 PID: 13107 Comm: syz.3.1655 Not tainted 6.15.0-rc5-syzkaller-00207-g1a33418a69cc #0 PREEMPT(full) [ 539.462995][T13107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 539.463014][T13107] Call Trace: [ 539.463023][T13107] [ 539.463035][T13107] dump_stack_lvl+0x16c/0x1f0 [ 539.463093][T13107] should_fail_ex+0x512/0x640 [ 539.463136][T13107] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 539.463178][T13107] should_failslab+0xc2/0x120 [ 539.463218][T13107] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 539.463253][T13107] ? __alloc_skb+0x2b2/0x380 [ 539.463295][T13107] __alloc_skb+0x2b2/0x380 [ 539.463328][T13107] ? __pfx___alloc_skb+0x10/0x10 [ 539.463359][T13107] ? __schedule+0x1186/0x5de0 [ 539.463413][T13107] alloc_skb_with_frags+0xe0/0x860 [ 539.463459][T13107] ? __lock_acquire+0xaa4/0x1ba0 [ 539.463504][T13107] sock_alloc_send_pskb+0x7fb/0x990 [ 539.463539][T13107] ? _copy_from_iter+0x161/0x15b0 [ 539.463595][T13107] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 539.463631][T13107] ? find_held_lock+0x2b/0x80 [ 539.463665][T13107] ? mark_held_locks+0x49/0x80 [ 539.463703][T13107] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 539.463751][T13107] j1939_sk_sendmsg+0x6bc/0x13d0 [ 539.463795][T13107] ? import_ubuf+0x101/0x220 [ 539.463845][T13107] ? __pfx_j1939_sk_sendmsg+0x10/0x10 [ 539.463876][T13107] ? __might_fault+0x13b/0x190 [ 539.463925][T13107] ____sys_sendmsg+0xa95/0xc70 [ 539.463972][T13107] ? copy_msghdr_from_user+0x10a/0x160 [ 539.464008][T13107] ? __pfx_____sys_sendmsg+0x10/0x10 [ 539.464074][T13107] ? __pfx__kstrtoull+0x10/0x10 [ 539.464120][T13107] ___sys_sendmsg+0x134/0x1d0 [ 539.464159][T13107] ? __pfx____sys_sendmsg+0x10/0x10 [ 539.464216][T13107] ? find_held_lock+0x2b/0x80 [ 539.464274][T13107] __sys_sendmmsg+0x200/0x420 [ 539.464315][T13107] ? __pfx___sys_sendmmsg+0x10/0x10 [ 539.464367][T13107] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 539.464432][T13107] ? fput+0x70/0xf0 [ 539.464469][T13107] ? ksys_write+0x1b9/0x240 [ 539.464498][T13107] ? __pfx_ksys_write+0x10/0x10 [ 539.464526][T13107] ? rcu_is_watching+0x12/0xc0 [ 539.464563][T13107] __x64_sys_sendmmsg+0x9c/0x100 [ 539.464599][T13107] ? lockdep_hardirqs_on+0x7c/0x110 [ 539.464642][T13107] do_syscall_64+0xcd/0x230 [ 539.464690][T13107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.464723][T13107] RIP: 0033:0x7fb6d118e969 [ 539.464748][T13107] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 539.464779][T13107] RSP: 002b:00007fb6d1f66038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 539.464808][T13107] RAX: ffffffffffffffda RBX: 00007fb6d13b5fa0 RCX: 00007fb6d118e969 [ 539.464829][T13107] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 539.464848][T13107] RBP: 00007fb6d1f66090 R08: 0000000000000000 R09: 0000000000000000 [ 539.464867][T13107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 539.464885][T13107] R13: 0000000000000000 R14: 00007fb6d13b5fa0 R15: 00007ffec335d388 [ 539.464928][T13107] [ 540.271857][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802df8c400: rx timeout, send abort [ 540.280440][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802df8c800: rx timeout, send abort [ 540.288977][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88802df8c400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 540.303450][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88802df8c800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 540.523595][T13101] kexec: Could not allocate control_code_buffer [ 540.726328][ T30] audit: type=1800 audit(4294967665.766:9): pid=13117 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1656" name="members" dev="configfs" ino=35002 res=0 errno=0 [ 542.160183][T13152] FAULT_INJECTION: forcing a failure. [ 542.160183][T13152] name failslab, interval 1, probability 0, space 0, times 0 [ 542.181369][T13152] CPU: 0 UID: 0 PID: 13152 Comm: syz.3.1665 Not tainted 6.15.0-rc5-syzkaller-00207-g1a33418a69cc #0 PREEMPT(full) [ 542.181413][T13152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 542.181431][T13152] Call Trace: [ 542.181443][T13152] [ 542.181453][T13152] dump_stack_lvl+0x16c/0x1f0 [ 542.181495][T13152] should_fail_ex+0x512/0x640 [ 542.181532][T13152] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 542.181564][T13152] should_failslab+0xc2/0x120 [ 542.181596][T13152] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 542.181626][T13152] ? __pmd_alloc+0xc3/0x870 [ 542.181668][T13152] __pmd_alloc+0xc3/0x870 [ 542.181703][T13152] ? find_held_lock+0x2b/0x80 [ 542.181730][T13152] __handle_mm_fault+0x948/0x2a40 [ 542.181765][T13152] ? __pfx___handle_mm_fault+0x10/0x10 [ 542.181810][T13152] ? find_vma+0xbf/0x140 [ 542.181852][T13152] ? __pfx_find_vma+0x10/0x10 [ 542.181891][T13152] handle_mm_fault+0x3fe/0xad0 [ 542.181923][T13152] do_user_addr_fault+0x7a6/0x1370 [ 542.181955][T13152] ? rcu_is_watching+0x12/0xc0 [ 542.181981][T13152] exc_page_fault+0x5c/0xc0 [ 542.182015][T13152] asm_exc_page_fault+0x26/0x30 [ 542.182041][T13152] RIP: 0010:rep_movs_alternative+0x30/0x90 [ 542.182070][T13152] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 542.182097][T13152] RSP: 0018:ffffc90003af7be8 EFLAGS: 00050246 [ 542.182118][T13152] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000008 [ 542.182133][T13152] RDX: fffff5200075efa2 RSI: 0000000000000000 RDI: ffffc90003af7d08 [ 542.182149][T13152] RBP: 0000000000000008 R08: 0000000000000001 R09: fffff5200075efa1 [ 542.182165][T13152] R10: ffffc90003af7d0f R11: 0000000000000000 R12: 0000000000000000 [ 542.182180][T13152] R13: ffffc90003af7d08 R14: ffffc90003af7d08 R15: 0000000000000000 [ 542.182214][T13152] _copy_from_user+0x98/0xd0 [ 542.182255][T13152] copy_from_sockptr_offset.constprop.0+0x136/0x170 [ 542.182293][T13152] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 542.182334][T13152] ? __local_bh_enable_ip+0xa4/0x120 [ 542.182372][T13152] vsock_connectible_setsockopt+0x2b2/0x770 [ 542.182410][T13152] ? __pfx_vsock_connectible_setsockopt+0x10/0x10 [ 542.182446][T13152] ? __pfx_aa_sk_perm+0x10/0x10 [ 542.182477][T13152] ? find_held_lock+0x2b/0x80 [ 542.182508][T13152] ? __pfx_vsock_connectible_setsockopt+0x10/0x10 [ 542.182544][T13152] do_sock_setsockopt+0x221/0x470 [ 542.182579][T13152] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 542.182634][T13152] __sys_setsockopt+0x120/0x1a0 [ 542.182667][T13152] __x64_sys_setsockopt+0xbd/0x160 [ 542.182693][T13152] ? do_syscall_64+0x91/0x230 [ 542.182728][T13152] ? lockdep_hardirqs_on+0x7c/0x110 [ 542.182763][T13152] do_syscall_64+0xcd/0x230 [ 542.182802][T13152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.182833][T13152] RIP: 0033:0x7fb6d118e969 [ 542.182852][T13152] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 542.182877][T13152] RSP: 002b:00007fb6d1f66038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 542.182899][T13152] RAX: ffffffffffffffda RBX: 00007fb6d13b5fa0 RCX: 00007fb6d118e969 [ 542.182916][T13152] RDX: 0000000000000000 RSI: 0000000000000028 RDI: 0400000000000003 [ 542.182931][T13152] RBP: 00007fb6d1f66090 R08: 000000000000056b R09: 0000000000000000 [ 542.182947][T13152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 542.182962][T13152] R13: 0000000000000000 R14: 00007fb6d13b5fa0 R15: 00007ffec335d388 [ 542.182994][T13152] [ 542.542428][ C0] vkms_vblank_simulate: vblank timer overrun [ 542.741632][T13139] snd_virmidi snd_virmidi.0: control 5:9:1:IAªƒ>/Æ[k<÷ÎÇmgx­Ž¬<Ú5ºœ+-Cî°ÜYÈÝ5:0 is already present [ 544.303002][T13154] kexec: Could not allocate control_code_buffer [ 545.497958][T13189] FAULT_INJECTION: forcing a failure. [ 545.497958][T13189] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 545.538217][T13189] CPU: 1 UID: 0 PID: 13189 Comm: syz.3.1674 Not tainted 6.15.0-rc5-syzkaller-00207-g1a33418a69cc #0 PREEMPT(full) [ 545.538264][T13189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 545.538283][T13189] Call Trace: [ 545.538293][T13189] [ 545.538305][T13189] dump_stack_lvl+0x16c/0x1f0 [ 545.538355][T13189] should_fail_ex+0x512/0x640 [ 545.538406][T13189] _copy_to_user+0x32/0xd0 [ 545.538457][T13189] simple_read_from_buffer+0xcb/0x170 [ 545.538508][T13189] proc_fail_nth_read+0x197/0x270 [ 545.538555][T13189] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 545.538601][T13189] ? rw_verify_area+0xcf/0x680 [ 545.538646][T13189] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 545.538691][T13189] vfs_read+0x1de/0xc70 [ 545.538727][T13189] ? __pfx___mutex_lock+0x10/0x10 [ 545.538771][T13189] ? __pfx_vfs_read+0x10/0x10 [ 545.538821][T13189] ? __fget_files+0x20e/0x3c0 [ 545.538883][T13189] ksys_read+0x12a/0x240 [ 545.538913][T13189] ? __pfx_ksys_read+0x10/0x10 [ 545.538940][T13189] ? rcu_is_watching+0x12/0xc0 [ 545.538982][T13189] do_syscall_64+0xcd/0x230 [ 545.539032][T13189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.539064][T13189] RIP: 0033:0x7fb6d118d37c [ 545.539090][T13189] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 545.539121][T13189] RSP: 002b:00007fb6d1f66030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 545.539152][T13189] RAX: ffffffffffffffda RBX: 00007fb6d13b5fa0 RCX: 00007fb6d118d37c [ 545.539189][T13189] RDX: 000000000000000f RSI: 00007fb6d1f660a0 RDI: 0000000000000004 [ 545.539209][T13189] RBP: 00007fb6d1f66090 R08: 0000000000000000 R09: 0000000000000000 [ 545.539228][T13189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 545.539247][T13189] R13: 0000000000000000 R14: 00007fb6d13b5fa0 R15: 00007ffec335d388 [ 545.539289][T13189] [ 546.960257][T13195] bond0: option all_slaves_active: invalid value ( ) [ 547.049261][T13210] bond0: option all_slaves_active: invalid value (]\/) [ 547.880982][T13227] FAULT_INJECTION: forcing a failure. [ 547.880982][T13227] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 547.926153][T13227] CPU: 1 UID: 0 PID: 13227 Comm: syz.3.1682 Not tainted 6.15.0-rc5-syzkaller-00207-g1a33418a69cc #0 PREEMPT(full) [ 547.926187][T13227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 547.926201][T13227] Call Trace: [ 547.926209][T13227] [ 547.926218][T13227] dump_stack_lvl+0x16c/0x1f0 [ 547.926255][T13227] should_fail_ex+0x512/0x640 [ 547.926292][T13227] _copy_to_iter+0x477/0x15a0 [ 547.926335][T13227] ? __pfx__copy_to_iter+0x10/0x10 [ 547.926371][T13227] ? seq_write+0xd6/0x150 [ 547.926403][T13227] ? seq_show+0x3a2/0x7a0 [ 547.926437][T13227] seq_read_iter+0xcf8/0x12c0 [ 547.926484][T13227] seq_read+0x39e/0x4e0 [ 547.926517][T13227] ? __pfx_seq_read+0x10/0x10 [ 547.926555][T13227] ? get_pid_task+0xfc/0x250 [ 547.926599][T13227] ? __pfx_seq_read+0x10/0x10 [ 547.926630][T13227] proc_reg_read+0x23d/0x330 [ 547.926653][T13227] ? __pfx_proc_reg_read+0x10/0x10 [ 547.926680][T13227] vfs_read+0x1de/0xc70 [ 547.926706][T13227] ? __pfx___mutex_lock+0x10/0x10 [ 547.926738][T13227] ? __pfx_vfs_read+0x10/0x10 [ 547.926767][T13227] ? __fget_files+0x20e/0x3c0 [ 547.926811][T13227] ksys_read+0x12a/0x240 [ 547.926832][T13227] ? __pfx_ksys_read+0x10/0x10 [ 547.926851][T13227] ? rcu_is_watching+0x12/0xc0 [ 547.926881][T13227] do_syscall_64+0xcd/0x230 [ 547.926916][T13227] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.926940][T13227] RIP: 0033:0x7fb6d118e969 [ 547.926958][T13227] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 547.926980][T13227] RSP: 002b:00007fb6d1f66038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 547.927001][T13227] RAX: ffffffffffffffda RBX: 00007fb6d13b5fa0 RCX: 00007fb6d118e969 [ 547.927016][T13227] RDX: 00000000000000f8 RSI: 0000200000000080 RDI: 0000000000000003 [ 547.927030][T13227] RBP: 00007fb6d1f66090 R08: 0000000000000000 R09: 0000000000000000 [ 547.927043][T13227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 547.927057][T13227] R13: 0000000000000000 R14: 00007fb6d13b5fa0 R15: 00007ffec335d388 [ 547.927086][T13227] [ 548.309472][T13215] kexec: Could not allocate control_code_buffer [ 549.899205][T13250] snd_virmidi snd_virmidi.0: control 5:9:1:IAªƒ>/Æ[k<÷ÎÇmgx­Ž¬<Ú5ºœ+-Cî°ÜYÈÝ5:0 is already present [ 551.004626][T13281] FAULT_INJECTION: forcing a failure. [ 551.004626][T13281] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 551.019104][T13281] CPU: 1 UID: 0 PID: 13281 Comm: syz.2.1695 Not tainted 6.15.0-rc5-syzkaller-00207-g1a33418a69cc #0 PREEMPT(full) [ 551.019149][T13281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 551.019168][T13281] Call Trace: [ 551.019178][T13281] [ 551.019189][T13281] dump_stack_lvl+0x16c/0x1f0 [ 551.019239][T13281] should_fail_ex+0x512/0x640 [ 551.019289][T13281] _copy_to_user+0x32/0xd0 [ 551.019339][T13281] simple_read_from_buffer+0xcb/0x170 [ 551.019390][T13281] proc_fail_nth_read+0x197/0x270 [ 551.019435][T13281] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 551.019482][T13281] ? rw_verify_area+0xcf/0x680 [ 551.019526][T13281] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 551.019572][T13281] vfs_read+0x1de/0xc70 [ 551.019606][T13281] ? __pfx___mutex_lock+0x10/0x10 [ 551.019651][T13281] ? __pfx_vfs_read+0x10/0x10 [ 551.019691][T13281] ? __fget_files+0x20e/0x3c0 [ 551.019753][T13281] ksys_read+0x12a/0x240 [ 551.019781][T13281] ? __pfx_ksys_read+0x10/0x10 [ 551.019823][T13281] do_syscall_64+0xcd/0x230 [ 551.019870][T13281] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.019902][T13281] RIP: 0033:0x7f4892f8d37c [ 551.019928][T13281] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 551.019958][T13281] RSP: 002b:00007f4890df6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 551.019987][T13281] RAX: ffffffffffffffda RBX: 00007f48931b5fa0 RCX: 00007f4892f8d37c [ 551.020008][T13281] RDX: 000000000000000f RSI: 00007f4890df60a0 RDI: 0000000000000004 [ 551.020064][T13281] RBP: 00007f4890df6090 R08: 0000000000000000 R09: 0000000000000000 [ 551.020082][T13281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 551.020101][T13281] R13: 0000000000000000 R14: 00007f48931b5fa0 R15: 00007ffef302d718 [ 551.020142][T13281] [ 551.527165][T13287] lo: entered allmulticast mode [ 551.540633][T13286] lo: left allmulticast mode [ 552.097192][T13291] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 552.497992][T13280] kexec: Could not allocate control_code_buffer [ 552.798667][T13301] snd_virmidi snd_virmidi.0: control 5:9:1:IAªƒ>/Æ[k<÷ÎÇmgx­Ž¬<Ú5ºœ+-Cî°ÜYÈÝ5:0 is already present [ 552.869722][T13309] device-mapper: ioctl: ioctl interface mismatch: kernel(4.49.0), user(0.0.0), cmd(5) [ 552.977884][T13307] FAULT_INJECTION: forcing a failure. [ 552.977884][T13307] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 553.002653][T13307] CPU: 1 UID: 0 PID: 13307 Comm: syz.0.1702 Not tainted 6.15.0-rc5-syzkaller-00207-g1a33418a69cc #0 PREEMPT(full) [ 553.002694][T13307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 553.002709][T13307] Call Trace: [ 553.002718][T13307] [ 553.002728][T13307] dump_stack_lvl+0x16c/0x1f0 [ 553.002770][T13307] should_fail_ex+0x512/0x640 [ 553.002813][T13307] _copy_from_user+0x2e/0xd0 [ 553.002854][T13307] vmemdup_user+0x66/0xe0 [ 553.002899][T13307] __sys_bpf+0x3ecc/0x4d80 [ 553.002940][T13307] ? __pfx___sys_bpf+0x10/0x10 [ 553.002978][T13307] ? ksys_write+0x190/0x240 [ 553.003007][T13307] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 553.003065][T13307] ? fput+0x70/0xf0 [ 553.003095][T13307] ? ksys_write+0x1b9/0x240 [ 553.003119][T13307] ? __pfx_ksys_write+0x10/0x10 [ 553.003143][T13307] ? rcu_is_watching+0x12/0xc0 [ 553.003172][T13307] __x64_sys_bpf+0x78/0xc0 [ 553.003209][T13307] ? lockdep_hardirqs_on+0x7c/0x110 [ 553.003244][T13307] do_syscall_64+0xcd/0x230 [ 553.003284][T13307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.003310][T13307] RIP: 0033:0x7f25d2d8e969 [ 553.003332][T13307] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 553.003358][T13307] RSP: 002b:00007f25d3bb6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 553.003383][T13307] RAX: ffffffffffffffda RBX: 00007f25d2fb5fa0 RCX: 00007f25d2d8e969 [ 553.003400][T13307] RDX: 000000000000000f RSI: 00002000000001c0 RDI: 0000000000000004 [ 553.003416][T13307] RBP: 00007f25d3bb6090 R08: 0000000000000000 R09: 0000000000000000 [ 553.003432][T13307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 553.003447][T13307] R13: 0000000000000000 R14: 00007f25d2fb5fa0 R15: 00007ffd070ad2b8 [ 553.003480][T13307] [ 553.768663][T13320] FAULT_INJECTION: forcing a failure. [ 553.768663][T13320] name failslab, interval 1, probability 0, space 0, times 0 [ 553.848202][T13320] CPU: 0 UID: 0 PID: 13320 Comm: syz.0.1705 Not tainted 6.15.0-rc5-syzkaller-00207-g1a33418a69cc #0 PREEMPT(full) [ 553.848249][T13320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 553.848269][T13320] Call Trace: [ 553.848280][T13320] [ 553.848292][T13320] dump_stack_lvl+0x16c/0x1f0 [ 553.848346][T13320] should_fail_ex+0x512/0x640 [ 553.848390][T13320] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 553.848436][T13320] should_failslab+0xc2/0x120 [ 553.848477][T13320] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 553.848519][T13320] ? xfrm_sysctl_init+0x10a/0x2d0 [ 553.848575][T13320] kmemdup_noprof+0x29/0x60 [ 553.848618][T13320] xfrm_sysctl_init+0x10a/0x2d0 [ 553.848674][T13320] xfrm_net_init+0x842/0xcc0 [ 553.848730][T13320] ? __pfx_xfrm_net_init+0x10/0x10 [ 553.848779][T13320] ops_init+0x1df/0x5f0 [ 553.848822][T13320] setup_net+0x21e/0x850 [ 553.848876][T13320] ? __pfx_setup_net+0x10/0x10 [ 553.848913][T13320] ? lockdep_init_map_type+0x5c/0x280 [ 553.848958][T13320] ? __pfx_down_read_killable+0x10/0x10 [ 553.849015][T13320] ? debug_mutex_init+0x37/0x70 [ 553.849054][T13320] copy_net_ns+0x2a6/0x5f0 [ 553.849100][T13320] create_new_namespaces+0x3ea/0xad0 [ 553.849145][T13320] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 553.849184][T13320] ksys_unshare+0x45b/0xa40 [ 553.849226][T13320] ? __pfx_ksys_unshare+0x10/0x10 [ 553.849267][T13320] ? xfd_validate_state+0x5d/0x180 [ 553.849319][T13320] ? rcu_is_watching+0x12/0xc0 [ 553.849358][T13320] __x64_sys_unshare+0x31/0x40 [ 553.849403][T13320] do_syscall_64+0xcd/0x230 [ 553.849453][T13320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.849486][T13320] RIP: 0033:0x7f25d2d8e969 [ 553.849512][T13320] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 553.849544][T13320] RSP: 002b:00007f25d3bb6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 553.849575][T13320] RAX: ffffffffffffffda RBX: 00007f25d2fb5fa0 RCX: 00007f25d2d8e969 [ 553.849597][T13320] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 553.849617][T13320] RBP: 00007f25d2e10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 553.849637][T13320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 553.849657][T13320] R13: 0000000000000000 R14: 00007f25d2fb5fa0 R15: 00007ffd070ad2b8 [ 553.849699][T13320] [ 555.600969][T13345] kexec: Could not allocate control_code_buffer [ 555.933721][T13361] svc: failed to register nfsdv3 RPC service (errno 111). [ 555.968114][T13361] svc: failed to register nfsaclv3 RPC service (errno 111). [ 556.040251][T13359] snd_virmidi snd_virmidi.0: control 5:9:1:IAªƒ>/Æ[k<÷ÎÇmgx­Ž¬<Ú5ºœ+-Cî°ÜYÈÝ5:0 is already present [ 556.210994][T13368] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 556.528080][T13376] input: jJǸ-¶š9ã%vø“û¨lÐQ  J86Ö‘ as /devices/virtual/input/input14 [ 557.396237][ T30] audit: type=1800 audit(4294967682.436:10): pid=13391 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1722" name="lu_gp_id" dev="configfs" ino=35531 res=0 errno=0 [ 557.501772][T13394] FAULT_INJECTION: forcing a failure. [ 557.501772][T13394] name failslab, interval 1, probability 0, space 0, times 0 [ 557.524106][T13394] CPU: 1 UID: 0 PID: 13394 Comm: syz.0.1723 Not tainted 6.15.0-rc5-syzkaller-00207-g1a33418a69cc #0 PREEMPT(full) [ 557.524150][T13394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 557.524168][T13394] Call Trace: [ 557.524178][T13394] [ 557.524189][T13394] dump_stack_lvl+0x16c/0x1f0 [ 557.524239][T13394] should_fail_ex+0x512/0x640 [ 557.524291][T13394] should_failslab+0xc2/0x120 [ 557.524330][T13394] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 557.524368][T13394] ? skb_clone+0x190/0x3f0 [ 557.524411][T13394] skb_clone+0x190/0x3f0 [ 557.524449][T13394] netlink_deliver_tap+0xabd/0xd30 [ 557.524506][T13394] netlink_unicast+0x6b2/0x7f0 [ 557.524551][T13394] ? __pfx_netlink_unicast+0x10/0x10 [ 557.524588][T13394] ? genl_rcv_msg+0x4bb/0x800 [ 557.524642][T13394] netlink_ack+0x696/0xb80 [ 557.524695][T13394] netlink_rcv_skb+0x347/0x440 [ 557.524736][T13394] ? __pfx_genl_rcv_msg+0x10/0x10 [ 557.524783][T13394] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 557.524845][T13394] ? __pfx_down_read+0x10/0x10 [ 557.524896][T13394] ? netlink_deliver_tap+0x1ae/0xd30 [ 557.524940][T13394] genl_rcv+0x28/0x40 [ 557.524980][T13394] netlink_unicast+0x53a/0x7f0 [ 557.525026][T13394] ? __pfx_netlink_unicast+0x10/0x10 [ 557.525062][T13394] ? __lock_acquire+0xaa4/0x1ba0 [ 557.525120][T13394] netlink_sendmsg+0x8d1/0xdd0 [ 557.525167][T13394] ? __pfx_netlink_sendmsg+0x10/0x10 [ 557.525225][T13394] ____sys_sendmsg+0xa95/0xc70 [ 557.525272][T13394] ? copy_msghdr_from_user+0x10a/0x160 [ 557.525308][T13394] ? __pfx_____sys_sendmsg+0x10/0x10 [ 557.525374][T13394] ___sys_sendmsg+0x134/0x1d0 [ 557.525413][T13394] ? __pfx____sys_sendmsg+0x10/0x10 [ 557.525527][T13394] __sys_sendmsg+0x16d/0x220 [ 557.525565][T13394] ? __pfx___sys_sendmsg+0x10/0x10 [ 557.525615][T13394] ? rcu_is_watching+0x12/0xc0 [ 557.525657][T13394] do_syscall_64+0xcd/0x230 [ 557.525707][T13394] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.525740][T13394] RIP: 0033:0x7f25d2d8e969 [ 557.525764][T13394] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 557.525794][T13394] RSP: 002b:00007f25d3bb6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 557.525822][T13394] RAX: ffffffffffffffda RBX: 00007f25d2fb5fa0 RCX: 00007f25d2d8e969 [ 557.525843][T13394] RDX: 0000000000000080 RSI: 0000200000000280 RDI: 0000000000000003 [ 557.525863][T13394] RBP: 00007f25d3bb6090 R08: 0000000000000000 R09: 0000000000000000 [ 557.525881][T13394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 557.525899][T13394] R13: 0000000000000000 R14: 00007f25d2fb5fa0 R15: 00007ffd070ad2b8 [ 557.525941][T13394] [ 558.206574][T13400] snd_virmidi snd_virmidi.0: control 5:9:1:IAªƒ>/Æ[k<÷ÎÇmgx­Ž¬<Ú5ºœ+-Cî°ÜYÈÝ5:0 is already present [ 558.260248][T13408] FAULT_INJECTION: forcing a failure. [ 558.260248][T13408] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 558.302063][T13408] CPU: 0 UID: 0 PID: 13408 Comm: syz.3.1728 Not tainted 6.15.0-rc5-syzkaller-00207-g1a33418a69cc #0 PREEMPT(full) [ 558.302108][T13408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 558.302126][T13408] Call Trace: [ 558.302136][T13408] [ 558.302147][T13408] dump_stack_lvl+0x16c/0x1f0 [ 558.302197][T13408] should_fail_ex+0x512/0x640 [ 558.302246][T13408] should_fail_alloc_page+0xe7/0x130 [ 558.302288][T13408] prepare_alloc_pages+0x3c2/0x610 [ 558.302344][T13408] __alloc_frozen_pages_noprof+0x18f/0x23a0 [ 558.302384][T13408] ? stack_trace_save+0x8e/0xc0 [ 558.302415][T13408] ? __pfx_stack_trace_save+0x10/0x10 [ 558.302447][T13408] ? stack_depot_save_flags+0x28/0xa50 [ 558.302496][T13408] ? __alloc_frozen_pages_noprof+0x298/0x23a0 [ 558.302538][T13408] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 558.302574][T13408] ? __kasan_slab_alloc+0x89/0x90 [ 558.302609][T13408] ? __pmd_alloc+0xc3/0x870 [ 558.302662][T13408] ? handle_mm_fault+0x3fe/0xad0 [ 558.302690][T13408] ? do_user_addr_fault+0x7a6/0x1370 [ 558.302720][T13408] ? exc_page_fault+0x5c/0xc0 [ 558.302757][T13408] ? asm_exc_page_fault+0x26/0x30 [ 558.302786][T13408] ? rep_movs_alternative+0xf/0x90 [ 558.302817][T13408] ? _copy_from_user+0x98/0xd0 [ 558.302862][T13408] ? map_update_elem+0x741/0x920 [ 558.302914][T13408] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 558.302960][T13408] ? policy_nodemask+0xea/0x4e0 [ 558.303002][T13408] alloc_pages_mpol+0x1fb/0x550 [ 558.303042][T13408] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 558.303084][T13408] ? cgroup_rstat_updated+0x2a/0xb20 [ 558.303140][T13408] alloc_pages_noprof+0x131/0x390 [ 558.303180][T13408] pte_alloc_one+0x19/0x380 [ 558.303216][T13408] do_pte_missing+0x1c0b/0x3fb0 [ 558.303249][T13408] ? do_raw_spin_unlock+0x172/0x230 [ 558.303299][T13408] ? __pmd_alloc+0x3c2/0x870 [ 558.303342][T13408] ? find_held_lock+0x2b/0x80 [ 558.303375][T13408] __handle_mm_fault+0x103d/0x2a40 [ 558.303420][T13408] ? __pfx___handle_mm_fault+0x10/0x10 [ 558.303476][T13408] ? find_vma+0xbf/0x140 [ 558.303520][T13408] ? __pfx_find_vma+0x10/0x10 [ 558.303568][T13408] handle_mm_fault+0x3fe/0xad0 [ 558.303608][T13408] do_user_addr_fault+0x7a6/0x1370 [ 558.303656][T13408] ? rcu_is_watching+0x12/0xc0 [ 558.303690][T13408] exc_page_fault+0x5c/0xc0 [ 558.303731][T13408] asm_exc_page_fault+0x26/0x30 [ 558.303759][T13408] RIP: 0010:rep_movs_alternative+0xf/0x90 [ 558.303795][T13408] Code: c4 10 c3 cc cc cc cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 66 [ 558.303826][T13408] RSP: 0018:ffffc90017edfbd0 EFLAGS: 00050202 [ 558.303850][T13408] RAX: 0000000000000001 RBX: 0000000000000003 RCX: 0000000000000004 [ 558.303869][T13408] RDX: ffffed10064d2a40 RSI: 0000000000000003 RDI: ffff888032695200 [ 558.303889][T13408] RBP: 0000000000000004 R08: 0000000000000001 R09: ffffed10064d2a40 [ 558.303907][T13408] R10: 0000000000000003 R11: 0000000000000000 R12: 0000000000000000 [ 558.303926][T13408] R13: ffff888032695200 R14: ffff88802a5bda40 R15: 1ffff92002fdbf87 [ 558.303969][T13408] _copy_from_user+0x98/0xd0 [ 558.304018][T13408] map_update_elem+0x741/0x920 [ 558.304062][T13408] ? __pfx_map_update_elem+0x10/0x10 [ 558.304112][T13408] __sys_bpf+0x1616/0x4d80 [ 558.304164][T13408] ? __pfx___sys_bpf+0x10/0x10 [ 558.304210][T13408] ? ksys_write+0x190/0x240 [ 558.304246][T13408] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 558.304318][T13408] ? fput+0x70/0xf0 [ 558.304354][T13408] ? ksys_write+0x1b9/0x240 [ 558.304381][T13408] ? __pfx_ksys_write+0x10/0x10 [ 558.304407][T13408] ? rcu_is_watching+0x12/0xc0 [ 558.304441][T13408] __x64_sys_bpf+0x78/0xc0 [ 558.304486][T13408] ? lockdep_hardirqs_on+0x7c/0x110 [ 558.304528][T13408] do_syscall_64+0xcd/0x230 [ 558.304577][T13408] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.304608][T13408] RIP: 0033:0x7fb6d118e969 [ 558.304634][T13408] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 558.304673][T13408] RSP: 002b:00007fb6d1f66038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 558.304702][T13408] RAX: ffffffffffffffda RBX: 00007fb6d13b5fa0 RCX: 00007fb6d118e969 [ 558.304722][T13408] RDX: 0000000000000091 RSI: 00002000000000c0 RDI: 0000000000000002 [ 558.304742][T13408] RBP: 00007fb6d1f66090 R08: 0000000000000000 R09: 0000000000000000 [ 558.304761][T13408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 558.304780][T13408] R13: 0000000000000000 R14: 00007fb6d13b5fa0 R15: 00007ffec335d388 [ 558.304821][T13408] [ 559.166878][T13398] kexec: Could not allocate control_code_buffer [ 562.864943][T13456] kexec: Could not allocate control_code_buffer [ 562.891680][T13477] FAULT_INJECTION: forcing a failure. [ 562.891680][T13477] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 562.921698][T13477] CPU: 0 UID: 0 PID: 13477 Comm: syz.0.1745 Not tainted 6.15.0-rc5-syzkaller-00207-g1a33418a69cc #0 PREEMPT(full) [ 562.921742][T13477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 562.921761][T13477] Call Trace: [ 562.921771][T13477] [ 562.921783][T13477] dump_stack_lvl+0x16c/0x1f0 [ 562.921833][T13477] should_fail_ex+0x512/0x640 [ 562.921885][T13477] _copy_from_user+0x2e/0xd0 [ 562.921935][T13477] snd_rawmidi_kernel_write1+0x50a/0x8a0 [ 562.922001][T13477] snd_rawmidi_write+0x26e/0xc10 [ 562.922063][T13477] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 562.922113][T13477] ? __pfx_default_wake_function+0x10/0x10 [ 562.922149][T13477] ? bpf_lsm_file_permission+0x9/0x10 [ 562.922197][T13477] ? security_file_permission+0x71/0x210 [ 562.922242][T13477] ? rw_verify_area+0xcf/0x680 [ 562.922293][T13477] vfs_write+0x25c/0x1180 [ 562.922337][T13477] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 562.922394][T13477] ? __pfx_vfs_write+0x10/0x10 [ 562.922421][T13477] ? find_held_lock+0x2b/0x80 [ 562.922451][T13477] ? __fget_files+0x204/0x3c0 [ 562.922506][T13477] ? __fget_files+0x20e/0x3c0 [ 562.922567][T13477] ksys_write+0x205/0x240 [ 562.922598][T13477] ? __pfx_ksys_write+0x10/0x10 [ 562.922625][T13477] ? rcu_is_watching+0x12/0xc0 [ 562.922667][T13477] do_syscall_64+0xcd/0x230 [ 562.922721][T13477] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 562.922753][T13477] RIP: 0033:0x7f25d2d8e969 [ 562.922778][T13477] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 562.922809][T13477] RSP: 002b:00007f25d3bb6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 562.922838][T13477] RAX: ffffffffffffffda RBX: 00007f25d2fb5fa0 RCX: 00007f25d2d8e969 [ 562.922860][T13477] RDX: 000000110000a3d9 RSI: 0000200000000340 RDI: 0000000000000007 [ 562.922879][T13477] RBP: 00007f25d3bb6090 R08: 0000000000000000 R09: 0000000000000000 [ 562.922908][T13477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 562.922926][T13477] R13: 0000000000000000 R14: 00007f25d2fb5fa0 R15: 00007ffd070ad2b8 [ 562.922965][T13477] [ 563.139714][ C0] vkms_vblank_simulate: vblank timer overrun [ 563.260592][T13482] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1747'. [ 563.286689][T13485] FAULT_INJECTION: forcing a failure. [ 563.286689][T13485] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 563.336554][T13483] netlink: 186 bytes leftover after parsing attributes in process `syz.1.1747'. [ 563.342773][T13485] CPU: 0 UID: 0 PID: 13485 Comm: syz.2.1746 Not tainted 6.15.0-rc5-syzkaller-00207-g1a33418a69cc #0 PREEMPT(full) [ 563.342820][T13485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 563.342841][T13485] Call Trace: [ 563.342852][T13485] [ 563.342865][T13485] dump_stack_lvl+0x16c/0x1f0 [ 563.342919][T13485] should_fail_ex+0x512/0x640 [ 563.342973][T13485] _copy_from_iter+0x2a4/0x15b0 [ 563.343034][T13485] ? __alloc_skb+0x200/0x380 [ 563.343071][T13485] ? __pfx__copy_from_iter+0x10/0x10 [ 563.343125][T13485] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 563.343165][T13485] ? __lock_acquire+0xaa4/0x1ba0 [ 563.343219][T13485] netlink_sendmsg+0x829/0xdd0 [ 563.343267][T13485] ? __pfx_netlink_sendmsg+0x10/0x10 [ 563.343325][T13485] ____sys_sendmsg+0xa95/0xc70 [ 563.343374][T13485] ? copy_msghdr_from_user+0x10a/0x160 [ 563.343412][T13485] ? __pfx_____sys_sendmsg+0x10/0x10 [ 563.343479][T13485] ___sys_sendmsg+0x134/0x1d0 [ 563.343518][T13485] ? __pfx____sys_sendmsg+0x10/0x10 [ 563.343607][T13485] __sys_sendmsg+0x16d/0x220 [ 563.343645][T13485] ? __pfx___sys_sendmsg+0x10/0x10 [ 563.343711][T13485] do_syscall_64+0xcd/0x230 [ 563.343761][T13485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.343795][T13485] RIP: 0033:0x7f4892f8e969 [ 563.343821][T13485] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 563.343853][T13485] RSP: 002b:00007f4890dd5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 563.343883][T13485] RAX: ffffffffffffffda RBX: 00007f48931b6080 RCX: 00007f4892f8e969 [ 563.343905][T13485] RDX: 0000000000000080 RSI: 00002000000028c0 RDI: 0000000000000004 [ 563.343925][T13485] RBP: 00007f4890dd5090 R08: 0000000000000000 R09: 0000000000000000 [ 563.343945][T13485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 563.343965][T13485] R13: 0000000000000000 R14: 00007f48931b6080 R15: 00007ffef302d718 [ 563.344006][T13485] [ 564.015324][T13504] block nbd0: Unsupported socket: shutdown callout must be supported. [ 564.296292][T13514] netlink: 'syz.3.1757': attribute type 27 has an invalid length. [ 564.317608][T13514] netlink: 334 bytes leftover after parsing attributes in process `syz.3.1757'. [ 564.672165][T13523] zswap: compressor not available [ 565.257640][T13545] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1764'. [ 566.340621][T13566] netlink: 306 bytes leftover after parsing attributes in process `syz.3.1770'. [ 566.384151][T13566] netlink: 306 bytes leftover after parsing attributes in process `syz.3.1770'. [ 566.596038][T13578] FAULT_INJECTION: forcing a failure. [ 566.596038][T13578] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 566.637883][T13578] CPU: 0 UID: 0 PID: 13578 Comm: syz.2.1775 Not tainted 6.15.0-rc5-syzkaller-00207-g1a33418a69cc #0 PREEMPT(full) [ 566.637927][T13578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 566.637946][T13578] Call Trace: [ 566.637956][T13578] [ 566.637967][T13578] dump_stack_lvl+0x16c/0x1f0 [ 566.638015][T13578] should_fail_ex+0x512/0x640 [ 566.638065][T13578] _copy_from_iter+0x2a4/0x15b0 [ 566.638125][T13578] ? __alloc_skb+0x200/0x380 [ 566.638158][T13578] ? __pfx__copy_from_iter+0x10/0x10 [ 566.638210][T13578] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 566.638248][T13578] ? __lock_acquire+0xaa4/0x1ba0 [ 566.638301][T13578] netlink_sendmsg+0x829/0xdd0 [ 566.638348][T13578] ? __pfx_netlink_sendmsg+0x10/0x10 [ 566.638403][T13578] ____sys_sendmsg+0xa95/0xc70 [ 566.638451][T13578] ? copy_msghdr_from_user+0x10a/0x160 [ 566.638486][T13578] ? __pfx_____sys_sendmsg+0x10/0x10 [ 566.638550][T13578] ___sys_sendmsg+0x134/0x1d0 [ 566.638589][T13578] ? __pfx____sys_sendmsg+0x10/0x10 [ 566.638690][T13578] ? __pfx_vfs_write+0x10/0x10 [ 566.638724][T13578] ? do_sys_openat2+0x157/0x1d0 [ 566.638771][T13578] __sys_sendmsg+0x16d/0x220 [ 566.638809][T13578] ? __pfx___sys_sendmsg+0x10/0x10 [ 566.638858][T13578] ? rcu_is_watching+0x12/0xc0 [ 566.638899][T13578] do_syscall_64+0xcd/0x230 [ 566.638947][T13578] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.638979][T13578] RIP: 0033:0x7f4892f8e969 [ 566.639004][T13578] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 566.639035][T13578] RSP: 002b:00007f4890df6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 566.639064][T13578] RAX: ffffffffffffffda RBX: 00007f48931b5fa0 RCX: 00007f4892f8e969 [ 566.639084][T13578] RDX: 0000000000008880 RSI: 0000200000001e00 RDI: 0000000000000000 [ 566.639103][T13578] RBP: 00007f4890df6090 R08: 0000000000000000 R09: 0000000000000000 [ 566.639122][T13578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 566.639140][T13578] R13: 0000000000000000 R14: 00007f48931b5fa0 R15: 00007ffef302d718 [ 566.639181][T13578] [ 567.994307][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.004822][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.827817][T13586] kexec: Could not allocate control_code_buffer [ 570.662972][T13657] FAULT_INJECTION: forcing a failure. [ 570.662972][T13657] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 570.791552][T13657] CPU: 1 UID: 0 PID: 13657 Comm: syz.3.1797 Not tainted 6.15.0-rc5-syzkaller-00207-g1a33418a69cc #0 PREEMPT(full) [ 570.791597][T13657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 570.791616][T13657] Call Trace: [ 570.791630][T13657] [ 570.791642][T13657] dump_stack_lvl+0x16c/0x1f0 [ 570.791692][T13657] should_fail_ex+0x512/0x640 [ 570.791742][T13657] _copy_to_user+0x32/0xd0 [ 570.791794][T13657] simple_read_from_buffer+0xcb/0x170 [ 570.791844][T13657] proc_fail_nth_read+0x197/0x270 [ 570.791891][T13657] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 570.791938][T13657] ? rw_verify_area+0xcf/0x680 [ 570.791984][T13657] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 570.792029][T13657] vfs_read+0x1de/0xc70 [ 570.792065][T13657] ? __pfx___mutex_lock+0x10/0x10 [ 570.792110][T13657] ? __pfx_vfs_read+0x10/0x10 [ 570.792151][T13657] ? __fget_files+0x20e/0x3c0 [ 570.792213][T13657] ksys_read+0x12a/0x240 [ 570.792243][T13657] ? __pfx_ksys_read+0x10/0x10 [ 570.792270][T13657] ? __pfx___x64_sys_clock_gettime+0x10/0x10 [ 570.792335][T13657] do_syscall_64+0xcd/0x230 [ 570.792385][T13657] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 570.792417][T13657] RIP: 0033:0x7fb6d118d37c [ 570.792442][T13657] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 570.792473][T13657] RSP: 002b:00007fb6d1f66030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 570.792503][T13657] RAX: ffffffffffffffda RBX: 00007fb6d13b5fa0 RCX: 00007fb6d118d37c [ 570.792524][T13657] RDX: 000000000000000f RSI: 00007fb6d1f660a0 RDI: 0000000000000002 [ 570.792543][T13657] RBP: 00007fb6d1f66090 R08: 0000000000000000 R09: 0000000000000000 [ 570.792562][T13657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 570.792581][T13657] R13: 0000000000000000 R14: 00007fb6d13b5fa0 R15: 00007ffec335d388 [ 570.792623][T13657] [ 572.815559][T13661] kexec: Could not allocate control_code_buffer [ 573.944846][T13687] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1804'. [ 574.745477][T13699] FAULT_INJECTION: forcing a failure. [ 574.745477][T13699] name failslab, interval 1, probability 0, space 0, times 0 [ 574.851384][T13699] CPU: 0 UID: 0 PID: 13699 Comm: syz.3.1808 Not tainted 6.15.0-rc5-syzkaller-00207-g1a33418a69cc #0 PREEMPT(full) [ 574.851435][T13699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 574.851455][T13699] Call Trace: [ 574.851466][T13699] [ 574.851480][T13699] dump_stack_lvl+0x16c/0x1f0 [ 574.851536][T13699] should_fail_ex+0x512/0x640 [ 574.851583][T13699] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 574.851630][T13699] should_failslab+0xc2/0x120 [ 574.851673][T13699] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 574.851713][T13699] ? __alloc_skb+0x2b2/0x380 [ 574.851757][T13699] __alloc_skb+0x2b2/0x380 [ 574.851794][T13699] ? __pfx___alloc_skb+0x10/0x10 [ 574.851836][T13699] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 574.851880][T13699] ? __lock_acquire+0xaa4/0x1ba0 [ 574.851933][T13699] netlink_alloc_large_skb+0x69/0x130 [ 574.851991][T13699] netlink_sendmsg+0x6a1/0xdd0 [ 574.852044][T13699] ? __pfx_netlink_sendmsg+0x10/0x10 [ 574.852106][T13699] ____sys_sendmsg+0xa95/0xc70 [ 574.852158][T13699] ? copy_msghdr_from_user+0x10a/0x160 [ 574.852197][T13699] ? __pfx_____sys_sendmsg+0x10/0x10 [ 574.852269][T13699] ___sys_sendmsg+0x134/0x1d0 [ 574.852311][T13699] ? __pfx____sys_sendmsg+0x10/0x10 [ 574.852407][T13699] __sys_sendmsg+0x16d/0x220 [ 574.852449][T13699] ? __pfx___sys_sendmsg+0x10/0x10 [ 574.852504][T13699] ? rcu_is_watching+0x12/0xc0 [ 574.852550][T13699] do_syscall_64+0xcd/0x230 [ 574.852605][T13699] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.852642][T13699] RIP: 0033:0x7fb6d118e969 [ 574.852669][T13699] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 574.852703][T13699] RSP: 002b:00007fb6d1f66038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 574.852737][T13699] RAX: ffffffffffffffda RBX: 00007fb6d13b5fa0 RCX: 00007fb6d118e969 [ 574.852760][T13699] RDX: 0000000000000004 RSI: 0000200000000340 RDI: 0000000000000003 [ 574.852781][T13699] RBP: 00007fb6d1f66090 R08: 0000000000000000 R09: 0000000000000000 [ 574.852803][T13699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 574.852824][T13699] R13: 0000000000000000 R14: 00007fb6d13b5fa0 R15: 00007ffec335d388 [ 574.852869][T13699] [ 576.230365][T13708] binder: 13707:13708 ioctl 400c620e 200000000400 returned -22 [ 577.150593][T12906] Bluetooth: hci1: unexpected event 0x3d length: 726 > 14 [ 578.690016][T13761] FAULT_INJECTION: forcing a failure. [ 578.690016][T13761] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 578.721304][T13761] CPU: 0 UID: 0 PID: 13761 Comm: syz.1.1821 Not tainted 6.15.0-rc5-syzkaller-00207-g1a33418a69cc #0 PREEMPT(full) [ 578.721349][T13761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 578.721366][T13761] Call Trace: [ 578.721375][T13761] [ 578.721387][T13761] dump_stack_lvl+0x16c/0x1f0 [ 578.721437][T13761] should_fail_ex+0x512/0x640 [ 578.721488][T13761] should_fail_alloc_page+0xe7/0x130 [ 578.721531][T13761] prepare_alloc_pages+0x3c2/0x610 [ 578.721585][T13761] __alloc_frozen_pages_noprof+0x18f/0x23a0 [ 578.721633][T13761] ? copy_splice_read+0x1a8/0xba0 [ 578.721677][T13761] ? stack_trace_save+0x8e/0xc0 [ 578.721709][T13761] ? __pfx_stack_trace_save+0x10/0x10 [ 578.721741][T13761] ? stack_depot_save_flags+0x28/0xa50 [ 578.721787][T13761] ? bpf_ksym_find+0x124/0x1c0 [ 578.721841][T13761] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 578.721877][T13761] ? kasan_save_stack+0x33/0x60 [ 578.721909][T13761] ? __kasan_kmalloc+0xaa/0xb0 [ 578.721939][T13761] ? copy_splice_read+0x1a8/0xba0 [ 578.721982][T13761] ? do_splice_read+0x282/0x370 [ 578.722023][T13761] ? splice_direct_to_actor+0x2a1/0xa30 [ 578.722066][T13761] ? do_splice_direct+0x174/0x240 [ 578.722110][T13761] ? do_sendfile+0xafd/0xe50 [ 578.722156][T13761] ? __x64_sys_sendfile64+0x1d8/0x220 [ 578.722192][T13761] ? do_syscall_64+0xcd/0x230 [ 578.722265][T13761] alloc_pages_bulk_noprof+0x703/0x13b0 [ 578.722315][T13761] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 578.722361][T13761] ? trace_kmalloc+0x2b/0xd0 [ 578.722399][T13761] ? __kmalloc_noprof+0x242/0x510 [ 578.722444][T13761] copy_splice_read+0x1e1/0xba0 [ 578.722499][T13761] ? __pfx_copy_splice_read+0x10/0x10 [ 578.722549][T13761] ? look_up_lock_class+0x6b/0x150 [ 578.722605][T13761] ? lockdep_init_map_type+0x5c/0x280 [ 578.722649][T13761] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 578.722702][T13761] ? __pfx_copy_splice_read+0x10/0x10 [ 578.722748][T13761] do_splice_read+0x282/0x370 [ 578.722797][T13761] splice_direct_to_actor+0x2a1/0xa30 [ 578.722846][T13761] ? __pfx_direct_splice_actor+0x10/0x10 [ 578.722902][T13761] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 578.722948][T13761] ? get_pid_task+0xfc/0x250 [ 578.723002][T13761] do_splice_direct+0x174/0x240 [ 578.723050][T13761] ? __pfx_do_splice_direct+0x10/0x10 [ 578.723098][T13761] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 578.723152][T13761] ? rw_verify_area+0xcf/0x680 [ 578.723210][T13761] do_sendfile+0xafd/0xe50 [ 578.723267][T13761] ? __pfx_do_sendfile+0x10/0x10 [ 578.723317][T13761] ? __fget_files+0x20e/0x3c0 [ 578.723374][T13761] __x64_sys_sendfile64+0x1d8/0x220 [ 578.723409][T13761] ? ksys_write+0x1b9/0x240 [ 578.723436][T13761] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 578.723470][T13761] ? rcu_is_watching+0x12/0xc0 [ 578.723506][T13761] do_syscall_64+0xcd/0x230 [ 578.723552][T13761] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.723583][T13761] RIP: 0033:0x7f036958e969 [ 578.723615][T13761] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 578.723645][T13761] RSP: 002b:00007f036a4a9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 578.723676][T13761] RAX: ffffffffffffffda RBX: 00007f03697b5fa0 RCX: 00007f036958e969 [ 578.723696][T13761] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 578.723713][T13761] RBP: 00007f036a4a9090 R08: 0000000000000000 R09: 0000000000000000 [ 578.723732][T13761] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000001 [ 578.723750][T13761] R13: 0000000000000000 R14: 00007f03697b5fa0 R15: 00007ffce8324a48 [ 578.723788][T13761] [ 581.464450][T13814] netlink: 338 bytes leftover after parsing attributes in process `syz.0.1834'. [ 581.479822][T13814] netlink: 338 bytes leftover after parsing attributes in process `syz.0.1834'. [ 581.828054][T13820] FAULT_INJECTION: forcing a failure. [ 581.828054][T13820] name failslab, interval 1, probability 0, space 0, times 0 [ 581.843132][T13820] CPU: 0 UID: 0 PID: 13820 Comm: syz.0.1836 Not tainted 6.15.0-rc5-syzkaller-00207-g1a33418a69cc #0 PREEMPT(full) [ 581.843177][T13820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 581.843196][T13820] Call Trace: [ 581.843206][T13820] [ 581.843218][T13820] dump_stack_lvl+0x16c/0x1f0 [ 581.843267][T13820] should_fail_ex+0x512/0x640 [ 581.843317][T13820] should_failslab+0xc2/0x120 [ 581.843357][T13820] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 581.843400][T13820] ? find_held_lock+0x2b/0x80 [ 581.843428][T13820] ? dst_alloc+0x99/0x1a0 [ 581.843463][T13820] dst_alloc+0x99/0x1a0 [ 581.843496][T13820] rt_dst_alloc+0x35/0x3a0 [ 581.843538][T13820] ip_route_output_key_hash_rcu+0x87a/0x28f0 [ 581.843603][T13820] ip_route_output_key_hash+0x137/0x2e0 [ 581.843651][T13820] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 581.843712][T13820] ? find_held_lock+0x2b/0x80 [ 581.843747][T13820] ip_route_output_flow+0x27/0x150 [ 581.843801][T13820] raw_sendmsg+0xd5c/0x38b0 [ 581.843857][T13820] ? aa_profile_af_perm+0x4e0/0x510 [ 581.843896][T13820] ? __pfx_raw_sendmsg+0x10/0x10 [ 581.843973][T13820] ? __pfx___might_resched+0x10/0x10 [ 581.844008][T13820] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 581.844059][T13820] ? aa_sk_perm+0x2f4/0xb10 [ 581.844107][T13820] ? __import_iovec+0x1c8/0x660 [ 581.844155][T13820] ? __might_fault+0xe3/0x190 [ 581.844187][T13820] ? __might_fault+0x13b/0x190 [ 581.844222][T13820] ? __pfx_raw_sendmsg+0x10/0x10 [ 581.844268][T13820] inet_sendmsg+0x119/0x140 [ 581.844315][T13820] ____sys_sendmsg+0x973/0xc70 [ 581.844361][T13820] ? copy_msghdr_from_user+0x10a/0x160 [ 581.844407][T13820] ? __pfx_____sys_sendmsg+0x10/0x10 [ 581.844459][T13820] ? kfree+0x252/0x4d0 [ 581.844482][T13820] ? __pfx__kstrtoull+0x10/0x10 [ 581.844527][T13820] ___sys_sendmsg+0x134/0x1d0 [ 581.844565][T13820] ? __pfx____sys_sendmsg+0x10/0x10 [ 581.844638][T13820] ? __pfx___might_resched+0x10/0x10 [ 581.844680][T13820] __sys_sendmmsg+0x200/0x420 [ 581.844721][T13820] ? __pfx___sys_sendmmsg+0x10/0x10 [ 581.844773][T13820] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 581.844834][T13820] ? fput+0x70/0xf0 [ 581.844871][T13820] ? ksys_write+0x1b9/0x240 [ 581.844900][T13820] ? __pfx_ksys_write+0x10/0x10 [ 581.844927][T13820] ? rcu_is_watching+0x12/0xc0 [ 581.844964][T13820] __x64_sys_sendmmsg+0x9c/0x100 [ 581.844999][T13820] ? lockdep_hardirqs_on+0x7c/0x110 [ 581.845041][T13820] do_syscall_64+0xcd/0x230 [ 581.845088][T13820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 581.845121][T13820] RIP: 0033:0x7f25d2d8e969 [ 581.845145][T13820] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 581.845177][T13820] RSP: 002b:00007f25d3bb6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 581.845206][T13820] RAX: ffffffffffffffda RBX: 00007f25d2fb5fa0 RCX: 00007f25d2d8e969 [ 581.845226][T13820] RDX: 00000000000009a6 RSI: 0000000000000000 RDI: 0000000000000003 [ 581.845245][T13820] RBP: 00007f25d3bb6090 R08: 0000000000000000 R09: 0000000000000000 [ 581.845263][T13820] R10: 000000000000e000 R11: 0000000000000246 R12: 0000000000000002 [ 581.845281][T13820] R13: 0000000000000000 R14: 00007f25d2fb5fa0 R15: 00007ffd070ad2b8 [ 581.845323][T13820] [ 582.261864][T13823] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1837'. [ 582.658154][T13836] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1842'. [ 583.164618][T13845] FAULT_INJECTION: forcing a failure. [ 583.164618][T13845] name failslab, interval 1, probability 0, space 0, times 0 [ 583.257679][T13845] CPU: 1 UID: 0 PID: 13845 Comm: syz.3.1845 Not tainted 6.15.0-rc5-syzkaller-00207-g1a33418a69cc #0 PREEMPT(full) [ 583.257726][T13845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 583.257746][T13845] Call Trace: [ 583.257757][T13845] [ 583.257770][T13845] dump_stack_lvl+0x16c/0x1f0 [ 583.257823][T13845] should_fail_ex+0x512/0x640 [ 583.257869][T13845] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 583.257913][T13845] should_failslab+0xc2/0x120 [ 583.257954][T13845] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 583.257991][T13845] ? __kernfs_new_node+0xd2/0x8a0 [ 583.258047][T13845] __kernfs_new_node+0xd2/0x8a0 [ 583.258112][T13845] ? __pfx___kernfs_new_node+0x10/0x10 [ 583.258176][T13845] ? find_held_lock+0x2b/0x80 [ 583.258209][T13845] ? kernfs_root+0xee/0x2a0 [ 583.258247][T13845] kernfs_new_node+0x13c/0x1e0 [ 583.258292][T13845] __kernfs_create_file+0x53/0x350 [ 583.258342][T13845] sysfs_add_file_mode_ns+0x207/0x3c0 [ 583.258404][T13845] internal_create_group+0x578/0xf30 [ 583.258448][T13845] ? __pfx_internal_create_group+0x10/0x10 [ 583.258488][T13845] ? kernfs_create_link+0x1bd/0x240 [ 583.258548][T13845] internal_create_groups+0x9d/0x150 [ 583.258585][T13845] device_add+0x77f/0x1a70 [ 583.258636][T13845] ? __pfx_device_add+0x10/0x10 [ 583.258685][T13845] ? do_raw_spin_lock+0x12c/0x2b0 [ 583.258742][T13845] add_disk_fwnode+0x468/0x13a0 [ 583.258800][T13845] zram_add+0x494/0x6c0 [ 583.258844][T13845] ? __pfx_zram_add+0x10/0x10 [ 583.258914][T13845] ? find_held_lock+0x2b/0x80 [ 583.258953][T13845] ? __pfx_hot_add_show+0x10/0x10 [ 583.258996][T13845] ? __pfx_class_attr_show+0x10/0x10 [ 583.259035][T13845] hot_add_show+0x21/0x80 [ 583.259079][T13845] class_attr_show+0x6f/0xa0 [ 583.259122][T13845] sysfs_kf_seq_show+0x213/0x3e0 [ 583.259179][T13845] seq_read_iter+0x506/0x12c0 [ 583.259247][T13845] kernfs_fop_read_iter+0x40f/0x5a0 [ 583.259288][T13845] ? rw_verify_area+0xcf/0x680 [ 583.259342][T13845] vfs_read+0x8c8/0xc70 [ 583.259378][T13845] ? __pfx___mutex_lock+0x10/0x10 [ 583.259425][T13845] ? __pfx_vfs_read+0x10/0x10 [ 583.259486][T13845] ksys_read+0x12a/0x240 [ 583.259518][T13845] ? __pfx_ksys_read+0x10/0x10 [ 583.259550][T13845] ? rcu_is_watching+0x12/0xc0 [ 583.259596][T13845] do_syscall_64+0xcd/0x230 [ 583.259649][T13845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.259682][T13845] RIP: 0033:0x7fb6d118e969 [ 583.259709][T13845] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 583.259742][T13845] RSP: 002b:00007fb6d1f66038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 583.259774][T13845] RAX: ffffffffffffffda RBX: 00007fb6d13b5fa0 RCX: 00007fb6d118e969 [ 583.259796][T13845] RDX: 0000000000001000 RSI: 0000200000000ec0 RDI: 0000000000000006 [ 583.259816][T13845] RBP: 00007fb6d1210ab1 R08: 0000000000000000 R09: 0000000000000000 [ 583.259836][T13845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 583.259856][T13845] R13: 0000000000000000 R14: 00007fb6d13b5fa0 R15: 00007ffec335d388 [ 583.259900][T13845] [ 585.068543][T13867] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1851'. [ 585.215573][T12906] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 588.173847][T13908] FAULT_INJECTION: forcing a failure. [ 588.173847][T13908] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 588.219098][T13908] CPU: 0 UID: 0 PID: 13908 Comm: syz.2.1863 Not tainted 6.15.0-rc5-syzkaller-00207-g1a33418a69cc #0 PREEMPT(full) [ 588.219143][T13908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 588.219161][T13908] Call Trace: [ 588.219170][T13908] [ 588.219181][T13908] dump_stack_lvl+0x16c/0x1f0 [ 588.219230][T13908] should_fail_ex+0x512/0x640 [ 588.219280][T13908] _copy_from_iter+0x2a4/0x15b0 [ 588.219343][T13908] ? __alloc_skb+0x200/0x380 [ 588.219376][T13908] ? __pfx__copy_from_iter+0x10/0x10 [ 588.219421][T13908] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 588.219451][T13908] ? __lock_acquire+0xaa4/0x1ba0 [ 588.219491][T13908] netlink_sendmsg+0x829/0xdd0 [ 588.219527][T13908] ? __pfx_netlink_sendmsg+0x10/0x10 [ 588.219570][T13908] ____sys_sendmsg+0xa95/0xc70 [ 588.219607][T13908] ? copy_msghdr_from_user+0x10a/0x160 [ 588.219635][T13908] ? __pfx_____sys_sendmsg+0x10/0x10 [ 588.219674][T13908] ? __pfx__kstrtoull+0x10/0x10 [ 588.219709][T13908] ___sys_sendmsg+0x134/0x1d0 [ 588.219738][T13908] ? __pfx____sys_sendmsg+0x10/0x10 [ 588.219788][T13908] ? find_held_lock+0x2b/0x80 [ 588.219830][T13908] __sys_sendmmsg+0x200/0x420 [ 588.219862][T13908] ? __pfx___sys_sendmmsg+0x10/0x10 [ 588.219900][T13908] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 588.219949][T13908] ? fput+0x70/0xf0 [ 588.219978][T13908] ? ksys_write+0x1b9/0x240 [ 588.220000][T13908] ? __pfx_ksys_write+0x10/0x10 [ 588.220021][T13908] ? rcu_is_watching+0x12/0xc0 [ 588.220050][T13908] __x64_sys_sendmmsg+0x9c/0x100 [ 588.220078][T13908] ? lockdep_hardirqs_on+0x7c/0x110 [ 588.220111][T13908] do_syscall_64+0xcd/0x230 [ 588.220149][T13908] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.220175][T13908] RIP: 0033:0x7f4892f8e969 [ 588.220194][T13908] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 588.220219][T13908] RSP: 002b:00007f4890df6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 588.220242][T13908] RAX: ffffffffffffffda RBX: 00007f48931b5fa0 RCX: 00007f4892f8e969 [ 588.220259][T13908] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 588.220274][T13908] RBP: 00007f4890df6090 R08: 0000000000000000 R09: 0000000000000000 [ 588.220288][T13908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 588.220303][T13908] R13: 0000000000000000 R14: 00007f48931b5fa0 R15: 00007ffef302d718 [ 588.220333][T13908] [ 588.466346][ C0] vkms_vblank_simulate: vblank timer overrun [ 588.677208][T13909] Invalid ELF header magic: != ELF [ 589.131588][T13922] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 592.169367][T12906] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 595.766873][T14056] virtio-pci 0000:00:04.0: [Firmware Bug]: Overriding NUMA node to -1. Contact your vendor for updates. [ 596.064857][T14062] netlink: 338 bytes leftover after parsing attributes in process `syz.0.1902'. [ 596.074766][T14063] netlink: 338 bytes leftover after parsing attributes in process `syz.0.1902'. [ 596.189918][T14066] FAULT_INJECTION: forcing a failure. [ 596.189918][T14066] name failslab, interval 1, probability 0, space 0, times 0 [ 596.237088][T14066] CPU: 0 UID: 0 PID: 14066 Comm: syz.2.1903 Tainted: G I 6.15.0-rc5-syzkaller-00207-g1a33418a69cc #0 PREEMPT(full) [ 596.237149][T14066] Tainted: [I]=FIRMWARE_WORKAROUND [ 596.237161][T14066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 596.237179][T14066] Call Trace: [ 596.237188][T14066] [ 596.237200][T14066] dump_stack_lvl+0x16c/0x1f0 [ 596.237250][T14066] should_fail_ex+0x512/0x640 [ 596.237294][T14066] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 596.237334][T14066] should_failslab+0xc2/0x120 [ 596.237373][T14066] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 596.237408][T14066] ? netlink_dump+0x9e7/0xd00 [ 596.237443][T14066] ? __alloc_skb+0x2b2/0x380 [ 596.237476][T14066] ? __pfx___mutex_lock+0x10/0x10 [ 596.237524][T14066] __alloc_skb+0x2b2/0x380 [ 596.237557][T14066] ? __pfx___alloc_skb+0x10/0x10 [ 596.237589][T14066] ? _copy_to_iter+0x161/0x15a0 [ 596.237646][T14066] netlink_dump+0x698/0xd00 [ 596.237684][T14066] ? __skb_recv_datagram+0x1b2/0x220 [ 596.237717][T14066] ? __pfx_netlink_dump+0x10/0x10 [ 596.237751][T14066] ? __pfx___skb_recv_datagram+0x10/0x10 [ 596.237798][T14066] ? skb_recv_datagram+0x88/0xc0 [ 596.237841][T14066] netlink_recvmsg+0xa15/0xf20 [ 596.237880][T14066] ? __pfx_netlink_recvmsg+0x10/0x10 [ 596.237914][T14066] ? aa_sk_perm+0x2f4/0xb10 [ 596.237947][T14066] ? __lock_acquire+0xaa4/0x1ba0 [ 596.237991][T14066] ? __pfx_aa_sk_perm+0x10/0x10 [ 596.238025][T14066] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 596.238079][T14066] sock_recvmsg+0x1f6/0x250 [ 596.238125][T14066] ____sys_recvmsg+0x218/0x6b0 [ 596.238185][T14066] ? __pfx_____sys_recvmsg+0x10/0x10 [ 596.238246][T14066] ? __lock_acquire+0x5ca/0x1ba0 [ 596.238295][T14066] ___sys_recvmsg+0x114/0x1a0 [ 596.238333][T14066] ? __pfx____sys_recvmsg+0x10/0x10 [ 596.238373][T14066] ? find_held_lock+0x2b/0x80 [ 596.238430][T14066] do_recvmmsg+0x2fe/0x740 [ 596.238472][T14066] ? __pfx_do_recvmmsg+0x10/0x10 [ 596.238524][T14066] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 596.238582][T14066] ? __fget_files+0x20e/0x3c0 [ 596.238642][T14066] __x64_sys_recvmmsg+0x22a/0x280 [ 596.238683][T14066] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 596.238734][T14066] do_syscall_64+0xcd/0x230 [ 596.238783][T14066] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.238815][T14066] RIP: 0033:0x7f4892f8e969 [ 596.238839][T14066] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 596.238871][T14066] RSP: 002b:00007f4890dd5038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 596.238900][T14066] RAX: ffffffffffffffda RBX: 00007f48931b6080 RCX: 00007f4892f8e969 [ 596.238919][T14066] RDX: 0000000000000007 RSI: 0000200000000100 RDI: 0000000000000003 [ 596.238938][T14066] RBP: 00007f4890dd5090 R08: 0000000000000000 R09: 0000000000000000 [ 596.238957][T14066] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000001 [ 596.238975][T14066] R13: 0000000000000001 R14: 00007f48931b6080 R15: 00007ffef302d718 [ 596.239017][T14066] [ 596.542649][ C0] vkms_vblank_simulate: vblank timer overrun [ 596.598754][T14077] netlink: 334 bytes leftover after parsing attributes in process `syz.3.1905'. [ 596.608763][T14077] FAULT_INJECTION: forcing a failure. [ 596.608763][T14077] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 596.625209][T14077] CPU: 0 UID: 0 PID: 14077 Comm: syz.3.1905 Tainted: G I 6.15.0-rc5-syzkaller-00207-g1a33418a69cc #0 PREEMPT(full) [ 596.625258][T14077] Tainted: [I]=FIRMWARE_WORKAROUND [ 596.625270][T14077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 596.625289][T14077] Call Trace: [ 596.625298][T14077] [ 596.625309][T14077] dump_stack_lvl+0x16c/0x1f0 [ 596.625360][T14077] should_fail_ex+0x512/0x640 [ 596.625411][T14077] _copy_to_user+0x32/0xd0 [ 596.625462][T14077] simple_read_from_buffer+0xcb/0x170 [ 596.625512][T14077] proc_fail_nth_read+0x197/0x270 [ 596.625559][T14077] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 596.625607][T14077] ? rw_verify_area+0xcf/0x680 [ 596.625652][T14077] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 596.625698][T14077] vfs_read+0x1de/0xc70 [ 596.625732][T14077] ? __pfx___mutex_lock+0x10/0x10 [ 596.625777][T14077] ? __pfx_vfs_read+0x10/0x10 [ 596.625818][T14077] ? __fget_files+0x20e/0x3c0 [ 596.625880][T14077] ksys_read+0x12a/0x240 [ 596.625909][T14077] ? __pfx_ksys_read+0x10/0x10 [ 596.625936][T14077] ? rcu_is_watching+0x12/0xc0 [ 596.625978][T14077] do_syscall_64+0xcd/0x230 [ 596.626027][T14077] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.626060][T14077] RIP: 0033:0x7fb6d118d37c [ 596.626084][T14077] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 596.626123][T14077] RSP: 002b:00007fb6d1f66030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 596.626153][T14077] RAX: ffffffffffffffda RBX: 00007fb6d13b5fa0 RCX: 00007fb6d118d37c [ 596.626173][T14077] RDX: 000000000000000f RSI: 00007fb6d1f660a0 RDI: 0000000000000004 [ 596.626192][T14077] RBP: 00007fb6d1f66090 R08: 0000000000000000 R09: 0000000000000000 [ 596.626211][T14077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 596.626230][T14077] R13: 0000000000000000 R14: 00007fb6d13b5fa0 R15: 00007ffec335d388 [ 596.626272][T14077] [ 596.828202][ C0] vkms_vblank_simulate: vblank timer overrun [ 597.607076][T14094] Invalid ELF header magic: != ELF [ 598.068979][T14100] warning: `syz.1.1911' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 599.477356][T14111] kexec: Could not allocate control_code_buffer [ 599.707005][T14132] FAULT_INJECTION: forcing a failure. [ 599.707005][T14132] name failslab, interval 1, probability 0, space 0, times 0 [ 599.769938][T14132] CPU: 0 UID: 0 PID: 14132 Comm: syz.2.1921 Tainted: G I 6.15.0-rc5-syzkaller-00207-g1a33418a69cc #0 PREEMPT(full) [ 599.769990][T14132] Tainted: [I]=FIRMWARE_WORKAROUND [ 599.770002][T14132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 599.770021][T14132] Call Trace: [ 599.770031][T14132] [ 599.770043][T14132] dump_stack_lvl+0x16c/0x1f0 [ 599.770101][T14132] should_fail_ex+0x512/0x640 [ 599.770144][T14132] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 599.770199][T14132] should_failslab+0xc2/0x120 [ 599.770237][T14132] __kmalloc_cache_noprof+0x6a/0x3e0 [ 599.770285][T14132] ? jfs_init_fs_context+0x20f/0x5a0 [ 599.770328][T14132] ? fscontext_alloc_log+0x4a/0x1b0 [ 599.770369][T14132] fscontext_alloc_log+0x4a/0x1b0 [ 599.770407][T14132] __x64_sys_fsopen+0x157/0x240 [ 599.770453][T14132] do_syscall_64+0xcd/0x230 [ 599.770498][T14132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.770529][T14132] RIP: 0033:0x7f4892f8e969 [ 599.770554][T14132] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 599.770584][T14132] RSP: 002b:00007f4890df6038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 599.770613][T14132] RAX: ffffffffffffffda RBX: 00007f48931b5fa0 RCX: 00007f4892f8e969 [ 599.770634][T14132] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 599.770652][T14132] RBP: 00007f4890df6090 R08: 0000000000000000 R09: 0000000000000000 [ 599.770671][T14132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 599.770688][T14132] R13: 0000000000000000 R14: 00007f48931b5fa0 R15: 00007ffef302d718 [ 599.770729][T14132] [ 599.944596][ C0] vkms_vblank_simulate: vblank timer overrun [ 600.691305][T14148] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1924'. [ 600.891938][T14152] FAULT_INJECTION: forcing a failure. [ 600.891938][T14152] name failslab, interval 1, probability 0, space 0, times 0 [ 600.910412][T14152] CPU: 0 UID: 0 PID: 14152 Comm: syz.0.1926 Tainted: G I 6.15.0-rc5-syzkaller-00207-g1a33418a69cc #0 PREEMPT(full) [ 600.910464][T14152] Tainted: [I]=FIRMWARE_WORKAROUND [ 600.910477][T14152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 600.910495][T14152] Call Trace: [ 600.910505][T14152] [ 600.910517][T14152] dump_stack_lvl+0x16c/0x1f0 [ 600.910567][T14152] should_fail_ex+0x512/0x640 [ 600.910608][T14152] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 600.910650][T14152] should_failslab+0xc2/0x120 [ 600.910690][T14152] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 600.910736][T14152] ? __alloc_skb+0x2b2/0x380 [ 600.910776][T14152] __alloc_skb+0x2b2/0x380 [ 600.910809][T14152] ? __pfx___alloc_skb+0x10/0x10 [ 600.910846][T14152] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 600.910884][T14152] ? __lock_acquire+0xaa4/0x1ba0 [ 600.910930][T14152] netlink_alloc_large_skb+0x69/0x130 [ 600.910977][T14152] netlink_sendmsg+0x6a1/0xdd0 [ 600.911023][T14152] ? __pfx_netlink_sendmsg+0x10/0x10 [ 600.911078][T14152] ____sys_sendmsg+0xa95/0xc70 [ 600.911125][T14152] ? copy_msghdr_from_user+0x10a/0x160 [ 600.911160][T14152] ? __pfx_____sys_sendmsg+0x10/0x10 [ 600.911226][T14152] ___sys_sendmsg+0x134/0x1d0 [ 600.911264][T14152] ? __pfx____sys_sendmsg+0x10/0x10 [ 600.911347][T14152] __sys_sendmsg+0x16d/0x220 [ 600.911382][T14152] ? __pfx___sys_sendmsg+0x10/0x10 [ 600.911430][T14152] ? rcu_is_watching+0x12/0xc0 [ 600.911472][T14152] do_syscall_64+0xcd/0x230 [ 600.911521][T14152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.911554][T14152] RIP: 0033:0x7f25d2d8e969 [ 600.911578][T14152] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 600.911610][T14152] RSP: 002b:00007f25d3bb6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 600.911638][T14152] RAX: ffffffffffffffda RBX: 00007f25d2fb5fa0 RCX: 00007f25d2d8e969 [ 600.911659][T14152] RDX: 0000000000000810 RSI: 0000200000000180 RDI: 0000000000000003 [ 600.911679][T14152] RBP: 00007f25d3bb6090 R08: 0000000000000000 R09: 0000000000000000 [ 600.911706][T14152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 600.911724][T14152] R13: 0000000000000000 R14: 00007f25d2fb5fa0 R15: 00007ffd070ad2b8 [ 600.911765][T14152] [ 601.139767][ C0] vkms_vblank_simulate: vblank timer overrun [ 601.953620][T14166] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1930'. [ 602.438065][T14161] kexec: Could not allocate control_code_buffer [ 603.808627][T14199] FAULT_INJECTION: forcing a failure. [ 603.808627][T14199] name failslab, interval 1, probability 0, space 0, times 0 [ 603.883060][T14199] CPU: 1 UID: 0 PID: 14199 Comm: syz.0.1937 Tainted: G I 6.15.0-rc5-syzkaller-00207-g1a33418a69cc #0 PREEMPT(full) [ 603.883114][T14199] Tainted: [I]=FIRMWARE_WORKAROUND [ 603.883126][T14199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 603.883145][T14199] Call Trace: [ 603.883155][T14199] [ 603.883167][T14199] dump_stack_lvl+0x16c/0x1f0 [ 603.883219][T14199] should_fail_ex+0x512/0x640 [ 603.883271][T14199] should_failslab+0xc2/0x120 [ 603.883310][T14199] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 603.883348][T14199] ? skb_clone+0x190/0x3f0 [ 603.883390][T14199] skb_clone+0x190/0x3f0 [ 603.883436][T14199] netlink_deliver_tap+0xabd/0xd30 [ 603.883484][T14199] netlink_unicast+0x5df/0x7f0 [ 603.883530][T14199] ? __pfx_netlink_unicast+0x10/0x10 [ 603.883568][T14199] ? __lock_acquire+0xaa4/0x1ba0 [ 603.883621][T14199] netlink_sendmsg+0x8d1/0xdd0 [ 603.883669][T14199] ? __pfx_netlink_sendmsg+0x10/0x10 [ 603.883726][T14199] ____sys_sendmsg+0xa95/0xc70 [ 603.883774][T14199] ? copy_msghdr_from_user+0x10a/0x160 [ 603.883810][T14199] ? __pfx_____sys_sendmsg+0x10/0x10 [ 603.883864][T14199] ? __pfx__kstrtoull+0x10/0x10 [ 603.883910][T14199] ___sys_sendmsg+0x134/0x1d0 [ 603.883949][T14199] ? __pfx____sys_sendmsg+0x10/0x10 [ 603.884010][T14199] ? find_held_lock+0x2b/0x80 [ 603.884068][T14199] __sys_sendmmsg+0x200/0x420 [ 603.884111][T14199] ? __pfx___sys_sendmmsg+0x10/0x10 [ 603.884163][T14199] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 603.884228][T14199] ? fput+0x70/0xf0 [ 603.884265][T14199] ? ksys_write+0x1b9/0x240 [ 603.884295][T14199] ? __pfx_ksys_write+0x10/0x10 [ 603.884321][T14199] ? rcu_is_watching+0x12/0xc0 [ 603.884358][T14199] __x64_sys_sendmmsg+0x9c/0x100 [ 603.884394][T14199] ? lockdep_hardirqs_on+0x7c/0x110 [ 603.884446][T14199] do_syscall_64+0xcd/0x230 [ 603.884495][T14199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 603.884527][T14199] RIP: 0033:0x7f25d2d8e969 [ 603.884552][T14199] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 603.884584][T14199] RSP: 002b:00007f25d3bb6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 603.884613][T14199] RAX: ffffffffffffffda RBX: 00007f25d2fb5fa0 RCX: 00007f25d2d8e969 [ 603.884635][T14199] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 603.884654][T14199] RBP: 00007f25d3bb6090 R08: 0000000000000000 R09: 0000000000000000 [ 603.884672][T14199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 603.884691][T14199] R13: 0000000000000000 R14: 00007f25d2fb5fa0 R15: 00007ffd070ad2b8 [ 603.884733][T14199] [ 604.172539][T14199] netlink: 338 bytes leftover after parsing attributes in process `syz.0.1937'. [ 604.272976][T14195] FAULT_INJECTION: forcing a failure. [ 604.272976][T14195] name failslab, interval 1, probability 0, space 0, times 0 [ 604.445047][T14195] CPU: 1 UID: 0 PID: 14195 Comm: syz.2.1935 Tainted: G I 6.15.0-rc5-syzkaller-00207-g1a33418a69cc #0 PREEMPT(full) [ 604.445099][T14195] Tainted: [I]=FIRMWARE_WORKAROUND [ 604.445111][T14195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 604.445129][T14195] Call Trace: [ 604.445138][T14195] [ 604.445148][T14195] dump_stack_lvl+0x16c/0x1f0 [ 604.445195][T14195] should_fail_ex+0x512/0x640 [ 604.445241][T14195] should_failslab+0xc2/0x120 [ 604.445279][T14195] __kmalloc_cache_noprof+0x6a/0x3e0 [ 604.445328][T14195] ? cfmuxl_create+0x40/0x210 [ 604.445371][T14195] ? __pfx_caif_init_net+0x10/0x10 [ 604.445410][T14195] cfmuxl_create+0x40/0x210 [ 604.445451][T14195] cfcnfg_create+0x78/0x500 [ 604.445489][T14195] ? debug_mutex_init+0x37/0x70 [ 604.445516][T14195] ? __pfx_caif_init_net+0x10/0x10 [ 604.445551][T14195] caif_init_net+0x7d/0xe0 [ 604.445587][T14195] ops_init+0x1df/0x5f0 [ 604.445638][T14195] setup_net+0x21e/0x850 [ 604.445678][T14195] ? __pfx_setup_net+0x10/0x10 [ 604.445711][T14195] ? lockdep_init_map_type+0x5c/0x280 [ 604.445753][T14195] ? __pfx_down_read_killable+0x10/0x10 [ 604.445804][T14195] ? debug_mutex_init+0x37/0x70 [ 604.445836][T14195] copy_net_ns+0x2a6/0x5f0 [ 604.445884][T14195] create_new_namespaces+0x3ea/0xad0 [ 604.445933][T14195] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 604.445974][T14195] ksys_unshare+0x45b/0xa40 [ 604.446020][T14195] ? __pfx_ksys_unshare+0x10/0x10 [ 604.446063][T14195] ? xfd_validate_state+0x5d/0x180 [ 604.446116][T14195] ? rcu_is_watching+0x12/0xc0 [ 604.446157][T14195] __x64_sys_unshare+0x31/0x40 [ 604.446201][T14195] do_syscall_64+0xcd/0x230 [ 604.446250][T14195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 604.446281][T14195] RIP: 0033:0x7f4892f8e969 [ 604.446307][T14195] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 604.446340][T14195] RSP: 002b:00007f4890db4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 604.446371][T14195] RAX: ffffffffffffffda RBX: 00007f48931b6160 RCX: 00007f4892f8e969 [ 604.446391][T14195] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 604.446409][T14195] RBP: 00007f4893010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 604.446427][T14195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 604.446445][T14195] R13: 0000000000000000 R14: 00007f48931b6160 R15: 00007ffef302d718 [ 604.446486][T14195] [ 604.821177][T14205] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1938'. [ 606.600498][T14216] kexec: Could not allocate control_code_buffer [ 606.865208][T14236] FAULT_INJECTION: forcing a failure. [ 606.865208][T14236] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 606.879180][T14236] CPU: 1 UID: 0 PID: 14236 Comm: syz.0.1946 Tainted: G I 6.15.0-rc5-syzkaller-00207-g1a33418a69cc #0 PREEMPT(full) [ 606.879227][T14236] Tainted: [I]=FIRMWARE_WORKAROUND [ 606.879240][T14236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 606.879257][T14236] Call Trace: [ 606.879266][T14236] [ 606.879276][T14236] dump_stack_lvl+0x16c/0x1f0 [ 606.879321][T14236] should_fail_ex+0x512/0x640 [ 606.879370][T14236] should_fail_alloc_page+0xe7/0x130 [ 606.879410][T14236] prepare_alloc_pages+0x3c2/0x610 [ 606.879466][T14236] __alloc_frozen_pages_noprof+0x18f/0x23a0 [ 606.879499][T14236] ? stack_trace_save+0x8e/0xc0 [ 606.879523][T14236] ? __pfx_stack_trace_save+0x10/0x10 [ 606.879546][T14236] ? stack_depot_save_flags+0x28/0xa50 [ 606.879581][T14236] ? __alloc_frozen_pages_noprof+0x298/0x23a0 [ 606.879612][T14236] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 606.879638][T14236] ? __kasan_slab_alloc+0x89/0x90 [ 606.879663][T14236] ? __pmd_alloc+0xc3/0x870 [ 606.879695][T14236] ? handle_mm_fault+0x3fe/0xad0 [ 606.879716][T14236] ? do_user_addr_fault+0x7a6/0x1370 [ 606.879737][T14236] ? exc_page_fault+0x5c/0xc0 [ 606.879764][T14236] ? asm_exc_page_fault+0x26/0x30 [ 606.879785][T14236] ? rep_movs_alternative+0xf/0x90 [ 606.879808][T14236] ? _copy_from_user+0x98/0xd0 [ 606.879841][T14236] ? ____sys_sendmsg+0x607/0xc70 [ 606.879885][T14236] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 606.879918][T14236] ? policy_nodemask+0xea/0x4e0 [ 606.879948][T14236] alloc_pages_mpol+0x1fb/0x550 [ 606.879978][T14236] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 606.880006][T14236] ? cgroup_rstat_updated+0x2a/0xb20 [ 606.880048][T14236] alloc_pages_noprof+0x131/0x390 [ 606.880077][T14236] pte_alloc_one+0x19/0x380 [ 606.880102][T14236] do_pte_missing+0x1c0b/0x3fb0 [ 606.880125][T14236] ? do_raw_spin_unlock+0x172/0x230 [ 606.880170][T14236] ? __pmd_alloc+0x3c2/0x870 [ 606.880201][T14236] ? find_held_lock+0x2b/0x80 [ 606.880225][T14236] __handle_mm_fault+0x103d/0x2a40 [ 606.880256][T14236] ? __pfx___handle_mm_fault+0x10/0x10 [ 606.880296][T14236] ? find_vma+0xbf/0x140 [ 606.880327][T14236] ? __pfx_find_vma+0x10/0x10 [ 606.880362][T14236] handle_mm_fault+0x3fe/0xad0 [ 606.880390][T14236] do_user_addr_fault+0x7a6/0x1370 [ 606.880415][T14236] ? rcu_is_watching+0x12/0xc0 [ 606.880439][T14236] exc_page_fault+0x5c/0xc0 [ 606.880470][T14236] asm_exc_page_fault+0x26/0x30 [ 606.880492][T14236] RIP: 0010:rep_movs_alternative+0xf/0x90 [ 606.880517][T14236] Code: c4 10 c3 cc cc cc cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 66 [ 606.880540][T14236] RSP: 0018:ffffc900185ef9d0 EFLAGS: 00050202 [ 606.880558][T14236] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000007 [ 606.880572][T14236] RDX: fffff520030bdf4c RSI: 0000000000000000 RDI: ffffc900185efa58 [ 606.880586][T14236] RBP: 0000000000000007 R08: 0000000000000001 R09: fffff520030bdf4b [ 606.880600][T14236] R10: ffffc900185efa5e R11: 0000000000000000 R12: 0000000000000000 [ 606.880614][T14236] R13: ffffc900185efa58 R14: 1ffff920030bdf45 R15: ffffc900185efd8c [ 606.880643][T14236] _copy_from_user+0x98/0xd0 [ 606.880678][T14236] ____sys_sendmsg+0x607/0xc70 [ 606.880714][T14236] ? __pfx_____sys_sendmsg+0x10/0x10 [ 606.880752][T14236] ? __pfx__kstrtoull+0x10/0x10 [ 606.880783][T14236] ___sys_sendmsg+0x134/0x1d0 [ 606.880811][T14236] ? __pfx____sys_sendmsg+0x10/0x10 [ 606.880851][T14236] ? find_held_lock+0x2b/0x80 [ 606.880891][T14236] __sys_sendmmsg+0x200/0x420 [ 606.880921][T14236] ? __pfx___sys_sendmmsg+0x10/0x10 [ 606.880956][T14236] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 606.881003][T14236] ? fput+0x70/0xf0 [ 606.881030][T14236] ? ksys_write+0x1b9/0x240 [ 606.881051][T14236] ? __pfx_ksys_write+0x10/0x10 [ 606.881071][T14236] ? rcu_is_watching+0x12/0xc0 [ 606.881096][T14236] __x64_sys_sendmmsg+0x9c/0x100 [ 606.881122][T14236] ? lockdep_hardirqs_on+0x7c/0x110 [ 606.881156][T14236] do_syscall_64+0xcd/0x230 [ 606.881191][T14236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 606.881214][T14236] RIP: 0033:0x7f25d2d8e969 [ 606.881231][T14236] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 606.881252][T14236] RSP: 002b:00007f25d3bb6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 606.881272][T14236] RAX: ffffffffffffffda RBX: 00007f25d2fb5fa0 RCX: 00007f25d2d8e969 [ 606.881287][T14236] RDX: 0000000000000007 RSI: 0000200000000200 RDI: 0000000000000003 [ 606.881301][T14236] RBP: 00007f25d3bb6090 R08: 0000000000000000 R09: 0000000000000000 [ 606.881314][T14236] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001 [ 606.881327][T14236] R13: 0000000000000000 R14: 00007f25d2fb5fa0 R15: 00007ffd070ad2b8 [ 606.881356][T14236] [ 607.348349][ C1] vkms_vblank_simulate: vblank timer overrun [ 607.879970][T14251] FAULT_INJECTION: forcing a failure. [ 607.879970][T14251] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 608.013721][T14251] CPU: 0 UID: 0 PID: 14251 Comm: syz.0.1948 Tainted: G I 6.15.0-rc5-syzkaller-00207-g1a33418a69cc #0 PREEMPT(full) [ 608.013776][T14251] Tainted: [I]=FIRMWARE_WORKAROUND [ 608.013787][T14251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 608.013806][T14251] Call Trace: [ 608.013815][T14251] [ 608.013826][T14251] dump_stack_lvl+0x16c/0x1f0 [ 608.013876][T14251] should_fail_ex+0x512/0x640 [ 608.013927][T14251] _copy_from_user+0x2e/0xd0 [ 608.013976][T14251] move_addr_to_kernel+0x65/0x170 [ 608.014023][T14251] __copy_msghdr+0x386/0x470 [ 608.014054][T14251] copy_msghdr_from_user+0xc1/0x160 [ 608.014079][T14251] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 608.014117][T14251] ? __pfx__kstrtoull+0x10/0x10 [ 608.014148][T14251] ___sys_sendmsg+0xfe/0x1d0 [ 608.014175][T14251] ? __pfx____sys_sendmsg+0x10/0x10 [ 608.014214][T14251] ? find_held_lock+0x2b/0x80 [ 608.014253][T14251] __sys_sendmmsg+0x200/0x420 [ 608.014283][T14251] ? __pfx___sys_sendmmsg+0x10/0x10 [ 608.014319][T14251] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 608.014366][T14251] ? fput+0x70/0xf0 [ 608.014393][T14251] ? ksys_write+0x1b9/0x240 [ 608.014414][T14251] ? __pfx_ksys_write+0x10/0x10 [ 608.014434][T14251] ? rcu_is_watching+0x12/0xc0 [ 608.014459][T14251] __x64_sys_sendmmsg+0x9c/0x100 [ 608.014485][T14251] ? lockdep_hardirqs_on+0x7c/0x110 [ 608.014527][T14251] do_syscall_64+0xcd/0x230 [ 608.014576][T14251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 608.014609][T14251] RIP: 0033:0x7f25d2d8e969 [ 608.014627][T14251] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 608.014650][T14251] RSP: 002b:00007f25d3b74038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 608.014671][T14251] RAX: ffffffffffffffda RBX: 00007f25d2fb6160 RCX: 00007f25d2d8e969 [ 608.014686][T14251] RDX: 0000000000000005 RSI: 0000200000000140 RDI: 000000000000000a [ 608.014699][T14251] RBP: 00007f25d3b74090 R08: 0000000000000000 R09: 0000000000000000 [ 608.014712][T14251] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 608.014726][T14251] R13: 0000000000000000 R14: 00007f25d2fb6160 R15: 00007ffd070ad2b8 [ 608.014753][T14251] [ 608.857831][T14256] delete_channel: no stack [ 608.904166][T14256] delete_channel: no stack [ 608.961027][T14256] delete_channel: no stack [ 608.965807][T14256] delete_channel: no stack [ 608.970517][T14256] delete_channel: no stack [ 609.008591][T14256] delete_channel: no stack [ 609.050754][T14256] delete_channel: no stack [ 609.065733][T14256] delete_channel: no stack [ 609.081722][T14256] delete_channel: no stack [ 609.099011][T14256] delete_channel: no stack [ 609.109060][T14256] delete_channel: no stack [ 609.128162][T14256] delete_channel: no stack [ 609.133346][T14256] delete_channel: no stack [ 609.138918][T14256] delete_channel: no stack [ 609.146787][T14256] delete_channel: no stack [ 609.151911][T14256] delete_channel: no stack [ 609.156681][T14256] delete_channel: no stack [ 609.164745][T14256] delete_channel: no stack [ 609.169571][T14256] delete_channel: no stack [ 609.195785][T14256] delete_channel: no stack [ 609.213827][T14272] FAULT_INJECTION: forcing a failure. [ 609.213827][T14272] name failslab, interval 1, probability 0, space 0, times 0 [ 609.216019][T14256] delete_channel: no stack [ 609.239482][T14272] CPU: 1 UID: 0 PID: 14272 Comm: syz.2.1953 Tainted: G I 6.15.0-rc5-syzkaller-00207-g1a33418a69cc #0 PREEMPT(full) [ 609.239533][T14272] Tainted: [I]=FIRMWARE_WORKAROUND [ 609.239544][T14272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 609.239561][T14272] Call Trace: [ 609.239571][T14272] [ 609.239582][T14272] dump_stack_lvl+0x16c/0x1f0 [ 609.239633][T14272] should_fail_ex+0x512/0x640 [ 609.239684][T14272] should_failslab+0xc2/0x120 [ 609.239722][T14272] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 609.239759][T14272] ? skb_clone+0x190/0x3f0 [ 609.239799][T14272] skb_clone+0x190/0x3f0 [ 609.239836][T14272] netlink_deliver_tap+0xabd/0xd30 [ 609.239882][T14272] netlink_unicast+0x5df/0x7f0 [ 609.239927][T14272] ? __pfx_netlink_unicast+0x10/0x10 [ 609.239965][T14272] ? __lock_acquire+0xaa4/0x1ba0 [ 609.240027][T14272] netlink_sendmsg+0x8d1/0xdd0 [ 609.240074][T14272] ? __pfx_netlink_sendmsg+0x10/0x10 [ 609.240131][T14272] ____sys_sendmsg+0xa95/0xc70 [ 609.240176][T14272] ? copy_msghdr_from_user+0x10a/0x160 [ 609.240210][T14272] ? __pfx_____sys_sendmsg+0x10/0x10 [ 609.240275][T14272] ___sys_sendmsg+0x134/0x1d0 [ 609.240311][T14272] ? __pfx____sys_sendmsg+0x10/0x10 [ 609.240382][T14272] ? __pfx_vfs_write+0x10/0x10 [ 609.240412][T14272] ? do_sys_openat2+0x157/0x1d0 [ 609.240459][T14272] __sys_sendmsg+0x16d/0x220 [ 609.240495][T14272] ? __pfx___sys_sendmsg+0x10/0x10 [ 609.240544][T14272] ? rcu_is_watching+0x12/0xc0 [ 609.240584][T14272] do_syscall_64+0xcd/0x230 [ 609.240632][T14272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.240665][T14272] RIP: 0033:0x7f4892f8e969 [ 609.240688][T14272] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 609.240716][T14272] RSP: 002b:00007f4890df6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 609.240746][T14272] RAX: ffffffffffffffda RBX: 00007f48931b5fa0 RCX: 00007f4892f8e969 [ 609.240766][T14272] RDX: 0000000020000000 RSI: 0000200000000200 RDI: 0000000000000000 [ 609.240786][T14272] RBP: 00007f4890df6090 R08: 0000000000000000 R09: 0000000000000000 [ 609.240804][T14272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 609.240823][T14272] R13: 0000000000000000 R14: 00007f48931b5fa0 R15: 00007ffef302d718 [ 609.240865][T14272] [ 609.299810][T14256] delete_channel: no stack [ 609.303962][ C1] vkms_vblank_simulate: vblank timer overrun [ 609.326650][T14256] delete_channel: no stack [ 609.327881][ C1] vkms_vblank_simulate: vblank timer overrun [ 609.498819][ C1] hrtimer: interrupt took 250786486 ns [ 609.534360][T14256] delete_channel: no stack [ 609.539712][T14256] delete_channel: no stack [ 609.544537][T14256] delete_channel: no stack [ 609.549419][T14256] delete_channel: no stack [ 609.555107][T14256] delete_channel: no stack [ 609.598863][ C1] vkms_vblank_simulate: vblank timer overrun [ 609.601478][T14256] delete_channel: no stack [ 609.660232][T14256] delete_channel: no stack [ 609.676253][T14256] delete_channel: no stack [ 609.758796][T14256] delete_channel: no stack [ 609.785819][T14256] delete_channel: no stack [ 610.247897][T14290] FAULT_INJECTION: forcing a failure. [ 610.247897][T14290] name failslab, interval 1, probability 0, space 0, times 0 [ 610.366796][T14290] CPU: 0 UID: 0 PID: 14290 Comm: syz.1.1957 Tainted: G I 6.15.0-rc5-syzkaller-00207-g1a33418a69cc #0 PREEMPT(full) [ 610.366851][T14290] Tainted: [I]=FIRMWARE_WORKAROUND [ 610.366863][T14290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 610.366882][T14290] Call Trace: [ 610.366892][T14290] [ 610.366904][T14290] dump_stack_lvl+0x16c/0x1f0 [ 610.366954][T14290] should_fail_ex+0x512/0x640 [ 610.367006][T14290] should_failslab+0xc2/0x120 [ 610.367046][T14290] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 610.367093][T14290] ? skb_clone+0x190/0x3f0 [ 610.367134][T14290] skb_clone+0x190/0x3f0 [ 610.367173][T14290] netlink_deliver_tap+0xabd/0xd30 [ 610.367221][T14290] netlink_unicast+0x5df/0x7f0 [ 610.367266][T14290] ? __pfx_netlink_unicast+0x10/0x10 [ 610.367304][T14290] ? __lock_acquire+0xaa4/0x1ba0 [ 610.367356][T14290] netlink_sendmsg+0x8d1/0xdd0 [ 610.367404][T14290] ? __pfx_netlink_sendmsg+0x10/0x10 [ 610.367461][T14290] ____sys_sendmsg+0xa95/0xc70 [ 610.367507][T14290] ? copy_msghdr_from_user+0x10a/0x160 [ 610.367543][T14290] ? __pfx_____sys_sendmsg+0x10/0x10 [ 610.367609][T14290] ___sys_sendmsg+0x134/0x1d0 [ 610.367646][T14290] ? __pfx____sys_sendmsg+0x10/0x10 [ 610.367736][T14290] __sys_sendmsg+0x16d/0x220 [ 610.367776][T14290] ? __pfx___sys_sendmsg+0x10/0x10 [ 610.367825][T14290] ? rcu_is_watching+0x12/0xc0 [ 610.367867][T14290] do_syscall_64+0xcd/0x230 [ 610.367916][T14290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 610.367948][T14290] RIP: 0033:0x7f036958e969 [ 610.367973][T14290] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 610.368004][T14290] RSP: 002b:00007f036a4a9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 610.368034][T14290] RAX: ffffffffffffffda RBX: 00007f03697b5fa0 RCX: 00007f036958e969 [ 610.368055][T14290] RDX: 0000000000000080 RSI: 00002000000028c0 RDI: 0000000000000003 [ 610.368081][T14290] RBP: 00007f036a4a9090 R08: 0000000000000000 R09: 0000000000000000 [ 610.368101][T14290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 610.368120][T14290] R13: 0000000000000000 R14: 00007f03697b5fa0 R15: 00007ffce8324a48 [ 610.368161][T14290] [ 611.488708][T14313] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1960'. [ 612.650955][T14311] kexec: Could not allocate control_code_buffer [ 612.777501][T14318] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1965'. [ 612.999293][ T30] audit: type=1800 audit(4294969389.007:11): pid=14333 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1968" name="lu_gp_id" dev="configfs" ino=39711 res=0 errno=0 [ 613.019714][ C1] vkms_vblank_simulate: vblank timer overrun [ 613.703880][T14354] FAULT_INJECTION: forcing a failure. [ 613.703880][T14354] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 613.766020][T14354] CPU: 1 UID: 0 PID: 14354 Comm: syz.3.1974 Tainted: G I 6.15.0-rc5-syzkaller-00207-g1a33418a69cc #0 PREEMPT(full) [ 613.766073][T14354] Tainted: [I]=FIRMWARE_WORKAROUND [ 613.766085][T14354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 613.766102][T14354] Call Trace: [ 613.766112][T14354] [ 613.766123][T14354] dump_stack_lvl+0x16c/0x1f0 [ 613.766171][T14354] should_fail_ex+0x512/0x640 [ 613.766222][T14354] _copy_to_user+0x32/0xd0 [ 613.766273][T14354] simple_read_from_buffer+0xcb/0x170 [ 613.766322][T14354] proc_fail_nth_read+0x197/0x270 [ 613.766368][T14354] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 613.766416][T14354] ? rw_verify_area+0xcf/0x680 [ 613.766461][T14354] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 613.766506][T14354] vfs_read+0x1de/0xc70 [ 613.766640][T14354] ? __pfx___mutex_lock+0x10/0x10 [ 613.766693][T14354] ? __pfx_vfs_read+0x10/0x10 [ 613.766736][T14354] ? __fget_files+0x20e/0x3c0 [ 613.766798][T14354] ksys_read+0x12a/0x240 [ 613.766835][T14354] ? __pfx_ksys_read+0x10/0x10 [ 613.766878][T14354] do_syscall_64+0xcd/0x230 [ 613.766926][T14354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 613.766959][T14354] RIP: 0033:0x7fb6d118d37c [ 613.766985][T14354] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 613.767016][T14354] RSP: 002b:00007fb6d1f66030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 613.767049][T14354] RAX: ffffffffffffffda RBX: 00007fb6d13b5fa0 RCX: 00007fb6d118d37c [ 613.767070][T14354] RDX: 000000000000000f RSI: 00007fb6d1f660a0 RDI: 0000000000000005 [ 613.767089][T14354] RBP: 00007fb6d1f66090 R08: 0000000000000000 R09: 0000000000000000 [ 613.767108][T14354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 613.767127][T14354] R13: 0000000000000000 R14: 00007fb6d13b5fa0 R15: 00007ffec335d388 [ 613.767168][T14354] [ 613.964182][ C1] vkms_vblank_simulate: vblank timer overrun [ 615.438719][T14367] kexec: Could not allocate control_code_buffer [ 615.752739][T14388] netlink: 330 bytes leftover after parsing attributes in process `syz.3.1982'. [ 616.302942][T12906] Bluetooth: hci1: unexpected event 0x3e length: 726 > 260 [ 616.302986][T12906] Bluetooth: hci1: unexpected subevent 0x05 length: 725 > 12 [ 616.405778][T14399] ======================================================= [ 616.405778][T14399] WARNING: The mand mount option has been deprecated and [ 616.405778][T14399] and is ignored by this kernel. Remove the mand [ 616.405778][T14399] option from the mount to silence this warning. [ 616.405778][T14399] ======================================================= [ 616.564538][T14421] FAULT_INJECTION: forcing a failure. [ 616.564538][T14421] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 616.590368][T14421] CPU: 1 UID: 0 PID: 14421 Comm: syz.2.1985 Tainted: G I 6.15.0-rc5-syzkaller-00207-g1a33418a69cc #0 PREEMPT(full) [ 616.590420][T14421] Tainted: [I]=FIRMWARE_WORKAROUND [ 616.590431][T14421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 616.590451][T14421] Call Trace: [ 616.590460][T14421] [ 616.590470][T14421] dump_stack_lvl+0x16c/0x1f0 [ 616.590517][T14421] should_fail_ex+0x512/0x640 [ 616.590567][T14421] _copy_from_user+0x2e/0xd0 [ 616.590624][T14421] do_pages_stat+0x239/0x800 [ 616.590676][T14421] ? __pfx_do_pages_stat+0x10/0x10 [ 616.590750][T14421] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 616.590789][T14421] ? lockdep_hardirqs_on+0x7c/0x110 [ 616.590829][T14421] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 616.590873][T14421] kernel_move_pages+0xfd5/0x13a0 [ 616.590929][T14421] ? __pfx_kernel_move_pages+0x10/0x10 [ 616.590978][T14421] ? __fget_files+0x20e/0x3c0 [ 616.591034][T14421] ? fput+0x70/0xf0 [ 616.591069][T14421] ? ksys_write+0x1b9/0x240 [ 616.591096][T14421] ? __pfx_ksys_write+0x10/0x10 [ 616.591123][T14421] ? rcu_is_watching+0x12/0xc0 [ 616.591158][T14421] __x64_sys_move_pages+0xe0/0x1c0 [ 616.591201][T14421] ? do_syscall_64+0x91/0x230 [ 616.591244][T14421] ? lockdep_hardirqs_on+0x7c/0x110 [ 616.591286][T14421] do_syscall_64+0xcd/0x230 [ 616.591331][T14421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 616.591362][T14421] RIP: 0033:0x7f4892f8e969 [ 616.591386][T14421] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 616.591417][T14421] RSP: 002b:00007f4890dd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 616.591446][T14421] RAX: ffffffffffffffda RBX: 00007f48931b6080 RCX: 00007f4892f8e969 [ 616.591467][T14421] RDX: 0000000000000000 RSI: 0000000000001002 RDI: 0000000000000000 [ 616.591486][T14421] RBP: 00007f4890dd5090 R08: 0000000000000000 R09: 0000000000000002 [ 616.591505][T14421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 616.591524][T14421] R13: 0000000000000000 R14: 00007f48931b6080 R15: 00007ffef302d718 [ 616.591565][T14421] [ 617.912605][T14434] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 618.212093][T14457] FAULT_INJECTION: forcing a failure. [ 618.212093][T14457] name failslab, interval 1, probability 0, space 0, times 0 [ 618.248947][T14462] FAULT_INJECTION: forcing a failure. [ 618.248947][T14462] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 618.262564][T14462] CPU: 0 UID: 0 PID: 14462 Comm: syz.3.2000 Tainted: G I 6.15.0-rc5-syzkaller-00207-g1a33418a69cc #0 PREEMPT(full) [ 618.262614][T14462] Tainted: [I]=FIRMWARE_WORKAROUND [ 618.262625][T14462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 618.262643][T14462] Call Trace: [ 618.262652][T14462] [ 618.262665][T14462] dump_stack_lvl+0x16c/0x1f0 [ 618.262712][T14462] should_fail_ex+0x512/0x640 [ 618.262763][T14462] should_fail_alloc_page+0xe7/0x130 [ 618.262806][T14462] prepare_alloc_pages+0x3c2/0x610 [ 618.262862][T14462] __alloc_frozen_pages_noprof+0x18f/0x23a0 [ 618.262907][T14462] ? do_raw_spin_lock+0x12c/0x2b0 [ 618.262956][T14462] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 618.263000][T14462] ? look_up_lock_class+0x59/0x150 [ 618.263038][T14462] ? find_held_lock+0x2b/0x80 [ 618.263065][T14462] ? register_lock_class+0x41/0x4c0 [ 618.263107][T14462] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 618.263145][T14462] ? __lock_acquire+0x5ca/0x1ba0 [ 618.263195][T14462] ? __lock_acquire+0x5ca/0x1ba0 [ 618.263243][T14462] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 618.263290][T14462] ? policy_nodemask+0xea/0x4e0 [ 618.263332][T14462] alloc_pages_mpol+0x1fb/0x550 [ 618.263372][T14462] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 618.263423][T14462] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 618.263464][T14462] folio_alloc_mpol_noprof+0x36/0x2f0 [ 618.263517][T14462] shmem_alloc_folio+0x135/0x160 [ 618.263550][T14462] shmem_alloc_and_add_folio+0x499/0xc20 [ 618.263598][T14462] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 618.263640][T14462] ? shmem_allowable_huge_orders+0xcb/0x2f0 [ 618.263687][T14462] shmem_get_folio_gfp+0x687/0x1530 [ 618.263734][T14462] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 618.263769][T14462] ? find_held_lock+0x2b/0x80 [ 618.263799][T14462] ? __page_table_check_zero+0x323/0x5b0 [ 618.263840][T14462] shmem_fault+0x1fe/0xa30 [ 618.263880][T14462] ? __pfx_shmem_fault+0x10/0x10 [ 618.263922][T14462] ? get_page_from_freelist+0x133c/0x3920 [ 618.263972][T14462] ? __pfx_filemap_map_pages+0x10/0x10 [ 618.264011][T14462] __do_fault+0x10a/0x490 [ 618.264053][T14462] ? __pfx_filemap_map_pages+0x10/0x10 [ 618.264089][T14462] do_pte_missing+0x1a6/0x3fb0 [ 618.264126][T14462] ? __handle_mm_fault+0x1010/0x2a40 [ 618.264164][T14462] __handle_mm_fault+0x103d/0x2a40 [ 618.264208][T14462] ? __pfx___handle_mm_fault+0x10/0x10 [ 618.264265][T14462] ? find_vma+0xbf/0x140 [ 618.264307][T14462] ? __pfx_find_vma+0x10/0x10 [ 618.264353][T14462] handle_mm_fault+0x3fe/0xad0 [ 618.264399][T14462] do_user_addr_fault+0x7a6/0x1370 [ 618.264436][T14462] ? rcu_is_watching+0x12/0xc0 [ 618.264469][T14462] exc_page_fault+0x5c/0xc0 [ 618.264512][T14462] asm_exc_page_fault+0x26/0x30 [ 618.264543][T14462] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 618.264578][T14462] Code: cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 618.264608][T14462] RSP: 0018:ffffc90017b07c90 EFLAGS: 00050202 [ 618.264634][T14462] RAX: 0000000000000001 RBX: 0000000000008201 RCX: 0000000000007201 [ 618.264653][T14462] RDX: ffffed10060e9040 RSI: ffff888030741000 RDI: 0000000000001000 [ 618.264673][T14462] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffed10060e9040 [ 618.264692][T14462] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888030740000 [ 618.264711][T14462] R13: 0000000000008201 R14: 00007ffffffff000 R15: 0000000000000000 [ 618.264752][T14462] _copy_to_user+0xbb/0xd0 [ 618.264803][T14462] __sys_bpf+0x48d3/0x4d80 [ 618.264852][T14462] ? __pfx___sys_bpf+0x10/0x10 [ 618.264895][T14462] ? vfs_write+0x316/0x1180 [ 618.264921][T14462] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 618.264975][T14462] ? __pfx_vfs_write+0x10/0x10 [ 618.265006][T14462] ? do_sys_openat2+0x157/0x1d0 [ 618.265071][T14462] ? ksys_write+0x1b9/0x240 [ 618.265099][T14462] ? __pfx_ksys_write+0x10/0x10 [ 618.265127][T14462] ? rcu_is_watching+0x12/0xc0 [ 618.265164][T14462] __x64_sys_bpf+0x78/0xc0 [ 618.265209][T14462] ? lockdep_hardirqs_on+0x7c/0x110 [ 618.265252][T14462] do_syscall_64+0xcd/0x230 [ 618.265299][T14462] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 618.265330][T14462] RIP: 0033:0x7fb6d118e969 [ 618.265355][T14462] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 618.265385][T14462] RSP: 002b:00007fb6d1f66038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 618.265421][T14462] RAX: ffffffffffffffda RBX: 00007fb6d13b5fa0 RCX: 00007fb6d118e969 [ 618.265441][T14462] RDX: 00000000000005c8 RSI: 0000000000000000 RDI: 0000000000000001 [ 618.265460][T14462] RBP: 00007fb6d1f66090 R08: 0000000000000000 R09: 0000000000000000 [ 618.265478][T14462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 618.265497][T14462] R13: 0000000000000000 R14: 00007fb6d13b5fa0 R15: 00007ffec335d388 [ 618.265538][T14462] [ 618.272815][T14457] CPU: 1 UID: 0 PID: 14457 Comm: syz.1.1999 Tainted: G I 6.15.0-rc5-syzkaller-00207-g1a33418a69cc #0 PREEMPT(full) [ 618.272871][T14457] Tainted: [I]=FIRMWARE_WORKAROUND [ 618.272884][T14457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 618.272903][T14457] Call Trace: [ 618.272914][T14457] [ 618.272925][T14457] dump_stack_lvl+0x16c/0x1f0 [ 618.272978][T14457] should_fail_ex+0x512/0x640 [ 618.273031][T14457] should_failslab+0xc2/0x120 [ 618.273073][T14457] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 618.273113][T14457] ? skb_clone+0x190/0x3f0 [ 618.273166][T14457] skb_clone+0x190/0x3f0 [ 618.273205][T14457] netlink_deliver_tap+0xabd/0xd30 [ 618.273254][T14457] netlink_unicast+0x6b2/0x7f0 [ 618.273301][T14457] ? __pfx_netlink_unicast+0x10/0x10 [ 618.273340][T14457] ? genl_rcv_msg+0x4bb/0x800 [ 618.273398][T14457] netlink_ack+0x696/0xb80 [ 618.273452][T14457] netlink_rcv_skb+0x347/0x440 [ 618.273495][T14457] ? __pfx_genl_rcv_msg+0x10/0x10 [ 618.273544][T14457] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 618.273608][T14457] ? __pfx_down_read+0x10/0x10 [ 618.273660][T14457] ? netlink_deliver_tap+0x1ae/0xd30 [ 618.273707][T14457] genl_rcv+0x28/0x40 [ 618.273750][T14457] netlink_unicast+0x53a/0x7f0 [ 618.273797][T14457] ? __pfx_netlink_unicast+0x10/0x10 [ 618.273835][T14457] ? __lock_acquire+0xaa4/0x1ba0 [ 618.273890][T14457] netlink_sendmsg+0x8d1/0xdd0 [ 618.273939][T14457] ? __pfx_netlink_sendmsg+0x10/0x10 [ 618.273999][T14457] ____sys_sendmsg+0xa95/0xc70 [ 618.274048][T14457] ? copy_msghdr_from_user+0x10a/0x160 [ 618.274086][T14457] ? __pfx_____sys_sendmsg+0x10/0x10 [ 618.274194][T14457] ___sys_sendmsg+0x134/0x1d0 [ 618.274235][T14457] ? __pfx____sys_sendmsg+0x10/0x10 [ 618.274327][T14457] __sys_sendmsg+0x16d/0x220 [ 618.274366][T14457] ? __pfx___sys_sendmsg+0x10/0x10 [ 618.274416][T14457] ? rcu_is_watching+0x12/0xc0 [ 618.274460][T14457] do_syscall_64+0xcd/0x230 [ 618.274511][T14457] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 618.274545][T14457] RIP: 0033:0x7f036958e969 [ 618.274571][T14457] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 618.274604][T14457] RSP: 002b:00007f036a4a9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 618.274636][T14457] RAX: ffffffffffffffda RBX: 00007f03697b5fa0 RCX: 00007f036958e969 [ 618.274658][T14457] RDX: 0000000000000080 RSI: 00002000000006c0 RDI: 0000000000000003 [ 618.274679][T14457] RBP: 00007f036a4a9090 R08: 0000000000000000 R09: 0000000000000000 [ 618.274698][T14457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 618.274718][T14457] R13: 0000000000000000 R14: 00007f03697b5fa0 R15: 00007ffce8324a48 [ 618.274761][T14457] [ 619.028930][T12906] Bluetooth: hci1: command 0x0c1a tx timeout [ 620.247084][T14479] FAULT_INJECTION: forcing a failure. [ 620.247084][T14479] name failslab, interval 1, probability 0, space 0, times 0 [ 620.268204][T14479] CPU: 1 UID: 0 PID: 14479 Comm: syz.3.2007 Tainted: G I 6.15.0-rc5-syzkaller-00207-g1a33418a69cc #0 PREEMPT(full) [ 620.268259][T14479] Tainted: [I]=FIRMWARE_WORKAROUND [ 620.268272][T14479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 620.268298][T14479] Call Trace: [ 620.268308][T14479] [ 620.268320][T14479] dump_stack_lvl+0x16c/0x1f0 [ 620.268371][T14479] should_fail_ex+0x512/0x640 [ 620.268415][T14479] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 620.268456][T14479] should_failslab+0xc2/0x120 [ 620.268496][T14479] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 620.268532][T14479] ? stack_depot_save_flags+0x28/0xa50 [ 620.268578][T14479] ? __d_alloc+0x31/0xaa0 [ 620.268616][T14479] __d_alloc+0x31/0xaa0 [ 620.268654][T14479] d_alloc+0x4a/0x1e0 [ 620.268688][T14479] d_alloc_parallel+0xe3/0x12e0 [ 620.268742][T14479] ? find_held_lock+0x2b/0x80 [ 620.268773][T14479] ? __pfx_d_alloc_parallel+0x10/0x10 [ 620.268819][T14479] ? __d_lookup+0x266/0x4a0 [ 620.268870][T14479] lookup_open.isra.0+0x665/0x1580 [ 620.268928][T14479] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 620.268997][T14479] ? lookup_fast+0x156/0x610 [ 620.269050][T14479] path_openat+0x905/0x2d40 [ 620.269095][T14479] ? __pfx_path_openat+0x10/0x10 [ 620.269139][T14479] do_filp_open+0x20b/0x470 [ 620.269169][T14479] ? __pfx_do_filp_open+0x10/0x10 [ 620.269213][T14479] ? __pfx_kfree_link+0x10/0x10 [ 620.269265][T14479] ? alloc_fd+0x471/0x7d0 [ 620.269334][T14479] do_sys_openat2+0x11b/0x1d0 [ 620.269374][T14479] ? __pfx_do_sys_openat2+0x10/0x10 [ 620.269431][T14479] __x64_sys_openat+0x174/0x210 [ 620.269477][T14479] ? __pfx___x64_sys_openat+0x10/0x10 [ 620.269523][T14479] ? rcu_is_watching+0x12/0xc0 [ 620.269565][T14479] do_syscall_64+0xcd/0x230 [ 620.269615][T14479] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.269648][T14479] RIP: 0033:0x7fb6d118d2d0 [ 620.269673][T14479] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 620.269704][T14479] RSP: 002b:00007fb6d1f65f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 620.269734][T14479] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb6d118d2d0 [ 620.269753][T14479] RDX: 0000000000000000 RSI: 00007fb6d1f65fa0 RDI: 00000000ffffff9c [ 620.269773][T14479] RBP: 00007fb6d1f65fa0 R08: 0000000000000000 R09: 0000000000000000 [ 620.269793][T14479] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 620.269813][T14479] R13: 0000000000000000 R14: 00007fb6d13b5fa0 R15: 00007ffec335d388 [ 620.269856][T14479] [ 620.527641][T14483] FAULT_INJECTION: forcing a failure. [ 620.527641][T14483] name failslab, interval 1, probability 0, space 0, times 0 [ 620.540732][T14483] CPU: 0 UID: 0 PID: 14483 Comm: syz.1.2008 Tainted: G I 6.15.0-rc5-syzkaller-00207-g1a33418a69cc #0 PREEMPT(full) [ 620.540786][T14483] Tainted: [I]=FIRMWARE_WORKAROUND [ 620.540798][T14483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 620.540818][T14483] Call Trace: [ 620.540828][T14483] [ 620.540840][T14483] dump_stack_lvl+0x16c/0x1f0 [ 620.540890][T14483] should_fail_ex+0x512/0x640 [ 620.540936][T14483] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 620.540978][T14483] should_failslab+0xc2/0x120 [ 620.541028][T14483] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 620.541064][T14483] ? security_file_alloc+0x34/0x2b0 [ 620.541116][T14483] security_file_alloc+0x34/0x2b0 [ 620.541161][T14483] init_file+0x93/0x4c0 [ 620.541200][T14483] alloc_empty_file+0x73/0x1e0 [ 620.541243][T14483] alloc_file_pseudo+0x13a/0x230 [ 620.541302][T14483] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 620.541355][T14483] __shmem_file_setup+0x210/0x300 [ 620.541393][T14483] shmem_zero_setup+0x93/0x1a0 [ 620.541435][T14483] __mmap_region+0x2036/0x27c0 [ 620.541476][T14483] ? __pfx___mmap_region+0x10/0x10 [ 620.541511][T14483] ? trace_sched_exit_tp+0xde/0x130 [ 620.541579][T14483] ? __pfx___schedule+0x10/0x10 [ 620.541665][T14483] ? trace_cap_capable+0x18d/0x200 [ 620.541699][T14483] ? cap_capable+0xb3/0x250 [ 620.541736][T14483] mmap_region+0x1ab/0x3f0 [ 620.541779][T14483] do_mmap+0xd8e/0x11b0 [ 620.541832][T14483] ? __pfx_do_mmap+0x10/0x10 [ 620.541876][T14483] ? __pfx_down_write_killable+0x10/0x10 [ 620.541925][T14483] ? kmem_cache_free+0x2d4/0x4d0 [ 620.541965][T14483] vm_mmap_pgoff+0x281/0x450 [ 620.542024][T14483] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 620.542071][T14483] ? find_held_lock+0x2b/0x80 [ 620.542106][T14483] ? __x64_sys_futex+0x1e0/0x4c0 [ 620.542138][T14483] ? __x64_sys_futex+0x1e9/0x4c0 [ 620.542178][T14483] ksys_mmap_pgoff+0x7d/0x5c0 [ 620.542224][T14483] ? rcu_is_watching+0x12/0xc0 [ 620.542257][T14483] __x64_sys_mmap+0x125/0x190 [ 620.542292][T14483] do_syscall_64+0xcd/0x230 [ 620.542341][T14483] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.542373][T14483] RIP: 0033:0x7f036958e969 [ 620.542398][T14483] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 620.542447][T14483] RSP: 002b:00007f036a4a9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 620.542477][T14483] RAX: ffffffffffffffda RBX: 00007f03697b5fa0 RCX: 00007f036958e969 [ 620.542498][T14483] RDX: 0000000000000003 RSI: 0000000002020009 RDI: 0000000000000000 [ 620.542518][T14483] RBP: 00007f0369610ab1 R08: fffffffffffffffa R09: 0000080000008000 [ 620.542538][T14483] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 620.542558][T14483] R13: 0000000000000000 R14: 00007f03697b5fa0 R15: 00007ffce8324a48 [ 620.542600][T14483] [ 621.049051][T14487] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2009'. [ 621.749596][T14504] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2012'. [ 621.774839][T14504] ipvlan1: entered allmulticast mode [ 621.786973][T14504] veth0_vlan: entered allmulticast mode [ 622.030084][T14507] netlink: 342 bytes leftover after parsing attributes in process `syz.3.2014'. [ 622.861485][T14527] FAULT_INJECTION: forcing a failure. [ 622.861485][T14527] name failslab, interval 1, probability 0, space 0, times 0 [ 622.880156][T14527] CPU: 1 UID: 0 PID: 14527 Comm: syz.0.2019 Tainted: G I 6.15.0-rc5-syzkaller-00207-g1a33418a69cc #0 PREEMPT(full) [ 622.880208][T14527] Tainted: [I]=FIRMWARE_WORKAROUND [ 622.880220][T14527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 622.880238][T14527] Call Trace: [ 622.880247][T14527] [ 622.880259][T14527] dump_stack_lvl+0x16c/0x1f0 [ 622.880306][T14527] should_fail_ex+0x512/0x640 [ 622.880350][T14527] ? __kmalloc_noprof+0xbf/0x510 [ 622.880387][T14527] ? sock_kmalloc+0x111/0x170 [ 622.880429][T14527] should_failslab+0xc2/0x120 [ 622.880468][T14527] __kmalloc_noprof+0xd2/0x510 [ 622.880513][T14527] sock_kmalloc+0x111/0x170 [ 622.880559][T14527] __ipv6_sock_mc_join+0x411/0x930 [ 622.880610][T14527] ? lockdep_hardirqs_on+0x7c/0x110 [ 622.880659][T14527] do_ipv6_setsockopt+0x3a7b/0x4320 [ 622.880703][T14527] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 622.880741][T14527] ? _kstrtoull+0x145/0x200 [ 622.880779][T14527] ? aa_label_sk_perm+0x19b/0x5a0 [ 622.880819][T14527] ? find_held_lock+0x2b/0x80 [ 622.880848][T14527] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 622.880886][T14527] ? __lock_acquire+0x5ca/0x1ba0 [ 622.880959][T14527] ? __pfx___might_resched+0x10/0x10 [ 622.881010][T14527] ? ipv6_setsockopt+0xcb/0x170 [ 622.881044][T14527] ipv6_setsockopt+0xcb/0x170 [ 622.881086][T14527] rawv6_setsockopt+0xc2/0x510 [ 622.881120][T14527] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 622.881158][T14527] ? sock_common_setsockopt+0x2e/0xf0 [ 622.881202][T14527] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 622.881246][T14527] do_sock_setsockopt+0x221/0x470 [ 622.881287][T14527] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 622.881356][T14527] __sys_setsockopt+0x120/0x1a0 [ 622.881398][T14527] __x64_sys_setsockopt+0xbd/0x160 [ 622.881428][T14527] ? do_syscall_64+0x91/0x230 [ 622.881472][T14527] ? lockdep_hardirqs_on+0x7c/0x110 [ 622.881515][T14527] do_syscall_64+0xcd/0x230 [ 622.881563][T14527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 622.881596][T14527] RIP: 0033:0x7f25d2d8e969 [ 622.881620][T14527] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 622.881652][T14527] RSP: 002b:00007f25d3bb6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 622.881682][T14527] RAX: ffffffffffffffda RBX: 00007f25d2fb5fa0 RCX: 00007f25d2d8e969 [ 622.881702][T14527] RDX: 0000000000000014 RSI: 0000000000000029 RDI: 0000000000000004 [ 622.881720][T14527] RBP: 00007f25d3bb6090 R08: 000000000000056b R09: 0000000000000000 [ 622.881740][T14527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 622.881758][T14527] R13: 0000000000000000 R14: 00007f25d2fb5fa0 R15: 00007ffd070ad2b8 [ 622.881800][T14527] [ 624.525275][T14553] netlink: 330 bytes leftover after parsing attributes in process `syz.0.2024'. [ 624.628968][T14558] FAULT_INJECTION: forcing a failure. [ 624.628968][T14558] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 624.692396][T14558] CPU: 1 UID: 0 PID: 14558 Comm: syz.2.2025 Tainted: G I 6.15.0-rc5-syzkaller-00207-g1a33418a69cc #0 PREEMPT(full) [ 624.692447][T14558] Tainted: [I]=FIRMWARE_WORKAROUND [ 624.692458][T14558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 624.692476][T14558] Call Trace: [ 624.692486][T14558] [ 624.692497][T14558] dump_stack_lvl+0x16c/0x1f0 [ 624.692545][T14558] should_fail_ex+0x512/0x640 [ 624.692594][T14558] should_fail_alloc_page+0xe7/0x130 [ 624.692634][T14558] prepare_alloc_pages+0x3c2/0x610 [ 624.692690][T14558] __alloc_frozen_pages_noprof+0x18f/0x23a0 [ 624.692735][T14558] ? __lock_acquire+0x5ca/0x1ba0 [ 624.692783][T14558] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 624.692842][T14558] ? find_held_lock+0x2b/0x80 [ 624.692879][T14558] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 624.692924][T14558] ? policy_nodemask+0xea/0x4e0 [ 624.692964][T14558] alloc_pages_mpol+0x1fb/0x550 [ 624.693005][T14558] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 624.693055][T14558] folio_alloc_mpol_noprof+0x36/0x2f0 [ 624.693103][T14558] shmem_alloc_folio+0x135/0x160 [ 624.693136][T14558] shmem_alloc_and_add_folio+0x499/0xc20 [ 624.693183][T14558] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 624.693225][T14558] ? shmem_allowable_huge_orders+0xcb/0x2f0 [ 624.693271][T14558] shmem_get_folio_gfp+0x687/0x1530 [ 624.693319][T14558] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 624.693361][T14558] ? filemap_map_pages+0xf6c/0x1680 [ 624.693406][T14558] shmem_fault+0x1fe/0xa30 [ 624.693446][T14558] ? __pfx_shmem_fault+0x10/0x10 [ 624.693490][T14558] ? __pfx_filemap_map_pages+0x10/0x10 [ 624.693542][T14558] __do_fault+0x10a/0x490 [ 624.693607][T14558] do_pte_missing+0x1031/0x3fb0 [ 624.693640][T14558] ? do_raw_spin_unlock+0x172/0x230 [ 624.693686][T14558] ? __pmd_alloc+0x3c2/0x870 [ 624.693728][T14558] ? find_held_lock+0x2b/0x80 [ 624.693760][T14558] __handle_mm_fault+0x103d/0x2a40 [ 624.693804][T14558] ? __pfx___handle_mm_fault+0x10/0x10 [ 624.693868][T14558] ? find_vma+0xbf/0x140 [ 624.693913][T14558] ? __pfx_find_vma+0x10/0x10 [ 624.693960][T14558] handle_mm_fault+0x3fe/0xad0 [ 624.694001][T14558] do_user_addr_fault+0x7a6/0x1370 [ 624.694039][T14558] ? rcu_is_watching+0x12/0xc0 [ 624.694072][T14558] exc_page_fault+0x5c/0xc0 [ 624.694116][T14558] asm_exc_page_fault+0x26/0x30 [ 624.694147][T14558] RIP: 0010:__get_user_4+0x14/0x20 [ 624.694181][T14558] Code: 00 00 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 ba 00 f0 ff ff ff 7f 00 00 48 39 d0 48 0f 47 c2 0f 01 cb <8b> 10 31 c0 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 [ 624.694212][T14558] RSP: 0018:ffffc9001828fda0 EFLAGS: 00050287 [ 624.694239][T14558] RAX: 0000000000000000 RBX: ffff88807a979881 RCX: ffffc9001828fd44 [ 624.694260][T14558] RDX: 00007ffffffff000 RSI: ffffffff893a4d4b RDI: ffffffff8bf46d20 [ 624.694281][T14558] RBP: 000000000000000c R08: 192076e9d3864c5e R09: 0000000000000001 [ 624.694301][T14558] R10: 0000000000000000 R11: 0000000000000000 R12: 000000000000000c [ 624.694320][T14558] R13: 0000000000000000 R14: ffffc9001828fe10 R15: 0000000000000000 [ 624.694353][T14558] ? move_addr_to_user+0x4b/0x1e0 [ 624.694398][T14558] move_addr_to_user+0x53/0x1e0 [ 624.694441][T14558] __sys_getsockname+0x1a4/0x260 [ 624.694474][T14558] ? __pfx___sys_getsockname+0x10/0x10 [ 624.694502][T14558] ? __fget_files+0x20e/0x3c0 [ 624.694565][T14558] ? __pfx_ksys_write+0x10/0x10 [ 624.694593][T14558] ? rcu_is_watching+0x12/0xc0 [ 624.694630][T14558] __x64_sys_getsockname+0x72/0xb0 [ 624.694657][T14558] ? lockdep_hardirqs_on+0x7c/0x110 [ 624.694699][T14558] do_syscall_64+0xcd/0x230 [ 624.694745][T14558] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.694775][T14558] RIP: 0033:0x7f4892f8e969 [ 624.694799][T14558] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 624.694829][T14558] RSP: 002b:00007f4890df6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000033 [ 624.694871][T14558] RAX: ffffffffffffffda RBX: 00007f48931b5fa0 RCX: 00007f4892f8e969 [ 624.694892][T14558] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 624.694910][T14558] RBP: 00007f4890df6090 R08: 0000000000000000 R09: 0000000000000000 [ 624.694929][T14558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 624.694948][T14558] R13: 0000000000000000 R14: 00007f48931b5fa0 R15: 00007ffef302d718 [ 624.694989][T14558] [ 625.458104][T14568] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2021'. [ 625.469345][T14568] bridge0: port 3(hsr0) entered blocking state [ 625.479223][T14568] bridge0: port 3(hsr0) entered disabled state [ 625.485692][T14568] hsr0: entered allmulticast mode [ 625.490782][T14568] hsr_slave_0: entered allmulticast mode [ 625.503663][T14568] hsr_slave_1: entered allmulticast mode [ 625.512162][T14568] hsr0: entered promiscuous mode [ 625.517968][T14568] bridge0: port 3(hsr0) entered blocking state [ 625.524311][T14568] bridge0: port 3(hsr0) entered forwarding state [ 626.417241][T14595] netlink: 342 bytes leftover after parsing attributes in process `syz.0.2032'. [ 627.725100][T14633] FAULT_INJECTION: forcing a failure. [ 627.725100][T14633] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 627.784450][T14633] CPU: 0 UID: 0 PID: 14633 Comm: syz.1.2038 Tainted: G I 6.15.0-rc5-syzkaller-00207-g1a33418a69cc #0 PREEMPT(full) [ 627.784503][T14633] Tainted: [I]=FIRMWARE_WORKAROUND [ 627.784515][T14633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 627.784534][T14633] Call Trace: [ 627.784551][T14633] [ 627.784563][T14633] dump_stack_lvl+0x16c/0x1f0 [ 627.784615][T14633] should_fail_ex+0x512/0x640 [ 627.784665][T14633] _copy_to_user+0x32/0xd0 [ 627.784717][T14633] do_timer_create+0x6dc/0x14e0 [ 627.784764][T14633] ? __pfx_do_timer_create+0x10/0x10 [ 627.784813][T14633] ? __fget_files+0x20e/0x3c0 [ 627.784866][T14633] __x64_sys_timer_create+0x199/0x1d0 [ 627.784909][T14633] ? __pfx___x64_sys_timer_create+0x10/0x10 [ 627.784950][T14633] ? fput+0x70/0xf0 [ 627.784987][T14633] ? ksys_write+0x1b9/0x240 [ 627.785016][T14633] ? __pfx_ksys_write+0x10/0x10 [ 627.785059][T14633] do_syscall_64+0xcd/0x230 [ 627.785108][T14633] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 627.785139][T14633] RIP: 0033:0x7f036958e969 [ 627.785164][T14633] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 627.785194][T14633] RSP: 002b:00007f036a4a9038 EFLAGS: 00000246 ORIG_RAX: 00000000000000de [ 627.785224][T14633] RAX: ffffffffffffffda RBX: 00007f03697b5fa0 RCX: 00007f036958e969 [ 627.785244][T14633] RDX: 0000200000000040 RSI: 0000000000000000 RDI: 00000000fffffff6 [ 627.785264][T14633] RBP: 00007f036a4a9090 R08: 0000000000000000 R09: 0000000000000000 [ 627.785283][T14633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 627.785302][T14633] R13: 0000000000000001 R14: 00007f03697b5fa0 R15: 00007ffce8324a48 [ 627.785343][T14633] [ 628.071454][T12906] Bluetooth: hci0: Unable to find connection for big 0xd2 [ 628.824120][T14659] FAULT_INJECTION: forcing a failure. [ 628.824120][T14659] name failslab, interval 1, probability 0, space 0, times 0 [ 628.848211][T14659] CPU: 1 UID: 0 PID: 14659 Comm: syz.1.2043 Tainted: G I 6.15.0-rc5-syzkaller-00207-g1a33418a69cc #0 PREEMPT(full) [ 628.848263][T14659] Tainted: [I]=FIRMWARE_WORKAROUND [ 628.848274][T14659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 628.848293][T14659] Call Trace: [ 628.848303][T14659] [ 628.848315][T14659] dump_stack_lvl+0x16c/0x1f0 [ 628.848364][T14659] should_fail_ex+0x512/0x640 [ 628.848406][T14659] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 628.848458][T14659] should_failslab+0xc2/0x120 [ 628.848505][T14659] __kmalloc_cache_noprof+0x6a/0x3e0 [ 628.848556][T14659] ? rcu_is_watching+0x12/0xc0 [ 628.848584][T14659] ? s_start+0x7b/0x320 [ 628.848628][T14659] s_start+0x7b/0x320 [ 628.848673][T14659] seq_read_iter+0x2be/0x12c0 [ 628.848719][T14659] ? register_lock_class+0x41/0x4c0 [ 628.848776][T14659] seq_read+0x39e/0x4e0 [ 628.848821][T14659] ? __pfx_seq_read+0x10/0x10 [ 628.848866][T14659] ? get_pid_task+0xfc/0x250 [ 628.848913][T14659] ? __mutex_trylock_common+0xe9/0x250 [ 628.848970][T14659] ? rw_verify_area+0xcf/0x680 [ 628.849014][T14659] ? __pfx_seq_read+0x10/0x10 [ 628.849061][T14659] vfs_read+0x1de/0xc70 [ 628.849096][T14659] ? __pfx___mutex_lock+0x10/0x10 [ 628.849142][T14659] ? __pfx_vfs_read+0x10/0x10 [ 628.849181][T14659] ? __fget_files+0x20e/0x3c0 [ 628.849237][T14659] ksys_read+0x12a/0x240 [ 628.849260][T14659] ? __pfx_ksys_read+0x10/0x10 [ 628.849282][T14659] ? rcu_is_watching+0x12/0xc0 [ 628.849314][T14659] do_syscall_64+0xcd/0x230 [ 628.849354][T14659] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 628.849380][T14659] RIP: 0033:0x7f036958e969 [ 628.849400][T14659] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 628.849426][T14659] RSP: 002b:00007f036a4a9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 628.849450][T14659] RAX: ffffffffffffffda RBX: 00007f03697b5fa0 RCX: 00007f036958e969 [ 628.849474][T14659] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000003 [ 628.849489][T14659] RBP: 00007f036a4a9090 R08: 0000000000000000 R09: 0000000000000000 [ 628.849504][T14659] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 628.849519][T14659] R13: 0000000000000000 R14: 00007f03697b5fa0 R15: 00007ffce8324a48 [ 628.849552][T14659] [ 628.849568][T14659] [ 629.080819][T14659] ===================================== [ 629.086370][T14659] WARNING: bad unlock balance detected! [ 629.091919][T14659] 6.15.0-rc5-syzkaller-00207-g1a33418a69cc #0 Tainted: G I [ 629.100598][T14659] ------------------------------------- [ 629.106144][T14659] syz.1.2043/14659 is trying to release lock (event_mutex) at: [ 629.113716][T14659] [] seq_read_iter+0x60d/0x12c0 [ 629.120164][T14659] but there are no more locks to release! [ 629.125894][T14659] [ 629.125894][T14659] other info that might help us debug this: [ 629.133955][T14659] 2 locks held by syz.1.2043/14659: [ 629.139157][T14659] #0: ffff88802936e478 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2a2/0x370 [ 629.148246][T14659] #1: ffff88802ff40b08 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xe1/0x12c0 [ 629.157178][T14659] [ 629.157178][T14659] stack backtrace: [ 629.163078][T14659] CPU: 1 UID: 0 PID: 14659 Comm: syz.1.2043 Tainted: G I 6.15.0-rc5-syzkaller-00207-g1a33418a69cc #0 PREEMPT(full) [ 629.163115][T14659] Tainted: [I]=FIRMWARE_WORKAROUND [ 629.163125][T14659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 629.163140][T14659] Call Trace: [ 629.163147][T14659] [ 629.163156][T14659] dump_stack_lvl+0x116/0x1f0 [ 629.163194][T14659] ? seq_read_iter+0x60d/0x12c0 [ 629.163229][T14659] print_unlock_imbalance_bug+0x11b/0x130 [ 629.163260][T14659] ? seq_read_iter+0x60d/0x12c0 [ 629.163293][T14659] lock_release+0x242/0x2f0 [ 629.163325][T14659] __mutex_unlock_slowpath+0xa2/0x6a0 [ 629.163362][T14659] ? rcu_is_watching+0x12/0xc0 [ 629.163384][T14659] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 629.163421][T14659] ? rcu_is_watching+0x12/0xc0 [ 629.163448][T14659] ? kfree+0x252/0x4d0 [ 629.163467][T14659] ? __kasan_kmalloc+0x8a/0xb0 [ 629.163496][T14659] seq_read_iter+0x60d/0x12c0 [ 629.163531][T14659] ? register_lock_class+0x41/0x4c0 [ 629.163567][T14659] seq_read+0x39e/0x4e0 [ 629.163600][T14659] ? __pfx_seq_read+0x10/0x10 [ 629.163634][T14659] ? get_pid_task+0xfc/0x250 [ 629.163668][T14659] ? __mutex_trylock_common+0xe9/0x250 [ 629.163705][T14659] ? rw_verify_area+0xcf/0x680 [ 629.163739][T14659] ? __pfx_seq_read+0x10/0x10 [ 629.163773][T14659] vfs_read+0x1de/0xc70 [ 629.163795][T14659] ? __pfx___mutex_lock+0x10/0x10 [ 629.163829][T14659] ? __pfx_vfs_read+0x10/0x10 [ 629.163854][T14659] ? __fget_files+0x20e/0x3c0 [ 629.163895][T14659] ksys_read+0x12a/0x240 [ 629.163916][T14659] ? __pfx_ksys_read+0x10/0x10 [ 629.163937][T14659] ? rcu_is_watching+0x12/0xc0 [ 629.163962][T14659] do_syscall_64+0xcd/0x230 [ 629.163998][T14659] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 629.164022][T14659] RIP: 0033:0x7f036958e969 [ 629.164042][T14659] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 629.164066][T14659] RSP: 002b:00007f036a4a9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 629.164089][T14659] RAX: ffffffffffffffda RBX: 00007f03697b5fa0 RCX: 00007f036958e969 [ 629.164105][T14659] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000003 [ 629.164119][T14659] RBP: 00007f036a4a9090 R08: 0000000000000000 R09: 0000000000000000 [ 629.164134][T14659] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 629.164148][T14659] R13: 0000000000000000 R14: 00007f03697b5fa0 R15: 00007ffce8324a48 [ 629.164171][T14659] [ 629.267746][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.418557][ T1301] ieee802154 phy1 wpan1: encryption failed: -22