last executing test programs: 12.383931542s ago: executing program 0 (id=877): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/pcm0p/oss\x00', 0xaa102, 0x0) write$auto(r0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00\x00\x00x \xec(\x1d\x98\xe9\xc4\xe8\xfc@6=\xab\xf4S\xae\xadB}\xdf]\x99\xc9\x9f4\xbb\xc5\x81\x9d\x8ak\xdeB\xcbd\xd3\x05\xe4P\x84\xcb\xb8#\x13\nYU\'\x95R\xc8\x9d\xb7*\xe0.\xd2\xdf\x1b\x88D\x8c{k\xcec\xe1\xa2j\xec\xc9\xd2\x98\x94I\x102h\x17\x8c\xa2\xc8\x8a7\xb7t', 0x7f0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x4d0500, 0x0) socket(0xa, 0x1, 0x100) ioperm$auto(0x7, 0x5ad2, 0xc) modify_ldt$auto(0x1, 0x0, 0x10) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/scsi/scsi\x00', 0x80002, 0x0) write$auto(0x3, 0x0, 0xfffffdef) r1 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0x4f2780, 0x0) pread64$auto(r1, 0x0, 0x0, 0x7) socket(0x2, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_RSS_GET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="09032dbd7000fcdbdf252600000008000700650000007ba4687b54ed8f8e51a493cb70cfcfb71f6309abacb4edde66564db83213fa9c75360f77b02f3a559b609c526cfcac8d093b7e61e4d736acb8593510b0daf9015e75e0195c0f19380b22adbcfe111fcfd91e0021fd73105ff309179b295c12cc586c58"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x12, 0x0, 0x0, &(0x7f0000000240)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x400000000000948f, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x3, 0x1, 0x9, 0x1]}, 0x0) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) ioctl$auto(0xc8, 0x400454cb, 0x5) r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/kernel/kexec_load_disabled\x00', 0x202, 0x0) sendfile$auto(r5, r5, 0x0, 0x0) mmap$auto(0xc, 0x20009, 0x5, 0x14, r5, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0xe36, 0x9, 0x9b72, 0xffffffffffffffff, 0x6) mmap$auto(0x0, 0x7fffffffffffffff, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0004, 0x19) madvise$auto(0x0, 0x200007, 0x19) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x50b41, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) 12.278302047s ago: executing program 3 (id=880): r0 = mq_open$auto(0x0, 0xdd1, 0x8, 0x0) mq_notify$auto(0x4, 0x0) mq_notify$auto(0x4, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) fsopen$auto(0x0, 0x1) adjtimex$auto(&(0x7f00000005c0)={0xf332b6e, 0x0, 0xcea4, 0xfffffffffffffffd, 0xd4, 0x1, 0x0, 0x0, 0x1, 0x368e, 0x2, {0x100000000, 0x10000}, 0x5, 0x6, 0xfffffffffffffffd, 0x1007bfe, 0x0, 0x9, 0x81, 0xdfffffffffff628c, 0x2, 0xdeb1, 0x808}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D1\x00', 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0xa3db) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) read$auto_proc_uid_map_operations_base(r0, &(0x7f0000000140)=""/163, 0xa3) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001080)='/sys/module/i915/parameters/mitigations\x00', 0x80302, 0x0) sendfile$auto(r2, r2, 0x0, 0x7ffff000) openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, 0x0, 0x12000, 0x0) socket(0xf, 0x4, 0x5) mmap$auto(0x21000000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) setresuid$auto(0x0, 0x1, 0x0) io_uring_register$auto(0x2, 0x20, 0x0, 0x1) sendmsg$auto_OVS_FLOW_CMD_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40010}, 0x800) ioctl$auto_MTDFILEMODE(r0, 0x4d13, 0x0) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) r3 = eventfd$auto(0x80) readv$auto(r3, &(0x7f0000000380)={0x0, 0x8}, 0x4) read$auto(r3, 0x0, 0xcc9c) userfaultfd$auto(0x4) listmount$auto(&(0x7f0000000100)={0x1f, @raw, 0x80000002, 0xfffffffffffffff7, 0x2}, 0x0, 0xf4240, 0x1) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x201, 0x0) ioctl$auto_TIOCSTI2(r4, 0x5412, &(0x7f0000000840)="13") 9.901954492s ago: executing program 3 (id=882): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0xa, 0x801, 0x84) socket(0x2, 0x3, 0x1) setsockopt$auto(0x3, 0x0, 0x3, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_to_bridge\x00'}) mount$auto(0x0, &(0x7f0000000100)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x10001, 0x0) mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) mount$auto(0x0, &(0x7f0000000100), 0x0, 0x2000000000100000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capset$auto(&(0x7f0000000180)={0x19980330}, 0x0) r1 = socket(0x2, 0x1, 0x106) connect$auto(r1, &(0x7f0000000040)=@in={0x2, 0x20, @remote}, 0x5) setsockopt$auto(r1, 0x6, 0xd, &(0x7f0000000280)='lp\x00h\x85M\xdf\xdc\x83\x8a\xa7\xe4]U(\x01\t=\x1e\x00\x00', 0x6) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) setsockopt$auto(0x3, 0x10000000084, 0x0, 0x0, 0x8) 9.654316408s ago: executing program 3 (id=883): openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/timer_list\x00', 0x1c9802, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x15, 0xffffffffffffffff, 0x7fff) openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sysfs$auto(0x2, 0x10000000000045, 0x0) fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) prctl$auto(0x41, 0x3, 0x0, 0x0, 0x0) prctl$auto(0x41, 0x3, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x801, 0x0) socket(0xf, 0x3, 0x2) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) open(&(0x7f0000000100)='./bus\x00', 0x14d27e, 0x72) socket(0x2, 0x1, 0x0) select$auto(0x6, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x3, 0xfff, 0x1, 0x948b, 0x3, 0x95f4da2d, 0xc, 0x6, 0x62, 0x7, 0x7, 0x6d3f, 0xa, 0x4, 0x5]}, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r1 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000140), 0x60a41, 0x0) ioctl$auto_RTC_WKALM_RD(r1, 0x80287010, &(0x7f0000000180)={0x1, 0xee, {0x9c, 0x1000, 0x7ff, 0x7, 0x7, 0x81, 0xfffffffa, 0x1, 0x2}}) mprotect$auto(0x110c238000, 0x1, 0x3) select$auto(0xe, 0x0, 0x0, &(0x7f0000000100)={[0x1ff, 0x6, 0x1, 0xfffffffffffffff7, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000021, 0x7, 0x6d3e, 0x7fff, 0x2, 0x6]}, 0x0) socket(0x1d, 0x2, 0x3) ioctl$auto_PROCMAP_QUERY(0xffffffffffffffff, 0xc0686611, &(0x7f0000000340)={0x8000000000000001, 0xfffffffffffffffe, 0xfffffffffffffffb, 0xfffffffffffffff8, 0x8, 0xe, 0x3, 0x9, 0x0, 0x200, 0xe223, 0x80000000, 0x2000009, 0x7, 0xfffffffffffffff7}) madvise$auto(0x110c230000, 0x8031cc, 0x9) close_range$auto(0x2, 0x8, 0x0) 9.511351147s ago: executing program 0 (id=884): openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/timer_list\x00', 0x1c9802, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x15, 0xffffffffffffffff, 0x7fff) openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sysfs$auto(0x2, 0x10000000000045, 0x0) fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) prctl$auto(0x41, 0x3, 0x0, 0x0, 0x0) prctl$auto(0x41, 0x3, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x801, 0x0) socket(0xf, 0x3, 0x2) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) open(&(0x7f0000000100)='./bus\x00', 0x14d27e, 0x72) socket(0x2, 0x1, 0x0) select$auto(0x6, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x3, 0xfff, 0x1, 0x948b, 0x3, 0x95f4da2d, 0xc, 0x6, 0x62, 0x7, 0x7, 0x6d3f, 0xa, 0x4, 0x5]}, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r1 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000140), 0x60a41, 0x0) ioctl$auto_RTC_WKALM_RD(r1, 0x80287010, &(0x7f0000000180)={0x1, 0xee, {0x9c, 0x1000, 0x7ff, 0x7, 0x7, 0x81, 0xfffffffa, 0x1, 0x2}}) mprotect$auto(0x110c238000, 0x1, 0x3) select$auto(0xe, 0x0, 0x0, &(0x7f0000000100)={[0x1ff, 0x6, 0x1, 0xfffffffffffffff7, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000021, 0x7, 0x6d3e, 0x7fff, 0x2, 0x6]}, 0x0) socket(0x1d, 0x2, 0x3) ioctl$auto_PROCMAP_QUERY(0xffffffffffffffff, 0xc0686611, &(0x7f0000000340)={0x8000000000000001, 0xfffffffffffffffe, 0xfffffffffffffffb, 0xfffffffffffffff8, 0x8, 0xe, 0x3, 0x9, 0x0, 0x200, 0xe223, 0x80000000, 0x2000009, 0x7, 0xfffffffffffffff7}) madvise$auto(0x110c230000, 0x8031cc, 0x9) close_range$auto(0x2, 0x8, 0x0) 8.451921582s ago: executing program 3 (id=886): mmap$auto(0x0, 0xa00006, 0x2, 0x40eb5, 0x602, 0x300000000000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x1a1842, 0x0) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) write$auto(0x3, 0x0, 0x7fffffff) write$auto(0x1, 0x0, 0x80000000) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(0x1, 0x0, 0x80000000) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000280)=""/234, 0xea) read$auto(0x3, 0x0, 0x84) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) getrandom$auto(0x0, 0x6000000, 0x1) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/dummy_hcd.3/usb4/4-0:1.0/authorized\x00', 0x10b142, 0x0) write$auto(0x3, 0x0, 0xfffffdef) write$auto(0x3, 0x0, 0xfffffdef) socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) syz_clone3(&(0x7f0000000400)={0x9840100, 0x0, 0x0, 0x0, {0x31}, 0x0, 0x0, 0x0, 0x0}, 0x58) 8.156410346s ago: executing program 0 (id=888): write$auto_fuse_dev_operations_fuse_i(0xffffffffffffffff, &(0x7f0000000440)="110000000500000000", 0x9) ioctl$auto_TCFLSH2(0xffffffffffffffff, 0x540b, 0xfffffffffffffffd) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bus/usb/036/001\x00', 0xa901, 0x0) ioctl$auto_USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000000)=0xa) socket(0xf, 0x3, 0x2) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x2000000001, 0x0) mmap$auto(0x0, 0xe982, 0x4, 0x16, 0x401, 0x8000) mmap$auto(0x0, 0x80, 0x6, 0xeb1, 0x401, 0x7ffc) r2 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r2, 0x2, 0x0) mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x5, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) r4 = ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) pipe$auto(0x0) r5 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC0\x00', 0x420000, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(r5, 0xc4c85512, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto(r4, 0x4010ae68, r6) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x8, 0xd, 0x1, 0x948b, 0x3, 0x3, 0x9, 0xfff, 0x3, 0x4, 0x2, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) close_range$auto(0x2, 0x8, 0x0) keyctl$auto(0x8, 0xfffffffffffffffd, 0xffffffffffffffff, 0x5092, 0x4ec) mmap$auto(0x2, 0x4, 0xdb, 0x12, 0x2, 0xc) socket(0x2, 0x1, 0x106) recvmmsg$auto(0x3, 0x0, 0x10000, 0x2000, 0x0) socket(0x1a, 0x6, 0x4) unshare$auto(0x40000080) mmap$auto(0x100000000, 0x4, 0x10001, 0xc0eb1, r2, 0x80008005) openat$auto_drm_connector_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/dri/vkms/Virtual-1/force\x00', 0x400000, 0x0) 7.652344508s ago: executing program 1 (id=889): keyctl$auto_KEY_REQKEY_DEFL_NO_CHANGE(0x10001, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001a40), r1) read$auto(r0, 0x0, 0x20) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0xa2902, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x2) open_by_handle_at$auto(0x1, &(0x7f0000000040)={0x3, 0x2, "4c6c8e"}, 0x2) ioctl$auto_VHOST_SET_VRING_ERR2(0xffffffffffffffff, 0x4008af22, &(0x7f00000001c0)={0x3}) unshare$auto(0x40000080) 6.456609726s ago: executing program 2 (id=891): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0) ioctl$auto(r0, 0x5646, r0) r1 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(r1, 0xffffffffffffffff, 0x0) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video0\x00', 0xa200, 0x0) ioctl$auto(r2, 0xc0585611, r2) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x640, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/fail-nth\x00', 0x2, 0x0) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x7, 0xfffffffffffffffd, 0xd4, 0x4, 0x28c, 0x0, 0x3, 0x368e, 0x9, {0xfffffffe, 0x10000}, 0x8, 0x6, 0xfffffffffff7fffd, 0x1007ffd, 0x0, 0xfe, 0x81, 0xffffffffffff628e, 0x3d, 0xdeb1, 0x803}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/020/001\x00', 0x40, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x2) landlock_create_ruleset$auto(0x0, 0x9, 0x800000) landlock_restrict_self$auto(r3, 0x0) mkdir$auto(0x0, 0x1) mkdir$auto(&(0x7f00000000c0)='./file1\x00', 0x8) rename$auto(0x0, &(0x7f00000004c0)='./file1\x00') r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D3\x00', 0x1, 0x0) write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) openat$auto_proc_pid_attr_operations_base(0xffffffffffffff9c, 0x0, 0x100, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/mpls/platform_labels\x00', 0x202, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x3}, 0x20000007}, 0x3, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r5 = socket(0x2, 0x2, 0x1) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_4={0x1f, r5, 0x10000}, 0x10) 6.022192325s ago: executing program 2 (id=892): setsockopt$auto(0x3, 0x10000000084, 0x0, 0x0, 0x8) 5.846626804s ago: executing program 2 (id=893): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000001400)={0x0, 0x157a, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000fcdbdf25040000000400100008000c"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) close_range$auto(0x0, 0xfffffffffffff000, 0x0) 5.65140876s ago: executing program 1 (id=894): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/netdevsim3/sriov_numvfs\x00', 0x10b142, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x102, 0x0) sendfile$auto(r1, r0, 0x0, 0x7) 5.579856264s ago: executing program 0 (id=895): openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/timer_list\x00', 0x1c9802, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x15, 0xffffffffffffffff, 0x7fff) openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sysfs$auto(0x2, 0x10000000000045, 0x0) fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) prctl$auto(0x41, 0x3, 0x0, 0x0, 0x0) prctl$auto(0x41, 0x3, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x801, 0x0) socket(0xf, 0x3, 0x2) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) open(&(0x7f0000000100)='./bus\x00', 0x14d27e, 0x72) socket(0x2, 0x1, 0x0) select$auto(0x6, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x3, 0xfff, 0x1, 0x948b, 0x3, 0x95f4da2d, 0xc, 0x6, 0x62, 0x7, 0x7, 0x6d3f, 0xa, 0x4, 0x5]}, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r1 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000140), 0x60a41, 0x0) ioctl$auto_RTC_WKALM_RD(r1, 0x80287010, &(0x7f0000000180)={0x1, 0xee, {0x9c, 0x1000, 0x7ff, 0x7, 0x7, 0x81, 0xfffffffa, 0x1, 0x2}}) mprotect$auto(0x110c238000, 0x1, 0x3) select$auto(0xe, 0x0, 0x0, &(0x7f0000000100)={[0x1ff, 0x6, 0x1, 0xfffffffffffffff7, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000021, 0x7, 0x6d3e, 0x7fff, 0x2, 0x6]}, 0x0) socket(0x1d, 0x2, 0x3) ioctl$auto_PROCMAP_QUERY(0xffffffffffffffff, 0xc0686611, &(0x7f0000000340)={0x8000000000000001, 0xfffffffffffffffe, 0xfffffffffffffffb, 0xfffffffffffffff8, 0x8, 0xe, 0x3, 0x9, 0x0, 0x200, 0xe223, 0x80000000, 0x2000009, 0x7, 0xfffffffffffffff7}) madvise$auto(0x110c230000, 0x8031cc, 0x9) close_range$auto(0x2, 0x8, 0x0) 4.895787241s ago: executing program 2 (id=896): r0 = socket(0x10, 0x2, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) r2 = openat$auto_ftrace_set_event_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000002640)='/sys/kernel/debug/tracing/set_event_pid\x00', 0x0, 0x0) r3 = open$auto(&(0x7f0000000000)='./file0\x00', 0x400, 0x2) writev$auto(r0, &(0x7f0000000100)={&(0x7f0000000080)="07535c7f567753597e30", 0x4}, 0x1) close_range$auto(r3, r1, 0x9) mmap$auto(0x0, 0x2020009, 0x9, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) r4 = set_tid_address$auto(&(0x7f0000000140)=0x6) prctl$auto(0x9, 0xffffffffffffffff, r4, 0x3, 0x7) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigtimedwait$auto(&(0x7f0000000040)={0xfffffffffffffbff}, 0x0, 0x0, 0x8) syz_genetlink_get_family_id$auto_ovs_flow(0x0, 0xffffffffffffffff) read$auto(0xffffffffffffffff, 0x0, 0x35cb) write$auto(0x3, 0x0, 0xfdef) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xc18, 0x8000) socket(0x29, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) epoll_create1$auto(0x3fc) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) futex_wait$auto(0x0, 0x6, 0x2, 0x6, 0x0, 0xc3a) epoll_wait$auto(0x5, 0x0, 0x2, 0x100000000) r5 = socket(0x2, 0x1, 0x0) getsockopt$auto(r5, 0x0, 0x42, 0x0, &(0x7f00000000c0)=0x1e) read$auto(r2, 0x0, 0x7) 4.895602558s ago: executing program 1 (id=897): openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer2\x00', 0x402, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000001f00), 0xffffffffffffffff) sendmsg$auto_SMC_PNETID_ADD(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x2c, r1, 0x1, 0x70bd2c, 0x25dfdc01, {}, [@SMC_PNETID_ETHNAME={0xc, 0x2, '+o*#\x90\x80\x8b\x00'}, @SMC_PNETID_NAME={0xb, 0x1, 'netdev\x9e'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x40d0) 4.506584453s ago: executing program 1 (id=898): r0 = socket(0xa, 0x801, 0x84) r1 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), r0) sendmsg$auto_TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000680)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000080)=ANY=[@ANYBLOB="b8050100", @ANYRES16=r1, @ANYBLOB="00032dbd7000fbdbdf25100000003c0006802f0000800400098000f404001080d0fb770e4212296f7b819f40716db3b724f377d975b027b1ec61f0c7d2911ba838000800dd00", @ANYRES32, @ANYBLOB="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"], 0x5b8}, 0x1, 0x0, 0x0, 0x40000}, 0x41081) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r2 = openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/dynamic_events\x00', 0x542, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = socket(0x28, 0x801, 0x106) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x8000003, 0x7) statx$auto(0x2, 0x0, 0x1000, 0xbdfa, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) rseq$auto(&(0x7f00000006c0)={0x5, 0x401, 0x1, 0x6, 0xffffbfff, 0xfffffffb, "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"}, 0x8000, 0x0, 0x6) r4 = clone$auto(0x20003b46, 0x3, 0x0, 0x0, 0x2) setsockopt$auto(r3, 0x6, 0x1e, 0x0, 0xa1) write$auto_dynamic_events_ops_trace_dynevent(r2, &(0x7f0000000140)="653a6575b42146076c4f11b1be3e769f2059", 0x12) r5 = pipe$auto(0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r5, 0x3, 0x0) setpriority$auto_PRIO_PGRP(0x1, r4, 0x6) getsockopt$auto_SO_TIMESTAMP_OLD(r5, 0xfffffffe, 0x1d, &(0x7f0000000000)='/dev/sg0\x00', &(0x7f0000000080)=0x6) r6 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000840)='/dev/sda1\x00', 0x80040, 0x0) fadvise64$auto(r6, 0x8, 0x400000000000006, 0x4) mmap$auto(0x0, 0x5810, 0xffb, 0x12, r5, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/ipv6_route\x00', 0x101000, 0x0) pread64$auto(r0, 0x0, 0xf6f, 0xffff) mincore$auto(0x1, 0xc28, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(r7, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x4040000) 4.242946574s ago: executing program 0 (id=899): r0 = openat$auto_tracing_iter_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/tracing/trace_options\x00', 0x40000, 0x0) listen$auto(r0, 0x611e) poll$auto(0x0, 0x6, 0x8) ioctl$auto_PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000100)={0x60, 0x2, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x0, 0xe8, 0x0, 0x2, 0x0, 0x2}) r1 = socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x3, 0xdf, 0x9b72, r0, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0x2, 0x5, 0x0) shutdown$auto(0x200000003, 0x2) r2 = getpid() process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0x6}, 0x4, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x61, 0x0) setsockopt$auto(r1, 0x10000000084, 0x9, 0x0, 0x9c) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) socketpair$auto(0x20, 0x5, 0x4000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = open(0x0, 0x7ffd, 0x12) pwrite64$auto(0xffffffffffffffff, 0x0, 0x6, 0x8) mmap$auto(0x0, 0x1ff, 0xe5, 0x200000810, r3, 0x8000) bpf$auto_BPF_MAP_CREATE(0x0, &(0x7f0000000100)=@link_create={@map_fd=r3, @target_ifindex, 0x1, 0x7, @tracing={0xfffffffd, 0xff}}, 0x4) madvise$auto(0x0, 0x200007, 0x19) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x9, 0x3) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) read$auto(0x3, 0x0, 0x80) madvise$auto(0x0, 0xffffffffffff0001, 0x15) io_uring_setup$auto(0x406, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) 3.221136736s ago: executing program 2 (id=900): set_mempolicy$auto(0x6, &(0x7f0000000000)=0x7e, 0x4) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) ioctl$auto_IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) shmctl$auto(0x0, 0xd, 0x0) getrandom$auto(0x0, 0xe06, 0x3) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0xa901, 0x0) mmap$auto(0x1, 0x202000b, 0x3, 0xeb1, r0, 0x8000) sendfile$auto(0x1, 0x3, 0x0, 0xc01) setreuid$auto(0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000480)=""/4096, 0x1000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r1 = socket(0x15, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) sendmsg$auto(r1, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) set_mempolicy$auto(0x9, &(0x7f0000000080)=0x3, 0x80) readahead$auto(0xffffffffffffffff, 0x6, 0x2) r2 = socket(0x23, 0x5, 0x0) listen$auto(r2, 0x5ed) unshare$auto(0x40000080) r3 = open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x42842, 0x95) read$auto(r3, 0x0, 0x1) write$auto(0xffffffffffffffff, 0x0, 0x2) r4 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) 2.943389181s ago: executing program 1 (id=901): setsockopt$auto(0x3, 0x10000000084, 0x0, 0x0, 0x8) 2.3665169s ago: executing program 1 (id=902): mmap$auto(0xfffffffffffffff9, 0x400008, 0xdf, 0x4a56, 0x2, 0x8000) r0 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000500), 0x400000, 0x0) ioctl$auto_PPPIOCSCOMPRESS(r1, 0x4010744d, &(0x7f0000000580)={&(0x7f0000000540)='\x1d\x04/\x00', 0x1ff, 0x6}) pwrite64$auto(0xc8, &(0x7f0000000340)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdds\x1cJ\x99\x00:<\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\xadCl\x9e\xeb\xcd\vp\x99\x00\xc8\x06\xa5\xdc3\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0A\x94\xa3\xaef\x87\xd8\x95I\xfd\xa8\t\xac\x87\xb7\x1d\xd5\x83\xdcyu]\xde\xbe\xbf$<.}\x8b`\x04\xfc\xa2\xab\xb5]\x80\x00\xb9D\xc5\xbc\xf2a\xd66\xa5\xd3\xc1r\x96\x1e\x8db\x05=`\x01\x11\x04Tz\x87A$\x115\x95PUf\xa7\xfe\x19\x00\x82go}@W\xd5\xaej\x01\xbf>5n\x17S\xc0\x8a\xaf%O\xd1W\xa3ua+sUJ\xea\xf9\xb7p-\x128\x9d\xbaM_\xff\x1c\xc3sG\x04\xf2\xd3\xf3{;\xd4\xd7\x1c\x1dZ\xe9\xe9\xc9\x9cu5\xe9\xa2\xb3N\xd2\xc1\xc8\xa5\xadt\xd5BKD\x86\xeb%\a*\x06\xbb\x1e\xfb\x11U\f&\xcbP\xf1\xcf\xccb\xe8Wb\xc5ae\xe3\xf9l\xa9vK\xed\x8cL\xfb%g\x83;\xe1\xe2w\xd6\xaa6\x16\x8fx\x1a\xd7\xc8\xf4[\xbc\b\xe1Z\x92\x14Q\xdef\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) r7 = socket(0xa, 0x2, 0x0) setsockopt$auto(r7, 0x29, 0x12, 0x0, 0x1) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f00000001c0), r3) set_tid_address$auto(0x0) unshare$auto(0x40000080) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x50b41, 0x0) 2.191158382s ago: executing program 3 (id=903): keyctl$auto_KEY_REQKEY_DEFL_NO_CHANGE(0x10001, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001a40), r1) read$auto(r0, 0x0, 0x20) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0xa2902, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x2) open_by_handle_at$auto(0x1, &(0x7f0000000040)={0x3, 0x2, "4c6c8e"}, 0x2) ioctl$auto_VHOST_SET_VRING_ERR2(0xffffffffffffffff, 0x4008af22, &(0x7f00000001c0)={0x3}) unshare$auto(0x40000080) 2.061470261s ago: executing program 2 (id=904): r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x20000, 0x0) mmap$auto(0x0, 0x400008, 0x200, 0x9b72, 0x2, 0x8000) sendmsg$auto_TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f000000e440)=ANY=[@ANYBLOB='l\"\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000000500000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0800e0000800000008006200", @ANYRES32=0x0, @ANYBLOB="b3e67044bcf124f4ae5a8c142f1c08cfef935f31d64642812b325f8ba228d1885adaebfcbdeacd9cc9d8850e8a0d2c35ea58bb923e317dc8a8b78d582ef877d9619377e0f3874f6e30d73c34cae5707277d95b7bc958720e7bc81aa45cd500bb54e63f58c202e0061eb947261c28edfbd4c8afc79a125f4fba082cff47c347a4aaaee6bd0596117fdd3af953214fb6601b225dd8164a6b7f65cc7b81b6b06c32962267ac8872fa95fd84035286dba99db2a1caa9fe2d3e39c7c6f9cf7bb4db41191cb29f1b3c83eb908883626a9b6aa830c2dff419e149fe8bae80c926ed21a951531996b88a714c12d350006d0054be64ec9d48d9467d96afddc688e231c40d5b2ef7361a745029bd418ff7b81c028c5ffb8234b39c972e2be416b8105f28541fe299e9efcadfe6ac9f9a6d93980fa556cebd4d64bb423da2821600df002f6465762f736e642f6d696469433244300000008b020780040005800400d8800939cbd46de9cbefcd6ec57276f6698682a7e2c98ef3f419daa529de65a29e0a254028686e33237b292724dc292d094dfe17500ee2a166de5899e820af64920f843b2ddef99f9607ea5b13df0a6772cee1e34a0e474e2e74ece94f7e888d21e58cca3a6d6a99a153af848cd8b5d78e4e37bac65e140fcb5ea6d8c092132ef0a41745488558a4b39db294fa306e3eeb14abf699ea41ad50f33181965f66ae2af82517cd57ff0c8742559440238a8ce1a4b8e2b5af649ac21b1b33439538d62755f41191aeb62160334dbdf8ed7b81a0a8255168b997c20c22c32c54aeafe1214640781b4d9ac2726e607eac080033", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0400558004001680d126208daca71b0f3108d0e68081c9e015a55f8e8ef40efa3fb842b9d1f72a8ffcc9b8b94b1b4706d039f84bc23eebaf13099930336cbe34c45fe840ea4b28cbe31dafbfd42a923270c38f07478f93e39607039e11d4dfd0fdf670df676c0008001b00", @ANYRES32, @ANYBLOB="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"], 0x226c}, 0x1, 0x0, 0x0, 0xc4}, 0x1880) r2 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0) write$auto_proc_mem_operations_base(r2, &(0x7f0000001680)="a7", 0x80000) madvise$auto(0x0, 0x20200, 0x15) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) read$auto(r1, 0x0, 0x20) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000003140), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_PHY_GET(r3, &(0x7f0000003200)={0x0, 0x0, &(0x7f00000031c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010326bd7000ffdbdf252d000000180001801400020069705f7674693000000000000000000067da4dd3be7ad28c29fa2ab2418ce5327907e5eebb20e827a605661cce46c87e2eac85dbfe0982ed7f4995d7e936eb2a824d179178bf917a85c2d5c4e63871e1c47afb86a96b67b542ad35912aad859fc861b993d78d45a6218090be3606117d98ef14dd2734be247c0224ff00c1dc933093253d1d6382ebfb4f9b297701d80d0bf68bea75116446a0ea3ed36dae9373cfd73a74863e785b7ae55c"], 0x2c}, 0x1, 0x1000000, 0x0, 0x2404c012}, 0x80) writev$auto(r0, &(0x7f0000000200)={0x0, 0x3}, 0x3) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nbd0\x00', 0xc0c00, 0x0) 255.952102ms ago: executing program 0 (id=905): setsockopt$auto(0xffffffffffffffff, 0x9, 0x69ce, &(0x7f0000000040)='(%}[\x00', 0x3) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0xffffffffffffffff, r0, 0xffffffff) mmap$auto(0x2, 0x1, 0x1, 0x9b31, r0, 0xb) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/virtual/block/loop5/queue/scheduler\x00', 0xa0b02, 0x0) r1 = getsockopt$auto(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000240)='+{]-:\xcf.*{\x00', &(0x7f0000000300)=0x8) r2 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/security/tomoyo/profile\x00', 0x48802, 0x0) read$auto(r2, 0x0, 0xb4d3) write$auto(0x3, 0x0, 0x8) write$auto(0x3, 0x0, 0xfdef) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) mmap$auto(0x0, 0x6, 0x0, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x4, 0x9) get_mempolicy$auto(0x0, 0x0, 0x703, 0x71f6, 0x3) mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfffff000) adjtimex$auto(0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x10002, 0x0) r3 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0) write$auto_snd_seq_f_ops_seq_clientmgr(r3, &(0x7f00000000c0)="632d1bfe595046ab5c40bd6163307acb6d16baef6176e669a216aae1834ccafdd80500ffffffffdfff1a0e00"/56, 0x38) io_uring_setup$auto(0x4, &(0x7f0000000080)={0x7fffffff, 0xd, 0x4002, 0x6, 0x7, 0x80000000, r1, [], {0xa, 0x6, 0xf, 0x29f, 0x100, 0x7f, 0x101, 0x206, 0x2000}, {0x100, 0x1, 0x52, 0x5, 0x4, 0x3d, 0x76c5, 0x6, 0xfffff000}}) clock_adjtime$auto(0x4, &(0x7f0000000100)={0x101, 0x0, 0x1, 0x2, 0x575c, 0x6, 0x2, 0x0, 0x0, 0x3, 0x1, {0xfffffffffffffff8, 0x5}, 0x5, 0x7, 0x2, 0xfffffffc, 0x0, 0x5, 0x9, 0x8, 0x2, 0x3, 0x6782}) close_range$auto(0x2, 0x8, 0x0) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000080)='/proc/kpageflags\x00', 0x2, 0x0) r4 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0) ioctl$auto(r4, 0x80, 0xd3) mq_open$auto(&(0x7f0000000280)='\\*)A\x00', 0x7e, 0x9, 0x0) lseek$auto(0x3, 0x2, 0x4) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyya\x00', 0x62800, 0x0) 0s ago: executing program 3 (id=906): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r0 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/io\x00', 0x400, 0x0) read$auto_proc_single_file_operations_base(r0, &(0x7f00000000c0)=""/117, 0x75) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, 0x0) setrlimit$auto(0x1000000007, 0x0) ioctl$auto(0x3, 0xc0303e03, 0xffffffffffffffff) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC2\x00', 0x10001, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f00000001c0)=0x6) unshare$auto(0x40000080) unshare$auto(0x9) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) socket(0x1e, 0xa, 0x401) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket(0x11, 0x3, 0x9) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x5, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0xffffffff, 0xeb1, 0xfffffffffffffffa, 0x8000) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) getdents$auto(r4, 0x0, 0xfff) kernel console output (not intermixed with test programs): 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 129.329330][ T6157] RSP: 002b:00007fb30a765030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 129.329356][ T6157] RAX: ffffffffffffffda RBX: 00007fb309bb5fa0 RCX: 00007fb30998d37c [ 129.329374][ T6157] RDX: 000000000000000f RSI: 00007fb30a7650a0 RDI: 0000000000000004 [ 129.329392][ T6157] RBP: 00007fb30a765090 R08: 0000000000000000 R09: 0000000000000000 [ 129.329410][ T6157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 129.329425][ T6157] R13: 0000000000000000 R14: 00007fb309bb5fa0 R15: 00007ffe4da300e8 [ 129.329463][ T6157] [ 131.061997][ T6183] netlink: 'syz.3.51': attribute type 11 has an invalid length. [ 131.086270][ T6183] netlink: 'syz.3.51': attribute type 11 has an invalid length. [ 131.131067][ T6183] netlink: 440 bytes leftover after parsing attributes in process `syz.3.51'. [ 131.751304][ T6187] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888078000000 pfn:0x78000 [ 131.762029][ T6187] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 131.770809][ T6187] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 131.781557][ T6187] page_type: f5(slab) [ 131.786549][ T6187] raw: 00fff00000000240 ffff88801ca94780 ffffea000176c490 ffffea0001e0b910 [ 131.795432][ T6187] raw: ffff888078000000 0000000000150014 00000000f5000000 0000000000000000 [ 131.842938][ T6187] head: 00fff00000000240 ffff88801ca94780 ffffea000176c490 ffffea0001e0b910 [ 131.939309][ T6187] head: ffff888078000000 0000000000150014 00000000f5000000 0000000000000000 [ 132.014239][ T6187] head: 00fff00000000001 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 132.164760][ T6187] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 132.213537][ T6187] page dumped because: unmovable page [ 132.238096][ T6187] page_owner tracks the page as allocated [ 132.254126][ T6187] page last allocated via order 1, migratetype Reclaimable, gfp_mask 0xd20d0(__GFP_RECLAIMABLE|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5210, tgid 5210 (udevd), ts 63943765323, free_ts 36562516494 [ 132.303233][ T6198] could not allocate digest TFM handle binfmt_misc [ 132.310252][ T6187] post_alloc_hook+0x1c0/0x230 [ 132.345418][ T6187] get_page_from_freelist+0x135c/0x3950 [ 132.353988][ T6187] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 132.367523][ T6187] alloc_pages_mpol+0x1fb/0x550 [ 132.373122][ T6187] new_slab+0x23b/0x330 [ 132.404413][ T6187] ___slab_alloc+0xd9c/0x1940 [ 132.409275][ T6187] __slab_alloc.constprop.0+0x56/0xb0 [ 132.415690][ T6187] kmem_cache_alloc_lru_noprof+0xf4/0x3b0 [ 132.421529][ T6187] __d_alloc+0x31/0xaa0 [ 132.427440][ T6187] d_alloc+0x4a/0x1e0 [ 132.431996][ T6187] d_alloc_parallel+0xe3/0x12e0 [ 132.438067][ T6187] __lookup_slow+0x193/0x460 [ 132.442756][ T6187] walk_component+0x353/0x5b0 [ 132.447970][ T6187] path_lookupat+0x142/0x6d0 [ 132.452812][ T6187] filename_lookup+0x224/0x5f0 [ 132.457765][ T6187] vfs_statx+0x101/0x3e0 [ 132.462088][ T6187] page last free pid 1 tgid 1 stack trace: [ 132.468036][ T6187] __free_frozen_pages+0x7fe/0x1180 [ 132.473314][ T6187] free_contig_range+0x183/0x4b0 [ 132.478428][ T6187] destroy_args+0x7f6/0xa60 [ 132.483022][ T6187] debug_vm_pgtable+0x13c4/0x2d90 [ 132.488184][ T6187] do_one_initcall+0x120/0x6e0 [ 132.494374][ T6187] kernel_init_freeable+0x5c2/0x900 [ 132.500186][ T6187] kernel_init+0x1c/0x2b0 [ 132.504659][ T6187] ret_from_fork+0x5d4/0x6f0 [ 132.509401][ T6187] ret_from_fork_asm+0x1a/0x30 [ 134.346038][ T6237] netlink: 28 bytes leftover after parsing attributes in process `syz.2.60'. [ 135.419091][ T6255] Setting dangerous option i915.mitigations - tainting kernel [ 135.897316][ T6250] FAULT_INJECTION: forcing a failure. [ 135.897316][ T6250] name failslab, interval 1, probability 0, space 0, times 0 [ 136.019473][ T6250] CPU: 0 UID: 0 PID: 6250 Comm: syz.3.64 Tainted: G U 6.15.0-syzkaller-10402-g4cb6c8af8591 #0 PREEMPT(full) [ 136.019535][ T6250] Tainted: [U]=USER [ 136.019547][ T6250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 136.019567][ T6250] Call Trace: [ 136.019577][ T6250] [ 136.019590][ T6250] dump_stack_lvl+0x16c/0x1f0 [ 136.019635][ T6250] should_fail_ex+0x512/0x640 [ 136.019684][ T6250] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 136.019729][ T6250] should_failslab+0xc2/0x120 [ 136.019774][ T6250] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 136.019814][ T6250] ? find_held_lock+0x2b/0x80 [ 136.019857][ T6250] ? alloc_vfsmnt+0x23/0x730 [ 136.019911][ T6250] alloc_vfsmnt+0x23/0x730 [ 136.019958][ T6250] clone_mnt+0x6d/0xff0 [ 136.020007][ T6250] ? copy_tree+0x50d/0xa20 [ 136.020041][ T6250] ? copy_mnt_ns+0x1ac/0xac0 [ 136.020087][ T6250] copy_tree+0x38d/0xa20 [ 136.020137][ T6250] copy_mnt_ns+0x1ac/0xac0 [ 136.020175][ T6250] ? trace_kmem_cache_alloc+0x28/0xc0 [ 136.020226][ T6250] ? trace_cap_capable+0x18d/0x200 [ 136.020278][ T6250] ? create_new_namespaces+0x30/0xa90 [ 136.020336][ T6250] create_new_namespaces+0xd3/0xa90 [ 136.020385][ T6250] ? bpf_lsm_capable+0x9/0x10 [ 136.020417][ T6250] ? security_capable+0x7e/0x260 [ 136.020477][ T6250] copy_namespaces+0x468/0x560 [ 136.020535][ T6250] copy_process+0x2a55/0x9170 [ 136.020598][ T6250] ? __pfx_copy_process+0x10/0x10 [ 136.020629][ T6250] ? __pfx___futex_wait+0x10/0x10 [ 136.020666][ T6250] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 136.020744][ T6250] kernel_clone+0xfc/0x960 [ 136.020780][ T6250] ? __pfx_kernel_clone+0x10/0x10 [ 136.020838][ T6250] __do_sys_clone+0xce/0x120 [ 136.020870][ T6250] ? __pfx___do_sys_clone+0x10/0x10 [ 136.020924][ T6250] ? xfd_validate_state+0x61/0x180 [ 136.020957][ T6250] ? __pfx_do_writev+0x10/0x10 [ 136.021003][ T6250] do_syscall_64+0xcd/0x490 [ 136.021048][ T6250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.021082][ T6250] RIP: 0033:0x7f8d8178e969 [ 136.021108][ T6250] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 136.021141][ T6250] RSP: 002b:00007f8d8267afe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 136.021172][ T6250] RAX: ffffffffffffffda RBX: 00007f8d819b5fa0 RCX: 00007f8d8178e969 [ 136.021194][ T6250] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000002360411 [ 136.021214][ T6250] RBP: 00007f8d81810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 136.021235][ T6250] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 136.021255][ T6250] R13: 0000000000000000 R14: 00007f8d819b5fa0 R15: 00007ffd363361e8 [ 136.021306][ T6250] [ 138.297019][ T6277] ubi: mtd0 is already attached to ubi0 [ 139.391674][ T6285] : Can't lookup blockdev [ 140.402332][ T6302] vivid-003: ================= START STATUS ================= [ 140.423132][ T6302] vivid-003: Radio HW Seek Mode: Bounded [ 140.446385][ T6302] vivid-003: Radio Programmable HW Seek: false [ 140.469559][ T6302] vivid-003: RDS Rx I/O Mode: Block I/O [ 140.523047][ T6302] vivid-003: Generate RBDS Instead of RDS: false [ 140.550261][ T6302] vivid-003: RDS Reception: true [ 140.556952][ T6302] vivid-003: RDS Program Type: 0 inactive [ 140.562968][ T6302] vivid-003: RDS PS Name: inactive [ 140.590393][ T6302] vivid-003: RDS Radio Text: inactive [ 140.621900][ T6302] vivid-003: RDS Traffic Announcement: false inactive [ 140.640514][ T6302] vivid-003: RDS Traffic Program: false inactive [ 140.688089][ T6302] vivid-003: RDS Music: false inactive [ 140.714200][ T6302] vivid-003: ================== END STATUS ================== [ 140.825728][ T6314] program syz.2.71 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 140.854447][ T6314] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 143.305125][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 143.311744][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 144.844620][ T6362] netlink: 86 bytes leftover after parsing attributes in process `syz.0.83'. [ 144.918031][ T6355] ubi: mtd0 is already attached to ubi0 [ 151.394425][ T6412] snd_aloop snd_aloop.0: control 1:6:-2147483647:¢¸è_ÅheºRŸª:6 is already present [ 151.635298][ T6418] random: crng reseeded on system resumption [ 153.594352][ T6443] FAULT_INJECTION: forcing a failure. [ 153.594352][ T6443] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 153.612902][ T6443] CPU: 1 UID: 0 PID: 6443 Comm: syz.1.110 Tainted: G U 6.15.0-syzkaller-10402-g4cb6c8af8591 #0 PREEMPT(full) [ 153.612952][ T6443] Tainted: [U]=USER [ 153.612962][ T6443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 153.612980][ T6443] Call Trace: [ 153.612989][ T6443] [ 153.613001][ T6443] dump_stack_lvl+0x16c/0x1f0 [ 153.613043][ T6443] should_fail_ex+0x512/0x640 [ 153.613487][ T6443] _copy_from_user+0x2e/0xd0 [ 153.613540][ T6443] do_pages_stat+0x239/0x820 [ 153.613600][ T6443] ? __pfx_do_pages_stat+0x10/0x10 [ 153.613657][ T6443] ? __lock_acquire+0xb8a/0x1c90 [ 153.613728][ T6443] ? do_raw_spin_unlock+0x172/0x230 [ 153.613775][ T6443] kernel_move_pages+0xfd4/0x13b0 [ 153.613843][ T6443] ? __pfx_kernel_move_pages+0x10/0x10 [ 153.613890][ T6443] ? __fget_files+0x20e/0x3c0 [ 153.613929][ T6443] ? fput+0x70/0xf0 [ 153.613969][ T6443] ? ksys_write+0x1ac/0x250 [ 153.614001][ T6443] ? __pfx_ksys_write+0x10/0x10 [ 153.614039][ T6443] __x64_sys_move_pages+0xe0/0x1c0 [ 153.614085][ T6443] ? do_syscall_64+0x91/0x490 [ 153.614121][ T6443] ? lockdep_hardirqs_on+0x7c/0x110 [ 153.614154][ T6443] do_syscall_64+0xcd/0x490 [ 153.614192][ T6443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.614221][ T6443] RIP: 0033:0x7fb30998e969 [ 153.614245][ T6443] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 153.614274][ T6443] RSP: 002b:00007fb30a765038 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 153.614302][ T6443] RAX: ffffffffffffffda RBX: 00007fb309bb5fa0 RCX: 00007fb30998e969 [ 153.614321][ T6443] RDX: 0000000000000000 RSI: 0000000000000f54 RDI: 0000000000000001 [ 153.614338][ T6443] RBP: 00007fb30a765090 R08: 0000000000000000 R09: 8000000000000000 [ 153.614356][ T6443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 153.614374][ T6443] R13: 0000000000000000 R14: 00007fb309bb5fa0 R15: 00007ffe4da300e8 [ 153.614411][ T6443] [ 156.348259][ T6484] HfR: entered promiscuous mode [ 156.514783][ T6493] netlink: 20 bytes leftover after parsing attributes in process `syz.2.114'. [ 156.523729][ T6493] team_slave_0: entered allmulticast mode [ 157.059236][ T6505] device-mapper: ioctl: ioctl interface mismatch: kernel(4.49.0), user(0.0.0), cmd(5) [ 157.342283][ T6517] sctp: Changing rto_alpha or rto_beta may lead to suboptimal rtt/srtt estimations! [ 157.402345][ T6497] netlink: 326 bytes leftover after parsing attributes in process `syz.0.115'. [ 158.245065][ T6524] mkiss: ax0: crc mode is auto. [ 158.616304][ T6536] Setting dangerous option i915.mitigations - tainting kernel [ 159.068343][ T6541] netlink: 342 bytes leftover after parsing attributes in process `syz.2.125'. [ 159.209383][ T6542] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 159.635489][ T6554] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 160.835697][ T6565] can: request_module (can-proto-3) failed. [ 160.975602][ T6573] netlink: 28 bytes leftover after parsing attributes in process `syz.3.131'. [ 161.014444][ T6573] ipvlan1: entered allmulticast mode [ 161.019850][ T6573] veth0_vlan: entered allmulticast mode [ 161.131351][ T6573] netlink: 20 bytes leftover after parsing attributes in process `syz.3.131'. [ 161.589535][ T6582] : Can't lookup blockdev [ 163.396044][ T6605] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 163.772763][ T6615] netlink: 28 bytes leftover after parsing attributes in process `syz.0.142'. [ 164.522446][ T6631] QAT: failed to copy from user. [ 165.680298][ T6651] Setting dangerous option i915.mitigations - tainting kernel [ 167.047926][ T6679] netlink: 48 bytes leftover after parsing attributes in process `syz.1.157'. [ 168.528141][ T6697] ubi: mtd0 is already attached to ubi0 [ 170.220223][ T6720] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input5 [ 170.961871][ T6722] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input6 [ 171.906278][ T6740] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 173.978229][ T6766] FAULT_INJECTION: forcing a failure. [ 173.978229][ T6766] name failslab, interval 1, probability 0, space 0, times 0 [ 174.015464][ T6766] CPU: 0 UID: 0 PID: 6766 Comm: syz.3.177 Tainted: G U 6.15.0-syzkaller-10402-g4cb6c8af8591 #0 PREEMPT(full) [ 174.015514][ T6766] Tainted: [U]=USER [ 174.015524][ T6766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 174.015541][ T6766] Call Trace: [ 174.015550][ T6766] [ 174.015562][ T6766] dump_stack_lvl+0x16c/0x1f0 [ 174.015603][ T6766] should_fail_ex+0x512/0x640 [ 174.015646][ T6766] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 174.015686][ T6766] should_failslab+0xc2/0x120 [ 174.015726][ T6766] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 174.015762][ T6766] ? d_instantiate+0x77/0x90 [ 174.015798][ T6766] ? alloc_empty_file+0x55/0x1e0 [ 174.015846][ T6766] alloc_empty_file+0x55/0x1e0 [ 174.015891][ T6766] alloc_file_pseudo+0x13a/0x230 [ 174.015936][ T6766] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 174.015981][ T6766] ? __pfx_unix_socketpair+0x10/0x10 [ 174.016021][ T6766] sock_alloc_file+0x50/0x210 [ 174.016072][ T6766] __sys_socketpair+0x31c/0x5a0 [ 174.016103][ T6766] ? __pfx___sys_socketpair+0x10/0x10 [ 174.016136][ T6766] ? xfd_validate_state+0x61/0x180 [ 174.016195][ T6766] __x64_sys_socketpair+0x96/0x100 [ 174.016224][ T6766] ? lockdep_hardirqs_on+0x7c/0x110 [ 174.016259][ T6766] do_syscall_64+0xcd/0x490 [ 174.016299][ T6766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.016342][ T6766] RIP: 0033:0x7f8d8178e969 [ 174.016366][ T6766] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 174.016394][ T6766] RSP: 002b:00007f8d8265a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 174.016423][ T6766] RAX: ffffffffffffffda RBX: 00007f8d819b6080 RCX: 00007f8d8178e969 [ 174.016443][ T6766] RDX: 8000000000000000 RSI: 0000000000000002 RDI: 0000000000000001 [ 174.016461][ T6766] RBP: 00007f8d81810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 174.016479][ T6766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 174.016497][ T6766] R13: 0000000000000000 R14: 00007f8d819b6080 R15: 00007ffd363361e8 [ 174.016536][ T6766] [ 174.228200][ C0] vkms_vblank_simulate: vblank timer overrun [ 174.482949][ T6775] can: request_module (can-proto-3) failed. [ 174.746621][ T30] audit: type=1800 audit(6043733809.361:2): pid=6785 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.182" name="SYSV00000352" dev="hugetlbfs" ino=0 res=0 errno=0 [ 174.766827][ C0] vkms_vblank_simulate: vblank timer overrun [ 174.836400][ T6787] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 174.874471][ T6787] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 175.005188][ T6793] netlink: 28 bytes leftover after parsing attributes in process `syz.2.183'. [ 175.014027][ T6792] netlink: 28 bytes leftover after parsing attributes in process `syz.2.183'. [ 175.030983][ T6787] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 175.125190][ T6787] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 175.132978][ T6787] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 175.161582][ T6787] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 175.227904][ T6787] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 175.240823][ T6792] bond0: (slave bond_slave_1): Releasing backup interface [ 175.256098][ T6787] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 175.269080][ T6787] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 175.280015][ T6787] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 175.316934][ T6787] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 175.331718][ T6787] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 175.954266][ T6803] Setting dangerous option i915.mitigations - tainting kernel [ 176.375005][ T6812] netlink: 8 bytes leftover after parsing attributes in process `syz.2.189'. [ 176.852172][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 177.177141][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 177.248149][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 177.323937][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 178.455799][ T6843] syz.3.194 uses obsolete (PF_INET,SOCK_PACKET) [ 178.926781][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 179.244165][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 179.324023][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 179.403954][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 179.726484][ T6865] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input7 [ 180.050957][ T6866] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input8 [ 181.004108][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 181.324074][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 181.404013][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 181.484096][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 181.598369][ T6881] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.706658][ T6884] bridge0: port 3(team0) entered blocking state [ 181.720448][ T6884] bridge0: port 3(team0) entered disabled state [ 181.752011][ T6884] team0: entered allmulticast mode [ 181.775821][ T6884] team_slave_0: entered allmulticast mode [ 181.784239][ T6884] team_slave_1: entered allmulticast mode [ 181.886002][ T6884] team0: entered promiscuous mode [ 181.892295][ T6884] team_slave_0: entered promiscuous mode [ 181.906111][ T6884] team_slave_1: entered promiscuous mode [ 181.913017][ T6884] bridge0: port 3(team0) entered blocking state [ 181.919754][ T6884] bridge0: port 3(team0) entered forwarding state [ 182.741314][ T6908] netlink: 28 bytes leftover after parsing attributes in process `syz.2.212'. [ 183.213168][ T6908] bridge_slave_1: left allmulticast mode [ 183.220730][ T6908] bridge_slave_1: left promiscuous mode [ 183.234524][ T6908] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.254066][ T6908] bridge_slave_0: left allmulticast mode [ 183.259806][ T6908] bridge_slave_0: left promiscuous mode [ 183.267810][ T6908] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.457824][ T6905] netlink: zone id is out of range [ 183.463029][ T6905] netlink: del zone limit has 4 unknown bytes [ 186.999226][ T6976] netlink: 8 bytes leftover after parsing attributes in process `syz.3.227'. [ 190.071532][ T51] Bluetooth: hci3: unexpected subevent 0x01 length: 4 < 18 [ 190.482205][ T30] audit: type=1800 audit(6043733833.011:3): pid=7033 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.241" name="dbroot" dev="configfs" ino=11129 res=0 errno=0 [ 191.872436][ T7035] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 191.879771][ T7035] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 191.893249][ T7035] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 191.901367][ T7035] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 192.284021][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 192.504033][ T7064] device-mapper: ioctl: ioctl interface mismatch: kernel(4.49.0), user(2016419872.538976288.538976288), cmd(5) [ 193.580487][ T7082] netlink: 28 bytes leftover after parsing attributes in process `syz.1.250'. [ 193.914018][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 193.967032][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 193.967744][ T5843] Bluetooth: hci1: command 0x0c1a tx timeout [ 194.110835][ T7082] team0: left allmulticast mode [ 194.164306][ T7082] team_slave_0: left allmulticast mode [ 194.170840][ T7082] team_slave_1: left allmulticast mode [ 194.176861][ T7082] team0: left promiscuous mode [ 194.181720][ T7082] team_slave_0: left promiscuous mode [ 194.188437][ T7082] team_slave_1: left promiscuous mode [ 194.194611][ T7082] bridge0: port 3(team0) entered disabled state [ 194.204152][ T7082] bridge_slave_1: left allmulticast mode [ 194.209855][ T7082] bridge_slave_1: left promiscuous mode [ 194.215764][ T7082] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.288153][ T7082] bridge_slave_0: left allmulticast mode [ 194.294619][ T7082] bridge_slave_0: left promiscuous mode [ 194.300570][ T7082] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.348661][ T5843] Bluetooth: hci1: unexpected subevent 0x01 length: 4 < 18 [ 195.574254][ T30] audit: type=1800 audit(6043733846.170:4): pid=7111 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.254" name="dbroot" dev="configfs" ino=12065 res=0 errno=0 [ 195.628836][ T7095] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 195.635696][ T7095] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 195.642040][ T7095] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 195.649999][ T7095] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 196.923968][ T5843] Bluetooth: hci0: command 0x0c1a tx timeout [ 197.660124][ T5843] Bluetooth: hci1: command 0x0c1a tx timeout [ 197.666371][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 197.724036][ T5843] Bluetooth: hci3: command 0x0c1a tx timeout [ 198.317856][ T7144] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 198.884432][ T7153] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 199.238065][ T7157] input: jJǸ-¶š9ã%vø“û¨lÐQ  J8fi‘ as /devices/virtual/input/input9 [ 200.706977][ T7169] bridge0: port 3(team0) entered blocking state [ 200.716964][ T7169] bridge0: port 3(team0) entered disabled state [ 200.723711][ T7169] team0: entered allmulticast mode [ 200.730461][ T7169] team_slave_0: entered allmulticast mode [ 200.754141][ T7169] team_slave_1: entered allmulticast mode [ 200.768457][ T7169] team0: entered promiscuous mode [ 200.774438][ T7169] team_slave_0: entered promiscuous mode [ 200.782949][ T7169] team_slave_1: entered promiscuous mode [ 200.857607][ T7169] bridge0: port 3(team0) entered blocking state [ 200.864562][ T7169] bridge0: port 3(team0) entered forwarding state [ 201.705585][ T7185] FAULT_INJECTION: forcing a failure. [ 201.705585][ T7185] name fail_futex, interval 1, probability 0, space 0, times 1 [ 201.754274][ T7185] CPU: 0 UID: 0 PID: 7185 Comm: syz.3.273 Tainted: G U 6.15.0-syzkaller-10402-g4cb6c8af8591 #0 PREEMPT(full) [ 201.754337][ T7185] Tainted: [U]=USER [ 201.754348][ T7185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 201.754368][ T7185] Call Trace: [ 201.754380][ T7185] [ 201.754392][ T7185] dump_stack_lvl+0x16c/0x1f0 [ 201.754435][ T7185] should_fail_ex+0x512/0x640 [ 201.754489][ T7185] get_futex_key+0x1d0/0x1540 [ 201.754546][ T7185] ? __pfx_get_futex_key+0x10/0x10 [ 201.754613][ T7185] futex_wake+0xea/0x530 [ 201.754650][ T7185] ? rcu_is_watching+0x12/0xc0 [ 201.754697][ T7185] ? __pfx_futex_wake+0x10/0x10 [ 201.754739][ T7185] ? kmem_cache_free+0x2d1/0x4d0 [ 201.754775][ T7185] ? fd_install+0x225/0x750 [ 201.754804][ T7185] ? putname+0x154/0x1a0 [ 201.754854][ T7185] do_futex+0x1e3/0x350 [ 201.754884][ T7185] ? __pfx_do_futex+0x10/0x10 [ 201.754949][ T7185] __x64_sys_futex+0x1e0/0x4c0 [ 201.754983][ T7185] ? __x64_sys_openat+0x174/0x210 [ 201.755032][ T7185] ? __pfx___x64_sys_futex+0x10/0x10 [ 201.755092][ T7185] do_syscall_64+0xcd/0x490 [ 201.755134][ T7185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.755167][ T7185] RIP: 0033:0x7f8d8178e969 [ 201.755202][ T7185] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 201.755231][ T7185] RSP: 002b:00007f8d8267b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 201.755260][ T7185] RAX: ffffffffffffffda RBX: 00007f8d819b5fa8 RCX: 00007f8d8178e969 [ 201.755281][ T7185] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f8d819b5fac [ 201.755299][ T7185] RBP: 00007f8d819b5fa0 R08: 00007f8d8267c000 R09: 0000000000000000 [ 201.755318][ T7185] R10: 0000000000000006 R11: 0000000000000246 R12: 00007f8d819b5fac [ 201.755343][ T7185] R13: 0000000000000000 R14: 00007ffd36336100 R15: 00007ffd363361e8 [ 201.755383][ T7185] [ 202.045390][ T7187] netlink: 8 bytes leftover after parsing attributes in process `syz.2.272'. [ 202.214752][ T7194] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 202.413584][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 202.421296][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 202.455056][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 202.461451][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 202.481131][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 202.491190][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 202.543371][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 202.549973][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 204.344619][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 204.350998][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 204.415967][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 204.422343][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 204.480168][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 204.486578][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 204.539371][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 204.545784][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 204.608861][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 204.616039][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 204.689377][ T51] Bluetooth: hci2: unexpected subevent 0x01 length: 4 < 18 [ 204.791030][ T30] audit: type=1800 audit(6043733863.414:5): pid=7228 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.277" name="dbroot" dev="configfs" ino=12560 res=0 errno=0 [ 206.271103][ T7246] Setting dangerous option i915.mitigations - tainting kernel [ 206.304375][ T7250] openvswitch: netlink: nsh attribute has 14 unknown bytes. [ 206.954814][ T7257] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 207.875660][ T7261] FAULT_INJECTION: forcing a failure. [ 207.875660][ T7261] name failslab, interval 1, probability 0, space 0, times 0 [ 207.905127][ T7261] CPU: 1 UID: 0 PID: 7261 Comm: syz.0.288 Tainted: G U 6.15.0-syzkaller-10402-g4cb6c8af8591 #0 PREEMPT(full) [ 207.905185][ T7261] Tainted: [U]=USER [ 207.905196][ T7261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 207.905216][ T7261] Call Trace: [ 207.905227][ T7261] [ 207.905240][ T7261] dump_stack_lvl+0x16c/0x1f0 [ 207.905287][ T7261] should_fail_ex+0x512/0x640 [ 207.905337][ T7261] ? fs_reclaim_acquire+0xae/0x150 [ 207.905394][ T7261] ? tomoyo_encode2+0x100/0x3e0 [ 207.905438][ T7261] should_failslab+0xc2/0x120 [ 207.905480][ T7261] __kmalloc_noprof+0xd2/0x510 [ 207.905531][ T7261] tomoyo_encode2+0x100/0x3e0 [ 207.905581][ T7261] tomoyo_encode+0x29/0x50 [ 207.905623][ T7261] tomoyo_path_perm+0x3a5/0x460 [ 207.905663][ T7261] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 207.905721][ T7261] ? d_add+0x47a/0x780 [ 207.905784][ T7261] ? __pfx_current_check_access_path+0x10/0x10 [ 207.905837][ T7261] ? lookup_one_qstr_excl_raw.part.0+0xf9/0x160 [ 207.905888][ T7261] ? lookup_dcache+0x66/0x170 [ 207.905945][ T7261] tomoyo_path_symlink+0x97/0xe0 [ 207.906008][ T7261] ? __pfx_tomoyo_path_symlink+0x10/0x10 [ 207.906053][ T7261] ? find_held_lock+0x2b/0x80 [ 207.906098][ T7261] ? __might_fault+0xe3/0x190 [ 207.906142][ T7261] security_path_symlink+0x152/0x2e0 [ 207.906180][ T7261] do_symlinkat+0x10d/0x310 [ 207.906221][ T7261] ? __pfx_do_symlinkat+0x10/0x10 [ 207.906260][ T7261] ? getname_flags.part.0+0x1c5/0x550 [ 207.906316][ T7261] __x64_sys_symlink+0x75/0x90 [ 207.906356][ T7261] do_syscall_64+0xcd/0x490 [ 207.906399][ T7261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.906431][ T7261] RIP: 0033:0x7f64fbf8e969 [ 207.906458][ T7261] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 207.906490][ T7261] RSP: 002b:00007f64fce42038 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 207.906521][ T7261] RAX: ffffffffffffffda RBX: 00007f64fc1b5fa0 RCX: 00007f64fbf8e969 [ 207.906544][ T7261] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 207.906563][ T7261] RBP: 00007f64fc010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 207.906605][ T7261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 207.906644][ T7261] R13: 0000000000000000 R14: 00007f64fc1b5fa0 R15: 00007ffe594258e8 [ 207.906688][ T7261] [ 209.017570][ T7290] netlink: 8 bytes leftover after parsing attributes in process `syz.2.295'. [ 209.191869][ T7282] Setting dangerous option i915.mitigations - tainting kernel [ 209.655077][ T7296] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 210.458475][ T7305] netlink: 342 bytes leftover after parsing attributes in process `syz.1.299'. [ 210.599454][ T7307] netlink: 342 bytes leftover after parsing attributes in process `syz.1.299'. [ 211.539405][ T7325] program syz.3.303 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 211.550503][ T7325] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 211.640911][ T7329] program syz.0.304 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 211.681029][ T7329] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 211.834137][ T7330] can: request_module (can-proto-3) failed. [ 211.858117][ T7325] FAULT_INJECTION: forcing a failure. [ 211.858117][ T7325] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 211.898100][ T7325] CPU: 1 UID: 0 PID: 7325 Comm: syz.3.303 Tainted: G U 6.15.0-syzkaller-10402-g4cb6c8af8591 #0 PREEMPT(full) [ 211.898149][ T7325] Tainted: [U]=USER [ 211.898159][ T7325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 211.898177][ T7325] Call Trace: [ 211.898186][ T7325] [ 211.898198][ T7325] dump_stack_lvl+0x16c/0x1f0 [ 211.898239][ T7325] should_fail_ex+0x512/0x640 [ 211.898292][ T7325] _copy_to_user+0x32/0xd0 [ 211.898344][ T7325] simple_read_from_buffer+0xcb/0x170 [ 211.898399][ T7325] proc_fail_nth_read+0x197/0x270 [ 211.898451][ T7325] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 211.898505][ T7325] ? rw_verify_area+0xcf/0x680 [ 211.898554][ T7325] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 211.898604][ T7325] vfs_read+0x1e1/0xc60 [ 211.898654][ T7325] ? __pfx___mutex_lock+0x10/0x10 [ 211.898693][ T7325] ? __pfx_vfs_read+0x10/0x10 [ 211.898738][ T7325] ? __fget_files+0x20e/0x3c0 [ 211.898782][ T7325] ksys_read+0x12a/0x250 [ 211.898815][ T7325] ? __pfx_ksys_read+0x10/0x10 [ 211.898858][ T7325] do_syscall_64+0xcd/0x490 [ 211.898894][ T7325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.898921][ T7325] RIP: 0033:0x7f8d8178d37c [ 211.898942][ T7325] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 211.898968][ T7325] RSP: 002b:00007f8d82639030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 211.898992][ T7325] RAX: ffffffffffffffda RBX: 00007f8d819b6160 RCX: 00007f8d8178d37c [ 211.899010][ T7325] RDX: 000000000000000f RSI: 00007f8d826390a0 RDI: 0000000000000005 [ 211.899026][ T7325] RBP: 00007f8d82639090 R08: 0000000000000000 R09: 0000000000000000 [ 211.899042][ T7325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 211.899058][ T7325] R13: 0000000000000000 R14: 00007f8d819b6160 R15: 00007ffd363361e8 [ 211.899092][ T7325] [ 212.994109][ T7347] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 214.402087][ T7366] FAULT_INJECTION: forcing a failure. [ 214.402087][ T7366] name failslab, interval 1, probability 0, space 0, times 0 [ 214.416363][ T7366] CPU: 1 UID: 0 PID: 7366 Comm: syz.0.319 Tainted: G U 6.15.0-syzkaller-10402-g4cb6c8af8591 #0 PREEMPT(full) [ 214.416418][ T7366] Tainted: [U]=USER [ 214.416438][ T7366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 214.416459][ T7366] Call Trace: [ 214.416470][ T7366] [ 214.416482][ T7366] dump_stack_lvl+0x16c/0x1f0 [ 214.416530][ T7366] should_fail_ex+0x512/0x640 [ 214.416578][ T7366] ? fs_reclaim_acquire+0xae/0x150 [ 214.416635][ T7366] should_failslab+0xc2/0x120 [ 214.416678][ T7366] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 214.416720][ T7366] ? security_inode_alloc+0x3b/0x2b0 [ 214.416760][ T7366] security_inode_alloc+0x3b/0x2b0 [ 214.416796][ T7366] inode_init_always_gfp+0xce4/0x1030 [ 214.416839][ T7366] alloc_inode+0x86/0x240 [ 214.416885][ T7366] new_inode+0x22/0x1c0 [ 214.416926][ T7366] ? trace_cap_capable+0x18d/0x200 [ 214.416982][ T7366] shmem_get_inode+0x19a/0xfb0 [ 214.417038][ T7366] ? __vm_enough_memory+0x184/0x3f0 [ 214.417090][ T7366] __shmem_file_setup+0x16f/0x300 [ 214.417130][ T7366] shmem_zero_setup+0x93/0x1a0 [ 214.417174][ T7366] __mmap_region+0x2036/0x27c0 [ 214.417221][ T7366] ? __pfx___mmap_region+0x10/0x10 [ 214.417260][ T7366] ? trace_sched_exit_tp+0xde/0x130 [ 214.417397][ T7366] ? trace_cap_capable+0x18d/0x200 [ 214.417476][ T7366] mmap_region+0x1ab/0x3f0 [ 214.417519][ T7366] ? __get_unmapped_area+0x267/0x440 [ 214.417577][ T7366] do_mmap+0xd8e/0x11b0 [ 214.417636][ T7366] ? __pfx_do_mmap+0x10/0x10 [ 214.417688][ T7366] ? __pfx_down_write_killable+0x10/0x10 [ 214.417745][ T7366] vm_mmap_pgoff+0x281/0x450 [ 214.417802][ T7366] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 214.417852][ T7366] ? lockdep_hardirqs_on+0x7c/0x110 [ 214.417898][ T7366] ? __x64_sys_futex+0x1e0/0x4c0 [ 214.417936][ T7366] ksys_mmap_pgoff+0x7d/0x5c0 [ 214.417985][ T7366] ? xfd_validate_state+0x61/0x180 [ 214.418026][ T7366] __x64_sys_mmap+0x125/0x190 [ 214.418067][ T7366] do_syscall_64+0xcd/0x490 [ 214.418111][ T7366] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.418145][ T7366] RIP: 0033:0x7f64fbf8e969 [ 214.418172][ T7366] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 214.418204][ T7366] RSP: 002b:00007f64fce21038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 214.418236][ T7366] RAX: ffffffffffffffda RBX: 00007f64fc1b6080 RCX: 00007f64fbf8e969 [ 214.418259][ T7366] RDX: 00004000000000df RSI: 0000000000020009 RDI: 0000000000000000 [ 214.418279][ T7366] RBP: 00007f64fc010ab1 R08: 0000000000000401 R09: 0000000000008000 [ 214.418300][ T7366] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 214.418320][ T7366] R13: 0000000000000000 R14: 00007f64fc1b6080 R15: 00007ffe594258e8 [ 214.418363][ T7366] [ 214.696056][ C1] vkms_vblank_simulate: vblank timer overrun [ 216.000763][ T7385] can: request_module (can-proto-3) failed. [ 216.581015][ T7399] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 217.936793][ T7430] netlink: 4 bytes leftover after parsing attributes in process `syz.0.326'. [ 217.988385][ T7430] netlink: 13 bytes leftover after parsing attributes in process `syz.0.326'. [ 218.427510][ T7446] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 219.261398][ T7464] netlink: 8 bytes leftover after parsing attributes in process `syz.1.332'. [ 221.091098][ T7487] netlink: 28 bytes leftover after parsing attributes in process `syz.0.338'. [ 221.985053][ T7494] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 222.046770][ T30] audit: type=1800 audit(6043733880.674:6): pid=7498 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.341" name="lu_gp_id" dev="configfs" ino=12969 res=0 errno=0 [ 223.104678][ T7508] netlink: 'syz.1.344': attribute type 22 has an invalid length. [ 223.127147][ T7508] netlink: 334 bytes leftover after parsing attributes in process `syz.1.344'. [ 223.646093][ T7523] netlink: 28 bytes leftover after parsing attributes in process `syz.0.346'. [ 223.775580][ T7523] team0: Port device team_slave_0 removed [ 224.501667][ T7540] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 227.208137][ T7587] netlink: 2 bytes leftover after parsing attributes in process `syz.1.361'. [ 227.278712][ T7590] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 227.471243][ T7591] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 227.684002][ T7591] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 227.714604][ T7591] memcg:ffff888034c70a01 [ 227.718940][ T7591] ksm flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 227.729713][ T7591] page_type: f5(slab) [ 227.733769][ T7591] raw: 00fff00000000040 ffff88801ca94780 ffffea0001e0b280 dead000000000003 [ 227.743084][ T7591] raw: 0000000000000000 0000000000150015 00000000f5000000 ffff888034c70a01 [ 227.924302][ T7591] head: 00fff00000000040 ffff88801ca94780 ffffea0001e0b280 dead000000000003 [ 227.964543][ T7591] head: 0000000000000000 0000000000150015 00000000f5000000 ffff888034c70a01 [ 227.994361][ T7591] head: 00fff00000000001 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 228.003170][ T7591] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 228.020295][ T7591] page dumped because: unmovable page [ 228.073961][ T7591] page_owner tracks the page as allocated [ 228.107587][ T7591] page last allocated via order 1, migratetype Reclaimable, gfp_mask 0xd20d0(__GFP_RECLAIMABLE|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5210, tgid 5210 (udevd), ts 63943765323, free_ts 36562516494 [ 228.148403][ T7591] post_alloc_hook+0x1c0/0x230 [ 228.159197][ T7591] get_page_from_freelist+0x135c/0x3950 [ 228.165153][ T7591] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 228.177181][ T7591] alloc_pages_mpol+0x1fb/0x550 [ 228.182268][ T7591] new_slab+0x23b/0x330 [ 228.187024][ T7591] ___slab_alloc+0xd9c/0x1940 [ 228.191786][ T7591] __slab_alloc.constprop.0+0x56/0xb0 [ 228.197688][ T7591] kmem_cache_alloc_lru_noprof+0xf4/0x3b0 [ 228.203480][ T7591] __d_alloc+0x31/0xaa0 [ 228.208687][ T7591] d_alloc+0x4a/0x1e0 [ 228.212750][ T7591] d_alloc_parallel+0xe3/0x12e0 [ 228.224101][ T7591] __lookup_slow+0x193/0x460 [ 228.235643][ T7591] walk_component+0x353/0x5b0 [ 228.279071][ T7591] path_lookupat+0x142/0x6d0 [ 228.286774][ T7591] filename_lookup+0x224/0x5f0 [ 228.295533][ T7591] vfs_statx+0x101/0x3e0 [ 228.302257][ T7591] page last free pid 1 tgid 1 stack trace: [ 228.310563][ T7591] __free_frozen_pages+0x7fe/0x1180 [ 228.316046][ T7591] free_contig_range+0x183/0x4b0 [ 228.321231][ T7591] destroy_args+0x7f6/0xa60 [ 228.327103][ T7591] debug_vm_pgtable+0x13c4/0x2d90 [ 228.332388][ T7591] do_one_initcall+0x120/0x6e0 [ 228.341890][ T7591] kernel_init_freeable+0x5c2/0x900 [ 228.380008][ T7591] kernel_init+0x1c/0x2b0 [ 228.405027][ T7591] ret_from_fork+0x5d4/0x6f0 [ 228.417883][ T7587] could not allocate digest TFM handle binfmt_misc [ 228.464118][ T7591] ret_from_fork_asm+0x1a/0x30 [ 228.838840][ T7608] netlink: 93 bytes leftover after parsing attributes in process `syz.0.367'. [ 229.211679][ T7617] can: request_module (can-proto-3) failed. [ 230.265180][ T7625] netlink: 28 bytes leftover after parsing attributes in process `syz.1.369'. [ 230.284268][ T7625] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 230.303971][ T7625] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 230.393332][ T7625] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 230.457280][ T7625] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 230.945932][ T7630] bond0: no command found in slaves file - use +ifname or -ifname [ 231.183771][ T7637] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 231.544797][ T7641] netlink: 'syz.3.375': attribute type 22 has an invalid length. [ 231.564006][ T7641] netlink: 334 bytes leftover after parsing attributes in process `syz.3.375'. [ 231.820944][ T7651] blkio.reset_stats is deprecated [ 232.300089][ T7659] netlink: 'syz.3.380': attribute type 1 has an invalid length. [ 232.359373][ T7659] netlink: 206 bytes leftover after parsing attributes in process `syz.3.380'. [ 233.116670][ T7654] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 233.141785][ T7654] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 233.194227][ T7654] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 233.226496][ T7654] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 233.237959][ T7668] can: request_module (can-proto-3) failed. [ 233.855314][ T7680] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 234.291106][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 235.164045][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 235.245275][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 235.246451][ T5843] Bluetooth: hci1: command 0x0c1a tx timeout [ 235.517878][ T7718] FAULT_INJECTION: forcing a failure. [ 235.517878][ T7718] name failslab, interval 1, probability 0, space 0, times 0 [ 235.530932][ T7718] CPU: 1 UID: 0 PID: 7718 Comm: syz.2.394 Tainted: G U 6.15.0-syzkaller-10402-g4cb6c8af8591 #0 PREEMPT(full) [ 235.530986][ T7718] Tainted: [U]=USER [ 235.530996][ T7718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 235.531016][ T7718] Call Trace: [ 235.531026][ T7718] [ 235.531038][ T7718] dump_stack_lvl+0x16c/0x1f0 [ 235.531081][ T7718] should_fail_ex+0x512/0x640 [ 235.531134][ T7718] should_failslab+0xc2/0x120 [ 235.531189][ T7718] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 235.531251][ T7718] ? radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 235.531314][ T7718] radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 235.531377][ T7718] idr_get_free+0x528/0xa30 [ 235.531422][ T7718] idr_alloc_u32+0x190/0x2f0 [ 235.531459][ T7718] ? __pfx_idr_alloc_u32+0x10/0x10 [ 235.531498][ T7718] ? lock_acquire+0x179/0x350 [ 235.531557][ T7718] idr_alloc_cyclic+0x10b/0x230 [ 235.531594][ T7718] ? __pfx_idr_alloc_cyclic+0x10/0x10 [ 235.531628][ T7718] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 235.531679][ T7718] map_create+0x9aa/0x1db0 [ 235.531735][ T7718] ? __pfx_map_create+0x10/0x10 [ 235.531774][ T7718] ? __might_fault+0xe3/0x190 [ 235.531811][ T7718] ? __might_fault+0xe3/0x190 [ 235.531846][ T7718] ? __might_fault+0x13b/0x190 [ 235.531901][ T7718] __sys_bpf+0x47cc/0x4d80 [ 235.531950][ T7718] ? __pfx___sys_bpf+0x10/0x10 [ 235.531992][ T7718] ? kmem_cache_free+0x487/0x4d0 [ 235.532027][ T7718] ? find_held_lock+0x2b/0x80 [ 235.532068][ T7718] ? putname+0x154/0x1a0 [ 235.532111][ T7718] ? do_sys_openat2+0x1b0/0x1d0 [ 235.532163][ T7718] ? do_futex+0x122/0x350 [ 235.532194][ T7718] ? __pfx_do_futex+0x10/0x10 [ 235.532275][ T7718] ? __x64_sys_openat+0x174/0x210 [ 235.532328][ T7718] ? xfd_validate_state+0x61/0x180 [ 235.532370][ T7718] __x64_sys_bpf+0x78/0xc0 [ 235.532414][ T7718] ? lockdep_hardirqs_on+0x7c/0x110 [ 235.532450][ T7718] do_syscall_64+0xcd/0x490 [ 235.532505][ T7718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.532537][ T7718] RIP: 0033:0x7f5f4438e969 [ 235.532563][ T7718] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 235.532594][ T7718] RSP: 002b:00007f5f45225038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 235.532625][ T7718] RAX: ffffffffffffffda RBX: 00007f5f445b6080 RCX: 00007f5f4438e969 [ 235.532646][ T7718] RDX: 0000000000000010 RSI: 00002000000001c0 RDI: 0000000000000000 [ 235.532666][ T7718] RBP: 00007f5f44410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 235.532686][ T7718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 235.532704][ T7718] R13: 0000000000000000 R14: 00007f5f445b6080 R15: 00007ffed90a55a8 [ 235.532746][ T7718] [ 237.069010][ T7710] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 237.086632][ T7710] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 237.093021][ T7710] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 237.111170][ T7710] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 237.818832][ T7748] sg_write: data in/out 1046707627/34141 bytes for SCSI command 0x0-- guessing data in; [ 237.818832][ T7748] program syz.0.401 not setting count and/or reply_len properly [ 238.410466][ T7761] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 238.524011][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 239.084461][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 239.165707][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 239.165799][ T5843] Bluetooth: hci1: command 0x0c1a tx timeout [ 240.584387][ T7802] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 241.417574][ T7827] FAULT_INJECTION: forcing a failure. [ 241.417574][ T7827] name failslab, interval 1, probability 0, space 0, times 0 [ 241.481340][ T7827] CPU: 1 UID: 0 PID: 7827 Comm: syz.1.424 Tainted: G U 6.15.0-syzkaller-10402-g4cb6c8af8591 #0 PREEMPT(full) [ 241.481382][ T7827] Tainted: [U]=USER [ 241.481389][ T7827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 241.481409][ T7827] Call Trace: [ 241.481417][ T7827] [ 241.481426][ T7827] dump_stack_lvl+0x16c/0x1f0 [ 241.481457][ T7827] should_fail_ex+0x512/0x640 [ 241.481490][ T7827] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 241.481524][ T7827] should_failslab+0xc2/0x120 [ 241.481555][ T7827] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 241.481586][ T7827] ? apply_subsystem_event_filter+0x3df/0x1450 [ 241.481629][ T7827] kstrdup+0x53/0x100 [ 241.481659][ T7827] apply_subsystem_event_filter+0x3df/0x1450 [ 241.481711][ T7827] ? __pfx_apply_subsystem_event_filter+0x10/0x10 [ 241.481759][ T7827] ? _copy_from_user+0x59/0xd0 [ 241.481797][ T7827] subsystem_filter_write+0x95/0x120 [ 241.481821][ T7827] ? __pfx_subsystem_filter_write+0x10/0x10 [ 241.481842][ T7827] vfs_write+0x2a0/0x1150 [ 241.481870][ T7827] ? __pfx___mutex_lock+0x10/0x10 [ 241.481898][ T7827] ? __pfx_vfs_write+0x10/0x10 [ 241.481930][ T7827] ? __fget_files+0x20e/0x3c0 [ 241.481963][ T7827] ksys_write+0x12a/0x250 [ 241.481986][ T7827] ? __pfx_ksys_write+0x10/0x10 [ 241.482029][ T7827] do_syscall_64+0xcd/0x490 [ 241.482071][ T7827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.482104][ T7827] RIP: 0033:0x7fb30998e969 [ 241.482129][ T7827] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 241.482160][ T7827] RSP: 002b:00007fb30a744038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 241.482190][ T7827] RAX: ffffffffffffffda RBX: 00007fb309bb6080 RCX: 00007fb30998e969 [ 241.482212][ T7827] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000006 [ 241.482230][ T7827] RBP: 00007fb309a10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 241.482250][ T7827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 241.482270][ T7827] R13: 0000000000000000 R14: 00007fb309bb6080 R15: 00007ffe4da300e8 [ 241.482312][ T7827] [ 241.702184][ T7829] netlink: 350 bytes leftover after parsing attributes in process `syz.0.423'. [ 242.042790][ T7837] openvswitch: netlink: Missing valid actions attribute. [ 242.503241][ T7842] : Can't lookup blockdev [ 242.586159][ T7835] delete_channel: no stack [ 242.922538][ T7845] mkiss: ax0: crc mode is auto. [ 244.583721][ T7886] vivid-002: ================= START STATUS ================= [ 244.591700][ T7886] vivid-002: ================== END STATUS ================== [ 245.327878][ T7895] can: request_module (can-proto-3) failed. [ 245.817204][ T5878] smpboot: CPU 1 is now offline [ 246.483313][ T7906] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 246.500003][ T7906] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 246.513551][ T7906] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 246.530538][ T7906] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 246.857559][ T5843] Bluetooth: hci3: Malformed Event: 0x02 [ 247.595250][ T7945] random: crng reseeded on system resumption [ 248.206260][ T5843] Bluetooth: hci0: command 0x0c1a tx timeout [ 248.525194][ T5840] Bluetooth: hci2: command 0x0c1a tx timeout [ 248.531342][ T5843] Bluetooth: hci1: command 0x0c1a tx timeout [ 248.604569][ T5843] Bluetooth: hci3: command 0x0c1a tx timeout [ 249.567307][ T7976] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 250.630738][ T8002] bridge0: port 4(hsr_slave_1) entered blocking state [ 250.649086][ T8002] bridge0: port 4(hsr_slave_1) entered disabled state [ 250.678241][ T8002] hsr_slave_1: entered allmulticast mode [ 250.751258][ T8002] hsr_slave_1: left allmulticast mode [ 251.671730][ T8020] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 252.310692][ T8035] FAULT_INJECTION: forcing a failure. [ 252.310692][ T8035] name failslab, interval 1, probability 0, space 0, times 0 [ 252.337802][ T8030] ubi: mtd0 is already attached to ubi0 [ 252.544817][ T8035] CPU: 0 UID: 0 PID: 8035 Comm: syz.0.479 Tainted: G U 6.15.0-syzkaller-10402-g4cb6c8af8591 #0 PREEMPT(full) [ 252.544855][ T8035] Tainted: [U]=USER [ 252.544862][ T8035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 252.544875][ T8035] Call Trace: [ 252.544882][ T8035] [ 252.544891][ T8035] dump_stack_lvl+0x16c/0x1f0 [ 252.544923][ T8035] should_fail_ex+0x512/0x640 [ 252.544956][ T8035] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 252.544983][ T8035] should_failslab+0xc2/0x120 [ 252.545012][ T8035] __kmalloc_cache_noprof+0x6a/0x3e0 [ 252.545036][ T8035] ? apply_subsystem_event_filter+0x3c0/0x1450 [ 252.545079][ T8035] apply_subsystem_event_filter+0x3c0/0x1450 [ 252.545125][ T8035] ? __pfx_apply_subsystem_event_filter+0x10/0x10 [ 252.545177][ T8035] ? _copy_from_user+0x59/0xd0 [ 252.545215][ T8035] subsystem_filter_write+0x95/0x120 [ 252.545239][ T8035] ? __pfx_subsystem_filter_write+0x10/0x10 [ 252.545260][ T8035] vfs_write+0x2a0/0x1150 [ 252.545289][ T8035] ? __pfx___mutex_lock+0x10/0x10 [ 252.545316][ T8035] ? __pfx_vfs_write+0x10/0x10 [ 252.545348][ T8035] ? __fget_files+0x20e/0x3c0 [ 252.545379][ T8035] ksys_write+0x12a/0x250 [ 252.545403][ T8035] ? __pfx_ksys_write+0x10/0x10 [ 252.545436][ T8035] do_syscall_64+0xcd/0x490 [ 252.545466][ T8035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.545489][ T8035] RIP: 0033:0x7f64fbf8e969 [ 252.545506][ T8035] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 252.545528][ T8035] RSP: 002b:00007f64fce21038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 252.545549][ T8035] RAX: ffffffffffffffda RBX: 00007f64fc1b6080 RCX: 00007f64fbf8e969 [ 252.545564][ T8035] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000006 [ 252.545577][ T8035] RBP: 00007f64fc010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 252.545590][ T8035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 252.545604][ T8035] R13: 0000000000000000 R14: 00007f64fc1b6080 R15: 00007ffe594258e8 [ 252.545632][ T8035] [ 252.867302][ T8037] netlink: 16 bytes leftover after parsing attributes in process `syz.3.480'. [ 253.399597][ T8056] : Can't lookup blockdev [ 253.466499][ T8057] FAULT_INJECTION: forcing a failure. [ 253.466499][ T8057] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 253.565005][ T8057] CPU: 0 UID: 0 PID: 8057 Comm: syz.1.484 Tainted: G U 6.15.0-syzkaller-10402-g4cb6c8af8591 #0 PREEMPT(full) [ 253.565043][ T8057] Tainted: [U]=USER [ 253.565050][ T8057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 253.565064][ T8057] Call Trace: [ 253.565071][ T8057] [ 253.565079][ T8057] dump_stack_lvl+0x16c/0x1f0 [ 253.565111][ T8057] should_fail_ex+0x512/0x640 [ 253.565148][ T8057] _copy_to_user+0x32/0xd0 [ 253.565187][ T8057] simple_read_from_buffer+0xcb/0x170 [ 253.565228][ T8057] proc_fail_nth_read+0x197/0x270 [ 253.565266][ T8057] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 253.565305][ T8057] ? rw_verify_area+0xcf/0x680 [ 253.565341][ T8057] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 253.565377][ T8057] vfs_read+0x1e1/0xc60 [ 253.565405][ T8057] ? __pfx___mutex_lock+0x10/0x10 [ 253.565433][ T8057] ? __pfx_vfs_read+0x10/0x10 [ 253.565465][ T8057] ? __fget_files+0x20e/0x3c0 [ 253.565495][ T8057] ksys_read+0x12a/0x250 [ 253.565518][ T8057] ? __pfx_ksys_read+0x10/0x10 [ 253.565550][ T8057] do_syscall_64+0xcd/0x490 [ 253.565580][ T8057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.565603][ T8057] RIP: 0033:0x7fb30998d37c [ 253.565628][ T8057] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 253.565650][ T8057] RSP: 002b:00007fb30a723030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 253.565671][ T8057] RAX: ffffffffffffffda RBX: 00007fb309bb6160 RCX: 00007fb30998d37c [ 253.565687][ T8057] RDX: 000000000000000f RSI: 00007fb30a7230a0 RDI: 0000000000000007 [ 253.565700][ T8057] RBP: 00007fb30a723090 R08: 0000000000000000 R09: 0000000000000000 [ 253.565714][ T8057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 253.565728][ T8057] R13: 0000000000000001 R14: 00007fb309bb6160 R15: 00007ffe4da300e8 [ 253.565756][ T8057] [ 254.770878][ T8068] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 254.814007][ T8073] vivid-003: ================= START STATUS ================= [ 254.834087][ T8068] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 254.840164][ T8068] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 254.852821][ T8073] vivid-003: Radio HW Seek Mode: Bounded [ 254.883948][ T8073] vivid-003: Radio Programmable HW Seek: false [ 254.926125][ T8073] vivid-003: RDS Rx I/O Mode: Block I/O [ 254.944134][ T8068] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 254.965201][ T8073] vivid-003: Generate RBDS Instead of RDS: false [ 255.002276][ T8073] vivid-003: RDS Reception: true [ 255.030084][ T8073] vivid-003: RDS Program Type: 0 inactive [ 255.062441][ T8073] vivid-003: RDS PS Name: inactive [ 255.098499][ T8073] vivid-003: RDS Radio Text: inactive [ 255.124902][ T8073] vivid-003: RDS Traffic Announcement: false inactive [ 255.160244][ T8073] vivid-003: RDS Traffic Program: false inactive [ 255.197868][ T8073] vivid-003: RDS Music: false inactive [ 255.238553][ T8073] vivid-003: ================== END STATUS ================== [ 256.561755][ T8104] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 256.844686][ T5840] Bluetooth: hci0: command 0x0c1a tx timeout [ 256.933897][ T5840] Bluetooth: hci1: command 0x0c1a tx timeout [ 256.939999][ T5840] Bluetooth: hci2: command 0x0c1a tx timeout [ 257.005459][ T5840] Bluetooth: hci3: command 0x0c1a tx timeout [ 257.716093][ T8123] capability: warning: `syz.0.501' uses 32-bit capabilities (legacy support in use) [ 259.911804][ T8156] vivid-007: ================= START STATUS ================= [ 259.922035][ T8156] vivid-007: Generate PTS: true [ 259.930227][ T8156] vivid-007: Generate SCR: true [ 259.936953][ T8156] tpg source WxH: 320x240 (Y'CbCr) [ 259.942223][ T8156] tpg field: 1 [ 259.947850][ T8156] tpg crop: (0,0)/320x240 [ 259.952321][ T8156] tpg compose: (0,0)/320x240 [ 259.964172][ T8156] tpg colorspace: 8 [ 259.970203][ T8156] tpg transfer function: 0/0 [ 259.994296][ T8156] tpg Y'CbCr encoding: 0/0 [ 259.998785][ T8156] tpg quantization: 0/0 [ 260.002981][ T8156] tpg RGB range: 0/2 [ 260.037686][ T8156] vivid-007: ================== END STATUS ================== [ 260.623778][ T8173] Setting dangerous option i915.mitigations - tainting kernel [ 262.731123][ T8203] FAULT_INJECTION: forcing a failure. [ 262.731123][ T8203] name failslab, interval 1, probability 0, space 0, times 0 [ 262.756172][ T8203] CPU: 1 UID: 0 PID: 8203 Comm: syz.3.520 Tainted: G U 6.15.0-syzkaller-10402-g4cb6c8af8591 #0 PREEMPT(full) [ 262.756231][ T8203] Tainted: [U]=USER [ 262.756243][ T8203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 262.756262][ T8203] Call Trace: [ 262.756273][ T8203] [ 262.756285][ T8203] dump_stack_lvl+0x16c/0x1f0 [ 262.756331][ T8203] should_fail_ex+0x512/0x640 [ 262.756380][ T8203] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 262.756419][ T8203] should_failslab+0xc2/0x120 [ 262.756461][ T8203] __kmalloc_cache_noprof+0x6a/0x3e0 [ 262.756497][ T8203] ? mr_table_alloc+0x5f/0x2e0 [ 262.756551][ T8203] ? __pfx_ipmr_new_table_set+0x10/0x10 [ 262.756595][ T8203] mr_table_alloc+0x5f/0x2e0 [ 262.756643][ T8203] ? __pfx_ipmr_expire_process+0x10/0x10 [ 262.756691][ T8203] ? __pfx_ipmr_net_init+0x10/0x10 [ 262.756740][ T8203] ipmr_net_init+0x3c4/0x4e0 [ 262.756789][ T8203] ? __pfx_ipmr_net_init+0x10/0x10 [ 262.756837][ T8203] ops_init+0x1e2/0x5f0 [ 262.756885][ T8203] setup_net+0x1ff/0x510 [ 262.756926][ T8203] ? lockdep_init_map_type+0x5c/0x280 [ 262.756961][ T8203] ? __pfx_setup_net+0x10/0x10 [ 262.757007][ T8203] ? debug_mutex_init+0x37/0x70 [ 262.757064][ T8203] copy_net_ns+0x2a6/0x5f0 [ 262.757117][ T8203] create_new_namespaces+0x3ea/0xa90 [ 262.757177][ T8203] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 262.757231][ T8203] ksys_unshare+0x45b/0xa40 [ 262.757265][ T8203] ? __pfx_ksys_unshare+0x10/0x10 [ 262.757301][ T8203] ? xfd_validate_state+0x61/0x180 [ 262.757347][ T8203] __x64_sys_unshare+0x31/0x40 [ 262.757380][ T8203] do_syscall_64+0xcd/0x490 [ 262.757423][ T8203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.757456][ T8203] RIP: 0033:0x7f8d8178e969 [ 262.757482][ T8203] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 262.757514][ T8203] RSP: 002b:00007f8d8267b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 262.757545][ T8203] RAX: ffffffffffffffda RBX: 00007f8d819b5fa0 RCX: 00007f8d8178e969 [ 262.757567][ T8203] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 262.757586][ T8203] RBP: 00007f8d81810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 262.757606][ T8203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 262.757625][ T8203] R13: 0000000000000000 R14: 00007f8d819b5fa0 R15: 00007ffd363361e8 [ 262.757666][ T8203] [ 264.776022][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 264.786242][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 265.486342][ T8259] netlink: zone id is out of range [ 270.486963][ T8324] FAULT_INJECTION: forcing a failure. [ 270.486963][ T8324] name failslab, interval 1, probability 0, space 0, times 0 [ 270.507069][ T8325] [ 270.546675][ T8324] CPU: 0 UID: 0 PID: 8324 Comm: syz.2.547 Tainted: G U 6.15.0-syzkaller-10402-g4cb6c8af8591 #0 PREEMPT(full) [ 270.546729][ T8324] Tainted: [U]=USER [ 270.546739][ T8324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 270.546758][ T8324] Call Trace: [ 270.546769][ T8324] [ 270.546780][ T8324] dump_stack_lvl+0x16c/0x1f0 [ 270.546825][ T8324] should_fail_ex+0x512/0x640 [ 270.546871][ T8324] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 270.546909][ T8324] should_failslab+0xc2/0x120 [ 270.546952][ T8324] __kmalloc_cache_noprof+0x6a/0x3e0 [ 270.546983][ T8324] ? allocate_file_region_entries+0x15b/0x620 [ 270.547022][ T8324] ? allocate_file_region_entries+0x1a0/0x620 [ 270.547067][ T8324] allocate_file_region_entries+0x1a0/0x620 [ 270.547115][ T8324] ? __pfx_allocate_file_region_entries+0x10/0x10 [ 270.547176][ T8324] region_chg+0x85/0x140 [ 270.547216][ T8324] __vma_reservation_common+0x43b/0x740 [ 270.547261][ T8324] ? __pfx___vma_reservation_common+0x10/0x10 [ 270.547315][ T8324] alloc_hugetlb_folio+0x946/0x1560 [ 270.547373][ T8324] ? __pfx_alloc_hugetlb_folio+0x10/0x10 [ 270.547425][ T8324] ? _raw_spin_unlock+0x28/0x50 [ 270.547461][ T8324] ? __filemap_get_folio+0x333/0xc10 [ 270.547516][ T8324] hugetlb_fault+0x1ff3/0x3060 [ 270.547556][ T8324] ? __pfx_hugetlb_fault+0x10/0x10 [ 270.547605][ T8324] ? find_vma+0xbf/0x140 [ 270.547650][ T8324] ? __pfx_find_vma+0x10/0x10 [ 270.547705][ T8324] handle_mm_fault+0x95d/0xad0 [ 270.547748][ T8324] do_user_addr_fault+0x7a6/0x1370 [ 270.547789][ T8324] ? rcu_is_watching+0x12/0xc0 [ 270.547840][ T8324] exc_page_fault+0x5c/0xb0 [ 270.547877][ T8324] asm_exc_page_fault+0x26/0x30 [ 270.547908][ T8324] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 270.547959][ T8324] Code: cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 270.547989][ T8324] RSP: 0018:ffffc900048bfd18 EFLAGS: 00050202 [ 270.548015][ T8324] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000078 [ 270.548034][ T8324] RDX: fffff52000917fd1 RSI: 0000000000000000 RDI: ffffc900048bfe10 [ 270.548055][ T8324] RBP: 0000000000000078 R08: 0000000000000001 R09: fffff52000917fd0 [ 270.548075][ T8324] R10: ffffc900048bfe87 R11: 0000000000000001 R12: 0000000000000000 [ 270.548094][ T8324] R13: ffffc900048bfe10 R14: 0000000000000000 R15: 0000000000000000 [ 270.548137][ T8324] _copy_from_user+0x98/0xd0 [ 270.548198][ T8324] io_uring_setup+0xb4/0x2080 [ 270.548245][ T8324] ? __pfx_io_uring_setup+0x10/0x10 [ 270.548283][ T8324] ? __pfx_vfs_write+0x10/0x10 [ 270.548320][ T8324] ? do_sys_openat2+0x157/0x1d0 [ 270.548367][ T8324] ? __pfx_do_sys_openat2+0x10/0x10 [ 270.548435][ T8324] ? ksys_write+0x1ac/0x250 [ 270.548469][ T8324] ? __pfx_ksys_write+0x10/0x10 [ 270.548513][ T8324] __x64_sys_io_uring_setup+0xc2/0x170 [ 270.548558][ T8324] do_syscall_64+0xcd/0x490 [ 270.548600][ T8324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.548632][ T8324] RIP: 0033:0x7f5f4438e969 [ 270.548657][ T8324] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 270.548687][ T8324] RSP: 002b:00007f5f45246038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 270.548716][ T8324] RAX: ffffffffffffffda RBX: 00007f5f445b5fa0 RCX: 00007f5f4438e969 [ 270.548737][ T8324] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008 [ 270.548756][ T8324] RBP: 00007f5f45246090 R08: 0000000000000000 R09: 0000000000000000 [ 270.548775][ T8324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 270.548794][ T8324] R13: 0000000000000000 R14: 00007f5f445b5fa0 R15: 00007ffed90a55a8 [ 270.548836][ T8324] [ 270.920213][ C0] vkms_vblank_simulate: vblank timer overrun [ 271.051897][ T8327] netlink: 4 bytes leftover after parsing attributes in process `syz.0.548'. [ 272.048380][ T8341] netlink: 28 bytes leftover after parsing attributes in process `syz.1.555'. [ 275.141664][ T8396] can: request_module (can-proto-3) failed. [ 275.225537][ T8405] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 275.620985][ T8406] Setting dangerous option i915.mitigations - tainting kernel [ 277.487583][ T8436] FAULT_INJECTION: forcing a failure. [ 277.487583][ T8436] name failslab, interval 1, probability 0, space 0, times 0 [ 277.564045][ T8436] CPU: 1 UID: 0 PID: 8436 Comm: syz.0.578 Tainted: G U 6.15.0-syzkaller-10402-g4cb6c8af8591 #0 PREEMPT(full) [ 277.564100][ T8436] Tainted: [U]=USER [ 277.564111][ T8436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 277.564131][ T8436] Call Trace: [ 277.564142][ T8436] [ 277.564156][ T8436] dump_stack_lvl+0x16c/0x1f0 [ 277.564197][ T8436] should_fail_ex+0x512/0x640 [ 277.564237][ T8436] ? __kmalloc_noprof+0xbf/0x510 [ 277.564272][ T8436] ? constrain_params_by_rules+0x175/0xca0 [ 277.564315][ T8436] should_failslab+0xc2/0x120 [ 277.564350][ T8436] __kmalloc_noprof+0xd2/0x510 [ 277.564381][ T8436] ? unwind_get_return_address+0x59/0xa0 [ 277.564424][ T8436] constrain_params_by_rules+0x175/0xca0 [ 277.564475][ T8436] ? stack_trace_save+0x8e/0xc0 [ 277.564520][ T8436] ? stack_depot_save_flags+0x28/0xa40 [ 277.564562][ T8436] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 277.564613][ T8436] ? __kasan_kmalloc+0xaa/0xb0 [ 277.564641][ T8436] ? snd_pcm_oss_change_params_locked+0x247/0x3a30 [ 277.564684][ T8436] ? snd_pcm_oss_make_ready+0xe6/0x1b0 [ 277.564725][ T8436] ? snd_pcm_oss_sync+0x1de/0x840 [ 277.564783][ T8436] ? rcu_is_watching+0x12/0xc0 [ 277.564826][ T8436] ? snd_interval_refine+0x2fa/0x580 [ 277.564862][ T8436] snd_pcm_hw_refine+0x7de/0xad0 [ 277.564912][ T8436] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 277.564967][ T8436] ? __asan_memset+0x23/0x50 [ 277.564993][ T8436] ? _snd_pcm_hw_param_min+0x259/0x630 [ 277.565038][ T8436] snd_pcm_oss_change_params_locked+0x65e/0x3a30 [ 277.565087][ T8436] ? rcu_is_watching+0x12/0xc0 [ 277.565134][ T8436] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 277.565180][ T8436] ? __pfx___mutex_lock+0x10/0x10 [ 277.565236][ T8436] snd_pcm_oss_make_ready+0xe6/0x1b0 [ 277.565280][ T8436] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 277.565323][ T8436] snd_pcm_oss_sync+0x1de/0x840 [ 277.565369][ T8436] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 277.565412][ T8436] snd_pcm_oss_release+0x28b/0x310 [ 277.565457][ T8436] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 277.565498][ T8436] __fput+0x402/0xb70 [ 277.565544][ T8436] task_work_run+0x150/0x240 [ 277.565591][ T8436] ? __pfx_task_work_run+0x10/0x10 [ 277.565624][ T8436] ? __pfx___do_sys_close_range+0x10/0x10 [ 277.565661][ T8436] exit_to_user_mode_loop+0xeb/0x110 [ 277.565695][ T8436] do_syscall_64+0x3f6/0x490 [ 277.565730][ T8436] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.565764][ T8436] RIP: 0033:0x7f64fbf8e969 [ 277.565786][ T8436] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 277.565813][ T8436] RSP: 002b:00007f64fce42038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 277.565839][ T8436] RAX: 0000000000000000 RBX: 00007f64fc1b5fa0 RCX: 00007f64fbf8e969 [ 277.565856][ T8436] RDX: 0000000000000000 RSI: fffffffffffff000 RDI: 0000000000000000 [ 277.565873][ T8436] RBP: 00007f64fc010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 277.565889][ T8436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 277.565905][ T8436] R13: 0000000000000000 R14: 00007f64fc1b5fa0 R15: 00007ffe594258e8 [ 277.565957][ T8436] [ 278.230263][ T8440] : Can't lookup blockdev [ 280.772752][ T8478] binder: 8475:8478 unknown command 0 [ 280.791671][ T8478] binder: 8475:8478 ioctl c0306201 2000000000c0 returned -22 [ 281.173211][ T8487] netlink: 206 bytes leftover after parsing attributes in process `syz.0.590'. [ 283.411773][ T8514] mkiss: ax0: crc mode is auto. [ 286.745213][ T8545] can: request_module (can-proto-3) failed. [ 286.762286][ T8538] openvswitch: netlink: Key type 333 is out of range max 32 [ 288.765140][ T8577] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 289.520076][ T10] smpboot: CPU 1 is now offline [ 289.891965][ T8595] can: request_module (can-proto-3) failed. [ 291.253986][ T8617] Setting dangerous option i915.mitigations - tainting kernel [ 292.208809][ T8627] can: request_module (can-proto-3) failed. [ 293.030437][ T8645] ubi: mtd0 is already attached to ubi0 [ 293.260946][ T8654] can: request_module (can-proto-3) failed. [ 294.441154][ T8668] FAULT_INJECTION: forcing a failure. [ 294.441154][ T8668] name failslab, interval 1, probability 0, space 0, times 0 [ 294.525286][ T8668] CPU: 0 UID: 0 PID: 8668 Comm: syz.2.633 Tainted: G U 6.15.0-syzkaller-10402-g4cb6c8af8591 #0 PREEMPT(full) [ 294.525326][ T8668] Tainted: [U]=USER [ 294.525334][ T8668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 294.525347][ T8668] Call Trace: [ 294.525354][ T8668] [ 294.525362][ T8668] dump_stack_lvl+0x16c/0x1f0 [ 294.525394][ T8668] should_fail_ex+0x512/0x640 [ 294.525427][ T8668] ? fs_reclaim_acquire+0xae/0x150 [ 294.525465][ T8668] should_failslab+0xc2/0x120 [ 294.525496][ T8668] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 294.525524][ T8668] ? security_inode_alloc+0x3b/0x2b0 [ 294.525552][ T8668] security_inode_alloc+0x3b/0x2b0 [ 294.525575][ T8668] inode_init_always_gfp+0xce4/0x1030 [ 294.525604][ T8668] alloc_inode+0x86/0x240 [ 294.525635][ T8668] sock_alloc+0x40/0x280 [ 294.525667][ T8668] sock_create_lite+0x82/0x120 [ 294.525701][ T8668] __netlink_kernel_create+0xbd/0x750 [ 294.525733][ T8668] ? trace_kmalloc+0x2b/0xd0 [ 294.525765][ T8668] ? __kvmalloc_node_noprof+0x296/0x620 [ 294.525790][ T8668] ? __pfx___netlink_kernel_create+0x10/0x10 [ 294.525822][ T8668] ? fib4_semantics_init+0x25/0x100 [ 294.525857][ T8668] fib_net_init+0x26d/0x3f0 [ 294.525890][ T8668] ? __pfx___register_sysctl_table+0x10/0x10 [ 294.525931][ T8668] ? __pfx_fib_net_init+0x10/0x10 [ 294.525965][ T8668] ? lockdep_init_map_type+0x5c/0x280 [ 294.525989][ T8668] ? __pfx_nl_fib_input+0x10/0x10 [ 294.526028][ T8668] ? devinet_init_net+0x5c2/0x910 [ 294.526068][ T8668] ? __pfx_fib_net_init+0x10/0x10 [ 294.526100][ T8668] ops_init+0x1e2/0x5f0 [ 294.526132][ T8668] setup_net+0x1ff/0x510 [ 294.526161][ T8668] ? lockdep_init_map_type+0x5c/0x280 [ 294.526188][ T8668] ? __pfx_setup_net+0x10/0x10 [ 294.526219][ T8668] ? debug_mutex_init+0x37/0x70 [ 294.526253][ T8668] copy_net_ns+0x2a6/0x5f0 [ 294.526288][ T8668] create_new_namespaces+0x3ea/0xa90 [ 294.526330][ T8668] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 294.526367][ T8668] ksys_unshare+0x45b/0xa40 [ 294.526392][ T8668] ? __pfx_ksys_unshare+0x10/0x10 [ 294.526416][ T8668] ? xfd_validate_state+0x61/0x180 [ 294.526448][ T8668] __x64_sys_unshare+0x31/0x40 [ 294.526470][ T8668] do_syscall_64+0xcd/0x490 [ 294.526500][ T8668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.526523][ T8668] RIP: 0033:0x7f5f4438e969 [ 294.526542][ T8668] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 294.526564][ T8668] RSP: 002b:00007f5f45246038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 294.526585][ T8668] RAX: ffffffffffffffda RBX: 00007f5f445b5fa0 RCX: 00007f5f4438e969 [ 294.526600][ T8668] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 294.526614][ T8668] RBP: 00007f5f44410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 294.526627][ T8668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 294.526641][ T8668] R13: 0000000000000000 R14: 00007f5f445b5fa0 R15: 00007ffed90a55a8 [ 294.526669][ T8668] [ 295.539387][ T8690] FAULT_INJECTION: forcing a failure. [ 295.539387][ T8690] name failslab, interval 1, probability 0, space 0, times 0 [ 295.663954][ T8690] CPU: 0 UID: 0 PID: 8690 Comm: syz.2.640 Tainted: G U 6.15.0-syzkaller-10402-g4cb6c8af8591 #0 PREEMPT(full) [ 295.663994][ T8690] Tainted: [U]=USER [ 295.664002][ T8690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 295.664015][ T8690] Call Trace: [ 295.664023][ T8690] [ 295.664032][ T8690] dump_stack_lvl+0x16c/0x1f0 [ 295.664063][ T8690] should_fail_ex+0x512/0x640 [ 295.664096][ T8690] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 295.664127][ T8690] should_failslab+0xc2/0x120 [ 295.664158][ T8690] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 295.664186][ T8690] ? getname_flags.part.0+0x4c/0x550 [ 295.664224][ T8690] getname_flags.part.0+0x4c/0x550 [ 295.664261][ T8690] __x64_sys_mkdir+0xd8/0x140 [ 295.664287][ T8690] do_syscall_64+0xcd/0x490 [ 295.664318][ T8690] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.664342][ T8690] RIP: 0033:0x7f5f4438e969 [ 295.664360][ T8690] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 295.664382][ T8690] RSP: 002b:00007f5f45225038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 295.664403][ T8690] RAX: ffffffffffffffda RBX: 00007f5f445b6080 RCX: 00007f5f4438e969 [ 295.664418][ T8690] RDX: 0000000000000000 RSI: 0000000000008001 RDI: 0000200000000100 [ 295.664432][ T8690] RBP: 00007f5f44410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 295.664446][ T8690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 295.664459][ T8690] R13: 0000000000000000 R14: 00007f5f445b6080 R15: 00007ffed90a55a8 [ 295.664487][ T8690] [ 296.868126][ T8692] Invalid ELF header magic: != ELF [ 299.092891][ T8737] netlink: 'syz.3.650': attribute type 1 has an invalid length. [ 300.092852][ T8753] netlink: 4 bytes leftover after parsing attributes in process `syz.3.653'. [ 300.164571][ T8753] openvswitch: netlink: Key type 77 is out of range max 32 [ 301.324400][ T8772] can: request_module (can-proto-3) failed. [ 302.916594][ T8796] can: request_module (can-proto-3) failed. [ 303.255030][ T8806] can: request_module (can-proto-3) failed. [ 303.381487][ T8789] Invalid ELF header magic: != ELF [ 304.364371][ T8820] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input11 [ 304.981883][ T5840] Bluetooth: hci3: unexpected subevent 0x01 length: 4 < 18 [ 305.099664][ T30] audit: type=1800 audit(6043733979.719:7): pid=8821 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.666" name="dbroot" dev="configfs" ino=19837 res=0 errno=0 [ 305.988843][ T8831] ======================================================= [ 305.988843][ T8831] WARNING: The mand mount option has been deprecated and [ 305.988843][ T8831] and is ignored by this kernel. Remove the mand [ 305.988843][ T8831] option from the mount to silence this warning. [ 305.988843][ T8831] ======================================================= [ 306.023872][ C0] vkms_vblank_simulate: vblank timer overrun [ 306.095748][ T8822] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input12 [ 307.072264][ T8839] netlink: 4 bytes leftover after parsing attributes in process `syz.1.673'. [ 307.134117][ T8839] openvswitch: netlink: Key type 77 is out of range max 32 [ 307.455279][ T8849] can: request_module (can-proto-3) failed. [ 308.150103][ C0] sd 0:0:1:0: [sda] tag#6171 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 308.160718][ C0] sd 0:0:1:0: [sda] tag#6171 CDB: Write(6) 0a 00 00 00 0b 00 00 00 f2 ff ff ff [ 309.414027][ T8885] Setting dangerous option i915.mitigations - tainting kernel [ 310.235622][ T8890] netlink: 4 bytes leftover after parsing attributes in process `syz.0.685'. [ 310.303582][ T8890] openvswitch: netlink: Key type 77 is out of range max 32 [ 310.986066][ T8903] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input13 [ 311.027586][ T8905] FAULT_INJECTION: forcing a failure. [ 311.027586][ T8905] name failslab, interval 1, probability 0, space 0, times 0 [ 311.097474][ T8905] CPU: 0 UID: 0 PID: 8905 Comm: syz.2.688 Tainted: G U 6.15.0-syzkaller-10402-g4cb6c8af8591 #0 PREEMPT(full) [ 311.097516][ T8905] Tainted: [U]=USER [ 311.097523][ T8905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 311.097537][ T8905] Call Trace: [ 311.097545][ T8905] [ 311.097567][ T8905] dump_stack_lvl+0x16c/0x1f0 [ 311.097599][ T8905] should_fail_ex+0x512/0x640 [ 311.097633][ T8905] ? fs_reclaim_acquire+0xae/0x150 [ 311.097672][ T8905] ? tomoyo_encode2+0x100/0x3e0 [ 311.097701][ T8905] should_failslab+0xc2/0x120 [ 311.097751][ T8905] __kmalloc_noprof+0xd2/0x510 [ 311.097787][ T8905] tomoyo_encode2+0x100/0x3e0 [ 311.097822][ T8905] tomoyo_encode+0x29/0x50 [ 311.097852][ T8905] tomoyo_path_perm+0x3a5/0x460 [ 311.097881][ T8905] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 311.097921][ T8905] ? d_add+0x47a/0x780 [ 311.097966][ T8905] ? __pfx_current_check_access_path+0x10/0x10 [ 311.097996][ T8905] ? lookup_one_qstr_excl_raw.part.0+0xf9/0x160 [ 311.098031][ T8905] ? lookup_dcache+0x66/0x170 [ 311.098076][ T8905] tomoyo_path_symlink+0x97/0xe0 [ 311.098113][ T8905] ? __pfx_tomoyo_path_symlink+0x10/0x10 [ 311.098148][ T8905] ? find_held_lock+0x2b/0x80 [ 311.098181][ T8905] ? __might_fault+0xe3/0x190 [ 311.098213][ T8905] security_path_symlink+0x152/0x2e0 [ 311.098241][ T8905] do_symlinkat+0x10d/0x310 [ 311.098271][ T8905] ? __pfx_do_symlinkat+0x10/0x10 [ 311.098301][ T8905] ? getname_flags.part.0+0x1c5/0x550 [ 311.098342][ T8905] __x64_sys_symlink+0x75/0x90 [ 311.098372][ T8905] do_syscall_64+0xcd/0x490 [ 311.098413][ T8905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.098438][ T8905] RIP: 0033:0x7f5f4438e969 [ 311.098457][ T8905] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 311.098480][ T8905] RSP: 002b:00007f5f45246038 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 311.098503][ T8905] RAX: ffffffffffffffda RBX: 00007f5f445b5fa0 RCX: 00007f5f4438e969 [ 311.098518][ T8905] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 311.098533][ T8905] RBP: 00007f5f44410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 311.098548][ T8905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 311.098562][ T8905] R13: 0000000000000000 R14: 00007f5f445b5fa0 R15: 00007ffed90a55a8 [ 311.098592][ T8905] [ 311.336586][ C0] vkms_vblank_simulate: vblank timer overrun [ 312.446444][ T8906] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input14 [ 317.356378][ T8971] can: request_module (can-proto-3) failed. [ 318.228668][ T8990] can: request_module (can-proto-3) failed. [ 320.294168][ T9028] can: request_module (can-proto-3) failed. [ 321.773705][ T9042] binder: BINDER_SET_CONTEXT_MGR already set [ 321.914053][ T9042] binder: 9034:9042 ioctl 40046207 0 returned -16 [ 322.156839][ T9048] FAULT_INJECTION: forcing a failure. [ 322.156839][ T9048] name failslab, interval 1, probability 0, space 0, times 0 [ 322.218759][ T9048] CPU: 0 UID: 0 PID: 9048 Comm: syz.3.720 Tainted: G U 6.15.0-syzkaller-10402-g4cb6c8af8591 #0 PREEMPT(full) [ 322.218799][ T9048] Tainted: [U]=USER [ 322.218807][ T9048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 322.218821][ T9048] Call Trace: [ 322.218828][ T9048] [ 322.218837][ T9048] dump_stack_lvl+0x16c/0x1f0 [ 322.218868][ T9048] should_fail_ex+0x512/0x640 [ 322.218903][ T9048] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 322.218935][ T9048] should_failslab+0xc2/0x120 [ 322.218966][ T9048] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 322.218993][ T9048] ? __proc_create+0xc3/0x8c0 [ 322.219022][ T9048] ? __proc_create+0x2ce/0x8c0 [ 322.219056][ T9048] __proc_create+0x2ce/0x8c0 [ 322.219098][ T9048] ? __pfx___proc_create+0x10/0x10 [ 322.219131][ T9048] ? _raw_write_unlock+0x28/0x50 [ 322.219154][ T9048] ? proc_register+0x314/0x5f0 [ 322.219187][ T9048] proc_create_reg+0x7d/0x180 [ 322.219218][ T9048] ? __pfx_fib_triestat_seq_show+0x10/0x10 [ 322.219250][ T9048] proc_create_net_single+0x86/0x170 [ 322.219281][ T9048] ? __pfx_proc_create_net_single+0x10/0x10 [ 322.219312][ T9048] ? __pfx___netlink_kernel_create+0x10/0x10 [ 322.219345][ T9048] ? fib4_semantics_init+0x25/0x100 [ 322.219381][ T9048] fib_proc_init+0xa3/0x1b0 [ 322.219412][ T9048] fib_net_init+0x2af/0x3f0 [ 322.219453][ T9048] ? __pfx___register_sysctl_table+0x10/0x10 [ 322.219484][ T9048] ? __pfx_fib_net_init+0x10/0x10 [ 322.219517][ T9048] ? lockdep_init_map_type+0x5c/0x280 [ 322.219542][ T9048] ? __pfx_nl_fib_input+0x10/0x10 [ 322.219580][ T9048] ? devinet_init_net+0x5c2/0x910 [ 322.219619][ T9048] ? __pfx_fib_net_init+0x10/0x10 [ 322.219651][ T9048] ops_init+0x1e2/0x5f0 [ 322.219684][ T9048] setup_net+0x1ff/0x510 [ 322.219724][ T9048] ? lockdep_init_map_type+0x5c/0x280 [ 322.219746][ T9048] ? __pfx_setup_net+0x10/0x10 [ 322.219775][ T9048] ? debug_mutex_init+0x37/0x70 [ 322.219806][ T9048] copy_net_ns+0x2a6/0x5f0 [ 322.219839][ T9048] create_new_namespaces+0x3ea/0xa90 [ 322.219877][ T9048] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 322.219911][ T9048] ksys_unshare+0x45b/0xa40 [ 322.219934][ T9048] ? __pfx_ksys_unshare+0x10/0x10 [ 322.219956][ T9048] ? xfd_validate_state+0x61/0x180 [ 322.219986][ T9048] __x64_sys_unshare+0x31/0x40 [ 322.220007][ T9048] do_syscall_64+0xcd/0x490 [ 322.220034][ T9048] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.220056][ T9048] RIP: 0033:0x7f8d8178e969 [ 322.220073][ T9048] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 322.220093][ T9048] RSP: 002b:00007f8d8267b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 322.220113][ T9048] RAX: ffffffffffffffda RBX: 00007f8d819b5fa0 RCX: 00007f8d8178e969 [ 322.220126][ T9048] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 322.220139][ T9048] RBP: 00007f8d81810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 322.220152][ T9048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 322.220165][ T9048] R13: 0000000000000000 R14: 00007f8d819b5fa0 R15: 00007ffd363361e8 [ 322.220191][ T9048] [ 322.529177][ C0] vkms_vblank_simulate: vblank timer overrun [ 322.668559][ T9051] can: request_module (can-proto-3) failed. [ 323.526404][ T9063] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 323.632790][ T9063] netlink: 28 bytes leftover after parsing attributes in process `syz.1.722'. [ 324.737792][ T9080] program syz.2.726 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 324.863911][ T9080] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 324.890811][ T9085] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input15 [ 325.523268][ T9088] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input16 [ 327.067785][ T9113] binder: BINDER_SET_CONTEXT_MGR already set [ 327.212660][ T9113] binder: 9101:9113 ioctl 40046207 0 returned -16 [ 327.491089][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 327.504704][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 328.432740][ T9136] FAULT_INJECTION: forcing a failure. [ 328.432740][ T9136] name failslab, interval 1, probability 0, space 0, times 0 [ 328.520610][ T9136] CPU: 0 UID: 0 PID: 9136 Comm: syz.3.739 Tainted: G U 6.15.0-syzkaller-10402-g4cb6c8af8591 #0 PREEMPT(full) [ 328.520648][ T9136] Tainted: [U]=USER [ 328.520655][ T9136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 328.520668][ T9136] Call Trace: [ 328.520675][ T9136] [ 328.520683][ T9136] dump_stack_lvl+0x16c/0x1f0 [ 328.520713][ T9136] should_fail_ex+0x512/0x640 [ 328.520744][ T9136] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 328.520772][ T9136] should_failslab+0xc2/0x120 [ 328.520801][ T9136] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 328.520833][ T9136] ? d_instantiate+0x77/0x90 [ 328.520859][ T9136] ? alloc_empty_file+0x55/0x1e0 [ 328.520893][ T9136] alloc_empty_file+0x55/0x1e0 [ 328.520924][ T9136] alloc_file_pseudo+0x13a/0x230 [ 328.520957][ T9136] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 328.520996][ T9136] sock_alloc_file+0x50/0x210 [ 328.521027][ T9136] do_accept+0x240/0x530 [ 328.521047][ T9136] ? do_raw_spin_lock+0x12c/0x2b0 [ 328.521074][ T9136] ? __pfx_do_accept+0x10/0x10 [ 328.521112][ T9136] __sys_accept4+0x100/0x1c0 [ 328.521154][ T9136] ? __pfx___sys_accept4+0x10/0x10 [ 328.521175][ T9136] ? ksys_write+0x1ac/0x250 [ 328.521198][ T9136] ? __pfx_ksys_write+0x10/0x10 [ 328.521228][ T9136] __x64_sys_accept+0x74/0xb0 [ 328.521249][ T9136] ? lockdep_hardirqs_on+0x7c/0x110 [ 328.521274][ T9136] do_syscall_64+0xcd/0x490 [ 328.521304][ T9136] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.521327][ T9136] RIP: 0033:0x7f8d8178e969 [ 328.521345][ T9136] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 328.521367][ T9136] RSP: 002b:00007f8d8267b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002b [ 328.521388][ T9136] RAX: ffffffffffffffda RBX: 00007f8d819b5fa0 RCX: 00007f8d8178e969 [ 328.521404][ T9136] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 328.521417][ T9136] RBP: 00007f8d8267b090 R08: 0000000000000000 R09: 0000000000000000 [ 328.521431][ T9136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 328.521445][ T9136] R13: 0000000000000000 R14: 00007f8d819b5fa0 R15: 00007ffd363361e8 [ 328.521473][ T9136] [ 328.739995][ C0] vkms_vblank_simulate: vblank timer overrun [ 328.783259][ T9139] FAULT_INJECTION: forcing a failure. [ 328.783259][ T9139] name failslab, interval 1, probability 0, space 0, times 0 [ 328.797503][ T9139] CPU: 0 UID: 0 PID: 9139 Comm: syz.1.740 Tainted: G U 6.15.0-syzkaller-10402-g4cb6c8af8591 #0 PREEMPT(full) [ 328.797540][ T9139] Tainted: [U]=USER [ 328.797548][ T9139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 328.797561][ T9139] Call Trace: [ 328.797569][ T9139] [ 328.797577][ T9139] dump_stack_lvl+0x16c/0x1f0 [ 328.797610][ T9139] should_fail_ex+0x512/0x640 [ 328.797643][ T9139] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 328.797675][ T9139] should_failslab+0xc2/0x120 [ 328.797706][ T9139] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 328.797733][ T9139] ? __proc_create+0xc3/0x8c0 [ 328.797762][ T9139] ? __proc_create+0x2ce/0x8c0 [ 328.797802][ T9139] __proc_create+0x2ce/0x8c0 [ 328.797833][ T9139] ? __pfx___proc_create+0x10/0x10 [ 328.797868][ T9139] ? mark_held_locks+0x49/0x80 [ 328.797896][ T9139] proc_create_reg+0x7d/0x180 [ 328.797930][ T9139] proc_create_net_data+0x8e/0x1b0 [ 328.797962][ T9139] ? __pfx_proc_create_net_data+0x10/0x10 [ 328.797994][ T9139] ? __pfx___netlink_kernel_create+0x10/0x10 [ 328.798029][ T9139] ? fib4_semantics_init+0x25/0x100 [ 328.798063][ T9139] fib_proc_init+0x58/0x1b0 [ 328.798096][ T9139] fib_net_init+0x2af/0x3f0 [ 328.798130][ T9139] ? __pfx___register_sysctl_table+0x10/0x10 [ 328.798162][ T9139] ? __pfx_fib_net_init+0x10/0x10 [ 328.798197][ T9139] ? lockdep_init_map_type+0x5c/0x280 [ 328.798222][ T9139] ? __pfx_nl_fib_input+0x10/0x10 [ 328.798262][ T9139] ? devinet_init_net+0x5c2/0x910 [ 328.798303][ T9139] ? __pfx_fib_net_init+0x10/0x10 [ 328.798337][ T9139] ops_init+0x1e2/0x5f0 [ 328.798371][ T9139] setup_net+0x1ff/0x510 [ 328.798400][ T9139] ? lockdep_init_map_type+0x5c/0x280 [ 328.798424][ T9139] ? __pfx_setup_net+0x10/0x10 [ 328.798457][ T9139] ? debug_mutex_init+0x37/0x70 [ 328.798491][ T9139] copy_net_ns+0x2a6/0x5f0 [ 328.798528][ T9139] create_new_namespaces+0x3ea/0xa90 [ 328.798574][ T9139] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 328.798612][ T9139] ksys_unshare+0x45b/0xa40 [ 328.798637][ T9139] ? __pfx_ksys_unshare+0x10/0x10 [ 328.798663][ T9139] ? xfd_validate_state+0x61/0x180 [ 328.798696][ T9139] __x64_sys_unshare+0x31/0x40 [ 328.798720][ T9139] do_syscall_64+0xcd/0x490 [ 328.798751][ T9139] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.798775][ T9139] RIP: 0033:0x7fb30998e969 [ 328.798798][ T9139] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 328.798821][ T9139] RSP: 002b:00007fb30a765038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 328.798855][ T9139] RAX: ffffffffffffffda RBX: 00007fb309bb5fa0 RCX: 00007fb30998e969 [ 328.798870][ T9139] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 328.798884][ T9139] RBP: 00007fb309a10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 328.798897][ T9139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 328.798911][ T9139] R13: 0000000000000000 R14: 00007fb309bb5fa0 R15: 00007ffe4da300e8 [ 328.798939][ T9139] [ 329.094951][ C0] vkms_vblank_simulate: vblank timer overrun [ 329.217082][ T9143] can: request_module (can-proto-3) failed. [ 331.881552][ T9169] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 331.994080][ T9169] netlink: 28 bytes leftover after parsing attributes in process `syz.2.747'. [ 332.080354][ T9175] FAULT_INJECTION: forcing a failure. [ 332.080354][ T9175] name failslab, interval 1, probability 0, space 0, times 0 [ 332.117698][ T9169] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 332.136073][ T9175] CPU: 0 UID: 0 PID: 9175 Comm: syz.3.749 Tainted: G U 6.15.0-syzkaller-10402-g4cb6c8af8591 #0 PREEMPT(full) [ 332.136112][ T9175] Tainted: [U]=USER [ 332.136119][ T9175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 332.136134][ T9175] Call Trace: [ 332.136141][ T9175] [ 332.136150][ T9175] dump_stack_lvl+0x16c/0x1f0 [ 332.136182][ T9175] should_fail_ex+0x512/0x640 [ 332.136217][ T9175] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 332.136249][ T9175] should_failslab+0xc2/0x120 [ 332.136280][ T9175] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 332.136309][ T9175] ? unwind_get_return_address+0x59/0xa0 [ 332.136338][ T9175] ? __d_alloc+0x31/0xaa0 [ 332.136370][ T9175] __d_alloc+0x31/0xaa0 [ 332.136400][ T9175] d_alloc+0x4a/0x1e0 [ 332.136429][ T9175] d_alloc_parallel+0xe3/0x12e0 [ 332.136466][ T9175] ? stack_trace_save+0x8e/0xc0 [ 332.136511][ T9175] ? __pfx_d_alloc_parallel+0x10/0x10 [ 332.136549][ T9175] ? lockdep_init_map_type+0x5c/0x280 [ 332.136583][ T9175] ? lockdep_init_map_type+0x5c/0x280 [ 332.136616][ T9175] __lookup_slow+0x193/0x460 [ 332.136652][ T9175] ? __pfx___lookup_slow+0x10/0x10 [ 332.136705][ T9175] ? lookup_fast+0x156/0x610 [ 332.136730][ T9175] walk_component+0x353/0x5b0 [ 332.136754][ T9175] link_path_walk+0x627/0xe20 [ 332.136787][ T9175] path_openat+0x1b0/0x2cb0 [ 332.136810][ T9175] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.136844][ T9175] ? __pfx_path_openat+0x10/0x10 [ 332.136872][ T9175] ? __lock_acquire+0xb8a/0x1c90 [ 332.136898][ T9175] do_filp_open+0x20b/0x470 [ 332.136924][ T9175] ? __pfx_do_filp_open+0x10/0x10 [ 332.136971][ T9175] ? alloc_fd+0x471/0x7d0 [ 332.137002][ T9175] do_sys_openat2+0x11b/0x1d0 [ 332.137036][ T9175] ? __pfx_do_sys_openat2+0x10/0x10 [ 332.137069][ T9175] ? fput+0x70/0xf0 [ 332.137099][ T9175] ? __sys_connect+0xe0/0x160 [ 332.137131][ T9175] __x64_sys_openat+0x174/0x210 [ 332.137166][ T9175] ? __pfx___x64_sys_openat+0x10/0x10 [ 332.137213][ T9175] do_syscall_64+0xcd/0x490 [ 332.137244][ T9175] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.137267][ T9175] RIP: 0033:0x7f8d8178e969 [ 332.137286][ T9175] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 332.137308][ T9175] RSP: 002b:00007f8d8265a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 332.137330][ T9175] RAX: ffffffffffffffda RBX: 00007f8d819b6080 RCX: 00007f8d8178e969 [ 332.137345][ T9175] RDX: 0000000000169381 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 332.137360][ T9175] RBP: 00007f8d81810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 332.137374][ T9175] R10: 0000000000000149 R11: 0000000000000246 R12: 0000000000000000 [ 332.137388][ T9175] R13: 0000000000000000 R14: 00007f8d819b6080 R15: 00007ffd363361e8 [ 332.137418][ T9175] [ 332.418871][ C0] vkms_vblank_simulate: vblank timer overrun [ 332.732723][ T9169] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 332.771379][ T9169] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 332.804445][ T9169] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 333.233432][ T9184] FAULT_INJECTION: forcing a failure. [ 333.233432][ T9184] name failslab, interval 1, probability 0, space 0, times 0 [ 333.334114][ T9184] CPU: 0 UID: 0 PID: 9184 Comm: syz.0.751 Tainted: G U 6.15.0-syzkaller-10402-g4cb6c8af8591 #0 PREEMPT(full) [ 333.334154][ T9184] Tainted: [U]=USER [ 333.334162][ T9184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 333.334176][ T9184] Call Trace: [ 333.334184][ T9184] [ 333.334192][ T9184] dump_stack_lvl+0x16c/0x1f0 [ 333.334225][ T9184] should_fail_ex+0x512/0x640 [ 333.334260][ T9184] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 333.334293][ T9184] should_failslab+0xc2/0x120 [ 333.334324][ T9184] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 333.334351][ T9184] ? __proc_create+0xc3/0x8c0 [ 333.334388][ T9184] ? __proc_create+0x2ce/0x8c0 [ 333.334421][ T9184] __proc_create+0x2ce/0x8c0 [ 333.334452][ T9184] ? __pfx___proc_create+0x10/0x10 [ 333.334487][ T9184] ? _raw_write_unlock+0x28/0x50 [ 333.334517][ T9184] ? proc_register+0x314/0x5f0 [ 333.334557][ T9184] proc_create_reg+0x7d/0x180 [ 333.334601][ T9184] ? __pfx_fib_triestat_seq_show+0x10/0x10 [ 333.334633][ T9184] proc_create_net_single+0x86/0x170 [ 333.334664][ T9184] ? __pfx_proc_create_net_single+0x10/0x10 [ 333.334701][ T9184] ? __pfx___netlink_kernel_create+0x10/0x10 [ 333.334737][ T9184] ? fib4_semantics_init+0x25/0x100 [ 333.334770][ T9184] fib_proc_init+0xa3/0x1b0 [ 333.334801][ T9184] fib_net_init+0x2af/0x3f0 [ 333.334834][ T9184] ? __pfx___register_sysctl_table+0x10/0x10 [ 333.334864][ T9184] ? __pfx_fib_net_init+0x10/0x10 [ 333.334897][ T9184] ? lockdep_init_map_type+0x5c/0x280 [ 333.334921][ T9184] ? __pfx_nl_fib_input+0x10/0x10 [ 333.334959][ T9184] ? devinet_init_net+0x5c2/0x910 [ 333.334998][ T9184] ? __pfx_fib_net_init+0x10/0x10 [ 333.335031][ T9184] ops_init+0x1e2/0x5f0 [ 333.335063][ T9184] setup_net+0x1ff/0x510 [ 333.335091][ T9184] ? lockdep_init_map_type+0x5c/0x280 [ 333.335120][ T9184] ? __pfx_setup_net+0x10/0x10 [ 333.335152][ T9184] ? debug_mutex_init+0x37/0x70 [ 333.335185][ T9184] copy_net_ns+0x2a6/0x5f0 [ 333.335234][ T9184] create_new_namespaces+0x3ea/0xa90 [ 333.335276][ T9184] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 333.335314][ T9184] ksys_unshare+0x45b/0xa40 [ 333.335338][ T9184] ? __pfx_ksys_unshare+0x10/0x10 [ 333.335363][ T9184] ? xfd_validate_state+0x61/0x180 [ 333.335404][ T9184] __x64_sys_unshare+0x31/0x40 [ 333.335427][ T9184] do_syscall_64+0xcd/0x490 [ 333.335458][ T9184] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.335481][ T9184] RIP: 0033:0x7f64fbf8e969 [ 333.335500][ T9184] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 333.335522][ T9184] RSP: 002b:00007f64fce42038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 333.335543][ T9184] RAX: ffffffffffffffda RBX: 00007f64fc1b5fa0 RCX: 00007f64fbf8e969 [ 333.335558][ T9184] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 333.335572][ T9184] RBP: 00007f64fc010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 333.335585][ T9184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 333.335599][ T9184] R13: 0000000000000000 R14: 00007f64fc1b5fa0 R15: 00007ffe594258e8 [ 333.335627][ T9184] [ 333.685705][ T9189] FAULT_INJECTION: forcing a failure. [ 333.685705][ T9189] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 333.698914][ T9189] CPU: 0 UID: 0 PID: 9189 Comm: syz.1.753 Tainted: G U 6.15.0-syzkaller-10402-g4cb6c8af8591 #0 PREEMPT(full) [ 333.698948][ T9189] Tainted: [U]=USER [ 333.698955][ T9189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 333.698968][ T9189] Call Trace: [ 333.698975][ T9189] [ 333.698983][ T9189] dump_stack_lvl+0x16c/0x1f0 [ 333.699013][ T9189] should_fail_ex+0x512/0x640 [ 333.699050][ T9189] _copy_from_user+0x2e/0xd0 [ 333.699086][ T9189] copy_msghdr_from_user+0x98/0x160 [ 333.699114][ T9189] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 333.699155][ T9189] ___sys_sendmsg+0xfe/0x1d0 [ 333.699183][ T9189] ? __pfx____sys_sendmsg+0x10/0x10 [ 333.699208][ T9189] ? __lock_acquire+0x622/0x1c90 [ 333.699264][ T9189] __sys_sendmsg+0x16d/0x220 [ 333.699291][ T9189] ? __pfx___sys_sendmsg+0x10/0x10 [ 333.699336][ T9189] do_syscall_64+0xcd/0x490 [ 333.699365][ T9189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.699393][ T9189] RIP: 0033:0x7fb30998e969 [ 333.699411][ T9189] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 333.699433][ T9189] RSP: 002b:00007fb30a765038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 333.699453][ T9189] RAX: ffffffffffffffda RBX: 00007fb309bb5fa0 RCX: 00007fb30998e969 [ 333.699469][ T9189] RDX: 0000000024048804 RSI: 00002000000015c0 RDI: 0000000000000003 [ 333.699483][ T9189] RBP: 00007fb30a765090 R08: 0000000000000000 R09: 0000000000000000 [ 333.699497][ T9189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 333.699529][ T9189] R13: 0000000000000000 R14: 00007fb309bb5fa0 R15: 00007ffe4da300e8 [ 333.699558][ T9189] [ 336.250373][ T30] audit: type=1800 audit(6043734010.869:8): pid=9227 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.762" name="dummy_udc" dev="gadgetfs" ino=6244 res=0 errno=0 [ 336.566185][ T9233] FAULT_INJECTION: forcing a failure. [ 336.566185][ T9233] name failslab, interval 1, probability 0, space 0, times 0 [ 336.650008][ T9233] CPU: 0 UID: 0 PID: 9233 Comm: syz.0.763 Tainted: G U 6.15.0-syzkaller-10402-g4cb6c8af8591 #0 PREEMPT(full) [ 336.650047][ T9233] Tainted: [U]=USER [ 336.650074][ T9233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 336.650097][ T9233] Call Trace: [ 336.650105][ T9233] [ 336.650114][ T9233] dump_stack_lvl+0x16c/0x1f0 [ 336.650145][ T9233] should_fail_ex+0x512/0x640 [ 336.650179][ T9233] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 336.650211][ T9233] should_failslab+0xc2/0x120 [ 336.650242][ T9233] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 336.650270][ T9233] ? __proc_create+0xc3/0x8c0 [ 336.650299][ T9233] ? __proc_create+0x2ce/0x8c0 [ 336.650333][ T9233] __proc_create+0x2ce/0x8c0 [ 336.650364][ T9233] ? __pfx___proc_create+0x10/0x10 [ 336.650399][ T9233] ? _raw_write_unlock+0x28/0x50 [ 336.650423][ T9233] ? proc_register+0x314/0x5f0 [ 336.650457][ T9233] proc_create_reg+0x7d/0x180 [ 336.650491][ T9233] proc_create_seq_private+0x8e/0x1d0 [ 336.650525][ T9233] ? __pfx_proc_create_seq_private+0x10/0x10 [ 336.650559][ T9233] ? __pfx_nl_fib_input+0x10/0x10 [ 336.650601][ T9233] ? __pfx_ip_rt_do_proc_init+0x10/0x10 [ 336.650640][ T9233] ip_rt_do_proc_init+0xac/0x1b0 [ 336.650679][ T9233] ops_init+0x1e2/0x5f0 [ 336.650713][ T9233] setup_net+0x1ff/0x510 [ 336.650742][ T9233] ? lockdep_init_map_type+0x5c/0x280 [ 336.650768][ T9233] ? __pfx_setup_net+0x10/0x10 [ 336.650801][ T9233] ? debug_mutex_init+0x37/0x70 [ 336.650835][ T9233] copy_net_ns+0x2a6/0x5f0 [ 336.650872][ T9233] create_new_namespaces+0x3ea/0xa90 [ 336.650914][ T9233] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 336.650953][ T9233] ksys_unshare+0x45b/0xa40 [ 336.650978][ T9233] ? __pfx_ksys_unshare+0x10/0x10 [ 336.651004][ T9233] ? xfd_validate_state+0x61/0x180 [ 336.651037][ T9233] __x64_sys_unshare+0x31/0x40 [ 336.651060][ T9233] do_syscall_64+0xcd/0x490 [ 336.651097][ T9233] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.651121][ T9233] RIP: 0033:0x7f64fbf8e969 [ 336.651140][ T9233] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 336.651163][ T9233] RSP: 002b:00007f64fce42038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 336.651185][ T9233] RAX: ffffffffffffffda RBX: 00007f64fc1b5fa0 RCX: 00007f64fbf8e969 [ 336.651201][ T9233] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 336.651216][ T9233] RBP: 00007f64fc010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 336.651230][ T9233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 336.651257][ T9233] R13: 0000000000000000 R14: 00007f64fc1b5fa0 R15: 00007ffe594258e8 [ 336.651286][ T9233] [ 336.915799][ C0] vkms_vblank_simulate: vblank timer overrun [ 337.443828][ T30] audit: type=1800 audit(6043734012.009:9): pid=9238 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.766" name="members" dev="configfs" ino=21292 res=0 errno=0 [ 337.492369][ T9239] serio: Serial port pty233 [ 338.606553][ T9249] FAULT_INJECTION: forcing a failure. [ 338.606553][ T9249] name failslab, interval 1, probability 0, space 0, times 0 [ 338.777221][ T9249] CPU: 0 UID: 0 PID: 9249 Comm: syz.2.770 Tainted: G U 6.15.0-syzkaller-10402-g4cb6c8af8591 #0 PREEMPT(full) [ 338.777261][ T9249] Tainted: [U]=USER [ 338.777269][ T9249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 338.777284][ T9249] Call Trace: [ 338.777292][ T9249] [ 338.777301][ T9249] dump_stack_lvl+0x16c/0x1f0 [ 338.777333][ T9249] should_fail_ex+0x512/0x640 [ 338.777368][ T9249] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 338.777401][ T9249] should_failslab+0xc2/0x120 [ 338.777432][ T9249] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 338.777460][ T9249] ? unwind_get_return_address+0x59/0xa0 [ 338.777490][ T9249] ? __d_alloc+0x31/0xaa0 [ 338.777522][ T9249] __d_alloc+0x31/0xaa0 [ 338.777553][ T9249] d_alloc+0x4a/0x1e0 [ 338.777582][ T9249] d_alloc_parallel+0xe3/0x12e0 [ 338.777619][ T9249] ? stack_trace_save+0x8e/0xc0 [ 338.777664][ T9249] ? __pfx_d_alloc_parallel+0x10/0x10 [ 338.777702][ T9249] ? lockdep_init_map_type+0x5c/0x280 [ 338.777729][ T9249] ? lockdep_init_map_type+0x5c/0x280 [ 338.777759][ T9249] __lookup_slow+0x193/0x460 [ 338.777798][ T9249] ? __pfx___lookup_slow+0x10/0x10 [ 338.777852][ T9249] ? lookup_fast+0x156/0x610 [ 338.777877][ T9249] walk_component+0x353/0x5b0 [ 338.777910][ T9249] link_path_walk+0x627/0xe20 [ 338.777944][ T9249] path_openat+0x1b0/0x2cb0 [ 338.777967][ T9249] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.778002][ T9249] ? __pfx_path_openat+0x10/0x10 [ 338.778030][ T9249] ? __lock_acquire+0xb8a/0x1c90 [ 338.778070][ T9249] do_filp_open+0x20b/0x470 [ 338.778096][ T9249] ? __pfx_do_filp_open+0x10/0x10 [ 338.778141][ T9249] ? alloc_fd+0x471/0x7d0 [ 338.778171][ T9249] do_sys_openat2+0x11b/0x1d0 [ 338.778205][ T9249] ? __pfx_do_sys_openat2+0x10/0x10 [ 338.778236][ T9249] ? fput+0x70/0xf0 [ 338.778269][ T9249] ? __sys_connect+0xe0/0x160 [ 338.778300][ T9249] __x64_sys_openat+0x174/0x210 [ 338.778334][ T9249] ? __pfx___x64_sys_openat+0x10/0x10 [ 338.778380][ T9249] do_syscall_64+0xcd/0x490 [ 338.778410][ T9249] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.778433][ T9249] RIP: 0033:0x7f5f4438e969 [ 338.778451][ T9249] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 338.778474][ T9249] RSP: 002b:00007f5f45225038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 338.778495][ T9249] RAX: ffffffffffffffda RBX: 00007f5f445b6080 RCX: 00007f5f4438e969 [ 338.778510][ T9249] RDX: 0000000000169381 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 338.778525][ T9249] RBP: 00007f5f44410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 338.778539][ T9249] R10: 0000000000000149 R11: 0000000000000246 R12: 0000000000000000 [ 338.778553][ T9249] R13: 0000000000000000 R14: 00007f5f445b6080 R15: 00007ffed90a55a8 [ 338.778582][ T9249] [ 339.058261][ C0] vkms_vblank_simulate: vblank timer overrun [ 341.138766][ T9266] netlink: 28 bytes leftover after parsing attributes in process `syz.0.773'. [ 342.323360][ T9281] can: request_module (can-proto-3) failed. [ 344.064800][ T9287] could not allocate digest TFM handle [ 345.163594][ T9317] can: request_module (can-proto-3) failed. [ 345.258121][ T9321] netlink: 28 bytes leftover after parsing attributes in process `syz.3.787'. [ 346.544703][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 346.551093][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 346.566849][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 346.583811][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 346.592804][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 346.599818][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 346.655657][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 346.661988][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 346.748728][ T9342] FAULT_INJECTION: forcing a failure. [ 346.748728][ T9342] name failslab, interval 1, probability 0, space 0, times 0 [ 346.821777][ T9342] CPU: 0 UID: 0 PID: 9342 Comm: syz.3.793 Tainted: G U 6.15.0-syzkaller-10402-g4cb6c8af8591 #0 PREEMPT(full) [ 346.821817][ T9342] Tainted: [U]=USER [ 346.821824][ T9342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 346.821839][ T9342] Call Trace: [ 346.821847][ T9342] [ 346.821855][ T9342] dump_stack_lvl+0x16c/0x1f0 [ 346.821888][ T9342] should_fail_ex+0x512/0x640 [ 346.821923][ T9342] ? __kmalloc_noprof+0xbf/0x510 [ 346.821953][ T9342] ? sk_prot_alloc+0x1a8/0x2a0 [ 346.821986][ T9342] should_failslab+0xc2/0x120 [ 346.822017][ T9342] __kmalloc_noprof+0xd2/0x510 [ 346.822042][ T9342] ? evm_inode_alloc_security+0x49/0xc0 [ 346.822078][ T9342] ? security_inode_alloc+0xcf/0x2b0 [ 346.822105][ T9342] sk_prot_alloc+0x1a8/0x2a0 [ 346.822142][ T9342] sk_alloc+0x36/0xc20 [ 346.822179][ T9342] __netlink_create+0x5e/0x2c0 [ 346.822222][ T9342] __netlink_kernel_create+0xed/0x750 [ 346.822254][ T9342] ? __kvmalloc_node_noprof+0x296/0x620 [ 346.822279][ T9342] ? __pfx___netlink_kernel_create+0x10/0x10 [ 346.822311][ T9342] ? fib4_semantics_init+0x25/0x100 [ 346.822347][ T9342] fib_net_init+0x26d/0x3f0 [ 346.822379][ T9342] ? __pfx___register_sysctl_table+0x10/0x10 [ 346.822430][ T9342] ? __pfx_fib_net_init+0x10/0x10 [ 346.822464][ T9342] ? lockdep_init_map_type+0x5c/0x280 [ 346.822489][ T9342] ? __pfx_nl_fib_input+0x10/0x10 [ 346.822529][ T9342] ? devinet_init_net+0x5c2/0x910 [ 346.822570][ T9342] ? __pfx_fib_net_init+0x10/0x10 [ 346.822603][ T9342] ops_init+0x1e2/0x5f0 [ 346.822636][ T9342] setup_net+0x1ff/0x510 [ 346.822665][ T9342] ? lockdep_init_map_type+0x5c/0x280 [ 346.822689][ T9342] ? __pfx_setup_net+0x10/0x10 [ 346.822722][ T9342] ? debug_mutex_init+0x37/0x70 [ 346.822756][ T9342] copy_net_ns+0x2a6/0x5f0 [ 346.822793][ T9342] create_new_namespaces+0x3ea/0xa90 [ 346.822834][ T9342] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 346.822873][ T9342] ksys_unshare+0x45b/0xa40 [ 346.822897][ T9342] ? __pfx_ksys_unshare+0x10/0x10 [ 346.822923][ T9342] ? xfd_validate_state+0x61/0x180 [ 346.822956][ T9342] __x64_sys_unshare+0x31/0x40 [ 346.822980][ T9342] do_syscall_64+0xcd/0x490 [ 346.823011][ T9342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.823035][ T9342] RIP: 0033:0x7f8d8178e969 [ 346.823054][ T9342] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 346.823078][ T9342] RSP: 002b:00007f8d8267b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 346.823100][ T9342] RAX: ffffffffffffffda RBX: 00007f8d819b5fa0 RCX: 00007f8d8178e969 [ 346.823116][ T9342] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 346.823131][ T9342] RBP: 00007f8d81810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 346.823147][ T9342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 346.823161][ T9342] R13: 0000000000000000 R14: 00007f8d819b5fa0 R15: 00007ffd363361e8 [ 346.823196][ T9342] [ 347.111110][ C0] vkms_vblank_simulate: vblank timer overrun [ 348.007548][ T9360] random: crng reseeded on system resumption [ 350.439974][ T9389] FAULT_INJECTION: forcing a failure. [ 350.439974][ T9389] name failslab, interval 1, probability 0, space 0, times 0 [ 350.565000][ T9389] CPU: 0 UID: 0 PID: 9389 Comm: syz.0.805 Tainted: G U 6.15.0-syzkaller-10402-g4cb6c8af8591 #0 PREEMPT(full) [ 350.565042][ T9389] Tainted: [U]=USER [ 350.565049][ T9389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 350.565064][ T9389] Call Trace: [ 350.565073][ T9389] [ 350.565082][ T9389] dump_stack_lvl+0x16c/0x1f0 [ 350.565116][ T9389] should_fail_ex+0x512/0x640 [ 350.565150][ T9389] ? __kmalloc_cache_node_noprof+0x5a/0x420 [ 350.565181][ T9389] should_failslab+0xc2/0x120 [ 350.565212][ T9389] __kmalloc_cache_node_noprof+0x6d/0x420 [ 350.565240][ T9389] ? __alloc_workqueue+0x694/0x1810 [ 350.565269][ T9389] __alloc_workqueue+0x694/0x1810 [ 350.565301][ T9389] alloc_workqueue+0xd2/0x200 [ 350.565322][ T9389] ? __pfx_alloc_workqueue+0x10/0x10 [ 350.565351][ T9389] ? rcu_is_watching+0x12/0xc0 [ 350.565384][ T9389] ? __kmalloc_noprof+0x242/0x510 [ 350.565410][ T9389] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 350.565444][ T9389] ieee80211_register_hw+0x1e92/0x4140 [ 350.565487][ T9389] ? __debug_object_init+0x1f1/0x3d0 [ 350.565516][ T9389] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 350.565555][ T9389] ? find_held_lock+0x2b/0x80 [ 350.565588][ T9389] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 350.565617][ T9389] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 350.565642][ T9389] ? __hrtimer_setup+0x176/0x280 [ 350.565673][ T9389] mac80211_hwsim_new_radio+0x3034/0x54d0 [ 350.565725][ T9389] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 350.565769][ T9389] hwsim_new_radio_nl+0xb51/0x12c0 [ 350.565817][ T9389] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 350.565860][ T9389] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 350.565904][ T9389] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 350.565952][ T9389] genl_family_rcv_msg_doit+0x206/0x2f0 [ 350.565998][ T9389] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 350.566038][ T9389] ? trace_cap_capable+0x18d/0x200 [ 350.566084][ T9389] ? bpf_lsm_capable+0x9/0x10 [ 350.566107][ T9389] ? security_capable+0x7e/0x260 [ 350.566145][ T9389] ? ns_capable+0xd7/0x110 [ 350.566181][ T9389] genl_rcv_msg+0x55c/0x800 [ 350.566207][ T9389] ? __pfx_genl_rcv_msg+0x10/0x10 [ 350.566229][ T9389] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 350.566273][ T9389] netlink_rcv_skb+0x155/0x420 [ 350.566307][ T9389] ? __pfx_genl_rcv_msg+0x10/0x10 [ 350.566331][ T9389] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 350.566378][ T9389] ? netlink_deliver_tap+0x1ae/0xd30 [ 350.566415][ T9389] genl_rcv+0x28/0x40 [ 350.566450][ T9389] netlink_unicast+0x53d/0x7f0 [ 350.566488][ T9389] ? __pfx_netlink_unicast+0x10/0x10 [ 350.566531][ T9389] netlink_sendmsg+0x8d1/0xdd0 [ 350.566574][ T9389] ? __pfx_netlink_sendmsg+0x10/0x10 [ 350.566626][ T9389] ____sys_sendmsg+0xa95/0xc70 [ 350.566664][ T9389] ? copy_msghdr_from_user+0x10a/0x160 [ 350.566693][ T9389] ? __pfx_____sys_sendmsg+0x10/0x10 [ 350.566738][ T9389] ? __pfx_futex_wake_mark+0x10/0x10 [ 350.566770][ T9389] ___sys_sendmsg+0x134/0x1d0 [ 350.566806][ T9389] ? __pfx____sys_sendmsg+0x10/0x10 [ 350.566833][ T9389] ? __lock_acquire+0x622/0x1c90 [ 350.566894][ T9389] __sys_sendmsg+0x16d/0x220 [ 350.566924][ T9389] ? __pfx___sys_sendmsg+0x10/0x10 [ 350.566953][ T9389] ? __x64_sys_futex+0x1e0/0x4c0 [ 350.566994][ T9389] do_syscall_64+0xcd/0x490 [ 350.567025][ T9389] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.567049][ T9389] RIP: 0033:0x7f64fbf8e969 [ 350.567068][ T9389] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 350.567092][ T9389] RSP: 002b:00007f64fce21038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 350.567114][ T9389] RAX: ffffffffffffffda RBX: 00007f64fc1b6080 RCX: 00007f64fbf8e969 [ 350.567131][ T9389] RDX: 0000000000018800 RSI: 0000200000001400 RDI: 0000000000000007 [ 350.567146][ T9389] RBP: 00007f64fc010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 350.567161][ T9389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 350.567175][ T9389] R13: 0000000000000000 R14: 00007f64fc1b6080 R15: 00007ffe594258e8 [ 350.567205][ T9389] [ 351.639073][ T9390] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 351.646858][ T9390] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 351.653981][ T9390] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 351.660067][ T9390] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 351.868552][ T9402] serio: Serial port pty233 [ 352.605492][ T5843] Bluetooth: hci0: command 0x0c1a tx timeout [ 352.633870][ T9412] can: request_module (can-proto-3) failed. [ 353.805429][ T5840] Bluetooth: hci1: command 0x0c1a tx timeout [ 353.812280][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 353.818921][ T5843] Bluetooth: hci3: command 0x0c1a tx timeout [ 354.816667][ T9458] ima: policy update failed [ 354.822244][ T30] audit: type=1802 audit(6043734029.439:10): pid=9458 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.819" res=0 errno=0 [ 356.772515][ T9490] can: request_module (can-proto-3) failed. [ 357.815418][ T9510] netlink: 28 bytes leftover after parsing attributes in process `syz.0.829'. [ 358.474424][ T30] audit: type=1800 audit(6043734033.089:11): pid=9525 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.830" name="file0" dev="tmpfs" ino=1204 res=0 errno=0 [ 358.812363][ T9528] can: request_module (can-proto-3) failed. [ 359.892066][ T9540] can: request_module (can-proto-3) failed. [ 360.269413][ T9550] : Can't lookup blockdev [ 362.606358][ T9590] can: request_module (can-proto-3) failed. [ 362.753959][ T9597] netlink: 338 bytes leftover after parsing attributes in process `syz.2.848'. [ 363.043924][ T9600] can: request_module (can-proto-3) failed. [ 363.250561][ T9605] openvswitch: netlink: IPv4 tunnel dst address is zero [ 364.416444][ T9618] netlink: 28 bytes leftover after parsing attributes in process `syz.3.851'. [ 364.545597][ T9618] ipvlan0: entered promiscuous mode [ 365.106895][ T9628] can: request_module (can-proto-3) failed. [ 366.424085][ T9651] can: request_module (can-proto-3) failed. [ 367.847861][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 367.854961][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 367.901130][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 367.907565][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 367.927451][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 367.946438][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 367.964472][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 367.970803][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 370.082156][ T9666] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 370.258491][ T9720] netlink: 28 bytes leftover after parsing attributes in process `syz.2.878'. [ 370.334451][ T9720] veth0_macvtap: entered allmulticast mode [ 370.403465][ T9718] can: request_module (can-proto-3) failed. [ 370.989052][ T9731] can: request_module (can-proto-3) failed. [ 371.384665][ T9738] can: request_module (can-proto-3) failed. [ 372.544004][ T9758] Setting dangerous option i915.mitigations - tainting kernel [ 375.283239][ T9777] can: request_module (can-proto-3) failed. [ 375.467551][ T9782] can: request_module (can-proto-3) failed. [ 376.145941][ T30] audit: type=1800 audit(6043734050.769:12): pid=9789 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.885" name="lu_gp_id" dev="configfs" ino=23483 res=0 errno=0 [ 377.074639][ T9804] FAULT_INJECTION: forcing a failure. [ 377.074639][ T9804] name failslab, interval 1, probability 0, space 0, times 0 [ 377.195709][ T9804] CPU: 0 UID: 0 PID: 9804 Comm: syz.1.889 Tainted: G U 6.15.0-syzkaller-10402-g4cb6c8af8591 #0 PREEMPT(full) [ 377.195750][ T9804] Tainted: [U]=USER [ 377.195757][ T9804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 377.195771][ T9804] Call Trace: [ 377.195778][ T9804] [ 377.195788][ T9804] dump_stack_lvl+0x16c/0x1f0 [ 377.195819][ T9804] should_fail_ex+0x512/0x640 [ 377.195853][ T9804] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 377.195884][ T9804] should_failslab+0xc2/0x120 [ 377.195917][ T9804] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 377.195943][ T9804] ? __proc_create+0xc3/0x8c0 [ 377.195972][ T9804] ? __proc_create+0x2ce/0x8c0 [ 377.196003][ T9804] __proc_create+0x2ce/0x8c0 [ 377.196033][ T9804] ? __pfx___proc_create+0x10/0x10 [ 377.196068][ T9804] ? mark_held_locks+0x49/0x80 [ 377.196093][ T9804] proc_create_reg+0x7d/0x180 [ 377.196127][ T9804] proc_create_net_data+0x8e/0x1b0 [ 377.196159][ T9804] ? __pfx_proc_create_net_data+0x10/0x10 [ 377.196190][ T9804] ? __pfx___netlink_kernel_create+0x10/0x10 [ 377.196223][ T9804] ? fib4_semantics_init+0x25/0x100 [ 377.196257][ T9804] fib_proc_init+0x58/0x1b0 [ 377.196289][ T9804] fib_net_init+0x2af/0x3f0 [ 377.196323][ T9804] ? __pfx___register_sysctl_table+0x10/0x10 [ 377.196354][ T9804] ? __pfx_fib_net_init+0x10/0x10 [ 377.196406][ T9804] ? lockdep_init_map_type+0x5c/0x280 [ 377.196429][ T9804] ? __pfx_nl_fib_input+0x10/0x10 [ 377.196465][ T9804] ? devinet_init_net+0x5c2/0x910 [ 377.196502][ T9804] ? __pfx_fib_net_init+0x10/0x10 [ 377.196533][ T9804] ops_init+0x1e2/0x5f0 [ 377.196565][ T9804] setup_net+0x1ff/0x510 [ 377.196591][ T9804] ? lockdep_init_map_type+0x5c/0x280 [ 377.196613][ T9804] ? __pfx_setup_net+0x10/0x10 [ 377.196642][ T9804] ? debug_mutex_init+0x37/0x70 [ 377.196674][ T9804] copy_net_ns+0x2a6/0x5f0 [ 377.196706][ T9804] create_new_namespaces+0x3ea/0xa90 [ 377.196745][ T9804] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 377.196779][ T9804] ksys_unshare+0x45b/0xa40 [ 377.196802][ T9804] ? __pfx_ksys_unshare+0x10/0x10 [ 377.196825][ T9804] ? xfd_validate_state+0x61/0x180 [ 377.196855][ T9804] __x64_sys_unshare+0x31/0x40 [ 377.196876][ T9804] do_syscall_64+0xcd/0x490 [ 377.196904][ T9804] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.196926][ T9804] RIP: 0033:0x7fb30998e969 [ 377.196942][ T9804] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 377.196964][ T9804] RSP: 002b:00007fb30a765038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 377.196983][ T9804] RAX: ffffffffffffffda RBX: 00007fb309bb5fa0 RCX: 00007fb30998e969 [ 377.196999][ T9804] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 377.197012][ T9804] RBP: 00007fb309a10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 377.197025][ T9804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 377.197038][ T9804] R13: 0000000000000000 R14: 00007fb309bb5fa0 R15: 00007ffe4da300e8 [ 377.197065][ T9804] [ 377.991311][ T9809] vivid-003: ================= START STATUS ================= [ 378.012999][ T9809] vivid-003: Radio HW Seek Mode: Bounded [ 378.029769][ T9809] vivid-003: Radio Programmable HW Seek: false [ 378.039873][ T9809] vivid-003: RDS Rx I/O Mode: Block I/O [ 378.053828][ T9809] vivid-003: Generate RBDS Instead of RDS: false [ 378.088742][ T9809] vivid-003: RDS Reception: true [ 378.104551][ T9809] vivid-003: RDS Program Type: 0 inactive [ 378.124125][ T9809] vivid-003: RDS PS Name: inactive [ 378.129497][ T9809] vivid-003: RDS Radio Text: inactive [ 378.152112][ T9809] vivid-003: RDS Traffic Announcement: false inactive [ 378.162600][ T9809] vivid-003: RDS Traffic Program: false inactive [ 378.193264][ T9809] vivid-003: RDS Music: false inactive [ 378.211244][ T9809] vivid-003: ================== END STATUS ================== [ 379.287003][ T9825] can: request_module (can-proto-3) failed. [ 382.304698][ T9860] FAULT_INJECTION: forcing a failure. [ 382.304698][ T9860] name failslab, interval 1, probability 0, space 0, times 0 [ 382.379419][ T9860] CPU: 0 UID: 0 PID: 9860 Comm: syz.3.903 Tainted: G U 6.15.0-syzkaller-10402-g4cb6c8af8591 #0 PREEMPT(full) [ 382.379461][ T9860] Tainted: [U]=USER [ 382.379469][ T9860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 382.379483][ T9860] Call Trace: [ 382.379491][ T9860] [ 382.379499][ T9860] dump_stack_lvl+0x16c/0x1f0 [ 382.379531][ T9860] should_fail_ex+0x512/0x640 [ 382.379566][ T9860] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 382.379598][ T9860] should_failslab+0xc2/0x120 [ 382.379629][ T9860] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 382.379657][ T9860] ? __proc_create+0xc3/0x8c0 [ 382.379687][ T9860] ? __proc_create+0x2ce/0x8c0 [ 382.379721][ T9860] __proc_create+0x2ce/0x8c0 [ 382.379751][ T9860] ? __pfx___proc_create+0x10/0x10 [ 382.379786][ T9860] ? __pfx___netlink_kernel_create+0x10/0x10 [ 382.379820][ T9860] ? fib4_semantics_init+0x25/0x100 [ 382.379853][ T9860] proc_create_reg+0x7d/0x180 [ 382.379888][ T9860] proc_create_seq_private+0x8e/0x1d0 [ 382.379922][ T9860] ? __pfx_proc_create_seq_private+0x10/0x10 [ 382.379956][ T9860] ? __pfx_nl_fib_input+0x10/0x10 [ 382.380015][ T9860] ? __pfx_ip_rt_do_proc_init+0x10/0x10 [ 382.380056][ T9860] ip_rt_do_proc_init+0x57/0x1b0 [ 382.380095][ T9860] ops_init+0x1e2/0x5f0 [ 382.380131][ T9860] setup_net+0x1ff/0x510 [ 382.380160][ T9860] ? lockdep_init_map_type+0x5c/0x280 [ 382.380185][ T9860] ? __pfx_setup_net+0x10/0x10 [ 382.380218][ T9860] ? debug_mutex_init+0x37/0x70 [ 382.380252][ T9860] copy_net_ns+0x2a6/0x5f0 [ 382.380289][ T9860] create_new_namespaces+0x3ea/0xa90 [ 382.380332][ T9860] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 382.380371][ T9860] ksys_unshare+0x45b/0xa40 [ 382.380395][ T9860] ? __pfx_ksys_unshare+0x10/0x10 [ 382.380421][ T9860] ? xfd_validate_state+0x61/0x180 [ 382.380454][ T9860] __x64_sys_unshare+0x31/0x40 [ 382.380478][ T9860] do_syscall_64+0xcd/0x490 [ 382.380509][ T9860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.380533][ T9860] RIP: 0033:0x7f8d8178e969 [ 382.380551][ T9860] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 382.380575][ T9860] RSP: 002b:00007f8d8267b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 382.380597][ T9860] RAX: ffffffffffffffda RBX: 00007f8d819b5fa0 RCX: 00007f8d8178e969 [ 382.380613][ T9860] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 382.380628][ T9860] RBP: 00007f8d81810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 382.380643][ T9860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 382.380657][ T9860] R13: 0000000000000000 R14: 00007f8d819b5fa0 R15: 00007ffd363361e8 [ 382.380687][ T9860] [ 383.363505][ T9867] FAULT_INJECTION: forcing a failure. [ 383.363505][ T9867] name failslab, interval 1, probability 0, space 0, times 0 [ 383.412733][ T9867] CPU: 0 UID: 0 PID: 9867 Comm: syz.2.904 Tainted: G U 6.15.0-syzkaller-10402-g4cb6c8af8591 #0 PREEMPT(full) [ 383.412776][ T9867] Tainted: [U]=USER [ 383.412784][ T9867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 383.412798][ T9867] Call Trace: [ 383.412807][ T9867] [ 383.412815][ T9867] dump_stack_lvl+0x16c/0x1f0 [ 383.412847][ T9867] should_fail_ex+0x512/0x640 [ 383.412882][ T9867] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 383.412910][ T9867] should_failslab+0xc2/0x120 [ 383.412942][ T9867] __kmalloc_cache_noprof+0x6a/0x3e0 [ 383.412967][ T9867] ? nci_allocate_device+0x105/0x430 [ 383.412995][ T9867] nci_allocate_device+0x105/0x430 [ 383.413019][ T9867] virtual_ncidev_open+0x6f/0x220 [ 383.413047][ T9867] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 383.413074][ T9867] misc_open+0x35a/0x420 [ 383.413103][ T9867] ? __pfx_misc_open+0x10/0x10 [ 383.413137][ T9867] chrdev_open+0x234/0x6a0 [ 383.413168][ T9867] ? __pfx_apparmor_file_open+0x10/0x10 [ 383.413198][ T9867] ? __pfx_chrdev_open+0x10/0x10 [ 383.413228][ T9867] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 383.413273][ T9867] do_dentry_open+0x741/0x1c10 [ 383.413301][ T9867] ? __pfx_chrdev_open+0x10/0x10 [ 383.413335][ T9867] vfs_open+0x82/0x3f0 [ 383.413372][ T9867] path_openat+0x1de4/0x2cb0 [ 383.413408][ T9867] ? __pfx_path_openat+0x10/0x10 [ 383.413435][ T9867] ? __lock_acquire+0xb8a/0x1c90 [ 383.413462][ T9867] do_filp_open+0x20b/0x470 [ 383.413488][ T9867] ? __pfx_do_filp_open+0x10/0x10 [ 383.413535][ T9867] ? alloc_fd+0x471/0x7d0 [ 383.413567][ T9867] do_sys_openat2+0x11b/0x1d0 [ 383.413601][ T9867] ? __pfx_do_sys_openat2+0x10/0x10 [ 383.413647][ T9867] __x64_sys_openat+0x174/0x210 [ 383.413683][ T9867] ? __pfx___x64_sys_openat+0x10/0x10 [ 383.413730][ T9867] do_syscall_64+0xcd/0x490 [ 383.413767][ T9867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.413791][ T9867] RIP: 0033:0x7f5f4438e969 [ 383.413810][ T9867] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 383.413834][ T9867] RSP: 002b:00007f5f45246038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 383.413856][ T9867] RAX: ffffffffffffffda RBX: 00007f5f445b5fa0 RCX: 00007f5f4438e969 [ 383.413872][ T9867] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 383.413887][ T9867] RBP: 00007f5f44410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 383.413902][ T9867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 383.413916][ T9867] R13: 0000000000000000 R14: 00007f5f445b5fa0 R15: 00007ffed90a55a8 [ 383.413945][ T9867] [ 384.487093][ T9871] [ 384.489549][ T9871] ====================================================== [ 384.496561][ T9871] WARNING: possible circular locking dependency detected [ 384.503582][ T9871] 6.15.0-syzkaller-10402-g4cb6c8af8591 #0 Tainted: G U [ 384.511904][ T9871] ------------------------------------------------------ [ 384.518928][ T9871] syz.0.905/9871 is trying to acquire lock: [ 384.524909][ T9871] ffff888025c2d420 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x103/0x400 [ 384.534357][ T9871] [ 384.534357][ T9871] but task is already holding lock: [ 384.541825][ T9871] ffff888025c2cee8 (&q->q_usage_counter(io)#22){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 384.553095][ T9871] [ 384.553095][ T9871] which lock already depends on the new lock. [ 384.553095][ T9871] [ 384.563501][ T9871] [ 384.563501][ T9871] the existing dependency chain (in reverse order) is: [ 384.572528][ T9871] [ 384.572528][ T9871] -> #3 (&q->q_usage_counter(io)#22){++++}-{0:0}: [ 384.581172][ T9871] blk_alloc_queue+0x619/0x760 [ 384.586476][ T9871] blk_mq_alloc_queue+0x175/0x290 [ 384.592047][ T9871] __blk_mq_alloc_disk+0x29/0x120 [ 384.597612][ T9871] loop_add+0x49c/0xb70 [ 384.602297][ T9871] loop_init+0x164/0x270 [ 384.607071][ T9871] do_one_initcall+0x120/0x6e0 [ 384.612360][ T9871] kernel_init_freeable+0x5c2/0x900 [ 384.618098][ T9871] kernel_init+0x1c/0x2b0 [ 384.622966][ T9871] ret_from_fork+0x5d4/0x6f0 [ 384.628090][ T9871] ret_from_fork_asm+0x1a/0x30 [ 384.633379][ T9871] [ 384.633379][ T9871] -> #2 (fs_reclaim){+.+.}-{0:0}: [ 384.640633][ T9871] fs_reclaim_acquire+0x102/0x150 [ 384.646202][ T9871] prepare_alloc_pages+0x162/0x610 [ 384.651850][ T9871] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 384.658291][ T9871] __alloc_pages_noprof+0xb/0x1b0 [ 384.663856][ T9871] pcpu_populate_chunk+0x110/0xb00 [ 384.669505][ T9871] pcpu_alloc_noprof+0x86a/0x1470 [ 384.675070][ T9871] xt_percpu_counter_alloc+0x13e/0x1b0 [ 384.681088][ T9871] find_check_entry.constprop.0+0xbf/0xa20 [ 384.687449][ T9871] translate_table+0xd0b/0x17b0 [ 384.692925][ T9871] ip6t_register_table+0x102/0x430 [ 384.698656][ T9871] ip6table_nat_table_init+0x4b/0x250 [ 384.704562][ T9871] xt_find_table_lock+0x2e1/0x520 [ 384.710115][ T9871] xt_request_find_table_lock+0x28/0xf0 [ 384.716187][ T9871] get_info+0x190/0x620 [ 384.720887][ T9871] do_ip6t_get_ctl+0x169/0xa50 [ 384.726297][ T9871] nf_getsockopt+0x7c/0xe0 [ 384.731252][ T9871] ipv6_getsockopt+0x1f7/0x280 [ 384.736557][ T9871] tcp_getsockopt+0xa1/0x100 [ 384.741679][ T9871] do_sock_getsockopt+0x3fc/0x800 [ 384.747248][ T9871] __sys_getsockopt+0x123/0x1b0 [ 384.752628][ T9871] __x64_sys_getsockopt+0xbd/0x160 [ 384.758270][ T9871] do_syscall_64+0xcd/0x490 [ 384.763309][ T9871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.769729][ T9871] [ 384.769729][ T9871] -> #1 (pcpu_alloc_mutex){+.+.}-{4:4}: [ 384.777487][ T9871] __mutex_lock+0x199/0xb90 [ 384.782531][ T9871] pcpu_alloc_noprof+0xb4a/0x1470 [ 384.788133][ T9871] sbitmap_init_node+0x2fd/0x770 [ 384.793605][ T9871] sbitmap_queue_init_node+0x41/0x560 [ 384.799507][ T9871] blk_mq_init_tags+0x12d/0x2b0 [ 384.804899][ T9871] blk_mq_alloc_map_and_rqs+0x237/0xf60 [ 384.810984][ T9871] blk_mq_init_sched+0x30c/0x610 [ 384.816453][ T9871] elevator_switch+0x1e1/0x7f0 [ 384.821746][ T9871] elevator_change+0x2ac/0x400 [ 384.827046][ T9871] elevator_set_default+0x292/0x320 [ 384.832779][ T9871] blk_register_queue+0x393/0x4f0 [ 384.838341][ T9871] __add_disk+0x74a/0xf00 [ 384.843223][ T9871] add_disk_fwnode+0x13f/0x5d0 [ 384.848521][ T9871] nbd_dev_add+0x791/0xbc0 [ 384.853470][ T9871] nbd_init+0x181/0x320 [ 384.858153][ T9871] do_one_initcall+0x120/0x6e0 [ 384.863439][ T9871] kernel_init_freeable+0x5c2/0x900 [ 384.869172][ T9871] kernel_init+0x1c/0x2b0 [ 384.874036][ T9871] ret_from_fork+0x5d4/0x6f0 [ 384.879155][ T9871] ret_from_fork_asm+0x1a/0x30 [ 384.884443][ T9871] [ 384.884443][ T9871] -> #0 (&q->elevator_lock){+.+.}-{4:4}: [ 384.892274][ T9871] __lock_acquire+0x126f/0x1c90 [ 384.897648][ T9871] lock_acquire+0x179/0x350 [ 384.902676][ T9871] __mutex_lock+0x199/0xb90 [ 384.907714][ T9871] elevator_change+0x103/0x400 [ 384.913014][ T9871] elv_iosched_store+0x2eb/0x3a0 [ 384.918484][ T9871] queue_attr_store+0x279/0x320 [ 384.923872][ T9871] sysfs_kf_write+0xef/0x150 [ 384.928999][ T9871] kernfs_fop_write_iter+0x354/0x510 [ 384.934818][ T9871] vfs_write+0x6c7/0x1150 [ 384.939673][ T9871] ksys_write+0x12a/0x250 [ 384.944528][ T9871] do_syscall_64+0xcd/0x490 [ 384.949562][ T9871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.955985][ T9871] [ 384.955985][ T9871] other info that might help us debug this: [ 384.955985][ T9871] [ 384.966209][ T9871] Chain exists of: [ 384.966209][ T9871] &q->elevator_lock --> fs_reclaim --> &q->q_usage_counter(io)#22 [ 384.966209][ T9871] [ 384.979971][ T9871] Possible unsafe locking scenario: [ 384.979971][ T9871] [ 384.987418][ T9871] CPU0 CPU1 [ 384.992778][ T9871] ---- ---- [ 384.998145][ T9871] lock(&q->q_usage_counter(io)#22); [ 385.003618][ T9871] lock(fs_reclaim); [ 385.010196][ T9871] lock(&q->q_usage_counter(io)#22); [ 385.018170][ T9871] lock(&q->elevator_lock); [ 385.022771][ T9871] [ 385.022771][ T9871] *** DEADLOCK *** [ 385.022771][ T9871] [ 385.030914][ T9871] 7 locks held by syz.0.905/9871: [ 385.035936][ T9871] #0: ffff888013486ef8 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2a2/0x370 [ 385.045016][ T9871] #1: ffff888035d7a428 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 385.054013][ T9871] #2: ffff88802840e088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 385.063795][ T9871] #3: ffff888141382d28 (kn->active#165){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510 [ 385.074022][ T9871] #4: ffff888143340368 (&set->update_nr_hwq_lock){.+.+}-{4:4}, at: elv_iosched_store+0x337/0x3a0 [ 385.084668][ T9871] #5: ffff888025c2cee8 (&q->q_usage_counter(io)#22){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 385.096366][ T9871] #6: ffff888025c2cf20 (&q->q_usage_counter(queue)#24){+.+.}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 385.108317][ T9871] [ 385.108317][ T9871] stack backtrace: [ 385.114205][ T9871] CPU: 0 UID: 0 PID: 9871 Comm: syz.0.905 Tainted: G U 6.15.0-syzkaller-10402-g4cb6c8af8591 #0 PREEMPT(full) [ 385.114241][ T9871] Tainted: [U]=USER [ 385.114248][ T9871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 385.114263][ T9871] Call Trace: [ 385.114272][ T9871] [ 385.114281][ T9871] dump_stack_lvl+0x116/0x1f0 [ 385.114310][ T9871] print_circular_bug+0x275/0x350 [ 385.114350][ T9871] check_noncircular+0x14c/0x170 [ 385.114392][ T9871] __lock_acquire+0x126f/0x1c90 [ 385.114420][ T9871] lock_acquire+0x179/0x350 [ 385.114442][ T9871] ? elevator_change+0x103/0x400 [ 385.114468][ T9871] ? __pfx___might_resched+0x10/0x10 [ 385.114505][ T9871] __mutex_lock+0x199/0xb90 [ 385.114532][ T9871] ? elevator_change+0x103/0x400 [ 385.114559][ T9871] ? elevator_change+0x103/0x400 [ 385.114586][ T9871] ? __pfx___mutex_lock+0x10/0x10 [ 385.114629][ T9871] ? blk_mq_cancel_work_sync+0xd8/0x110 [ 385.114662][ T9871] ? __pfx_blk_mq_cancel_work_sync+0x10/0x10 [ 385.114697][ T9871] ? elevator_change+0x103/0x400 [ 385.114727][ T9871] elevator_change+0x103/0x400 [ 385.114753][ T9871] elv_iosched_store+0x2eb/0x3a0 [ 385.114780][ T9871] ? __pfx_elv_iosched_store+0x10/0x10 [ 385.114812][ T9871] ? __mutex_trylock_common+0xe9/0x250 [ 385.114835][ T9871] ? __pfx_elv_iosched_store+0x10/0x10 [ 385.114863][ T9871] queue_attr_store+0x279/0x320 [ 385.114898][ T9871] ? __pfx_queue_attr_store+0x10/0x10 [ 385.114931][ T9871] ? __lock_acquire+0x622/0x1c90 [ 385.114958][ T9871] ? find_held_lock+0x2b/0x80 [ 385.114988][ T9871] ? sysfs_file_kobj+0xe4/0x290 [ 385.115024][ T9871] ? __pfx_queue_attr_store+0x10/0x10 [ 385.115058][ T9871] sysfs_kf_write+0xef/0x150 [ 385.115095][ T9871] kernfs_fop_write_iter+0x354/0x510 [ 385.115126][ T9871] ? __pfx_sysfs_kf_write+0x10/0x10 [ 385.115163][ T9871] vfs_write+0x6c7/0x1150 [ 385.115187][ T9871] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 385.115221][ T9871] ? __pfx___mutex_lock+0x10/0x10 [ 385.115247][ T9871] ? __pfx_vfs_write+0x10/0x10 [ 385.115278][ T9871] ksys_write+0x12a/0x250 [ 385.115301][ T9871] ? __pfx_ksys_write+0x10/0x10 [ 385.115328][ T9871] do_syscall_64+0xcd/0x490 [ 385.115356][ T9871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.115379][ T9871] RIP: 0033:0x7f64fbf8e969 [ 385.115397][ T9871] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 385.115420][ T9871] RSP: 002b:00007f64fce21038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 385.115440][ T9871] RAX: ffffffffffffffda RBX: 00007f64fc1b6080 RCX: 00007f64fbf8e969 [ 385.115456][ T9871] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000000003 [ 385.115469][ T9871] RBP: 00007f64fc010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 385.115484][ T9871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 385.115497][ T9871] R13: 0000000000000000 R14: 00007f64fc1b6080 R15: 00007ffe594258e8 [ 385.115519][ T9871] [ 388.927983][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 388.934408][ T1302] ieee802154 phy1 wpan1: encryption failed: -22