last executing test programs: 6.131802692s ago: executing program 2 (id=1412): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = memfd_create$auto(0x0, 0xe) socket(0x2, 0x1, 0x106) bind$auto(0x3, 0x0, 0x6a) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x0, 0xffffffffffffffff, 0x801, 0x8, 0x400, 0x4, 0xffffffffffffffff, 0x20000000000804, 0x3}, 0x6f3) sendmsg$auto_HWSIM_CMD_DEL_RADIO(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01fb"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 5.912487727s ago: executing program 2 (id=1414): unshare$auto(0x40000080) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x1, 0x100) setsockopt$auto(0x400000000000003, 0x29, 0x1b, 0x0, 0x56b) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x20b42, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000003c0)) syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x6, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000002) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000001bc0)='/dev/sequencer2\x00', 0x1, 0x0) rt_tgsigqueueinfo$auto(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000100)={@siginfo_0_0={0x6, 0xe, 0x5, @_sigchld={0x0, 0x0, 0x401, 0x5, 0x3}}}) mmap$auto(0x0, 0x2000d, 0x4080000200df, 0xeb1, 0x404, 0x8000) getsockopt$auto(0xffffffffffffffff, 0x107, 0xc, 0x0, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40) execve$auto(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)=&(0x7f0000000080)='\xac\x00', &(0x7f0000000000)=&(0x7f0000000200)=' ') 5.363921556s ago: executing program 0 (id=1420): openat$auto_fops_atomic_t_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/fail_usercopy/times\x00', 0x6883, 0x0) flock$auto(0xffffffffffffffff, 0x1) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) setsockopt$auto(0x400000000000003, 0x29, 0x1b, 0x0, 0x56b) ioctl$auto_SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) mmap$auto(0x450cecf1, 0x9, 0x3, 0xeb2, 0xffffffffffffffff, 0x7ffe) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) socket(0x11, 0x2, 0x0) setsockopt$auto(0x3, 0x114, 0x7, 0x0, 0x4) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x18dd01, 0x0) ioctl$auto_SG_GET_RESERVED_SIZE(r0, 0x4c0a, 0x0) 5.304798918s ago: executing program 2 (id=1421): close_range$auto(0x2, 0x8, 0x0) socket(0x23, 0x3, 0x100) r0 = socket(0x1d, 0x2, 0x7) socket(0xa, 0x801, 0x106) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x800, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0x2003f0, 0x17) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x2, 0x1, 0x0) rt_sigpending$auto(&(0x7f0000000000), 0x8) bind$auto(0x3, 0x0, 0x6a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@can, 0x18) mmap$auto(0x0, 0x2020009, 0x3, 0x10, 0xffffffffffffffff, 0x7ffe) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D2\x00', 0x1, 0x0) 4.952448197s ago: executing program 1 (id=1422): sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @loopback}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0x9}, 0x800009}, 0x3, 0x20000000) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7ffff000) sendto$auto(0x3, 0x0, 0xe7, 0xfd, 0x0, 0x403) write$auto(0x3, 0x0, 0xfffffdef) recvfrom$auto(0x3, 0x0, 0x800000000e, 0xa00, 0x0, 0xfffffffffffffffd) 4.827847211s ago: executing program 0 (id=1423): socket(0x2, 0x1, 0x106) read$auto_nvram_misc_fops_nvram(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x40009, 0x5, 0x9b72, 0x0, 0x28000) mmap$auto(0x0, 0x20007, 0x4000000000df, 0xeb1, 0x401, 0xfffffffffffffffb) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x6a581, 0x0) readahead$auto(r0, 0x4, 0x4) sysfs$auto(0x3, 0x401, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) init_module$auto(0x0, 0xffff9, 0x0) clone$auto(0x2, 0x40000f, 0x0, 0x0, 0x10000000003) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) madvise$auto(0x0, 0x8000000000000000, 0x15) madvise$auto(0x0, 0x2000000080000001, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 4.558992265s ago: executing program 2 (id=1425): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_ct_limit(0x0, r0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = open(&(0x7f00000001c0)='./cgroup\x00', 0x0, 0x6f) bpf$auto(0x10, &(0x7f00000000c0)=@info={r1, 0x2b, 0x200000007fff}, 0x8) madvise$auto(0x0, 0xffffffffffff0005, 0x17) setgroups$auto(0xe32, 0x0) madvise$auto(0xfffffffffffffffe, 0x2, 0x7) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop6\x00', 0x589081, 0x0) ioctl$auto_SG_GET_RESERVED_SIZE(r1, 0x4c04, 0x0) mmap$auto(0x0, 0x20006, 0x10001, 0xeb1, r2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x1, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0x4048aec9, r3) io_uring_setup$auto(0x406, 0x0) mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0x401, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/smaps_rollup\x00', 0x40000, 0x0) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) mmap$auto(0x0, 0x1000000000007, 0x4000002000e0, 0xeb1, 0x400, 0x9) close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0) ioctl$auto_RTC_RD_TIME(r5, 0x80247009, 0x0) r6 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x20401, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x4601, 0x0) 3.894070009s ago: executing program 0 (id=1426): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000980)='/proc/self/pagemap\x00', 0x80800, 0x0) read$auto(r0, 0x0, 0x39b8) getsockopt$auto_SO_SNDTIMEO_OLD(0xffffffffffffffff, 0x3ff, 0x15, 0x0, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x101000, 0x0) socket(0xa, 0x801, 0x106) r1 = socket(0x2b, 0x1, 0x1) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe\x00', 0x2000, 0x0) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="2f212abd"], 0x14}}, 0x4000000) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x4f1, 0x2, 0x8000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0) prctl$auto(0x35, 0x1, 0x8, 0x0, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000340)='/dev/snd/midiC2D3\x00', 0x2001, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) select$auto(0xe, 0x0, 0x0, &(0x7f0000000180)={[0x1ff, 0xd5b, 0xc, 0x37, 0x948a, 0x16, 0x15f4da0a, 0x1, 0x3, 0x300000000000604, 0x40080000001, 0x7, 0x6d3c, 0xc, 0xc8c, 0xffffffffffffffff]}, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) 3.582056719s ago: executing program 1 (id=1427): openat$auto_ucma_fops_ucma(0xffffffffffffff9c, 0x0, 0xa002, 0x0) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/pppoe\x00', 0x20440, 0x0) pread64$auto(r0, 0x0, 0xa0, 0xf86) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x801, 0x84) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) getsockopt$auto(0xffffffffffffffff, 0x119, 0x6, 0x0, 0x0) socket(0xb, 0x80802, 0x0) ioctl$auto_SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty0\x00', 0x0, 0x0) openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/kvm/max_mmu_rmap_size\x00', 0x20000, 0x0) read$auto(0x3, 0x0, 0x80) r1 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x103041, 0x0) write$auto(r1, 0x0, 0x9) 3.347774787s ago: executing program 3 (id=1428): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0x2, 0x80802, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xa0200, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80002, 0x0) socket(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) socket(0x18, 0x5, 0x1) connect$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x24}}, 0x55) socket(0x10, 0x2, 0x0) socket(0x22, 0x3, 0x0) socket(0x10, 0x2, 0x4) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) sendmmsg$auto(0x3, 0x0, 0x2, 0x0) 3.121560639s ago: executing program 0 (id=1429): r0 = socket(0x1d, 0x2, 0x6) r1 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r2, 0xfd}, 0x6a) mmap$auto(0x0, 0x9, 0xfc, 0x1000000eb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) open(0x0, 0x62240, 0x154) sendmsg$auto_NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001980)={0x14, 0x0, 0x8, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x40000) sendmsg$auto_ETHTOOL_MSG_FEC_SET(r0, 0x0, 0x44080) openat$auto_deferred_devs_fops_(0xffffffffffffff9c, 0x0, 0xa000, 0x0) r3 = gettid() syz_genetlink_get_family_id$auto_nl80211(0x0, r0) open(0x0, 0x149443, 0x2) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x2, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0xa901, 0x0) select$auto(0xa, 0x0, 0x0, 0x0, 0x0) tkill$auto(r3, 0x7) 3.00643097s ago: executing program 3 (id=1430): r0 = socket(0x2, 0x5, 0x0) mlockall$auto(0x7) mmap$auto(0x0, 0x0, 0xdf, 0x19, r0, 0xffffffff) move_pages$auto(0x0, 0xd0, 0x0, 0x0, 0x0, 0x2) r1 = socket(0xa, 0x1, 0x84) getsockopt$auto(r1, 0x84, 0x1c, 0x0, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) r2 = socket(0x5, 0x0, 0x0) setsockopt$auto(r2, 0x29, 0x1f, &(0x7f0000000180)='!\xa4\xff\x00\x8a\xf0t\xaf\x82\xd7{\x98\xdd\xee\xc2f\xcaH\x90\xc57M\x87<<\n\xf2L\"Y\xa9\f\n\xbd?\xdd\b\xf7vu:\x00\xeaP\xa7=\xef\xc3\xdc\xf3=J\xf9\x9e\xd9\x02\xbb\xd3\xf8\xff*\xc2\xd8w\xe9\x00\x00\x01\x00h\xe2\x0f\x1b\x95L\xbf\xa5\xacH\"xV#\xc7e\x12\x83\xed\xc7\xc5\x9e\x84?\xfa=\f\xd8\x14\x00\x9fJl\xdd)i\x9f(#\xb7\xff:\x94\x8bd,\xb2\xfc\xde32\x87;\tx\xffM\x1f\x1d\xd8b\xa5\r\xb7v;\xfd\xa14M\xd3\x95\x86\x04\xd4\xda}\xcat}\x18K\x85\x9bBj\x8e\x95\xca\x87\xfe\x125\x154\x83\x94X,\xa4\xf3\xf6\xef\x1a\xb5iX\x99\xa1NO\xc5R\xc9\xc7\xd6\x8d?\x13\x9f\xaf\xf4\xbc\xa3j\xefQ\x7f\xc4\x86\xe8\xc6\xf8\xfe\x115\xd7\x89\x86\xc6T\x14\x00\x13\xb9mf\xc0\xc2%_N\xed\xa9\x02\xe5\x83\xa0\x01O%NHKp\xe0\xb3u\xdc\x8bb\xfa\xabD\x1d\x8a\x1e\xb4C\x05R\xdco\xa5\xce\xc9+\xf8\xf2X#', 0x1fe) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$auto(0x3, 0x400454ca, 0x38) socket(0x10, 0x2, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) r3 = clone$auto(0x21, 0x8cd, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x8) process_vm_readv$auto(r3, &(0x7f0000000040)={0x0, 0x8}, 0x4, &(0x7f00000000c0)={0x0, 0x100000000000002}, 0x6, 0x0) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) 2.866124585s ago: executing program 1 (id=1431): mmap$auto(0x0, 0x20007, 0x4000000000df, 0xeb1, 0x401, 0xfffffffffffffffb) mmap$auto(0x0, 0xfff, 0xdf, 0x9b72, 0x400, 0x28000) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_bch_chardev_fops_chardev(0xffffffffffffff9c, &(0x7f0000000580), 0x400, 0x0) ioctl$auto_BCH_IOCTL_FSCK_OFFLINE(r0, 0x4018bc13, 0x0) read$auto(0x3, 0x0, 0x18) pwrite64$auto(0xffffffffffffffff, &(0x7f0000000000)='./cgroup\x00\x00emory.pressure\x00', 0x6bc, 0x9) readahead$auto(0xffffffffffffffff, 0x4, 0x4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) init_module$auto(0x0, 0xffff9, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) semget$auto(0x0, 0x13c, 0x1ff) recvmmsg$auto(0xffffffffffffffff, 0x0, 0x7, 0x5, 0x0) mprotect$auto(0x0, 0xe6a, 0x6) mmap$auto(0x0, 0x20009, 0x20004000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x8000, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f00000001c0)={{@raw=0x3, 0x100110d, 0xffff, 0x6, "e927783f468fa2e92fe8ec7a46cb010000000000000000000000e1800000000080000000040000660e070100"}, 0x1, 0x0, 0xe2, @raw=0x6, @integer64={0x8, 0x2, 0x20000000006}, "a4699d30a05edbe0d28473c399a7dc920b153e9b1675451d7de94b4123f970dbdd3492f6abcfd05cabc1666b4caf49e6de6e76803400"}) mmap$auto(0x1, 0x8020009, 0x4000000002df, 0xeb1, 0x401, 0x8000) 2.830394896s ago: executing program 2 (id=1432): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r1 = socket(0x15, 0x5, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x7, 0x800008000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) ustat$auto(0x801, 0x0) sendmsg$auto(r1, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x6c, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@HSR_A_IF1_AGE={0x8, 0x3, 0x200}, @HSR_A_IF2_SEQ={0x6, 0x7, 0x8000}, @HSR_A_IFINDEX={0x8}, @HSR_A_NODE_ADDR_B={0xa, 0x5, @broadcast}, @HSR_A_NODE_ADDR={0xa}, @HSR_A_NODE_ADDR={0xa, 0x1, @random="70b28a70c5dc"}, @HSR_A_IF1_AGE={0x8, 0x3, 0x36}, @HSR_A_IF2_SEQ={0x6, 0x7, 0xff}, @HSR_A_NODE_ADDR={0xa, 0x1, @remote}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r3 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000100), r2) sendmsg$auto_SMC_NETLINK_DISABLE_HS_LIMITATION(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x78, r3, 0x200, 0x70bd29, 0x25dfdbfc, {}, "e3c74265fc46948319c3f37d6e8a9a79dc3557b111f98dad43bb7851e85c6edd25ff2e5e66857d087593b0acdb6771e1b6419c56ce9aca14a11bef724018b01cc14037b81433734f688b95c01584da9bbacee5f4bfc69ab1f048df81beb2ac5152a4"}, 0x78}, 0x1, 0x0, 0x0, 0x80c0}, 0x24000000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000180)='nfsd\x00', 0x8, 0x0) 2.66567094s ago: executing program 3 (id=1433): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/bus/usb/drivers/pvrusb2/remove_id\x00', 0x100, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14abfd) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$auto(0xc0, &(0x7f0000000000)={{0x0, 0x22, 0x0, 0xa, 0x0, 0x989, 0x1}, 0x3}, 0x9a6, 0xfffffffe) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) write$auto(0x3, 0x0, 0x100082) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/zram0/disksize\x00', 0x101102, 0x0) open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x80842, 0x91) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0xa, 0x2, 0x88) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r1, @new_prog_fd=0x4, 0x4, @old_prog_fd=r0}, 0xa3) 2.531555506s ago: executing program 3 (id=1434): syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000080), 0xffffffffffffffff) openat$auto_safesetid_gid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000000), 0x8202, 0x0) ioctl$auto(0xc8, 0x800454db, 0xffffffffffffffff) mmap$auto(0x0, 0x20000000009, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto(r0, 0x89a0, 0x8) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000100)={{0x0, 0x4, 0x0, 0x2, 0x0, 0x20000}, 0x4}, 0x1f8, 0xb07e) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) write$auto(r0, &(0x7f0000000140)=')-+\xa2\x00', 0x6) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) mmap$auto(0x0, 0xffffffff, 0xe0, 0x15, r0, 0x7) r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write$auto(r1, 0x0, 0xe) 2.455326533s ago: executing program 1 (id=1435): socket(0x1e, 0x1, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/afs/rootcell\x00', 0x1cb842, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) setsockopt$auto(0x3, 0x0, 0x13, 0x0, 0x9) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0xe0742, 0x0) close_range$auto(0x2, 0xa, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0) r1 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) read$auto(r1, 0x0, 0xb4d3) write$auto(0x3, 0x0, 0xffd8) 2.221226922s ago: executing program 3 (id=1436): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14f602, 0x0) r1 = open_by_handle_at$auto(0xffffffffffffffff, 0x0, 0xffffffff) mmap$auto(0x7fffffffffffffff, 0x20009, 0xdf, 0xffffffffffffffff, r1, 0x8000) prctl$auto_PR_PAC_RESET_KEYS(0x36, 0x0, 0xffffffffffffffff, 0x9, 0x7) write$auto(0xffffffffffffffff, 0x0, 0x4) mmap$auto(0x0, 0x2020009, 0x3, 0x10011, 0xfffffffffffffffa, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x7cf702, 0x0) mmap$auto(0x0, 0x810004, 0x2, 0x8000000008011, 0x3, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_VPORT_CMD_NEW(r2, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x34, r3, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@OVS_VPORT_ATTR_OPTIONS={0x4}, @OVS_VPORT_ATTR_NAME={0x6, 0x3, '*\x00'}, @OVS_VPORT_ATTR_UPCALL_PID={0x4}, @OVS_VPORT_ATTR_TYPE={0x8, 0x2, 0x2}, @OVS_VPORT_ATTR_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040010}, 0x800) write$auto(0x3, 0x0, 0xfffffdef) close_range$auto(0xffffffffffffffff, r0, 0x4) write$auto(0x3, 0x0, 0xfffffdef) connect$auto(0xffffffffffffffff, 0x0, 0x55) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/block/parameters/events_dfl_poll_msecs\x00', 0x80002, 0x0) r4 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r4, 0x107, 0x1, 0x0, 0x8004) 1.52009038s ago: executing program 2 (id=1437): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x80000008000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/irq/12/hwirq\x00', 0x2000, 0x0) read$auto(r0, 0x0, 0x20) syz_genetlink_get_family_id$auto_mac802154_hwsim(&(0x7f0000000640), 0xffffffffffffffff) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty26\x00', 0x40002, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) socket(0x2, 0x1, 0x84) socket(0xf, 0x3, 0x2) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f00000007c0)="dec8c1943b506aeb066db1944b039854d328881581f4f7") madvise$auto(0x9, 0x8, 0x1ff) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$auto(r2, 0x0, 0xa3d9) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) 1.501267224s ago: executing program 3 (id=1438): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000840), r0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = open(0x0, 0x0, 0x6f) bpf$auto(0x10, &(0x7f00000000c0)=@info={r1, 0x2b, 0x200000007fff}, 0x8) madvise$auto(0x0, 0xffffffffffff0005, 0x17) setgroups$auto(0xe32, 0x0) madvise$auto(0xfffffffffffffffe, 0x2, 0x7) ioctl$auto_SG_GET_RESERVED_SIZE(r1, 0x4c04, 0x0) mmap$auto(0x0, 0x20006, 0x10001, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x1, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0x4048aec9, r2) io_uring_setup$auto(0x406, 0x0) mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0x401, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/smaps_rollup\x00', 0x40000, 0x0) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) mmap$auto(0x0, 0x1000000000007, 0x4000002000e0, 0xeb1, 0x400, 0x9) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0) ioctl$auto_RTC_RD_TIME(r4, 0x80247009, 0x0) r5 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x20401, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x4601, 0x0) 1.48585679s ago: executing program 0 (id=1439): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0x5, 0x0) socket(0x10, 0x2, 0x14) socket$nl_generic(0x10, 0x3, 0x10) socket(0x11, 0x80003, 0x300) r0 = socket(0x11, 0x3, 0x9) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x5, 0x0) memfd_create$auto(0x0, 0x2) socket(0xa, 0x2, 0x0) openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000000), 0x48001, 0x0) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x202002, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES8=r0, @ANYRES8=r1], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x8800) write$auto(r2, &(0x7f0000000000)='-\x00', 0xfdef) 345.825557ms ago: executing program 1 (id=1440): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_netdev(0x0, r0) io_uring_setup$auto(0x6, 0x0) r1 = timerfd_create$auto(0x7, 0x0) ioctl$auto_FIDEDUPERANGE(r1, 0xc0189436, 0x2) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) open(&(0x7f0000000800)='./file0\x00', 0x2a241, 0x154) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_TIOCSTI2(0xffffffffffffffff, 0x545c, 0x0) socket$nl_generic(0x10, 0x3, 0x10) clone$auto(0x6, 0xd40, 0x0, &(0x7f0000000100)=0xf43, 0x3) r2 = gettid() waitid$auto_P_PGID(0x2, r2, 0x0, 0x6, 0x0) r3 = socket(0xa, 0x801, 0x106) ioctl$auto(r3, 0x890c, 0x9) 21.738482ms ago: executing program 1 (id=1441): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_ct_limit(0x0, r0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = open(&(0x7f00000001c0)='./cgroup\x00', 0x0, 0x6f) bpf$auto(0x10, &(0x7f00000000c0)=@info={r1, 0x2b, 0x200000007fff}, 0x8) madvise$auto(0x0, 0xffffffffffff0005, 0x17) setgroups$auto(0xe32, 0x0) madvise$auto(0xfffffffffffffffe, 0x2, 0x7) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop6\x00', 0x589081, 0x0) ioctl$auto_SG_GET_RESERVED_SIZE(r1, 0x4c04, 0x0) mmap$auto(0x0, 0x20006, 0x10001, 0xeb1, r2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x1, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0x4048aec9, r3) io_uring_setup$auto(0x406, 0x0) mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0x401, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/smaps_rollup\x00', 0x40000, 0x0) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) mmap$auto(0x0, 0x1000000000007, 0x4000002000e0, 0xeb1, 0x400, 0x9) close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0) ioctl$auto_RTC_RD_TIME(r5, 0x80247009, 0x0) r6 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x20401, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x4601, 0x0) 0s ago: executing program 0 (id=1442): mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x55) socket(0x2, 0x3, 0xa) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8) connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) adjtimex$auto(&(0x7f0000000100)={0xf332b6e, 0x0, 0x2000000000000000, 0x8, 0xd4, 0x7, 0x5, 0x0, 0x6, 0x0, 0x2, {0x8, 0x10001}, 0x1, 0x6, 0xfffffffffffffffd, 0x3, 0x0, 0x80000004, 0xa, 0xffffefffffff628e, 0xa749, 0x800000000000001, 0x3ce2}) kernel console output (not intermixed with test programs): 74/0x210 [ 383.090084][T10345] ? __pfx___x64_sys_openat+0x10/0x10 [ 383.090128][T10345] ? rcu_is_watching+0x12/0xc0 [ 383.090169][T10345] do_syscall_64+0xcd/0x230 [ 383.090213][T10345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.090238][T10345] RIP: 0033:0x7f59d8d8e969 [ 383.090256][T10345] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 383.090279][T10345] RSP: 002b:00007f59d9b58038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 383.090301][T10345] RAX: ffffffffffffffda RBX: 00007f59d8fb6160 RCX: 00007f59d8d8e969 [ 383.090317][T10345] RDX: 0000000000000440 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 383.090332][T10345] RBP: 00007f59d8e10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 383.090347][T10345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 383.090360][T10345] R13: 0000000000000000 R14: 00007f59d8fb6160 R15: 00007fff91ca9368 [ 383.090399][T10345] [ 383.429664][ C1] vkms_vblank_simulate: vblank timer overrun [ 383.838473][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.844956][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 385.506520][T10374] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1035'. [ 385.623358][T10374] netlink: 326 bytes leftover after parsing attributes in process `syz.1.1035'. [ 385.961250][T10372] FAULT_INJECTION: forcing a failure. [ 385.961250][T10372] name failslab, interval 1, probability 0, space 0, times 0 [ 385.989238][T10372] CPU: 1 UID: 0 PID: 10372 Comm: syz.2.1033 Tainted: G I 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 385.989292][T10372] Tainted: [I]=FIRMWARE_WORKAROUND [ 385.989305][T10372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 385.989324][T10372] Call Trace: [ 385.989334][T10372] [ 385.989346][T10372] dump_stack_lvl+0x16c/0x1f0 [ 385.989394][T10372] should_fail_ex+0x512/0x640 [ 385.989441][T10372] ? __kmalloc_noprof+0xbf/0x510 [ 385.989480][T10372] ? ptp_open+0x103/0x520 [ 385.989507][T10372] should_failslab+0xc2/0x120 [ 385.989547][T10372] __kmalloc_noprof+0xd2/0x510 [ 385.989590][T10372] ptp_open+0x103/0x520 [ 385.989628][T10372] ? __pfx_ptp_open+0x10/0x10 [ 385.989673][T10372] ? __pfx_ptp_open+0x10/0x10 [ 385.989702][T10372] posix_clock_open+0x178/0x290 [ 385.989738][T10372] ? __pfx_posix_clock_open+0x10/0x10 [ 385.989770][T10372] chrdev_open+0x231/0x6a0 [ 385.989803][T10372] ? __pfx_apparmor_file_open+0x10/0x10 [ 385.989845][T10372] ? __pfx_chrdev_open+0x10/0x10 [ 385.989882][T10372] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 385.989948][T10372] do_dentry_open+0x741/0x1c10 [ 385.989991][T10372] ? __pfx_chrdev_open+0x10/0x10 [ 385.990028][T10372] vfs_open+0x82/0x3f0 [ 385.990071][T10372] path_openat+0x1e5e/0x2d40 [ 385.990117][T10372] ? __pfx_path_openat+0x10/0x10 [ 385.990155][T10372] do_filp_open+0x20b/0x470 [ 385.990184][T10372] ? __pfx_do_filp_open+0x10/0x10 [ 385.990248][T10372] ? alloc_fd+0x471/0x7d0 [ 385.990305][T10372] do_sys_openat2+0x11b/0x1d0 [ 385.990341][T10372] ? __pfx_do_sys_openat2+0x10/0x10 [ 385.990395][T10372] __x64_sys_openat+0x174/0x210 [ 385.990436][T10372] ? __pfx___x64_sys_openat+0x10/0x10 [ 385.990478][T10372] ? rcu_is_watching+0x12/0xc0 [ 385.990516][T10372] do_syscall_64+0xcd/0x230 [ 385.990560][T10372] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.990590][T10372] RIP: 0033:0x7f59d8d8e969 [ 385.990623][T10372] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 385.990650][T10372] RSP: 002b:00007f59d9b79038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 385.990677][T10372] RAX: ffffffffffffffda RBX: 00007f59d8fb6080 RCX: 00007f59d8d8e969 [ 385.990695][T10372] RDX: 0000000000000440 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 385.990713][T10372] RBP: 00007f59d8e10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 385.990728][T10372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 385.990745][T10372] R13: 0000000000000000 R14: 00007f59d8fb6080 R15: 00007fff91ca9368 [ 385.990780][T10372] [ 386.246792][ C1] vkms_vblank_simulate: vblank timer overrun [ 387.209158][T10403] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1044'. [ 387.275908][T10403] netlink: 326 bytes leftover after parsing attributes in process `syz.0.1044'. [ 388.233081][T10429] FAULT_INJECTION: forcing a failure. [ 388.233081][T10429] name failslab, interval 1, probability 0, space 0, times 0 [ 388.287210][T10429] CPU: 1 UID: 0 PID: 10429 Comm: syz.1.1049 Tainted: G I 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 388.287260][T10429] Tainted: [I]=FIRMWARE_WORKAROUND [ 388.287271][T10429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 388.287287][T10429] Call Trace: [ 388.287297][T10429] [ 388.287308][T10429] dump_stack_lvl+0x16c/0x1f0 [ 388.287351][T10429] should_fail_ex+0x512/0x640 [ 388.287389][T10429] ? __kmalloc_noprof+0xbf/0x510 [ 388.287422][T10429] ? ptp_open+0x103/0x520 [ 388.287445][T10429] should_failslab+0xc2/0x120 [ 388.287479][T10429] __kmalloc_noprof+0xd2/0x510 [ 388.287516][T10429] ptp_open+0x103/0x520 [ 388.287548][T10429] ? __pfx_ptp_open+0x10/0x10 [ 388.287585][T10429] ? __pfx_ptp_open+0x10/0x10 [ 388.287610][T10429] posix_clock_open+0x178/0x290 [ 388.287640][T10429] ? __pfx_posix_clock_open+0x10/0x10 [ 388.287667][T10429] chrdev_open+0x231/0x6a0 [ 388.287694][T10429] ? __pfx_apparmor_file_open+0x10/0x10 [ 388.287731][T10429] ? __pfx_chrdev_open+0x10/0x10 [ 388.287762][T10429] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 388.287811][T10429] do_dentry_open+0x741/0x1c10 [ 388.287838][T10429] ? __pfx_chrdev_open+0x10/0x10 [ 388.287874][T10429] vfs_open+0x82/0x3f0 [ 388.287912][T10429] path_openat+0x1e5e/0x2d40 [ 388.287952][T10429] ? __pfx_path_openat+0x10/0x10 [ 388.287988][T10429] do_filp_open+0x20b/0x470 [ 388.288015][T10429] ? __pfx_do_filp_open+0x10/0x10 [ 388.288076][T10429] ? alloc_fd+0x471/0x7d0 [ 388.288131][T10429] do_sys_openat2+0x11b/0x1d0 [ 388.288187][T10429] ? __pfx_do_sys_openat2+0x10/0x10 [ 388.288239][T10429] __x64_sys_openat+0x174/0x210 [ 388.288279][T10429] ? __pfx___x64_sys_openat+0x10/0x10 [ 388.288321][T10429] ? rcu_is_watching+0x12/0xc0 [ 388.288359][T10429] do_syscall_64+0xcd/0x230 [ 388.288403][T10429] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.288432][T10429] RIP: 0033:0x7f4076b8e969 [ 388.288456][T10429] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 388.288486][T10429] RSP: 002b:00007f4077963038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 388.288532][T10429] RAX: ffffffffffffffda RBX: 00007f4076db6160 RCX: 00007f4076b8e969 [ 388.288553][T10429] RDX: 0000000000000440 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 388.288573][T10429] RBP: 00007f4076c10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 388.288593][T10429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 388.288610][T10429] R13: 0000000000000000 R14: 00007f4076db6160 R15: 00007fff120cae08 [ 388.288652][T10429] [ 388.546492][ C1] vkms_vblank_simulate: vblank timer overrun [ 389.212771][T10452] usbip-vudc usbip-vudc.0: gadget not bound [ 389.530650][ T5835] Bluetooth: hci3: ACL packet too small [ 390.096231][T10476] FAULT_INJECTION: forcing a failure. [ 390.096231][T10476] name failslab, interval 1, probability 0, space 0, times 0 [ 390.181777][T10476] CPU: 1 UID: 0 PID: 10476 Comm: syz.1.1066 Tainted: G I 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 390.181829][T10476] Tainted: [I]=FIRMWARE_WORKAROUND [ 390.181840][T10476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 390.181858][T10476] Call Trace: [ 390.181867][T10476] [ 390.181878][T10476] dump_stack_lvl+0x16c/0x1f0 [ 390.181923][T10476] should_fail_ex+0x512/0x640 [ 390.181964][T10476] ? __kmalloc_noprof+0xbf/0x510 [ 390.182001][T10476] ? ptp_open+0x103/0x520 [ 390.182027][T10476] should_failslab+0xc2/0x120 [ 390.182064][T10476] __kmalloc_noprof+0xd2/0x510 [ 390.182104][T10476] ptp_open+0x103/0x520 [ 390.182138][T10476] ? __pfx_ptp_open+0x10/0x10 [ 390.182186][T10476] ? __pfx_ptp_open+0x10/0x10 [ 390.182215][T10476] posix_clock_open+0x178/0x290 [ 390.182247][T10476] ? __pfx_posix_clock_open+0x10/0x10 [ 390.182277][T10476] chrdev_open+0x231/0x6a0 [ 390.182310][T10476] ? __pfx_apparmor_file_open+0x10/0x10 [ 390.182347][T10476] ? __pfx_chrdev_open+0x10/0x10 [ 390.182381][T10476] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 390.182434][T10476] do_dentry_open+0x741/0x1c10 [ 390.182476][T10476] ? __pfx_chrdev_open+0x10/0x10 [ 390.182513][T10476] vfs_open+0x82/0x3f0 [ 390.182554][T10476] path_openat+0x1e5e/0x2d40 [ 390.182594][T10476] ? __pfx_path_openat+0x10/0x10 [ 390.182631][T10476] do_filp_open+0x20b/0x470 [ 390.182659][T10476] ? __pfx_do_filp_open+0x10/0x10 [ 390.182713][T10476] ? alloc_fd+0x471/0x7d0 [ 390.182767][T10476] do_sys_openat2+0x11b/0x1d0 [ 390.182804][T10476] ? __pfx_do_sys_openat2+0x10/0x10 [ 390.182855][T10476] __x64_sys_openat+0x174/0x210 [ 390.182894][T10476] ? __pfx___x64_sys_openat+0x10/0x10 [ 390.182934][T10476] ? rcu_is_watching+0x12/0xc0 [ 390.182970][T10476] do_syscall_64+0xcd/0x230 [ 390.183010][T10476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.183039][T10476] RIP: 0033:0x7f4076b8e969 [ 390.183061][T10476] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 390.183088][T10476] RSP: 002b:00007f4077963038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 390.183115][T10476] RAX: ffffffffffffffda RBX: 00007f4076db6160 RCX: 00007f4076b8e969 [ 390.183133][T10476] RDX: 0000000000000440 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 390.183158][T10476] RBP: 00007f4076c10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 390.183176][T10476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 390.183192][T10476] R13: 0000000000000000 R14: 00007f4076db6160 R15: 00007fff120cae08 [ 390.183229][T10476] [ 390.446246][ C1] vkms_vblank_simulate: vblank timer overrun [ 390.715017][T10482] FAULT_INJECTION: forcing a failure. [ 390.715017][T10482] name failslab, interval 1, probability 0, space 0, times 0 [ 390.740307][T10482] CPU: 1 UID: 0 PID: 10482 Comm: syz.3.1069 Tainted: G I 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 390.740351][T10482] Tainted: [I]=FIRMWARE_WORKAROUND [ 390.740361][T10482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 390.740376][T10482] Call Trace: [ 390.740386][T10482] [ 390.740395][T10482] dump_stack_lvl+0x16c/0x1f0 [ 390.740434][T10482] should_fail_ex+0x512/0x640 [ 390.740471][T10482] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 390.740504][T10482] should_failslab+0xc2/0x120 [ 390.740538][T10482] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 390.740568][T10482] ? mas_alloc_nodes+0x18b/0x8b0 [ 390.740605][T10482] mas_alloc_nodes+0x18b/0x8b0 [ 390.740644][T10482] mas_node_count_gfp+0x105/0x130 [ 390.740677][T10482] mas_preallocate+0x53e/0xcd0 [ 390.740725][T10482] ? __pfx_mas_preallocate+0x10/0x10 [ 390.740774][T10482] ? mod_objcg_state+0x5eb/0xa50 [ 390.740800][T10482] ? lockdep_hardirqs_on+0x7c/0x110 [ 390.740842][T10482] vma_link+0x135/0x6a0 [ 390.740870][T10482] ? __memcg_slab_post_alloc_hook+0x4d0/0x940 [ 390.740908][T10482] ? __pfx_vma_link+0x10/0x10 [ 390.740944][T10482] ? anon_vma_clone+0x405/0x5c0 [ 390.740971][T10482] ? anon_vma_name+0x75/0x100 [ 390.741012][T10482] copy_vma+0x68a/0xa50 [ 390.741047][T10482] ? __pfx_copy_vma+0x10/0x10 [ 390.741075][T10482] ? finish_task_switch.isra.0+0x21c/0xc10 [ 390.741111][T10482] ? register_lock_class+0x41/0x4c0 [ 390.741174][T10482] ? lock_acquire+0x179/0x350 [ 390.741211][T10482] ? find_held_lock+0x2b/0x80 [ 390.741240][T10482] copy_vma_and_data+0x1cf/0x810 [ 390.741275][T10482] ? __pfx_copy_vma_and_data+0x10/0x10 [ 390.741314][T10482] ? __vma_enter_locked+0x163/0x3f0 [ 390.741351][T10482] ? find_held_lock+0x2b/0x80 [ 390.741378][T10482] ? move_vma+0x536/0x1740 [ 390.741417][T10482] move_vma+0x548/0x1740 [ 390.741452][T10482] ? __pfx_move_vma+0x10/0x10 [ 390.741489][T10482] ? cap_mmap_addr+0x4b/0x120 [ 390.741513][T10482] ? bpf_lsm_mmap_addr+0x9/0x10 [ 390.741555][T10482] ? security_mmap_addr+0x6c/0x1e0 [ 390.741591][T10482] ? __get_unmapped_area+0x26a/0x440 [ 390.741634][T10482] ? vrm_set_new_addr+0x208/0x290 [ 390.741669][T10482] __do_sys_mremap+0xe38/0x15d0 [ 390.741705][T10482] ? __pfx___do_sys_mremap+0x10/0x10 [ 390.741755][T10482] ? __x64_sys_futex+0x1e0/0x4c0 [ 390.741795][T10482] ? rcu_is_watching+0x12/0xc0 [ 390.741831][T10482] do_syscall_64+0xcd/0x230 [ 390.741871][T10482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.741899][T10482] RIP: 0033:0x7fcba1d8e969 [ 390.741921][T10482] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 390.741949][T10482] RSP: 002b:00007fcba2c25038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 390.741975][T10482] RAX: ffffffffffffffda RBX: 00007fcba1fb5fa0 RCX: 00007fcba1d8e969 [ 390.741993][T10482] RDX: 0000000000003fd6 RSI: ffffffffffffffff RDI: 0000000000000000 [ 390.742009][T10482] RBP: 00007fcba1e10ab1 R08: 00007fffffffb000 R09: 0000000000000000 [ 390.742025][T10482] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 390.742040][T10482] R13: 0000000000000000 R14: 00007fcba1fb5fa0 R15: 00007ffdaa87ad78 [ 390.742075][T10482] [ 391.062601][ C1] vkms_vblank_simulate: vblank timer overrun [ 391.919013][T10505] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1078'. [ 392.025217][T10508] netlink: 326 bytes leftover after parsing attributes in process `syz.1.1078'. [ 392.981543][T10528] Invalid ELF header magic: != ELF [ 393.129630][T10534] FAULT_INJECTION: forcing a failure. [ 393.129630][T10534] name failslab, interval 1, probability 0, space 0, times 0 [ 393.175623][T10534] CPU: 1 UID: 0 PID: 10534 Comm: syz.3.1085 Tainted: G I 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 393.175692][T10534] Tainted: [I]=FIRMWARE_WORKAROUND [ 393.175705][T10534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 393.175726][T10534] Call Trace: [ 393.175737][T10534] [ 393.175749][T10534] dump_stack_lvl+0x16c/0x1f0 [ 393.175802][T10534] should_fail_ex+0x512/0x640 [ 393.175845][T10534] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 393.175886][T10534] should_failslab+0xc2/0x120 [ 393.175925][T10534] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 393.175985][T10534] ? mas_alloc_nodes+0x18b/0x8b0 [ 393.176030][T10534] mas_alloc_nodes+0x18b/0x8b0 [ 393.176075][T10534] mas_node_count_gfp+0x105/0x130 [ 393.176114][T10534] mas_preallocate+0x53e/0xcd0 [ 393.176168][T10534] ? __pfx_mas_preallocate+0x10/0x10 [ 393.176226][T10534] ? mod_objcg_state+0x5eb/0xa50 [ 393.176257][T10534] ? lockdep_hardirqs_on+0x7c/0x110 [ 393.176305][T10534] vma_link+0x135/0x6a0 [ 393.176338][T10534] ? __memcg_slab_post_alloc_hook+0x4d0/0x940 [ 393.176384][T10534] ? __pfx_vma_link+0x10/0x10 [ 393.176427][T10534] ? anon_vma_clone+0x405/0x5c0 [ 393.176460][T10534] ? anon_vma_name+0x75/0x100 [ 393.176510][T10534] copy_vma+0x68a/0xa50 [ 393.176552][T10534] ? __pfx_copy_vma+0x10/0x10 [ 393.176589][T10534] ? finish_task_switch.isra.0+0x21c/0xc10 [ 393.176631][T10534] ? register_lock_class+0x41/0x4c0 [ 393.176700][T10534] copy_vma_and_data+0x1cf/0x810 [ 393.176732][T10534] ? __pfx_copy_vma_and_data+0x10/0x10 [ 393.176777][T10534] ? __vma_enter_locked+0x163/0x3f0 [ 393.176807][T10534] ? find_held_lock+0x2b/0x80 [ 393.176827][T10534] ? move_vma+0x536/0x1740 [ 393.176856][T10534] move_vma+0x548/0x1740 [ 393.176896][T10534] ? __pfx_move_vma+0x10/0x10 [ 393.176923][T10534] ? cap_mmap_addr+0x4b/0x120 [ 393.176941][T10534] ? bpf_lsm_mmap_addr+0x9/0x10 [ 393.176979][T10534] ? security_mmap_addr+0x6c/0x1e0 [ 393.177005][T10534] ? __get_unmapped_area+0x26a/0x440 [ 393.177039][T10534] ? vrm_set_new_addr+0x208/0x290 [ 393.177064][T10534] __do_sys_mremap+0xe38/0x15d0 [ 393.177090][T10534] ? __pfx___do_sys_mremap+0x10/0x10 [ 393.177128][T10534] ? __x64_sys_futex+0x1e0/0x4c0 [ 393.177155][T10534] ? rcu_is_watching+0x12/0xc0 [ 393.177181][T10534] do_syscall_64+0xcd/0x230 [ 393.177210][T10534] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.177230][T10534] RIP: 0033:0x7fcba1d8e969 [ 393.177246][T10534] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 393.177267][T10534] RSP: 002b:00007fcba2c25038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 393.177286][T10534] RAX: ffffffffffffffda RBX: 00007fcba1fb5fa0 RCX: 00007fcba1d8e969 [ 393.177299][T10534] RDX: 0000000000003fd6 RSI: ffffffffffffffff RDI: 0000000000000000 [ 393.177312][T10534] RBP: 00007fcba1e10ab1 R08: 00007fffffffb000 R09: 0000000000000000 [ 393.177325][T10534] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 393.177337][T10534] R13: 0000000000000000 R14: 00007fcba1fb5fa0 R15: 00007ffdaa87ad78 [ 393.177363][T10534] [ 393.482869][ C1] vkms_vblank_simulate: vblank timer overrun [ 393.843072][T10538] FAULT_INJECTION: forcing a failure. [ 393.843072][T10538] name failslab, interval 1, probability 0, space 0, times 0 [ 393.930053][T10538] CPU: 0 UID: 0 PID: 10538 Comm: syz.1.1086 Tainted: G I 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 393.930104][T10538] Tainted: [I]=FIRMWARE_WORKAROUND [ 393.930114][T10538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 393.930130][T10538] Call Trace: [ 393.930139][T10538] [ 393.930149][T10538] dump_stack_lvl+0x16c/0x1f0 [ 393.930191][T10538] should_fail_ex+0x512/0x640 [ 393.930229][T10538] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 393.930265][T10538] should_failslab+0xc2/0x120 [ 393.930299][T10538] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 393.930330][T10538] ? find_held_lock+0x2b/0x80 [ 393.930355][T10538] ? __d_alloc+0x31/0xaa0 [ 393.930388][T10538] __d_alloc+0x31/0xaa0 [ 393.930420][T10538] d_alloc+0x4a/0x1e0 [ 393.930452][T10538] d_alloc_parallel+0xe3/0x12e0 [ 393.930504][T10538] ? __pfx_d_alloc_parallel+0x10/0x10 [ 393.930546][T10538] ? lockdep_init_map_type+0x5c/0x280 [ 393.930585][T10538] ? lockdep_init_map_type+0x5c/0x280 [ 393.930629][T10538] __lookup_slow+0x193/0x460 [ 393.930667][T10538] ? __pfx___lookup_slow+0x10/0x10 [ 393.930708][T10538] ? __SetPageMovable+0xb0/0x4a0 [ 393.930758][T10538] ? __SetPageMovable+0xb0/0x4a0 [ 393.930799][T10538] ? d_lookup+0xe7/0x190 [ 393.930842][T10538] lookup_one_len+0x17f/0x1b0 [ 393.930878][T10538] ? __pfx_lookup_one_len+0x10/0x10 [ 393.930924][T10538] ? mntput+0x10/0x90 [ 393.930969][T10538] start_creating.part.0+0x12f/0x3a0 [ 393.931014][T10538] debugfs_create_dir+0x6c/0x5f0 [ 393.931059][T10538] ptp_open+0x307/0x520 [ 393.931093][T10538] ? __pfx_ptp_open+0x10/0x10 [ 393.931131][T10538] ? __pfx_ptp_open+0x10/0x10 [ 393.931157][T10538] posix_clock_open+0x178/0x290 [ 393.931188][T10538] ? __pfx_posix_clock_open+0x10/0x10 [ 393.931215][T10538] chrdev_open+0x231/0x6a0 [ 393.931243][T10538] ? __pfx_apparmor_file_open+0x10/0x10 [ 393.931278][T10538] ? __pfx_chrdev_open+0x10/0x10 [ 393.931310][T10538] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 393.931358][T10538] do_dentry_open+0x741/0x1c10 [ 393.931387][T10538] ? __pfx_chrdev_open+0x10/0x10 [ 393.931424][T10538] vfs_open+0x82/0x3f0 [ 393.931464][T10538] path_openat+0x1e5e/0x2d40 [ 393.931504][T10538] ? __pfx_path_openat+0x10/0x10 [ 393.931541][T10538] do_filp_open+0x20b/0x470 [ 393.931569][T10538] ? __pfx_do_filp_open+0x10/0x10 [ 393.931622][T10538] ? alloc_fd+0x471/0x7d0 [ 393.931675][T10538] do_sys_openat2+0x11b/0x1d0 [ 393.931712][T10538] ? __pfx_do_sys_openat2+0x10/0x10 [ 393.931763][T10538] __x64_sys_openat+0x174/0x210 [ 393.931802][T10538] ? __pfx___x64_sys_openat+0x10/0x10 [ 393.931857][T10538] ? rcu_is_watching+0x12/0xc0 [ 393.931904][T10538] do_syscall_64+0xcd/0x230 [ 393.931949][T10538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.931980][T10538] RIP: 0033:0x7f4076b8e969 [ 393.932003][T10538] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 393.932032][T10538] RSP: 002b:00007f4077984038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 393.932069][T10538] RAX: ffffffffffffffda RBX: 00007f4076db6080 RCX: 00007f4076b8e969 [ 393.932087][T10538] RDX: 0000000000000440 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 393.932104][T10538] RBP: 00007f4076c10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 393.932121][T10538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 393.932138][T10538] R13: 0000000000000000 R14: 00007f4076db6080 R15: 00007fff120cae08 [ 393.932174][T10538] [ 394.022629][T10546] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1088'. [ 394.141108][T10547] netlink: 326 bytes leftover after parsing attributes in process `syz.3.1088'. [ 396.382120][T10586] FAULT_INJECTION: forcing a failure. [ 396.382120][T10586] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 396.410321][T10586] CPU: 1 UID: 0 PID: 10586 Comm: syz.2.1099 Tainted: G I 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 396.410371][T10586] Tainted: [I]=FIRMWARE_WORKAROUND [ 396.410384][T10586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 396.410401][T10586] Call Trace: [ 396.410411][T10586] [ 396.410422][T10586] dump_stack_lvl+0x16c/0x1f0 [ 396.410466][T10586] should_fail_ex+0x512/0x640 [ 396.410515][T10586] _copy_from_user+0x2e/0xd0 [ 396.410562][T10586] move_addr_to_kernel+0x65/0x170 [ 396.410609][T10586] __copy_msghdr+0x386/0x470 [ 396.410641][T10586] copy_msghdr_from_user+0xc1/0x160 [ 396.410673][T10586] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 396.410712][T10586] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 396.410766][T10586] ___sys_sendmsg+0xfe/0x1d0 [ 396.410800][T10586] ? __pfx____sys_sendmsg+0x10/0x10 [ 396.410879][T10586] __sys_sendmsg+0x16d/0x220 [ 396.410912][T10586] ? __pfx___sys_sendmsg+0x10/0x10 [ 396.410943][T10586] ? __x64_sys_futex+0x1e0/0x4c0 [ 396.410984][T10586] ? rcu_is_watching+0x12/0xc0 [ 396.411021][T10586] do_syscall_64+0xcd/0x230 [ 396.411063][T10586] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.411093][T10586] RIP: 0033:0x7f59d8d8e969 [ 396.411115][T10586] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 396.411144][T10586] RSP: 002b:00007f59d9b9a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 396.411172][T10586] RAX: ffffffffffffffda RBX: 00007f59d8fb5fa0 RCX: 00007f59d8d8e969 [ 396.411191][T10586] RDX: 0000000004000010 RSI: 0000200000000100 RDI: 0000000000000008 [ 396.411209][T10586] RBP: 00007f59d8e10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 396.411226][T10586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 396.411242][T10586] R13: 0000000000000000 R14: 00007f59d8fb5fa0 R15: 00007fff91ca9368 [ 396.411277][T10586] [ 396.610032][ C1] vkms_vblank_simulate: vblank timer overrun [ 398.285682][T10613] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1107'. [ 398.920343][T10624] FAULT_INJECTION: forcing a failure. [ 398.920343][T10624] name failslab, interval 1, probability 0, space 0, times 0 [ 398.957141][T10624] CPU: 1 UID: 0 PID: 10624 Comm: syz.3.1111 Tainted: G I 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 398.957200][T10624] Tainted: [I]=FIRMWARE_WORKAROUND [ 398.957211][T10624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 398.957229][T10624] Call Trace: [ 398.957238][T10624] [ 398.957249][T10624] dump_stack_lvl+0x16c/0x1f0 [ 398.957324][T10624] should_fail_ex+0x512/0x640 [ 398.957371][T10624] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 398.957413][T10624] should_failslab+0xc2/0x120 [ 398.957454][T10624] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 398.957490][T10624] ? __alloc_skb+0x2b2/0x380 [ 398.957529][T10624] __alloc_skb+0x2b2/0x380 [ 398.957561][T10624] ? __pfx___alloc_skb+0x10/0x10 [ 398.957595][T10624] ? genl_rcv_msg+0x4bb/0x800 [ 398.957651][T10624] netlink_ack+0x15d/0xb80 [ 398.957690][T10624] ? __lock_acquire+0xaa4/0x1ba0 [ 398.957738][T10624] netlink_rcv_skb+0x347/0x440 [ 398.957776][T10624] ? __pfx_genl_rcv_msg+0x10/0x10 [ 398.957824][T10624] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 398.957882][T10624] ? __pfx_down_read+0x10/0x10 [ 398.957932][T10624] ? netlink_deliver_tap+0x1ae/0xd30 [ 398.957975][T10624] genl_rcv+0x28/0x40 [ 398.958014][T10624] netlink_unicast+0x53a/0x7f0 [ 398.958056][T10624] ? __pfx_netlink_unicast+0x10/0x10 [ 398.958092][T10624] ? __lock_acquire+0xaa4/0x1ba0 [ 398.958142][T10624] netlink_sendmsg+0x8d1/0xdd0 [ 398.958188][T10624] ? __pfx_netlink_sendmsg+0x10/0x10 [ 398.958243][T10624] ____sys_sendmsg+0xa95/0xc70 [ 398.958290][T10624] ? copy_msghdr_from_user+0x10a/0x160 [ 398.958334][T10624] ? __pfx_____sys_sendmsg+0x10/0x10 [ 398.958397][T10624] ? try_to_wake_up+0xa2f/0x1680 [ 398.958443][T10624] ___sys_sendmsg+0x134/0x1d0 [ 398.958485][T10624] ? __pfx____sys_sendmsg+0x10/0x10 [ 398.958557][T10624] __sys_sendmsg+0x16d/0x220 [ 398.958588][T10624] ? __pfx___sys_sendmsg+0x10/0x10 [ 398.958617][T10624] ? __x64_sys_futex+0x1e0/0x4c0 [ 398.958655][T10624] ? rcu_is_watching+0x12/0xc0 [ 398.958691][T10624] do_syscall_64+0xcd/0x230 [ 398.958736][T10624] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.958782][T10624] RIP: 0033:0x7fcba1d8e969 [ 398.958807][T10624] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 398.958839][T10624] RSP: 002b:00007fcba2c25038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 398.958869][T10624] RAX: ffffffffffffffda RBX: 00007fcba1fb5fa0 RCX: 00007fcba1d8e969 [ 398.958890][T10624] RDX: 0000000000008880 RSI: 0000200000001e00 RDI: 0000000000000008 [ 398.958908][T10624] RBP: 00007fcba1e10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 398.958927][T10624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 398.958947][T10624] R13: 0000000000000000 R14: 00007fcba1fb5fa0 R15: 00007ffdaa87ad78 [ 398.958989][T10624] [ 399.237746][ C1] vkms_vblank_simulate: vblank timer overrun [ 400.214672][T10650] FAULT_INJECTION: forcing a failure. [ 400.214672][T10650] name failslab, interval 1, probability 0, space 0, times 0 [ 400.254639][T10650] CPU: 0 UID: 0 PID: 10650 Comm: syz.1.1116 Tainted: G I 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 400.254685][T10650] Tainted: [I]=FIRMWARE_WORKAROUND [ 400.254696][T10650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 400.254712][T10650] Call Trace: [ 400.254720][T10650] [ 400.254730][T10650] dump_stack_lvl+0x16c/0x1f0 [ 400.254772][T10650] should_fail_ex+0x512/0x640 [ 400.254810][T10650] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 400.254846][T10650] should_failslab+0xc2/0x120 [ 400.254881][T10650] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 400.254909][T10650] ? __proc_create+0xc3/0x8c0 [ 400.254938][T10650] ? __proc_create+0x2ce/0x8c0 [ 400.254971][T10650] __proc_create+0x2ce/0x8c0 [ 400.255002][T10650] ? __pfx___proc_create+0x10/0x10 [ 400.255039][T10650] ? find_held_lock+0x2b/0x80 [ 400.255087][T10650] proc_create_reg+0x7d/0x180 [ 400.255126][T10650] proc_create_net_data+0x8e/0x1b0 [ 400.255161][T10650] ? __pfx_proc_create_net_data+0x10/0x10 [ 400.255196][T10650] ? ndisc_net_init+0x1bc/0x250 [ 400.255231][T10650] ? __pfx_ndisc_net_init+0x10/0x10 [ 400.255280][T10650] igmp6_net_init+0x214/0x470 [ 400.255317][T10650] ? __pfx_igmp6_net_init+0x10/0x10 [ 400.255350][T10650] ops_init+0x1df/0x5f0 [ 400.255385][T10650] setup_net+0x21e/0x850 [ 400.255423][T10650] ? __pfx_setup_net+0x10/0x10 [ 400.255453][T10650] ? lockdep_init_map_type+0x5c/0x280 [ 400.255491][T10650] ? __pfx_down_read_killable+0x10/0x10 [ 400.255552][T10650] ? debug_mutex_init+0x37/0x70 [ 400.255600][T10650] copy_net_ns+0x2a6/0x5f0 [ 400.255638][T10650] create_new_namespaces+0x3ea/0xad0 [ 400.255678][T10650] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 400.255711][T10650] ksys_unshare+0x45b/0xa40 [ 400.255747][T10650] ? __pfx_ksys_unshare+0x10/0x10 [ 400.255778][T10650] ? xfd_validate_state+0x5d/0x180 [ 400.255825][T10650] ? rcu_is_watching+0x12/0xc0 [ 400.255858][T10650] __x64_sys_unshare+0x31/0x40 [ 400.255893][T10650] do_syscall_64+0xcd/0x230 [ 400.255931][T10650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.255958][T10650] RIP: 0033:0x7f4076b8e969 [ 400.255982][T10650] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 400.256010][T10650] RSP: 002b:00007f40779a5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 400.256036][T10650] RAX: ffffffffffffffda RBX: 00007f4076db5fa0 RCX: 00007f4076b8e969 [ 400.256054][T10650] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 400.256071][T10650] RBP: 00007f4076c10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 400.256086][T10650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 400.256100][T10650] R13: 0000000000000000 R14: 00007f4076db5fa0 R15: 00007fff120cae08 [ 400.256133][T10650] [ 402.209403][T10690] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1128'. [ 403.132499][T10712] ubi0: attaching mtd0 [ 403.135412][T10712] ubi0: scanning is finished [ 403.135477][T10712] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 403.257035][T10712] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 403.590445][T10698] tty tty48: ldisc open failed (-12), clearing slot 47 [ 403.911116][T10715] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1143'. [ 403.926864][T10715] netlink: 326 bytes leftover after parsing attributes in process `syz.0.1143'. [ 404.615177][T10722] FAULT_INJECTION: forcing a failure. [ 404.615177][T10722] name failslab, interval 1, probability 0, space 0, times 0 [ 404.640899][T10722] CPU: 1 UID: 0 PID: 10722 Comm: syz.1.1136 Tainted: G I 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 404.640952][T10722] Tainted: [I]=FIRMWARE_WORKAROUND [ 404.640962][T10722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 404.640978][T10722] Call Trace: [ 404.640987][T10722] [ 404.640996][T10722] dump_stack_lvl+0x16c/0x1f0 [ 404.641036][T10722] should_fail_ex+0x512/0x640 [ 404.641071][T10722] ? fs_reclaim_acquire+0xae/0x150 [ 404.641114][T10722] should_failslab+0xc2/0x120 [ 404.641144][T10722] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 404.641174][T10722] ? security_inode_alloc+0x3b/0x2b0 [ 404.641207][T10722] security_inode_alloc+0x3b/0x2b0 [ 404.641237][T10722] inode_init_always_gfp+0xce4/0x1030 [ 404.641283][T10722] alloc_inode+0x86/0x240 [ 404.641314][T10722] new_inode+0x22/0x1c0 [ 404.641342][T10722] ? start_creating.part.0+0x25d/0x3a0 [ 404.641381][T10722] debugfs_create_dir+0xdd/0x5f0 [ 404.641420][T10722] ptp_open+0x307/0x520 [ 404.641449][T10722] ? __pfx_ptp_open+0x10/0x10 [ 404.641484][T10722] ? __pfx_ptp_open+0x10/0x10 [ 404.641507][T10722] posix_clock_open+0x178/0x290 [ 404.641534][T10722] ? __pfx_posix_clock_open+0x10/0x10 [ 404.641560][T10722] chrdev_open+0x231/0x6a0 [ 404.641586][T10722] ? __pfx_apparmor_file_open+0x10/0x10 [ 404.641618][T10722] ? __pfx_chrdev_open+0x10/0x10 [ 404.641648][T10722] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 404.641692][T10722] do_dentry_open+0x741/0x1c10 [ 404.641718][T10722] ? __pfx_chrdev_open+0x10/0x10 [ 404.641751][T10722] vfs_open+0x82/0x3f0 [ 404.641786][T10722] path_openat+0x1e5e/0x2d40 [ 404.641822][T10722] ? __pfx_path_openat+0x10/0x10 [ 404.641854][T10722] do_filp_open+0x20b/0x470 [ 404.641878][T10722] ? __pfx_do_filp_open+0x10/0x10 [ 404.641925][T10722] ? alloc_fd+0x471/0x7d0 [ 404.641983][T10722] do_sys_openat2+0x11b/0x1d0 [ 404.642017][T10722] ? __pfx_do_sys_openat2+0x10/0x10 [ 404.642062][T10722] __x64_sys_openat+0x174/0x210 [ 404.642095][T10722] ? __pfx___x64_sys_openat+0x10/0x10 [ 404.642129][T10722] ? rcu_is_watching+0x12/0xc0 [ 404.642160][T10722] do_syscall_64+0xcd/0x230 [ 404.642198][T10722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.642224][T10722] RIP: 0033:0x7f4076b8e969 [ 404.642244][T10722] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 404.642270][T10722] RSP: 002b:00007f40779a5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 404.642292][T10722] RAX: ffffffffffffffda RBX: 00007f4076db5fa0 RCX: 00007f4076b8e969 [ 404.642309][T10722] RDX: 0000000000000440 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 404.642326][T10722] RBP: 00007f4076c10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 404.642342][T10722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 404.642357][T10722] R13: 0000000000000000 R14: 00007f4076db5fa0 R15: 00007fff120cae08 [ 404.642391][T10722] [ 404.642429][T10722] debugfs: out of free dentries, can not create directory '0xffff888027a48000' [ 406.439385][T10766] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1145'. [ 409.048578][T10785] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1148'. [ 409.891214][T10790] netlink: 93 bytes leftover after parsing attributes in process `syz.2.1150'. [ 410.354622][T10830] FAULT_INJECTION: forcing a failure. [ 410.354622][T10830] name failslab, interval 1, probability 0, space 0, times 0 [ 410.380527][T10830] CPU: 0 UID: 0 PID: 10830 Comm: syz.1.1163 Tainted: G I 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 410.380583][T10830] Tainted: [I]=FIRMWARE_WORKAROUND [ 410.380594][T10830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 410.380611][T10830] Call Trace: [ 410.380620][T10830] [ 410.380631][T10830] dump_stack_lvl+0x16c/0x1f0 [ 410.380674][T10830] should_fail_ex+0x512/0x640 [ 410.380713][T10830] ? fs_reclaim_acquire+0xae/0x150 [ 410.380778][T10830] should_failslab+0xc2/0x120 [ 410.380816][T10830] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 410.380852][T10830] ? security_inode_alloc+0x3b/0x2b0 [ 410.380902][T10830] security_inode_alloc+0x3b/0x2b0 [ 410.380934][T10830] inode_init_always_gfp+0xce4/0x1030 [ 410.380983][T10830] alloc_inode+0x86/0x240 [ 410.381013][T10830] new_inode+0x22/0x1c0 [ 410.381043][T10830] ? start_creating.part.0+0x25d/0x3a0 [ 410.381082][T10830] debugfs_create_dir+0xdd/0x5f0 [ 410.381122][T10830] ptp_open+0x307/0x520 [ 410.381154][T10830] ? __pfx_ptp_open+0x10/0x10 [ 410.381189][T10830] ? __pfx_ptp_open+0x10/0x10 [ 410.381214][T10830] posix_clock_open+0x178/0x290 [ 410.381244][T10830] ? __pfx_posix_clock_open+0x10/0x10 [ 410.381271][T10830] chrdev_open+0x231/0x6a0 [ 410.381298][T10830] ? __pfx_apparmor_file_open+0x10/0x10 [ 410.381333][T10830] ? __pfx_chrdev_open+0x10/0x10 [ 410.381362][T10830] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 410.381432][T10830] do_dentry_open+0x741/0x1c10 [ 410.381463][T10830] ? __pfx_chrdev_open+0x10/0x10 [ 410.381505][T10830] vfs_open+0x82/0x3f0 [ 410.381548][T10830] path_openat+0x1e5e/0x2d40 [ 410.381603][T10830] ? __pfx_path_openat+0x10/0x10 [ 410.381643][T10830] do_filp_open+0x20b/0x470 [ 410.381671][T10830] ? __pfx_do_filp_open+0x10/0x10 [ 410.381718][T10830] ? alloc_fd+0x471/0x7d0 [ 410.381767][T10830] do_sys_openat2+0x11b/0x1d0 [ 410.381800][T10830] ? __pfx_do_sys_openat2+0x10/0x10 [ 410.381848][T10830] __x64_sys_openat+0x174/0x210 [ 410.381883][T10830] ? __pfx___x64_sys_openat+0x10/0x10 [ 410.381919][T10830] ? rcu_is_watching+0x12/0xc0 [ 410.381951][T10830] do_syscall_64+0xcd/0x230 [ 410.382000][T10830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.382024][T10830] RIP: 0033:0x7f4076b8e969 [ 410.382042][T10830] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 410.382066][T10830] RSP: 002b:00007f40779a5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 410.382088][T10830] RAX: ffffffffffffffda RBX: 00007f4076db5fa0 RCX: 00007f4076b8e969 [ 410.382104][T10830] RDX: 0000000000000440 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 410.382120][T10830] RBP: 00007f4076c10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 410.382135][T10830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 410.382149][T10830] R13: 0000000000000000 R14: 00007f4076db5fa0 R15: 00007fff120cae08 [ 410.382180][T10830] [ 410.382221][T10830] debugfs: out of free dentries, can not create directory '0xffff88807f2dc000' [ 412.013119][T10859] FAULT_INJECTION: forcing a failure. [ 412.013119][T10859] name fail_futex, interval 1, probability 0, space 0, times 0 [ 412.026149][T10859] CPU: 0 UID: 0 PID: 10859 Comm: syz.1.1160 Tainted: G I 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 412.026191][T10859] Tainted: [I]=FIRMWARE_WORKAROUND [ 412.026202][T10859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 412.026217][T10859] Call Trace: [ 412.026226][T10859] [ 412.026236][T10859] dump_stack_lvl+0x16c/0x1f0 [ 412.026275][T10859] should_fail_ex+0x512/0x640 [ 412.026309][T10859] get_futex_key+0x49e/0x1000 [ 412.026334][T10859] ? __pfx_get_futex_key+0x10/0x10 [ 412.026353][T10859] ? cec_ioctl+0x193/0x2970 [ 412.026383][T10859] ? __pfx_cec_ioctl+0x10/0x10 [ 412.026411][T10859] futex_wake+0xe7/0x4e0 [ 412.026438][T10859] ? __pfx_futex_wake+0x10/0x10 [ 412.026484][T10859] do_futex+0x1e3/0x350 [ 412.026507][T10859] ? __pfx_do_futex+0x10/0x10 [ 412.026531][T10859] ? find_held_lock+0x2b/0x80 [ 412.026554][T10859] __x64_sys_futex+0x1e0/0x4c0 [ 412.026581][T10859] ? __pfx___x64_sys_futex+0x10/0x10 [ 412.026616][T10859] do_syscall_64+0xcd/0x230 [ 412.026648][T10859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.026669][T10859] RIP: 0033:0x7f4076b8e969 [ 412.026686][T10859] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 412.026709][T10859] RSP: 002b:00007f40779a50e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 412.026729][T10859] RAX: ffffffffffffffda RBX: 00007f4076db5fa8 RCX: 00007f4076b8e969 [ 412.026744][T10859] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f4076db5fac [ 412.026757][T10859] RBP: 00007f4076db5fa0 R08: 00007f40779a6000 R09: 0000000000000000 [ 412.026771][T10859] R10: ffffffffffffffff R11: 0000000000000246 R12: 00007f4076db5fac [ 412.026786][T10859] R13: 0000000000000000 R14: 00007fff120cad20 R15: 00007fff120cae08 [ 412.026815][T10859] [ 412.935741][T10873] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1164'. [ 413.471293][T10889] FAULT_INJECTION: forcing a failure. [ 413.471293][T10889] name failslab, interval 1, probability 0, space 0, times 0 [ 413.597982][T10889] CPU: 1 UID: 0 PID: 10889 Comm: syz.0.1168 Tainted: G I 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 413.598031][T10889] Tainted: [I]=FIRMWARE_WORKAROUND [ 413.598042][T10889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 413.598059][T10889] Call Trace: [ 413.598068][T10889] [ 413.598079][T10889] dump_stack_lvl+0x16c/0x1f0 [ 413.598144][T10889] should_fail_ex+0x512/0x640 [ 413.598187][T10889] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 413.598228][T10889] should_failslab+0xc2/0x120 [ 413.598267][T10889] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 413.598302][T10889] ? __proc_create+0xc3/0x8c0 [ 413.598339][T10889] ? __proc_create+0x2ce/0x8c0 [ 413.598387][T10889] __proc_create+0x2ce/0x8c0 [ 413.598424][T10889] ? __pfx___proc_create+0x10/0x10 [ 413.598466][T10889] ? _raw_write_unlock+0x28/0x50 [ 413.598504][T10889] ? proc_register+0x314/0x5f0 [ 413.598545][T10889] proc_create_reg+0x7d/0x180 [ 413.598592][T10889] proc_create_net_data+0x8e/0x1b0 [ 413.598631][T10889] ? __pfx_proc_create_net_data+0x10/0x10 [ 413.598679][T10889] ? __pfx_ip6mr_net_init+0x10/0x10 [ 413.598722][T10889] ip6mr_net_init+0x2ce/0x4e0 [ 413.598783][T10889] ? __pfx_ip6mr_net_init+0x10/0x10 [ 413.598827][T10889] ops_init+0x1df/0x5f0 [ 413.598871][T10889] setup_net+0x21e/0x850 [ 413.598913][T10889] ? __pfx_setup_net+0x10/0x10 [ 413.598949][T10889] ? lockdep_init_map_type+0x5c/0x280 [ 413.598993][T10889] ? __pfx_down_read_killable+0x10/0x10 [ 413.599048][T10889] ? debug_mutex_init+0x37/0x70 [ 413.599105][T10889] copy_net_ns+0x2a6/0x5f0 [ 413.599151][T10889] create_new_namespaces+0x3ea/0xad0 [ 413.599197][T10889] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 413.599239][T10889] ksys_unshare+0x45b/0xa40 [ 413.599284][T10889] ? __pfx_ksys_unshare+0x10/0x10 [ 413.599326][T10889] ? xfd_validate_state+0x5d/0x180 [ 413.599382][T10889] ? rcu_is_watching+0x12/0xc0 [ 413.599423][T10889] __x64_sys_unshare+0x31/0x40 [ 413.599468][T10889] do_syscall_64+0xcd/0x230 [ 413.599515][T10889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.599549][T10889] RIP: 0033:0x7f31bb58e969 [ 413.599575][T10889] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 413.599616][T10889] RSP: 002b:00007f31bc379038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 413.599647][T10889] RAX: ffffffffffffffda RBX: 00007f31bb7b5fa0 RCX: 00007f31bb58e969 [ 413.599669][T10889] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 413.599690][T10889] RBP: 00007f31bb610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 413.599711][T10889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 413.599731][T10889] R13: 0000000000000000 R14: 00007f31bb7b5fa0 R15: 00007ffe570701b8 [ 413.599775][T10889] [ 414.145023][T10907] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1170'. [ 414.762273][T10935] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1182'. [ 415.007001][T10946] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 415.260468][T10946] mkiss: ax0: crc mode is auto. [ 416.341615][T10936] FAULT_INJECTION: forcing a failure. [ 416.341615][T10936] name failslab, interval 1, probability 0, space 0, times 0 [ 416.341657][T10936] CPU: 1 UID: 0 PID: 10936 Comm: syz.3.1174 Tainted: G I 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 416.341694][T10936] Tainted: [I]=FIRMWARE_WORKAROUND [ 416.341703][T10936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 416.341717][T10936] Call Trace: [ 416.341724][T10936] [ 416.341732][T10936] dump_stack_lvl+0x16c/0x1f0 [ 416.341767][T10936] should_fail_ex+0x512/0x640 [ 416.341800][T10936] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 416.341843][T10936] should_failslab+0xc2/0x120 [ 416.341872][T10936] __kmalloc_cache_noprof+0x6a/0x3e0 [ 416.341912][T10936] ? resv_map_alloc+0x7e/0x400 [ 416.341945][T10936] resv_map_alloc+0x7e/0x400 [ 416.341976][T10936] hugetlbfs_get_inode+0x33f/0x730 [ 416.342009][T10936] hugetlb_file_setup+0x15b/0x620 [ 416.342042][T10936] ksys_mmap_pgoff+0x189/0x5c0 [ 416.342077][T10936] ? rcu_is_watching+0x12/0xc0 [ 416.342102][T10936] __x64_sys_mmap+0x125/0x190 [ 416.342127][T10936] do_syscall_64+0xcd/0x230 [ 416.342162][T10936] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.342189][T10936] RIP: 0033:0x7fcba1d8e969 [ 416.342206][T10936] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 416.342242][T10936] RSP: 002b:00007fcba2be3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 416.342262][T10936] RAX: ffffffffffffffda RBX: 00007fcba1fb6160 RCX: 00007fcba1d8e969 [ 416.342277][T10936] RDX: 0000000000000002 RSI: 0000000000a00006 RDI: 0000000000000000 [ 416.342292][T10936] RBP: 00007fcba1e10ab1 R08: 0000000000000602 R09: 0000300000000000 [ 416.342306][T10936] R10: 0000000000040eb1 R11: 0000000000000246 R12: 0000000000000000 [ 416.342320][T10936] R13: 0000000000000000 R14: 00007fcba1fb6160 R15: 00007ffdaa87ad78 [ 416.342348][T10936] [ 417.026701][T10980] FAULT_INJECTION: forcing a failure. [ 417.026701][T10980] name failslab, interval 1, probability 0, space 0, times 0 [ 417.046836][T10980] CPU: 1 UID: 0 PID: 10980 Comm: syz.2.1183 Tainted: G I 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 417.046881][T10980] Tainted: [I]=FIRMWARE_WORKAROUND [ 417.046892][T10980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 417.046907][T10980] Call Trace: [ 417.046916][T10980] [ 417.046926][T10980] dump_stack_lvl+0x16c/0x1f0 [ 417.046969][T10980] should_fail_ex+0x512/0x640 [ 417.047008][T10980] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 417.047045][T10980] should_failslab+0xc2/0x120 [ 417.047079][T10980] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 417.047112][T10980] ? sock_alloc_inode+0x25/0x1c0 [ 417.047154][T10980] ? __pfx_sock_alloc_inode+0x10/0x10 [ 417.047186][T10980] sock_alloc_inode+0x25/0x1c0 [ 417.047220][T10980] alloc_inode+0x61/0x240 [ 417.047255][T10980] sock_alloc+0x40/0x280 [ 417.047288][T10980] __sock_create+0xc1/0x8d0 [ 417.047327][T10980] ? __pfx_inet_ctl_sock_create+0x10/0x10 [ 417.047372][T10980] inet_ctl_sock_create+0x94/0x230 [ 417.047410][T10980] ? __pfx_inet_ctl_sock_create+0x10/0x10 [ 417.047447][T10980] ? ndisc_net_init+0x1bc/0x250 [ 417.047478][T10980] ? __pfx_ndisc_net_init+0x10/0x10 [ 417.047511][T10980] ? __pfx_igmp6_net_init+0x10/0x10 [ 417.047541][T10980] igmp6_net_init+0x35/0x470 [ 417.047572][T10980] ? __pfx_igmp6_net_init+0x10/0x10 [ 417.047601][T10980] ops_init+0x1df/0x5f0 [ 417.047633][T10980] setup_net+0x21e/0x850 [ 417.047665][T10980] ? __pfx_setup_net+0x10/0x10 [ 417.047691][T10980] ? lockdep_init_map_type+0x5c/0x280 [ 417.047725][T10980] ? __pfx_down_read_killable+0x10/0x10 [ 417.047766][T10980] ? debug_mutex_init+0x37/0x70 [ 417.047810][T10980] copy_net_ns+0x2a6/0x5f0 [ 417.047850][T10980] create_new_namespaces+0x3ea/0xad0 [ 417.047888][T10980] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 417.047920][T10980] ksys_unshare+0x45b/0xa40 [ 417.047955][T10980] ? __pfx_ksys_unshare+0x10/0x10 [ 417.047988][T10980] ? xfd_validate_state+0x5d/0x180 [ 417.048030][T10980] ? rcu_is_watching+0x12/0xc0 [ 417.048061][T10980] __x64_sys_unshare+0x31/0x40 [ 417.048096][T10980] do_syscall_64+0xcd/0x230 [ 417.048133][T10980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.048159][T10980] RIP: 0033:0x7f59d8d8e969 [ 417.048181][T10980] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 417.048207][T10980] RSP: 002b:00007f59d9b9a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 417.048231][T10980] RAX: ffffffffffffffda RBX: 00007f59d8fb5fa0 RCX: 00007f59d8d8e969 [ 417.048248][T10980] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 417.048264][T10980] RBP: 00007f59d8e10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 417.048280][T10980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 417.048295][T10980] R13: 0000000000000000 R14: 00007f59d8fb5fa0 R15: 00007fff91ca9368 [ 417.048328][T10980] [ 417.048406][T10980] socket: no more sockets [ 417.343664][T10980] Failed to initialize the IGMP6 control socket (err -23) [ 417.429829][T10984] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1181'. [ 417.541296][T10991] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1185'. [ 418.159519][T11013] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 418.212576][T11010] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1197'. [ 418.271447][T11018] mkiss: ax0: crc mode is auto. [ 418.279080][T11019] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1188'. [ 419.720525][T11047] FAULT_INJECTION: forcing a failure. [ 419.720525][T11047] name failslab, interval 1, probability 0, space 0, times 0 [ 419.862478][T11047] CPU: 1 UID: 0 PID: 11047 Comm: syz.0.1195 Tainted: G I 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 419.862528][T11047] Tainted: [I]=FIRMWARE_WORKAROUND [ 419.862541][T11047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 419.862557][T11047] Call Trace: [ 419.862568][T11047] [ 419.862579][T11047] dump_stack_lvl+0x16c/0x1f0 [ 419.862625][T11047] should_fail_ex+0x512/0x640 [ 419.862665][T11047] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 419.862704][T11047] should_failslab+0xc2/0x120 [ 419.862740][T11047] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 419.862771][T11047] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 419.862811][T11047] ? sock_alloc_inode+0x25/0x1c0 [ 419.862854][T11047] ? __pfx_sock_alloc_inode+0x10/0x10 [ 419.862889][T11047] sock_alloc_inode+0x25/0x1c0 [ 419.862924][T11047] alloc_inode+0x61/0x240 [ 419.862961][T11047] sock_alloc+0x40/0x280 [ 419.863011][T11047] __sock_create+0xc1/0x8d0 [ 419.863058][T11047] inet_ctl_sock_create+0x94/0x230 [ 419.863096][T11047] ? __pfx_inet_ctl_sock_create+0x10/0x10 [ 419.863132][T11047] ? ndisc_net_init+0x1bc/0x250 [ 419.863164][T11047] ? __pfx_ndisc_net_init+0x10/0x10 [ 419.863208][T11047] igmp6_net_init+0x1b2/0x470 [ 419.863243][T11047] ? __pfx_igmp6_net_init+0x10/0x10 [ 419.863274][T11047] ops_init+0x1df/0x5f0 [ 419.863310][T11047] setup_net+0x21e/0x850 [ 419.863346][T11047] ? __pfx_setup_net+0x10/0x10 [ 419.863376][T11047] ? lockdep_init_map_type+0x5c/0x280 [ 419.863414][T11047] ? __pfx_down_read_killable+0x10/0x10 [ 419.863460][T11047] ? debug_mutex_init+0x37/0x70 [ 419.863509][T11047] copy_net_ns+0x2a6/0x5f0 [ 419.863548][T11047] create_new_namespaces+0x3ea/0xad0 [ 419.863588][T11047] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 419.863622][T11047] ksys_unshare+0x45b/0xa40 [ 419.863660][T11047] ? __pfx_ksys_unshare+0x10/0x10 [ 419.863695][T11047] ? xfd_validate_state+0x5d/0x180 [ 419.863740][T11047] ? rcu_is_watching+0x12/0xc0 [ 419.863775][T11047] __x64_sys_unshare+0x31/0x40 [ 419.863811][T11047] do_syscall_64+0xcd/0x230 [ 419.863850][T11047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.863878][T11047] RIP: 0033:0x7f31bb58e969 [ 419.863899][T11047] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 419.863927][T11047] RSP: 002b:00007f31bc379038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 419.863970][T11047] RAX: ffffffffffffffda RBX: 00007f31bb7b5fa0 RCX: 00007f31bb58e969 [ 419.863989][T11047] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 419.864006][T11047] RBP: 00007f31bb610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 419.864022][T11047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 419.864038][T11047] R13: 0000000000000000 R14: 00007f31bb7b5fa0 R15: 00007ffe570701b8 [ 419.864076][T11047] [ 419.868556][T11047] socket: no more sockets [ 420.223081][T11047] Failed to initialize the IGMP6 autojoin socket (err -23) [ 421.135427][T11097] zswap: compressor not available [ 421.213267][T11101] Setting dangerous option i915.mitigations - tainting kernel [ 422.236145][T11126] FAULT_INJECTION: forcing a failure. [ 422.236145][T11126] name failslab, interval 1, probability 0, space 0, times 0 [ 422.289539][T11126] CPU: 1 UID: 0 PID: 11126 Comm: syz.1.1216 Tainted: G U I 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 422.289596][T11126] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND [ 422.289609][T11126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 422.289628][T11126] Call Trace: [ 422.289639][T11126] [ 422.289650][T11126] dump_stack_lvl+0x16c/0x1f0 [ 422.289698][T11126] should_fail_ex+0x512/0x640 [ 422.289743][T11126] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 422.289810][T11126] should_failslab+0xc2/0x120 [ 422.289851][T11126] __kmalloc_cache_noprof+0x6a/0x3e0 [ 422.289902][T11126] ? evm_inode_alloc_security+0x49/0xc0 [ 422.289952][T11126] ? security_inode_alloc+0xcf/0x2b0 [ 422.289994][T11126] ? alloc_pipe_info+0x10e/0x590 [ 422.290030][T11126] alloc_pipe_info+0x10e/0x590 [ 422.290065][T11126] create_pipe_files+0x8c/0x930 [ 422.290102][T11126] do_pipe2+0xaf/0x1c0 [ 422.290143][T11126] ? __pfx_do_pipe2+0x10/0x10 [ 422.290184][T11126] __x64_sys_pipe+0x33/0x50 [ 422.290213][T11126] do_syscall_64+0xcd/0x230 [ 422.290253][T11126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.290280][T11126] RIP: 0033:0x7f4076b8e969 [ 422.290301][T11126] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 422.290328][T11126] RSP: 002b:00007f40779a5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000016 [ 422.290354][T11126] RAX: ffffffffffffffda RBX: 00007f4076db5fa0 RCX: 00007f4076b8e969 [ 422.290372][T11126] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 422.290387][T11126] RBP: 00007f4076c10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 422.290402][T11126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 422.290417][T11126] R13: 0000000000000000 R14: 00007f4076db5fa0 R15: 00007fff120cae08 [ 422.290449][T11126] [ 422.475952][ C1] vkms_vblank_simulate: vblank timer overrun [ 424.917132][T11156] FAULT_INJECTION: forcing a failure. [ 424.917132][T11156] name failslab, interval 1, probability 0, space 0, times 0 [ 424.968964][T11156] CPU: 0 UID: 0 PID: 11156 Comm: syz.3.1217 Tainted: G U I 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 424.969025][T11156] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND [ 424.969039][T11156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 424.969059][T11156] Call Trace: [ 424.969070][T11156] [ 424.969082][T11156] dump_stack_lvl+0x16c/0x1f0 [ 424.969131][T11156] should_fail_ex+0x512/0x640 [ 424.969177][T11156] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 424.969224][T11156] should_failslab+0xc2/0x120 [ 424.969264][T11156] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 424.969307][T11156] ? snd_timer_instance_new+0x65/0x2e0 [ 424.969362][T11156] kstrdup+0x53/0x100 [ 424.969403][T11156] snd_timer_instance_new+0x65/0x2e0 [ 424.969447][T11156] snd_seq_timer_open+0x1cc/0x5e0 [ 424.969483][T11156] ? __pfx_snd_seq_timer_open+0x10/0x10 [ 424.969520][T11156] ? find_held_lock+0x2b/0x80 [ 424.969558][T11156] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 424.969597][T11156] ? lockdep_hardirqs_on+0x7c/0x110 [ 424.969637][T11156] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 424.969682][T11156] queue_use+0xe3/0x250 [ 424.969729][T11156] snd_seq_queue_alloc+0x2e5/0x550 [ 424.969785][T11156] snd_seq_ioctl_create_queue+0xa9/0x380 [ 424.969833][T11156] snd_seq_kernel_client_ctl+0x107/0x1c0 [ 424.969881][T11156] alloc_seq_queue+0xda/0x180 [ 424.969937][T11156] ? __pfx_alloc_seq_queue+0x10/0x10 [ 424.970016][T11156] ? mark_held_locks+0x49/0x80 [ 424.970051][T11156] ? _raw_spin_unlock_irq+0x23/0x50 [ 424.970087][T11156] snd_seq_oss_open+0x38c/0xa20 [ 424.970129][T11156] odev_open+0x6f/0x90 [ 424.970159][T11156] ? __pfx_odev_open+0x10/0x10 [ 424.970189][T11156] soundcore_open+0x409/0x580 [ 424.970222][T11156] ? __pfx_soundcore_open+0x10/0x10 [ 424.970252][T11156] chrdev_open+0x231/0x6a0 [ 424.970281][T11156] ? __pfx_apparmor_file_open+0x10/0x10 [ 424.970316][T11156] ? __pfx_chrdev_open+0x10/0x10 [ 424.970348][T11156] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 424.970396][T11156] do_dentry_open+0x741/0x1c10 [ 424.970424][T11156] ? __pfx_chrdev_open+0x10/0x10 [ 424.970460][T11156] vfs_open+0x82/0x3f0 [ 424.970500][T11156] path_openat+0x1e5e/0x2d40 [ 424.970539][T11156] ? __pfx_path_openat+0x10/0x10 [ 424.970575][T11156] do_filp_open+0x20b/0x470 [ 424.970602][T11156] ? __pfx_do_filp_open+0x10/0x10 [ 424.970655][T11156] ? alloc_fd+0x471/0x7d0 [ 424.970709][T11156] do_sys_openat2+0x11b/0x1d0 [ 424.970744][T11156] ? __pfx_do_sys_openat2+0x10/0x10 [ 424.970795][T11156] __x64_sys_openat+0x174/0x210 [ 424.970839][T11156] ? __pfx___x64_sys_openat+0x10/0x10 [ 424.970879][T11156] ? rcu_is_watching+0x12/0xc0 [ 424.970914][T11156] do_syscall_64+0xcd/0x230 [ 424.970954][T11156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.970981][T11156] RIP: 0033:0x7fcba1d8e969 [ 424.971002][T11156] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 424.971029][T11156] RSP: 002b:00007fcba2c25038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 424.971055][T11156] RAX: ffffffffffffffda RBX: 00007fcba1fb5fa0 RCX: 00007fcba1d8e969 [ 424.971072][T11156] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 424.971090][T11156] RBP: 00007fcba1e10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 424.971107][T11156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 424.971122][T11156] R13: 0000000000000000 R14: 00007fcba1fb5fa0 R15: 00007ffdaa87ad78 [ 424.971157][T11156] [ 425.377275][T11159] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1218'. [ 425.425457][T11164] blktrace: Concurrent blktraces are not allowed on loop5 [ 425.896739][T11176] FAULT_INJECTION: forcing a failure. [ 425.896739][T11176] name failslab, interval 1, probability 0, space 0, times 0 [ 425.896813][T11176] CPU: 0 UID: 0 PID: 11176 Comm: syz.2.1222 Tainted: G U I 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 425.896860][T11176] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND [ 425.896872][T11176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 425.896889][T11176] Call Trace: [ 425.896898][T11176] [ 425.896908][T11176] dump_stack_lvl+0x16c/0x1f0 [ 425.896952][T11176] should_fail_ex+0x512/0x640 [ 425.896991][T11176] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 425.897040][T11176] should_failslab+0xc2/0x120 [ 425.897091][T11176] __kmalloc_cache_noprof+0x6a/0x3e0 [ 425.897153][T11176] ? kobject_create_and_add+0x4a/0xf0 [ 425.897202][T11176] kobject_create_and_add+0x4a/0xf0 [ 425.897248][T11176] add_disk_fwnode+0x8d0/0x13a0 [ 425.897297][T11176] zram_add+0x494/0x6c0 [ 425.897334][T11176] ? __pfx_zram_add+0x10/0x10 [ 425.897396][T11176] ? find_held_lock+0x2b/0x80 [ 425.897431][T11176] ? __pfx_hot_add_show+0x10/0x10 [ 425.897465][T11176] ? __pfx_class_attr_show+0x10/0x10 [ 425.897499][T11176] hot_add_show+0x21/0x80 [ 425.897536][T11176] class_attr_show+0x6f/0xa0 [ 425.897572][T11176] sysfs_kf_seq_show+0x213/0x3e0 [ 425.897620][T11176] seq_read_iter+0x506/0x12c0 [ 425.897676][T11176] kernfs_fop_read_iter+0x40f/0x5a0 [ 425.897711][T11176] ? rw_verify_area+0xcf/0x680 [ 425.897762][T11176] vfs_read+0x8c8/0xc70 [ 425.897794][T11176] ? __pfx___mutex_lock+0x10/0x10 [ 425.897833][T11176] ? __pfx_vfs_read+0x10/0x10 [ 425.897886][T11176] ksys_read+0x12a/0x240 [ 425.897912][T11176] ? __pfx_ksys_read+0x10/0x10 [ 425.897935][T11176] ? rcu_is_watching+0x12/0xc0 [ 425.897972][T11176] do_syscall_64+0xcd/0x230 [ 425.898011][T11176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.898040][T11176] RIP: 0033:0x7f59d8d8e969 [ 425.898062][T11176] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 425.898090][T11176] RSP: 002b:00007f59d9b9a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 425.898114][T11176] RAX: ffffffffffffffda RBX: 00007f59d8fb5fa0 RCX: 00007f59d8d8e969 [ 425.898132][T11176] RDX: 0000000000001000 RSI: 0000200000000ec0 RDI: 0000000000000008 [ 425.898148][T11176] RBP: 00007f59d8e10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 425.898164][T11176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 425.898197][T11176] R13: 0000000000000000 R14: 00007f59d8fb5fa0 R15: 00007fff91ca9368 [ 425.898235][T11176] [ 429.666811][T11217] FAULT_INJECTION: forcing a failure. [ 429.666811][T11217] name failslab, interval 1, probability 0, space 0, times 0 [ 429.679599][T11217] CPU: 0 UID: 0 PID: 11217 Comm: syz.0.1231 Tainted: G U I 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 429.679655][T11217] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND [ 429.679669][T11217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 429.679688][T11217] Call Trace: [ 429.679699][T11217] [ 429.679711][T11217] dump_stack_lvl+0x16c/0x1f0 [ 429.679759][T11217] should_fail_ex+0x512/0x640 [ 429.679804][T11217] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 429.679851][T11217] should_failslab+0xc2/0x120 [ 429.679892][T11217] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 429.679935][T11217] ? snd_timer_instance_new+0x65/0x2e0 [ 429.680007][T11217] kstrdup+0x53/0x100 [ 429.680046][T11217] snd_timer_instance_new+0x65/0x2e0 [ 429.680090][T11217] snd_seq_timer_open+0x1cc/0x5e0 [ 429.680123][T11217] ? __pfx_snd_seq_timer_open+0x10/0x10 [ 429.680157][T11217] ? find_held_lock+0x2b/0x80 [ 429.680192][T11217] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 429.680227][T11217] ? lockdep_hardirqs_on+0x7c/0x110 [ 429.680273][T11217] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 429.680314][T11217] queue_use+0xe3/0x250 [ 429.680357][T11217] snd_seq_queue_alloc+0x2e5/0x550 [ 429.680408][T11217] snd_seq_ioctl_create_queue+0xa9/0x380 [ 429.680446][T11217] snd_seq_kernel_client_ctl+0x107/0x1c0 [ 429.680490][T11217] alloc_seq_queue+0xda/0x180 [ 429.680528][T11217] ? __pfx_alloc_seq_queue+0x10/0x10 [ 429.680590][T11217] ? mark_held_locks+0x49/0x80 [ 429.680626][T11217] ? _raw_spin_unlock_irq+0x23/0x50 [ 429.680665][T11217] snd_seq_oss_open+0x38c/0xa20 [ 429.680719][T11217] odev_open+0x6f/0x90 [ 429.680748][T11217] ? __pfx_odev_open+0x10/0x10 [ 429.680781][T11217] soundcore_open+0x409/0x580 [ 429.680818][T11217] ? __pfx_soundcore_open+0x10/0x10 [ 429.680868][T11217] chrdev_open+0x231/0x6a0 [ 429.680898][T11217] ? __pfx_apparmor_file_open+0x10/0x10 [ 429.680935][T11217] ? __pfx_chrdev_open+0x10/0x10 [ 429.680969][T11217] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 429.681023][T11217] do_dentry_open+0x741/0x1c10 [ 429.681054][T11217] ? __pfx_chrdev_open+0x10/0x10 [ 429.681093][T11217] vfs_open+0x82/0x3f0 [ 429.681137][T11217] path_openat+0x1e5e/0x2d40 [ 429.681181][T11217] ? __pfx_path_openat+0x10/0x10 [ 429.681219][T11217] do_filp_open+0x20b/0x470 [ 429.681255][T11217] ? __pfx_do_filp_open+0x10/0x10 [ 429.681312][T11217] ? alloc_fd+0x471/0x7d0 [ 429.681373][T11217] do_sys_openat2+0x11b/0x1d0 [ 429.681412][T11217] ? __pfx_do_sys_openat2+0x10/0x10 [ 429.681469][T11217] __x64_sys_openat+0x174/0x210 [ 429.681510][T11217] ? __pfx___x64_sys_openat+0x10/0x10 [ 429.681553][T11217] ? rcu_is_watching+0x12/0xc0 [ 429.681592][T11217] do_syscall_64+0xcd/0x230 [ 429.681636][T11217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.681666][T11217] RIP: 0033:0x7f31bb58e969 [ 429.681689][T11217] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 429.681718][T11217] RSP: 002b:00007f31bc379038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 429.681747][T11217] RAX: ffffffffffffffda RBX: 00007f31bb7b5fa0 RCX: 00007f31bb58e969 [ 429.681766][T11217] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 429.681785][T11217] RBP: 00007f31bb610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 429.681804][T11217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 429.681821][T11217] R13: 0000000000000000 R14: 00007f31bb7b5fa0 R15: 00007ffe570701b8 [ 429.681860][T11217] [ 430.945709][T11222] FAULT_INJECTION: forcing a failure. [ 430.945709][T11222] name failslab, interval 1, probability 0, space 0, times 0 [ 431.033479][T11222] CPU: 1 UID: 0 PID: 11222 Comm: syz.1.1232 Tainted: G U I 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 431.033530][T11222] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND [ 431.033543][T11222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 431.033559][T11222] Call Trace: [ 431.033569][T11222] [ 431.033579][T11222] dump_stack_lvl+0x16c/0x1f0 [ 431.033622][T11222] should_fail_ex+0x512/0x640 [ 431.033660][T11222] ? __kmalloc_noprof+0xbf/0x510 [ 431.033695][T11222] ? ptp_open+0x103/0x520 [ 431.033720][T11222] should_failslab+0xc2/0x120 [ 431.033754][T11222] __kmalloc_noprof+0xd2/0x510 [ 431.033793][T11222] ptp_open+0x103/0x520 [ 431.033825][T11222] ? __pfx_ptp_open+0x10/0x10 [ 431.033863][T11222] ? __pfx_ptp_open+0x10/0x10 [ 431.033889][T11222] posix_clock_open+0x178/0x290 [ 431.033921][T11222] ? __pfx_posix_clock_open+0x10/0x10 [ 431.033948][T11222] chrdev_open+0x231/0x6a0 [ 431.033977][T11222] ? __pfx_apparmor_file_open+0x10/0x10 [ 431.034030][T11222] ? __pfx_chrdev_open+0x10/0x10 [ 431.034076][T11222] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 431.034125][T11222] do_dentry_open+0x741/0x1c10 [ 431.034155][T11222] ? __pfx_chrdev_open+0x10/0x10 [ 431.034190][T11222] vfs_open+0x82/0x3f0 [ 431.034231][T11222] path_openat+0x1e5e/0x2d40 [ 431.034272][T11222] ? __pfx_path_openat+0x10/0x10 [ 431.034308][T11222] do_filp_open+0x20b/0x470 [ 431.034353][T11222] ? __pfx_do_filp_open+0x10/0x10 [ 431.034409][T11222] ? alloc_fd+0x471/0x7d0 [ 431.034473][T11222] do_sys_openat2+0x11b/0x1d0 [ 431.034515][T11222] ? __pfx_do_sys_openat2+0x10/0x10 [ 431.034569][T11222] __x64_sys_openat+0x174/0x210 [ 431.034610][T11222] ? __pfx___x64_sys_openat+0x10/0x10 [ 431.034653][T11222] ? rcu_is_watching+0x12/0xc0 [ 431.034692][T11222] do_syscall_64+0xcd/0x230 [ 431.034736][T11222] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.034765][T11222] RIP: 0033:0x7f4076b8e969 [ 431.034788][T11222] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 431.034816][T11222] RSP: 002b:00007f40779a5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 431.034844][T11222] RAX: ffffffffffffffda RBX: 00007f4076db5fa0 RCX: 00007f4076b8e969 [ 431.034863][T11222] RDX: 0000000000000440 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 431.034882][T11222] RBP: 00007f4076c10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 431.034918][T11222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 431.034937][T11222] R13: 0000000000000000 R14: 00007f4076db5fa0 R15: 00007fff120cae08 [ 431.034977][T11222] [ 431.297124][ C1] vkms_vblank_simulate: vblank timer overrun [ 433.052670][T11279] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1243'. [ 434.155256][ T5835] Bluetooth: hci1: ISO packet too small [ 434.977208][T11313] FAULT_INJECTION: forcing a failure. [ 434.977208][T11313] name failslab, interval 1, probability 0, space 0, times 0 [ 435.073011][T11313] CPU: 1 UID: 0 PID: 11313 Comm: syz.3.1254 Tainted: G U I 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 435.073062][T11313] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND [ 435.073073][T11313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 435.073090][T11313] Call Trace: [ 435.073099][T11313] [ 435.073110][T11313] dump_stack_lvl+0x16c/0x1f0 [ 435.073152][T11313] should_fail_ex+0x512/0x640 [ 435.073200][T11313] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 435.073236][T11313] should_failslab+0xc2/0x120 [ 435.073270][T11313] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 435.073302][T11313] ? mpol_new+0x11b/0x2d0 [ 435.073331][T11313] ? _copy_from_user+0x59/0xd0 [ 435.073375][T11313] mpol_new+0x11b/0x2d0 [ 435.073407][T11313] do_set_mempolicy+0x83/0x480 [ 435.073440][T11313] ? __pfx_do_set_mempolicy+0x10/0x10 [ 435.073476][T11313] ? __x64_sys_futex+0x1e0/0x4c0 [ 435.073510][T11313] kernel_set_mempolicy+0x1c4/0x1e0 [ 435.073546][T11313] ? __pfx_kernel_set_mempolicy+0x10/0x10 [ 435.073591][T11313] do_syscall_64+0xcd/0x230 [ 435.073631][T11313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.073659][T11313] RIP: 0033:0x7fcba1d8e969 [ 435.073681][T11313] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 435.073708][T11313] RSP: 002b:00007fcba2c25038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ee [ 435.073735][T11313] RAX: ffffffffffffffda RBX: 00007fcba1fb5fa0 RCX: 00007fcba1d8e969 [ 435.073753][T11313] RDX: 0000000000000004 RSI: 0000200000000080 RDI: 0000000000000002 [ 435.073769][T11313] RBP: 00007fcba1e10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 435.073785][T11313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 435.073801][T11313] R13: 0000000000000000 R14: 00007fcba1fb5fa0 R15: 00007ffdaa87ad78 [ 435.073835][T11313] [ 435.265925][ C1] vkms_vblank_simulate: vblank timer overrun [ 435.748502][T11333] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1258'. [ 439.015994][T11386] can: request_module (can-proto-3) failed. [ 440.075697][T11409] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1273'. [ 440.314824][T11412] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1275'. [ 441.356031][T11428] FAULT_INJECTION: forcing a failure. [ 441.356031][T11428] name failslab, interval 1, probability 0, space 0, times 0 [ 441.368802][T11428] CPU: 0 UID: 0 PID: 11428 Comm: syz.0.1280 Tainted: G U I 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 441.368857][T11428] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND [ 441.368869][T11428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 441.368888][T11428] Call Trace: [ 441.368898][T11428] [ 441.368909][T11428] dump_stack_lvl+0x16c/0x1f0 [ 441.368956][T11428] should_fail_ex+0x512/0x640 [ 441.368998][T11428] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 441.369039][T11428] should_failslab+0xc2/0x120 [ 441.369076][T11428] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 441.369109][T11428] ? __proc_create+0xc3/0x8c0 [ 441.369141][T11428] ? __proc_create+0x2ce/0x8c0 [ 441.369179][T11428] __proc_create+0x2ce/0x8c0 [ 441.369215][T11428] ? __pfx___proc_create+0x10/0x10 [ 441.369253][T11428] ? _raw_write_unlock+0x28/0x50 [ 441.369290][T11428] ? proc_register+0x314/0x5f0 [ 441.369328][T11428] proc_create_reg+0x7d/0x180 [ 441.369365][T11428] ? __pfx_snmp6_seq_show+0x10/0x10 [ 441.369402][T11428] proc_create_net_single+0x86/0x170 [ 441.369440][T11428] ? __pfx_proc_create_net_single+0x10/0x10 [ 441.369481][T11428] ? __pfx_ndisc_net_init+0x10/0x10 [ 441.369524][T11428] ? __pfx_ipv6_proc_init_net+0x10/0x10 [ 441.369561][T11428] ipv6_proc_init_net+0xa1/0x1e0 [ 441.369598][T11428] ops_init+0x1df/0x5f0 [ 441.369641][T11428] setup_net+0x21e/0x850 [ 441.369683][T11428] ? __pfx_setup_net+0x10/0x10 [ 441.369725][T11428] ? lockdep_init_map_type+0x5c/0x280 [ 441.369770][T11428] ? __pfx_down_read_killable+0x10/0x10 [ 441.369823][T11428] ? debug_mutex_init+0x37/0x70 [ 441.369879][T11428] copy_net_ns+0x2a6/0x5f0 [ 441.369923][T11428] create_new_namespaces+0x3ea/0xad0 [ 441.369979][T11428] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 441.370019][T11428] ksys_unshare+0x45b/0xa40 [ 441.370072][T11428] ? __pfx_ksys_unshare+0x10/0x10 [ 441.370113][T11428] ? xfd_validate_state+0x5d/0x180 [ 441.370162][T11428] ? rcu_is_watching+0x12/0xc0 [ 441.370197][T11428] __x64_sys_unshare+0x31/0x40 [ 441.370237][T11428] do_syscall_64+0xcd/0x230 [ 441.370280][T11428] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.370309][T11428] RIP: 0033:0x7f31bb58e969 [ 441.370334][T11428] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 441.370364][T11428] RSP: 002b:00007f31bc379038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 441.370391][T11428] RAX: ffffffffffffffda RBX: 00007f31bb7b5fa0 RCX: 00007f31bb58e969 [ 441.370409][T11428] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 441.370426][T11428] RBP: 00007f31bb610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 441.370443][T11428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 441.370459][T11428] R13: 0000000000000000 R14: 00007f31bb7b5fa0 R15: 00007ffe570701b8 [ 441.370496][T11428] [ 443.015170][T11459] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1286'. [ 443.629570][T11469] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1288'. [ 445.074669][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.081098][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.582324][T11500] FAULT_INJECTION: forcing a failure. [ 445.582324][T11500] name failslab, interval 1, probability 0, space 0, times 0 [ 445.720255][T11500] CPU: 1 UID: 0 PID: 11500 Comm: syz.3.1295 Tainted: G U I 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 445.720311][T11500] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND [ 445.720323][T11500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 445.720340][T11500] Call Trace: [ 445.720349][T11500] [ 445.720359][T11500] dump_stack_lvl+0x16c/0x1f0 [ 445.720402][T11500] should_fail_ex+0x512/0x640 [ 445.720442][T11500] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 445.720494][T11500] should_failslab+0xc2/0x120 [ 445.720529][T11500] __kmalloc_cache_noprof+0x6a/0x3e0 [ 445.720578][T11500] ? ptp_open+0xe3/0x520 [ 445.720610][T11500] ptp_open+0xe3/0x520 [ 445.720644][T11500] ? __pfx_ptp_open+0x10/0x10 [ 445.720684][T11500] ? __pfx_ptp_open+0x10/0x10 [ 445.720712][T11500] posix_clock_open+0x178/0x290 [ 445.720744][T11500] ? __pfx_posix_clock_open+0x10/0x10 [ 445.720774][T11500] chrdev_open+0x231/0x6a0 [ 445.720804][T11500] ? __pfx_apparmor_file_open+0x10/0x10 [ 445.720843][T11500] ? __pfx_chrdev_open+0x10/0x10 [ 445.720877][T11500] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 445.720927][T11500] do_dentry_open+0x741/0x1c10 [ 445.720958][T11500] ? __pfx_chrdev_open+0x10/0x10 [ 445.720997][T11500] vfs_open+0x82/0x3f0 [ 445.721040][T11500] path_openat+0x1e5e/0x2d40 [ 445.721081][T11500] ? __pfx_path_openat+0x10/0x10 [ 445.721120][T11500] do_filp_open+0x20b/0x470 [ 445.721149][T11500] ? __pfx_do_filp_open+0x10/0x10 [ 445.721215][T11500] ? alloc_fd+0x471/0x7d0 [ 445.721273][T11500] do_sys_openat2+0x11b/0x1d0 [ 445.721313][T11500] ? __pfx_do_sys_openat2+0x10/0x10 [ 445.721385][T11500] __x64_sys_openat+0x174/0x210 [ 445.721430][T11500] ? __pfx___x64_sys_openat+0x10/0x10 [ 445.721477][T11500] ? rcu_is_watching+0x12/0xc0 [ 445.721517][T11500] do_syscall_64+0xcd/0x230 [ 445.721564][T11500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.721596][T11500] RIP: 0033:0x7fcba1d8e969 [ 445.721621][T11500] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 445.721653][T11500] RSP: 002b:00007fcba2be3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 445.721683][T11500] RAX: ffffffffffffffda RBX: 00007fcba1fb6160 RCX: 00007fcba1d8e969 [ 445.721702][T11500] RDX: 0000000000000440 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 445.721721][T11500] RBP: 00007fcba1e10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 445.721740][T11500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 445.721759][T11500] R13: 0000000000000000 R14: 00007fcba1fb6160 R15: 00007ffdaa87ad78 [ 445.721800][T11500] [ 448.178041][T11527] FAULT_INJECTION: forcing a failure. [ 448.178041][T11527] name failslab, interval 1, probability 0, space 0, times 0 [ 448.192294][T11527] CPU: 0 UID: 0 PID: 11527 Comm: syz.1.1301 Tainted: G U I 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 448.192347][T11527] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND [ 448.192358][T11527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 448.192373][T11527] Call Trace: [ 448.192381][T11527] [ 448.192391][T11527] dump_stack_lvl+0x16c/0x1f0 [ 448.192430][T11527] should_fail_ex+0x512/0x640 [ 448.192466][T11527] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 448.192499][T11527] should_failslab+0xc2/0x120 [ 448.192530][T11527] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 448.192559][T11527] ? __kernfs_new_node+0xd2/0x8a0 [ 448.192606][T11527] __kernfs_new_node+0xd2/0x8a0 [ 448.192651][T11527] ? __pfx___kernfs_new_node+0x10/0x10 [ 448.192701][T11527] ? find_held_lock+0x2b/0x80 [ 448.192727][T11527] ? kernfs_root+0xee/0x2a0 [ 448.192756][T11527] kernfs_new_node+0x13c/0x1e0 [ 448.192790][T11527] __kernfs_create_file+0x53/0x350 [ 448.192828][T11527] sysfs_add_file_mode_ns+0x207/0x3c0 [ 448.192876][T11527] internal_create_group+0x578/0xf30 [ 448.192909][T11527] ? __pfx_internal_create_group+0x10/0x10 [ 448.192939][T11527] ? kernfs_create_link+0x1bd/0x240 [ 448.192978][T11527] internal_create_groups+0x9d/0x150 [ 448.193006][T11527] device_add+0x77f/0x1a70 [ 448.193045][T11527] ? __pfx_device_add+0x10/0x10 [ 448.193079][T11527] ? lockdep_init_map_type+0x5c/0x280 [ 448.193114][T11527] ? __init_waitqueue_head+0xca/0x150 [ 448.193162][T11527] netdev_register_kobject+0x182/0x3a0 [ 448.193200][T11527] register_netdevice+0x13dc/0x2270 [ 448.193235][T11527] ? idr_alloc+0xdd/0x130 [ 448.193271][T11527] ? __pfx_register_netdevice+0x10/0x10 [ 448.193313][T11527] ppp_dev_configure+0x99b/0xc80 [ 448.193353][T11527] ppp_ioctl+0x17e0/0x2660 [ 448.193388][T11527] ? find_held_lock+0x2b/0x80 [ 448.193411][T11527] ? __pfx_ppp_ioctl+0x10/0x10 [ 448.193449][T11527] ? __fget_files+0x20e/0x3c0 [ 448.193494][T11527] ? __pfx_ppp_ioctl+0x10/0x10 [ 448.193525][T11527] __x64_sys_ioctl+0x190/0x200 [ 448.193563][T11527] do_syscall_64+0xcd/0x230 [ 448.193601][T11527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.193627][T11527] RIP: 0033:0x7f4076b8e969 [ 448.193647][T11527] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 448.193673][T11527] RSP: 002b:00007f40779a5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 448.193697][T11527] RAX: ffffffffffffffda RBX: 00007f4076db5fa0 RCX: 00007f4076b8e969 [ 448.193714][T11527] RDX: 0000000000000000 RSI: 00000000c004743e RDI: 0000000000000005 [ 448.193730][T11527] RBP: 00007f4076c10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 448.193746][T11527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 448.193762][T11527] R13: 0000000000000000 R14: 00007f4076db5fa0 R15: 00007fff120cae08 [ 448.193795][T11527] [ 448.559495][T11532] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1303'. [ 449.696046][T11555] FAULT_INJECTION: forcing a failure. [ 449.696046][T11555] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 450.475763][T11555] CPU: 0 UID: 0 PID: 11555 Comm: syz.2.1307 Tainted: G U I 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 450.475823][T11555] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND [ 450.475836][T11555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 450.475862][T11555] Call Trace: [ 450.475873][T11555] [ 450.475886][T11555] dump_stack_lvl+0x16c/0x1f0 [ 450.475935][T11555] should_fail_ex+0x512/0x640 [ 450.475994][T11555] should_fail_alloc_page+0xe7/0x130 [ 450.476035][T11555] prepare_alloc_pages+0x3c2/0x610 [ 450.476082][T11555] ? rcu_is_watching+0x12/0xc0 [ 450.476113][T11555] __alloc_frozen_pages_noprof+0x18f/0x23a0 [ 450.476149][T11555] ? rcu_is_watching+0x12/0xc0 [ 450.476177][T11555] ? trace_sched_exit_tp+0xde/0x130 [ 450.476213][T11555] ? __schedule+0x1186/0x5de0 [ 450.476245][T11555] ? finish_task_switch.isra.0+0x221/0xc10 [ 450.476278][T11555] ? trace_sched_exit_tp+0x91/0x130 [ 450.476316][T11555] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 450.476375][T11555] ? __lock_acquire+0xaa4/0x1ba0 [ 450.476411][T11555] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 450.476452][T11555] ? policy_nodemask+0xea/0x4e0 [ 450.476493][T11555] alloc_pages_mpol+0x1fb/0x550 [ 450.476531][T11555] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 450.476566][T11555] ? __page_table_check_ptes_set+0x1ae/0x420 [ 450.476602][T11555] ? find_held_lock+0x2b/0x80 [ 450.476637][T11555] alloc_pages_noprof+0x131/0x390 [ 450.476674][T11555] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 450.476703][T11555] get_free_pages_noprof+0xc/0x40 [ 450.476742][T11555] kasan_populate_vmalloc_pte+0x2d/0x160 [ 450.476772][T11555] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 450.476803][T11555] __apply_to_page_range+0x617/0xd60 [ 450.476859][T11555] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 450.476896][T11555] ? __pfx___apply_to_page_range+0x10/0x10 [ 450.476944][T11555] ? alloc_vmap_area+0x872/0x2970 [ 450.476993][T11555] alloc_vmap_area+0x919/0x2970 [ 450.477052][T11555] ? __pfx_alloc_vmap_area+0x10/0x10 [ 450.477106][T11555] __get_vm_area_node+0x1a7/0x300 [ 450.477159][T11555] __vmalloc_node_range_noprof+0x277/0x1540 [ 450.477208][T11555] ? __do_sys_listmount+0x1c2/0xed0 [ 450.477259][T11555] ? __do_sys_listmount+0x1c2/0xed0 [ 450.477311][T11555] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 450.477377][T11555] __kvmalloc_node_noprof+0x2ff/0x600 [ 450.477408][T11555] ? __do_sys_listmount+0x1c2/0xed0 [ 450.477452][T11555] ? __do_sys_listmount+0x1c2/0xed0 [ 450.477503][T11555] ? __do_sys_listmount+0x1c2/0xed0 [ 450.477545][T11555] __do_sys_listmount+0x1c2/0xed0 [ 450.477595][T11555] ? __x64_sys_futex+0x1e0/0x4c0 [ 450.477625][T11555] ? __x64_sys_futex+0x1e9/0x4c0 [ 450.477657][T11555] ? __pfx___do_sys_listmount+0x10/0x10 [ 450.477700][T11555] ? xfd_validate_state+0x5d/0x180 [ 450.477763][T11555] do_syscall_64+0xcd/0x230 [ 450.477808][T11555] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.477838][T11555] RIP: 0033:0x7f59d8d8e969 [ 450.477869][T11555] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 450.477900][T11555] RSP: 002b:00007f59d9b58038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ca [ 450.477929][T11555] RAX: ffffffffffffffda RBX: 00007f59d8fb6160 RCX: 00007f59d8d8e969 [ 450.477949][T11555] RDX: 00000000000f4240 RSI: 0000000000000000 RDI: 0000200000000100 [ 450.477968][T11555] RBP: 00007f59d8e10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 450.477987][T11555] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 450.478009][T11555] R13: 0000000000000000 R14: 00007f59d8fb6160 R15: 00007fff91ca9368 [ 450.478048][T11555] [ 450.995606][T11555] syz.2.1307: vmalloc error: size 8000000, vm_struct allocation failed, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 451.010898][T11555] CPU: 0 UID: 0 PID: 11555 Comm: syz.2.1307 Tainted: G U I 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 451.010955][T11555] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND [ 451.010969][T11555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 451.010988][T11555] Call Trace: [ 451.010998][T11555] [ 451.011011][T11555] dump_stack_lvl+0x16c/0x1f0 [ 451.011060][T11555] warn_alloc+0x248/0x3a0 [ 451.011101][T11555] ? __pfx_warn_alloc+0x10/0x10 [ 451.011140][T11555] ? kfree+0x2b6/0x4d0 [ 451.011201][T11555] ? __get_vm_area_node+0x1e5/0x300 [ 451.011261][T11555] __vmalloc_node_range_noprof+0xd31/0x1540 [ 451.011327][T11555] ? __do_sys_listmount+0x1c2/0xed0 [ 451.011384][T11555] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 451.011456][T11555] __kvmalloc_node_noprof+0x2ff/0x600 [ 451.011492][T11555] ? __do_sys_listmount+0x1c2/0xed0 [ 451.011541][T11555] ? __do_sys_listmount+0x1c2/0xed0 [ 451.011594][T11555] ? __do_sys_listmount+0x1c2/0xed0 [ 451.011639][T11555] __do_sys_listmount+0x1c2/0xed0 [ 451.011695][T11555] ? __x64_sys_futex+0x1e0/0x4c0 [ 451.011727][T11555] ? __x64_sys_futex+0x1e9/0x4c0 [ 451.011763][T11555] ? __pfx___do_sys_listmount+0x10/0x10 [ 451.011811][T11555] ? xfd_validate_state+0x5d/0x180 [ 451.011891][T11555] do_syscall_64+0xcd/0x230 [ 451.011940][T11555] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.011973][T11555] RIP: 0033:0x7f59d8d8e969 [ 451.012000][T11555] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 451.012034][T11555] RSP: 002b:00007f59d9b58038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ca [ 451.012065][T11555] RAX: ffffffffffffffda RBX: 00007f59d8fb6160 RCX: 00007f59d8d8e969 [ 451.012088][T11555] RDX: 00000000000f4240 RSI: 0000000000000000 RDI: 0000200000000100 [ 451.012108][T11555] RBP: 00007f59d8e10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 451.012128][T11555] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 451.012148][T11555] R13: 0000000000000000 R14: 00007f59d8fb6160 R15: 00007fff91ca9368 [ 451.012190][T11555] [ 451.012201][T11555] Mem-Info: [ 451.228543][T11555] active_anon:7275 inactive_anon:10746 isolated_anon:0 [ 451.228543][T11555] active_file:22009 inactive_file:36069 isolated_file:0 [ 451.228543][T11555] unevictable:768 dirty:513 writeback:0 [ 451.228543][T11555] slab_reclaimable:10607 slab_unreclaimable:98039 [ 451.228543][T11555] mapped:29141 shmem:5554 pagetables:1008 [ 451.228543][T11555] sec_pagetables:0 bounce:0 [ 451.228543][T11555] kernel_misc_reclaimable:0 [ 451.228543][T11555] free:1324074 free_pcp:2223 free_cma:0 [ 451.688756][T11555] Node 0 active_anon:29100kB inactive_anon:43084kB active_file:87124kB inactive_file:144216kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116664kB dirty:2152kB writeback:0kB shmem:19656kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11052kB pagetables:4032kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 451.730273][T11555] Node 1 active_anon:0kB inactive_anon:0kB active_file:12kB inactive_file:60kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:2560kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 451.904921][T11555] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 452.175732][ T1002] [drm:drm_crtc_add_crc_entry] *ERROR* Overflow of CRC buffer, userspace reads too slow. [ 452.190195][T11555] lowmem_reserve[]: 0 2484 2486 2486 2486 [ 452.328269][T11555] Node 0 DMA32 free:1394052kB boost:0kB min:34108kB low:42632kB high:51156kB reserved_highatomic:0KB active_anon:29056kB inactive_anon:28260kB active_file:81896kB inactive_file:144244kB unevictable:1536kB writepending:2136kB present:3129332kB managed:2544188kB mlocked:0kB bounce:0kB free_pcp:13712kB local_pcp:8784kB free_cma:0kB [ 452.490884][T11555] lowmem_reserve[]: 0 0 1 1 1 [ 452.495753][T11555] Node 0 Normal free:20kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:1748kB inactive_file:72kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 452.536562][T11555] lowmem_reserve[]: 0 0 0 0 0 [ 452.570153][T11555] Node 1 Normal free:3900444kB boost:0kB min:55768kB low:69708kB high:83648kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:12kB inactive_file:60kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 452.630215][T11555] lowmem_reserve[]: 0 0 0 0 0 [ 452.637200][T11555] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 452.692795][T11555] Node 0 DMA32: 732*4kB (UME) 1596*8kB (UME) 947*16kB (UME) 984*32kB (UME) 707*64kB (UME) 328*128kB (UME) 182*256kB (UME) 80*512kB (UME) 55*1024kB (UME) 17*2048kB (UME) 262*4096kB (UM) = 1401408kB [ 452.805966][T11555] Node 0 Normal: 1*4kB (M) 2*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB [ 452.992468][T11555] Node 1 Normal: 249*4kB (UE) 43*8kB (UME) 34*16kB (UME) 224*32kB (UME) 107*64kB (UME) 28*128kB (UME) 14*256kB (UME) 11*512kB (UME) 5*1024kB (UME) 4*2048kB (UM) 942*4096kB (M) = 3900444kB [ 453.119928][T11555] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 453.223169][T11555] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 453.290558][T11555] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 453.340163][T11555] Node 1 hugepages_total=7 hugepages_free=7 hugepages_surp=0 hugepages_size=2048kB [ 453.368208][T11555] 58678 total pagecache pages [ 453.390632][T11555] 109 pages in swap cache [ 453.395023][T11555] Free swap = 118736kB [ 453.399210][T11555] Total swap = 124996kB [ 453.434105][T11555] 2097051 pages RAM [ 453.449566][T11555] 0 pages HighMem/MovableOnly [ 453.463133][T11555] 428898 pages reserved [ 453.468302][T11555] 0 pages cma reserved [ 454.782647][T11597] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1314'. [ 455.148006][T11613] FAULT_INJECTION: forcing a failure. [ 455.148006][T11613] name failslab, interval 1, probability 0, space 0, times 0 [ 455.164619][T11613] CPU: 0 UID: 0 PID: 11613 Comm: syz.1.1317 Tainted: G U I 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 455.164671][T11613] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND [ 455.164684][T11613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 455.164702][T11613] Call Trace: [ 455.164712][T11613] [ 455.164723][T11613] dump_stack_lvl+0x16c/0x1f0 [ 455.164766][T11613] should_fail_ex+0x512/0x640 [ 455.164805][T11613] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 455.164841][T11613] should_failslab+0xc2/0x120 [ 455.164876][T11613] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 455.164909][T11613] ? mas_alloc_nodes+0x18b/0x8b0 [ 455.164949][T11613] mas_alloc_nodes+0x18b/0x8b0 [ 455.164990][T11613] mas_node_count_gfp+0x105/0x130 [ 455.165027][T11613] mas_preallocate+0x53e/0xcd0 [ 455.165078][T11613] ? __pfx_mas_preallocate+0x10/0x10 [ 455.165131][T11613] ? mod_objcg_state+0x5eb/0xa50 [ 455.165160][T11613] ? lockdep_hardirqs_on+0x7c/0x110 [ 455.165204][T11613] vma_link+0x135/0x6a0 [ 455.165234][T11613] ? __memcg_slab_post_alloc_hook+0x4d0/0x940 [ 455.165275][T11613] ? __pfx_vma_link+0x10/0x10 [ 455.165315][T11613] ? anon_vma_clone+0x405/0x5c0 [ 455.165345][T11613] ? anon_vma_name+0x75/0x100 [ 455.165389][T11613] copy_vma+0x68a/0xa50 [ 455.165426][T11613] ? __pfx_copy_vma+0x10/0x10 [ 455.165455][T11613] ? finish_task_switch.isra.0+0x221/0xc10 [ 455.165485][T11613] ? lockdep_hardirqs_on+0x7c/0x110 [ 455.165527][T11613] ? register_lock_class+0x41/0x4c0 [ 455.165573][T11613] ? __schedule+0x1186/0x5de0 [ 455.165629][T11613] copy_vma_and_data+0x1cf/0x810 [ 455.165666][T11613] ? __pfx_copy_vma_and_data+0x10/0x10 [ 455.165708][T11613] ? __vma_enter_locked+0x163/0x3f0 [ 455.165745][T11613] ? find_held_lock+0x2b/0x80 [ 455.165771][T11613] ? move_vma+0x536/0x1740 [ 455.165811][T11613] move_vma+0x548/0x1740 [ 455.165850][T11613] ? __pfx_move_vma+0x10/0x10 [ 455.165889][T11613] ? cap_mmap_addr+0x4b/0x120 [ 455.165915][T11613] ? bpf_lsm_mmap_addr+0x9/0x10 [ 455.165959][T11613] ? security_mmap_addr+0x6c/0x1e0 [ 455.165996][T11613] ? __get_unmapped_area+0x26a/0x440 [ 455.166042][T11613] ? vrm_set_new_addr+0x208/0x290 [ 455.166077][T11613] __do_sys_mremap+0xe38/0x15d0 [ 455.166114][T11613] ? __pfx___do_sys_mremap+0x10/0x10 [ 455.166168][T11613] ? __x64_sys_futex+0x1e0/0x4c0 [ 455.166207][T11613] ? rcu_is_watching+0x12/0xc0 [ 455.166245][T11613] do_syscall_64+0xcd/0x230 [ 455.166287][T11613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.166317][T11613] RIP: 0033:0x7f4076b8e969 [ 455.166339][T11613] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 455.166369][T11613] RSP: 002b:00007f40779a5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 455.166395][T11613] RAX: ffffffffffffffda RBX: 00007f4076db5fa0 RCX: 00007f4076b8e969 [ 455.166414][T11613] RDX: 0000000000003fd6 RSI: ffffffffffffffff RDI: 0000000000000000 [ 455.166432][T11613] RBP: 00007f4076c10ab1 R08: 00007fffffffb000 R09: 0000000000000000 [ 455.166449][T11613] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 455.166465][T11613] R13: 0000000000000000 R14: 00007f4076db5fa0 R15: 00007fff120cae08 [ 455.166501][T11613] [ 456.297936][T11628] Invalid ELF header magic: != ELF [ 456.757771][ T30] audit: type=1326 audit(4294967336.020:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11627 comm="syz.1.1331" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4076b8e969 code=0x0 [ 457.241900][T11648] FAULT_INJECTION: forcing a failure. [ 457.241900][T11648] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 457.272711][T11648] CPU: 1 UID: 0 PID: 11648 Comm: syz.0.1324 Tainted: G U I 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 457.272762][T11648] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND [ 457.272774][T11648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 457.272790][T11648] Call Trace: [ 457.272799][T11648] [ 457.272810][T11648] dump_stack_lvl+0x16c/0x1f0 [ 457.272854][T11648] should_fail_ex+0x512/0x640 [ 457.272900][T11648] should_fail_alloc_page+0xe7/0x130 [ 457.272936][T11648] prepare_alloc_pages+0x3c2/0x610 [ 457.272980][T11648] ? rcu_is_watching+0x12/0xc0 [ 457.273010][T11648] __alloc_frozen_pages_noprof+0x18f/0x23a0 [ 457.273040][T11648] ? __kernel_text_address+0xd/0x40 [ 457.273084][T11648] ? unwind_get_return_address+0x59/0xa0 [ 457.273115][T11648] ? arch_stack_walk+0xa6/0x100 [ 457.273158][T11648] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 457.273190][T11648] ? stack_trace_save+0x8e/0xc0 [ 457.273218][T11648] ? __pfx_stack_trace_save+0x10/0x10 [ 457.273245][T11648] ? stack_depot_save_flags+0x28/0xa50 [ 457.273303][T11648] ? find_held_lock+0x2b/0x80 [ 457.273356][T11648] ? kasan_save_stack+0x42/0x60 [ 457.273395][T11648] ? __lock_acquire+0xaa4/0x1ba0 [ 457.273443][T11648] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 457.273493][T11648] ? policy_nodemask+0xea/0x4e0 [ 457.273537][T11648] alloc_pages_mpol+0x1fb/0x550 [ 457.273581][T11648] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 457.273619][T11648] ? __page_table_check_ptes_set+0x1ae/0x420 [ 457.273660][T11648] ? find_held_lock+0x2b/0x80 [ 457.273698][T11648] alloc_pages_noprof+0x131/0x390 [ 457.273737][T11648] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 457.273768][T11648] get_free_pages_noprof+0xc/0x40 [ 457.273808][T11648] kasan_populate_vmalloc_pte+0x2d/0x160 [ 457.273841][T11648] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 457.273872][T11648] __apply_to_page_range+0x617/0xd60 [ 457.273925][T11648] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 457.273963][T11648] ? __pfx___apply_to_page_range+0x10/0x10 [ 457.274013][T11648] ? alloc_vmap_area+0x872/0x2970 [ 457.274065][T11648] alloc_vmap_area+0x919/0x2970 [ 457.274126][T11648] ? __pfx_alloc_vmap_area+0x10/0x10 [ 457.274181][T11648] __get_vm_area_node+0x1a7/0x300 [ 457.274237][T11648] __vmalloc_node_range_noprof+0x277/0x1540 [ 457.274289][T11648] ? __do_sys_listmount+0x1c2/0xed0 [ 457.274348][T11648] ? __do_sys_listmount+0x1c2/0xed0 [ 457.274410][T11648] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 457.274478][T11648] __kvmalloc_node_noprof+0x2ff/0x600 [ 457.274522][T11648] ? __do_sys_listmount+0x1c2/0xed0 [ 457.274575][T11648] ? __do_sys_listmount+0x1c2/0xed0 [ 457.274621][T11648] ? __do_sys_listmount+0x1c2/0xed0 [ 457.274658][T11648] __do_sys_listmount+0x1c2/0xed0 [ 457.274703][T11648] ? __x64_sys_futex+0x1e0/0x4c0 [ 457.274733][T11648] ? __x64_sys_futex+0x1e9/0x4c0 [ 457.274764][T11648] ? __pfx___do_sys_listmount+0x10/0x10 [ 457.274805][T11648] ? xfd_validate_state+0x5d/0x180 [ 457.274861][T11648] do_syscall_64+0xcd/0x230 [ 457.274901][T11648] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.274929][T11648] RIP: 0033:0x7f31bb58e969 [ 457.274951][T11648] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 457.274980][T11648] RSP: 002b:00007f31bc337038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ca [ 457.275008][T11648] RAX: ffffffffffffffda RBX: 00007f31bb7b6160 RCX: 00007f31bb58e969 [ 457.275027][T11648] RDX: 00000000000f4240 RSI: 0000000000000000 RDI: 0000200000000100 [ 457.275046][T11648] RBP: 00007f31bb610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 457.275062][T11648] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 457.275079][T11648] R13: 0000000000000000 R14: 00007f31bb7b6160 R15: 00007ffe570701b8 [ 457.275113][T11648] [ 457.650477][ C1] vkms_vblank_simulate: vblank timer overrun [ 460.178247][T11687] can: request_module (can-proto-3) failed. [ 461.464085][T11713] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1337'. [ 463.271670][T11741] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1342'. [ 463.512776][T11748] FAULT_INJECTION: forcing a failure. [ 463.512776][T11748] name failslab, interval 1, probability 0, space 0, times 0 [ 463.600149][T11748] CPU: 0 UID: 0 PID: 11748 Comm: syz.0.1344 Tainted: G U I 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 463.600202][T11748] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND [ 463.600215][T11748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 463.600233][T11748] Call Trace: [ 463.600243][T11748] [ 463.600254][T11748] dump_stack_lvl+0x16c/0x1f0 [ 463.600309][T11748] should_fail_ex+0x512/0x640 [ 463.600352][T11748] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 463.600391][T11748] should_failslab+0xc2/0x120 [ 463.600435][T11748] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 463.600470][T11748] ? __kernfs_new_node+0xd2/0x8a0 [ 463.600537][T11748] __kernfs_new_node+0xd2/0x8a0 [ 463.600587][T11748] ? __pfx___kernfs_new_node+0x10/0x10 [ 463.600641][T11748] ? find_held_lock+0x2b/0x80 [ 463.600688][T11748] ? kernfs_root+0xee/0x2a0 [ 463.600724][T11748] kernfs_new_node+0x13c/0x1e0 [ 463.600764][T11748] __kernfs_create_file+0x53/0x350 [ 463.600810][T11748] sysfs_add_file_mode_ns+0x207/0x3c0 [ 463.600867][T11748] internal_create_group+0x578/0xf30 [ 463.600907][T11748] ? __pfx_internal_create_group+0x10/0x10 [ 463.600944][T11748] ? kernfs_create_link+0x1bd/0x240 [ 463.600991][T11748] internal_create_groups+0x9d/0x150 [ 463.601025][T11748] device_add+0x77f/0x1a70 [ 463.601070][T11748] ? __pfx_device_add+0x10/0x10 [ 463.601110][T11748] ? lockdep_init_map_type+0x5c/0x280 [ 463.601171][T11748] ? __init_waitqueue_head+0xca/0x150 [ 463.601241][T11748] netdev_register_kobject+0x182/0x3a0 [ 463.601297][T11748] register_netdevice+0x13dc/0x2270 [ 463.601341][T11748] ? idr_alloc+0xdd/0x130 [ 463.601379][T11748] ? __pfx_register_netdevice+0x10/0x10 [ 463.601432][T11748] ppp_dev_configure+0x99b/0xc80 [ 463.601481][T11748] ppp_ioctl+0x17e0/0x2660 [ 463.601523][T11748] ? find_held_lock+0x2b/0x80 [ 463.601554][T11748] ? __pfx_ppp_ioctl+0x10/0x10 [ 463.601600][T11748] ? __fget_files+0x20e/0x3c0 [ 463.601656][T11748] ? __pfx_ppp_ioctl+0x10/0x10 [ 463.601696][T11748] __x64_sys_ioctl+0x190/0x200 [ 463.601744][T11748] do_syscall_64+0xcd/0x230 [ 463.601792][T11748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.601825][T11748] RIP: 0033:0x7f31bb58e969 [ 463.601851][T11748] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 463.601883][T11748] RSP: 002b:00007f31bc379038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 463.601913][T11748] RAX: ffffffffffffffda RBX: 00007f31bb7b5fa0 RCX: 00007f31bb58e969 [ 463.601935][T11748] RDX: 0000000000000000 RSI: 00000000c004743e RDI: 0000000000000005 [ 463.601955][T11748] RBP: 00007f31bb610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 463.601976][T11748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 463.601995][T11748] R13: 0000000000000000 R14: 00007f31bb7b5fa0 R15: 00007ffe570701b8 [ 463.602037][T11748] [ 465.008284][T11764] FAULT_INJECTION: forcing a failure. [ 465.008284][T11764] name failslab, interval 1, probability 0, space 0, times 0 [ 465.021233][T11764] CPU: 0 UID: 0 PID: 11764 Comm: syz.2.1346 Tainted: G U I 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 465.021285][T11764] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND [ 465.021299][T11764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 465.021319][T11764] Call Trace: [ 465.021330][T11764] [ 465.021341][T11764] dump_stack_lvl+0x16c/0x1f0 [ 465.021388][T11764] should_fail_ex+0x512/0x640 [ 465.021431][T11764] ? fs_reclaim_acquire+0xae/0x150 [ 465.021482][T11764] should_failslab+0xc2/0x120 [ 465.021521][T11764] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 465.021557][T11764] ? security_inode_alloc+0x3b/0x2b0 [ 465.021599][T11764] security_inode_alloc+0x3b/0x2b0 [ 465.021634][T11764] inode_init_always_gfp+0xce4/0x1030 [ 465.021690][T11764] alloc_inode+0x86/0x240 [ 465.021728][T11764] new_inode+0x22/0x1c0 [ 465.021763][T11764] ? start_creating.part.0+0x25d/0x3a0 [ 465.021810][T11764] debugfs_create_dir+0xdd/0x5f0 [ 465.021858][T11764] ptp_open+0x307/0x520 [ 465.021900][T11764] ? __pfx_ptp_open+0x10/0x10 [ 465.021942][T11764] ? __pfx_ptp_open+0x10/0x10 [ 465.021971][T11764] posix_clock_open+0x178/0x290 [ 465.022005][T11764] ? __pfx_posix_clock_open+0x10/0x10 [ 465.022037][T11764] chrdev_open+0x231/0x6a0 [ 465.022086][T11764] ? __pfx_apparmor_file_open+0x10/0x10 [ 465.022136][T11764] ? __pfx_chrdev_open+0x10/0x10 [ 465.022176][T11764] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 465.022234][T11764] do_dentry_open+0x741/0x1c10 [ 465.022270][T11764] ? __pfx_chrdev_open+0x10/0x10 [ 465.022325][T11764] vfs_open+0x82/0x3f0 [ 465.022369][T11764] path_openat+0x1e5e/0x2d40 [ 465.022414][T11764] ? __pfx_path_openat+0x10/0x10 [ 465.022455][T11764] do_filp_open+0x20b/0x470 [ 465.022486][T11764] ? __pfx_do_filp_open+0x10/0x10 [ 465.022545][T11764] ? alloc_fd+0x471/0x7d0 [ 465.022603][T11764] do_sys_openat2+0x11b/0x1d0 [ 465.022643][T11764] ? __pfx_do_sys_openat2+0x10/0x10 [ 465.022701][T11764] __x64_sys_openat+0x174/0x210 [ 465.022742][T11764] ? __pfx___x64_sys_openat+0x10/0x10 [ 465.022787][T11764] ? rcu_is_watching+0x12/0xc0 [ 465.022828][T11764] do_syscall_64+0xcd/0x230 [ 465.022873][T11764] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.022905][T11764] RIP: 0033:0x7f59d8d8e969 [ 465.022930][T11764] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 465.022959][T11764] RSP: 002b:00007f59d9b37038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 465.022987][T11764] RAX: ffffffffffffffda RBX: 00007f59d8fb6240 RCX: 00007f59d8d8e969 [ 465.023007][T11764] RDX: 0000000000000440 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 465.023027][T11764] RBP: 00007f59d8e10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 465.023046][T11764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 465.023066][T11764] R13: 0000000000000000 R14: 00007f59d8fb6240 R15: 00007fff91ca9368 [ 465.023106][T11764] [ 465.023164][T11764] debugfs: out of free dentries, can not create directory '0xffff888013154000' [ 465.895375][T11774] can: request_module (can-proto-3) failed. [ 466.294563][T11777] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1349'. [ 466.677214][T11786] FAULT_INJECTION: forcing a failure. [ 466.677214][T11786] name failslab, interval 1, probability 0, space 0, times 0 [ 466.773680][T11786] CPU: 1 UID: 0 PID: 11786 Comm: syz.1.1351 Tainted: G U I 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 466.773743][T11786] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND [ 466.773757][T11786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 466.773776][T11786] Call Trace: [ 466.773788][T11786] [ 466.773800][T11786] dump_stack_lvl+0x16c/0x1f0 [ 466.773864][T11786] should_fail_ex+0x512/0x640 [ 466.773916][T11786] ? __kmalloc_noprof+0xbf/0x510 [ 466.773951][T11786] ? snd_midi_event_new+0xa1/0x210 [ 466.773984][T11786] should_failslab+0xc2/0x120 [ 466.774018][T11786] __kmalloc_noprof+0xd2/0x510 [ 466.774065][T11786] snd_midi_event_new+0xa1/0x210 [ 466.774102][T11786] snd_virmidi_output_open+0x106/0x670 [ 466.774145][T11786] open_substream+0x478/0x9b0 [ 466.774190][T11786] rawmidi_open_priv+0x543/0x6e0 [ 466.774240][T11786] snd_rawmidi_open+0x4cc/0xbf0 [ 466.774292][T11786] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 466.774341][T11786] ? __pfx_default_wake_function+0x10/0x10 [ 466.774373][T11786] ? kobject_get_unless_zero+0x156/0x1e0 [ 466.774419][T11786] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 466.774463][T11786] snd_open+0x1fe/0x450 [ 466.774499][T11786] ? __pfx_snd_open+0x10/0x10 [ 466.774533][T11786] chrdev_open+0x231/0x6a0 [ 466.774561][T11786] ? __pfx_apparmor_file_open+0x10/0x10 [ 466.774597][T11786] ? __pfx_chrdev_open+0x10/0x10 [ 466.774630][T11786] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 466.774679][T11786] do_dentry_open+0x741/0x1c10 [ 466.774709][T11786] ? __pfx_chrdev_open+0x10/0x10 [ 466.774746][T11786] vfs_open+0x82/0x3f0 [ 466.774787][T11786] path_openat+0x1e5e/0x2d40 [ 466.774828][T11786] ? __pfx_path_openat+0x10/0x10 [ 466.774866][T11786] do_filp_open+0x20b/0x470 [ 466.774894][T11786] ? __pfx_do_filp_open+0x10/0x10 [ 466.774949][T11786] ? alloc_fd+0x471/0x7d0 [ 466.775003][T11786] do_sys_openat2+0x11b/0x1d0 [ 466.775046][T11786] ? __pfx_do_sys_openat2+0x10/0x10 [ 466.775100][T11786] __x64_sys_openat+0x174/0x210 [ 466.775140][T11786] ? __pfx___x64_sys_openat+0x10/0x10 [ 466.775182][T11786] ? rcu_is_watching+0x12/0xc0 [ 466.775219][T11786] do_syscall_64+0xcd/0x230 [ 466.775261][T11786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.775290][T11786] RIP: 0033:0x7f4076b8e969 [ 466.775313][T11786] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 466.775341][T11786] RSP: 002b:00007f4077984038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 466.775368][T11786] RAX: ffffffffffffffda RBX: 00007f4076db6080 RCX: 00007f4076b8e969 [ 466.775387][T11786] RDX: 0000000000000001 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 466.775404][T11786] RBP: 00007f4076c10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 466.775421][T11786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 466.775438][T11786] R13: 0000000000000000 R14: 00007f4076db6080 R15: 00007fff120cae08 [ 466.775474][T11786] [ 467.069906][ C1] vkms_vblank_simulate: vblank timer overrun [ 468.594210][T11819] FAULT_INJECTION: forcing a failure. [ 468.594210][T11819] name failslab, interval 1, probability 0, space 0, times 0 [ 468.607386][T11819] CPU: 0 UID: 0 PID: 11819 Comm: syz.0.1360 Tainted: G U I 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 468.607439][T11819] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND [ 468.607452][T11819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 468.607471][T11819] Call Trace: [ 468.607486][T11819] [ 468.607498][T11819] dump_stack_lvl+0x16c/0x1f0 [ 468.607545][T11819] should_fail_ex+0x512/0x640 [ 468.607587][T11819] ? __kmalloc_noprof+0xbf/0x510 [ 468.607633][T11819] ? drm_atomic_state_init+0x17b/0x320 [ 468.607672][T11819] should_failslab+0xc2/0x120 [ 468.607708][T11819] __kmalloc_noprof+0xd2/0x510 [ 468.607748][T11819] drm_atomic_state_init+0x17b/0x320 [ 468.607786][T11819] ? __kasan_kmalloc+0xaa/0xb0 [ 468.607816][T11819] drm_atomic_state_alloc+0xd3/0x120 [ 468.607856][T11819] drm_client_modeset_commit_atomic+0xcc/0x7e0 [ 468.607927][T11819] ? __pfx___might_resched+0x10/0x10 [ 468.607964][T11819] ? rcu_is_watching+0x12/0xc0 [ 468.607992][T11819] ? trace_contention_end+0xdd/0x130 [ 468.608034][T11819] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 468.608116][T11819] drm_client_modeset_commit_locked+0x14d/0x580 [ 468.608161][T11819] drm_client_modeset_commit+0x4f/0x80 [ 468.608200][T11819] __drm_fb_helper_restore_fbdev_mode_unlocked+0x19f/0x200 [ 468.608236][T11819] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 468.608281][T11819] drm_fbdev_client_restore+0x2c/0x40 [ 468.608324][T11819] drm_client_dev_restore+0x1f3/0x2a0 [ 468.608394][T11819] drm_release+0x2c4/0x360 [ 468.608430][T11819] ? __pfx_drm_release+0x10/0x10 [ 468.608463][T11819] __fput+0x3ff/0xb70 [ 468.608508][T11819] task_work_run+0x14d/0x240 [ 468.608556][T11819] ? __pfx_task_work_run+0x10/0x10 [ 468.608602][T11819] ? __pfx___do_sys_close_range+0x10/0x10 [ 468.608631][T11819] ? rcu_is_watching+0x12/0xc0 [ 468.608666][T11819] syscall_exit_to_user_mode+0x27b/0x2a0 [ 468.608709][T11819] do_syscall_64+0xda/0x230 [ 468.608754][T11819] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.608785][T11819] RIP: 0033:0x7f31bb58e969 [ 468.608829][T11819] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 468.608862][T11819] RSP: 002b:00007f31bc379038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 468.608894][T11819] RAX: 0000000000000000 RBX: 00007f31bb7b5fa0 RCX: 00007f31bb58e969 [ 468.608921][T11819] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 468.608941][T11819] RBP: 00007f31bb610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 468.608963][T11819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 468.608983][T11819] R13: 0000000000000000 R14: 00007f31bb7b5fa0 R15: 00007ffe570701b8 [ 468.609030][T11819] [ 468.983690][T11821] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1361'. [ 469.508650][T11842] usb usb8: usbfs: interface 0 claimed by hub while 'syz.2.1367' sets config #0 [ 469.513266][ T30] audit: type=1804 audit(4294967356.776:8): pid=11842 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1367" name="/newroot/sys/kernel/debug/tracing/events/vmalloc/filter" dev="tracefs" ino=19680823 res=1 errno=0 [ 469.555741][T11839] sp0: Synchronizing with TNC [ 471.511068][T11870] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1375'. [ 473.092522][T11904] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1383'. [ 474.345774][T11924] netlink: 338 bytes leftover after parsing attributes in process `syz.0.1389'. [ 474.357655][T11924] netlink: 338 bytes leftover after parsing attributes in process `syz.0.1389'. [ 474.439732][T11928] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1390'. [ 474.555827][T11925] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1388'. [ 474.569126][ T5835] Bluetooth: hci3: unexpected subevent 0x01 length: 5 < 18 [ 475.165466][T11951] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1395'. [ 476.057177][T11971] netlink: 'syz.0.1400': attribute type 10 has an invalid length. [ 476.074356][T11971] netlink: 230 bytes leftover after parsing attributes in process `syz.0.1400'. [ 476.225713][T11971] team0: Port device team_slave_1 removed [ 476.615366][T11978] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1403'. [ 477.831307][T12011] ima: policy update failed [ 477.836850][ T30] audit: type=1802 audit(4294967365.106:9): pid=12011 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.1411" res=0 errno=0 [ 477.860748][T12011] netlink: 25 bytes leftover after parsing attributes in process `syz.3.1411'. [ 478.998913][T12032] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1418'. [ 479.236906][T12040] Invalid logical block size (4) [ 479.715514][T12055] Invalid ELF header magic: != ELF [ 481.546707][T12090] Invalid ELF header magic: != ELF [ 481.647105][T12094] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1432'. [ 482.878422][T12120] FAULT_INJECTION: forcing a failure. [ 482.878422][T12120] name failslab, interval 1, probability 0, space 0, times 0 [ 482.910289][T12120] CPU: 1 UID: 0 PID: 12120 Comm: syz.2.1437 Tainted: G U I 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 482.910339][T12120] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND [ 482.910351][T12120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 482.910369][T12120] Call Trace: [ 482.910395][T12120] [ 482.910407][T12120] dump_stack_lvl+0x16c/0x1f0 [ 482.910457][T12120] should_fail_ex+0x512/0x640 [ 482.910514][T12120] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 482.910558][T12120] should_failslab+0xc2/0x120 [ 482.910641][T12120] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 482.910679][T12120] ? __pfx___might_resched+0x10/0x10 [ 482.910715][T12120] ? alloc_vmap_area+0x613/0x2970 [ 482.910771][T12120] alloc_vmap_area+0x613/0x2970 [ 482.910838][T12120] ? __pfx_alloc_vmap_area+0x10/0x10 [ 482.910898][T12120] __get_vm_area_node+0x1a7/0x300 [ 482.910965][T12120] __vmalloc_node_range_noprof+0x277/0x1540 [ 482.911021][T12120] ? n_tty_open+0x1a/0x170 [ 482.911082][T12120] ? n_tty_open+0x1a/0x170 [ 482.911131][T12120] ? __ldsem_down_write_nested+0x10e/0x850 [ 482.911182][T12120] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 482.911251][T12120] ? n_tty_open+0x1a/0x170 [ 482.911297][T12120] vzalloc_noprof+0x6b/0x90 [ 482.911347][T12120] ? n_tty_open+0x1a/0x170 [ 482.911389][T12120] ? __pfx_n_tty_open+0x10/0x10 [ 482.911431][T12120] n_tty_open+0x1a/0x170 [ 482.911474][T12120] ? __pfx_n_tty_open+0x10/0x10 [ 482.911518][T12120] tty_ldisc_open+0x9c/0x120 [ 482.911571][T12120] tty_ldisc_setup+0x40/0x100 [ 482.911609][T12120] tty_init_dev.part.0+0x1ec/0x500 [ 482.911656][T12120] tty_open+0xa50/0xf90 [ 482.911706][T12120] ? __pfx_tty_open+0x10/0x10 [ 482.911747][T12120] ? chrdev_open+0x10b/0x6a0 [ 482.911789][T12120] ? __pfx_tty_open+0x10/0x10 [ 482.911829][T12120] chrdev_open+0x231/0x6a0 [ 482.911864][T12120] ? __pfx_apparmor_file_open+0x10/0x10 [ 482.911907][T12120] ? __pfx_chrdev_open+0x10/0x10 [ 482.911952][T12120] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 482.912011][T12120] do_dentry_open+0x741/0x1c10 [ 482.912047][T12120] ? __pfx_chrdev_open+0x10/0x10 [ 482.912091][T12120] vfs_open+0x82/0x3f0 [ 482.912140][T12120] path_openat+0x1e5e/0x2d40 [ 482.912189][T12120] ? __pfx_path_openat+0x10/0x10 [ 482.912232][T12120] do_filp_open+0x20b/0x470 [ 482.912263][T12120] ? __pfx_do_filp_open+0x10/0x10 [ 482.912326][T12120] ? alloc_fd+0x471/0x7d0 [ 482.912394][T12120] do_sys_openat2+0x11b/0x1d0 [ 482.912438][T12120] ? __pfx_do_sys_openat2+0x10/0x10 [ 482.912500][T12120] __x64_sys_openat+0x174/0x210 [ 482.912546][T12120] ? __pfx___x64_sys_openat+0x10/0x10 [ 482.912594][T12120] ? rcu_is_watching+0x12/0xc0 [ 482.912638][T12120] do_syscall_64+0xcd/0x230 [ 482.912686][T12120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.912719][T12120] RIP: 0033:0x7f59d8d8e969 [ 482.912754][T12120] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 482.912782][T12120] RSP: 002b:00007f59d9b9a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 482.912809][T12120] RAX: ffffffffffffffda RBX: 00007f59d8fb5fa0 RCX: 00007f59d8d8e969 [ 482.912828][T12120] RDX: 0000000000040002 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 482.912845][T12120] RBP: 00007f59d8e10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 482.912860][T12120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 482.912876][T12120] R13: 0000000000000000 R14: 00007f59d8fb5fa0 R15: 00007fff91ca9368 [ 482.912911][T12120] [ 482.913614][T12120] warn_alloc: 1 callbacks suppressed [ 482.913630][T12120] syz.2.1437: vmalloc error: size 9128, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 483.037004][T12121] ima: policy update failed [ 483.290171][T12120] ,cpuset=/,mems_allowed=0-1 [ 483.320305][T12120] CPU: 1 UID: 0 PID: 12120 Comm: syz.2.1437 Tainted: G U I 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 483.320357][T12120] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND [ 483.320369][T12120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 483.320387][T12120] Call Trace: [ 483.320398][T12120] [ 483.320410][T12120] dump_stack_lvl+0x16c/0x1f0 [ 483.320452][T12120] warn_alloc+0x248/0x3a0 [ 483.320488][T12120] ? __pfx_warn_alloc+0x10/0x10 [ 483.320522][T12120] ? kfree+0x2b6/0x4d0 [ 483.320576][T12120] ? __get_vm_area_node+0x1e5/0x300 [ 483.320627][T12120] __vmalloc_node_range_noprof+0xd31/0x1540 [ 483.320686][T12120] ? n_tty_open+0x1a/0x170 [ 483.320729][T12120] ? __ldsem_down_write_nested+0x10e/0x850 [ 483.320773][T12120] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 483.320831][T12120] ? n_tty_open+0x1a/0x170 [ 483.320871][T12120] vzalloc_noprof+0x6b/0x90 [ 483.320923][T12120] ? n_tty_open+0x1a/0x170 [ 483.320959][T12120] ? __pfx_n_tty_open+0x10/0x10 [ 483.320996][T12120] n_tty_open+0x1a/0x170 [ 483.321034][T12120] ? __pfx_n_tty_open+0x10/0x10 [ 483.321076][T12120] tty_ldisc_open+0x9c/0x120 [ 483.321104][T12120] tty_ldisc_setup+0x40/0x100 [ 483.321136][T12120] tty_init_dev.part.0+0x1ec/0x500 [ 483.321175][T12120] tty_open+0xa50/0xf90 [ 483.321218][T12120] ? __pfx_tty_open+0x10/0x10 [ 483.321252][T12120] ? chrdev_open+0x10b/0x6a0 [ 483.321286][T12120] ? __pfx_tty_open+0x10/0x10 [ 483.321320][T12120] chrdev_open+0x231/0x6a0 [ 483.321349][T12120] ? __pfx_apparmor_file_open+0x10/0x10 [ 483.321385][T12120] ? __pfx_chrdev_open+0x10/0x10 [ 483.321419][T12120] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 483.321469][T12120] do_dentry_open+0x741/0x1c10 [ 483.321498][T12120] ? __pfx_chrdev_open+0x10/0x10 [ 483.321536][T12120] vfs_open+0x82/0x3f0 [ 483.321577][T12120] path_openat+0x1e5e/0x2d40 [ 483.321619][T12120] ? __pfx_path_openat+0x10/0x10 [ 483.321656][T12120] do_filp_open+0x20b/0x470 [ 483.321685][T12120] ? __pfx_do_filp_open+0x10/0x10 [ 483.321741][T12120] ? alloc_fd+0x471/0x7d0 [ 483.321795][T12120] do_sys_openat2+0x11b/0x1d0 [ 483.321831][T12120] ? __pfx_do_sys_openat2+0x10/0x10 [ 483.321884][T12120] __x64_sys_openat+0x174/0x210 [ 483.321930][T12120] ? __pfx___x64_sys_openat+0x10/0x10 [ 483.321969][T12120] ? rcu_is_watching+0x12/0xc0 [ 483.322005][T12120] do_syscall_64+0xcd/0x230 [ 483.322047][T12120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.322075][T12120] RIP: 0033:0x7f59d8d8e969 [ 483.322097][T12120] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 483.322126][T12120] RSP: 002b:00007f59d9b9a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 483.322152][T12120] RAX: ffffffffffffffda RBX: 00007f59d8fb5fa0 RCX: 00007f59d8d8e969 [ 483.322171][T12120] RDX: 0000000000040002 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 483.322188][T12120] RBP: 00007f59d8e10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 483.322205][T12120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 483.322221][T12120] R13: 0000000000000000 R14: 00007f59d8fb5fa0 R15: 00007fff91ca9368 [ 483.322257][T12120] [ 483.334977][T12120] Mem-Info: [ 483.656916][T12120] active_anon:7266 inactive_anon:26177 isolated_anon:0 [ 483.656916][T12120] active_file:18949 inactive_file:37887 isolated_file:0 [ 483.656916][T12120] unevictable:768 dirty:572 writeback:0 [ 483.656916][T12120] slab_reclaimable:10707 slab_unreclaimable:98044 [ 483.656916][T12120] mapped:34913 shmem:19306 pagetables:1087 [ 483.656916][T12120] sec_pagetables:0 bounce:0 [ 483.656916][T12120] kernel_misc_reclaimable:0 [ 483.656916][T12120] free:1305114 free_pcp:5461 free_cma:0 [ 483.712587][ T30] audit: type=1802 audit(4294967370.926:10): pid=12121 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.1439" res=0 errno=0 [ 483.752917][T12120] Node 0 active_anon:29064kB inactive_anon:106408kB active_file:75784kB inactive_file:151488kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:141352kB dirty:2288kB writeback:0kB shmem:76464kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10824kB pagetables:4348kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 483.847172][T12120] Node 1 active_anon:0kB inactive_anon:0kB active_file:12kB inactive_file:60kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:2560kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 483.878410][ C1] vkms_vblank_simulate: vblank timer overrun [ 483.940467][T12120] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 484.002777][T12120] lowmem_reserve[]: 0 2484 2486 2486 2486 [ 484.010149][T12120] Node 0 DMA32 free:1304996kB boost:0kB min:34108kB low:42632kB high:51156kB reserved_highatomic:0KB active_anon:29032kB inactive_anon:107236kB active_file:74156kB inactive_file:152428kB unevictable:1536kB writepending:2300kB present:3129332kB managed:2544188kB mlocked:0kB bounce:0kB free_pcp:17944kB local_pcp:16580kB free_cma:0kB [ 484.041313][ C1] vkms_vblank_simulate: vblank timer overrun [ 484.099006][T12120] lowmem_reserve[]: 0 0 1 1 1 [ 484.123142][T12120] Node 0 Normal free:20kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:1748kB inactive_file:72kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 484.150619][ C1] vkms_vblank_simulate: vblank timer overrun [ 484.168728][T12120] lowmem_reserve[]: 0 0 0 0 0 [ 484.168793][T12120] Node 1 Normal free:3892860kB boost:0kB min:55768kB low:69708kB high:83648kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:12kB inactive_file:60kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:7480kB local_pcp:2504kB free_cma:0kB [ 484.168904][T12120] lowmem_reserve[]: 0 0 0 0 0 [ 484.168969][T12120] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 484.169175][T12120] Node 0 DMA32: 688*4kB (UME) 536*8kB (UME) 875*16kB (UME) 674*32kB (UME) 346*64kB (UME) 82*128kB (UME) 161*256kB (UME) 81*512kB (UME) 54*1024kB (UME) 17*2048kB (UME) 262*4096kB (UM) = 1321200kB [ 484.169463][T12120] Node 0 Normal: 1*4kB (M) 2*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB [ 484.174993][T12120] Node 1 Normal: 246*4kB (UME) 45*8kB (UME) 35*16kB (UME) 218*32kB (UME) 108*64kB (UME) 30*128kB (UME) 14*256kB (UME) 10*512kB (UME) 4*1024kB (UE) 3*2048kB (U) 941*4096kB (M) = 3892912kB [ 484.175246][T12120] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 484.175271][T12120] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 484.175295][T12120] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 484.175320][T12120] Node 1 hugepages_total=7 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 484.175343][T12120] 77062 total pagecache pages [ 484.175355][T12120] 109 pages in swap cache [ 484.175366][T12120] Free swap = 118736kB [ 484.175377][T12120] Total swap = 124996kB [ 484.175389][T12120] 2097051 pages RAM [ 484.175400][T12120] 0 pages HighMem/MovableOnly [ 484.175411][T12120] 428898 pages reserved [ 484.175421][T12120] 0 pages cma reserved [ 484.175437][T12120] tty tty26: ldisc open failed (-12), clearing slot 25 [ 484.349838][ C1] vkms_vblank_simulate: vblank timer overrun [ 484.517491][ C1] vkms_vblank_simulate: vblank timer overrun [ 485.020167][ T5835] ================================================================== [ 485.020184][ T5835] BUG: KASAN: vmalloc-out-of-bounds in hci_devcd_dump+0x142/0x240 [ 485.020223][ T5835] Read of size 140 at addr ffffc9000b469000 by task kworker/u9:4/5835 [ 485.020245][ T5835] [ 485.020259][ T5835] CPU: 1 UID: 0 PID: 5835 Comm: kworker/u9:4 Tainted: G U I 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 485.020303][ T5835] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND [ 485.020314][ T5835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 485.020332][ T5835] Workqueue: hci0 hci_devcd_timeout [ 485.020364][ T5835] Call Trace: [ 485.020372][ T5835] [ 485.020382][ T5835] dump_stack_lvl+0x116/0x1f0 [ 485.020438][ T5835] print_report+0xc3/0x670 [ 485.020472][ T5835] ? __virt_addr_valid+0x5e/0x590 [ 485.020513][ T5835] ? hci_devcd_dump+0x142/0x240 [ 485.020548][ T5835] kasan_report+0xe0/0x110 [ 485.020582][ T5835] ? hci_devcd_dump+0x142/0x240 [ 485.020622][ T5835] kasan_check_range+0xef/0x1a0 [ 485.020672][ T5835] __asan_memcpy+0x23/0x60 [ 485.020699][ T5835] hci_devcd_dump+0x142/0x240 [ 485.020736][ T5835] hci_devcd_timeout+0xb5/0x2e0 [ 485.020770][ T5835] ? rcu_is_watching+0x12/0xc0 [ 485.020800][ T5835] process_one_work+0x9cc/0x1b70 [ 485.020851][ T5835] ? __pfx_process_one_work+0x10/0x10 [ 485.020905][ T5835] ? assign_work+0x1a0/0x250 [ 485.020950][ T5835] worker_thread+0x6c8/0xf10 [ 485.021002][ T5835] ? __kthread_parkme+0x19e/0x250 [ 485.021040][ T5835] ? __pfx_worker_thread+0x10/0x10 [ 485.021085][ T5835] kthread+0x3c2/0x780 [ 485.021127][ T5835] ? __pfx_kthread+0x10/0x10 [ 485.021168][ T5835] ? __pfx_kthread+0x10/0x10 [ 485.021207][ T5835] ? __pfx_kthread+0x10/0x10 [ 485.021248][ T5835] ? __pfx_kthread+0x10/0x10 [ 485.021288][ T5835] ? rcu_is_watching+0x12/0xc0 [ 485.021315][ T5835] ? __pfx_kthread+0x10/0x10 [ 485.021357][ T5835] ret_from_fork+0x45/0x80 [ 485.021403][ T5835] ? __pfx_kthread+0x10/0x10 [ 485.021445][ T5835] ret_from_fork_asm+0x1a/0x30 [ 485.021497][ T5835] [ 485.021507][ T5835] [ 485.300951][ T5835] The buggy address ffffc9000b469000 belongs to a vmalloc virtual mapping [ 485.300968][ T5835] Memory state around the buggy address: [ 485.300981][ T5835] ffffc9000b468f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 485.300998][ T5835] ffffc9000b468f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 485.301015][ T5835] >ffffc9000b469000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 485.301028][ T5835] ^ [ 485.301040][ T5835] ffffc9000b469080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 485.301057][ T5835] ffffc9000b469100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 485.301071][ T5835] ================================================================== [ 485.301133][ C1] vkms_vblank_simulate: vblank timer overrun [ 485.305356][ T5835] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 485.305375][ T5835] CPU: 1 UID: 0 PID: 5835 Comm: kworker/u9:4 Tainted: G U I 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 485.305409][ T5835] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND [ 485.305418][ T5835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 485.305433][ T5835] Workqueue: hci0 hci_devcd_timeout [ 485.305463][ T5835] Call Trace: [ 485.305470][ T5835] [ 485.305479][ T5835] dump_stack_lvl+0x3d/0x1f0 [ 485.305507][ T5835] panic+0x71c/0x800 [ 485.305549][ T5835] ? __pfx_panic+0x10/0x10 [ 485.305578][ T5835] ? irqentry_exit+0x3b/0x90 [ 485.305605][ T5835] ? lockdep_hardirqs_on+0x7c/0x110 [ 485.305633][ T5835] ? preempt_schedule_thunk+0x16/0x30 [ 485.305672][ T5835] ? hci_devcd_dump+0x142/0x240 [ 485.305698][ T5835] ? preempt_schedule_common+0x44/0xc0 [ 485.305725][ T5835] ? check_panic_on_warn+0x1f/0xb0 [ 485.305774][ T5835] ? hci_devcd_dump+0x142/0x240 [ 485.305802][ T5835] check_panic_on_warn+0xab/0xb0 [ 485.305840][ T5835] end_report+0x107/0x170 [ 485.305866][ T5835] kasan_report+0xee/0x110 [ 485.305893][ T5835] ? hci_devcd_dump+0x142/0x240 [ 485.305924][ T5835] kasan_check_range+0xef/0x1a0 [ 485.305955][ T5835] __asan_memcpy+0x23/0x60 [ 485.305975][ T5835] hci_devcd_dump+0x142/0x240 [ 485.306004][ T5835] hci_devcd_timeout+0xb5/0x2e0 [ 485.306031][ T5835] ? rcu_is_watching+0x12/0xc0 [ 485.306054][ T5835] process_one_work+0x9cc/0x1b70 [ 485.306095][ T5835] ? __pfx_process_one_work+0x10/0x10 [ 485.306134][ T5835] ? assign_work+0x1a0/0x250 [ 485.306167][ T5835] worker_thread+0x6c8/0xf10 [ 485.306206][ T5835] ? __kthread_parkme+0x19e/0x250 [ 485.306233][ T5835] ? __pfx_worker_thread+0x10/0x10 [ 485.306269][ T5835] kthread+0x3c2/0x780 [ 485.306300][ T5835] ? __pfx_kthread+0x10/0x10 [ 485.306331][ T5835] ? __pfx_kthread+0x10/0x10 [ 485.306373][ T5835] ? __pfx_kthread+0x10/0x10 [ 485.306402][ T5835] ? __pfx_kthread+0x10/0x10 [ 485.306431][ T5835] ? rcu_is_watching+0x12/0xc0 [ 485.306450][ T5835] ? __pfx_kthread+0x10/0x10 [ 485.306480][ T5835] ret_from_fork+0x45/0x80 [ 485.306518][ T5835] ? __pfx_kthread+0x10/0x10 [ 485.306548][ T5835] ret_from_fork_asm+0x1a/0x30 [ 485.306584][ T5835] [ 485.306949][ T5835] Kernel Offset: disabled