last executing test programs: 2m31.459140756s ago: executing program 3 (id=967): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8000, 0x0) socket(0x1, 0x5, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0xe, 0x43, 0x12, 0x3, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) madvise$auto(0x0, 0x3, 0x14) 2m31.253151951s ago: executing program 3 (id=969): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x80000000000000a, 0x2, 0x0) r0 = socket(0x2, 0x801, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x13}}, 0x54) getsockopt$auto(r0, 0x84, 0x82, 0x0, &(0x7f00000002c0)=0x1000c0) 2m30.844773775s ago: executing program 3 (id=970): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x4000000000007, 0xa505}, 0x800}, 0x4, 0x4008) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) recvmmsg$auto(r1, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) ioctl$auto(r0, 0x40104d14, 0x8) 2m30.286080883s ago: executing program 3 (id=972): close_range$auto(0x0, 0xfffffffffffff001, 0x2) socket(0x2, 0x1, 0x0) socket(0x1e, 0x1, 0x0) socket(0x10, 0x2, 0x0) memfd_create$auto(&(0x7f0000000000)='\xc4--:\xdd:,./-${\x00', 0x4) mmap$auto(0x0, 0x8, 0x1000000016, 0x13, 0x3, 0x400180000000) ftruncate$auto(0x3, 0x400180200000) 2m29.973961999s ago: executing program 3 (id=974): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r0, 0x0, 0x1f40) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) ioctl$auto(r2, 0x401870cb, r2) 2m29.379667952s ago: executing program 3 (id=976): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000d40), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r1, &(0x7f00000020c0)={0x0, 0x0, &(0x7f0000002080)={&(0x7f0000000040)={0x18, r2, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NFSD_A_SERVER_SOCK_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x4000) prctl$auto(0x1000000001c, 0x5, 0x100000000, 0x400000000009, 0x3fffffffff) tkill$auto(0x1, 0x9) sendmsg$auto_NFSD_CMD_THREADS_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x1, 0x70bd2d, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4) 2m14.098701816s ago: executing program 32 (id=976): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000d40), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r1, &(0x7f00000020c0)={0x0, 0x0, &(0x7f0000002080)={&(0x7f0000000040)={0x18, r2, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NFSD_A_SERVER_SOCK_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x4000) prctl$auto(0x1000000001c, 0x5, 0x100000000, 0x400000000009, 0x3fffffffff) tkill$auto(0x1, 0x9) sendmsg$auto_NFSD_CMD_THREADS_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x1, 0x70bd2d, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4) 1m22.002703114s ago: executing program 1 (id=1407): r0 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) mmap$auto(0x0, 0x10005, 0xdf, 0xeb1, r0, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000180), 0x101002, 0x0) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) capset$auto(&(0x7f0000000100)={0x20080522}, 0x0) r1 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/stack\x00', 0x181100, 0x0) read$auto_proc_single_file_operations_base(r1, &(0x7f0000000080)=""/112, 0x70) 1m21.808510983s ago: executing program 1 (id=1412): socket(0x2, 0x801, 0x100) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(r0, 0xffffffffffffffff, 0x0) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video0\x00', 0xa200, 0x0) ioctl$auto(r1, 0xc0585611, r1) 1m21.684377177s ago: executing program 1 (id=1413): eventfd$auto(0x2) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x8}, 0x8) mmap$auto(0x0, 0x8020009, 0xe2, 0xcb1, 0x401, 0x8040001008000) io_uring_setup$auto(0x6, 0x0) read$auto(0x3, 0x0, 0x80) close_range$auto(0x2, 0x8000, 0x0) open(0x0, 0x80842, 0x91) openat$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/ieee80211/phy0/netdev:wlan0/uapsd_queues\x00', 0x20102, 0x0) 1m21.448055269s ago: executing program 1 (id=1418): ioctl$auto_SNDCTL_DSP_GETODELAY(0xffffffffffffffff, 0x80045017, &(0x7f00000001c0)="b0a7c7f88518ff488ce1abe0eddcb54d5aa089465849eb7417f82e6ae3e10305bbb82e27995ccb4b6ae7450b78714019b8d3b3a51984e634bf9c99e68adf54dfd239e5a08fde02f94a9544e113c68e77e1c6ed5738ab1b4185a298df20e30e781eab178f248e545efc813ce233d92ca74934e220de") r0 = open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0x538, 0x80, 0x10000, 0x0, r0, 0x1000, "72fea04183dce563f03f2a25077b3383", 0x0, r0, 0x4, 0x6, 0x101, 0x1, r0}, 0x6f3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x8, 0x0, 0x7, 0x0, 0xfffffffffffffffd, 0x200}, 0x5}, 0x3, 0x4, 0x0) mount$auto(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='nfs4\x00', 0x200, &(0x7f00000001c0)) 1m20.993025463s ago: executing program 1 (id=1422): mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f0000000040)='}[,&*}\x00', &(0x7f0000000080)='nfsd\x00', 0x3, 0x0) chdir$auto(&(0x7f0000000280)='}[,&*}\x00') mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r0 = open(&(0x7f0000000100)='.\x00', 0x40000, 0x0) getdents64$auto(0x0, 0x0, 0xe6) getdents64$auto(r0, 0x0, 0x400) 1m20.836186465s ago: executing program 1 (id=1424): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) adjtimex$auto(0x0) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) madvise$auto(0x110c230000, 0x8031ca, 0x9) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) sendmsg$auto_NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x2404c800) kexec_load$auto(0x5, 0x2, &(0x7f0000000040)={@kbuf=0x0, 0x800c000, 0x4800c000, 0x800c000}, 0x4) 1m5.693772664s ago: executing program 33 (id=1424): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) adjtimex$auto(0x0) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) madvise$auto(0x110c230000, 0x8031ca, 0x9) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) sendmsg$auto_NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x2404c800) kexec_load$auto(0x5, 0x2, &(0x7f0000000040)={@kbuf=0x0, 0x800c000, 0x4800c000, 0x800c000}, 0x4) 12.4294169s ago: executing program 4 (id=1806): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) socketpair$auto(0x2, 0x5, 0x2, 0x0) mmap$auto(0x0, 0xffe, 0xffb, 0x8000000008011, 0x3, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket(0x10, 0x2, 0x0) recvmmsg$auto(r0, 0x0, 0xfffffff9, 0x10, 0x0) write$auto(0x3, 0x0, 0x100082) 11.314229681s ago: executing program 4 (id=1819): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/loop11/queue/io_poll_delay\x00', 0xa8002, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/fs/cifs/dfscache\x00', 0x40080, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000180)='ns/ipc\x00') socket$nl_generic(0x10, 0x3, 0x10) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x4, 0x15f4da0a, 0x1, 0x3, 0x1000000, 0x80000001, 0x7, 0x6d3c, 0x5, 0x40002]}, 0x0) 11.148682669s ago: executing program 4 (id=1820): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x8000008, 0x1, 0x9, 0x3, 0x400026, 0x940, 0x1ffde, 0x3, 0x6, 0x7ff, 0xfffffff6, 0x400005, 0xfff, 0x0, 0xb0, 0x8, 0x9, 0x3, 0x5, 0x6, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2, [0x3, 0x3, 0x200000000, 0x400000000, 0x0, 0x3903, 0x0, 0x4, 0x3, 0x2000, 0x9, 0x0, 0x0, 0x0, 0x100000000000009, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffe, 0x4, 0x0, 0xccb, 0x0, 0xfffffffffffffffc, 0x0, 0x4, 0xfffffffffffffffc, 0xffffffffffffffff, 0x2, 0x800, 0xfffffffffffffffd, 0x0, 0xb548, 0x8, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18c]}, 0xfffff7fffffffffa, 0x81) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) seccomp$auto(0xfffffffb, 0xfffffff8, 0x0) clone$auto(0x6, 0x0, 0x0, 0x0, 0x401) 10.510166813s ago: executing program 4 (id=1825): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) io_uring_setup$auto(0x6, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x4, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x48891}, 0x20) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), r0) syz_genetlink_get_family_id$auto_nl80211(0x0, r0) 9.861157197s ago: executing program 4 (id=1828): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f0000000040)='}[,&*}\x00', &(0x7f0000000080)='nfsd\x00', 0x3, 0x0) chdir$auto(&(0x7f0000000280)='}[,&*}\x00') close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) open(&(0x7f0000000100)='.\x00', 0x0, 0x408) getdents64$auto(0x0, 0x0, 0x41) getdents$auto(0x0, 0x0, 0x100) 9.584792504s ago: executing program 4 (id=1831): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030009000000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a000100aaaaaaaaaabb00000a0001000000000000000000080004001000000008000200", @ANYRES32=0x0, @ANYBLOB="0a0011"], 0x6c}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 3.107540802s ago: executing program 0 (id=1876): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x15, 0x5, 0x0) socket(0x2, 0x6, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, 0x5f, 0x0, 0x3}, 0x6f3) r0 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(r0, r0, 0x0) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0xa200, 0x0) ioctl$auto(r1, 0xc0585611, r1) 2.643786428s ago: executing program 0 (id=1879): close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), r0) sendmsg$auto_TIPC_NL_MEDIA_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)={0x14, r1, 0x701, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) read$auto(0x4, 0x0, 0xfdef) 2.493132195s ago: executing program 0 (id=1881): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, 0x0, 0x40090) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r0, 0x0, 0x1f40) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_nsim_pp_hold_fops_netdev(0xffffffffffffff9c, 0x0, 0x82101, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x3000, 0x6, 0x7, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29b, 0x3, 0x7f, 0x104, 0x6, 0x3}, {0x100, 0x1, 0x52, 0x85, 0x2, 0x1a7b870a, 0x76c5, 0x8, 0x100000000}}) 2.423685728s ago: executing program 2 (id=1883): socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/block/nbd5/sched/dispatch0\x00', 0x60000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/pci0000:00/0000:00:03.0/virtio0/device\x00', 0x20040, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/security/tomoyo/manager\x00', 0x2, 0x0) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0xa, 0xd, 0x1000, 0x100000948b, 0x4, 0x15f4da0a, 0x1, 0x0, 0x1, 0x3, 0x7, 0x6d3c, 0x6, 0x2]}, 0x0) 2.382693501s ago: executing program 5 (id=1884): close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x2) landlock_create_ruleset$auto(&(0x7f0000000000)={0xdaa1, 0x1, 0x8}, 0x8, 0x0) landlock_restrict_self$auto(r0, 0x0) mknod$auto(&(0x7f00000003c0)=':,\x00\xbd\x80\xd6\x002\xb37\xff\x1a\x9e99\xda\xd1v\'\xc6\xd2Fw;\x00v\xdce\xad\xf4\xdb\xc7\x946\xe4\f\x9el]L+\x06\x130V\x1b,d\x8f\xa0\xabDUdk\xac\x82\\tyQ\xd8j\a\x1a[\xdb\x96\x1f{2\x04\xc5Y\xc1@\x0e\xeeWZ\x94N\xd4\xc8q=\x9b\xd1\x7fR3\xb6`\x00\xb3\xe5|1\xba\r\x85\x89\xfe\xed\xe1\xad`\x92\xc7\x9c\xd7\xd8\x15\t&\xb7\xfc\x82\xc4\xd3J\xae\x810\x19\x14\t\xc2\xa5V\xaa\x8d\x04\xf5\xf3\xd6\xd1\xe9k\xaf\x1a\xc6u\x96\xf7\xaa\x84\x92\x995m\xf9O\xc0\x1e\xa05\xdb\xa5\xae\r\x06\xe6\xc3\xd0\xf8:\xf7\xc5u\x91\xf8\x91\xee\xd8y\xb8\xc1)\xad\x05\xeb\xe9\xab\r\x9a@\aa(\x1a\xa4\xc1\xcf\\\xf0\xc3~\xbbd\x94\x9c\x02\xd4\xfc\xd2`\xd9\x83{-\x81zY\\\xac!#\xea\xba\x86)\xe9\xbc\x82\xf6\xd2\x7f\xdb\xa1\xd5\x89|\xa0O\xfcqZ\x85@A\x90\"\x11L\xdd\xa5\x9f\xf5', 0x20e9, 0x103) r1 = open(&(0x7f00000004c0)=':,\x00\xbd\x80\xd6\x002\xb37\xff\x1a\x9e99\xda\xd1v\'\xc6\xd2Fw;\x00v\xdce\xad\xf4\xdb\xc7\x946\xe4\f\x9el]L+\x06\x130V\x1b,d\x8f\xa0\xabDUdk\xac\x82\\tyQ\xd8j\a\x1a[\xdb\x96\x1f{2\x04\xc5Y\xc1@\x0e\xeeWZ\x94N\xd4\xc8q=\x9b\xd1\x7fR3\xb6`\x00\xb3\xe5|1\xba\r\x85\x89\xfe\xed\xe1\xad`\x92\xc7\x9c\xd7\xd8\x15\t&\xb7\xfc\x82\xc4\xd3J\xae\x810\x19\x14\t\xc2\xa5V\xaa\x8d\x04\xf5\xf3\xd6\xd1\xe9k\xaf\x1a\xc6u\x96\xf7\xaa\x84\x92\x995m\xf9O\xc0\x1e\xa05\xdb\xa5\xae\r\x06\xe6\xc3\xd0\xf8:\xf7\xc5u\x91\xf8\x91\xee\xd8y\xb8\xc1)\xad\x05\xeb\xe9\xab\r\x9a@\aa(\x1a\xa4\xc1\xcf\\\xf0\xc3~\xbbd\x94\x9c\x02\xd4\xfc\xd2`\xd9\x83{-\x81zY\\\xac!#\xea\xba\x86)\xe9\xbc\x82\xf6\xd2\x7f\xdb\xa1\xd5\x89|\xa0O\xfcqZ\x85@A\x90\"\x11L\xdd\xa5\x9f\xf5\x00', 0x8000, 0x50) ioctl$auto_CEC_ADAP_G_LOG_ADDRS(r1, 0x5450, 0x0) 2.258345889s ago: executing program 5 (id=1885): write$auto(0xffffffffffffffff, &(0x7f0000000040)='\x00)\xe8\xc7.\xf0\xb0f\xd2\x02\x00>\x00\x10\x1a\x13I]{\xe0\n\xd4n\x9f\xae\xed\xcd6\x9f\xf6\x01\x00s\xa6\x03y\x97\x0eR\xb8\xb7\xcc\x83\xb8O\xe5\b\x80\xd0\xd7\xc0+:\x17\x8d\xf4A\xdc\xd4A`\xdb\x80E|X\xc3\xa4H\xb9\xd8\x03*\x9c\x00\x00\x00\x00\x00\x00\x00', 0x100000001) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mq_notify$auto(0x4, &(0x7f0000000040)={@sival_ptr=0x0, @inferred, 0x1, @_tid}) sendmsg$auto_NL802154_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0}, 0x80) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f00000000c0)={{0x0, 0x6, 0x0, 0xa7, &(0x7f0000000040)='~', 0x8000, 0x1}, 0x8}, 0x1, 0x9) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0xff, 0x0, 0x1, 0x3}, 0xed7138c}, 0xb, 0x0) 2.130448957s ago: executing program 5 (id=1886): openat$auto_force_wakeup_fops_hci_vhci(0xffffffffffffff9c, 0x0, 0x101100, 0x0) bind$auto(0xffffffffffffffff, 0x0, 0x66) openat$auto_tracing_saved_cmdlines_fops_trace(0xffffffffffffff9c, 0x0, 0xa00, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2) mprotect$auto(0x8000, 0x8, 0x8) 2.107715978s ago: executing program 2 (id=1887): r0 = socket(0x10, 0x2, 0x0) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0xf, 0x29f, 0x100, 0x7f, 0x101, 0x6, 0x2}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x76c5, 0x8, 0x100000000}}) msgctl$auto(0x9, 0x9, &(0x7f0000000080)={{0xce0, 0x0, 0xee01, 0x101, 0x3, 0x6, 0xe}, 0x0, 0x0, 0xffff, 0x2, 0x7fffffffffffffff, 0x8, 0x8001, 0x1, 0x6, 0x8}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_SMC_NETLINK_DISABLE_SEID(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="013b"], 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x810) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 1.19421547s ago: executing program 5 (id=1888): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x15, 0x5, 0x0) socket(0x2, 0x6, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, 0x5f, 0x0, 0x3}, 0x6f3) r0 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(r0, r0, 0x0) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0xa200, 0x0) ioctl$auto(r1, 0xc0585611, r1) 1.193522553s ago: executing program 0 (id=1896): close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0x3, 0xeb1, 0x405, 0x8000) socket(0x29, 0x5, 0x0) r0 = socket(0x10, 0x2, 0x0) recvfrom$auto(0x3, 0x0, 0x142e, 0x2, 0x0, 0x0) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='V'], 0x1ac}}, 0x40000) 1.187640672s ago: executing program 2 (id=1897): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x10, 0x2, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) bpf$auto(0x9, &(0x7f00000001c0)=@raw_tracepoint={0x1006, 0xffffffffffffffff, 0x0, 0x11}, 0x6f3) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff0500060001000000840002803d00488013b37090badc49d6dc93876646d25a4d297d01cd3b7da38d12889cc50d505f353dc42d0a3c0a14c7b46428910708003600", @ANYRES32=0x0, @ANYBLOB="0400b3800000003d003b800400a4800c009a00008000000000000004008680c16ab1b1b39dcaa14b6af7dcc011b43cf706e562811c62b28a702b72e0a87126700294f2350000000c000180080003"], 0xd4}, 0x1, 0x0, 0x0, 0x20000010}, 0x20008000) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 985.742089ms ago: executing program 0 (id=1889): mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x11, 0x3, 0x1) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) ioctl$auto_PPPIOCSPASS(r0, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000000)={0x20, 0xf1, 0xb0, @raw=0x68e8}}) write$auto(0x3, 0x0, 0x5c8) 985.659181ms ago: executing program 5 (id=1890): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) connect$auto(0x4, 0x0, 0x10) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) select$auto(0x7, 0x0, &(0x7f0000000080)={[0x209c, 0xe9e, 0x6, 0x15, 0x1000, 0x100000001, 0xc, 0x9, 0x0, 0xfffffffffffffffe, 0x7ff, 0xd59, 0x101, 0xff, 0x2, 0x80000001]}, 0x0, 0x0) recvfrom$auto(0x3, 0x0, 0x2395, 0x40000100, 0x0, 0xfffffffffffffffd) close_range$auto(0x2, 0x8000, 0x0) 985.604341ms ago: executing program 2 (id=1891): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2000000000000021, 0x2, 0x10000000000002) socket(0x2a, 0x2, 0x0) socket(0x2a, 0x2, 0x1) fstatfs$auto(0x3, 0x0) 878.535306ms ago: executing program 2 (id=1892): close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x742, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d) memfd_secret$auto(0x0) mmap$auto(0x0, 0x8, 0xfffffffffffffffa, 0x13, 0x3, 0x0) pipe2$auto(0x0, 0x80) sendfile$auto(0x6, 0x3, 0x0, 0xc01) 791.855674ms ago: executing program 0 (id=1893): adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffa, 0xd4, 0x1, 0x6, 0x0, 0x200000000000001, 0x368e, 0x2, {0x100000001, 0x4}, 0xff, 0x6, 0xfffffffffffffffd, 0x1007ffd, 0x0, 0x8000000c, 0x81, 0x10000, 0x80000000a747, 0xdeb2, 0x804}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x2, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = openat$auto_bch_chardev_fops_chardev(0xffffffffffffff9c, &(0x7f0000000580), 0x400, 0x0) ioctl$auto_BCH_IOCTL_FSCK_OFFLINE(r1, 0x4018bc13, &(0x7f00000005c0)={0x0, 0x9d, 0x720, [0x0]}) 133.514µs ago: executing program 5 (id=1894): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2, 0x801, 0x106) setsockopt$auto(0x3, 0x62, 0x75, 0x0, 0x8) bpf$auto(0x5, 0x0, 0x171) mprotect$auto(0x0, 0x8000000000000001, 0x1) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0xd4, 0x3, 0x6, 0x0, 0x10000, 0x1, 0x2, {0x2100000000, 0x10000}, 0x3, 0x6, 0xffffffffffffffdd, 0x1008000, 0x0, 0x80000004, 0x83, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x1800}) semtimedop$auto(0x0, &(0x7f00000000c0)={0xa, 0x81, 0x70}, 0x1f4, 0x0) semtimedop$auto(0x1, &(0x7f0000000000)={0x6, 0x8, 0x36e9}, 0x1, 0x0) 0s ago: executing program 2 (id=1895): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030004020000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a000500dd000000000000000a000100987874e64b8500000a0001007572c85c318e0000060007000a00000008000200", @ANYRES32=0x0, @ANYBLOB="0800040073090007"], 0x68}, 0x1, 0x0, 0x0, 0x18a64d47ddeca1f0}, 0x40090) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) kernel console output (not intermixed with test programs): a5fa0 R15: 00007ffe67c30df8 [ 292.014863][ T9549] [ 292.385338][ T9550] delete_channel: no stack [ 292.892562][ T9565] netlink: 330 bytes leftover after parsing attributes in process `syz.1.1293'. [ 292.993368][ T9569] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 294.346488][ T9594] netlink: 326 bytes leftover after parsing attributes in process `syz.1.1303'. [ 295.329315][ T9616] sctp: [Deprecated]: syz.4.1310 (pid 9616) Use of int in maxseg socket option. [ 295.329315][ T9616] Use struct sctp_assoc_value instead [ 295.899441][ T9624] netlink: 'syz.0.1322': attribute type 33 has an invalid length. [ 295.919106][ T9624] netlink: 322 bytes leftover after parsing attributes in process `syz.0.1322'. [ 298.570248][ T9689] FAULT_INJECTION: forcing a failure. [ 298.570248][ T9689] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 298.619107][ T9689] CPU: 1 UID: 0 PID: 9689 Comm: syz.0.1342 Not tainted 6.14.0-rc7-syzkaller-00074-ga7f2e10ecd8f #0 [ 298.619152][ T9689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 298.619171][ T9689] Call Trace: [ 298.619181][ T9689] [ 298.619193][ T9689] dump_stack_lvl+0x16c/0x1f0 [ 298.619248][ T9689] should_fail_ex+0x50a/0x650 [ 298.619278][ T9689] ? __pfx___might_resched+0x10/0x10 [ 298.619333][ T9689] should_fail_alloc_page+0xe7/0x130 [ 298.619368][ T9689] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 298.619414][ T9689] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 298.619459][ T9689] __alloc_frozen_pages_noprof+0x18e/0x2470 [ 298.619514][ T9689] ? unwind_get_return_address+0x59/0xa0 [ 298.619566][ T9689] ? arch_stack_walk+0xa7/0x100 [ 298.619605][ T9689] ? hlock_class+0x4e/0x130 [ 298.619640][ T9689] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 298.619708][ T9689] ? __pfx___lock_acquire+0x10/0x10 [ 298.619761][ T9689] ? kasan_save_stack+0x42/0x60 [ 298.619807][ T9689] ? kasan_save_stack+0x33/0x60 [ 298.619852][ T9689] ? kasan_save_track+0x14/0x30 [ 298.619898][ T9689] ? __kasan_slab_alloc+0x89/0x90 [ 298.619947][ T9689] ? kmem_cache_alloc_node_noprof+0x223/0x3c0 [ 298.619996][ T9689] ? alloc_vmap_area+0x636/0x2a60 [ 298.620033][ T9689] ? __get_vm_area_node+0x19e/0x2f0 [ 298.620074][ T9689] ? __vmalloc_node_range_noprof+0x26a/0x1530 [ 298.620120][ T9689] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 298.620176][ T9689] ? policy_nodemask+0xea/0x4e0 [ 298.620209][ T9689] alloc_pages_mpol+0x1fc/0x540 [ 298.620253][ T9689] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 298.620280][ T9689] ? __page_table_check_ptes_set+0x16b/0x3e0 [ 298.620332][ T9689] ? do_raw_spin_lock+0x12d/0x2c0 [ 298.620362][ T9689] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 298.620396][ T9689] alloc_pages_noprof+0x131/0x390 [ 298.620426][ T9689] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 298.620473][ T9689] get_free_pages_noprof+0xc/0x40 [ 298.620505][ T9689] kasan_populate_vmalloc_pte+0x2d/0x160 [ 298.620551][ T9689] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 298.620597][ T9689] __apply_to_page_range+0x5fd/0xd30 [ 298.620645][ T9689] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 298.620697][ T9689] ? __pfx___apply_to_page_range+0x10/0x10 [ 298.620751][ T9689] ? insert_vmap_area+0x2ef/0x4d0 [ 298.620809][ T9689] alloc_vmap_area+0x93e/0x2a60 [ 298.620863][ T9689] ? __pfx_alloc_vmap_area+0x10/0x10 [ 298.620923][ T9689] __get_vm_area_node+0x19e/0x2f0 [ 298.620971][ T9689] __vmalloc_node_range_noprof+0x26a/0x1530 [ 298.621014][ T9689] ? __do_sys_listmount+0x1bf/0xeb0 [ 298.621060][ T9689] ? find_held_lock+0x2d/0x110 [ 298.621097][ T9689] ? __do_sys_listmount+0x1bf/0xeb0 [ 298.621146][ T9689] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 298.621194][ T9689] ? rcu_is_watching+0x12/0xc0 [ 298.621229][ T9689] ? trace_kmalloc+0x2d/0xd0 [ 298.621264][ T9689] ? __kmalloc_node_noprof.cold+0x5a/0x5f [ 298.621311][ T9689] ? __do_sys_listmount+0x1bf/0xeb0 [ 298.621354][ T9689] __kvmalloc_node_noprof+0x14f/0x1a0 [ 298.621401][ T9689] ? __do_sys_listmount+0x1bf/0xeb0 [ 298.621463][ T9689] __do_sys_listmount+0x1bf/0xeb0 [ 298.621513][ T9689] ? __x64_sys_futex+0x1e1/0x4c0 [ 298.621552][ T9689] ? __x64_sys_futex+0x1ea/0x4c0 [ 298.621593][ T9689] ? __pfx___do_sys_listmount+0x10/0x10 [ 298.621637][ T9689] ? xfd_validate_state+0x5d/0x180 [ 298.621698][ T9689] do_syscall_64+0xcd/0x250 [ 298.621758][ T9689] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.621805][ T9689] RIP: 0033:0x7f90f978d169 [ 298.621831][ T9689] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 298.621864][ T9689] RSP: 002b:00007f90fa6ba038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ca [ 298.621897][ T9689] RAX: ffffffffffffffda RBX: 00007f90f99a5fa0 RCX: 00007f90f978d169 [ 298.621918][ T9689] RDX: 00000000000f4240 RSI: 0000000000000000 RDI: 0000200000000100 [ 298.621938][ T9689] RBP: 00007f90f980e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 298.621957][ T9689] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 298.621976][ T9689] R13: 0000000000000000 R14: 00007f90f99a5fa0 R15: 00007ffe5b568d38 [ 298.622015][ T9689] [ 298.622066][ T9689] warn_alloc: 1 callbacks suppressed [ 298.622083][ T9689] syz.0.1342: vmalloc error: size 8000000, vm_struct allocation failed, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null) [ 298.749938][ T9695] FAULT_INJECTION: forcing a failure. [ 298.749938][ T9695] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 298.820467][ T9689] ,cpuset= [ 299.160840][ T9695] CPU: 1 UID: 0 PID: 9695 Comm: syz.2.1343 Not tainted 6.14.0-rc7-syzkaller-00074-ga7f2e10ecd8f #0 [ 299.160884][ T9695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 299.160903][ T9695] Call Trace: [ 299.160911][ T9695] [ 299.160923][ T9695] dump_stack_lvl+0x16c/0x1f0 [ 299.160975][ T9695] should_fail_ex+0x50a/0x650 [ 299.161012][ T9695] _copy_from_user+0x2e/0xd0 [ 299.161050][ T9695] copy_from_sockptr_offset.constprop.0+0x157/0x190 [ 299.161101][ T9695] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 299.161154][ T9695] ? ipv6_setsockopt+0xcb/0x170 [ 299.161204][ T9695] do_ipv6_setsockopt+0x1993/0x4520 [ 299.161260][ T9695] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 299.161308][ T9695] ? futex_wait_queue+0x41/0x1f0 [ 299.161355][ T9695] ? __pfx_mark_lock+0x10/0x10 [ 299.161399][ T9695] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 299.161434][ T9695] ? futex_unqueue+0xba/0x140 [ 299.161482][ T9695] ? __futex_wait+0x324/0x3c0 [ 299.161532][ T9695] ? __pfx___futex_wait+0x10/0x10 [ 299.161601][ T9695] ? __pfx___might_resched+0x10/0x10 [ 299.161659][ T9695] ? aa_sk_perm+0x2f5/0xb20 [ 299.161701][ T9695] ? ipv6_setsockopt+0xcb/0x170 [ 299.161746][ T9695] ipv6_setsockopt+0xcb/0x170 [ 299.161794][ T9695] udpv6_setsockopt+0x7d/0xd0 [ 299.161847][ T9695] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 299.161887][ T9695] do_sock_setsockopt+0x222/0x480 [ 299.161925][ T9695] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 299.161966][ T9695] ? lock_acquire+0x2f/0xb0 [ 299.162031][ T9695] __sys_setsockopt+0x1a0/0x230 [ 299.162090][ T9695] __x64_sys_setsockopt+0xbd/0x160 [ 299.162139][ T9695] ? do_syscall_64+0x91/0x250 [ 299.162188][ T9695] ? lockdep_hardirqs_on+0x7c/0x110 [ 299.162234][ T9695] do_syscall_64+0xcd/0x250 [ 299.162284][ T9695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.162331][ T9695] RIP: 0033:0x7f6d0478d169 [ 299.162357][ T9695] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 299.162391][ T9695] RSP: 002b:00007f6d05614038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 299.162420][ T9695] RAX: ffffffffffffffda RBX: 00007f6d049a5fa0 RCX: 00007f6d0478d169 [ 299.162442][ T9695] RDX: 0000000000000037 RSI: 0000000000000029 RDI: 0000000000000005 [ 299.162467][ T9695] RBP: 00007f6d0480e2a0 R08: 0000000000000110 R09: 0000000000000000 [ 299.162488][ T9695] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000000 [ 299.162508][ T9695] R13: 0000000000000000 R14: 00007f6d049a5fa0 R15: 00007ffe67c30df8 [ 299.162548][ T9695] [ 299.473538][ T9689] /,mems_allowed=0-1 [ 299.478842][ T9689] CPU: 1 UID: 0 PID: 9689 Comm: syz.0.1342 Not tainted 6.14.0-rc7-syzkaller-00074-ga7f2e10ecd8f #0 [ 299.478875][ T9689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 299.478891][ T9689] Call Trace: [ 299.478899][ T9689] [ 299.478914][ T9689] dump_stack_lvl+0x16c/0x1f0 [ 299.478963][ T9689] warn_alloc+0x24d/0x3a0 [ 299.479012][ T9689] ? __pfx_warn_alloc+0x10/0x10 [ 299.479063][ T9689] ? kfree+0x2c4/0x4d0 [ 299.479112][ T9689] ? __get_vm_area_node+0x1dc/0x2f0 [ 299.479160][ T9689] __vmalloc_node_range_noprof+0xd24/0x1530 [ 299.479210][ T9689] ? find_held_lock+0x2d/0x110 [ 299.479247][ T9689] ? __do_sys_listmount+0x1bf/0xeb0 [ 299.479296][ T9689] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 299.479342][ T9689] ? rcu_is_watching+0x12/0xc0 [ 299.479374][ T9689] ? trace_kmalloc+0x2d/0xd0 [ 299.479406][ T9689] ? __kmalloc_node_noprof.cold+0x5a/0x5f [ 299.479441][ T9689] ? __do_sys_listmount+0x1bf/0xeb0 [ 299.479483][ T9689] __kvmalloc_node_noprof+0x14f/0x1a0 [ 299.479527][ T9689] ? __do_sys_listmount+0x1bf/0xeb0 [ 299.479569][ T9689] __do_sys_listmount+0x1bf/0xeb0 [ 299.479616][ T9689] ? __x64_sys_futex+0x1e1/0x4c0 [ 299.479656][ T9689] ? __x64_sys_futex+0x1ea/0x4c0 [ 299.479689][ T9689] ? __pfx___do_sys_listmount+0x10/0x10 [ 299.479723][ T9689] ? xfd_validate_state+0x5d/0x180 [ 299.479771][ T9689] do_syscall_64+0xcd/0x250 [ 299.479813][ T9689] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.479851][ T9689] RIP: 0033:0x7f90f978d169 [ 299.479872][ T9689] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 299.479897][ T9689] RSP: 002b:00007f90fa6ba038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ca [ 299.479922][ T9689] RAX: ffffffffffffffda RBX: 00007f90f99a5fa0 RCX: 00007f90f978d169 [ 299.479939][ T9689] RDX: 00000000000f4240 RSI: 0000000000000000 RDI: 0000200000000100 [ 299.479955][ T9689] RBP: 00007f90f980e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 299.479971][ T9689] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 299.479987][ T9689] R13: 0000000000000000 R14: 00007f90f99a5fa0 R15: 00007ffe5b568d38 [ 299.480018][ T9689] [ 299.737617][ T9689] Mem-Info: [ 299.741967][ T9689] active_anon:12525 inactive_anon:0 isolated_anon:0 [ 299.741967][ T9689] active_file:7827 inactive_file:50092 isolated_file:0 [ 299.741967][ T9689] unevictable:768 dirty:420 writeback:0 [ 299.741967][ T9689] slab_reclaimable:10260 slab_unreclaimable:97925 [ 299.741967][ T9689] mapped:28594 shmem:8650 pagetables:879 [ 299.741967][ T9689] sec_pagetables:0 bounce:0 [ 299.741967][ T9689] kernel_misc_reclaimable:0 [ 299.741967][ T9689] free:1294158 free_pcp:18154 free_cma:0 [ 299.796725][ T9689] Node 0 active_anon:50100kB inactive_anon:0kB active_file:31308kB inactive_file:200292kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:114376kB dirty:1680kB writeback:0kB shmem:33064kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10912kB pagetables:3516kB sec_pagetables:0kB all_unreclaimable? no [ 299.836353][ T9689] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 299.873034][ T9689] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 299.905982][ T9689] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 299.913351][ T9689] Node 0 DMA32 free:1307748kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB active_anon:46192kB inactive_anon:0kB active_file:31308kB inactive_file:200200kB unevictable:1536kB writepending:1680kB present:3129332kB managed:2547520kB mlocked:0kB bounce:0kB free_pcp:25224kB local_pcp:22428kB free_cma:0kB [ 299.950297][ T9689] lowmem_reserve[]: 0 0 0 0 0 [ 299.956447][ T9689] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:92kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 299.988893][ T9689] lowmem_reserve[]: 0 0 0 0 0 [ 299.994983][ T9689] Node 1 Normal free:3855976kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:49328kB local_pcp:28624kB free_cma:0kB [ 300.030454][ T9689] lowmem_reserve[]: 0 0 0 0 0 [ 300.036195][ T9689] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 300.069089][ T9689] Node 0 DMA32: 1481*4kB (UME) 1246*8kB (UME) 1065*16kB (UME) 786*32kB (UME) 518*64kB (UME) 61*128kB (UME) 32*256kB (UME) 27*512kB (UME) 32*1024kB (UME) 20*2048kB (UM) 273*4096kB (UM) = 1312996kB [ 300.139149][ T9689] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 300.153921][ T9689] Node 1 Normal: 240*4kB (UM) 35*8kB (UME) 51*16kB (UME) 227*32kB (UME) 94*64kB (UME) 35*128kB (UME) 23*256kB (UME) 5*512kB (UM) 4*1024kB (UME) 7*2048kB (UME) 930*4096kB (M) = 3855976kB [ 300.184822][ T9689] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 300.269102][ T9689] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 300.309651][ T9689] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 300.359061][ T9689] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 300.379055][ T9689] 62026 total pagecache pages [ 300.385218][ T9689] 0 pages in swap cache [ 300.410753][ T9689] Free swap = 124600kB [ 300.429406][ T9689] Total swap = 124996kB [ 300.434453][ T9689] 2097051 pages RAM [ 300.460031][ T9689] 0 pages HighMem/MovableOnly [ 300.472909][ T9689] 428513 pages reserved [ 300.480811][ T9689] 0 pages cma reserved [ 300.576340][ T9707] netlink: 146 bytes leftover after parsing attributes in process `syz.1.1347'. [ 301.677271][ T9736] FAULT_INJECTION: forcing a failure. [ 301.677271][ T9736] name failslab, interval 1, probability 0, space 0, times 0 [ 301.694183][ T9736] CPU: 0 UID: 0 PID: 9736 Comm: syz.1.1356 Not tainted 6.14.0-rc7-syzkaller-00074-ga7f2e10ecd8f #0 [ 301.694228][ T9736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 301.694247][ T9736] Call Trace: [ 301.694269][ T9736] [ 301.694280][ T9736] dump_stack_lvl+0x16c/0x1f0 [ 301.694335][ T9736] should_fail_ex+0x50a/0x650 [ 301.694367][ T9736] ? fs_reclaim_acquire+0xae/0x150 [ 301.694413][ T9736] should_failslab+0xc2/0x120 [ 301.694445][ T9736] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 301.694503][ T9736] ? trace_cap_capable+0x1a2/0x210 [ 301.694539][ T9736] ? create_new_namespaces+0x30/0xad0 [ 301.694594][ T9736] create_new_namespaces+0x30/0xad0 [ 301.694645][ T9736] ? bpf_lsm_capable+0x9/0x10 [ 301.694677][ T9736] ? security_capable+0x7e/0x260 [ 301.694732][ T9736] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 301.694791][ T9736] ksys_unshare+0x45d/0xa40 [ 301.694826][ T9736] ? __pfx_ksys_unshare+0x10/0x10 [ 301.694859][ T9736] ? xfd_validate_state+0x5d/0x180 [ 301.694919][ T9736] __x64_sys_unshare+0x31/0x40 [ 301.694953][ T9736] do_syscall_64+0xcd/0x250 [ 301.695006][ T9736] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.695052][ T9736] RIP: 0033:0x7f15a6f8d169 [ 301.695078][ T9736] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 301.695110][ T9736] RSP: 002b:00007f15a7e1f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 301.695141][ T9736] RAX: ffffffffffffffda RBX: 00007f15a71a5fa0 RCX: 00007f15a6f8d169 [ 301.695163][ T9736] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 301.695182][ T9736] RBP: 00007f15a700e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 301.695202][ T9736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 301.695221][ T9736] R13: 0000000000000000 R14: 00007f15a71a5fa0 R15: 00007ffcbf247b58 [ 301.695260][ T9736] [ 302.886487][ T9760] FAULT_INJECTION: forcing a failure. [ 302.886487][ T9760] name failslab, interval 1, probability 0, space 0, times 0 [ 302.942809][ T9760] CPU: 0 UID: 0 PID: 9760 Comm: syz.0.1367 Not tainted 6.14.0-rc7-syzkaller-00074-ga7f2e10ecd8f #0 [ 302.942856][ T9760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 302.942875][ T9760] Call Trace: [ 302.942884][ T9760] [ 302.942897][ T9760] dump_stack_lvl+0x16c/0x1f0 [ 302.942953][ T9760] should_fail_ex+0x50a/0x650 [ 302.942985][ T9760] ? fs_reclaim_acquire+0xae/0x150 [ 302.943030][ T9760] ? ovs_ct_limit_cmd_set+0x30b/0xa90 [ 302.943083][ T9760] should_failslab+0xc2/0x120 [ 302.943126][ T9760] __kmalloc_cache_noprof+0x68/0x410 [ 302.943184][ T9760] ovs_ct_limit_cmd_set+0x30b/0xa90 [ 302.943245][ T9760] ? __pfx_ovs_ct_limit_cmd_set+0x10/0x10 [ 302.943303][ T9760] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 302.943341][ T9760] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 302.943387][ T9760] genl_family_rcv_msg_doit+0x202/0x2f0 [ 302.943426][ T9760] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 302.943460][ T9760] ? trace_cap_capable+0x1a2/0x210 [ 302.943507][ T9760] ? bpf_lsm_capable+0x9/0x10 [ 302.943542][ T9760] ? security_capable+0x7e/0x260 [ 302.943577][ T9760] ? ns_capable+0xd7/0x110 [ 302.943627][ T9760] genl_rcv_msg+0x565/0x800 [ 302.943666][ T9760] ? __pfx_genl_rcv_msg+0x10/0x10 [ 302.943701][ T9760] ? __pfx_ovs_ct_limit_cmd_set+0x10/0x10 [ 302.943772][ T9760] netlink_rcv_skb+0x16b/0x440 [ 302.943823][ T9760] ? __pfx_genl_rcv_msg+0x10/0x10 [ 302.943860][ T9760] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 302.943927][ T9760] ? down_read+0xc9/0x330 [ 302.943978][ T9760] ? __pfx_down_read+0x10/0x10 [ 302.944033][ T9760] ? netlink_deliver_tap+0x1ae/0xd30 [ 302.944087][ T9760] genl_rcv+0x28/0x40 [ 302.944126][ T9760] netlink_unicast+0x53c/0x7f0 [ 302.944182][ T9760] ? __pfx_netlink_unicast+0x10/0x10 [ 302.944230][ T9760] ? __phys_addr+0xc6/0x150 [ 302.944260][ T9760] ? __phys_addr_symbol+0x30/0x80 [ 302.944290][ T9760] ? __check_object_size+0x488/0x710 [ 302.944328][ T9760] netlink_sendmsg+0x8b8/0xd70 [ 302.944388][ T9760] ? __pfx_netlink_sendmsg+0x10/0x10 [ 302.944454][ T9760] ____sys_sendmsg+0xaaf/0xc90 [ 302.944496][ T9760] ? copy_msghdr_from_user+0x10b/0x160 [ 302.944550][ T9760] ? __pfx_____sys_sendmsg+0x10/0x10 [ 302.944611][ T9760] ___sys_sendmsg+0x135/0x1e0 [ 302.944666][ T9760] ? __pfx____sys_sendmsg+0x10/0x10 [ 302.944759][ T9760] ? __pfx_lock_release+0x10/0x10 [ 302.944834][ T9760] ? trace_lock_acquire+0x14e/0x1f0 [ 302.944887][ T9760] ? __fget_files+0x206/0x3a0 [ 302.944947][ T9760] __sys_sendmsg+0x16e/0x220 [ 302.945010][ T9760] ? __pfx___sys_sendmsg+0x10/0x10 [ 302.945065][ T9760] ? __x64_sys_futex+0x1e1/0x4c0 [ 302.945137][ T9760] do_syscall_64+0xcd/0x250 [ 302.945190][ T9760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.945238][ T9760] RIP: 0033:0x7f90f978d169 [ 302.945265][ T9760] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 302.945298][ T9760] RSP: 002b:00007f90fa6ba038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 302.945329][ T9760] RAX: ffffffffffffffda RBX: 00007f90f99a5fa0 RCX: 00007f90f978d169 [ 302.945352][ T9760] RDX: 0000000000000004 RSI: 0000200000000100 RDI: 0000000000000005 [ 302.945373][ T9760] RBP: 00007f90f980e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 302.945393][ T9760] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 302.945412][ T9760] R13: 0000000000000000 R14: 00007f90f99a5fa0 R15: 00007ffe5b568d38 [ 302.945453][ T9760] [ 303.524426][ T9764] sctp: [Deprecated]: syz.2.1368 (pid 9764) Use of int in maxseg socket option. [ 303.524426][ T9764] Use struct sctp_assoc_value instead [ 303.839283][ T9774] netlink: 452 bytes leftover after parsing attributes in process `syz.0.1371'. [ 303.871851][ T9774] netlink: 452 bytes leftover after parsing attributes in process `syz.0.1371'. [ 303.980794][ T9778] FAULT_INJECTION: forcing a failure. [ 303.980794][ T9778] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 304.019307][ T9778] CPU: 0 UID: 0 PID: 9778 Comm: syz.4.1374 Not tainted 6.14.0-rc7-syzkaller-00074-ga7f2e10ecd8f #0 [ 304.019351][ T9778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 304.019372][ T9778] Call Trace: [ 304.019382][ T9778] [ 304.019395][ T9778] dump_stack_lvl+0x16c/0x1f0 [ 304.019451][ T9778] should_fail_ex+0x50a/0x650 [ 304.019490][ T9778] _copy_from_user+0x2e/0xd0 [ 304.019530][ T9778] copy_from_sockptr_offset.constprop.0+0x157/0x190 [ 304.019582][ T9778] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 304.019637][ T9778] ? ipv6_setsockopt+0xcb/0x170 [ 304.019691][ T9778] do_ipv6_setsockopt+0x1993/0x4520 [ 304.019749][ T9778] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 304.019798][ T9778] ? futex_wait_queue+0x41/0x1f0 [ 304.019847][ T9778] ? __pfx_mark_lock+0x10/0x10 [ 304.019892][ T9778] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 304.019930][ T9778] ? futex_unqueue+0xba/0x140 [ 304.019970][ T9778] ? __futex_wait+0x324/0x3c0 [ 304.020021][ T9778] ? __pfx___futex_wait+0x10/0x10 [ 304.020091][ T9778] ? __pfx___might_resched+0x10/0x10 [ 304.020152][ T9778] ? aa_sk_perm+0x2f5/0xb20 [ 304.020195][ T9778] ? ipv6_setsockopt+0xcb/0x170 [ 304.020241][ T9778] ipv6_setsockopt+0xcb/0x170 [ 304.020302][ T9778] udpv6_setsockopt+0x7d/0xd0 [ 304.020337][ T9778] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 304.020379][ T9778] do_sock_setsockopt+0x222/0x480 [ 304.020417][ T9778] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 304.020457][ T9778] ? lock_acquire+0x2f/0xb0 [ 304.020522][ T9778] __sys_setsockopt+0x1a0/0x230 [ 304.020580][ T9778] __x64_sys_setsockopt+0xbd/0x160 [ 304.020630][ T9778] ? do_syscall_64+0x91/0x250 [ 304.020675][ T9778] ? lockdep_hardirqs_on+0x7c/0x110 [ 304.020722][ T9778] do_syscall_64+0xcd/0x250 [ 304.020774][ T9778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.020825][ T9778] RIP: 0033:0x7f51bd38d169 [ 304.020852][ T9778] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 304.020886][ T9778] RSP: 002b:00007f51be148038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 304.020917][ T9778] RAX: ffffffffffffffda RBX: 00007f51bd5a5fa0 RCX: 00007f51bd38d169 [ 304.020939][ T9778] RDX: 0000000000000037 RSI: 0000000000000029 RDI: 0000000000000005 [ 304.020958][ T9778] RBP: 00007f51bd40e2a0 R08: 0000000000000110 R09: 0000000000000000 [ 304.020977][ T9778] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000000 [ 304.020996][ T9778] R13: 0000000000000000 R14: 00007f51bd5a5fa0 R15: 00007ffc583b6d58 [ 304.021037][ T9778] [ 304.427492][ T9785] netlink: 146 bytes leftover after parsing attributes in process `syz.1.1377'. [ 305.311288][ T9813] FAULT_INJECTION: forcing a failure. [ 305.311288][ T9813] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 305.330342][ T9813] CPU: 1 UID: 0 PID: 9813 Comm: syz.0.1388 Not tainted 6.14.0-rc7-syzkaller-00074-ga7f2e10ecd8f #0 [ 305.330387][ T9813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 305.330405][ T9813] Call Trace: [ 305.330416][ T9813] [ 305.330428][ T9813] dump_stack_lvl+0x16c/0x1f0 [ 305.330480][ T9813] should_fail_ex+0x50a/0x650 [ 305.330509][ T9813] ? __pfx___might_resched+0x10/0x10 [ 305.330565][ T9813] should_fail_alloc_page+0xe7/0x130 [ 305.330599][ T9813] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 305.330651][ T9813] __alloc_frozen_pages_noprof+0x18e/0x2470 [ 305.330717][ T9813] ? __pfx___lock_acquire+0x10/0x10 [ 305.330763][ T9813] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 305.330828][ T9813] ? find_held_lock+0x2d/0x110 [ 305.330866][ T9813] ? local_lock_release+0x99/0x140 [ 305.330898][ T9813] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 305.330969][ T9813] ? policy_nodemask+0xea/0x4e0 [ 305.331004][ T9813] alloc_pages_mpol+0x1fc/0x540 [ 305.331037][ T9813] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 305.331079][ T9813] alloc_pages_noprof+0x131/0x390 [ 305.331112][ T9813] pgd_alloc+0x3b/0x4e0 [ 305.331171][ T9813] mm_init+0x6c5/0x1170 [ 305.331226][ T9813] copy_process+0x64bf/0x8c50 [ 305.331261][ T9813] ? plist_add+0x458/0x600 [ 305.331300][ T9813] ? lock_acquire+0x2f/0xb0 [ 305.331344][ T9813] ? schedule+0x1fd/0x350 [ 305.331402][ T9813] ? __pfx_copy_process+0x10/0x10 [ 305.331432][ T9813] ? __pfx___futex_wait+0x10/0x10 [ 305.331489][ T9813] ? __pfx_futex_wake_mark+0x10/0x10 [ 305.331557][ T9813] kernel_clone+0xfd/0x960 [ 305.331591][ T9813] ? __pfx_kernel_clone+0x10/0x10 [ 305.331643][ T9813] __do_sys_clone+0xcf/0x120 [ 305.331674][ T9813] ? __pfx___do_sys_clone+0x10/0x10 [ 305.331726][ T9813] ? rcu_is_watching+0x12/0xc0 [ 305.331772][ T9813] do_syscall_64+0xcd/0x250 [ 305.331823][ T9813] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.331871][ T9813] RIP: 0033:0x7f90f978d169 [ 305.331896][ T9813] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 305.331929][ T9813] RSP: 002b:00007f90fa6ba038 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 305.331959][ T9813] RAX: ffffffffffffffda RBX: 00007f90f99a5fa0 RCX: 00007f90f978d169 [ 305.331994][ T9813] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 0000000000000006 [ 305.332012][ T9813] RBP: 00007f90f980e2a0 R08: 0000000000000e08 R09: 0000000000000000 [ 305.332049][ T9813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 305.332069][ T9813] R13: 0000000000000000 R14: 00007f90f99a5fa0 R15: 00007ffe5b568d38 [ 305.332108][ T9813] [ 305.829746][ T9817] FAULT_INJECTION: forcing a failure. [ 305.829746][ T9817] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 305.845676][ T9817] CPU: 1 UID: 0 PID: 9817 Comm: syz.1.1389 Not tainted 6.14.0-rc7-syzkaller-00074-ga7f2e10ecd8f #0 [ 305.845717][ T9817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 305.845737][ T9817] Call Trace: [ 305.845746][ T9817] [ 305.845759][ T9817] dump_stack_lvl+0x16c/0x1f0 [ 305.845816][ T9817] should_fail_ex+0x50a/0x650 [ 305.845854][ T9817] _copy_from_user+0x2e/0xd0 [ 305.845892][ T9817] copy_from_sockptr_offset.constprop.0+0x157/0x190 [ 305.845944][ T9817] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 305.845999][ T9817] ? ipv6_setsockopt+0xcb/0x170 [ 305.846052][ T9817] do_ipv6_setsockopt+0x1993/0x4520 [ 305.846108][ T9817] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 305.846162][ T9817] ? futex_wait_queue+0x41/0x1f0 [ 305.846213][ T9817] ? __pfx_mark_lock+0x10/0x10 [ 305.846258][ T9817] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 305.846296][ T9817] ? futex_unqueue+0xba/0x140 [ 305.846337][ T9817] ? __futex_wait+0x324/0x3c0 [ 305.846387][ T9817] ? __pfx___futex_wait+0x10/0x10 [ 305.846436][ T9817] ? try_to_wake_up+0x158/0x1490 [ 305.846500][ T9817] ? __pfx___might_resched+0x10/0x10 [ 305.846560][ T9817] ? aa_sk_perm+0x2f5/0xb20 [ 305.846601][ T9817] ? ipv6_setsockopt+0xcb/0x170 [ 305.846645][ T9817] ipv6_setsockopt+0xcb/0x170 [ 305.846692][ T9817] udpv6_setsockopt+0x7d/0xd0 [ 305.846726][ T9817] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 305.846768][ T9817] do_sock_setsockopt+0x222/0x480 [ 305.846805][ T9817] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 305.846843][ T9817] ? lock_acquire+0x2f/0xb0 [ 305.846907][ T9817] __sys_setsockopt+0x1a0/0x230 [ 305.846965][ T9817] __x64_sys_setsockopt+0xbd/0x160 [ 305.847015][ T9817] ? do_syscall_64+0x91/0x250 [ 305.847063][ T9817] ? lockdep_hardirqs_on+0x7c/0x110 [ 305.847108][ T9817] do_syscall_64+0xcd/0x250 [ 305.847168][ T9817] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.847214][ T9817] RIP: 0033:0x7f15a6f8d169 [ 305.847241][ T9817] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 305.847284][ T9817] RSP: 002b:00007f15a7e1f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 305.847314][ T9817] RAX: ffffffffffffffda RBX: 00007f15a71a5fa0 RCX: 00007f15a6f8d169 [ 305.847335][ T9817] RDX: 0000000000000037 RSI: 0000000000000029 RDI: 0000000000000005 [ 305.847354][ T9817] RBP: 00007f15a700e2a0 R08: 0000000000000110 R09: 0000000000000000 [ 305.847373][ T9817] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000000 [ 305.847391][ T9817] R13: 0000000000000000 R14: 00007f15a71a5fa0 R15: 00007ffcbf247b58 [ 305.847428][ T9817] [ 307.557013][ T9847] netlink: 146 bytes leftover after parsing attributes in process `syz.0.1401'. [ 307.990163][ T9853] FAULT_INJECTION: forcing a failure. [ 307.990163][ T9853] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 308.014184][ T9853] CPU: 1 UID: 0 PID: 9853 Comm: syz.2.1403 Not tainted 6.14.0-rc7-syzkaller-00074-ga7f2e10ecd8f #0 [ 308.014229][ T9853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 308.014247][ T9853] Call Trace: [ 308.014257][ T9853] [ 308.014269][ T9853] dump_stack_lvl+0x16c/0x1f0 [ 308.014331][ T9853] should_fail_ex+0x50a/0x650 [ 308.014359][ T9853] ? __pfx___might_resched+0x10/0x10 [ 308.014412][ T9853] should_fail_alloc_page+0xe7/0x130 [ 308.014444][ T9853] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 308.014488][ T9853] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 308.014529][ T9853] __alloc_frozen_pages_noprof+0x18e/0x2470 [ 308.014598][ T9853] ? unwind_get_return_address+0x59/0xa0 [ 308.014646][ T9853] ? arch_stack_walk+0xa7/0x100 [ 308.014767][ T9853] ? hlock_class+0x4e/0x130 [ 308.014801][ T9853] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 308.014866][ T9853] ? __pfx___lock_acquire+0x10/0x10 [ 308.014908][ T9853] ? kasan_save_stack+0x42/0x60 [ 308.014958][ T9853] ? kasan_save_stack+0x33/0x60 [ 308.015002][ T9853] ? kasan_save_track+0x14/0x30 [ 308.015065][ T9853] ? __kasan_slab_alloc+0x89/0x90 [ 308.015113][ T9853] ? kmem_cache_alloc_node_noprof+0x223/0x3c0 [ 308.015163][ T9853] ? alloc_vmap_area+0xdc8/0x2a60 [ 308.015198][ T9853] ? __get_vm_area_node+0x19e/0x2f0 [ 308.015237][ T9853] ? __vmalloc_node_range_noprof+0x26a/0x1530 [ 308.015284][ T9853] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 308.015339][ T9853] ? policy_nodemask+0xea/0x4e0 [ 308.015372][ T9853] alloc_pages_mpol+0x1fc/0x540 [ 308.015406][ T9853] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 308.015435][ T9853] ? __page_table_check_ptes_set+0x16b/0x3e0 [ 308.015487][ T9853] ? do_raw_spin_lock+0x12d/0x2c0 [ 308.015518][ T9853] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 308.015555][ T9853] alloc_pages_noprof+0x131/0x390 [ 308.015587][ T9853] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 308.015635][ T9853] get_free_pages_noprof+0xc/0x40 [ 308.015670][ T9853] kasan_populate_vmalloc_pte+0x2d/0x160 [ 308.015726][ T9853] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 308.015774][ T9853] __apply_to_page_range+0x5fd/0xd30 [ 308.015821][ T9853] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 308.015875][ T9853] ? __pfx___apply_to_page_range+0x10/0x10 [ 308.015922][ T9853] ? insert_vmap_area+0x2ef/0x4d0 [ 308.015973][ T9853] alloc_vmap_area+0x93e/0x2a60 [ 308.016025][ T9853] ? __pfx_alloc_vmap_area+0x10/0x10 [ 308.016073][ T9853] __get_vm_area_node+0x19e/0x2f0 [ 308.016120][ T9853] __vmalloc_node_range_noprof+0x26a/0x1530 [ 308.016166][ T9853] ? __do_sys_listmount+0x1bf/0xeb0 [ 308.016213][ T9853] ? find_held_lock+0x2d/0x110 [ 308.016251][ T9853] ? __do_sys_listmount+0x1bf/0xeb0 [ 308.016300][ T9853] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 308.016358][ T9853] ? rcu_is_watching+0x12/0xc0 [ 308.016392][ T9853] ? trace_kmalloc+0x2d/0xd0 [ 308.016426][ T9853] ? __kmalloc_node_noprof.cold+0x5a/0x5f [ 308.016461][ T9853] ? __do_sys_listmount+0x1bf/0xeb0 [ 308.016505][ T9853] __kvmalloc_node_noprof+0x14f/0x1a0 [ 308.016550][ T9853] ? __do_sys_listmount+0x1bf/0xeb0 [ 308.016602][ T9853] __do_sys_listmount+0x1bf/0xeb0 [ 308.016649][ T9853] ? __x64_sys_futex+0x1e1/0x4c0 [ 308.016699][ T9853] ? __x64_sys_futex+0x1ea/0x4c0 [ 308.016740][ T9853] ? __pfx___do_sys_listmount+0x10/0x10 [ 308.016783][ T9853] ? xfd_validate_state+0x5d/0x180 [ 308.016842][ T9853] do_syscall_64+0xcd/0x250 [ 308.016892][ T9853] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.016935][ T9853] RIP: 0033:0x7f6d0478d169 [ 308.016960][ T9853] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 308.016991][ T9853] RSP: 002b:00007f6d05614038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ca [ 308.017020][ T9853] RAX: ffffffffffffffda RBX: 00007f6d049a5fa0 RCX: 00007f6d0478d169 [ 308.017047][ T9853] RDX: 00000000000f4240 RSI: 0000000000000000 RDI: 0000200000000100 [ 308.017066][ T9853] RBP: 00007f6d0480e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 308.017085][ T9853] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 308.017102][ T9853] R13: 0000000000000000 R14: 00007f6d049a5fa0 R15: 00007ffe67c30df8 [ 308.017139][ T9853] [ 308.668699][ T9857] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 308.776708][ T9859] netlink: 452 bytes leftover after parsing attributes in process `syz.1.1405'. [ 308.790473][ T9859] netlink: 452 bytes leftover after parsing attributes in process `syz.1.1405'. [ 309.498337][ T9884] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1417'. [ 309.519727][ T9884] ipvlan1: entered allmulticast mode [ 309.526130][ T9884] veth0_vlan: entered allmulticast mode [ 309.726472][ T9892] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1428'. [ 309.756626][ T9892] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1428'. [ 310.117796][ T9901] FAULT_INJECTION: forcing a failure. [ 310.117796][ T9901] name failslab, interval 1, probability 0, space 0, times 0 [ 310.134889][ T9901] CPU: 0 UID: 0 PID: 9901 Comm: syz.0.1423 Not tainted 6.14.0-rc7-syzkaller-00074-ga7f2e10ecd8f #0 [ 310.134933][ T9901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 310.134953][ T9901] Call Trace: [ 310.134963][ T9901] [ 310.134975][ T9901] dump_stack_lvl+0x16c/0x1f0 [ 310.135049][ T9901] should_fail_ex+0x50a/0x650 [ 310.135081][ T9901] ? fs_reclaim_acquire+0xae/0x150 [ 310.135126][ T9901] should_failslab+0xc2/0x120 [ 310.135158][ T9901] kmem_cache_alloc_lru_noprof+0x73/0x3d0 [ 310.135208][ T9901] ? find_held_lock+0x2d/0x110 [ 310.135243][ T9901] ? __d_alloc+0x31/0xaa0 [ 310.135278][ T9901] __d_alloc+0x31/0xaa0 [ 310.135312][ T9901] d_alloc_pseudo+0x1c/0xc0 [ 310.135351][ T9901] alloc_file_pseudo+0xd0/0x230 [ 310.135388][ T9901] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 310.135425][ T9901] ? alloc_fd+0x41f/0x760 [ 310.135477][ T9901] sock_alloc_file+0x50/0x210 [ 310.135512][ T9901] __sys_socket+0x1c2/0x260 [ 310.135554][ T9901] ? __pfx___sys_socket+0x10/0x10 [ 310.135596][ T9901] ? rcu_is_watching+0x12/0xc0 [ 310.135637][ T9901] __x64_sys_socket+0x72/0xb0 [ 310.135677][ T9901] ? lockdep_hardirqs_on+0x7c/0x110 [ 310.135720][ T9901] do_syscall_64+0xcd/0x250 [ 310.135771][ T9901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.135824][ T9901] RIP: 0033:0x7f90f978d169 [ 310.135850][ T9901] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 310.135882][ T9901] RSP: 002b:00007f90fa6ba038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 310.135912][ T9901] RAX: ffffffffffffffda RBX: 00007f90f99a5fa0 RCX: 00007f90f978d169 [ 310.135933][ T9901] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000001 [ 310.135952][ T9901] RBP: 00007f90f980e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 310.135970][ T9901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 310.135989][ T9901] R13: 0000000000000000 R14: 00007f90f99a5fa0 R15: 00007ffe5b568d38 [ 310.136025][ T9901] [ 310.770335][ T9909] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1427'. [ 310.908747][ T9911] netlink: 334 bytes leftover after parsing attributes in process `syz.0.1429'. [ 311.101963][ T9917] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1432'. [ 311.498378][ T9924] netlink: 146 bytes leftover after parsing attributes in process `syz.4.1434'. [ 312.156266][ T9941] netlink: zone id is out of range [ 312.258756][ T9941] netlink: set zone limit has 8 unknown bytes [ 312.608983][ T9955] __nla_validate_parse: 1 callbacks suppressed [ 312.609005][ T9955] netlink: 504 bytes leftover after parsing attributes in process `syz.0.1447'. [ 312.634219][ T9955] netlink: 504 bytes leftover after parsing attributes in process `syz.0.1447'. [ 312.680401][ T9958] FAULT_INJECTION: forcing a failure. [ 312.680401][ T9958] name failslab, interval 1, probability 0, space 0, times 0 [ 312.709850][ T9958] CPU: 0 UID: 0 PID: 9958 Comm: syz.2.1448 Not tainted 6.14.0-rc7-syzkaller-00074-ga7f2e10ecd8f #0 [ 312.709896][ T9958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 312.709916][ T9958] Call Trace: [ 312.709925][ T9958] [ 312.709937][ T9958] dump_stack_lvl+0x16c/0x1f0 [ 312.709989][ T9958] should_fail_ex+0x50a/0x650 [ 312.710021][ T9958] ? fs_reclaim_acquire+0xae/0x150 [ 312.710066][ T9958] should_failslab+0xc2/0x120 [ 312.710098][ T9958] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 312.710149][ T9958] ? ext4_init_io_end+0x24/0x170 [ 312.710185][ T9958] ext4_init_io_end+0x24/0x170 [ 312.710214][ T9958] ext4_do_writepages+0x93e/0x32d0 [ 312.710267][ T9958] ? __pfx___lock_acquire+0x10/0x10 [ 312.710331][ T9958] ? __pfx_ext4_do_writepages+0x10/0x10 [ 312.710383][ T9958] ? __pfx___lock_acquire+0x10/0x10 [ 312.710427][ T9958] ? do_writepages+0x1b3/0x820 [ 312.710468][ T9958] ? ext4_writepages+0x303/0x730 [ 312.710510][ T9958] ext4_writepages+0x303/0x730 [ 312.710564][ T9958] ? __pfx_ext4_writepages+0x10/0x10 [ 312.710622][ T9958] ? lock_acquire+0x2f/0xb0 [ 312.710662][ T9958] ? do_writepages+0x5b7/0x820 [ 312.710695][ T9958] ? __pfx_ext4_writepages+0x10/0x10 [ 312.710737][ T9958] do_writepages+0x1b3/0x820 [ 312.710774][ T9958] ? __pfx_do_writepages+0x10/0x10 [ 312.710804][ T9958] ? wbc_attach_fdatawrite_inode+0x13a/0x190 [ 312.710840][ T9958] ? __pfx_lock_release+0x10/0x10 [ 312.710883][ T9958] ? do_raw_spin_lock+0x12d/0x2c0 [ 312.710913][ T9958] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 312.710944][ T9958] ? lock_acquire+0x2f/0xb0 [ 312.710986][ T9958] ? wbc_attach_fdatawrite_inode+0x24/0x190 [ 312.711043][ T9958] ? do_raw_spin_unlock+0x172/0x230 [ 312.711080][ T9958] filemap_fdatawrite_wbc+0x104/0x160 [ 312.711115][ T9958] __filemap_fdatawrite_range+0xb3/0xf0 [ 312.711159][ T9958] ? __pfx___filemap_fdatawrite_range+0x10/0x10 [ 312.711249][ T9958] ? find_held_lock+0x2d/0x110 [ 312.711289][ T9958] ? ext4_fallocate+0x139/0x3950 [ 312.711342][ T9958] filemap_write_and_wait_range+0xa3/0x130 [ 312.711389][ T9958] ext4_punch_hole+0x194/0x10d0 [ 312.711450][ T9958] ext4_fallocate+0x9b7/0x3950 [ 312.711500][ T9958] ? rcu_is_watching+0x12/0xc0 [ 312.711535][ T9958] ? trace_lock_acquire+0x14e/0x1f0 [ 312.711584][ T9958] ? madvise_vma_behavior+0x1ae3/0x1de0 [ 312.711627][ T9958] ? __pfx_ext4_fallocate+0x10/0x10 [ 312.711678][ T9958] vfs_fallocate+0x60d/0x10d0 [ 312.711730][ T9958] ? __pfx_vfs_fallocate+0x10/0x10 [ 312.711779][ T9958] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 312.711836][ T9958] madvise_vma_behavior+0x1ae3/0x1de0 [ 312.711877][ T9958] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 312.711915][ T9958] ? find_vma_prev+0xdb/0x160 [ 312.711959][ T9958] ? __pfx_find_vma_prev+0x10/0x10 [ 312.712014][ T9958] ? __pfx_rwsem_read_trylock+0x10/0x10 [ 312.712065][ T9958] ? __pfx_futex_wait+0x10/0x10 [ 312.712111][ T9958] ? do_madvise+0x2b3/0x7c0 [ 312.712150][ T9958] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 312.712184][ T9958] madvise_walk_vmas+0x1cf/0x2c0 [ 312.712220][ T9958] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 312.712265][ T9958] do_madvise+0x366/0x7c0 [ 312.712306][ T9958] ? __pfx_do_madvise+0x10/0x10 [ 312.712341][ T9958] ? __x64_sys_futex+0x1e1/0x4c0 [ 312.712387][ T9958] ? __pfx___x64_sys_futex+0x10/0x10 [ 312.712428][ T9958] ? __pfx_do_writev+0x10/0x10 [ 312.712478][ T9958] __x64_sys_madvise+0xa9/0x110 [ 312.712513][ T9958] ? lockdep_hardirqs_on+0x7c/0x110 [ 312.712566][ T9958] do_syscall_64+0xcd/0x250 [ 312.712617][ T9958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.712663][ T9958] RIP: 0033:0x7f6d0478d169 [ 312.712689][ T9958] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 312.712721][ T9958] RSP: 002b:00007f6d05614038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 312.712753][ T9958] RAX: ffffffffffffffda RBX: 00007f6d049a5fa0 RCX: 00007f6d0478d169 [ 312.712774][ T9958] RDX: 0000000000000009 RSI: 00000000000031ca RDI: 000000110c230000 [ 312.712793][ T9958] RBP: 00007f6d0480e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 312.712811][ T9958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 312.712829][ T9958] R13: 0000000000000000 R14: 00007f6d049a5fa0 R15: 00007ffe67c30df8 [ 312.712869][ T9958] [ 313.458526][ T9969] netlink: 'syz.2.1453': attribute type 3 has an invalid length. [ 314.314824][ T9987] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1460'. [ 314.329188][ T9987] netlink: 25 bytes leftover after parsing attributes in process `syz.0.1460'. [ 314.813701][T10001] vxcan1: tx drop: invalid sa for name 0x00000000000000fd [ 314.943051][T10005] FAULT_INJECTION: forcing a failure. [ 314.943051][T10005] name failslab, interval 1, probability 0, space 0, times 0 [ 314.963051][T10003] netlink: 326 bytes leftover after parsing attributes in process `syz.2.1466'. [ 314.976871][T10003] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.987125][T10003] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.999715][T10005] CPU: 1 UID: 0 PID: 10005 Comm: syz.0.1467 Not tainted 6.14.0-rc7-syzkaller-00074-ga7f2e10ecd8f #0 [ 314.999758][T10005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 314.999777][T10005] Call Trace: [ 314.999787][T10005] [ 314.999799][T10005] dump_stack_lvl+0x16c/0x1f0 [ 314.999854][T10005] should_fail_ex+0x50a/0x650 [ 314.999886][T10005] ? fs_reclaim_acquire+0xae/0x150 [ 314.999932][T10005] should_failslab+0xc2/0x120 [ 314.999963][T10005] kmem_cache_alloc_lru_noprof+0x73/0x3d0 [ 315.000047][T10005] ? hugetlbfs_alloc_inode+0x8c/0x1d0 [ 315.000104][T10005] hugetlbfs_alloc_inode+0x8c/0x1d0 [ 315.000166][T10005] ? __pfx_hugetlbfs_alloc_inode+0x10/0x10 [ 315.000220][T10005] alloc_inode+0x5d/0x230 [ 315.000270][T10005] new_inode+0x22/0x210 [ 315.000304][T10005] hugetlbfs_get_inode+0x358/0x740 [ 315.000345][T10005] hugetlb_file_setup+0x15b/0x620 [ 315.000390][T10005] ksys_mmap_pgoff+0x189/0x5c0 [ 315.000438][T10005] __x64_sys_mmap+0x125/0x190 [ 315.000505][T10005] do_syscall_64+0xcd/0x250 [ 315.000554][T10005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.000600][T10005] RIP: 0033:0x7f90f978d169 [ 315.000623][T10005] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 315.000654][T10005] RSP: 002b:00007f90fa6ba038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 315.000683][T10005] RAX: ffffffffffffffda RBX: 00007f90f99a5fa0 RCX: 00007f90f978d169 [ 315.000705][T10005] RDX: 00004000000000df RSI: 0000000000000004 RDI: 0000000000000000 [ 315.000724][T10005] RBP: 00007f90f980e2a0 R08: 0000000000000004 R09: 0000300000000000 [ 315.000744][T10005] R10: 0000000000040eb2 R11: 0000000000000246 R12: 0000000000000000 [ 315.000761][T10005] R13: 0000000000000000 R14: 00007f90f99a5fa0 R15: 00007ffe5b568d38 [ 315.000797][T10005] [ 315.027361][T10007] warn_alloc: 2 callbacks suppressed [ 315.027385][T10007] syz.4.1468: vmalloc error: size 8192, failed to allocate pages, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 315.277894][T10007] CPU: 0 UID: 0 PID: 10007 Comm: syz.4.1468 Not tainted 6.14.0-rc7-syzkaller-00074-ga7f2e10ecd8f #0 [ 315.277940][T10007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 315.277959][T10007] Call Trace: [ 315.277969][T10007] [ 315.277981][T10007] dump_stack_lvl+0x16c/0x1f0 [ 315.278036][T10007] warn_alloc+0x24d/0x3a0 [ 315.278094][T10007] ? __pfx_warn_alloc+0x10/0x10 [ 315.278148][T10007] ? alloc_pages_mpol+0x25b/0x540 [ 315.278182][T10007] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 315.278216][T10007] ? trace_kmalloc+0x2d/0xd0 [ 315.278263][T10007] __vmalloc_node_range_noprof+0x12bd/0x1530 [ 315.278323][T10007] ? n_tty_open+0x1a/0x170 [ 315.278377][T10007] ? __ldsem_down_write_nested+0x10f/0x8d0 [ 315.278431][T10007] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 315.278487][T10007] ? n_tty_open+0x1a/0x170 [ 315.278537][T10007] vzalloc_noprof+0x6b/0x90 [ 315.278580][T10007] ? n_tty_open+0x1a/0x170 [ 315.278624][T10007] ? __pfx_n_tty_open+0x10/0x10 [ 315.278670][T10007] n_tty_open+0x1a/0x170 [ 315.278719][T10007] ? __pfx_n_tty_open+0x10/0x10 [ 315.278766][T10007] tty_ldisc_open+0x9c/0x120 [ 315.278803][T10007] tty_ldisc_setup+0x40/0x100 [ 315.278842][T10007] tty_init_dev.part.0+0x1e7/0x660 [ 315.278891][T10007] tty_open+0xac1/0xf80 [ 315.278939][T10007] ? chrdev_open+0x596/0x6a0 [ 315.278994][T10007] ? __pfx_tty_open+0x10/0x10 [ 315.279036][T10007] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 315.279068][T10007] ? lock_acquire+0x2f/0xb0 [ 315.279115][T10007] ? chrdev_open+0x36b/0x6a0 [ 315.279168][T10007] ? __pfx_tty_open+0x10/0x10 [ 315.279212][T10007] chrdev_open+0x237/0x6a0 [ 315.279265][T10007] ? __pfx_chrdev_open+0x10/0x10 [ 315.279319][T10007] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 315.279368][T10007] do_dentry_open+0x735/0x1c40 [ 315.279415][T10007] ? __pfx_chrdev_open+0x10/0x10 [ 315.279463][T10007] ? inode_permission+0xdd/0x5f0 [ 315.279502][T10007] vfs_open+0x82/0x3f0 [ 315.279552][T10007] ? may_open+0x1f2/0x400 [ 315.279594][T10007] path_openat+0x1e88/0x2d80 [ 315.279658][T10007] ? __pfx_path_openat+0x10/0x10 [ 315.279716][T10007] ? __pfx___lock_acquire+0x10/0x10 [ 315.279760][T10007] ? lock_acquire.part.0+0x11b/0x380 [ 315.279807][T10007] ? find_held_lock+0x2d/0x110 [ 315.279847][T10007] do_filp_open+0x20c/0x470 [ 315.279896][T10007] ? __pfx_do_filp_open+0x10/0x10 [ 315.279942][T10007] ? find_held_lock+0x2d/0x110 [ 315.280008][T10007] ? alloc_fd+0x41f/0x760 [ 315.280066][T10007] do_sys_openat2+0x17a/0x1e0 [ 315.280108][T10007] ? __pfx_do_sys_openat2+0x10/0x10 [ 315.280149][T10007] ? __pfx___might_resched+0x10/0x10 [ 315.280215][T10007] __x64_sys_openat+0x175/0x210 [ 315.280251][T10007] ? __pfx___x64_sys_openat+0x10/0x10 [ 315.280306][T10007] do_syscall_64+0xcd/0x250 [ 315.280359][T10007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.280406][T10007] RIP: 0033:0x7f51bd38d169 [ 315.280435][T10007] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 315.280469][T10007] RSP: 002b:00007f51be148038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 315.280501][T10007] RAX: ffffffffffffffda RBX: 00007f51bd5a5fa0 RCX: 00007f51bd38d169 [ 315.280524][T10007] RDX: 0000000000084803 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 315.280545][T10007] RBP: 00007f51bd40e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 315.280564][T10007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 315.280583][T10007] R13: 0000000000000000 R14: 00007f51bd5a5fa0 R15: 00007ffc583b6d58 [ 315.280625][T10007] [ 315.280721][T10007] Mem-Info: [ 315.391222][T10014] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1471'. [ 315.412261][T10007] active_anon:5332 inactive_anon:0 isolated_anon:0 [ 315.412261][T10007] active_file:7701 inactive_file:50100 isolated_file:0 [ 315.412261][T10007] unevictable:768 dirty:536 writeback:0 [ 315.412261][T10007] slab_reclaimable:10300 slab_unreclaimable:97929 [ 315.412261][T10007] mapped:28870 shmem:1413 pagetables:868 [ 315.412261][T10007] sec_pagetables:0 bounce:0 [ 315.412261][T10007] kernel_misc_reclaimable:0 [ 315.412261][T10007] free:1307138 free_pcp:12025 free_cma:0 [ 315.644370][T10019] netlink: 29 bytes leftover after parsing attributes in process `syz.2.1472'. [ 315.647533][T10007] Node 0 active_anon:21628kB inactive_anon:0kB active_file:30804kB inactive_file:200324kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:115480kB dirty:2144kB writeback:0kB shmem:4116kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10980kB pagetables:3572kB sec_pagetables:0kB all_unreclaimable? no [ 315.834883][T10007] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 315.873107][T10007] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 315.905898][T10007] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 315.922310][T10007] Node 0 DMA32 free:1355120kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB active_anon:21420kB inactive_anon:0kB active_file:30804kB inactive_file:200232kB unevictable:1536kB writepending:2144kB present:3129332kB managed:2547520kB mlocked:0kB bounce:0kB free_pcp:1508kB local_pcp:860kB free_cma:0kB [ 315.973284][T10007] lowmem_reserve[]: 0 0 0 0 0 [ 315.980833][T10007] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:92kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 316.019816][T10007] lowmem_reserve[]: 0 0 0 0 0 [ 316.030816][T10007] Node 1 Normal free:3858444kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:46820kB local_pcp:27364kB free_cma:0kB [ 316.073538][T10007] lowmem_reserve[]: 0 0 0 0 0 [ 316.079541][T10007] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 316.097660][T10007] Node 0 DMA32: 1006*4kB (UME) 1182*8kB (UME) 1071*16kB (UME) 790*32kB (UME) 574*64kB (UME) 178*128kB (UME) 86*256kB (UME) 60*512kB (UME) 32*1024kB (UME) 18*2048kB (M) 273*4096kB (UM) = 1355992kB [ 316.130741][T10007] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 316.145292][T10007] Node 1 Normal: 244*4kB (UM) 34*8kB (UME) 52*16kB (UME) 227*32kB (UME) 95*64kB (UME) 34*128kB (UME) 21*256kB (UME) 5*512kB (UM) 5*1024kB (UME) 6*2048kB (UME) 931*4096kB (M) = 3858496kB [ 316.168416][T10007] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 316.181248][T10007] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 316.193332][T10007] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 316.205214][T10007] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 316.216835][T10007] 59217 total pagecache pages [ 316.222818][T10007] 0 pages in swap cache [ 316.228030][T10007] Free swap = 124748kB [ 316.233484][T10007] Total swap = 124996kB [ 316.238679][T10007] 2097051 pages RAM [ 316.244242][T10007] 0 pages HighMem/MovableOnly [ 316.250052][T10007] 428513 pages reserved [ 316.255384][T10007] 0 pages cma reserved [ 316.261217][T10007] pty pty28: ldisc open failed (-12), clearing slot 28 [ 316.271003][T10015] tty tty12: ldisc open failed (-12), clearing slot 11 [ 316.420337][T10027] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1475'. [ 316.598397][T10031] FAULT_INJECTION: forcing a failure. [ 316.598397][T10031] name failslab, interval 1, probability 0, space 0, times 0 [ 316.613801][T10031] CPU: 1 UID: 0 PID: 10031 Comm: syz.0.1485 Not tainted 6.14.0-rc7-syzkaller-00074-ga7f2e10ecd8f #0 [ 316.613845][T10031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 316.613864][T10031] Call Trace: [ 316.613873][T10031] [ 316.613886][T10031] dump_stack_lvl+0x16c/0x1f0 [ 316.613942][T10031] should_fail_ex+0x50a/0x650 [ 316.613973][T10031] ? fs_reclaim_acquire+0xae/0x150 [ 316.614018][T10031] should_failslab+0xc2/0x120 [ 316.614047][T10031] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 316.614099][T10031] ? ext4_init_io_end+0x24/0x170 [ 316.614136][T10031] ext4_init_io_end+0x24/0x170 [ 316.614166][T10031] ext4_do_writepages+0x93e/0x32d0 [ 316.614219][T10031] ? __pfx___lock_acquire+0x10/0x10 [ 316.614295][T10031] ? __pfx_ext4_do_writepages+0x10/0x10 [ 316.614347][T10031] ? __pfx___lock_acquire+0x10/0x10 [ 316.614391][T10031] ? do_writepages+0x1b3/0x820 [ 316.614431][T10031] ? ext4_writepages+0x303/0x730 [ 316.614473][T10031] ext4_writepages+0x303/0x730 [ 316.614518][T10031] ? __pfx_ext4_writepages+0x10/0x10 [ 316.614577][T10031] ? lock_acquire+0x2f/0xb0 [ 316.614619][T10031] ? do_writepages+0x5b7/0x820 [ 316.614653][T10031] ? __pfx_ext4_writepages+0x10/0x10 [ 316.614698][T10031] do_writepages+0x1b3/0x820 [ 316.614737][T10031] ? __pfx_do_writepages+0x10/0x10 [ 316.614768][T10031] ? wbc_attach_fdatawrite_inode+0x13a/0x190 [ 316.614805][T10031] ? __pfx_lock_release+0x10/0x10 [ 316.614850][T10031] ? do_raw_spin_lock+0x12d/0x2c0 [ 316.614881][T10031] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 316.614912][T10031] ? lock_acquire+0x2f/0xb0 [ 316.614954][T10031] ? wbc_attach_fdatawrite_inode+0x24/0x190 [ 316.614993][T10031] ? do_raw_spin_unlock+0x172/0x230 [ 316.615031][T10031] filemap_fdatawrite_wbc+0x104/0x160 [ 316.615068][T10031] __filemap_fdatawrite_range+0xb3/0xf0 [ 316.615110][T10031] ? __pfx___filemap_fdatawrite_range+0x10/0x10 [ 316.615198][T10031] ? find_held_lock+0x2d/0x110 [ 316.615236][T10031] ? ext4_fallocate+0x139/0x3950 [ 316.615293][T10031] filemap_write_and_wait_range+0xa3/0x130 [ 316.615338][T10031] ext4_punch_hole+0x194/0x10d0 [ 316.615396][T10031] ext4_fallocate+0x9b7/0x3950 [ 316.615444][T10031] ? rcu_is_watching+0x12/0xc0 [ 316.615477][T10031] ? trace_lock_acquire+0x14e/0x1f0 [ 316.615514][T10031] ? madvise_vma_behavior+0x1ae3/0x1de0 [ 316.615555][T10031] ? __pfx_ext4_fallocate+0x10/0x10 [ 316.615604][T10031] vfs_fallocate+0x60d/0x10d0 [ 316.615653][T10031] ? __pfx_vfs_fallocate+0x10/0x10 [ 316.615700][T10031] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 316.615757][T10031] madvise_vma_behavior+0x1ae3/0x1de0 [ 316.615797][T10031] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 316.615834][T10031] ? find_vma_prev+0xdb/0x160 [ 316.615876][T10031] ? __pfx_find_vma_prev+0x10/0x10 [ 316.615929][T10031] ? __pfx_rwsem_read_trylock+0x10/0x10 [ 316.615979][T10031] ? __pfx_futex_wait+0x10/0x10 [ 316.616023][T10031] ? do_madvise+0x2b3/0x7c0 [ 316.616062][T10031] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 316.616097][T10031] madvise_walk_vmas+0x1cf/0x2c0 [ 316.616132][T10031] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 316.616175][T10031] do_madvise+0x366/0x7c0 [ 316.616213][T10031] ? __pfx_do_madvise+0x10/0x10 [ 316.616248][T10031] ? __x64_sys_futex+0x1e1/0x4c0 [ 316.616305][T10031] ? rcu_is_watching+0x12/0xc0 [ 316.616346][T10031] __x64_sys_madvise+0xa9/0x110 [ 316.616381][T10031] ? lockdep_hardirqs_on+0x7c/0x110 [ 316.616426][T10031] do_syscall_64+0xcd/0x250 [ 316.616477][T10031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.616523][T10031] RIP: 0033:0x7f90f978d169 [ 316.616548][T10031] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 316.616582][T10031] RSP: 002b:00007f90fa6ba038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 316.616613][T10031] RAX: ffffffffffffffda RBX: 00007f90f99a5fa0 RCX: 00007f90f978d169 [ 316.616635][T10031] RDX: 0000000000000009 RSI: 00000000000031ca RDI: 000000110c230000 [ 316.616654][T10031] RBP: 00007f90f980e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 316.616672][T10031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 316.616691][T10031] R13: 0000000000000000 R14: 00007f90f99a5fa0 R15: 00007ffe5b568d38 [ 316.616730][T10031] [ 317.340386][T10043] netlink: 338 bytes leftover after parsing attributes in process `syz.4.1479'. [ 317.360769][T10044] netlink: 338 bytes leftover after parsing attributes in process `syz.4.1479'. [ 317.569481][T10052] FAULT_INJECTION: forcing a failure. [ 317.569481][T10052] name failslab, interval 1, probability 0, space 0, times 0 [ 317.587404][T10052] CPU: 1 UID: 0 PID: 10052 Comm: syz.4.1483 Not tainted 6.14.0-rc7-syzkaller-00074-ga7f2e10ecd8f #0 [ 317.587447][T10052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 317.587467][T10052] Call Trace: [ 317.587476][T10052] [ 317.587488][T10052] dump_stack_lvl+0x16c/0x1f0 [ 317.587571][T10052] should_fail_ex+0x50a/0x650 [ 317.587604][T10052] ? fs_reclaim_acquire+0xae/0x150 [ 317.587649][T10052] should_failslab+0xc2/0x120 [ 317.587682][T10052] __kmalloc_node_track_caller_noprof+0xcf/0x510 [ 317.587738][T10052] ? fib_rules_register+0x30/0x500 [ 317.587789][T10052] ? __pfx_ipmr_net_init+0x10/0x10 [ 317.587835][T10052] kmemdup_noprof+0x29/0x60 [ 317.587876][T10052] fib_rules_register+0x30/0x500 [ 317.587923][T10052] ? fib_notifier_ops_register+0x123/0x270 [ 317.587978][T10052] ? __pfx_ipmr_net_init+0x10/0x10 [ 317.588021][T10052] ipmr_net_init+0xb8/0x4e0 [ 317.588065][T10052] ? __pfx_ipmr_net_init+0x10/0x10 [ 317.588109][T10052] ops_init+0x1df/0x5f0 [ 317.588146][T10052] setup_net+0x21f/0x860 [ 317.588182][T10052] ? __pfx_setup_net+0x10/0x10 [ 317.588213][T10052] ? down_read_killable+0xcc/0x380 [ 317.588275][T10052] ? __pfx_down_read_killable+0x10/0x10 [ 317.588328][T10052] ? __raw_spin_lock_init+0x3a/0x110 [ 317.588363][T10052] ? debug_mutex_init+0x37/0x70 [ 317.588402][T10052] copy_net_ns+0x2a6/0x5f0 [ 317.588444][T10052] create_new_namespaces+0x3ea/0xad0 [ 317.588508][T10052] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 317.588579][T10052] ksys_unshare+0x45d/0xa40 [ 317.588613][T10052] ? __pfx_ksys_unshare+0x10/0x10 [ 317.588645][T10052] ? xfd_validate_state+0x5d/0x180 [ 317.588702][T10052] __x64_sys_unshare+0x31/0x40 [ 317.588735][T10052] do_syscall_64+0xcd/0x250 [ 317.588785][T10052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.588830][T10052] RIP: 0033:0x7f51bd38d169 [ 317.588855][T10052] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 317.588887][T10052] RSP: 002b:00007f51be148038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 317.588917][T10052] RAX: ffffffffffffffda RBX: 00007f51bd5a5fa0 RCX: 00007f51bd38d169 [ 317.588937][T10052] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 317.588956][T10052] RBP: 00007f51bd40e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 317.588974][T10052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 317.588992][T10052] R13: 0000000000000000 R14: 00007f51bd5a5fa0 R15: 00007ffc583b6d58 [ 317.589031][T10052] [ 318.360533][T10067] FAULT_INJECTION: forcing a failure. [ 318.360533][T10067] name failslab, interval 1, probability 0, space 0, times 0 [ 318.393636][T10067] CPU: 1 UID: 0 PID: 10067 Comm: syz.4.1491 Not tainted 6.14.0-rc7-syzkaller-00074-ga7f2e10ecd8f #0 [ 318.393683][T10067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 318.393701][T10067] Call Trace: [ 318.393712][T10067] [ 318.393724][T10067] dump_stack_lvl+0x16c/0x1f0 [ 318.393780][T10067] should_fail_ex+0x50a/0x650 [ 318.393811][T10067] ? fs_reclaim_acquire+0xae/0x150 [ 318.393866][T10067] ? ptp_open+0xe3/0x520 [ 318.393896][T10067] should_failslab+0xc2/0x120 [ 318.393928][T10067] __kmalloc_cache_noprof+0x68/0x410 [ 318.393986][T10067] ptp_open+0xe3/0x520 [ 318.394024][T10067] ? __pfx_ptp_open+0x10/0x10 [ 318.394068][T10067] ? __pfx_ptp_open+0x10/0x10 [ 318.394100][T10067] posix_clock_open+0x157/0x260 [ 318.394140][T10067] ? __pfx_posix_clock_open+0x10/0x10 [ 318.394178][T10067] chrdev_open+0x237/0x6a0 [ 318.394228][T10067] ? __pfx_apparmor_file_open+0x10/0x10 [ 318.394271][T10067] ? __pfx_chrdev_open+0x10/0x10 [ 318.394324][T10067] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 318.394377][T10067] do_dentry_open+0x735/0x1c40 [ 318.394426][T10067] ? __pfx_chrdev_open+0x10/0x10 [ 318.394476][T10067] ? inode_permission+0xdd/0x5f0 [ 318.394516][T10067] vfs_open+0x82/0x3f0 [ 318.394547][T10067] ? may_open+0x1f2/0x400 [ 318.394588][T10067] path_openat+0x1e88/0x2d80 [ 318.394653][T10067] ? __pfx_path_openat+0x10/0x10 [ 318.394701][T10067] ? __pfx___lock_acquire+0x10/0x10 [ 318.394745][T10067] ? lock_acquire.part.0+0x11b/0x380 [ 318.394793][T10067] ? find_held_lock+0x2d/0x110 [ 318.394834][T10067] do_filp_open+0x20c/0x470 [ 318.394889][T10067] ? __pfx_do_filp_open+0x10/0x10 [ 318.394934][T10067] ? find_held_lock+0x2d/0x110 [ 318.394999][T10067] ? alloc_fd+0x41f/0x760 [ 318.395056][T10067] do_sys_openat2+0x17a/0x1e0 [ 318.395090][T10067] ? __pfx_do_sys_openat2+0x10/0x10 [ 318.395124][T10067] ? lock_acquire+0x2f/0xb0 [ 318.395184][T10067] __x64_sys_openat+0x175/0x210 [ 318.395220][T10067] ? __pfx___x64_sys_openat+0x10/0x10 [ 318.395274][T10067] do_syscall_64+0xcd/0x250 [ 318.395327][T10067] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.395373][T10067] RIP: 0033:0x7f51bd38d169 [ 318.395399][T10067] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 318.395431][T10067] RSP: 002b:00007f51be148038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 318.395462][T10067] RAX: ffffffffffffffda RBX: 00007f51bd5a5fa0 RCX: 00007f51bd38d169 [ 318.395483][T10067] RDX: 0000000000000440 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 318.395503][T10067] RBP: 00007f51bd40e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 318.395522][T10067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 318.395541][T10067] R13: 0000000000000000 R14: 00007f51bd5a5fa0 R15: 00007ffc583b6d58 [ 318.395581][T10067] [ 318.885665][T10069] __nla_validate_parse: 2 callbacks suppressed [ 318.885692][T10069] netlink: 222 bytes leftover after parsing attributes in process `syz.4.1493'. [ 318.969964][T10069] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.208009][T10092] FAULT_INJECTION: forcing a failure. [ 320.208009][T10092] name failslab, interval 1, probability 0, space 0, times 0 [ 320.223648][T10092] CPU: 0 UID: 0 PID: 10092 Comm: syz.4.1500 Not tainted 6.14.0-rc7-syzkaller-00074-ga7f2e10ecd8f #0 [ 320.223694][T10092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 320.223714][T10092] Call Trace: [ 320.223724][T10092] [ 320.223736][T10092] dump_stack_lvl+0x16c/0x1f0 [ 320.223791][T10092] should_fail_ex+0x50a/0x650 [ 320.223823][T10092] ? fs_reclaim_acquire+0xae/0x150 [ 320.223868][T10092] ? copy_time_ns+0xf6/0x580 [ 320.223900][T10092] should_failslab+0xc2/0x120 [ 320.223939][T10092] __kmalloc_cache_noprof+0x68/0x410 [ 320.223995][T10092] copy_time_ns+0xf6/0x580 [ 320.224026][T10092] ? copy_cgroup_ns+0xa4/0x6f0 [ 320.224068][T10092] create_new_namespaces+0x48a/0xad0 [ 320.224131][T10092] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 320.224190][T10092] ksys_unshare+0x45d/0xa40 [ 320.224225][T10092] ? __pfx_ksys_unshare+0x10/0x10 [ 320.224258][T10092] ? xfd_validate_state+0x5d/0x180 [ 320.224321][T10092] __x64_sys_unshare+0x31/0x40 [ 320.224354][T10092] do_syscall_64+0xcd/0x250 [ 320.224404][T10092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.224449][T10092] RIP: 0033:0x7f51bd38d169 [ 320.224473][T10092] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 320.224505][T10092] RSP: 002b:00007f51be148038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 320.224537][T10092] RAX: ffffffffffffffda RBX: 00007f51bd5a5fa0 RCX: 00007f51bd38d169 [ 320.224559][T10092] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 320.224578][T10092] RBP: 00007f51bd40e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 320.224597][T10092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 320.224615][T10092] R13: 0000000000000000 R14: 00007f51bd5a5fa0 R15: 00007ffc583b6d58 [ 320.224654][T10092] [ 321.424315][T10111] netlink: 326 bytes leftover after parsing attributes in process `syz.0.1506'. [ 321.436738][T10110] netlink: 146 bytes leftover after parsing attributes in process `syz.2.1507'. [ 321.852623][T10120] netlink: 222 bytes leftover after parsing attributes in process `syz.2.1512'. [ 322.599764][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.615601][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.189062][T10139] FAULT_INJECTION: forcing a failure. [ 323.189062][T10139] name failslab, interval 1, probability 0, space 0, times 0 [ 323.269301][T10139] CPU: 1 UID: 0 PID: 10139 Comm: syz.2.1520 Not tainted 6.14.0-rc7-syzkaller-00074-ga7f2e10ecd8f #0 [ 323.269346][T10139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 323.269366][T10139] Call Trace: [ 323.269375][T10139] [ 323.269388][T10139] dump_stack_lvl+0x16c/0x1f0 [ 323.269444][T10139] should_fail_ex+0x50a/0x650 [ 323.269475][T10139] ? trace_lock_acquire+0x14e/0x1f0 [ 323.269517][T10139] ? proc_self_get_link+0x1a9/0x230 [ 323.269562][T10139] should_failslab+0xc2/0x120 [ 323.269595][T10139] __kmalloc_cache_noprof+0x68/0x410 [ 323.269652][T10139] proc_self_get_link+0x1a9/0x230 [ 323.269709][T10139] ? __pfx_proc_self_get_link+0x10/0x10 [ 323.269752][T10139] step_into+0x1982/0x2220 [ 323.269804][T10139] ? __pfx_step_into+0x10/0x10 [ 323.269854][T10139] ? lookup_fast+0x153/0x5f0 [ 323.269901][T10139] walk_component+0xfc/0x5b0 [ 323.269946][T10139] link_path_walk.part.0.constprop.0+0x669/0xd40 [ 323.270007][T10139] path_openat+0x228/0x2d80 [ 323.270052][T10139] ? hlock_class+0x4e/0x130 [ 323.270100][T10139] ? __pfx_path_openat+0x10/0x10 [ 323.270148][T10139] ? __pfx___lock_acquire+0x10/0x10 [ 323.270189][T10139] ? lock_acquire.part.0+0x11b/0x380 [ 323.270234][T10139] ? find_held_lock+0x2d/0x110 [ 323.270275][T10139] do_filp_open+0x20c/0x470 [ 323.270327][T10139] ? __pfx_do_filp_open+0x10/0x10 [ 323.270372][T10139] ? find_held_lock+0x2d/0x110 [ 323.270434][T10139] ? alloc_fd+0x41f/0x760 [ 323.270493][T10139] do_sys_openat2+0x17a/0x1e0 [ 323.270528][T10139] ? __pfx_do_sys_openat2+0x10/0x10 [ 323.270578][T10139] __x64_sys_openat+0x175/0x210 [ 323.270613][T10139] ? __pfx___x64_sys_openat+0x10/0x10 [ 323.270671][T10139] do_syscall_64+0xcd/0x250 [ 323.270722][T10139] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.270769][T10139] RIP: 0033:0x7f6d0478bad0 [ 323.270794][T10139] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 323.270827][T10139] RSP: 002b:00007f6d05613f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 323.270856][T10139] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f6d0478bad0 [ 323.270877][T10139] RDX: 0000000000000002 RSI: 00007f6d05613fa0 RDI: 00000000ffffff9c [ 323.270897][T10139] RBP: 00007f6d05613fa0 R08: 0000000000000000 R09: 0000000000000000 [ 323.270916][T10139] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 323.270935][T10139] R13: 0000000000000000 R14: 00007f6d049a5fa0 R15: 00007ffe67c30df8 [ 323.270975][T10139] [ 324.370413][T10152] FAULT_INJECTION: forcing a failure. [ 324.370413][T10152] name failslab, interval 1, probability 0, space 0, times 0 [ 324.416528][T10152] CPU: 1 UID: 0 PID: 10152 Comm: syz.4.1524 Not tainted 6.14.0-rc7-syzkaller-00074-ga7f2e10ecd8f #0 [ 324.416573][T10152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 324.416610][T10152] Call Trace: [ 324.416619][T10152] [ 324.416632][T10152] dump_stack_lvl+0x16c/0x1f0 [ 324.416688][T10152] should_fail_ex+0x50a/0x650 [ 324.416718][T10152] ? fs_reclaim_acquire+0xae/0x150 [ 324.416765][T10152] should_failslab+0xc2/0x120 [ 324.416798][T10152] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 324.416852][T10152] ? __kernfs_new_node+0xd3/0x890 [ 324.416905][T10152] __kernfs_new_node+0xd3/0x890 [ 324.416955][T10152] ? __pfx___kernfs_new_node+0x10/0x10 [ 324.417001][T10152] ? __pfx_lock_release+0x10/0x10 [ 324.417046][T10152] ? kernfs_add_one+0x39d/0x520 [ 324.417112][T10152] ? up_write+0x1b2/0x520 [ 324.417167][T10152] kernfs_new_node+0x186/0x240 [ 324.417225][T10152] __kernfs_create_file+0x53/0x350 [ 324.417267][T10152] sysfs_add_file_mode_ns+0x1ff/0x3b0 [ 324.417320][T10152] internal_create_group+0x56c/0xf10 [ 324.417366][T10152] ? __pfx_kobject_init_and_add+0x10/0x10 [ 324.417405][T10152] ? __pfx_internal_create_group+0x10/0x10 [ 324.417469][T10152] sysfs_slab_add+0x1a3/0x1e0 [ 324.417519][T10152] do_kmem_cache_create+0x51c/0x720 [ 324.417570][T10152] ? __kmem_cache_create_args+0x210/0x390 [ 324.417627][T10152] __kmem_cache_create_args+0x231/0x390 [ 324.417666][T10152] mon_text_open+0x314/0x4f0 [ 324.417719][T10152] ? __pfx_mon_text_open+0x10/0x10 [ 324.417765][T10152] ? __debugfs_file_get+0x1ff/0x850 [ 324.417810][T10152] ? __pfx_mon_text_ctor+0x10/0x10 [ 324.417858][T10152] ? __pfx_apparmor_file_open+0x10/0x10 [ 324.417899][T10152] ? lockdown_is_locked_down+0x3f/0x130 [ 324.417947][T10152] ? bpf_lsm_locked_down+0x9/0x10 [ 324.417986][T10152] ? __pfx_mon_text_open+0x10/0x10 [ 324.418035][T10152] full_proxy_open_regular+0x1b6/0x360 [ 324.418088][T10152] do_dentry_open+0x735/0x1c40 [ 324.418135][T10152] ? __pfx_full_proxy_open_regular+0x10/0x10 [ 324.418187][T10152] ? inode_permission+0xdd/0x5f0 [ 324.418226][T10152] vfs_open+0x82/0x3f0 [ 324.418254][T10152] ? may_open+0x1f2/0x400 [ 324.418294][T10152] path_openat+0x1e88/0x2d80 [ 324.418360][T10152] ? __pfx_path_openat+0x10/0x10 [ 324.418409][T10152] ? __pfx___lock_acquire+0x10/0x10 [ 324.418454][T10152] ? lock_acquire.part.0+0x11b/0x380 [ 324.418502][T10152] ? find_held_lock+0x2d/0x110 [ 324.418542][T10152] do_filp_open+0x20c/0x470 [ 324.418600][T10152] ? __pfx_do_filp_open+0x10/0x10 [ 324.418648][T10152] ? find_held_lock+0x2d/0x110 [ 324.418714][T10152] ? alloc_fd+0x41f/0x760 [ 324.418775][T10152] do_sys_openat2+0x17a/0x1e0 [ 324.418811][T10152] ? __pfx_do_sys_openat2+0x10/0x10 [ 324.418850][T10152] ? __pfx___might_resched+0x10/0x10 [ 324.418914][T10152] __x64_sys_openat+0x175/0x210 [ 324.418951][T10152] ? __pfx___x64_sys_openat+0x10/0x10 [ 324.419006][T10152] do_syscall_64+0xcd/0x250 [ 324.419058][T10152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.419105][T10152] RIP: 0033:0x7f51bd38d169 [ 324.419132][T10152] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 324.419165][T10152] RSP: 002b:00007f51be148038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 324.419197][T10152] RAX: ffffffffffffffda RBX: 00007f51bd5a5fa0 RCX: 00007f51bd38d169 [ 324.419219][T10152] RDX: 0000000000020200 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 324.419239][T10152] RBP: 00007f51bd40e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 324.419259][T10152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 324.419277][T10152] R13: 0000000000000000 R14: 00007f51bd5a5fa0 R15: 00007ffc583b6d58 [ 324.419318][T10152] [ 324.420193][T10152] SLUB: Unable to add cache mon_text_ffff88802237a000 to sysfs [ 325.800861][T10167] netlink: 330 bytes leftover after parsing attributes in process `syz.4.1530'. [ 325.819056][ T55] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 325.830031][ T55] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 325.842199][ T55] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 325.855860][ T55] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 325.866236][ T55] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 325.882752][ T55] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 326.439144][T10168] chnl_net:caif_netlink_parms(): no params data found [ 326.648977][T10168] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.657836][T10168] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.666519][T10168] bridge_slave_0: entered allmulticast mode [ 326.676781][T10168] bridge_slave_0: entered promiscuous mode [ 326.686964][T10168] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.695968][T10168] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.704994][T10168] bridge_slave_1: entered allmulticast mode [ 326.714136][T10168] bridge_slave_1: entered promiscuous mode [ 326.829819][T10168] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 326.850579][T10168] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 326.978826][T10168] team0: Port device team_slave_0 added [ 327.021523][T10168] team0: Port device team_slave_1 added [ 327.090295][T10168] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 327.107925][T10168] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.177670][T10168] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 327.215217][T10168] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 327.224561][T10168] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.271400][T10168] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 327.326518][T10168] hsr_slave_0: entered promiscuous mode [ 327.336478][T10168] hsr_slave_1: entered promiscuous mode [ 327.353845][T10168] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 327.388340][T10168] Cannot create hsr debugfs directory [ 327.795999][T10199] FAULT_INJECTION: forcing a failure. [ 327.795999][T10199] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 327.826862][T10199] CPU: 1 UID: 0 PID: 10199 Comm: syz.4.1540 Not tainted 6.14.0-rc7-syzkaller-00074-ga7f2e10ecd8f #0 [ 327.826920][T10199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 327.826938][T10199] Call Trace: [ 327.826947][T10199] [ 327.826959][T10199] dump_stack_lvl+0x16c/0x1f0 [ 327.827019][T10199] should_fail_ex+0x50a/0x650 [ 327.827063][T10199] _copy_from_user+0x2e/0xd0 [ 327.827098][T10199] snd_seq_oss_write+0x398/0x7b0 [ 327.827144][T10199] ? __pfx_snd_seq_oss_write+0x10/0x10 [ 327.827190][T10199] ? apparmor_file_permission+0x251/0x400 [ 327.827226][T10199] ? bpf_lsm_file_permission+0x9/0x10 [ 327.827304][T10199] odev_write+0x51/0xa0 [ 327.827336][T10199] ? __pfx_odev_write+0x10/0x10 [ 327.827373][T10199] vfs_writev+0x6da/0xdd0 [ 327.827418][T10199] ? futex_wait+0x121/0x380 [ 327.827471][T10199] ? __pfx_vfs_writev+0x10/0x10 [ 327.827512][T10199] ? find_held_lock+0x2d/0x110 [ 327.827555][T10199] ? __pfx_lock_release+0x10/0x10 [ 327.827599][T10199] ? trace_lock_acquire+0x14e/0x1f0 [ 327.827649][T10199] ? __fget_files+0x206/0x3a0 [ 327.827714][T10199] ? do_writev+0x133/0x340 [ 327.827751][T10199] do_writev+0x133/0x340 [ 327.827797][T10199] ? __pfx_do_writev+0x10/0x10 [ 327.827848][T10199] do_syscall_64+0xcd/0x250 [ 327.827897][T10199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.827946][T10199] RIP: 0033:0x7f51bd38d169 [ 327.827970][T10199] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 327.828001][T10199] RSP: 002b:00007f51be148038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 327.828036][T10199] RAX: ffffffffffffffda RBX: 00007f51bd5a5fa0 RCX: 00007f51bd38d169 [ 327.828057][T10199] RDX: 8000000000000001 RSI: 0000200000000000 RDI: 0000000000000005 [ 327.828077][T10199] RBP: 00007f51bd40e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 327.828101][T10199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 327.828119][T10199] R13: 0000000000000000 R14: 00007f51bd5a5fa0 R15: 00007ffc583b6d58 [ 327.828154][T10199] [ 327.892332][T10168] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 328.034680][ T55] Bluetooth: hci5: command tx timeout [ 328.111761][T10168] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 328.125860][T10168] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 328.140277][T10168] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 328.416975][T10168] 8021q: adding VLAN 0 to HW filter on device bond0 [ 328.512566][T10168] 8021q: adding VLAN 0 to HW filter on device team0 [ 328.595259][ T3555] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.603867][ T3555] bridge0: port 1(bridge_slave_0) entered forwarding state [ 328.686030][ T3555] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.694630][ T3555] bridge0: port 2(bridge_slave_1) entered forwarding state [ 329.315057][T10168] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 329.406220][T10220] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1546'. [ 329.928401][T10168] veth0_vlan: entered promiscuous mode [ 329.965463][T10168] veth1_vlan: entered promiscuous mode [ 330.071845][T10168] veth0_macvtap: entered promiscuous mode [ 330.091060][T10168] veth1_macvtap: entered promiscuous mode [ 330.119803][ T55] Bluetooth: hci5: command tx timeout [ 330.131730][T10168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 330.163708][T10168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.211082][T10168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 330.244389][T10168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.299061][T10168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 330.315680][T10168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.339504][T10168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 330.369878][T10168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.386871][T10168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 330.400038][T10168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.424234][T10168] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 330.440579][T10246] netlink: 'syz.0.1555': attribute type 5 has an invalid length. [ 330.451172][T10246] netlink: 314 bytes leftover after parsing attributes in process `syz.0.1555'. [ 330.475273][T10168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 330.509274][T10168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.524408][T10244] netlink: 146 bytes leftover after parsing attributes in process `syz.2.1554'. [ 330.537512][T10168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 330.558025][T10168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.579540][T10168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 330.607657][T10168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.635371][T10168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 330.654303][T10252] FAULT_INJECTION: forcing a failure. [ 330.654303][T10252] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 330.654750][T10168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.693746][T10168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 330.700056][T10252] CPU: 0 UID: 0 PID: 10252 Comm: syz.0.1556 Not tainted 6.14.0-rc7-syzkaller-00074-ga7f2e10ecd8f #0 [ 330.700102][T10252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 330.700123][T10252] Call Trace: [ 330.700133][T10252] [ 330.700144][T10252] dump_stack_lvl+0x16c/0x1f0 [ 330.700201][T10252] should_fail_ex+0x50a/0x650 [ 330.700239][T10252] _copy_from_user+0x2e/0xd0 [ 330.700278][T10252] snd_seq_oss_write+0x398/0x7b0 [ 330.700331][T10252] ? __pfx_snd_seq_oss_write+0x10/0x10 [ 330.700383][T10252] ? apparmor_file_permission+0x251/0x400 [ 330.700425][T10252] ? bpf_lsm_file_permission+0x9/0x10 [ 330.700485][T10252] odev_write+0x51/0xa0 [ 330.700518][T10252] ? __pfx_odev_write+0x10/0x10 [ 330.700555][T10252] vfs_writev+0x6da/0xdd0 [ 330.700601][T10252] ? futex_wait+0x121/0x380 [ 330.700658][T10252] ? __pfx_vfs_writev+0x10/0x10 [ 330.700699][T10252] ? find_held_lock+0x2d/0x110 [ 330.700743][T10252] ? __pfx_lock_release+0x10/0x10 [ 330.700790][T10252] ? trace_lock_acquire+0x14e/0x1f0 [ 330.700848][T10252] ? __fget_files+0x206/0x3a0 [ 330.700908][T10252] ? do_writev+0x133/0x340 [ 330.700948][T10252] do_writev+0x133/0x340 [ 330.700993][T10252] ? __pfx_do_writev+0x10/0x10 [ 330.701047][T10252] do_syscall_64+0xcd/0x250 [ 330.701100][T10252] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.701148][T10252] RIP: 0033:0x7f90f978d169 [ 330.701173][T10252] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 330.701207][T10252] RSP: 002b:00007f90fa6ba038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 330.701238][T10252] RAX: ffffffffffffffda RBX: 00007f90f99a5fa0 RCX: 00007f90f978d169 [ 330.701260][T10252] RDX: 8000000000000001 RSI: 0000200000000000 RDI: 0000000000000005 [ 330.701281][T10252] RBP: 00007f90f980e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 330.701301][T10252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 330.701321][T10252] R13: 0000000000000000 R14: 00007f90f99a5fa0 R15: 00007ffe5b568d38 [ 330.701361][T10252] [ 330.851522][T10255] netlink: 146 bytes leftover after parsing attributes in process `syz.2.1558'. [ 330.852659][T10168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.992896][T10168] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 331.005419][T10168] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.049801][T10168] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.080132][T10168] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.129893][T10168] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.349639][ T3452] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.374263][ T3452] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 331.512908][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.530094][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 332.210625][ T55] Bluetooth: hci5: command tx timeout [ 332.239497][T10282] netlink: 266 bytes leftover after parsing attributes in process `syz.4.1565'. [ 334.281988][ T55] Bluetooth: hci5: command tx timeout [ 335.347185][T10370] netlink: 266 bytes leftover after parsing attributes in process `syz.4.1593'. [ 335.460883][T10368] ======================================================= [ 335.460883][T10368] WARNING: The mand mount option has been deprecated and [ 335.460883][T10368] and is ignored by this kernel. Remove the mand [ 335.460883][T10368] option from the mount to silence this warning. [ 335.460883][T10368] ======================================================= [ 337.874117][T10416] syz.0.1607 (10416): /proc/10416/oom_adj is deprecated, please use /proc/10416/oom_score_adj instead. [ 339.452967][T10453] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1617'. [ 339.824798][T10468] netlink: 202 bytes leftover after parsing attributes in process `syz.2.1621'. [ 340.115618][T10474] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1623'. [ 342.596238][T10519] netlink: 146 bytes leftover after parsing attributes in process `syz.4.1631'. [ 344.816560][T10548] random: crng reseeded on system resumption [ 345.163891][T10530] kexec: Could not allocate control_code_buffer [ 345.374472][T10551] netlink: 330 bytes leftover after parsing attributes in process `syz.4.1639'. [ 345.397406][T10553] netlink: 350 bytes leftover after parsing attributes in process `syz.2.1640'. [ 346.181838][T10565] netlink: 330 bytes leftover after parsing attributes in process `syz.4.1643'. [ 346.365544][T10567] FAULT_INJECTION: forcing a failure. [ 346.365544][T10567] name failslab, interval 1, probability 0, space 0, times 0 [ 346.405578][T10567] CPU: 1 UID: 0 PID: 10567 Comm: syz.5.1645 Not tainted 6.14.0-rc7-syzkaller-00074-ga7f2e10ecd8f #0 [ 346.405620][T10567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 346.405637][T10567] Call Trace: [ 346.405646][T10567] [ 346.405656][T10567] dump_stack_lvl+0x16c/0x1f0 [ 346.405705][T10567] should_fail_ex+0x50a/0x650 [ 346.405730][T10567] ? fs_reclaim_acquire+0xae/0x150 [ 346.405768][T10567] ? fib_default_rule_add+0x4f/0x420 [ 346.405815][T10567] should_failslab+0xc2/0x120 [ 346.405841][T10567] __kmalloc_noprof+0xcb/0x510 [ 346.405883][T10567] ? do_raw_spin_unlock+0xe1/0x230 [ 346.405914][T10567] fib_default_rule_add+0x4f/0x420 [ 346.405955][T10567] fib4_rules_init+0x7c/0x1c0 [ 346.405985][T10567] fib_net_init+0x1de/0x3d0 [ 346.406024][T10567] ? __pfx_fib_net_init+0x10/0x10 [ 346.406064][T10567] ? do_init_timer+0xc9/0x110 [ 346.406097][T10567] ? devinet_init_net+0x5c1/0x900 [ 346.406141][T10567] ? __pfx_fib_net_init+0x10/0x10 [ 346.406177][T10567] ops_init+0x1df/0x5f0 [ 346.406208][T10567] setup_net+0x21f/0x860 [ 346.406237][T10567] ? __pfx_setup_net+0x10/0x10 [ 346.406262][T10567] ? down_read_killable+0xcc/0x380 [ 346.406305][T10567] ? __pfx_down_read_killable+0x10/0x10 [ 346.406347][T10567] ? __raw_spin_lock_init+0x3a/0x110 [ 346.406374][T10567] ? debug_mutex_init+0x37/0x70 [ 346.406406][T10567] copy_net_ns+0x2a6/0x5f0 [ 346.406439][T10567] create_new_namespaces+0x3ea/0xad0 [ 346.406491][T10567] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 346.406541][T10567] ksys_unshare+0x45d/0xa40 [ 346.406576][T10567] ? __pfx_ksys_unshare+0x10/0x10 [ 346.406609][T10567] ? xfd_validate_state+0x5d/0x180 [ 346.406659][T10567] __x64_sys_unshare+0x31/0x40 [ 346.406687][T10567] do_syscall_64+0xcd/0x250 [ 346.406729][T10567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.406767][T10567] RIP: 0033:0x7fc48478d169 [ 346.406795][T10567] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 346.406822][T10567] RSP: 002b:00007fc4855e6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 346.406849][T10567] RAX: ffffffffffffffda RBX: 00007fc4849a5fa0 RCX: 00007fc48478d169 [ 346.406867][T10567] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 346.406884][T10567] RBP: 00007fc48480e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 346.406901][T10567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 346.406918][T10567] R13: 0000000000000000 R14: 00007fc4849a5fa0 R15: 00007ffebcf53a18 [ 346.406951][T10567] [ 348.615545][T10594] FAULT_INJECTION: forcing a failure. [ 348.615545][T10594] name failslab, interval 1, probability 0, space 0, times 0 [ 348.679424][T10594] CPU: 1 UID: 0 PID: 10594 Comm: syz.2.1654 Not tainted 6.14.0-rc7-syzkaller-00074-ga7f2e10ecd8f #0 [ 348.679469][T10594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 348.679488][T10594] Call Trace: [ 348.679496][T10594] [ 348.679509][T10594] dump_stack_lvl+0x16c/0x1f0 [ 348.679562][T10594] should_fail_ex+0x50a/0x650 [ 348.679594][T10594] ? fs_reclaim_acquire+0xae/0x150 [ 348.679640][T10594] should_failslab+0xc2/0x120 [ 348.679670][T10594] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 348.679719][T10594] ? __xlate_proc_name+0x173/0x210 [ 348.679769][T10594] ? __proc_create+0x2c0/0x8b0 [ 348.679824][T10594] __proc_create+0x2c0/0x8b0 [ 348.679877][T10594] ? __pfx___proc_create+0x10/0x10 [ 348.679928][T10594] ? find_held_lock+0x2d/0x110 [ 348.679971][T10594] proc_mkdir+0x82/0x170 [ 348.679999][T10594] ? __pfx_proc_mkdir+0x10/0x10 [ 348.680038][T10594] cache_register_net+0x18f/0x5e0 [ 348.680079][T10594] nfsd_idmap_init+0x16e/0x250 [ 348.680110][T10594] ? __pfx_nfsd_net_init+0x10/0x10 [ 348.680150][T10594] nfsd_net_init+0x69/0x3a0 [ 348.680193][T10594] ? __pfx_nfsd_net_init+0x10/0x10 [ 348.680232][T10594] ops_init+0x1df/0x5f0 [ 348.680269][T10594] setup_net+0x21f/0x860 [ 348.680304][T10594] ? __pfx_setup_net+0x10/0x10 [ 348.680342][T10594] ? down_read_killable+0xcc/0x380 [ 348.680395][T10594] ? __pfx_down_read_killable+0x10/0x10 [ 348.680451][T10594] ? __raw_spin_lock_init+0x3a/0x110 [ 348.680485][T10594] ? debug_mutex_init+0x37/0x70 [ 348.680542][T10594] copy_net_ns+0x2a6/0x5f0 [ 348.680584][T10594] create_new_namespaces+0x3ea/0xad0 [ 348.680648][T10594] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 348.680707][T10594] ksys_unshare+0x45d/0xa40 [ 348.680742][T10594] ? __pfx_ksys_unshare+0x10/0x10 [ 348.680775][T10594] ? xfd_validate_state+0x5d/0x180 [ 348.680836][T10594] __x64_sys_unshare+0x31/0x40 [ 348.680869][T10594] do_syscall_64+0xcd/0x250 [ 348.680920][T10594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.680966][T10594] RIP: 0033:0x7f6d0478d169 [ 348.680992][T10594] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 348.681022][T10594] RSP: 002b:00007f6d05614038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 348.681049][T10594] RAX: ffffffffffffffda RBX: 00007f6d049a5fa0 RCX: 00007f6d0478d169 [ 348.681068][T10594] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 348.681085][T10594] RBP: 00007f6d0480e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 348.681102][T10594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 348.681118][T10594] R13: 0000000000000000 R14: 00007f6d049a5fa0 R15: 00007ffe67c30df8 [ 348.681152][T10594] [ 349.937889][T10604] netlink: 326 bytes leftover after parsing attributes in process `syz.0.1660'. [ 350.351481][T10612] netlink: 'syz.2.1663': attribute type 19 has an invalid length. [ 350.373893][T10613] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1662'. [ 350.449820][T10612] netlink: 114 bytes leftover after parsing attributes in process `syz.2.1663'. [ 351.021523][T10620] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1666'. [ 352.683629][T10636] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1670'. [ 353.533872][T10618] kexec: Could not allocate control_code_buffer [ 354.132138][T10650] netlink: 146 bytes leftover after parsing attributes in process `syz.4.1676'. [ 355.440293][T10664] netlink: 342 bytes leftover after parsing attributes in process `syz.4.1680'. [ 355.539826][T10662] netlink: 'syz.0.1686': attribute type 19 has an invalid length. [ 355.705866][T10664] IPv6: Can't replace route, no match found [ 355.727138][T10662] netlink: 114 bytes leftover after parsing attributes in process `syz.0.1686'. [ 357.259815][T10680] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1687'. [ 359.028706][T10698] sp0: Synchronizing with TNC [ 359.028762][T10700] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1695'. [ 359.184764][T10704] netlink: 330 bytes leftover after parsing attributes in process `syz.0.1694'. [ 360.317324][T10716] FAULT_INJECTION: forcing a failure. [ 360.317324][T10716] name failslab, interval 1, probability 0, space 0, times 0 [ 360.401976][T10716] CPU: 0 UID: 0 PID: 10716 Comm: syz.0.1700 Not tainted 6.14.0-rc7-syzkaller-00074-ga7f2e10ecd8f #0 [ 360.402023][T10716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 360.402042][T10716] Call Trace: [ 360.402052][T10716] [ 360.402064][T10716] dump_stack_lvl+0x16c/0x1f0 [ 360.402137][T10716] should_fail_ex+0x50a/0x650 [ 360.402178][T10716] ? trace_kmem_cache_alloc+0x2d/0xd0 [ 360.402228][T10716] should_failslab+0xc2/0x120 [ 360.402261][T10716] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 360.402312][T10716] ? __alloc_skb+0x2b1/0x380 [ 360.402369][T10716] __alloc_skb+0x2b1/0x380 [ 360.402421][T10716] ? __pfx___alloc_skb+0x10/0x10 [ 360.402476][T10716] ? aoecmd_cfg+0xe8/0x7d0 [ 360.402517][T10716] new_skb+0x21/0x230 [ 360.402547][T10716] aoecmd_cfg+0x21d/0x7d0 [ 360.402584][T10716] ? __pfx_aoecmd_cfg+0x10/0x10 [ 360.402641][T10716] ? apparmor_file_permission+0x251/0x400 [ 360.402688][T10716] ? __pfx_aoechr_write+0x10/0x10 [ 360.402743][T10716] ? aoechr_write+0x120/0x160 [ 360.402794][T10716] aoechr_write+0x120/0x160 [ 360.402848][T10716] vfs_write+0x24c/0x1150 [ 360.402896][T10716] ? __fget_files+0x1fc/0x3a0 [ 360.402944][T10716] ? __pfx_lock_release+0x10/0x10 [ 360.402993][T10716] ? __pfx_vfs_write+0x10/0x10 [ 360.403036][T10716] ? do_futex+0x123/0x350 [ 360.403077][T10716] ? lock_acquire+0x2f/0xb0 [ 360.403121][T10716] ? __fget_files+0x40/0x3a0 [ 360.403174][T10716] ? __fget_files+0x206/0x3a0 [ 360.403235][T10716] ksys_write+0x12b/0x250 [ 360.403280][T10716] ? __pfx_ksys_write+0x10/0x10 [ 360.403339][T10716] do_syscall_64+0xcd/0x250 [ 360.403392][T10716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.403440][T10716] RIP: 0033:0x7f90f978d169 [ 360.403466][T10716] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 360.403499][T10716] RSP: 002b:00007f90fa6ba038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 360.403530][T10716] RAX: ffffffffffffffda RBX: 00007f90f99a5fa0 RCX: 00007f90f978d169 [ 360.403553][T10716] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 360.403572][T10716] RBP: 00007f90f980e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 360.403592][T10716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 360.403612][T10716] R13: 0000000000000000 R14: 00007f90f99a5fa0 R15: 00007ffe5b568d38 [ 360.403660][T10716] [ 360.695671][T10716] aoe: skb alloc failure [ 360.708037][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 360.715735][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 362.273333][T10740] netlink: 330 bytes leftover after parsing attributes in process `syz.5.1709'. [ 362.418035][T10745] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1711'. [ 363.038000][T10752] netlink: 222 bytes leftover after parsing attributes in process `syz.4.1714'. [ 363.247744][T10752] netlink: 222 bytes leftover after parsing attributes in process `syz.4.1714'. [ 363.258057][T10760] random: crng reseeded on system resumption [ 364.768562][T10774] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1722'. [ 364.807172][T10774] netlink: 354 bytes leftover after parsing attributes in process `syz.4.1722'. [ 367.055650][T10791] netlink: 334 bytes leftover after parsing attributes in process `syz.0.1727'. [ 367.588286][T10800] netlink: 342 bytes leftover after parsing attributes in process `syz.4.1731'. [ 367.634935][T10800] IPv6: NLM_F_CREATE should be specified when creating new route [ 367.878258][T10809] netlink: 342 bytes leftover after parsing attributes in process `syz.0.1735'. [ 369.115788][T10834] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1744'. [ 369.163791][T10834] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 370.188292][T10855] netlink: 342 bytes leftover after parsing attributes in process `syz.4.1753'. [ 370.255369][T10855] netlink: 'syz.4.1753': attribute type 2 has an invalid length. [ 370.309462][T10855] netlink: 'syz.4.1753': attribute type 3 has an invalid length. [ 370.359513][T10855] netlink: 98 bytes leftover after parsing attributes in process `syz.4.1753'. [ 372.067128][T10877] netlink: 146 bytes leftover after parsing attributes in process `syz.0.1760'. [ 372.181559][T10880] netlink: 330 bytes leftover after parsing attributes in process `syz.4.1761'. [ 373.114018][T10895] netlink: 350 bytes leftover after parsing attributes in process `syz.4.1768'. [ 373.167152][T10897] netlink: 330 bytes leftover after parsing attributes in process `syz.2.1769'. [ 373.397685][T10901] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1770'. [ 373.469454][T10904] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1770'. [ 373.738947][T10912] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1774'. [ 373.872984][T10915] netlink: 354 bytes leftover after parsing attributes in process `syz.2.1774'. [ 374.212813][T10914] netlink: 330 bytes leftover after parsing attributes in process `syz.4.1775'. [ 374.221051][T10917] Invalid ELF header magic: != ELF [ 374.711391][T10930] netlink: 330 bytes leftover after parsing attributes in process `syz.4.1781'. [ 374.720262][T10927] netlink: 110 bytes leftover after parsing attributes in process `syz.2.1779'. [ 376.602170][T10975] sp0: Synchronizing with TNC [ 377.611037][T10986] netlink: 330 bytes leftover after parsing attributes in process `syz.2.1798'. [ 377.871170][T10988] FAULT_INJECTION: forcing a failure. [ 377.871170][T10988] name failslab, interval 1, probability 0, space 0, times 0 [ 377.909198][T10988] CPU: 0 UID: 0 PID: 10988 Comm: syz.5.1800 Not tainted 6.14.0-rc7-syzkaller-00074-ga7f2e10ecd8f #0 [ 377.909244][T10988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 377.909263][T10988] Call Trace: [ 377.909273][T10988] [ 377.909286][T10988] dump_stack_lvl+0x16c/0x1f0 [ 377.909343][T10988] should_fail_ex+0x50a/0x650 [ 377.909372][T10988] ? fs_reclaim_acquire+0xae/0x150 [ 377.909417][T10988] should_failslab+0xc2/0x120 [ 377.909447][T10988] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 377.909493][T10988] ? down_write+0x14e/0x200 [ 377.909544][T10988] ? vm_area_dup+0x53/0x2f0 [ 377.909598][T10988] vm_area_dup+0x53/0x2f0 [ 377.909648][T10988] copy_process+0x776f/0x8c50 [ 377.909706][T10988] ? __pfx_copy_process+0x10/0x10 [ 377.909733][T10988] ? __pfx___futex_wait+0x10/0x10 [ 377.909782][T10988] ? try_to_wake_up+0x158/0x1490 [ 377.909855][T10988] kernel_clone+0xfd/0x960 [ 377.909887][T10988] ? __pfx_kernel_clone+0x10/0x10 [ 377.909942][T10988] __do_sys_clone+0xcf/0x120 [ 377.909973][T10988] ? __pfx___do_sys_clone+0x10/0x10 [ 377.910025][T10988] ? rcu_is_watching+0x12/0xc0 [ 377.910072][T10988] do_syscall_64+0xcd/0x250 [ 377.910133][T10988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.910180][T10988] RIP: 0033:0x7fc48478d169 [ 377.910205][T10988] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 377.910236][T10988] RSP: 002b:00007fc4855e5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 377.910267][T10988] RAX: ffffffffffffffda RBX: 00007fc4849a5fa0 RCX: 00007fc48478d169 [ 377.910287][T10988] RDX: 0000000000000000 RSI: ffffffffffffff10 RDI: 0000000000000000 [ 377.910305][T10988] RBP: 00007fc48480e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 377.910324][T10988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 377.910342][T10988] R13: 0000000000000000 R14: 00007fc4849a5fa0 R15: 00007ffebcf53a18 [ 377.910383][T10988] [ 378.146553][ T5880] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 378.228284][ T55] Bluetooth: hci2: command 0x0c1a tx timeout [ 378.241683][T10994] __nla_validate_parse: 1 callbacks suppressed [ 378.241711][T10994] netlink: 146 bytes leftover after parsing attributes in process `syz.2.1803'. [ 379.913078][T11033] FAULT_INJECTION: forcing a failure. [ 379.913078][T11033] name failslab, interval 1, probability 0, space 0, times 0 [ 379.988814][T11033] CPU: 0 UID: 0 PID: 11033 Comm: syz.4.1820 Not tainted 6.14.0-rc7-syzkaller-00074-ga7f2e10ecd8f #0 [ 379.988862][T11033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 379.988882][T11033] Call Trace: [ 379.988891][T11033] [ 379.988904][T11033] dump_stack_lvl+0x16c/0x1f0 [ 379.988960][T11033] should_fail_ex+0x50a/0x650 [ 379.988992][T11033] ? fs_reclaim_acquire+0xae/0x150 [ 379.989039][T11033] should_failslab+0xc2/0x120 [ 379.989072][T11033] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 379.989125][T11033] ? copy_process+0x4be/0x8c50 [ 379.989157][T11033] ? _raw_spin_unlock_irq+0x23/0x50 [ 379.989202][T11033] copy_process+0x4be/0x8c50 [ 379.989232][T11033] ? plist_add+0x458/0x600 [ 379.989270][T11033] ? lock_acquire+0x2f/0xb0 [ 379.989314][T11033] ? schedule+0x1fd/0x350 [ 379.989356][T11033] ? futex_wait_queue+0x41/0x1f0 [ 379.989402][T11033] ? schedule+0xf1/0x350 [ 379.989444][T11033] ? futex_unqueue+0xba/0x140 [ 379.989489][T11033] ? __pfx_copy_process+0x10/0x10 [ 379.989518][T11033] ? __pfx___futex_wait+0x10/0x10 [ 379.989575][T11033] ? __pfx_futex_wake_mark+0x10/0x10 [ 379.989641][T11033] kernel_clone+0xfd/0x960 [ 379.989684][T11033] ? __pfx_kernel_clone+0x10/0x10 [ 379.989736][T11033] __do_sys_clone+0xcf/0x120 [ 379.989767][T11033] ? __pfx___do_sys_clone+0x10/0x10 [ 379.989796][T11033] ? do_seccomp+0x3ae/0x2640 [ 379.989847][T11033] ? rcu_is_watching+0x12/0xc0 [ 379.989892][T11033] do_syscall_64+0xcd/0x250 [ 379.989942][T11033] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.989989][T11033] RIP: 0033:0x7f51bd38d169 [ 379.990015][T11033] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 379.990047][T11033] RSP: 002b:00007f51be148038 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 379.990079][T11033] RAX: ffffffffffffffda RBX: 00007f51bd5a5fa0 RCX: 00007f51bd38d169 [ 379.990099][T11033] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 379.990117][T11033] RBP: 00007f51bd40e2a0 R08: 0000000000000401 R09: 0000000000000000 [ 379.990135][T11033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 379.990153][T11033] R13: 0000000000000000 R14: 00007f51bd5a5fa0 R15: 00007ffc583b6d58 [ 379.990190][T11033] [ 380.752389][T11047] netlink: 110 bytes leftover after parsing attributes in process `syz.5.1824'. [ 381.024794][ T5147] Bluetooth: hci4: command 0x0406 tx timeout [ 381.046789][T11061] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1827'. [ 381.349304][T11070] FAULT_INJECTION: forcing a failure. [ 381.349304][T11070] name failslab, interval 1, probability 0, space 0, times 0 [ 381.424080][T11070] CPU: 0 UID: 0 PID: 11070 Comm: syz.5.1829 Not tainted 6.14.0-rc7-syzkaller-00074-ga7f2e10ecd8f #0 [ 381.424125][T11070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 381.424143][T11070] Call Trace: [ 381.424153][T11070] [ 381.424166][T11070] dump_stack_lvl+0x16c/0x1f0 [ 381.424220][T11070] should_fail_ex+0x50a/0x650 [ 381.424252][T11070] ? fs_reclaim_acquire+0xae/0x150 [ 381.424299][T11070] should_failslab+0xc2/0x120 [ 381.424331][T11070] __kmalloc_node_noprof+0xd1/0x510 [ 381.424385][T11070] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 381.424436][T11070] __kvmalloc_node_noprof+0xad/0x1a0 [ 381.424484][T11070] io_alloc_cache_init+0x33/0x170 [ 381.424533][T11070] io_uring_setup+0x58e/0x2200 [ 381.424574][T11070] ? __pfx_io_uring_setup+0x10/0x10 [ 381.424610][T11070] ? do_futex+0x123/0x350 [ 381.424658][T11070] ? __pfx_do_futex+0x10/0x10 [ 381.424718][T11070] ? rcu_is_watching+0x12/0xc0 [ 381.424759][T11070] __x64_sys_io_uring_setup+0x98/0x140 [ 381.424799][T11070] do_syscall_64+0xcd/0x250 [ 381.424852][T11070] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.424903][T11070] RIP: 0033:0x7fc48478d169 [ 381.424928][T11070] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 381.424961][T11070] RSP: 002b:00007fc4855e6038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 381.424992][T11070] RAX: ffffffffffffffda RBX: 00007fc4849a5fa0 RCX: 00007fc48478d169 [ 381.425014][T11070] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000059 [ 381.425033][T11070] RBP: 00007fc48480e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 381.425052][T11070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 381.425071][T11070] R13: 0000000000000000 R14: 00007fc4849a5fa0 R15: 00007ffebcf53a18 [ 381.425107][T11070] [ 381.931238][T11088] netlink: 'syz.2.1835': attribute type 27 has an invalid length. [ 381.944123][T11088] netlink: 334 bytes leftover after parsing attributes in process `syz.2.1835'. [ 383.499653][T11122] sctp: [Deprecated]: syz.5.1845 (pid 11122) Use of int in maxseg socket option. [ 383.499653][T11122] Use struct sctp_assoc_value instead [ 384.068866][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.076566][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.648380][T11141] nbd: socks must be embedded in a SOCK_ITEM attr [ 384.665004][T11141] block nbd0: shutting down sockets [ 384.746733][T11144] sp0: Synchronizing with TNC [ 384.882676][T11146] netlink: 'syz.5.1855': attribute type 20 has an invalid length. [ 384.902370][T11146] netlink: 330 bytes leftover after parsing attributes in process `syz.5.1855'. [ 384.928344][T11146] IPv6: NLM_F_CREATE should be specified when creating new route [ 385.106361][T11154] FAULT_INJECTION: forcing a failure. [ 385.106361][T11154] name failslab, interval 1, probability 0, space 0, times 0 [ 385.127544][T11154] CPU: 1 UID: 0 PID: 11154 Comm: syz.5.1858 Not tainted 6.14.0-rc7-syzkaller-00074-ga7f2e10ecd8f #0 [ 385.127586][T11154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 385.127604][T11154] Call Trace: [ 385.127613][T11154] [ 385.127625][T11154] dump_stack_lvl+0x16c/0x1f0 [ 385.127676][T11154] should_fail_ex+0x50a/0x650 [ 385.127707][T11154] ? fs_reclaim_acquire+0xae/0x150 [ 385.127751][T11154] should_failslab+0xc2/0x120 [ 385.127782][T11154] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 385.127852][T11154] ? prepare_creds+0x2e/0x750 [ 385.127909][T11154] prepare_creds+0x2e/0x750 [ 385.127951][T11154] lookup_user_key+0xf6a/0x12f0 [ 385.127991][T11154] ? find_held_lock+0x2d/0x110 [ 385.128042][T11154] ? __pfx_lookup_user_key+0x10/0x10 [ 385.128087][T11154] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 385.128132][T11154] ? __x64_sys_futex+0x1e1/0x4c0 [ 385.128172][T11154] ? __x64_sys_futex+0x1ea/0x4c0 [ 385.128221][T11154] keyctl_session_to_parent+0x28/0xaf0 [ 385.128276][T11154] __do_sys_keyctl+0x25c/0x590 [ 385.128317][T11154] do_syscall_64+0xcd/0x250 [ 385.128370][T11154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.128416][T11154] RIP: 0033:0x7fc48478d169 [ 385.128442][T11154] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 385.128474][T11154] RSP: 002b:00007fc4855e6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 385.128504][T11154] RAX: ffffffffffffffda RBX: 00007fc4849a5fa0 RCX: 00007fc48478d169 [ 385.128527][T11154] RDX: 000040000000c6e9 RSI: 000000000000000f RDI: 0000000000000012 [ 385.128548][T11154] RBP: 00007fc48480e2a0 R08: 000000000000a472 R09: 0000000000000000 [ 385.128568][T11154] R10: 0000000000000081 R11: 0000000000000246 R12: 0000000000000000 [ 385.128587][T11154] R13: 0000000000000000 R14: 00007fc4849a5fa0 R15: 00007ffebcf53a18 [ 385.128626][T11154] [ 385.371786][T11156] FAULT_INJECTION: forcing a failure. [ 385.371786][T11156] name failslab, interval 1, probability 0, space 0, times 0 [ 385.388395][T11156] CPU: 0 UID: 0 PID: 11156 Comm: syz.2.1859 Not tainted 6.14.0-rc7-syzkaller-00074-ga7f2e10ecd8f #0 [ 385.388442][T11156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 385.388462][T11156] Call Trace: [ 385.388472][T11156] [ 385.388485][T11156] dump_stack_lvl+0x16c/0x1f0 [ 385.388549][T11156] should_fail_ex+0x50a/0x650 [ 385.388581][T11156] ? fs_reclaim_acquire+0xae/0x150 [ 385.388627][T11156] ? drm_atomic_state_alloc+0xb8/0x120 [ 385.388676][T11156] should_failslab+0xc2/0x120 [ 385.388707][T11156] __kmalloc_cache_noprof+0x68/0x410 [ 385.388759][T11156] ? drm_modeset_acquire_init+0x237/0x410 [ 385.388801][T11156] drm_atomic_state_alloc+0xb8/0x120 [ 385.388852][T11156] drm_client_modeset_commit_atomic+0xd1/0x7f0 [ 385.388897][T11156] ? drm_client_modeset_commit_locked+0x4c/0x580 [ 385.388950][T11156] ? trace_contention_end+0xee/0x140 [ 385.389003][T11156] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 385.389080][T11156] ? __pfx___mutex_lock+0x10/0x10 [ 385.389138][T11156] drm_client_modeset_commit_locked+0x14d/0x580 [ 385.389190][T11156] drm_client_modeset_commit+0x4f/0x80 [ 385.389235][T11156] drm_fb_helper_lastclose+0xc7/0x160 [ 385.389273][T11156] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 385.389325][T11156] drm_fbdev_client_restore+0x2c/0x40 [ 385.389378][T11156] drm_client_dev_restore+0x188/0x2a0 [ 385.389441][T11156] drm_release+0x2c2/0x360 [ 385.389484][T11156] ? __pfx_drm_release+0x10/0x10 [ 385.389531][T11156] __fput+0x3ff/0xb70 [ 385.389574][T11156] task_work_run+0x14e/0x250 [ 385.389619][T11156] ? __pfx_task_work_run+0x10/0x10 [ 385.389664][T11156] ? __pfx___do_sys_close_range+0x10/0x10 [ 385.389725][T11156] syscall_exit_to_user_mode+0x27b/0x2a0 [ 385.389774][T11156] do_syscall_64+0xda/0x250 [ 385.389824][T11156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.389868][T11156] RIP: 0033:0x7f6d0478d169 [ 385.389893][T11156] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 385.389925][T11156] RSP: 002b:00007f6d05614038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 385.389955][T11156] RAX: 0000000000000000 RBX: 00007f6d049a5fa0 RCX: 00007f6d0478d169 [ 385.389975][T11156] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 385.389993][T11156] RBP: 00007f6d0480e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 385.390011][T11156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 385.390029][T11156] R13: 0000000000000000 R14: 00007f6d049a5fa0 R15: 00007ffe67c30df8 [ 385.390072][T11156] [ 385.698207][ C0] vkms_vblank_simulate: vblank timer overrun [ 385.882644][T11167] netlink: 'syz.2.1863': attribute type 64 has an invalid length. [ 385.897323][T11167] netlink: 74 bytes leftover after parsing attributes in process `syz.2.1863'. [ 385.912281][T11167] netlink: 'syz.2.1863': attribute type 64 has an invalid length. [ 385.922125][T11167] netlink: 74 bytes leftover after parsing attributes in process `syz.2.1863'. [ 386.128393][T11169] netlink: 342 bytes leftover after parsing attributes in process `syz.0.1864'. [ 386.241092][T11175] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1866'. [ 386.381962][T11181] FAULT_INJECTION: forcing a failure. [ 386.381962][T11181] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 386.409913][T11181] CPU: 1 UID: 0 PID: 11181 Comm: syz.2.1869 Not tainted 6.14.0-rc7-syzkaller-00074-ga7f2e10ecd8f #0 [ 386.409963][T11181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 386.409983][T11181] Call Trace: [ 386.409992][T11181] [ 386.410006][T11181] dump_stack_lvl+0x16c/0x1f0 [ 386.410061][T11181] should_fail_ex+0x50a/0x650 [ 386.410093][T11181] ? __pfx___might_resched+0x10/0x10 [ 386.410152][T11181] should_fail_alloc_page+0xe7/0x130 [ 386.410186][T11181] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 386.410250][T11181] __alloc_frozen_pages_noprof+0x18e/0x2470 [ 386.410307][T11181] ? __pfx_mark_lock+0x10/0x10 [ 386.410348][T11181] ? hlock_class+0x4e/0x130 [ 386.410385][T11181] ? hlock_class+0x4e/0x130 [ 386.410419][T11181] ? mark_lock+0xb5/0xc60 [ 386.410463][T11181] ? hlock_class+0x4e/0x130 [ 386.410497][T11181] ? mark_lock+0xb5/0xc60 [ 386.410539][T11181] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 386.410589][T11181] ? hlock_class+0x4e/0x130 [ 386.410622][T11181] ? mark_lock+0xb5/0xc60 [ 386.410664][T11181] ? __pfx_mark_lock+0x10/0x10 [ 386.410729][T11181] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 386.410783][T11181] ? policy_nodemask+0xea/0x4e0 [ 386.410816][T11181] alloc_pages_mpol+0x1fc/0x540 [ 386.410849][T11181] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 386.410881][T11181] ? find_held_lock+0x2d/0x110 [ 386.410925][T11181] folio_alloc_mpol_noprof+0x36/0x2f0 [ 386.410966][T11181] shmem_alloc_folio+0x135/0x160 [ 386.411022][T11181] shmem_alloc_and_add_folio+0x48e/0xc10 [ 386.411065][T11181] ? shmem_huge_global_enabled+0x72/0x6b0 [ 386.411100][T11181] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 386.411141][T11181] ? shmem_allowable_huge_orders+0xd0/0x410 [ 386.411187][T11181] shmem_get_folio_gfp+0x689/0x1530 [ 386.411242][T11181] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 386.411287][T11181] ? filemap_map_pages+0xf92/0x16b0 [ 386.411335][T11181] shmem_fault+0x200/0xae0 [ 386.411387][T11181] ? __pfx_shmem_fault+0x10/0x10 [ 386.411432][T11181] ? do_pte_missing+0xde9/0x3e10 [ 386.411478][T11181] ? __pfx_lock_release+0x10/0x10 [ 386.411531][T11181] __do_fault+0x10a/0x490 [ 386.411569][T11181] do_pte_missing+0xecf/0x3e10 [ 386.411630][T11181] __handle_mm_fault+0x103c/0x2a40 [ 386.411691][T11181] ? __pfx___handle_mm_fault+0x10/0x10 [ 386.411737][T11181] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 386.411800][T11181] ? find_vma+0xc0/0x140 [ 386.411835][T11181] ? __pfx_find_vma+0x10/0x10 [ 386.411877][T11181] handle_mm_fault+0x3fa/0xaa0 [ 386.411929][T11181] do_user_addr_fault+0x7a3/0x13f0 [ 386.411980][T11181] exc_page_fault+0x5c/0xc0 [ 386.412022][T11181] asm_exc_page_fault+0x26/0x30 [ 386.412063][T11181] RIP: 0010:fault_in_readable+0x160/0x200 [ 386.412102][T11181] Code: 42 e8 45 31 f6 e8 f0 67 b9 ff 48 39 eb 75 13 eb 2e e8 e4 67 b9 ff 48 81 c3 00 10 00 00 48 39 eb 74 1d e8 d3 67 b9 ff 45 89 f7 <8a> 03 31 ff 44 89 fe 88 44 24 28 e8 c0 62 b9 ff 45 85 ff 74 d2 e8 [ 386.412132][T11181] RSP: 0018:ffffc9000c2ef9c8 EFLAGS: 00050287 [ 386.412156][T11181] RAX: 0000000000012a22 RBX: 000000000001f000 RCX: ffffc9000d3b2000 [ 386.412175][T11181] RDX: 0000000000080000 RSI: ffffffff82008a7d RDI: 0000000000000007 [ 386.412194][T11181] RBP: 0000000000020000 R08: 0000000000000007 R09: 0000000000000000 [ 386.412211][T11181] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000001000 [ 386.412256][T11181] R13: 000000000001f000 R14: 0000000000000000 R15: 0000000000000000 [ 386.412283][T11181] ? fault_in_readable+0x15d/0x200 [ 386.412324][T11181] ? fault_in_readable+0x15d/0x200 [ 386.412360][T11181] ? __pfx_fault_in_readable+0x10/0x10 [ 386.412396][T11181] ? I_BDEV+0xd/0x20 [ 386.412420][T11181] ? inode_to_bdi+0x9e/0x160 [ 386.412457][T11181] fault_in_iov_iter_readable+0x101/0x2c0 [ 386.412492][T11181] iomap_file_buffered_write+0x3e2/0xc70 [ 386.412548][T11181] ? __pfx_iomap_file_buffered_write+0x10/0x10 [ 386.412589][T11181] ? blkdev_direct_IO+0x142/0x1c40 [ 386.412660][T11181] ? filemap_check_errors+0xa9/0x160 [ 386.412715][T11181] ? iov_iter_revert+0x27/0x5a0 [ 386.412754][T11181] blkdev_write_iter+0x545/0xdd0 [ 386.412805][T11181] vfs_write+0x5ae/0x1150 [ 386.412852][T11181] ? __pfx_blkdev_write_iter+0x10/0x10 [ 386.412900][T11181] ? __pfx_vfs_write+0x10/0x10 [ 386.412941][T11181] ? do_futex+0x123/0x350 [ 386.412983][T11181] ? __fget_files+0x40/0x3a0 [ 386.413049][T11181] ksys_write+0x12b/0x250 [ 386.413091][T11181] ? __pfx_ksys_write+0x10/0x10 [ 386.413146][T11181] do_syscall_64+0xcd/0x250 [ 386.413189][T11181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.413235][T11181] RIP: 0033:0x7f6d0478d169 [ 386.413257][T11181] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 386.413285][T11181] RSP: 002b:00007f6d05614038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 386.413310][T11181] RAX: ffffffffffffffda RBX: 00007f6d049a5fa0 RCX: 00007f6d0478d169 [ 386.413329][T11181] RDX: 0000000000100082 RSI: 0000000000000000 RDI: 0000000000000003 [ 386.413346][T11181] RBP: 00007f6d0480e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 386.413363][T11181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 386.413380][T11181] R13: 0000000000000000 R14: 00007f6d049a5fa0 R15: 00007ffe67c30df8 [ 386.413414][T11181] [ 387.285222][T11189] FAULT_INJECTION: forcing a failure. [ 387.285222][T11189] name failslab, interval 1, probability 0, space 0, times 0 [ 387.372335][T11189] CPU: 0 UID: 0 PID: 11189 Comm: syz.0.1870 Not tainted 6.14.0-rc7-syzkaller-00074-ga7f2e10ecd8f #0 [ 387.372391][T11189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 387.372412][T11189] Call Trace: [ 387.372421][T11189] [ 387.372435][T11189] dump_stack_lvl+0x16c/0x1f0 [ 387.372489][T11189] should_fail_ex+0x50a/0x650 [ 387.372520][T11189] ? fs_reclaim_acquire+0xae/0x150 [ 387.372567][T11189] should_failslab+0xc2/0x120 [ 387.372599][T11189] kmem_cache_alloc_lru_noprof+0x73/0x3d0 [ 387.372649][T11189] ? do_user_addr_fault+0xdc7/0x13f0 [ 387.372695][T11189] ? sock_alloc_inode+0x25/0x1c0 [ 387.372738][T11189] ? __pfx_sock_alloc_inode+0x10/0x10 [ 387.372774][T11189] sock_alloc_inode+0x25/0x1c0 [ 387.372810][T11189] alloc_inode+0x5d/0x230 [ 387.372842][T11189] sock_alloc+0x40/0x280 [ 387.372877][T11189] __sock_create+0xc1/0x8d0 [ 387.372919][T11189] ? __pfx_lock_release+0x10/0x10 [ 387.372970][T11189] __sys_socket+0x14f/0x260 [ 387.373012][T11189] ? __pfx___sys_socket+0x10/0x10 [ 387.373059][T11189] ? do_user_addr_fault+0x83d/0x13f0 [ 387.373108][T11189] __x64_sys_socket+0x72/0xb0 [ 387.373150][T11189] ? lockdep_hardirqs_on+0x7c/0x110 [ 387.373196][T11189] do_syscall_64+0xcd/0x250 [ 387.373248][T11189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.373295][T11189] RIP: 0033:0x7f90f978f087 [ 387.373319][T11189] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 387.373353][T11189] RSP: 002b:00007f90fa6b8fa8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 387.373388][T11189] RAX: ffffffffffffffda RBX: 00007f90f99a5fa0 RCX: 00007f90f978f087 [ 387.373410][T11189] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 387.373428][T11189] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 387.373446][T11189] R10: 00002000000000c0 R11: 0000000000000286 R12: 0000000000000000 [ 387.373466][T11189] R13: 0000000000000000 R14: 00007f90f99a5fa0 R15: 00007ffe5b568d38 [ 387.373504][T11189] [ 387.373519][T11189] socket: no more sockets [ 387.746267][T11198] FAULT_INJECTION: forcing a failure. [ 387.746267][T11198] name failslab, interval 1, probability 0, space 0, times 0 [ 387.808330][T11198] CPU: 1 UID: 0 PID: 11198 Comm: syz.5.1875 Not tainted 6.14.0-rc7-syzkaller-00074-ga7f2e10ecd8f #0 [ 387.808374][T11198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 387.808392][T11198] Call Trace: [ 387.808402][T11198] [ 387.808414][T11198] dump_stack_lvl+0x16c/0x1f0 [ 387.808480][T11198] should_fail_ex+0x50a/0x650 [ 387.808511][T11198] ? fs_reclaim_acquire+0xae/0x150 [ 387.808556][T11198] should_failslab+0xc2/0x120 [ 387.808588][T11198] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 387.808639][T11198] ? copy_process+0x4be/0x8c50 [ 387.808669][T11198] ? _raw_spin_unlock_irq+0x23/0x50 [ 387.808714][T11198] copy_process+0x4be/0x8c50 [ 387.808744][T11198] ? plist_add+0x458/0x600 [ 387.808780][T11198] ? lock_acquire+0x2f/0xb0 [ 387.808822][T11198] ? schedule+0x1fd/0x350 [ 387.808862][T11198] ? futex_wait_queue+0x41/0x1f0 [ 387.808909][T11198] ? schedule+0xf1/0x350 [ 387.808950][T11198] ? futex_unqueue+0xba/0x140 [ 387.808994][T11198] ? __pfx_copy_process+0x10/0x10 [ 387.809021][T11198] ? __pfx___futex_wait+0x10/0x10 [ 387.809075][T11198] ? __pfx_futex_wake_mark+0x10/0x10 [ 387.809142][T11198] kernel_clone+0xfd/0x960 [ 387.809173][T11198] ? __pfx_kernel_clone+0x10/0x10 [ 387.809224][T11198] __do_sys_clone+0xcf/0x120 [ 387.809253][T11198] ? __pfx___do_sys_clone+0x10/0x10 [ 387.809290][T11198] ? do_seccomp+0x3ae/0x2640 [ 387.809344][T11198] ? rcu_is_watching+0x12/0xc0 [ 387.809389][T11198] do_syscall_64+0xcd/0x250 [ 387.809439][T11198] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.809497][T11198] RIP: 0033:0x7fc48478d169 [ 387.809521][T11198] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 387.809570][T11198] RSP: 002b:00007fc4855e6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 387.809609][T11198] RAX: ffffffffffffffda RBX: 00007fc4849a5fa0 RCX: 00007fc48478d169 [ 387.809630][T11198] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 387.809648][T11198] RBP: 00007fc48480e2a0 R08: 0000000000000401 R09: 0000000000000000 [ 387.809668][T11198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 387.809686][T11198] R13: 0000000000000000 R14: 00007fc4849a5fa0 R15: 00007ffebcf53a18 [ 387.809723][T11198] [ 388.257770][T11204] netlink: 330 bytes leftover after parsing attributes in process `syz.5.1878'. [ 388.372803][T11208] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1880'. [ 388.471969][T11212] FAULT_INJECTION: forcing a failure. [ 388.471969][T11212] name failslab, interval 1, probability 0, space 0, times 0 [ 388.515318][T11212] CPU: 0 UID: 0 PID: 11212 Comm: syz.0.1881 Not tainted 6.14.0-rc7-syzkaller-00074-ga7f2e10ecd8f #0 [ 388.515366][T11212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 388.515386][T11212] Call Trace: [ 388.515397][T11212] [ 388.515409][T11212] dump_stack_lvl+0x16c/0x1f0 [ 388.515466][T11212] should_fail_ex+0x50a/0x650 [ 388.515497][T11212] ? fs_reclaim_acquire+0xae/0x150 [ 388.515543][T11212] should_failslab+0xc2/0x120 [ 388.515575][T11212] __kmalloc_node_noprof+0xd1/0x510 [ 388.515626][T11212] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 388.515678][T11212] __kvmalloc_node_noprof+0xad/0x1a0 [ 388.515724][T11212] io_alloc_cache_init+0x33/0x170 [ 388.515773][T11212] io_uring_setup+0x58e/0x2200 [ 388.515815][T11212] ? __pfx_io_uring_setup+0x10/0x10 [ 388.515850][T11212] ? do_futex+0x123/0x350 [ 388.515891][T11212] ? __pfx_do_futex+0x10/0x10 [ 388.515953][T11212] ? rcu_is_watching+0x12/0xc0 [ 388.515995][T11212] __x64_sys_io_uring_setup+0x98/0x140 [ 388.516082][T11212] do_syscall_64+0xcd/0x250 [ 388.516135][T11212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.516181][T11212] RIP: 0033:0x7f90f978d169 [ 388.516208][T11212] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 388.516241][T11212] RSP: 002b:00007f90fa6ba038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 388.516271][T11212] RAX: ffffffffffffffda RBX: 00007f90f99a5fa0 RCX: 00007f90f978d169 [ 388.516293][T11212] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000059 [ 388.516313][T11212] RBP: 00007f90f980e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 388.516332][T11212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 388.516350][T11212] R13: 0000000000000000 R14: 00007f90f99a5fa0 R15: 00007ffe5b568d38 [ 388.516389][T11212] [ 388.737160][ C0] vkms_vblank_simulate: vblank timer overrun [ 391.110533][ T32] INFO: task syz.3.976:8637 blocked for more than 143 seconds. [ 391.142787][ T32] Not tainted 6.14.0-rc7-syzkaller-00074-ga7f2e10ecd8f #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 391.159946][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 391.179838][ T32] task:syz.3.976 state:D stack:27488 pid:8637 tgid:8634 ppid:5840 task_flags:0x400140 flags:0x00000004 [ 391.214400][ T32] Call Trace: [ 391.218553][ T32] [ 391.222827][ T32] __schedule+0xf43/0x5890 [ 391.228190][ T32] ? __pfx___lock_acquire+0x10/0x10 [ 391.235058][ T32] ? __pfx___lock_acquire+0x10/0x10 [ 391.241700][ T32] ? __pfx___schedule+0x10/0x10 [ 391.247698][ T32] ? schedule+0x298/0x350 [ 391.256309][ T32] ? __pfx_lock_release+0x10/0x10 [ 391.262809][ T32] ? __mutex_trylock_common+0x78/0x250 [ 391.271018][ T32] ? lock_acquire+0x2f/0xb0 [ 391.276591][ T32] ? schedule+0x1fd/0x350 [ 391.282463][ T32] schedule+0xe7/0x350 [ 391.287484][ T32] schedule_preempt_disabled+0x13/0x30 [ 391.297662][ T32] __mutex_lock+0x6bd/0xb10 [ 391.307782][ T32] ? rcu_watching_snap_stopped_since+0xe1/0x110 [ 391.329890][ T32] ? nfsd_nl_threads_get_doit+0x1c7/0x7b0 [ 391.380124][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 391.386264][ T32] ? __build_skb_around+0x278/0x3b0 [ 391.438264][ T32] ? skb_put+0x138/0x1b0 [ 391.450453][ T32] ? __nlmsg_put+0x152/0x1c0 [ 391.456056][ T32] ? nfsd_nl_threads_get_doit+0x1c7/0x7b0 [ 391.465056][T11251] netlink: 330 bytes leftover after parsing attributes in process `syz.2.1895'. [ 391.498265][ T32] nfsd_nl_threads_get_doit+0x1c7/0x7b0 [ 391.540186][ T32] ? lockdep_hardirqs_on+0x7c/0x110 [ 391.546531][ T32] ? __pfx_nfsd_nl_threads_get_doit+0x10/0x10 [ 391.579514][ T32] ? hlock_class+0x4e/0x130 [ 391.586008][ T32] ? mark_lock+0xb5/0xc60 [ 391.591445][ T32] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 391.602025][ T32] genl_family_rcv_msg_doit+0x202/0x2f0 [ 391.609735][ T32] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 391.617154][ T32] ? __pfx_lock_release+0x10/0x10 [ 391.639025][ T32] ? genl_get_cmd+0x195/0x580 [ 391.657850][ T32] ? __radix_tree_lookup+0x21f/0x2c0 [ 391.698321][ T32] genl_rcv_msg+0x565/0x800 [ 391.704109][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 391.720157][ T32] ? __pfx_nfsd_nl_threads_get_doit+0x10/0x10 [ 391.727551][ T32] netlink_rcv_skb+0x16b/0x440 [ 391.737854][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 391.744852][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 391.756591][ T32] ? down_read+0xc9/0x330 [ 391.761980][ T32] ? __pfx_down_read+0x10/0x10 [ 391.768167][ T32] ? netlink_deliver_tap+0x1ae/0xd30 [ 391.774894][ T32] genl_rcv+0x28/0x40 [ 391.780266][ T32] netlink_unicast+0x53c/0x7f0 [ 391.786039][ T32] ? __pfx_netlink_unicast+0x10/0x10 [ 391.792506][ T32] ? __phys_addr_symbol+0x30/0x80 [ 391.798577][ T32] ? __check_object_size+0x488/0x710 [ 391.805076][ T32] netlink_sendmsg+0x8b8/0xd70 [ 391.810910][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 391.817326][ T32] ____sys_sendmsg+0xaaf/0xc90 [ 391.823212][ T32] ? copy_msghdr_from_user+0x10b/0x160 [ 391.829822][ T32] ? __pfx_____sys_sendmsg+0x10/0x10 [ 391.836287][ T32] ___sys_sendmsg+0x135/0x1e0 [ 391.842028][ T32] ? __pfx____sys_sendmsg+0x10/0x10 [ 391.848435][ T32] ? __pfx_lock_release+0x10/0x10 [ 391.854590][ T32] ? trace_lock_acquire+0x14e/0x1f0 [ 391.860970][ T32] ? __fget_files+0x206/0x3a0 [ 391.866649][ T32] __sys_sendmsg+0x16e/0x220 [ 391.872488][ T32] ? __pfx___sys_sendmsg+0x10/0x10 [ 391.878690][ T32] ? __x64_sys_futex+0x1e1/0x4c0 [ 391.885090][ T32] do_syscall_64+0xcd/0x250 [ 391.890617][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.897743][ T32] RIP: 0033:0x7fa3fb58d169 [ 391.903109][ T32] RSP: 002b:00007fa3fc47d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 391.913347][ T32] RAX: ffffffffffffffda RBX: 00007fa3fb7a6080 RCX: 00007fa3fb58d169 [ 391.923070][ T32] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 0000000000000003 [ 391.932750][ T32] RBP: 00007fa3fb60e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 391.942417][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 391.952074][ T32] R13: 0000000000000000 R14: 00007fa3fb7a6080 R15: 00007ffff40718b8 [ 391.961753][ T32] [ 391.965526][ T32] [ 391.965526][ T32] Showing all locks held in the system: [ 391.975574][ T32] 1 lock held by khungtaskd/32: [ 391.981603][ T32] #0: ffffffff8e1bd140 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x7f/0x390 [ 391.996729][ T32] 3 locks held by kworker/u8:6/1160: [ 392.003585][ T32] 2 locks held by syz-executor/5834: [ 392.009969][ T32] #0: ffff88802eb0a0e0 (&type->s_umount_key#49){+.+.}-{4:4}, at: deactivate_super+0xd6/0x100 [ 392.029279][ T32] #1: ffffffff8e5c0688 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 392.054703][ T32] 3 locks held by kworker/1:5/5880: [ 392.065477][ T32] #0: ffff88801b080d48 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 [ 392.080388][ T32] #1: ffffc9000430fd18 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 392.093694][ T32] #2: ffffffff8e1c85b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a4/0x3b0 [ 392.106344][ T32] 1 lock held by syz.0.752/8009: [ 392.112737][ T32] 2 locks held by syz.3.976/8636: [ 392.118804][ T32] #0: ffffffff8ff9b290 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 392.129764][ T32] #1: ffffffff8e5c0688 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xe3/0x1b40 [ 392.160387][ T32] 2 locks held by syz.3.976/8637: [ 392.166469][ T32] #0: ffffffff8ff9b290 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 392.210390][ T32] #1: ffffffff8e5c0688 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_get_doit+0x1c7/0x7b0 [ 392.240410][ T32] 2 locks held by getty/8738: [ 392.246237][ T32] #0: ffff88814d7350a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 392.300156][ T32] #1: ffffc90004be32f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0xfba/0x1480 [ 392.351626][ T32] 2 locks held by syz-executor/8827: [ 392.358050][ T32] #0: ffff88805e56e0e0 (&type->s_umount_key#49){+.+.}-{4:4}, at: deactivate_super+0xd6/0x100 [ 392.375507][ T32] #1: ffffffff8e5c0688 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 392.387560][ T32] 3 locks held by syz-executor/10168: [ 392.397886][ T32] #0: ffff88804639cd80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0x90 [ 392.409881][ T32] #1: ffff88804639c078 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x3ab/0x11a0 [ 392.421715][ T32] #2: ffffffff8e1c85b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x282/0x3b0 [ 392.434778][ T32] 1 lock held by syz.2.1895/11251: [ 392.443478][ T32] #0: ffffffff8fefa3e8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230 [ 392.454549][ T32] [ 392.457360][ T32] ============================================= [ 392.457360][ T32] [ 392.487146][ T32] NMI backtrace for cpu 0 [ 392.487167][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted 6.14.0-rc7-syzkaller-00074-ga7f2e10ecd8f #0 [ 392.487203][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 392.487220][ T32] Call Trace: [ 392.487230][ T32] [ 392.487241][ T32] dump_stack_lvl+0x116/0x1f0 [ 392.487294][ T32] nmi_cpu_backtrace+0x27b/0x390 [ 392.487331][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 392.487375][ T32] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 392.487416][ T32] watchdog+0xf62/0x12b0 [ 392.487473][ T32] ? __pfx_watchdog+0x10/0x10 [ 392.487517][ T32] ? lockdep_hardirqs_on+0x7c/0x110 [ 392.487563][ T32] ? __kthread_parkme+0x148/0x220 [ 392.487596][ T32] ? __pfx_watchdog+0x10/0x10 [ 392.487645][ T32] kthread+0x3af/0x750 [ 392.487684][ T32] ? __pfx_kthread+0x10/0x10 [ 392.487736][ T32] ? __pfx_kthread+0x10/0x10 [ 392.487776][ T32] ret_from_fork+0x45/0x80 [ 392.487817][ T32] ? __pfx_kthread+0x10/0x10 [ 392.487853][ T32] ret_from_fork_asm+0x1a/0x30 [ 392.487905][ T32] [ 392.487915][ T32] Sending NMI from CPU 0 to CPUs 1: [ 392.626481][ C1] NMI backtrace for cpu 1 [ 392.626498][ C1] CPU: 1 UID: 0 PID: 62 Comm: kworker/u8:4 Not tainted 6.14.0-rc7-syzkaller-00074-ga7f2e10ecd8f #0 [ 392.626527][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 392.626544][ C1] Workqueue: events_unbound cfg80211_wiphy_work [ 392.626590][ C1] RIP: 0010:__kfence_alloc+0x1002/0x1660 [ 392.626634][ C1] Code: 4d 39 fe 73 46 49 bc 00 00 00 00 00 fc ff df 48 bd aa ab a8 a9 ae af ac ad e8 1a 6b 9d ff 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 <0f> 85 5e 04 00 00 49 89 2e 4c 8b 7b 68 49 83 c6 08 4c 89 f7 4c 89 [ 392.626659][ C1] RSP: 0018:ffffc9000213f420 EFLAGS: 00000246 [ 392.626678][ C1] RAX: 1ffff110477fbc49 RBX: ffff88823ffd71f0 RCX: ffffffff821c875e [ 392.626697][ C1] RDX: ffff88801bbfda00 RSI: ffffffff821c8736 RDI: 0000000000000006 [ 392.626713][ C1] RBP: adacafaea9a8abaa R08: 0000000000000006 R09: ffff88823bfde248 [ 392.626730][ C1] R10: ffff88823bfdec00 R11: ffffffff8adb6af0 R12: dffffc0000000000 [ 392.626747][ C1] R13: ffff88823bfdec00 R14: ffff88823bfde248 R15: ffff88823bfdec00 [ 392.626765][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 392.626788][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 392.626805][ C1] CR2: 00005600bb085048 CR3: 000000000df80000 CR4: 00000000003526f0 [ 392.626822][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 392.626837][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 392.626853][ C1] Call Trace: [ 392.626860][ C1] [ 392.626870][ C1] ? nmi_cpu_backtrace+0x1d8/0x390 [ 392.626902][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 392.626943][ C1] ? nmi_handle+0x1ac/0x5d0 [ 392.626981][ C1] ? __kfence_alloc+0x1002/0x1660 [ 392.627021][ C1] ? default_do_nmi+0x6a/0x160 [ 392.627048][ C1] ? exc_nmi+0x170/0x1e0 [ 392.627073][ C1] ? end_repeat_nmi+0xf/0x53 [ 392.627113][ C1] ? ieee802_11_parse_elems_full+0x1d0/0x3240 [ 392.627144][ C1] ? __kfence_alloc+0x101e/0x1660 [ 392.627182][ C1] ? __kfence_alloc+0xff6/0x1660 [ 392.627219][ C1] ? __kfence_alloc+0x1002/0x1660 [ 392.627259][ C1] ? __kfence_alloc+0x1002/0x1660 [ 392.627298][ C1] ? __kfence_alloc+0x1002/0x1660 [ 392.627336][ C1] [ 392.627344][ C1] [ 392.627356][ C1] ? __pfx___kfence_alloc+0x10/0x10 [ 392.627394][ C1] ? __kfence_alloc+0x21e/0x1660 [ 392.627432][ C1] ? __kmalloc_noprof+0x29f/0x510 [ 392.627470][ C1] ? ieee802_11_parse_elems_full+0x1d0/0x3240 [ 392.627499][ C1] ? ieee80211_ibss_rx_queued_mgmt+0xc4f/0x2f50 [ 392.627526][ C1] ? ieee80211_iface_work+0xc15/0xf50 [ 392.627552][ C1] ? cfg80211_wiphy_work+0x3ed/0x570 [ 392.627590][ C1] ? process_one_work+0x9c5/0x1ba0 [ 392.627624][ C1] ? worker_thread+0x6c8/0xf00 [ 392.627655][ C1] ? kthread+0x3af/0x750 [ 392.627684][ C1] ? ret_from_fork+0x45/0x80 [ 392.627718][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 392.627764][ C1] ? mark_lock+0xb5/0xc60 [ 392.627797][ C1] ? __pfx_mark_lock+0x10/0x10 [ 392.627829][ C1] ? hlock_class+0x4e/0x130 [ 392.627855][ C1] ? __lock_acquire+0x15a9/0x3c40 [ 392.627892][ C1] ? ieee802_11_parse_elems_full+0x1d0/0x3240 [ 392.627920][ C1] __kmalloc_noprof+0x29f/0x510 [ 392.627962][ C1] ? hlock_class+0x4e/0x130 [ 392.627987][ C1] ? print_usage_bug.part.0+0x680/0x680 [ 392.628025][ C1] ieee802_11_parse_elems_full+0x1d0/0x3240 [ 392.628054][ C1] ? mark_lock+0xb5/0xc60 [ 392.628086][ C1] ? __pfx_mark_lock+0x10/0x10 [ 392.628120][ C1] ? hlock_class+0x4e/0x130 [ 392.628145][ C1] ? mark_lock+0xb5/0xc60 [ 392.628176][ C1] ? mark_lock+0xb5/0xc60 [ 392.628210][ C1] ? __pfx_mark_lock+0x10/0x10 [ 392.628244][ C1] ? __pfx_mark_lock+0x10/0x10 [ 392.628280][ C1] ? __pfx_ieee802_11_parse_elems_full+0x10/0x10 [ 392.628310][ C1] ? __lock_acquire+0x15a9/0x3c40 [ 392.628349][ C1] ? hlock_class+0x4e/0x130 [ 392.628374][ C1] ? __lock_acquire+0x15a9/0x3c40 [ 392.628413][ C1] ieee80211_ibss_rx_queued_mgmt+0xc4f/0x2f50 [ 392.628441][ C1] ? hlock_class+0x4e/0x130 [ 392.628466][ C1] ? mark_lock+0xb5/0xc60 [ 392.628498][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 392.628532][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 392.628569][ C1] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 392.628598][ C1] ? lock_acquire.part.0+0x11b/0x380 [ 392.628633][ C1] ? find_held_lock+0x2d/0x110 [ 392.628659][ C1] ? find_held_lock+0x2d/0x110 [ 392.628687][ C1] ? kcov_remote_start+0x370/0x6e0 [ 392.628729][ C1] ? mark_held_locks+0x9f/0xe0 [ 392.628764][ C1] ? kcov_remote_start+0x3cf/0x6e0 [ 392.628807][ C1] ieee80211_iface_work+0xc15/0xf50 [ 392.628838][ C1] cfg80211_wiphy_work+0x3ed/0x570 [ 392.628879][ C1] process_one_work+0x9c5/0x1ba0 [ 392.628917][ C1] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 392.628959][ C1] ? __pfx_process_one_work+0x10/0x10 [ 392.628997][ C1] ? assign_work+0x1a0/0x250 [ 392.629030][ C1] worker_thread+0x6c8/0xf00 [ 392.629067][ C1] ? __kthread_parkme+0x148/0x220 [ 392.629092][ C1] ? __pfx_worker_thread+0x10/0x10 [ 392.629126][ C1] kthread+0x3af/0x750 [ 392.629156][ C1] ? __pfx_kthread+0x10/0x10 [ 392.629185][ C1] ? lock_acquire+0x2f/0xb0 [ 392.629222][ C1] ? __pfx_kthread+0x10/0x10 [ 392.629252][ C1] ret_from_fork+0x45/0x80 [ 392.629284][ C1] ? __pfx_kthread+0x10/0x10 [ 392.629314][ C1] ret_from_fork_asm+0x1a/0x30 [ 392.629348][ C1] [ 392.629830][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 393.260658][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted 6.14.0-rc7-syzkaller-00074-ga7f2e10ecd8f #0 [ 393.273262][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 393.285335][ T32] Call Trace: [ 393.289270][ T32] [ 393.292790][ T32] dump_stack_lvl+0x3d/0x1f0 [ 393.298325][ T32] panic+0x71d/0x800 [ 393.303105][ T32] ? __pfx_panic+0x10/0x10 [ 393.308419][ T32] ? preempt_schedule_thunk+0x1a/0x30 [ 393.314913][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 393.322107][ T32] ? preempt_schedule_thunk+0x1a/0x30 [ 393.328607][ T32] ? watchdog+0xdcc/0x12b0 [ 393.333930][ T32] ? watchdog+0xdbf/0x12b0 [ 393.339257][ T32] watchdog+0xddd/0x12b0 [ 393.344377][ T32] ? __pfx_watchdog+0x10/0x10 [ 393.350012][ T32] ? lockdep_hardirqs_on+0x7c/0x110 [ 393.356268][ T32] ? __kthread_parkme+0x148/0x220 [ 393.362302][ T32] ? __pfx_watchdog+0x10/0x10 [ 393.367976][ T32] kthread+0x3af/0x750 [ 393.372871][ T32] ? __pfx_kthread+0x10/0x10 [ 393.378396][ T32] ? __pfx_kthread+0x10/0x10 [ 393.383920][ T32] ret_from_fork+0x45/0x80 [ 393.389233][ T32] ? __pfx_kthread+0x10/0x10 [ 393.394750][ T32] ret_from_fork_asm+0x1a/0x30 [ 393.400486][ T32] [ 393.404460][ T32] Kernel Offset: disabled [ 393.409667][ T32] Rebooting in 86400 seconds..