last executing test programs: 22.859140675s ago: executing program 0 (id=1610): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_taskstats(&(0x7f0000000d80), r0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) adjtimex$auto(&(0x7f00000005c0)={0xf332b6e, 0x0, 0x0, 0x8, 0xd4, 0x7, 0x9, 0x0, 0x10001, 0x1, 0x2, {0x8, 0x10000}, 0x1, 0x6, 0xfffffffffffffffd, 0x1007ffe, 0x0, 0x80000004, 0x83, 0xffffffffffff628e, 0xa747, 0x1, 0x1800}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) r2 = openat$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/ieee80211/phy7/queues\x00', 0x20000, 0x0) setsockopt$auto(r2, 0x8001, 0xd, &(0x7f00000001c0)='.&-\x00', 0x101) read$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(r2, 0x0, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r4 = io_uring_setup$auto(0x6, 0x0) write$auto(0xca, &(0x7f0000000140)='\x04>\x01\x01\b\x1a\x1e`0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_fd=r2, r4, 0x4, 0x1ff, 0xffffffffffffffff, @relative_id=0x13, 0xe5fd}, 0xf) r7 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/ip_mr_vif\x00', 0x100, 0x0) pread64$auto(r7, 0x0, 0x3, 0x5) bpf$auto(0x4, &(0x7f00000001c0)=@bpf_attr_0={0x0, 0x5, 0x0, 0x7, 0xd5ab, r0, 0x3ff, "44198fa93d9bd939a3b0cc501a35552e", r5, r0, 0x2, 0x7fffffff, 0x381, 0x6, r6, r7}, 0xf) 2.657106045s ago: executing program 1 (id=1660): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000001100)='/proc/bus/pci/00/03.0\x00', 0xa0581, 0x0) write$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000001140)="8cbdca", 0x3) writev$auto(r0, &(0x7f0000001d40)={0x0, 0x2}, 0x6) openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, &(0x7f0000001680)='/sys/kernel/debug/tracing/uprobe_events\x00', 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0xa, 0x1, 0x100) ioperm$auto(0x7, 0x5ad2, 0x8) modify_ldt$auto(0x1, 0x0, 0x10) setsockopt$auto(0x400000000000003, 0x29, 0x1b, 0x0, 0x56b) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyd1\x00', 0x40, 0x0) mmap$auto(0xc, 0x20009, 0x5, 0xeb1, 0x405, 0x8000) openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write$auto(0x3, 0x0, 0xffd8) unshare$auto(0x40000080) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) process_mrelease$auto(0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x50b41, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) mincore$auto(0x1000, 0x8001, 0x0) fcntl$auto(0x8000000000000001, 0x7, 0x8) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) clone$auto(0x1, 0x800001, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x1d37) fcntl$auto(0x8000000000000001, 0x26, 0x8) mincore$auto(0x7, 0xc, &(0x7f0000000000)='/dev/ptyd1\x00') close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) 2.451845796s ago: executing program 2 (id=1661): fanotify_mark$auto(0xffffffffffffffff, 0x9, 0x8, 0xffffffffffffffff, 0x0) munmap$auto(0x0, 0x1) openat$auto_binder_features_fops_(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/features/oneway_spam_detection\x00', 0x10000, 0x0) 2.228839605s ago: executing program 2 (id=1662): syz_genetlink_get_family_id$auto_netdev(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match\x00', 0x20080, 0x0) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0xd4, 0x3, 0x6, 0x0, 0x200000000000001, 0x368e, 0x2, {0x100000000, 0x4}, 0xff, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x8000000c, 0x81, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x804}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) socket(0x15, 0x5, 0x0) ustat$auto(0x801, 0x0) socket(0x11, 0xa, 0x300) r2 = bpf$auto(0x0, 0x0, 0x6f4) listmount$auto(&(0x7f0000000040)={0x200, @inferred=r0, 0x7f, 0x81, 0x400}, &(0x7f0000000140)=0x10000, 0xf, 0x5) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/afs/rootcell\x00', 0x1cb842, 0x0) write$auto(r3, &(0x7f0000000300)='*o\xd3\xa49\xaf\xa9\xe4\xe17\x12\xb3Z\x17I\x82\xdc\xbeiw\xc1\xd1\x8d\x9b\r\x9aR\xe7\x9f\xd8\xab\x16`f\nT\xaa\xfap \xe6\xdaV\xdeD\x8dR5\xd2\xe58\n\xff\x19+\xeb\xb3+\xf6\xc6\a\x00\x00\x00\xf1A\xa5\x95\x1fk\x1f\xff\x99gP\x9e\x88\x97]\x93\xf4\xdd<\xe7p\x0e\xd4C\xdc\x84\v\xafz\xfd\x81\xa3\xb2\xbb\xa4\xd9\xf2P\xa8\xe9\x8f\x13\xa7\x98\x85\xf8\v\aB\xfc\xfa\x14E\xb8y\x884<\xa7\xffyb\x8a\b\xbb\x1b\x13W\xe3\xf7\xd8\x83\xc9\xd7\x8c', 0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) ioctl$auto_debugfs_full_proxy_file_operations_internal(r2, 0x3ff, &(0x7f0000000100)="a6dedc878bdbf04db31d61d74d30599b509aab") sendmsg$auto_CTRL_CMD_GETPOLICY(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)={0x1c, r5, 0x301, 0x70b52c, 0x25dfdbfb, {}, [@CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x17}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c01d}, 0x0) socket(0x2, 0x6, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 1.104027716s ago: executing program 3 (id=1663): mmap$auto(0x0, 0x20007, 0x4000000000df, 0xeb1, 0x401, 0xfffffffffffffffb) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/netdevsim0/accept_dad\x00', 0x2a581, 0x0) pwrite64$auto(r0, &(0x7f0000000000)='./cgroup/memory.pressure\x00', 0x6bc, 0x5) readahead$auto(r0, 0x4, 0x4) sysfs$auto(0x3, 0x401, 0x0) clone$auto(0x2, 0x40000f, 0x0, 0x0, 0x10000000003) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) r1 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, 0x0, 0x101440, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, 0x0) msync$auto(0x5, 0x7, 0x9) madvise$auto(0x0, 0x8000000000000000, 0x15) madvise$auto(0x0, 0x2000000080000001, 0x3) mmap$auto(0x0, 0x2020009, 0x40000000003, 0xeb1, 0xfffffffffffffffa, 0x8000) semget$auto(0x0, 0x13c, 0x1ff) recvmmsg$auto(0xffffffffffffffff, &(0x7f00000001c0)={{0x0, 0x1c, 0x0, 0x400000000000002, 0x0, 0x5, 0xfff}}, 0x7, 0x5, 0x0) semtimedop$auto(0x0, &(0x7f0000000140)={0x7, 0x81, 0x70}, 0x1f4, 0x0) mprotect$auto(0x0, 0xe6a, 0x6) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/tty34\x00', 0x8000, 0x0) r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto(r3, 0x80dc5521, r2) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x810) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) write$auto(r1, &(0x7f00000002c0)='+&\xc9I\xaar\x1c\xbb\xde\ah\x15,\xeb|\x85\xe8\x97Z\xc30\xae}\xa1\x17K(\x80]]\x8d\xb5\xeb-\x9d\xc1\xceU\xbb_\xcf\xe8#U\xd0_|\x15f\x92\xaa\x9f\xa0l}7z#u\xf6\xd1\xe1\x8d\x05=w\xf1\xb9K\xf4\\\a\xdf\x87\xbb\x03d6\xe1\x14\xb1|\x98\x82$\xf3\xb2\xcf\xb7\x7f\xf8f*/\xc2\x82\x8c2\x8d^\x10\xc6\x1cs', 0x4) 300.759039ms ago: executing program 2 (id=1664): syz_genetlink_get_family_id$auto_netdev(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x4000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2, 0x6, 0x0) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000fddbdf250800030008000300", @ANYRES32=r3], 0x24}, 0x1, 0x0, 0x0, 0x5c5fd097f751b33e}, 0x80) shmctl$auto_SHM_STAT(0x3, 0xd, &(0x7f00000001c0)={{0xa, 0xee00, 0x0, 0x9, 0x1ff, 0x5, 0x200}, 0x5, 0x0, 0x8, 0x8000000000000001, @inferred, @inferred=0xffffffffffffffff, 0x3, 0x0, &(0x7f00000000c0)="6c10673a3a3547095f435a8d35b8f93e83eee42856cc4a2e679680f2c523b9692bf54502f9e40644628d438251752e60cbb0b794cc9c20483db540be2c43fba79d7c32d33cd3ee838f099af4b00e893e8fb619ee490c707117112f43ef13b6b2d8a1", &(0x7f0000000140)="df63270fcfa80abb51e5c584adb5d4"}) shmctl$auto(0xd, 0x8, &(0x7f0000000240)={{0x80000000, r4, 0x0, 0xe7, 0x6, 0x5, 0xfffd}, 0x87, 0x1, 0xffff, 0x7fff, @raw, @raw=0xfffffc01, 0x3, 0x0, &(0x7f0000000500)="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", &(0x7f0000000300)="2ffb31452b961b80570d85cf7ea16918639054891b2b7eac204cb981362a31a57ce075e80cb4a5c3def1330775068dd07c87e96a0f0254b69ec2b923323c3a090883efebc328fcc878e0b53c1c736dd7863c401fe2fcff1cafbf3ab4b7a763742196554dcab63d64c3b496b64e760412fa733505f8755fb8ae5b82e37d043f06957e0962"}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)={0x30, r6, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x24004840}, 0x4000000) mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0x6, 0x8000) r7 = openat$auto_hpet_fops_hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x521182, 0x0) mmap$auto_hpet_fops_hpet(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x40010, r7, 0x9) syz_clone(0x1040000, 0x0, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 0 (id=1665): r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, &(0x7f0000000440)="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") mmap$auto(0x0, 0x20008, 0xdf, 0xeb1, r0, 0x8000) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) socket(0x21, 0x2, 0xae2e) socket(0x23, 0x80805, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/bonding/peer_notif_delay\x00', 0x101c00, 0x0) socket(0x2, 0xa, 0x693) socket(0xa, 0x801, 0x84) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptys0\x00', 0x101e81, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptyc7\x00', 0x189000, 0x0) openat$auto_proc_timens_offsets_operations_base(0xffffffffffffff9c, &(0x7f0000002440), 0x80c02, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/pci/00/01.3\x00', 0x100, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/queues/rx-8/rps_flow_cnt\x00', 0xa001, 0x0) openat$auto_objects_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x22702, 0x0) openat$auto_tracing_iter_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/trace_options\x00', 0x2, 0x0) socket(0x1d, 0x2, 0x2) r2 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) ioctl$auto_TIOCSTI2(r1, 0x5412, 0x0) socket(0x10, 0x800, 0x0) set_mempolicy$auto(0x6, &(0x7f0000000000)=0x3, 0x21) connect$auto(r2, &(0x7f0000000040)=@tipc=@name={0x1e, 0x2, 0x3, {{0x43, 0x4}, 0x2000002}}, 0xa) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) socket(0x1d, 0x3, 0x1) kernel console output (not intermixed with test programs): 992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 370.007342][ T9772] lowmem_reserve[]: 0 2484 2486 2486 2486 [ 370.007390][ T9772] Node 0 DMA32 free:1403480kB boost:0kB min:34108kB low:42632kB high:51156kB reserved_highatomic:0KB active_anon:65672kB inactive_anon:0kB active_file:53512kB inactive_file:157124kB unevictable:1536kB writepending:2148kB present:3129332kB managed:2544172kB mlocked:0kB bounce:0kB free_pcp:788kB local_pcp:232kB free_cma:0kB [ 370.007474][ T9772] lowmem_reserve[]: 0 0 1 1 1 [ 370.007537][ T9772] Node 0 Normal free:16kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1824kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 370.007608][ T9772] lowmem_reserve[]: 0 0 0 0 0 [ 370.007656][ T9772] Node 1 Normal free:2849536kB boost:0kB min:55768kB low:69708kB high:83648kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:8kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:7068kB local_pcp:7068kB free_cma:0kB [ 370.007732][ T9772] lowmem_reserve[]: 0 0 0 0 0 [ 370.007781][ T9772] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 370.007969][ T9772] Node 0 DMA32: 1689*4kB (UME) 1360*8kB (UME) 1093*16kB (UME) 706*32kB (UME) 549*64kB (UME) 238*128kB (UME) 179*256kB (UME) 88*512kB (UME) 50*1024kB (UME) 16*2048kB (UM) 270*4096kB (UME) = 1404084kB [ 370.008242][ T9772] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 370.008421][ T9772] Node 1 Normal: 6*4kB (UME) 5*8kB (UME) 6*16kB (UME) 57*32kB (UME) 101*64kB (UME) 26*128kB (UME) 13*256kB (UME) 4*512kB (UM) 6*1024kB (UME) 4*2048kB (UME) 688*4096kB (M) = 2849536kB [ 370.008711][ T9772] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 370.008739][ T9772] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 370.008766][ T9772] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=1048576kB [ 370.008792][ T9772] Node 1 hugepages_total=5 hugepages_free=5 hugepages_surp=0 hugepages_size=2048kB [ 370.008819][ T9772] 55675 total pagecache pages [ 370.008831][ T9772] 0 pages in swap cache [ 370.008843][ T9772] Free swap = 124996kB [ 370.008854][ T9772] Total swap = 124996kB [ 370.008867][ T9772] 2097051 pages RAM [ 370.008878][ T9772] 0 pages HighMem/MovableOnly [ 370.008889][ T9772] 428902 pages reserved [ 370.008900][ T9772] 0 pages cma reserved [ 370.407983][ T9787] netlink: 28 bytes leftover after parsing attributes in process `syz.3.819'. [ 371.036099][ T9787] team0: Port device team_slave_0 removed [ 371.897266][ T9823] netlink: 110 bytes leftover after parsing attributes in process `syz.2.824'. [ 371.980827][ T9825] netlink: 50 bytes leftover after parsing attributes in process `syz.2.824'. [ 372.693631][ T5838] Bluetooth: hci2: unexpected subevent 0x01 length: 4 < 18 [ 372.753281][ T30] audit: type=1800 audit(4294967718.734:37): pid=9844 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.828" name="dbroot" dev="configfs" ino=26694 res=0 errno=0 [ 375.058618][ T9865] busy [ 377.309181][ T9909] program syz.1.842 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 377.997899][ T9933] random: crng reseeded on system resumption [ 379.336440][ T9947] batman_adv: Routing algorithm '' is not supported [ 380.085687][ T9969] netlink: 28 bytes leftover after parsing attributes in process `syz.1.851'. [ 380.359764][ T9969] bond0: (slave bond_slave_0): Releasing backup interface [ 381.378516][ T5838] Bluetooth: hci1: unexpected subevent 0x01 length: 4 < 18 [ 381.553312][ T30] audit: type=1800 audit(4294967735.499:38): pid=9986 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.856" name="dbroot" dev="configfs" ino=26075 res=0 errno=0 [ 383.863718][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.870716][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 385.981510][ T5838] Bluetooth: hci1: unexpected subevent 0x01 length: 4 < 18 [ 386.077483][ T30] audit: type=1800 audit(4294967748.027:39): pid=10029 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.865" name="dbroot" dev="configfs" ino=26181 res=0 errno=0 [ 386.316193][T10033] netlink: 12 bytes leftover after parsing attributes in process `syz.2.867'. [ 387.935113][ T5838] Bluetooth: hci3: unexpected subevent 0x01 length: 3 < 18 [ 389.806142][T10036] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input14 [ 390.213069][T10087] netlink: 28 bytes leftover after parsing attributes in process `syz.3.876'. [ 390.377185][T10087] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.491334][T10087] bridge_slave_1 (unregistering): left allmulticast mode [ 390.517410][T10087] bridge_slave_1 (unregistering): left promiscuous mode [ 390.562176][T10087] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.708219][T10097] random: crng reseeded on system resumption [ 391.074411][T10105] netlink: 'syz.0.880': attribute type 1 has an invalid length. [ 391.169162][T10105] netlink: 306 bytes leftover after parsing attributes in process `syz.0.880'. [ 392.016590][T10133] netlink: 28 bytes leftover after parsing attributes in process `syz.3.883'. [ 392.097783][T10133] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 392.137246][T10133] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 394.673493][T10181] busy [ 395.194691][T10195] busy [ 395.534336][T10197] net_ratelimit: 19 callbacks suppressed [ 395.534361][T10197] netlink: zone id is out of range [ 395.554590][T10197] netlink: zone id is out of range [ 395.560394][T10197] netlink: zone id is out of range [ 395.710366][T10196] netlink: 28 bytes leftover after parsing attributes in process `syz.3.894'. [ 396.446550][T10216] FAULT_INJECTION: forcing a failure. [ 396.446550][T10216] name failslab, interval 1, probability 0, space 0, times 0 [ 396.481883][T10216] CPU: 1 UID: 0 PID: 10216 Comm: syz.3.897 Not tainted 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 PREEMPT(full) [ 396.481959][T10216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 396.481991][T10216] Call Trace: [ 396.482001][T10216] [ 396.482013][T10216] dump_stack_lvl+0x16c/0x1f0 [ 396.482065][T10216] should_fail_ex+0x512/0x640 [ 396.482111][T10216] ? __kmalloc_noprof+0xbf/0x510 [ 396.482149][T10216] ? __register_sysctl_table+0xea2/0x1900 [ 396.482184][T10216] should_failslab+0xc2/0x120 [ 396.482223][T10216] __kmalloc_noprof+0xd2/0x510 [ 396.482255][T10216] ? __register_sysctl_table+0xe8e/0x1900 [ 396.482302][T10216] __register_sysctl_table+0xea2/0x1900 [ 396.482348][T10216] ? __pfx___register_sysctl_table+0x10/0x10 [ 396.482385][T10216] ? is_module_address+0x69/0xf0 [ 396.482427][T10216] ? register_net_sysctl_sz+0x228/0x3e0 [ 396.482495][T10216] __devinet_sysctl_register+0x1b9/0x360 [ 396.482545][T10216] ? __pfx___devinet_sysctl_register+0x10/0x10 [ 396.482584][T10216] ? trace_kmalloc+0x2b/0xd0 [ 396.482630][T10216] ? devinet_init_net+0xeb/0x910 [ 396.482671][T10216] ? __asan_memcpy+0x3c/0x60 [ 396.482727][T10216] devinet_init_net+0x315/0x910 [ 396.482770][T10216] ? __pfx_devinet_init_net+0x10/0x10 [ 396.482810][T10216] ops_init+0x1df/0x5f0 [ 396.482854][T10216] setup_net+0x21e/0x850 [ 396.482896][T10216] ? __pfx_setup_net+0x10/0x10 [ 396.482932][T10216] ? lockdep_init_map_type+0x5c/0x280 [ 396.482975][T10216] ? __pfx_down_read_killable+0x10/0x10 [ 396.483032][T10216] ? debug_mutex_init+0x37/0x70 [ 396.483088][T10216] copy_net_ns+0x2a6/0x5f0 [ 396.483140][T10216] create_new_namespaces+0x3ea/0xad0 [ 396.483184][T10216] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 396.483224][T10216] ksys_unshare+0x45b/0xa40 [ 396.483267][T10216] ? __pfx_ksys_unshare+0x10/0x10 [ 396.483307][T10216] ? xfd_validate_state+0x5d/0x180 [ 396.483361][T10216] ? rcu_is_watching+0x12/0xc0 [ 396.483401][T10216] __x64_sys_unshare+0x31/0x40 [ 396.483445][T10216] do_syscall_64+0xcd/0x230 [ 396.483502][T10216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.483536][T10216] RIP: 0033:0x7f8f5e38e969 [ 396.483564][T10216] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 396.483595][T10216] RSP: 002b:00007f8f5f1f8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 396.483626][T10216] RAX: ffffffffffffffda RBX: 00007f8f5e5b5fa0 RCX: 00007f8f5e38e969 [ 396.483646][T10216] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 396.483663][T10216] RBP: 00007f8f5e410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 396.483679][T10216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 396.483695][T10216] R13: 0000000000000000 R14: 00007f8f5e5b5fa0 R15: 00007fffb7911918 [ 396.483729][T10216] [ 396.805446][T10216] sysctl could not get directory: /net/ipv4/conf -12 [ 398.199140][T10238] busy [ 402.024697][T10290] netlink: 4 bytes leftover after parsing attributes in process `syz.0.910'. [ 402.287255][T10300] FAULT_INJECTION: forcing a failure. [ 402.287255][T10300] name failslab, interval 1, probability 0, space 0, times 0 [ 402.347398][T10300] CPU: 0 UID: 0 PID: 10300 Comm: syz.0.912 Not tainted 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 PREEMPT(full) [ 402.347441][T10300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 402.347460][T10300] Call Trace: [ 402.347470][T10300] [ 402.347482][T10300] dump_stack_lvl+0x16c/0x1f0 [ 402.347529][T10300] should_fail_ex+0x512/0x640 [ 402.347573][T10300] ? fs_reclaim_acquire+0xae/0x150 [ 402.347622][T10300] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 402.347677][T10300] should_failslab+0xc2/0x120 [ 402.347715][T10300] __kmalloc_noprof+0xd2/0x510 [ 402.347761][T10300] tomoyo_realpath_from_path+0xc2/0x6e0 [ 402.347818][T10300] tomoyo_check_open_permission+0x2ab/0x3c0 [ 402.347860][T10300] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 402.347940][T10300] ? find_held_lock+0x2b/0x80 [ 402.347981][T10300] tomoyo_file_open+0x6b/0x90 [ 402.348032][T10300] security_file_open+0x84/0x1e0 [ 402.348075][T10300] do_dentry_open+0x596/0x1c10 [ 402.348120][T10300] vfs_open+0x82/0x3f0 [ 402.348167][T10300] path_openat+0x1e5e/0x2d40 [ 402.348212][T10300] ? __pfx_path_openat+0x10/0x10 [ 402.348251][T10300] do_filp_open+0x20b/0x470 [ 402.348282][T10300] ? __pfx_do_filp_open+0x10/0x10 [ 402.348327][T10300] ? __pfx_kfree_link+0x10/0x10 [ 402.348382][T10300] ? alloc_fd+0x471/0x7d0 [ 402.348442][T10300] do_sys_openat2+0x11b/0x1d0 [ 402.348484][T10300] ? __pfx_do_sys_openat2+0x10/0x10 [ 402.348528][T10300] ? find_held_lock+0x2b/0x80 [ 402.348568][T10300] __x64_sys_openat+0x174/0x210 [ 402.348609][T10300] ? __pfx___x64_sys_openat+0x10/0x10 [ 402.348677][T10300] do_syscall_64+0xcd/0x230 [ 402.348724][T10300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.348757][T10300] RIP: 0033:0x7f4f8798d2d0 [ 402.348782][T10300] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 402.348812][T10300] RSP: 002b:00007f4f887adfe0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 402.348841][T10300] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f4f8798d2d0 [ 402.348860][T10300] RDX: 0000000000000002 RSI: 00007f4f87a10d96 RDI: 00000000ffffff9c [ 402.348879][T10300] RBP: 00007f4f87a10d96 R08: 0000000000000000 R09: 00007f4f887af000 [ 402.348899][T10300] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 402.348919][T10300] R13: 0000000000000000 R14: 00007f4f87bb5fa0 R15: 00007ffe5f8f9778 [ 402.348960][T10300] [ 402.348972][T10300] ERROR: Out of memory at tomoyo_realpath_from_path. [ 402.638887][T10300] FAULT_INJECTION: forcing a failure. [ 402.638887][T10300] name failslab, interval 1, probability 0, space 0, times 0 [ 402.656245][T10300] CPU: 0 UID: 0 PID: 10300 Comm: syz.0.912 Not tainted 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 PREEMPT(full) [ 402.656287][T10300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 402.656304][T10300] Call Trace: [ 402.656313][T10300] [ 402.656325][T10300] dump_stack_lvl+0x16c/0x1f0 [ 402.656372][T10300] should_fail_ex+0x512/0x640 [ 402.656414][T10300] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 402.656469][T10300] should_failslab+0xc2/0x120 [ 402.656508][T10300] __kmalloc_cache_noprof+0x6a/0x3e0 [ 402.656559][T10300] ? apparmor_capable+0x114/0x1d0 [ 402.656588][T10300] ? fsnotify_alloc_group+0x92/0x330 [ 402.656640][T10300] fsnotify_alloc_group+0x92/0x330 [ 402.656698][T10300] __do_sys_fanotify_init+0x21f/0xb80 [ 402.656735][T10300] ? rcu_is_watching+0x12/0xc0 [ 402.656767][T10300] do_syscall_64+0xcd/0x230 [ 402.656814][T10300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.656846][T10300] RIP: 0033:0x7f4f8798e969 [ 402.656870][T10300] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 402.656902][T10300] RSP: 002b:00007f4f887ae038 EFLAGS: 00000246 ORIG_RAX: 000000000000012c [ 402.656931][T10300] RAX: ffffffffffffffda RBX: 00007f4f87bb5fa0 RCX: 00007f4f8798e969 [ 402.656951][T10300] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 00000000000004f1 [ 402.656970][T10300] RBP: 00007f4f887ae090 R08: 0000000000000000 R09: 0000000000000000 [ 402.656988][T10300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 402.657007][T10300] R13: 0000000000000000 R14: 00007f4f87bb5fa0 R15: 00007ffe5f8f9778 [ 402.657047][T10300] [ 403.123349][ T5838] Bluetooth: hci2: unexpected subevent 0x01 length: 4 < 18 [ 403.201878][ T30] audit: type=1800 audit(4294967773.168:40): pid=10312 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.915" name="dbroot" dev="configfs" ino=27961 res=0 errno=0 [ 403.759137][ T5838] Bluetooth: hci3: unexpected subevent 0x01 length: 4 < 18 [ 404.483866][T10316] busy [ 406.002450][T10340] netlink: 'syz.3.921': attribute type 4 has an invalid length. [ 406.236523][T10348] ubi0: attaching mtd0 [ 406.260235][T10348] ubi0: scanning is finished [ 406.295691][T10348] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 406.493341][T10348] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 406.560756][T10350] FAULT_INJECTION: forcing a failure. [ 406.560756][T10350] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 406.575896][T10350] CPU: 0 UID: 0 PID: 10350 Comm: syz.1.924 Not tainted 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 PREEMPT(full) [ 406.575938][T10350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 406.575956][T10350] Call Trace: [ 406.575966][T10350] [ 406.575978][T10350] dump_stack_lvl+0x16c/0x1f0 [ 406.576025][T10350] should_fail_ex+0x512/0x640 [ 406.576075][T10350] _copy_from_user+0x2e/0xd0 [ 406.576125][T10350] kstrtouint_from_user+0xd6/0x1d0 [ 406.576162][T10350] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 406.576197][T10350] ? __lock_acquire+0xaa4/0x1ba0 [ 406.576257][T10350] proc_fail_nth_write+0x83/0x250 [ 406.576344][T10350] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 406.576402][T10350] vfs_write+0x25c/0x1180 [ 406.576428][T10350] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 406.576479][T10350] ? __pfx___mutex_lock+0x10/0x10 [ 406.576523][T10350] ? __pfx_vfs_write+0x10/0x10 [ 406.576563][T10350] ? __fget_files+0x20e/0x3c0 [ 406.576626][T10350] ksys_write+0x12a/0x240 [ 406.576655][T10350] ? __pfx_ksys_write+0x10/0x10 [ 406.576681][T10350] ? rcu_is_watching+0x12/0xc0 [ 406.576723][T10350] do_syscall_64+0xcd/0x230 [ 406.576769][T10350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.576801][T10350] RIP: 0033:0x7f42e278d41f [ 406.576826][T10350] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 406.576857][T10350] RSP: 002b:00007f42e3659030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 406.576885][T10350] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f42e278d41f [ 406.576905][T10350] RDX: 0000000000000001 RSI: 00007f42e3659090 RDI: 0000000000000005 [ 406.576924][T10350] RBP: 00007f42e3659090 R08: 0000000000000000 R09: 00007f42e3658df7 [ 406.576944][T10350] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 406.576962][T10350] R13: 0000000000000000 R14: 00007f42e29b5fa0 R15: 00007ffe5e956c08 [ 406.577004][T10350] [ 407.099043][T10352] Invalid ELF header magic: != ELF [ 407.107828][T10356] FAULT_INJECTION: forcing a failure. [ 407.107828][T10356] name failslab, interval 1, probability 0, space 0, times 0 [ 407.137589][T10356] CPU: 1 UID: 0 PID: 10356 Comm: syz.0.926 Not tainted 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 PREEMPT(full) [ 407.137643][T10356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 407.137663][T10356] Call Trace: [ 407.137676][T10356] [ 407.137688][T10356] dump_stack_lvl+0x16c/0x1f0 [ 407.137741][T10356] should_fail_ex+0x512/0x640 [ 407.137790][T10356] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 407.137833][T10356] should_failslab+0xc2/0x120 [ 407.137877][T10356] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 407.137917][T10356] ? security_file_alloc+0x34/0x2b0 [ 407.137969][T10356] security_file_alloc+0x34/0x2b0 [ 407.138014][T10356] init_file+0x93/0x4c0 [ 407.138057][T10356] alloc_empty_file+0x73/0x1e0 [ 407.138101][T10356] alloc_file_pseudo+0x13a/0x230 [ 407.138148][T10356] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 407.138193][T10356] ? alloc_fd+0x471/0x7d0 [ 407.138252][T10356] __anon_inode_getfile+0xf7/0x370 [ 407.138316][T10356] anon_inode_getfile_fmode+0x37/0xa0 [ 407.138381][T10356] __do_sys_fanotify_init+0x8e3/0xb80 [ 407.138431][T10356] do_syscall_64+0xcd/0x230 [ 407.138483][T10356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.138534][T10356] RIP: 0033:0x7f4f8798e969 [ 407.138561][T10356] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 407.138598][T10356] RSP: 002b:00007f4f887ae038 EFLAGS: 00000246 ORIG_RAX: 000000000000012c [ 407.138629][T10356] RAX: ffffffffffffffda RBX: 00007f4f87bb5fa0 RCX: 00007f4f8798e969 [ 407.138656][T10356] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 00000000000004f1 [ 407.138676][T10356] RBP: 00007f4f87a10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 407.138696][T10356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 407.138716][T10356] R13: 0000000000000000 R14: 00007f4f87bb5fa0 R15: 00007ffe5f8f9778 [ 407.138761][T10356] [ 407.197178][T10360] FAULT_INJECTION: forcing a failure. [ 407.197178][T10360] name failslab, interval 1, probability 0, space 0, times 0 [ 407.398549][T10360] CPU: 0 UID: 0 PID: 10360 Comm: syz.3.927 Not tainted 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 PREEMPT(full) [ 407.398600][T10360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 407.398621][T10360] Call Trace: [ 407.398632][T10360] [ 407.398644][T10360] dump_stack_lvl+0x16c/0x1f0 [ 407.398697][T10360] should_fail_ex+0x512/0x640 [ 407.398743][T10360] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 407.398787][T10360] should_failslab+0xc2/0x120 [ 407.398827][T10360] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 407.398868][T10360] ? __d_alloc+0x31/0xaa0 [ 407.398908][T10360] __d_alloc+0x31/0xaa0 [ 407.398948][T10360] d_alloc_pseudo+0x1c/0xc0 [ 407.398991][T10360] alloc_file_pseudo+0xcf/0x230 [ 407.399037][T10360] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 407.399081][T10360] ? alloc_fd+0x471/0x7d0 [ 407.399137][T10360] __anon_inode_getfile+0xf7/0x370 [ 407.399196][T10360] anon_inode_getfile_fmode+0x37/0xa0 [ 407.399252][T10360] __do_sys_fanotify_init+0x8e3/0xb80 [ 407.399298][T10360] do_syscall_64+0xcd/0x230 [ 407.399357][T10360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.399391][T10360] RIP: 0033:0x7f8f5e38e969 [ 407.399418][T10360] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 407.399450][T10360] RSP: 002b:00007f8f5f1f8038 EFLAGS: 00000246 ORIG_RAX: 000000000000012c [ 407.399483][T10360] RAX: ffffffffffffffda RBX: 00007f8f5e5b5fa0 RCX: 00007f8f5e38e969 [ 407.399505][T10360] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 00000000000004f1 [ 407.399540][T10360] RBP: 00007f8f5e410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 407.399568][T10360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 407.399593][T10360] R13: 0000000000000000 R14: 00007f8f5e5b5fa0 R15: 00007fffb7911918 [ 407.399635][T10360] [ 408.133353][T10371] netlink: 28 bytes leftover after parsing attributes in process `syz.0.930'. [ 408.986387][T10384] busy [ 412.121032][T10436] FAULT_INJECTION: forcing a failure. [ 412.121032][T10436] name fail_futex, interval 1, probability 0, space 0, times 0 [ 412.148146][T10436] CPU: 1 UID: 0 PID: 10436 Comm: syz.0.940 Not tainted 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 PREEMPT(full) [ 412.148197][T10436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 412.148218][T10436] Call Trace: [ 412.148229][T10436] [ 412.148242][T10436] dump_stack_lvl+0x16c/0x1f0 [ 412.148293][T10436] should_fail_ex+0x512/0x640 [ 412.148347][T10436] get_futex_key+0x49e/0x1000 [ 412.148387][T10436] ? __pfx_get_futex_key+0x10/0x10 [ 412.148418][T10436] ? find_held_lock+0x2b/0x80 [ 412.148452][T10436] ? __fget_files+0x204/0x3c0 [ 412.148512][T10436] futex_wake+0xe7/0x4e0 [ 412.148558][T10436] ? __pfx_futex_wake+0x10/0x10 [ 412.148618][T10436] do_futex+0x1e3/0x350 [ 412.148654][T10436] ? __pfx_do_futex+0x10/0x10 [ 412.148701][T10436] __x64_sys_futex+0x1e0/0x4c0 [ 412.148743][T10436] ? __pfx___x64_sys_futex+0x10/0x10 [ 412.148780][T10436] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 412.148829][T10436] ? rcu_is_watching+0x12/0xc0 [ 412.148872][T10436] do_syscall_64+0xcd/0x230 [ 412.148921][T10436] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.148953][T10436] RIP: 0033:0x7f4f8798e969 [ 412.148978][T10436] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 412.149011][T10436] RSP: 002b:00007f4f887ae0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 412.149042][T10436] RAX: ffffffffffffffda RBX: 00007f4f87bb5fa8 RCX: 00007f4f8798e969 [ 412.149063][T10436] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f4f87bb5fac [ 412.149090][T10436] RBP: 00007f4f87bb5fa0 R08: 00007f4f887af000 R09: 0000000000000000 [ 412.149111][T10436] R10: ffffffffffffffff R11: 0000000000000246 R12: 00007f4f87bb5fac [ 412.149131][T10436] R13: 0000000000000000 R14: 00007ffe5f8f9690 R15: 00007ffe5f8f9778 [ 412.149173][T10436] [ 412.918453][T10444] netlink: 12 bytes leftover after parsing attributes in process `syz.1.941'. [ 413.068441][T10448] FAULT_INJECTION: forcing a failure. [ 413.068441][T10448] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 413.105594][T10448] CPU: 0 UID: 0 PID: 10448 Comm: syz.0.942 Not tainted 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 PREEMPT(full) [ 413.105639][T10448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 413.105657][T10448] Call Trace: [ 413.105667][T10448] [ 413.105679][T10448] dump_stack_lvl+0x16c/0x1f0 [ 413.105737][T10448] should_fail_ex+0x512/0x640 [ 413.105786][T10448] should_fail_alloc_page+0xe7/0x130 [ 413.105827][T10448] prepare_alloc_pages+0x3c2/0x610 [ 413.105876][T10448] ? rcu_is_watching+0x12/0xc0 [ 413.105911][T10448] __alloc_frozen_pages_noprof+0x18f/0x23a0 [ 413.105972][T10448] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 413.106010][T10448] ? do_raw_spin_lock+0x12c/0x2b0 [ 413.106057][T10448] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 413.106106][T10448] ? find_held_lock+0x2b/0x80 [ 413.106148][T10448] ? __lock_acquire+0xaa4/0x1ba0 [ 413.106190][T10448] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 413.106236][T10448] ? policy_nodemask+0xea/0x4e0 [ 413.106278][T10448] alloc_pages_mpol+0x1fb/0x550 [ 413.106318][T10448] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 413.106370][T10448] folio_alloc_mpol_noprof+0x36/0x2f0 [ 413.106418][T10448] shmem_alloc_folio+0x135/0x160 [ 413.106470][T10448] shmem_alloc_and_add_folio+0x499/0xc20 [ 413.106518][T10448] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 413.106560][T10448] ? shmem_allowable_huge_orders+0xcb/0x2f0 [ 413.106605][T10448] shmem_get_folio_gfp+0x687/0x1530 [ 413.106652][T10448] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 413.106692][T10448] ? filemap_map_pages+0xf6c/0x1680 [ 413.106770][T10448] shmem_fault+0x1fe/0xa30 [ 413.106811][T10448] ? __pfx_shmem_fault+0x10/0x10 [ 413.106857][T10448] ? __pfx_filemap_map_pages+0x10/0x10 [ 413.106909][T10448] __do_fault+0x10a/0x490 [ 413.106953][T10448] do_pte_missing+0x1031/0x3fb0 [ 413.106999][T10448] __handle_mm_fault+0x103d/0x2a40 [ 413.107044][T10448] ? __pfx___handle_mm_fault+0x10/0x10 [ 413.107102][T10448] ? find_vma+0xbf/0x140 [ 413.107143][T10448] ? __pfx_find_vma+0x10/0x10 [ 413.107192][T10448] handle_mm_fault+0x3fe/0xad0 [ 413.107232][T10448] do_user_addr_fault+0x7a6/0x1370 [ 413.107269][T10448] ? rcu_is_watching+0x12/0xc0 [ 413.107302][T10448] exc_page_fault+0x5c/0xc0 [ 413.107343][T10448] asm_exc_page_fault+0x26/0x30 [ 413.107375][T10448] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 413.107409][T10448] Code: cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 413.107439][T10448] RSP: 0018:ffffc900037dfa58 EFLAGS: 00050206 [ 413.107464][T10448] RAX: 0000000000000001 RBX: 0000000000001000 RCX: 0000000000001000 [ 413.107484][T10448] RDX: 0000000000000000 RSI: 000000000002a000 RDI: ffff88802570b000 [ 413.107504][T10448] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed1004ae17ff [ 413.107523][T10448] R10: ffff88802570bfff R11: 0000000000000000 R12: 000000000002a000 [ 413.107542][T10448] R13: ffffc900037dfda0 R14: 000000000002b000 R15: ffff88802570b000 [ 413.107585][T10448] _copy_from_iter+0x391/0x15b0 [ 413.107641][T10448] ? policy_nodemask+0xea/0x4e0 [ 413.107677][T10448] ? __pfx__copy_from_iter+0x10/0x10 [ 413.107730][T10448] ? alloc_pages_mpol+0x25a/0x550 [ 413.107770][T10448] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 413.107819][T10448] copy_page_from_iter+0xa5/0x120 [ 413.107871][T10448] anon_pipe_write+0xbe7/0x1a70 [ 413.107920][T10448] ? __pfx_anon_pipe_write+0x10/0x10 [ 413.107954][T10448] ? __pfx_autoremove_wake_function+0x10/0x10 [ 413.107996][T10448] ? bpf_lsm_file_permission+0x9/0x10 [ 413.108045][T10448] ? security_file_permission+0x71/0x210 [ 413.108085][T10448] ? rw_verify_area+0xcf/0x680 [ 413.108136][T10448] vfs_write+0x5ba/0x1180 [ 413.108167][T10448] ? __pfx_anon_pipe_write+0x10/0x10 [ 413.108204][T10448] ? __pfx_vfs_write+0x10/0x10 [ 413.108231][T10448] ? find_held_lock+0x2b/0x80 [ 413.108288][T10448] ksys_write+0x205/0x240 [ 413.108317][T10448] ? __pfx_ksys_write+0x10/0x10 [ 413.108344][T10448] ? rcu_is_watching+0x12/0xc0 [ 413.108386][T10448] do_syscall_64+0xcd/0x230 [ 413.108433][T10448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.108464][T10448] RIP: 0033:0x7f4f8798e969 [ 413.108488][T10448] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 413.108518][T10448] RSP: 002b:00007f4f8878d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 413.108546][T10448] RAX: ffffffffffffffda RBX: 00007f4f87bb6080 RCX: 00007f4f8798e969 [ 413.108568][T10448] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 413.108586][T10448] RBP: 00007f4f87a10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 413.108605][T10448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 413.108624][T10448] R13: 0000000000000000 R14: 00007f4f87bb6080 R15: 00007ffe5f8f9778 [ 413.108666][T10448] [ 415.259684][ T5838] Bluetooth: hci3: unexpected subevent 0x01 length: 4 < 18 [ 415.401461][ T30] audit: type=1800 audit(4294967793.388:41): pid=10478 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.949" name="dbroot" dev="configfs" ino=29002 res=0 errno=0 [ 416.443311][T10492] busy [ 418.803792][T10514] netlink: 206 bytes leftover after parsing attributes in process `syz.0.954'. [ 420.085820][ T5838] Bluetooth: hci0: unexpected subevent 0x01 length: 4 < 18 [ 420.235766][ T30] audit: type=1800 audit(4294967806.211:42): pid=10556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.961" name="dbroot" dev="configfs" ino=28446 res=0 errno=0 [ 422.145500][T10562] busy [ 425.646287][T10616] FAULT_INJECTION: forcing a failure. [ 425.646287][T10616] name failslab, interval 1, probability 0, space 0, times 0 [ 425.843285][T10616] CPU: 1 UID: 0 PID: 10616 Comm: syz.2.975 Not tainted 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 PREEMPT(full) [ 425.843338][T10616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 425.843358][T10616] Call Trace: [ 425.843369][T10616] [ 425.843382][T10616] dump_stack_lvl+0x16c/0x1f0 [ 425.843434][T10616] should_fail_ex+0x512/0x640 [ 425.843480][T10616] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 425.843523][T10616] should_failslab+0xc2/0x120 [ 425.843562][T10616] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 425.843601][T10616] ? security_file_alloc+0x34/0x2b0 [ 425.843649][T10616] security_file_alloc+0x34/0x2b0 [ 425.843701][T10616] init_file+0x93/0x4c0 [ 425.843742][T10616] alloc_empty_file+0x73/0x1e0 [ 425.843785][T10616] alloc_file_pseudo+0x13a/0x230 [ 425.843831][T10616] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 425.843875][T10616] ? alloc_fd+0x471/0x7d0 [ 425.843931][T10616] __anon_inode_getfile+0xf7/0x370 [ 425.843991][T10616] anon_inode_getfile_fmode+0x37/0xa0 [ 425.844044][T10616] __do_sys_fanotify_init+0x8e3/0xb80 [ 425.844090][T10616] do_syscall_64+0xcd/0x230 [ 425.844136][T10616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.844170][T10616] RIP: 0033:0x7fe1bb18e969 [ 425.844196][T10616] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 425.844227][T10616] RSP: 002b:00007fe1bbf13038 EFLAGS: 00000246 ORIG_RAX: 000000000000012c [ 425.844264][T10616] RAX: ffffffffffffffda RBX: 00007fe1bb3b5fa0 RCX: 00007fe1bb18e969 [ 425.844285][T10616] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 00000000000004f1 [ 425.844305][T10616] RBP: 00007fe1bb210ab1 R08: 0000000000000000 R09: 0000000000000000 [ 425.844325][T10616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 425.844343][T10616] R13: 0000000000000000 R14: 00007fe1bb3b5fa0 R15: 00007ffcf9a79918 [ 425.844385][T10616] [ 427.575528][ T5838] Bluetooth: hci0: unexpected subevent 0x01 length: 4 < 18 [ 427.657196][ T5838] Bluetooth: hci2: unexpected subevent 0x01 length: 4 < 18 [ 427.671339][ T30] audit: type=1800 audit(4294967829.651:43): pid=10663 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.986" name="dbroot" dev="configfs" ino=28607 res=0 errno=0 [ 430.551121][T10699] warning: `syz.1.994' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 431.566780][T10731] busy [ 433.907162][T10779] busy [ 435.222081][T10801] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1017'. [ 435.265111][T10802] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1017'. [ 436.397553][T10813] Invalid ELF header magic: != ELF [ 436.617740][T10821] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input15 [ 438.113425][T10839] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 438.121396][T10839] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 438.129003][T10839] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 438.163671][T10839] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 438.511082][T10853] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1027'. [ 439.259204][ T5838] Bluetooth: hci2: unexpected subevent 0x01 length: 4 < 18 [ 439.352582][ T30] audit: type=1800 audit(4294967849.336:44): pid=10867 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1030" name="dbroot" dev="configfs" ino=29976 res=0 errno=0 [ 440.015011][ T5838] Bluetooth: hci0: command 0x0c1a tx timeout [ 440.174706][ T5838] Bluetooth: hci3: command 0x0c1a tx timeout [ 440.182471][ T5140] Bluetooth: hci2: command 0x0c1a tx timeout [ 440.191172][ T55] Bluetooth: hci1: command 0x0c1a tx timeout [ 441.089233][T10883] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 441.124535][T10883] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 442.529747][T10906] busy [ 443.378792][T10919] busy [ 444.038331][T10926] FAULT_INJECTION: forcing a failure. [ 444.038331][T10926] name failslab, interval 1, probability 0, space 0, times 0 [ 444.092461][T10926] CPU: 0 UID: 0 PID: 10926 Comm: syz.0.1041 Not tainted 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 PREEMPT(full) [ 444.092510][T10926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 444.092529][T10926] Call Trace: [ 444.092540][T10926] [ 444.092552][T10926] dump_stack_lvl+0x16c/0x1f0 [ 444.092603][T10926] should_fail_ex+0x512/0x640 [ 444.092649][T10926] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 444.092691][T10926] should_failslab+0xc2/0x120 [ 444.092732][T10926] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 444.092769][T10926] ? security_file_alloc+0x34/0x2b0 [ 444.092820][T10926] security_file_alloc+0x34/0x2b0 [ 444.092864][T10926] init_file+0x93/0x4c0 [ 444.092905][T10926] alloc_empty_file+0x73/0x1e0 [ 444.092947][T10926] alloc_file_pseudo+0x13a/0x230 [ 444.092992][T10926] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 444.093036][T10926] ? alloc_fd+0x471/0x7d0 [ 444.093092][T10926] __anon_inode_getfile+0xf7/0x370 [ 444.093154][T10926] anon_inode_getfile_fmode+0x37/0xa0 [ 444.093208][T10926] __do_sys_fanotify_init+0x8e3/0xb80 [ 444.093254][T10926] do_syscall_64+0xcd/0x230 [ 444.093303][T10926] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.093336][T10926] RIP: 0033:0x7f4f8798e969 [ 444.093361][T10926] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 444.093407][T10926] RSP: 002b:00007f4f887ae038 EFLAGS: 00000246 ORIG_RAX: 000000000000012c [ 444.093448][T10926] RAX: ffffffffffffffda RBX: 00007f4f87bb5fa0 RCX: 00007f4f8798e969 [ 444.093470][T10926] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 00000000000004f1 [ 444.093490][T10926] RBP: 00007f4f87a10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 444.093509][T10926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 444.093527][T10926] R13: 0000000000000000 R14: 00007f4f87bb5fa0 R15: 00007ffe5f8f9778 [ 444.093558][T10926] [ 444.732673][ T5838] Bluetooth: hci0: unexpected subevent 0x01 length: 4 < 18 [ 444.953484][ T30] audit: type=1800 audit(4294967862.898:45): pid=10932 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1042" name="dbroot" dev="configfs" ino=30847 res=0 errno=0 [ 445.316734][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.325601][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 448.149914][T10955] CIFS mount error: No usable UNC path provided in device string! [ 448.149914][T10955] [ 448.161479][T10955] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 448.959106][T10961] busy [ 452.164137][ T30] audit: type=1800 audit(4294967870.158:46): pid=10998 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1063" name="lu_gp_id" dev="configfs" ino=30990 res=0 errno=0 [ 453.309528][T11019] FAULT_INJECTION: forcing a failure. [ 453.309528][T11019] name failslab, interval 1, probability 0, space 0, times 0 [ 453.333789][T11019] CPU: 1 UID: 0 PID: 11019 Comm: syz.3.1060 Not tainted 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 PREEMPT(full) [ 453.333837][T11019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 453.333857][T11019] Call Trace: [ 453.333867][T11019] [ 453.333880][T11019] dump_stack_lvl+0x16c/0x1f0 [ 453.333930][T11019] should_fail_ex+0x512/0x640 [ 453.333976][T11019] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 453.334016][T11019] should_failslab+0xc2/0x120 [ 453.334057][T11019] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 453.334094][T11019] ? security_file_alloc+0x34/0x2b0 [ 453.334143][T11019] security_file_alloc+0x34/0x2b0 [ 453.334185][T11019] init_file+0x93/0x4c0 [ 453.334235][T11019] alloc_empty_file+0x73/0x1e0 [ 453.334278][T11019] alloc_file_pseudo+0x13a/0x230 [ 453.334323][T11019] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 453.334367][T11019] ? alloc_fd+0x471/0x7d0 [ 453.334422][T11019] __anon_inode_getfile+0xf7/0x370 [ 453.334482][T11019] anon_inode_getfile_fmode+0x37/0xa0 [ 453.334538][T11019] __do_sys_fanotify_init+0x8e3/0xb80 [ 453.334585][T11019] do_syscall_64+0xcd/0x230 [ 453.334633][T11019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.334666][T11019] RIP: 0033:0x7f8f5e38e969 [ 453.334697][T11019] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 453.334729][T11019] RSP: 002b:00007f8f5f1f8038 EFLAGS: 00000246 ORIG_RAX: 000000000000012c [ 453.334760][T11019] RAX: ffffffffffffffda RBX: 00007f8f5e5b5fa0 RCX: 00007f8f5e38e969 [ 453.334781][T11019] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 00000000000004f1 [ 453.334799][T11019] RBP: 00007f8f5e410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 453.334818][T11019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 453.334837][T11019] R13: 0000000000000000 R14: 00007f8f5e5b5fa0 R15: 00007fffb7911918 [ 453.334878][T11019] [ 454.417343][T11029] CIFS mount error: No usable UNC path provided in device string! [ 454.417343][T11029] [ 454.430962][T11029] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 455.544977][T11035] FAULT_INJECTION: forcing a failure. [ 455.544977][T11035] name failslab, interval 1, probability 0, space 0, times 0 [ 455.617473][T11035] CPU: 1 UID: 0 PID: 11035 Comm: syz.3.1072 Not tainted 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 PREEMPT(full) [ 455.617523][T11035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 455.617543][T11035] Call Trace: [ 455.617553][T11035] [ 455.617566][T11035] dump_stack_lvl+0x16c/0x1f0 [ 455.617620][T11035] should_fail_ex+0x512/0x640 [ 455.617666][T11035] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 455.617708][T11035] should_failslab+0xc2/0x120 [ 455.617748][T11035] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 455.617787][T11035] ? __d_alloc+0x31/0xaa0 [ 455.617826][T11035] __d_alloc+0x31/0xaa0 [ 455.617864][T11035] d_alloc_pseudo+0x1c/0xc0 [ 455.617907][T11035] alloc_file_pseudo+0xcf/0x230 [ 455.617951][T11035] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 455.617996][T11035] ? alloc_fd+0x471/0x7d0 [ 455.618051][T11035] __anon_inode_getfile+0xf7/0x370 [ 455.618109][T11035] anon_inode_getfile_fmode+0x37/0xa0 [ 455.618164][T11035] __do_sys_fanotify_init+0x8e3/0xb80 [ 455.618207][T11035] do_syscall_64+0xcd/0x230 [ 455.618256][T11035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.618300][T11035] RIP: 0033:0x7f8f5e38e969 [ 455.618327][T11035] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 455.618360][T11035] RSP: 002b:00007f8f5f1f8038 EFLAGS: 00000246 ORIG_RAX: 000000000000012c [ 455.618391][T11035] RAX: ffffffffffffffda RBX: 00007f8f5e5b5fa0 RCX: 00007f8f5e38e969 [ 455.618413][T11035] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 00000000000004f1 [ 455.618432][T11035] RBP: 00007f8f5e410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 455.618452][T11035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 455.618471][T11035] R13: 0000000000000000 R14: 00007f8f5e5b5fa0 R15: 00007fffb7911918 [ 455.618512][T11035] [ 457.175688][T11051] busy [ 457.811580][T11044] netlink: 'syz.2.1065': attribute type 1 has an invalid length. [ 458.140149][T11064] busy [ 458.461718][ T5838] Bluetooth: hci3: unexpected subevent 0x01 length: 4 < 18 [ 458.786518][ T30] audit: type=1800 audit(4294967884.779:47): pid=11070 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1068" name="dbroot" dev="configfs" ino=31229 res=0 errno=0 [ 459.730943][T11079] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1071'. [ 460.027154][T11086] nla_validate_range_unsigned: 23 callbacks suppressed [ 460.027180][T11086] netlink: 'syz.0.1073': attribute type 11 has an invalid length. [ 460.083610][T11087] netlink: 'syz.0.1073': attribute type 11 has an invalid length. [ 460.157183][T11077] ICMPv6: process `syz.1.1070' is using deprecated sysctl (syscall) net.ipv6.neigh.veth0_to_bridge.base_reachable_time - use net.ipv6.neigh.veth0_to_bridge.base_reachable_time_ms instead [ 462.742257][T11116] busy [ 463.037395][T11123] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1079'. [ 463.132865][T11123] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 463.142573][T11123] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 463.578006][T11131] busy [ 464.073744][T11141] busy [ 464.420927][ T5838] Bluetooth: hci0: unexpected subevent 0x01 length: 4 < 18 [ 464.704741][ T30] audit: type=1800 audit(4294967898.695:48): pid=11147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1083" name="dbroot" dev="configfs" ino=30535 res=0 errno=0 [ 465.722928][ T5838] Bluetooth: hci3: unexpected subevent 0x01 length: 4 < 18 [ 466.603483][ T5838] Bluetooth: hci1: unexpected subevent 0x01 length: 4 < 18 [ 466.697241][ T30] audit: type=1800 audit(4294967916.687:49): pid=11161 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1085" name="dbroot" dev="configfs" ino=31458 res=0 errno=0 [ 466.775029][ T5838] Bluetooth: hci2: unexpected subevent 0x01 length: 4 < 18 [ 468.992685][ T5838] Bluetooth: hci1: unexpected subevent 0x01 length: 4 < 18 [ 469.120904][T11191] busy [ 469.312471][ T30] audit: type=1800 audit(4294967935.266:50): pid=11192 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1090" name="dbroot" dev="configfs" ino=30662 res=0 errno=0 [ 470.232971][T11200] busy [ 471.379375][T11214] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1095'. [ 471.655795][T11214] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 471.705123][T11214] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 471.744100][T11214] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 471.828275][T11214] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 473.221331][T11224] netlink: 330 bytes leftover after parsing attributes in process `syz.3.1099'. [ 474.365934][T11250] busy [ 474.481118][T11253] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1108'. [ 475.247768][T11268] netlink: 'syz.1.1110': attribute type 14 has an invalid length. [ 475.258015][T11268] netlink: 330 bytes leftover after parsing attributes in process `syz.1.1110'. [ 475.627158][ T5838] Bluetooth: hci0: unexpected subevent 0x01 length: 4 < 18 [ 475.770691][ T30] audit: type=1800 audit(4294967949.761:51): pid=11278 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1113" name="dbroot" dev="configfs" ino=31856 res=0 errno=0 [ 477.084818][T11285] netlink: set zone limit has 8 unknown bytes [ 477.509931][T11292] busy [ 478.003341][T11301] busy [ 478.998144][T11306] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 479.013273][T11306] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 479.489121][T11338] busy [ 479.620108][ T5838] Bluetooth: hci1: unexpected subevent 0x01 length: 4 < 18 [ 479.783138][ T30] audit: type=1800 audit(4294967961.686:52): pid=11343 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1128" name="dbroot" dev="configfs" ino=32152 res=0 errno=0 [ 480.805899][T11355] busy [ 481.316104][T11359] busy [ 482.361405][T11374] busy [ 482.997466][T11384] FAULT_INJECTION: forcing a failure. [ 482.997466][T11384] name failslab, interval 1, probability 0, space 0, times 0 [ 483.046681][T11384] CPU: 0 UID: 0 PID: 11384 Comm: syz.2.1135 Not tainted 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 PREEMPT(full) [ 483.046733][T11384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 483.046753][T11384] Call Trace: [ 483.046764][T11384] [ 483.046777][T11384] dump_stack_lvl+0x16c/0x1f0 [ 483.046829][T11384] should_fail_ex+0x512/0x640 [ 483.046875][T11384] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 483.046917][T11384] should_failslab+0xc2/0x120 [ 483.046958][T11384] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 483.046996][T11384] ? security_file_alloc+0x34/0x2b0 [ 483.047046][T11384] security_file_alloc+0x34/0x2b0 [ 483.047090][T11384] init_file+0x93/0x4c0 [ 483.047130][T11384] alloc_empty_file+0x73/0x1e0 [ 483.047174][T11384] alloc_file_pseudo+0x13a/0x230 [ 483.047219][T11384] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 483.047274][T11384] __shmem_file_setup+0x210/0x300 [ 483.047314][T11384] shmem_zero_setup+0x93/0x1a0 [ 483.047357][T11384] __mmap_region+0x2036/0x27c0 [ 483.047401][T11384] ? __pfx___mmap_region+0x10/0x10 [ 483.047438][T11384] ? finish_task_switch.isra.0+0x221/0xc10 [ 483.047481][T11384] ? __schedule+0x1186/0x5de0 [ 483.047519][T11384] ? kvm_sched_clock_read+0x11/0x20 [ 483.047558][T11384] ? sched_clock+0x38/0x60 [ 483.047680][T11384] ? trace_cap_capable+0x18d/0x200 [ 483.047719][T11384] ? cap_capable+0xb3/0x250 [ 483.047759][T11384] mmap_region+0x1ab/0x3f0 [ 483.047808][T11384] do_mmap+0xd8e/0x11b0 [ 483.047869][T11384] ? __pfx_do_mmap+0x10/0x10 [ 483.047918][T11384] ? __pfx_down_write_killable+0x10/0x10 [ 483.047977][T11384] vm_mmap_pgoff+0x281/0x450 [ 483.048033][T11384] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 483.048081][T11384] ? find_held_lock+0x2b/0x80 [ 483.048117][T11384] ? __x64_sys_futex+0x1e0/0x4c0 [ 483.048151][T11384] ? __x64_sys_futex+0x1e9/0x4c0 [ 483.048192][T11384] ksys_mmap_pgoff+0x7d/0x5c0 [ 483.048240][T11384] ? rcu_is_watching+0x12/0xc0 [ 483.048274][T11384] __x64_sys_mmap+0x125/0x190 [ 483.048310][T11384] do_syscall_64+0xcd/0x230 [ 483.048359][T11384] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.048392][T11384] RIP: 0033:0x7fe1bb18e969 [ 483.048419][T11384] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 483.048451][T11384] RSP: 002b:00007fe1b8ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 483.048482][T11384] RAX: ffffffffffffffda RBX: 00007fe1bb3b6080 RCX: 00007fe1bb18e969 [ 483.048504][T11384] RDX: 0000000000000003 RSI: 0000000002020009 RDI: 0000000000000000 [ 483.048524][T11384] RBP: 00007fe1bb210ab1 R08: fffffffffffffffa R09: 0000000000008000 [ 483.048545][T11384] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 483.048565][T11384] R13: 0000000000000000 R14: 00007fe1bb3b6080 R15: 00007ffcf9a79918 [ 483.048608][T11384] [ 484.022352][ T5838] Bluetooth: hci3: unexpected event 0x1d length: 6 > 5 [ 484.701148][T11399] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 484.729906][T11399] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 484.744212][T11399] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 484.777350][T11399] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 485.116811][T11418] busy [ 485.935877][T11433] FAULT_INJECTION: forcing a failure. [ 485.935877][T11433] name failslab, interval 1, probability 0, space 0, times 0 [ 485.967718][T11433] CPU: 1 UID: 0 PID: 11433 Comm: syz.1.1146 Not tainted 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 PREEMPT(full) [ 485.967764][T11433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 485.967783][T11433] Call Trace: [ 485.967794][T11433] [ 485.967805][T11433] dump_stack_lvl+0x16c/0x1f0 [ 485.967857][T11433] should_fail_ex+0x512/0x640 [ 485.967902][T11433] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 485.967943][T11433] should_failslab+0xc2/0x120 [ 485.967983][T11433] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 485.968021][T11433] ? __d_alloc+0x31/0xaa0 [ 485.968060][T11433] __d_alloc+0x31/0xaa0 [ 485.968098][T11433] d_alloc_pseudo+0x1c/0xc0 [ 485.968140][T11433] alloc_file_pseudo+0xcf/0x230 [ 485.968185][T11433] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 485.968228][T11433] ? alloc_fd+0x471/0x7d0 [ 485.968284][T11433] __anon_inode_getfile+0xf7/0x370 [ 485.968343][T11433] anon_inode_getfile_fmode+0x37/0xa0 [ 485.968397][T11433] __do_sys_fanotify_init+0x8e3/0xb80 [ 485.968444][T11433] do_syscall_64+0xcd/0x230 [ 485.968491][T11433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.968523][T11433] RIP: 0033:0x7f42e278e969 [ 485.968548][T11433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 485.968579][T11433] RSP: 002b:00007f42e3659038 EFLAGS: 00000246 ORIG_RAX: 000000000000012c [ 485.968610][T11433] RAX: ffffffffffffffda RBX: 00007f42e29b5fa0 RCX: 00007f42e278e969 [ 485.968638][T11433] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 00000000000004f1 [ 485.968658][T11433] RBP: 00007f42e2810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 485.968678][T11433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 485.968697][T11433] R13: 0000000000000000 R14: 00007f42e29b5fa0 R15: 00007ffe5e956c08 [ 485.968738][T11433] [ 486.183221][ T5838] Bluetooth: hci0: command 0x0c1a tx timeout [ 486.733254][ T5838] Bluetooth: hci1: command 0x0c1a tx timeout [ 486.802651][T11461] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1154'. [ 486.813268][ T5838] Bluetooth: hci3: command 0x0c1a tx timeout [ 486.820210][ T55] Bluetooth: hci2: command 0x0c1a tx timeout [ 487.208749][T11461] FAULT_INJECTION: forcing a failure. [ 487.208749][T11461] name failslab, interval 1, probability 0, space 0, times 0 [ 487.284036][T11461] CPU: 0 UID: 0 PID: 11461 Comm: syz.1.1154 Not tainted 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 PREEMPT(full) [ 487.284083][T11461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 487.284102][T11461] Call Trace: [ 487.284111][T11461] [ 487.284123][T11461] dump_stack_lvl+0x16c/0x1f0 [ 487.284170][T11461] should_fail_ex+0x512/0x640 [ 487.284213][T11461] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 487.284264][T11461] should_failslab+0xc2/0x120 [ 487.284296][T11461] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 487.284328][T11461] ? __d_alloc+0x31/0xaa0 [ 487.284359][T11461] __d_alloc+0x31/0xaa0 [ 487.284390][T11461] path_from_stashed+0x500/0xb00 [ 487.284419][T11461] ? __pfx_path_from_stashed+0x10/0x10 [ 487.284445][T11461] ? do_raw_spin_unlock+0x172/0x230 [ 487.284493][T11461] ns_get_path+0x5f/0x80 [ 487.284531][T11461] proc_ns_get_link+0x121/0x260 [ 487.284582][T11461] ? __pfx_proc_ns_get_link+0x10/0x10 [ 487.284628][T11461] ? __pfx___might_resched+0x10/0x10 [ 487.284664][T11461] ? __pfx_proc_ns_get_link+0x10/0x10 [ 487.284707][T11461] step_into+0x1b22/0x2270 [ 487.284751][T11461] ? __pfx_step_into+0x10/0x10 [ 487.284788][T11461] ? find_held_lock+0x2b/0x80 [ 487.284826][T11461] path_openat+0x749/0x2d40 [ 487.284866][T11461] ? __pfx_path_openat+0x10/0x10 [ 487.284904][T11461] do_filp_open+0x20b/0x470 [ 487.284934][T11461] ? __pfx_do_filp_open+0x10/0x10 [ 487.284991][T11461] ? alloc_fd+0x471/0x7d0 [ 487.285044][T11461] do_sys_openat2+0x11b/0x1d0 [ 487.285083][T11461] ? __pfx_do_sys_openat2+0x10/0x10 [ 487.285134][T11461] __x64_sys_openat+0x174/0x210 [ 487.285174][T11461] ? __pfx___x64_sys_openat+0x10/0x10 [ 487.285218][T11461] ? rcu_is_watching+0x12/0xc0 [ 487.285260][T11461] do_syscall_64+0xcd/0x230 [ 487.285307][T11461] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.285342][T11461] RIP: 0033:0x7f42e278d2d0 [ 487.285368][T11461] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 487.285402][T11461] RSP: 002b:00007f42e3658f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 487.285433][T11461] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f42e278d2d0 [ 487.285454][T11461] RDX: 0000000000000002 RSI: 00007f42e3658fa0 RDI: 00000000ffffff9c [ 487.285477][T11461] RBP: 00007f42e3658fa0 R08: 0000000000000000 R09: 0000000000000000 [ 487.285496][T11461] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 487.285514][T11461] R13: 0000000000000000 R14: 00007f42e29b5fa0 R15: 00007ffe5e956c08 [ 487.285553][T11461] [ 487.796253][T11468] can: request_module (can-proto-3) failed. [ 488.092278][T11479] netlink: 322 bytes leftover after parsing attributes in process `syz.1.1157'. [ 489.108514][T11499] qrtr: Invalid version 4 [ 490.036336][T11515] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1164'. [ 490.542730][T11522] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1166'. [ 492.153904][T11558] random: crng reseeded on system resumption [ 493.026822][T11556] netlink: 346 bytes leftover after parsing attributes in process `syz.0.1172'. [ 493.410301][T11583] zram: Added device: zram1 [ 494.450474][T11607] [ 494.734618][T11607] WARNING! power/level is deprecated; use power/control instead [ 494.887136][T11611] random: crng reseeded on system resumption [ 495.597125][T11625] busy [ 497.206052][ T5838] Bluetooth: hci1: unexpected subevent 0x01 length: 4 < 18 [ 497.264168][ T30] audit: type=1800 audit(4294967993.253:53): pid=11651 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1188" name="dbroot" dev="configfs" ino=33679 res=0 errno=0 [ 499.373222][ T24] Process accounting resumed [ 499.434984][T11681] Process accounting resumed [ 499.630057][T11694] busy [ 501.662490][T11727] busy [ 503.096108][T11748] FAULT_INJECTION: forcing a failure. [ 503.096108][T11748] name failslab, interval 1, probability 0, space 0, times 0 [ 503.155281][T11748] CPU: 1 UID: 0 PID: 11748 Comm: syz.3.1207 Not tainted 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 PREEMPT(full) [ 503.155349][T11748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 503.155367][T11748] Call Trace: [ 503.155376][T11748] [ 503.155389][T11748] dump_stack_lvl+0x16c/0x1f0 [ 503.155438][T11748] should_fail_ex+0x512/0x640 [ 503.155480][T11748] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 503.155520][T11748] should_failslab+0xc2/0x120 [ 503.155556][T11748] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 503.155590][T11748] ? d_instantiate+0x77/0x90 [ 503.155622][T11748] ? alloc_empty_file+0x55/0x1e0 [ 503.155666][T11748] alloc_empty_file+0x55/0x1e0 [ 503.155707][T11748] alloc_file_pseudo+0x13a/0x230 [ 503.155749][T11748] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 503.155801][T11748] __shmem_file_setup+0x210/0x300 [ 503.155837][T11748] shmem_zero_setup+0x93/0x1a0 [ 503.155886][T11748] __mmap_region+0x2036/0x27c0 [ 503.155927][T11748] ? __pfx___mmap_region+0x10/0x10 [ 503.155962][T11748] ? trace_sched_exit_tp+0xde/0x130 [ 503.156028][T11748] ? __pfx___schedule+0x10/0x10 [ 503.156109][T11748] ? trace_cap_capable+0x18d/0x200 [ 503.156143][T11748] ? cap_capable+0xb3/0x250 [ 503.156179][T11748] mmap_region+0x1ab/0x3f0 [ 503.156223][T11748] do_mmap+0xd8e/0x11b0 [ 503.156276][T11748] ? __pfx_do_mmap+0x10/0x10 [ 503.156323][T11748] ? __pfx_down_write_killable+0x10/0x10 [ 503.156379][T11748] vm_mmap_pgoff+0x281/0x450 [ 503.156431][T11748] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 503.156477][T11748] ? find_held_lock+0x2b/0x80 [ 503.156511][T11748] ? __x64_sys_futex+0x1e0/0x4c0 [ 503.156542][T11748] ? __x64_sys_futex+0x1e9/0x4c0 [ 503.156580][T11748] ksys_mmap_pgoff+0x7d/0x5c0 [ 503.156624][T11748] ? rcu_is_watching+0x12/0xc0 [ 503.156657][T11748] __x64_sys_mmap+0x125/0x190 [ 503.156692][T11748] do_syscall_64+0xcd/0x230 [ 503.156738][T11748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.156769][T11748] RIP: 0033:0x7f8f5e38e969 [ 503.156794][T11748] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 503.156824][T11748] RSP: 002b:00007f8f5f1f8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 503.156853][T11748] RAX: ffffffffffffffda RBX: 00007f8f5e5b5fa0 RCX: 00007f8f5e38e969 [ 503.156881][T11748] RDX: 0000000000000003 RSI: 0000000002020009 RDI: 0000000000000000 [ 503.156899][T11748] RBP: 00007f8f5e410ab1 R08: fffffffffffffffa R09: 0000000000008000 [ 503.156919][T11748] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 503.156938][T11748] R13: 0000000000000000 R14: 00007f8f5e5b5fa0 R15: 00007fffb7911918 [ 503.156977][T11748] [ 503.450617][ C1] vkms_vblank_simulate: vblank timer overrun [ 503.672286][T11765] synth uevent: /module/l2tp_ip6: unknown uevent action string [ 504.079265][T11778] busy [ 505.004086][T11798] FAULT_INJECTION: forcing a failure. [ 505.004086][T11798] name failslab, interval 1, probability 0, space 0, times 0 [ 505.034113][T11797] busy [ 505.111405][T11798] CPU: 1 UID: 0 PID: 11798 Comm: syz.1.1219 Not tainted 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 PREEMPT(full) [ 505.111453][T11798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 505.111474][T11798] Call Trace: [ 505.111485][T11798] [ 505.111498][T11798] dump_stack_lvl+0x16c/0x1f0 [ 505.111549][T11798] should_fail_ex+0x512/0x640 [ 505.111596][T11798] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 505.111638][T11798] should_failslab+0xc2/0x120 [ 505.111679][T11798] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 505.111723][T11798] ? security_file_alloc+0x34/0x2b0 [ 505.111783][T11798] security_file_alloc+0x34/0x2b0 [ 505.111827][T11798] init_file+0x93/0x4c0 [ 505.111868][T11798] alloc_empty_file+0x73/0x1e0 [ 505.111912][T11798] alloc_file_pseudo+0x13a/0x230 [ 505.111957][T11798] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 505.112001][T11798] ? alloc_fd+0x471/0x7d0 [ 505.112059][T11798] __anon_inode_getfile+0xf7/0x370 [ 505.112119][T11798] anon_inode_getfile_fmode+0x37/0xa0 [ 505.112174][T11798] __do_sys_fanotify_init+0x8e3/0xb80 [ 505.112221][T11798] do_syscall_64+0xcd/0x230 [ 505.112270][T11798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.112303][T11798] RIP: 0033:0x7f42e278e969 [ 505.112329][T11798] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 505.112362][T11798] RSP: 002b:00007f42e3638038 EFLAGS: 00000246 ORIG_RAX: 000000000000012c [ 505.112393][T11798] RAX: ffffffffffffffda RBX: 00007f42e29b6080 RCX: 00007f42e278e969 [ 505.112415][T11798] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 00000000000004f1 [ 505.112434][T11798] RBP: 00007f42e2810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 505.112454][T11798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 505.112473][T11798] R13: 0000000000000000 R14: 00007f42e29b6080 R15: 00007ffe5e956c08 [ 505.112515][T11798] [ 505.322134][ C1] vkms_vblank_simulate: vblank timer overrun [ 505.761628][T11807] busy [ 506.742993][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.750059][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.235037][T11823] busy [ 507.454617][T11830] ima: policy update failed [ 507.470730][ T30] audit: type=1802 audit(4294968003.463:54): pid=11830 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.1227" res=0 errno=0 [ 508.754901][T11855] busy [ 510.224012][T11870] cougar: G6 mapped to space [ 510.639910][T11874] FAULT_INJECTION: forcing a failure. [ 510.639910][T11874] name failslab, interval 1, probability 0, space 0, times 0 [ 510.658121][T11874] CPU: 0 UID: 0 PID: 11874 Comm: syz.2.1235 Not tainted 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 PREEMPT(full) [ 510.658167][T11874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 510.658188][T11874] Call Trace: [ 510.658198][T11874] [ 510.658211][T11874] dump_stack_lvl+0x16c/0x1f0 [ 510.658269][T11874] should_fail_ex+0x512/0x640 [ 510.658315][T11874] ? __kmalloc_noprof+0xbf/0x510 [ 510.658353][T11874] ? lsm_blob_alloc+0x68/0x90 [ 510.658401][T11874] should_failslab+0xc2/0x120 [ 510.658441][T11874] __kmalloc_noprof+0xd2/0x510 [ 510.658486][T11874] lsm_blob_alloc+0x68/0x90 [ 510.658537][T11874] security_sk_alloc+0x30/0x270 [ 510.658572][T11874] sk_prot_alloc+0x1c7/0x2a0 [ 510.658620][T11874] sk_alloc+0x36/0xc20 [ 510.658651][T11874] __netlink_create+0x5e/0x2c0 [ 510.658679][T11874] ? __wake_up+0x3f/0x60 [ 510.658717][T11874] netlink_create+0x39e/0x620 [ 510.658747][T11874] ? __pfx_genl_bind+0x10/0x10 [ 510.658786][T11874] ? __pfx_genl_unbind+0x10/0x10 [ 510.658821][T11874] ? __pfx_genl_release+0x10/0x10 [ 510.658864][T11874] __sock_create+0x335/0x8d0 [ 510.658916][T11874] __sys_socket+0x14d/0x260 [ 510.658961][T11874] ? __pfx___sys_socket+0x10/0x10 [ 510.659006][T11874] ? rcu_is_watching+0x12/0xc0 [ 510.659043][T11874] __x64_sys_socket+0x72/0xb0 [ 510.659089][T11874] ? lockdep_hardirqs_on+0x7c/0x110 [ 510.659130][T11874] do_syscall_64+0xcd/0x230 [ 510.659178][T11874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.659211][T11874] RIP: 0033:0x7fe1bb18e969 [ 510.659234][T11874] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 510.659274][T11874] RSP: 002b:00007fe1bbf13038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 510.659303][T11874] RAX: ffffffffffffffda RBX: 00007fe1bb3b5fa0 RCX: 00007fe1bb18e969 [ 510.659324][T11874] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 510.659343][T11874] RBP: 00007fe1bb210ab1 R08: 0000000000000000 R09: 0000000000000000 [ 510.659361][T11874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 510.659379][T11874] R13: 0000000000000000 R14: 00007fe1bb3b5fa0 R15: 00007ffcf9a79918 [ 510.659418][T11874] [ 511.033998][T11892] netlink: 342 bytes leftover after parsing attributes in process `syz.0.1241'. [ 511.337941][T11901] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1242'. [ 513.020213][T11931] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1249'. [ 513.045908][T11931] openvswitch: netlink: Flow key attr not present in new flow. [ 513.485601][T11948] device-mapper: ioctl: Invalid ioctl structure: uuid , name , dev 400408000010006 [ 514.253413][T11956] futex_wake_op: syz.0.1254 tries to shift op by 64; fix this program [ 514.792700][T11963] netlink: 'syz.1.1255': attribute type 16 has an invalid length. [ 514.812689][T11963] netlink: 326 bytes leftover after parsing attributes in process `syz.1.1255'. [ 514.853227][T11963] veth1_macvtap: left promiscuous mode [ 515.188329][T11973] busy [ 515.301296][T11971] openvswitch: netlink: Key 5 has unexpected len 4 expected 2 [ 515.374571][T11976] netlink: 'syz.2.1257': attribute type 10 has an invalid length. [ 515.484174][T11976] netlink: 330 bytes leftover after parsing attributes in process `syz.2.1257'. [ 518.104043][T12005] can: request_module (can-proto-3) failed. [ 518.830721][T11998] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 519.493836][T12020] cifs: Unknown parameter 'T.żc[$⁍)UÑnE-ʙl- -_5Z omfwYh*/xDlݩgkǐA79Xa/f_ARxM vp$^;q3n-6+ek [ 536.495289][T12263] dump_stack_lvl+0x16c/0x1f0 [ 536.495342][T12263] should_fail_ex+0x512/0x640 [ 536.495391][T12263] should_fail_alloc_page+0xe7/0x130 [ 536.495432][T12263] prepare_alloc_pages+0x3c2/0x610 [ 536.495480][T12263] ? rcu_is_watching+0x12/0xc0 [ 536.495514][T12263] __alloc_frozen_pages_noprof+0x18f/0x23a0 [ 536.495575][T12263] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 536.495611][T12263] ? do_raw_spin_lock+0x12c/0x2b0 [ 536.495659][T12263] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 536.495706][T12263] ? find_held_lock+0x2b/0x80 [ 536.495749][T12263] ? __lock_acquire+0xaa4/0x1ba0 [ 536.495788][T12263] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 536.495834][T12263] ? policy_nodemask+0xea/0x4e0 [ 536.495875][T12263] alloc_pages_mpol+0x1fb/0x550 [ 536.495916][T12263] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 536.495967][T12263] folio_alloc_mpol_noprof+0x36/0x2f0 [ 536.496015][T12263] shmem_alloc_folio+0x135/0x160 [ 536.496068][T12263] shmem_alloc_and_add_folio+0x499/0xc20 [ 536.496116][T12263] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 536.496157][T12263] ? shmem_allowable_huge_orders+0xcb/0x2f0 [ 536.496203][T12263] shmem_get_folio_gfp+0x687/0x1530 [ 536.496262][T12263] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 536.496304][T12263] ? filemap_map_pages+0xf6c/0x1680 [ 536.496349][T12263] shmem_fault+0x1fe/0xa30 [ 536.496393][T12263] ? __pfx_shmem_fault+0x10/0x10 [ 536.496439][T12263] ? __pfx_filemap_map_pages+0x10/0x10 [ 536.496492][T12263] __do_fault+0x10a/0x490 [ 536.496533][T12263] do_pte_missing+0x1031/0x3fb0 [ 536.496569][T12263] ? __handle_mm_fault+0x1010/0x2a40 [ 536.496612][T12263] __handle_mm_fault+0x103d/0x2a40 [ 536.496657][T12263] ? __pfx___handle_mm_fault+0x10/0x10 [ 536.496714][T12263] ? find_vma+0xbf/0x140 [ 536.496757][T12263] ? __pfx_find_vma+0x10/0x10 [ 536.496806][T12263] handle_mm_fault+0x3fe/0xad0 [ 536.496847][T12263] do_user_addr_fault+0x7a6/0x1370 [ 536.496884][T12263] ? rcu_is_watching+0x12/0xc0 [ 536.496917][T12263] exc_page_fault+0x5c/0xc0 [ 536.496957][T12263] asm_exc_page_fault+0x26/0x30 [ 536.496988][T12263] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 536.497023][T12263] Code: cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 536.497054][T12263] RSP: 0018:ffffc9000af8fb28 EFLAGS: 00050202 [ 536.497080][T12263] RAX: 0000000000000001 RBX: 000000000000ffd8 RCX: 0000000000006fd8 [ 536.497099][T12263] RDX: ffffed1006819ffb RSI: 0000000000009000 RDI: ffff8880340c9000 [ 536.497119][T12263] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed1006819ffa [ 536.497138][T12263] R10: ffff8880340cffd7 R11: 0000000000000000 R12: 0000000000000000 [ 536.497158][T12263] R13: ffffc9000af8fda0 R14: 000000000000ffd8 R15: ffff8880340c0000 [ 536.497202][T12263] _copy_from_iter+0x391/0x15b0 [ 536.497263][T12263] ? rcu_is_watching+0x12/0xc0 [ 536.497292][T12263] ? __pfx__copy_from_iter+0x10/0x10 [ 536.497338][T12263] ? rcu_is_watching+0x12/0xc0 [ 536.497366][T12263] ? trace_kmalloc+0x2b/0xd0 [ 536.497405][T12263] ? __kvmalloc_node_noprof.cold+0x60/0x65 [ 536.497448][T12263] ? __pfx_net_ctl_permissions+0x10/0x10 [ 536.497495][T12263] ? proc_sys_call_handler+0x2a6/0x5c0 [ 536.497539][T12263] proc_sys_call_handler+0x317/0x5c0 [ 536.497576][T12263] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 536.497630][T12263] vfs_write+0x5ba/0x1180 [ 536.497661][T12263] ? __pfx_proc_sys_write+0x10/0x10 [ 536.497696][T12263] ? __pfx___mutex_lock+0x10/0x10 [ 536.497741][T12263] ? __pfx_vfs_write+0x10/0x10 [ 536.497800][T12263] ksys_write+0x12a/0x240 [ 536.497829][T12263] ? __pfx_ksys_write+0x10/0x10 [ 536.497855][T12263] ? rcu_is_watching+0x12/0xc0 [ 536.497897][T12263] do_syscall_64+0xcd/0x230 [ 536.497944][T12263] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.497976][T12263] RIP: 0033:0x7f42e278e969 [ 536.497999][T12263] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 536.498031][T12263] RSP: 002b:00007f42e3659038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 536.498059][T12263] RAX: ffffffffffffffda RBX: 00007f42e29b5fa0 RCX: 00007f42e278e969 [ 536.498080][T12263] RDX: 000000000000ffd8 RSI: 0000000000000000 RDI: 0000000000000003 [ 536.498098][T12263] RBP: 00007f42e3659090 R08: 0000000000000000 R09: 0000000000000000 [ 536.498118][T12263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 536.498136][T12263] R13: 0000000000000000 R14: 00007f42e29b5fa0 R15: 00007ffe5e956c08 [ 536.498179][T12263] [ 536.616772][T12265] netlink: 'syz.2.1312': attribute type 19 has an invalid length. [ 537.033260][T12265] netlink: 334 bytes leftover after parsing attributes in process `syz.2.1312'. [ 537.853555][T12266] bond0: option all_slaves_active: invalid value (]\/) [ 537.878342][T12274] bond0: option all_slaves_active: invalid value ( ) [ 538.282400][T12281] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1315'. [ 538.832487][T12298] busy [ 538.997184][T12303] FAULT_INJECTION: forcing a failure. [ 538.997184][T12303] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 539.084864][T12303] CPU: 1 UID: 0 PID: 12303 Comm: syz.0.1322 Not tainted 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 PREEMPT(full) [ 539.084907][T12303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 539.084927][T12303] Call Trace: [ 539.084937][T12303] [ 539.084949][T12303] dump_stack_lvl+0x16c/0x1f0 [ 539.084999][T12303] should_fail_ex+0x512/0x640 [ 539.085057][T12303] should_fail_alloc_page+0xe7/0x130 [ 539.085100][T12303] prepare_alloc_pages+0x3c2/0x610 [ 539.085146][T12303] ? rcu_is_watching+0x12/0xc0 [ 539.085181][T12303] __alloc_frozen_pages_noprof+0x18f/0x23a0 [ 539.085242][T12303] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 539.085281][T12303] ? do_raw_spin_lock+0x12c/0x2b0 [ 539.085327][T12303] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 539.085375][T12303] ? find_held_lock+0x2b/0x80 [ 539.085419][T12303] ? __lock_acquire+0xaa4/0x1ba0 [ 539.085459][T12303] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 539.085503][T12303] ? policy_nodemask+0xea/0x4e0 [ 539.085545][T12303] alloc_pages_mpol+0x1fb/0x550 [ 539.085586][T12303] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 539.085638][T12303] folio_alloc_mpol_noprof+0x36/0x2f0 [ 539.085687][T12303] shmem_alloc_folio+0x135/0x160 [ 539.085739][T12303] shmem_alloc_and_add_folio+0x499/0xc20 [ 539.085787][T12303] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 539.085832][T12303] ? shmem_allowable_huge_orders+0xcb/0x2f0 [ 539.085883][T12303] shmem_get_folio_gfp+0x687/0x1530 [ 539.085932][T12303] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 539.085975][T12303] ? filemap_map_pages+0xf6c/0x1680 [ 539.086020][T12303] shmem_fault+0x1fe/0xa30 [ 539.086066][T12303] ? __pfx_shmem_fault+0x10/0x10 [ 539.086123][T12303] ? __pfx_filemap_map_pages+0x10/0x10 [ 539.086177][T12303] __do_fault+0x10a/0x490 [ 539.086220][T12303] do_pte_missing+0x1031/0x3fb0 [ 539.086258][T12303] ? __handle_mm_fault+0x1010/0x2a40 [ 539.086296][T12303] __handle_mm_fault+0x103d/0x2a40 [ 539.086342][T12303] ? __pfx___handle_mm_fault+0x10/0x10 [ 539.086406][T12303] ? find_vma+0xbf/0x140 [ 539.086449][T12303] ? __pfx_find_vma+0x10/0x10 [ 539.086497][T12303] handle_mm_fault+0x3fe/0xad0 [ 539.086537][T12303] do_user_addr_fault+0x7a6/0x1370 [ 539.086573][T12303] ? rcu_is_watching+0x12/0xc0 [ 539.086606][T12303] exc_page_fault+0x5c/0xc0 [ 539.086649][T12303] asm_exc_page_fault+0x26/0x30 [ 539.086679][T12303] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 539.086712][T12303] Code: cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 539.086742][T12303] RSP: 0018:ffffc90003677b28 EFLAGS: 00050202 [ 539.086768][T12303] RAX: 0000000000000001 RBX: 000000000000ffd8 RCX: 0000000000005fd8 [ 539.086788][T12303] RDX: ffffed10050c1ffb RSI: 000000000000a000 RDI: ffff88802860a000 [ 539.086809][T12303] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed10050c1ffa [ 539.086828][T12303] R10: ffff88802860ffd7 R11: 0000000000000000 R12: 0000000000000000 [ 539.086847][T12303] R13: ffffc90003677da0 R14: 000000000000ffd8 R15: ffff888028600000 [ 539.086893][T12303] _copy_from_iter+0x391/0x15b0 [ 539.086947][T12303] ? rcu_is_watching+0x12/0xc0 [ 539.086976][T12303] ? __pfx__copy_from_iter+0x10/0x10 [ 539.087020][T12303] ? rcu_is_watching+0x12/0xc0 [ 539.087058][T12303] ? trace_kmalloc+0x2b/0xd0 [ 539.087098][T12303] ? __kvmalloc_node_noprof.cold+0x60/0x65 [ 539.087141][T12303] ? __pfx_net_ctl_permissions+0x10/0x10 [ 539.087190][T12303] ? proc_sys_call_handler+0x2a6/0x5c0 [ 539.087234][T12303] proc_sys_call_handler+0x317/0x5c0 [ 539.087273][T12303] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 539.087327][T12303] vfs_write+0x5ba/0x1180 [ 539.087358][T12303] ? __pfx_proc_sys_write+0x10/0x10 [ 539.087393][T12303] ? __pfx___mutex_lock+0x10/0x10 [ 539.087438][T12303] ? __pfx_vfs_write+0x10/0x10 [ 539.087497][T12303] ksys_write+0x12a/0x240 [ 539.087526][T12303] ? __pfx_ksys_write+0x10/0x10 [ 539.087553][T12303] ? rcu_is_watching+0x12/0xc0 [ 539.087596][T12303] do_syscall_64+0xcd/0x230 [ 539.087643][T12303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.087674][T12303] RIP: 0033:0x7f4f8798e969 [ 539.087699][T12303] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 539.087730][T12303] RSP: 002b:00007f4f887ae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 539.087758][T12303] RAX: ffffffffffffffda RBX: 00007f4f87bb5fa0 RCX: 00007f4f8798e969 [ 539.087779][T12303] RDX: 000000000000ffd8 RSI: 0000000000000000 RDI: 0000000000000003 [ 539.087798][T12303] RBP: 00007f4f887ae090 R08: 0000000000000000 R09: 0000000000000000 [ 539.087818][T12303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 539.087836][T12303] R13: 0000000000000000 R14: 00007f4f87bb5fa0 R15: 00007ffe5f8f9778 [ 539.087878][T12303] [ 540.025337][T12287] sp0: Synchronizing with TNC [ 540.281249][ T5838] Bluetooth: hci3: unexpected subevent 0x01 length: 4 < 18 [ 540.503296][ T30] audit: type=1800 audit(4294968068.380:59): pid=12316 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1324" name="dbroot" dev="configfs" ino=37157 res=0 errno=0 [ 542.786855][T12343] FAULT_INJECTION: forcing a failure. [ 542.786855][T12343] name failslab, interval 1, probability 0, space 0, times 0 [ 542.825502][T12341] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1331'. [ 542.853142][T12343] CPU: 1 UID: 0 PID: 12343 Comm: syz.0.1330 Not tainted 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 PREEMPT(full) [ 542.853189][T12343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 542.853207][T12343] Call Trace: [ 542.853217][T12343] [ 542.853230][T12343] dump_stack_lvl+0x16c/0x1f0 [ 542.853282][T12343] should_fail_ex+0x512/0x640 [ 542.853331][T12343] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 542.853391][T12343] should_failslab+0xc2/0x120 [ 542.853431][T12343] __kmalloc_cache_noprof+0x6a/0x3e0 [ 542.853483][T12343] ? ww_mutex_lock+0x37/0x160 [ 542.853527][T12343] ? vkms_plane_duplicate_state+0x45/0x130 [ 542.853579][T12343] ? modeset_lock+0x114/0x6e0 [ 542.853614][T12343] vkms_plane_duplicate_state+0x45/0x130 [ 542.853667][T12343] drm_atomic_get_plane_state+0x20b/0x590 [ 542.853714][T12343] drm_client_modeset_commit_atomic+0x237/0x7e0 [ 542.853767][T12343] ? __pfx___might_resched+0x10/0x10 [ 542.853815][T12343] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 542.853907][T12343] drm_client_modeset_commit_locked+0x14d/0x580 [ 542.853957][T12343] drm_client_modeset_commit+0x4f/0x80 [ 542.854000][T12343] __drm_fb_helper_restore_fbdev_mode_unlocked+0x19f/0x200 [ 542.854040][T12343] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 542.854092][T12343] drm_fbdev_client_restore+0x2c/0x40 [ 542.854140][T12343] drm_client_dev_restore+0x1f3/0x2a0 [ 542.854188][T12343] drm_release+0x2c4/0x360 [ 542.854230][T12343] ? __pfx_drm_release+0x10/0x10 [ 542.854264][T12343] __fput+0x3ff/0xb70 [ 542.854324][T12343] task_work_run+0x14d/0x240 [ 542.854377][T12343] ? __pfx_task_work_run+0x10/0x10 [ 542.854430][T12343] ? __pfx___do_sys_close_range+0x10/0x10 [ 542.854473][T12343] syscall_exit_to_user_mode+0x27b/0x2a0 [ 542.854522][T12343] do_syscall_64+0xda/0x230 [ 542.854571][T12343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.854604][T12343] RIP: 0033:0x7f4f8798e969 [ 542.854631][T12343] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 542.854664][T12343] RSP: 002b:00007f4f8878d038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 542.854696][T12343] RAX: 0000000000000000 RBX: 00007f4f87bb6080 RCX: 00007f4f8798e969 [ 542.854717][T12343] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 542.854742][T12343] RBP: 00007f4f87a10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 542.854762][T12343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 542.854782][T12343] R13: 0000000000000000 R14: 00007f4f87bb6080 R15: 00007ffe5f8f9778 [ 542.854827][T12343] [ 543.445229][T12355] busy [ 543.998098][T12358] busy [ 544.543663][T12369] Invalid ELF header magic: != ELF [ 545.595806][T12414] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1343'. [ 546.806664][T12432] busy [ 547.911461][T12445] busy [ 550.366782][T12480] busy [ 550.731375][T12484] busy [ 550.835943][T12483] busy [ 553.694493][T12517] zswap: compressor not available [ 554.577528][T12545] bridge0: port 2(gretap0) entered blocking state [ 554.605317][T12545] bridge0: port 2(gretap0) entered disabled state [ 554.612694][T12545] gretap0: entered allmulticast mode [ 554.641959][T12545] gretap0: entered promiscuous mode [ 554.663936][T12545] bridge0: port 2(gretap0) entered blocking state [ 554.671186][T12545] bridge0: port 2(gretap0) entered forwarding state [ 554.880326][T12555] busy [ 555.882747][T12575] busy [ 557.088049][T12585] busy [ 557.158107][ T5838] Bluetooth: hci3: unexpected subevent 0x01 length: 4 < 18 [ 557.259270][ T30] audit: type=1800 audit(4294968093.236:60): pid=12588 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1374" name="dbroot" dev="configfs" ino=38003 res=0 errno=0 [ 559.613050][T12624] busy [ 559.992739][T12630] cifs: Unknown parameter '' [ 560.150328][T12636] netlink: 'syz.3.1386': attribute type 4 has an invalid length. [ 560.158951][T12636] netlink: 314 bytes leftover after parsing attributes in process `syz.3.1386'. [ 560.169847][T12636] IPv6: NLM_F_CREATE should be specified when creating new route [ 560.178466][T12635] can: request_module (can-proto-0) failed. [ 560.191760][T12636] IPv6: Can't replace route, no match found [ 560.242556][T12639] random: crng reseeded on system resumption [ 560.465037][T12651] netlink: 'syz.2.1388': attribute type 16 has an invalid length. [ 560.495968][T12651] netlink: 326 bytes leftover after parsing attributes in process `syz.2.1388'. [ 560.510385][T12650] busy [ 560.547632][T12651] veth1_macvtap: left promiscuous mode [ 561.266792][T12655] Process accounting resumed [ 561.433319][T12645] busy [ 561.489421][T12644] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1387'. [ 561.602258][T12644] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 561.815547][T12644] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 562.080032][T12668] CIFS mount error: No usable UNC path provided in device string! [ 562.080032][T12668] [ 562.136176][T12668] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 564.158115][T12719] busy [ 564.393149][T12720] busy [ 564.775993][ T5838] Bluetooth: hci2: unexpected subevent 0x01 length: 4 < 18 [ 564.895716][ T30] audit: type=1800 audit(4294969131.840:61): pid=12722 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1402" name="dbroot" dev="configfs" ino=39005 res=0 errno=0 [ 565.370752][T12734] ima: policy update failed [ 565.397311][ T30] audit: type=1802 audit(4294969132.390:62): pid=12734 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.1404" res=0 errno=0 [ 565.409344][T12734] netlink: 25 bytes leftover after parsing attributes in process `syz.2.1404'. [ 567.324042][T12766] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1411'. [ 567.912253][T12773] busy [ 568.181737][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.188849][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.791381][T12781] FAULT_INJECTION: forcing a failure. [ 568.791381][T12781] name failslab, interval 1, probability 0, space 0, times 0 [ 568.806782][T12781] CPU: 0 UID: 0 PID: 12781 Comm: syz.3.1414 Not tainted 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 PREEMPT(full) [ 568.806825][T12781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 568.806844][T12781] Call Trace: [ 568.806854][T12781] [ 568.806866][T12781] dump_stack_lvl+0x16c/0x1f0 [ 568.806916][T12781] should_fail_ex+0x512/0x640 [ 568.806961][T12781] ? __kmalloc_noprof+0xbf/0x510 [ 568.806999][T12781] ? ima_write_template_field_data+0x5d/0x1f0 [ 568.807039][T12781] should_failslab+0xc2/0x120 [ 568.807079][T12781] __kmalloc_noprof+0xd2/0x510 [ 568.807125][T12781] ima_write_template_field_data+0x5d/0x1f0 [ 568.807171][T12781] ima_eventdigest_init_common+0x154/0x430 [ 568.807228][T12781] ? __pfx_ima_eventdigest_init_common+0x10/0x10 [ 568.807294][T12781] ? rcu_is_watching+0x12/0xc0 [ 568.807323][T12781] ? trace_kmalloc+0x2b/0xd0 [ 568.807362][T12781] ? __kmalloc_noprof+0x242/0x510 [ 568.807396][T12781] ? __print_lock_name+0xc1/0xe0 [ 568.807433][T12781] ima_alloc_init_template+0x39d/0x720 [ 568.807475][T12781] ima_store_measurement+0x1eb/0x5c0 [ 568.807511][T12781] ? __pfx_ima_store_measurement+0x10/0x10 [ 568.807545][T12781] ? vfs_getxattr_alloc+0xec/0x340 [ 568.807606][T12781] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 568.807658][T12781] process_measurement+0x1ddb/0x23e0 [ 568.807723][T12781] ? __pfx_process_measurement+0x10/0x10 [ 568.807769][T12781] ? __lock_acquire+0x5ca/0x1ba0 [ 568.807813][T12781] ? init_file+0x93/0x4c0 [ 568.807845][T12781] ? alloc_empty_file+0x73/0x1e0 [ 568.807884][T12781] ? hugetlb_file_setup+0x4cd/0x620 [ 568.807924][T12781] ? ksys_mmap_pgoff+0x189/0x5c0 [ 568.807966][T12781] ? __x64_sys_mmap+0x125/0x190 [ 568.808056][T12781] ima_file_mmap+0x1b1/0x1d0 [ 568.808105][T12781] ? __pfx_ima_file_mmap+0x10/0x10 [ 568.808167][T12781] security_mmap_file+0x88c/0x990 [ 568.808220][T12781] vm_mmap_pgoff+0xec/0x450 [ 568.808272][T12781] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 568.808316][T12781] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 568.808361][T12781] ? hugetlbfs_get_inode+0x31f/0x730 [ 568.808413][T12781] ksys_mmap_pgoff+0x1c8/0x5c0 [ 568.808461][T12781] ? rcu_is_watching+0x12/0xc0 [ 568.808496][T12781] __x64_sys_mmap+0x125/0x190 [ 568.808533][T12781] do_syscall_64+0xcd/0x230 [ 568.808582][T12781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 568.808615][T12781] RIP: 0033:0x7f8f5e38e969 [ 568.808642][T12781] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 568.808675][T12781] RSP: 002b:00007f8f5f1d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 568.808704][T12781] RAX: ffffffffffffffda RBX: 00007f8f5e5b6080 RCX: 00007f8f5e38e969 [ 568.808725][T12781] RDX: 000000000000085d RSI: 0000000000200004 RDI: 0000000000000009 [ 568.808744][T12781] RBP: 00007f8f5e410ab1 R08: 000000000000000d R09: 0000300000004000 [ 568.808765][T12781] R10: 0000000000040eb2 R11: 0000000000000246 R12: 0000000000000000 [ 568.808784][T12781] R13: 0000000000000000 R14: 00007f8f5e5b6080 R15: 00007fffb7911918 [ 568.808826][T12781] [ 568.811018][ T30] audit: type=1804 audit(4294969135.800:63): pid=12781 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=add_template_measure cause=ENOMEM comm="syz.3.1414" name="anon_hugepage" dev="hugetlbfs" ino=39202 res=0 errno=0 [ 569.739370][T12804] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 569.747227][T12804] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 570.261143][T12801] Invalid ELF header magic: != ELF [ 571.007391][T12806] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 571.021171][T12806] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 571.034407][T12806] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 571.042399][T12806] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 571.319031][T12831] busy [ 572.096920][ T5838] Bluetooth: hci0: command 0x0c1a tx timeout [ 573.055585][ T5838] Bluetooth: hci3: command 0x0c1a tx timeout [ 573.055608][ T55] Bluetooth: hci2: command 0x0c1a tx timeout [ 573.062236][ T5838] Bluetooth: hci1: command 0x0c1a tx timeout [ 574.278900][T12885] busy [ 576.515576][T12921] random: crng reseeded on system resumption [ 580.480689][T13019] busy [ 581.228666][T13028] busy [ 582.764490][T13069] ima: policy update failed [ 582.766594][T13064] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1471'. [ 582.783799][ T30] audit: type=1802 audit(4294967302.410:64): pid=13069 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.1472" res=0 errno=0 [ 588.729293][T13189] FAULT_INJECTION: forcing a failure. [ 588.729293][T13189] name failslab, interval 1, probability 0, space 0, times 0 [ 588.797088][T13189] CPU: 0 UID: 0 PID: 13189 Comm: syz.3.1496 Not tainted 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 PREEMPT(full) [ 588.797134][T13189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 588.797153][T13189] Call Trace: [ 588.797163][T13189] [ 588.797175][T13189] dump_stack_lvl+0x16c/0x1f0 [ 588.797225][T13189] should_fail_ex+0x512/0x640 [ 588.797268][T13189] ? fs_reclaim_acquire+0xae/0x150 [ 588.797323][T13189] should_failslab+0xc2/0x120 [ 588.797363][T13189] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 588.797400][T13189] ? security_inode_alloc+0x3b/0x2b0 [ 588.797442][T13189] security_inode_alloc+0x3b/0x2b0 [ 588.797479][T13189] inode_init_always_gfp+0xce4/0x1030 [ 588.797539][T13189] alloc_inode+0x86/0x240 [ 588.797580][T13189] path_from_stashed+0x2be/0xb00 [ 588.797617][T13189] ? __pfx_path_from_stashed+0x10/0x10 [ 588.797653][T13189] ? do_raw_read_unlock+0x44/0xe0 [ 588.797708][T13189] ns_get_path+0x5f/0x80 [ 588.797767][T13189] proc_ns_get_link+0x121/0x260 [ 588.797825][T13189] ? __pfx_proc_ns_get_link+0x10/0x10 [ 588.797877][T13189] ? __pfx___might_resched+0x10/0x10 [ 588.797919][T13189] ? __pfx_proc_ns_get_link+0x10/0x10 [ 588.797969][T13189] step_into+0x1b22/0x2270 [ 588.798026][T13189] ? __pfx_step_into+0x10/0x10 [ 588.798080][T13189] ? find_held_lock+0x2b/0x80 [ 588.798124][T13189] path_openat+0x749/0x2d40 [ 588.798171][T13189] ? __pfx_path_openat+0x10/0x10 [ 588.798213][T13189] do_filp_open+0x20b/0x470 [ 588.798245][T13189] ? __pfx_do_filp_open+0x10/0x10 [ 588.798305][T13189] ? alloc_fd+0x471/0x7d0 [ 588.798365][T13189] do_sys_openat2+0x11b/0x1d0 [ 588.798414][T13189] ? __pfx_do_sys_openat2+0x10/0x10 [ 588.798471][T13189] __x64_sys_openat+0x174/0x210 [ 588.798515][T13189] ? __pfx___x64_sys_openat+0x10/0x10 [ 588.798562][T13189] ? do_user_addr_fault+0x843/0x1370 [ 588.798604][T13189] do_syscall_64+0xcd/0x230 [ 588.798651][T13189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.798683][T13189] RIP: 0033:0x7f8f5e38d2d0 [ 588.798707][T13189] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 588.798747][T13189] RSP: 002b:00007f8f5f1f7f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 588.798777][T13189] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f8f5e38d2d0 [ 588.798798][T13189] RDX: 0000000000000002 RSI: 00007f8f5f1f7fa0 RDI: 00000000ffffff9c [ 588.798819][T13189] RBP: 00007f8f5f1f7fa0 R08: 0000000000000000 R09: 0000000000000000 [ 588.798838][T13189] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 588.798857][T13189] R13: 0000000000000000 R14: 00007f8f5e5b5fa0 R15: 00007fffb7911918 [ 588.798897][T13189] [ 589.666013][T12867] Bluetooth: hci1: unexpected subevent 0x01 length: 4 < 18 [ 589.801943][T13229] FAULT_INJECTION: forcing a failure. [ 589.801943][T13229] name failslab, interval 1, probability 0, space 0, times 0 [ 589.826179][ T30] audit: type=1800 audit(4294967317.457:65): pid=13230 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1502" name="dbroot" dev="configfs" ino=40638 res=0 errno=0 [ 589.876098][T13229] CPU: 0 UID: 0 PID: 13229 Comm: syz.2.1504 Not tainted 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 PREEMPT(full) [ 589.876145][T13229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 589.876164][T13229] Call Trace: [ 589.876174][T13229] [ 589.876186][T13229] dump_stack_lvl+0x16c/0x1f0 [ 589.876234][T13229] should_fail_ex+0x512/0x640 [ 589.876277][T13229] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 589.876318][T13229] should_failslab+0xc2/0x120 [ 589.876357][T13229] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 589.876405][T13229] ? __alloc_skb+0x2b2/0x380 [ 589.876438][T13229] ? bpf_lsm_capable+0x9/0x10 [ 589.876476][T13229] __alloc_skb+0x2b2/0x380 [ 589.876508][T13229] ? __pfx___alloc_skb+0x10/0x10 [ 589.876541][T13229] ? genl_rcv_msg+0x550/0x800 [ 589.876582][T13229] ? genl_rcv_msg+0x4bb/0x800 [ 589.876636][T13229] netlink_ack+0x15d/0xb80 [ 589.876676][T13229] ? __lock_acquire+0xaa4/0x1ba0 [ 589.876726][T13229] netlink_rcv_skb+0x347/0x440 [ 589.876763][T13229] ? __pfx_genl_rcv_msg+0x10/0x10 [ 589.876810][T13229] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 589.876869][T13229] ? __pfx_down_read+0x10/0x10 [ 589.876916][T13229] ? netlink_deliver_tap+0x1ae/0xd30 [ 589.876958][T13229] genl_rcv+0x28/0x40 [ 589.876995][T13229] netlink_unicast+0x53a/0x7f0 [ 589.877038][T13229] ? __pfx_netlink_unicast+0x10/0x10 [ 589.877074][T13229] ? __lock_acquire+0xaa4/0x1ba0 [ 589.877125][T13229] netlink_sendmsg+0x8d1/0xdd0 [ 589.877170][T13229] ? __pfx_netlink_sendmsg+0x10/0x10 [ 589.877226][T13229] ____sys_sendmsg+0xa95/0xc70 [ 589.877272][T13229] ? copy_msghdr_from_user+0x10a/0x160 [ 589.877307][T13229] ? __pfx_____sys_sendmsg+0x10/0x10 [ 589.877371][T13229] ___sys_sendmsg+0x134/0x1d0 [ 589.877419][T13229] ? __pfx____sys_sendmsg+0x10/0x10 [ 589.877507][T13229] __sys_sendmsg+0x16d/0x220 [ 589.877543][T13229] ? __pfx___sys_sendmsg+0x10/0x10 [ 589.877591][T13229] ? rcu_is_watching+0x12/0xc0 [ 589.877632][T13229] do_syscall_64+0xcd/0x230 [ 589.877680][T13229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.877712][T13229] RIP: 0033:0x7fe1bb18e969 [ 589.877737][T13229] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 589.877767][T13229] RSP: 002b:00007fe1bbf13038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 589.877797][T13229] RAX: ffffffffffffffda RBX: 00007fe1bb3b5fa0 RCX: 00007fe1bb18e969 [ 589.877818][T13229] RDX: 0000000020040894 RSI: 0000200000000080 RDI: 0000000000000003 [ 589.877838][T13229] RBP: 00007fe1bbf13090 R08: 0000000000000000 R09: 0000000000000000 [ 589.877856][T13229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 589.877875][T13229] R13: 0000000000000000 R14: 00007fe1bb3b5fa0 R15: 00007ffcf9a79918 [ 589.877916][T13229] [ 591.257143][T13242] busy [ 591.642874][T13248] ptrace attach of "./syz-executor exec"[5834] was attempted by "./syz-executor exec"[13248] [ 592.184120][T13239] Process accounting paused [ 592.646584][T13253] FAULT_INJECTION: forcing a failure. [ 592.646584][T13253] name failslab, interval 1, probability 0, space 0, times 0 [ 592.661945][T13253] CPU: 1 UID: 0 PID: 13253 Comm: syz.2.1508 Not tainted 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 PREEMPT(full) [ 592.661990][T13253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 592.662009][T13253] Call Trace: [ 592.662020][T13253] [ 592.662032][T13253] dump_stack_lvl+0x16c/0x1f0 [ 592.662083][T13253] should_fail_ex+0x512/0x640 [ 592.662129][T13253] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 592.662179][T13253] should_failslab+0xc2/0x120 [ 592.662219][T13253] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 592.662257][T13253] ? alloc_inode+0xc3/0x240 [ 592.662303][T13253] alloc_inode+0xc3/0x240 [ 592.662341][T13253] path_from_stashed+0x2be/0xb00 [ 592.662378][T13253] ? __pfx_path_from_stashed+0x10/0x10 [ 592.662413][T13253] ? do_raw_read_unlock+0x44/0xe0 [ 592.662470][T13253] ns_get_path+0x5f/0x80 [ 592.662518][T13253] proc_ns_get_link+0x121/0x260 [ 592.662567][T13253] ? __pfx_proc_ns_get_link+0x10/0x10 [ 592.662619][T13253] ? __pfx___might_resched+0x10/0x10 [ 592.662660][T13253] ? __pfx_proc_ns_get_link+0x10/0x10 [ 592.662712][T13253] step_into+0x1b22/0x2270 [ 592.662768][T13253] ? __pfx_step_into+0x10/0x10 [ 592.662811][T13253] ? find_held_lock+0x2b/0x80 [ 592.662850][T13253] path_openat+0x749/0x2d40 [ 592.662887][T13253] ? __pfx_path_openat+0x10/0x10 [ 592.662934][T13253] do_filp_open+0x20b/0x470 [ 592.662960][T13253] ? __pfx_do_filp_open+0x10/0x10 [ 592.663009][T13253] ? alloc_fd+0x471/0x7d0 [ 592.663059][T13253] do_sys_openat2+0x11b/0x1d0 [ 592.663096][T13253] ? __pfx_do_sys_openat2+0x10/0x10 [ 592.663134][T13253] ? __pfx_task_mm_cid_work+0x10/0x10 [ 592.663184][T13253] ? __pfx___might_resched+0x10/0x10 [ 592.663216][T13253] __x64_sys_openat+0x174/0x210 [ 592.663253][T13253] ? __pfx___x64_sys_openat+0x10/0x10 [ 592.663293][T13253] ? __pfx_mem_cgroup_handle_over_high+0x10/0x10 [ 592.663337][T13253] do_syscall_64+0xcd/0x230 [ 592.663378][T13253] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.663405][T13253] RIP: 0033:0x7fe1bb18d2d0 [ 592.663428][T13253] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 592.663454][T13253] RSP: 002b:00007fe1bbf12f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 592.663479][T13253] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fe1bb18d2d0 [ 592.663497][T13253] RDX: 0000000000000002 RSI: 00007fe1bbf12fa0 RDI: 00000000ffffff9c [ 592.663513][T13253] RBP: 00007fe1bbf12fa0 R08: 0000000000000000 R09: 0000000000000000 [ 592.663529][T13253] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 592.663545][T13253] R13: 0000000000000000 R14: 00007fe1bb3b5fa0 R15: 00007ffcf9a79918 [ 592.663578][T13253] [ 594.638850][T13289] kernel read not supported for file /set_event_notrace_pid (pid: 13289 comm: syz.1.1516) [ 594.720931][ T30] audit: type=1800 audit(4294967322.347:66): pid=13289 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1516" name="set_event_notrace_pid" dev="tracefs" ino=31 res=0 errno=0 [ 594.837687][T13297] zram: Added device: zram2 [ 595.277465][T13314] busy [ 595.390590][T13318] FAULT_INJECTION: forcing a failure. [ 595.390590][T13318] name failslab, interval 1, probability 0, space 0, times 0 [ 595.429608][T13306] FAULT_INJECTION: forcing a failure. [ 595.429608][T13306] name failslab, interval 1, probability 0, space 0, times 0 [ 595.470937][T13306] CPU: 0 UID: 0 PID: 13306 Comm: syz.2.1523 Not tainted 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 PREEMPT(full) [ 595.470987][T13306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 595.471007][T13306] Call Trace: [ 595.471018][T13306] [ 595.471030][T13306] dump_stack_lvl+0x16c/0x1f0 [ 595.471082][T13306] should_fail_ex+0x512/0x640 [ 595.471136][T13306] ? __kmalloc_node_noprof+0xc5/0x500 [ 595.471180][T13306] should_failslab+0xc2/0x120 [ 595.471221][T13306] __kmalloc_node_noprof+0xd8/0x500 [ 595.471257][T13306] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 595.471296][T13306] ? alloc_slab_obj_exts+0x41/0xa0 [ 595.471356][T13306] alloc_slab_obj_exts+0x41/0xa0 [ 595.471408][T13306] new_slab+0x28c/0x340 [ 595.471463][T13306] ___slab_alloc+0xd9c/0x1940 [ 595.471516][T13306] ? alloc_inode+0xc3/0x240 [ 595.471556][T13306] ? new_slab+0x2d1/0x340 [ 595.471621][T13306] ? alloc_inode+0xc3/0x240 [ 595.471660][T13306] ? __slab_alloc.constprop.0+0x56/0xb0 [ 595.471713][T13306] __slab_alloc.constprop.0+0x56/0xb0 [ 595.471772][T13306] kmem_cache_alloc_lru_noprof+0xf4/0x3b0 [ 595.471811][T13306] ? alloc_inode+0xc3/0x240 [ 595.471857][T13306] alloc_inode+0xc3/0x240 [ 595.471897][T13306] path_from_stashed+0x2be/0xb00 [ 595.471937][T13306] ? __pfx_path_from_stashed+0x10/0x10 [ 595.471972][T13306] ? do_raw_read_unlock+0x44/0xe0 [ 595.472030][T13306] ns_get_path+0x5f/0x80 [ 595.472077][T13306] proc_ns_get_link+0x121/0x260 [ 595.472141][T13306] ? __pfx_proc_ns_get_link+0x10/0x10 [ 595.472193][T13306] ? __pfx___might_resched+0x10/0x10 [ 595.472236][T13306] ? __pfx_proc_ns_get_link+0x10/0x10 [ 595.472290][T13306] step_into+0x1b22/0x2270 [ 595.472347][T13306] ? __pfx_step_into+0x10/0x10 [ 595.472391][T13306] ? find_held_lock+0x2b/0x80 [ 595.472436][T13306] path_openat+0x749/0x2d40 [ 595.472483][T13306] ? __pfx_path_openat+0x10/0x10 [ 595.472526][T13306] do_filp_open+0x20b/0x470 [ 595.472559][T13306] ? __pfx_do_filp_open+0x10/0x10 [ 595.472620][T13306] ? alloc_fd+0x471/0x7d0 [ 595.472683][T13306] do_sys_openat2+0x11b/0x1d0 [ 595.472725][T13306] ? __pfx_do_sys_openat2+0x10/0x10 [ 595.472786][T13306] __x64_sys_openat+0x174/0x210 [ 595.472831][T13306] ? __pfx___x64_sys_openat+0x10/0x10 [ 595.472878][T13306] ? do_user_addr_fault+0x843/0x1370 [ 595.472921][T13306] do_syscall_64+0xcd/0x230 [ 595.472972][T13306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 595.473005][T13306] RIP: 0033:0x7fe1bb18d2d0 [ 595.473032][T13306] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 595.473065][T13306] RSP: 002b:00007fe1bbf12f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 595.473103][T13306] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fe1bb18d2d0 [ 595.473124][T13306] RDX: 0000000000000002 RSI: 00007fe1bbf12fa0 RDI: 00000000ffffff9c [ 595.473145][T13306] RBP: 00007fe1bbf12fa0 R08: 0000000000000000 R09: 0000000000000000 [ 595.473164][T13306] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 595.473183][T13306] R13: 0000000000000000 R14: 00007fe1bb3b5fa0 R15: 00007ffcf9a79918 [ 595.473225][T13306] [ 595.527740][T13318] CPU: 1 UID: 0 PID: 13318 Comm: syz.1.1525 Not tainted 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 PREEMPT(full) [ 595.527787][T13318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 595.527808][T13318] Call Trace: [ 595.527818][T13318] [ 595.527830][T13318] dump_stack_lvl+0x16c/0x1f0 [ 595.527889][T13318] should_fail_ex+0x512/0x640 [ 595.527944][T13318] should_failslab+0xc2/0x120 [ 595.527987][T13318] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 595.528026][T13318] ? skb_clone+0x190/0x3f0 [ 595.528070][T13318] skb_clone+0x190/0x3f0 [ 595.528110][T13318] netlink_deliver_tap+0xabd/0xd30 [ 595.528158][T13318] netlink_unicast+0x6b2/0x7f0 [ 595.528204][T13318] ? __pfx_netlink_unicast+0x10/0x10 [ 595.528242][T13318] ? genl_rcv_msg+0x4bb/0x800 [ 595.528298][T13318] netlink_ack+0x696/0xb80 [ 595.528351][T13318] netlink_rcv_skb+0x347/0x440 [ 595.528391][T13318] ? __pfx_genl_rcv_msg+0x10/0x10 [ 595.528441][T13318] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 595.528502][T13318] ? __pfx_down_read+0x10/0x10 [ 595.528554][T13318] ? netlink_deliver_tap+0x1ae/0xd30 [ 595.528598][T13318] genl_rcv+0x28/0x40 [ 595.528638][T13318] netlink_unicast+0x53a/0x7f0 [ 595.528684][T13318] ? __pfx_netlink_unicast+0x10/0x10 [ 595.528720][T13318] ? __lock_acquire+0xaa4/0x1ba0 [ 595.528776][T13318] netlink_sendmsg+0x8d1/0xdd0 [ 595.528824][T13318] ? __pfx_netlink_sendmsg+0x10/0x10 [ 595.528889][T13318] ____sys_sendmsg+0xa95/0xc70 [ 595.528937][T13318] ? copy_msghdr_from_user+0x10a/0x160 [ 595.528974][T13318] ? __pfx_____sys_sendmsg+0x10/0x10 [ 595.529042][T13318] ___sys_sendmsg+0x134/0x1d0 [ 595.529082][T13318] ? __pfx____sys_sendmsg+0x10/0x10 [ 595.529173][T13318] __sys_sendmsg+0x16d/0x220 [ 595.529211][T13318] ? __pfx___sys_sendmsg+0x10/0x10 [ 595.529261][T13318] ? rcu_is_watching+0x12/0xc0 [ 595.529304][T13318] do_syscall_64+0xcd/0x230 [ 595.529353][T13318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 595.529388][T13318] RIP: 0033:0x7f42e278e969 [ 595.529415][T13318] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 595.529448][T13318] RSP: 002b:00007f42e3659038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 595.529480][T13318] RAX: ffffffffffffffda RBX: 00007f42e29b5fa0 RCX: 00007f42e278e969 [ 595.529502][T13318] RDX: 0000000020040894 RSI: 0000200000000080 RDI: 0000000000000003 [ 595.529524][T13318] RBP: 00007f42e3659090 R08: 0000000000000000 R09: 0000000000000000 [ 595.529545][T13318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 595.529565][T13318] R13: 0000000000000000 R14: 00007f42e29b5fa0 R15: 00007ffe5e956c08 [ 595.529609][T13318] [ 599.245545][T13368] busy [ 600.590081][T12867] Bluetooth: hci0: unexpected subevent 0x01 length: 4 < 18 [ 600.749411][ T30] audit: type=1800 audit(4294967336.379:67): pid=13385 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1537" name="dbroot" dev="configfs" ino=41850 res=0 errno=0 [ 603.679138][T13427] busy [ 603.747037][T13428] busy [ 605.327150][T12867] Bluetooth: hci0: unexpected subevent 0x01 length: 4 < 18 [ 605.457842][ T30] audit: type=1800 audit(4294967349.082:68): pid=13457 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1553" name="dbroot" dev="configfs" ino=43062 res=0 errno=0 [ 608.747325][T13482] FAULT_INJECTION: forcing a failure. [ 608.747325][T13482] name failslab, interval 1, probability 0, space 0, times 0 [ 608.770973][T13482] CPU: 1 UID: 0 PID: 13482 Comm: syz.1.1555 Not tainted 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 PREEMPT(full) [ 608.771021][T13482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 608.771039][T13482] Call Trace: [ 608.771049][T13482] [ 608.771061][T13482] dump_stack_lvl+0x16c/0x1f0 [ 608.771110][T13482] should_fail_ex+0x512/0x640 [ 608.771154][T13482] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 608.771199][T13482] should_failslab+0xc2/0x120 [ 608.771239][T13482] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 608.771282][T13482] ? __pfx_proc_create_data+0x10/0x10 [ 608.771319][T13482] ? cache_create_net+0x2b/0x220 [ 608.771374][T13482] kmemdup_noprof+0x29/0x60 [ 608.771415][T13482] cache_create_net+0x2b/0x220 [ 608.771466][T13482] nfsd_idmap_init+0x11f/0x250 [ 608.771504][T13482] ? __pfx_nfsd_net_init+0x10/0x10 [ 608.771560][T13482] nfsd_net_init+0x69/0x3d0 [ 608.771610][T13482] ? __pfx_nfsd_net_init+0x10/0x10 [ 608.771663][T13482] ops_init+0x1df/0x5f0 [ 608.771707][T13482] setup_net+0x21e/0x850 [ 608.771761][T13482] ? __pfx_setup_net+0x10/0x10 [ 608.771796][T13482] ? lockdep_init_map_type+0x5c/0x280 [ 608.771842][T13482] ? __pfx_down_read_killable+0x10/0x10 [ 608.771899][T13482] ? debug_mutex_init+0x37/0x70 [ 608.771957][T13482] copy_net_ns+0x2a6/0x5f0 [ 608.772004][T13482] create_new_namespaces+0x3ea/0xad0 [ 608.772059][T13482] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 608.772100][T13482] ksys_unshare+0x45b/0xa40 [ 608.772146][T13482] ? __pfx_ksys_unshare+0x10/0x10 [ 608.772186][T13482] ? xfd_validate_state+0x5d/0x180 [ 608.772242][T13482] ? rcu_is_watching+0x12/0xc0 [ 608.772282][T13482] __x64_sys_unshare+0x31/0x40 [ 608.772327][T13482] do_syscall_64+0xcd/0x230 [ 608.772376][T13482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 608.772409][T13482] RIP: 0033:0x7f42e278e969 [ 608.772436][T13482] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 608.772470][T13482] RSP: 002b:00007f42e35f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 608.772502][T13482] RAX: ffffffffffffffda RBX: 00007f42e29b6240 RCX: 00007f42e278e969 [ 608.772524][T13482] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 608.772544][T13482] RBP: 00007f42e2810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 608.772565][T13482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 608.772585][T13482] R13: 0000000000000000 R14: 00007f42e29b6240 R15: 00007ffe5e956c08 [ 608.772628][T13482] [ 609.049010][ C1] vkms_vblank_simulate: vblank timer overrun [ 611.974125][T13536] busy [ 613.384584][T12867] Bluetooth: hci0: unexpected subevent 0x01 length: 4 < 18 [ 613.469129][ T30] audit: type=1800 audit(4294967365.069:69): pid=13547 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1570" name="dbroot" dev="configfs" ino=42546 res=0 errno=0 [ 614.318768][T13569] Invalid ELF header magic: != ELF [ 616.100117][T13589] bond0: no command found in slaves file - use +ifname or -ifname [ 617.918469][T13605] FAULT_INJECTION: forcing a failure. [ 617.918469][T13605] name failslab, interval 1, probability 0, space 0, times 0 [ 617.996574][T13605] CPU: 1 UID: 0 PID: 13605 Comm: syz.1.1582 Not tainted 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 PREEMPT(full) [ 617.996619][T13605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 617.996639][T13605] Call Trace: [ 617.996649][T13605] [ 617.996661][T13605] dump_stack_lvl+0x16c/0x1f0 [ 617.996712][T13605] should_fail_ex+0x512/0x640 [ 617.996757][T13605] ? fs_reclaim_acquire+0xae/0x150 [ 617.996811][T13605] should_failslab+0xc2/0x120 [ 617.996852][T13605] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 617.996890][T13605] ? security_inode_alloc+0x3b/0x2b0 [ 617.996931][T13605] security_inode_alloc+0x3b/0x2b0 [ 617.996969][T13605] inode_init_always_gfp+0xce4/0x1030 [ 617.997028][T13605] alloc_inode+0x86/0x240 [ 617.997068][T13605] path_from_stashed+0x2be/0xb00 [ 617.997106][T13605] ? __pfx_path_from_stashed+0x10/0x10 [ 617.997152][T13605] ? do_raw_read_unlock+0x44/0xe0 [ 617.997211][T13605] ns_get_path+0x5f/0x80 [ 617.997261][T13605] proc_ns_get_link+0x121/0x260 [ 617.997314][T13605] ? __pfx_proc_ns_get_link+0x10/0x10 [ 617.997366][T13605] ? __pfx___might_resched+0x10/0x10 [ 617.997407][T13605] ? __pfx_proc_ns_get_link+0x10/0x10 [ 617.997457][T13605] step_into+0x1b22/0x2270 [ 617.997514][T13605] ? __pfx_step_into+0x10/0x10 [ 617.997561][T13605] ? find_held_lock+0x2b/0x80 [ 617.997606][T13605] path_openat+0x749/0x2d40 [ 617.997653][T13605] ? __pfx_path_openat+0x10/0x10 [ 617.997696][T13605] do_filp_open+0x20b/0x470 [ 617.997729][T13605] ? __pfx_do_filp_open+0x10/0x10 [ 617.997791][T13605] ? alloc_fd+0x471/0x7d0 [ 617.997854][T13605] do_sys_openat2+0x11b/0x1d0 [ 617.997898][T13605] ? __pfx_do_sys_openat2+0x10/0x10 [ 617.997959][T13605] __x64_sys_openat+0x174/0x210 [ 617.998004][T13605] ? __pfx___x64_sys_openat+0x10/0x10 [ 617.998053][T13605] ? do_user_addr_fault+0x843/0x1370 [ 617.998097][T13605] do_syscall_64+0xcd/0x230 [ 617.998162][T13605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 617.998198][T13605] RIP: 0033:0x7f42e278d2d0 [ 617.998226][T13605] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 617.998259][T13605] RSP: 002b:00007f42e3658f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 617.998291][T13605] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f42e278d2d0 [ 617.998313][T13605] RDX: 0000000000000002 RSI: 00007f42e3658fa0 RDI: 00000000ffffff9c [ 617.998335][T13605] RBP: 00007f42e3658fa0 R08: 0000000000000000 R09: 0000000000000000 [ 617.998356][T13605] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 617.998376][T13605] R13: 0000000000000000 R14: 00007f42e29b5fa0 R15: 00007ffe5e956c08 [ 617.998416][T13605] [ 618.398831][T13618] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1583'. [ 618.617990][T13618] dummy0: entered promiscuous mode [ 622.623736][T13657] netlink: 'syz.3.1592': attribute type 11 has an invalid length. [ 623.044178][T13654] Process accounting resumed [ 624.615128][T13685] FAULT_INJECTION: forcing a failure. [ 624.615128][T13685] name failslab, interval 1, probability 0, space 0, times 0 [ 624.630385][T13685] CPU: 1 UID: 0 PID: 13685 Comm: syz.3.1599 Not tainted 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 PREEMPT(full) [ 624.630419][T13685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 624.630433][T13685] Call Trace: [ 624.630441][T13685] [ 624.630449][T13685] dump_stack_lvl+0x16c/0x1f0 [ 624.630487][T13685] should_fail_ex+0x512/0x640 [ 624.630520][T13685] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 624.630550][T13685] should_failslab+0xc2/0x120 [ 624.630587][T13685] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 624.630614][T13685] ? __proc_create+0xc3/0x8c0 [ 624.630639][T13685] ? __proc_create+0x2ce/0x8c0 [ 624.630670][T13685] __proc_create+0x2ce/0x8c0 [ 624.630696][T13685] ? __pfx___proc_create+0x10/0x10 [ 624.630727][T13685] ? _raw_write_unlock+0x28/0x50 [ 624.630756][T13685] ? proc_register+0x314/0x5f0 [ 624.630786][T13685] proc_create_reg+0x7d/0x180 [ 624.630816][T13685] proc_create_net_data+0x8e/0x1b0 [ 624.630844][T13685] ? __pfx_proc_create_net_data+0x10/0x10 [ 624.630881][T13685] sctp_proc_init+0x199/0x270 [ 624.630917][T13685] ? __pfx_sctp_defaults_init+0x10/0x10 [ 624.630951][T13685] sctp_defaults_init+0x74a/0xd80 [ 624.630987][T13685] ? __pfx_sctp_defaults_init+0x10/0x10 [ 624.631021][T13685] ops_init+0x1df/0x5f0 [ 624.631065][T13685] setup_net+0x21e/0x850 [ 624.631109][T13685] ? __pfx_setup_net+0x10/0x10 [ 624.631145][T13685] ? lockdep_init_map_type+0x5c/0x280 [ 624.631189][T13685] ? __pfx_down_read_killable+0x10/0x10 [ 624.631245][T13685] ? debug_mutex_init+0x37/0x70 [ 624.631303][T13685] copy_net_ns+0x2a6/0x5f0 [ 624.631351][T13685] create_new_namespaces+0x3ea/0xad0 [ 624.631399][T13685] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 624.631440][T13685] ksys_unshare+0x45b/0xa40 [ 624.631487][T13685] ? __pfx_ksys_unshare+0x10/0x10 [ 624.631530][T13685] ? xfd_validate_state+0x5d/0x180 [ 624.631594][T13685] ? rcu_is_watching+0x12/0xc0 [ 624.631636][T13685] __x64_sys_unshare+0x31/0x40 [ 624.631681][T13685] do_syscall_64+0xcd/0x230 [ 624.631731][T13685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.631767][T13685] RIP: 0033:0x7f8f5e38e969 [ 624.631787][T13685] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 624.631811][T13685] RSP: 002b:00007f8f5f1b6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 624.631834][T13685] RAX: ffffffffffffffda RBX: 00007f8f5e5b6160 RCX: 00007f8f5e38e969 [ 624.631849][T13685] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 624.631864][T13685] RBP: 00007f8f5e410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 624.631878][T13685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 624.631892][T13685] R13: 0000000000000000 R14: 00007f8f5e5b6160 R15: 00007fffb7911918 [ 624.631922][T13685] [ 624.937102][ C1] vkms_vblank_simulate: vblank timer overrun [ 625.432477][T13686] netlink: 346 bytes leftover after parsing attributes in process `syz.0.1596'. [ 625.523700][T13690] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 625.523700][T13690] The task syz.2.1600 (13690) triggered the difference, watch for misbehavior. [ 626.991796][T13712] busy [ 628.490804][T13737] FAULT_INJECTION: forcing a failure. [ 628.490804][T13737] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 628.490853][T13737] CPU: 0 UID: 0 PID: 13737 Comm: syz.1.1608 Not tainted 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 PREEMPT(full) [ 628.490891][T13737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 628.490909][T13737] Call Trace: [ 628.490919][T13737] [ 628.490931][T13737] dump_stack_lvl+0x16c/0x1f0 [ 628.490979][T13737] should_fail_ex+0x512/0x640 [ 628.491030][T13737] _copy_from_user+0x2e/0xd0 [ 628.491081][T13737] move_addr_to_kernel+0x65/0x170 [ 628.491131][T13737] __copy_msghdr+0x386/0x470 [ 628.491166][T13737] copy_msghdr_from_user+0xc1/0x160 [ 628.491201][T13737] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 628.491249][T13737] ? __pfx__kstrtoull+0x10/0x10 [ 628.491299][T13737] ___sys_sendmsg+0xfe/0x1d0 [ 628.491335][T13737] ? __pfx____sys_sendmsg+0x10/0x10 [ 628.491388][T13737] ? find_held_lock+0x2b/0x80 [ 628.491445][T13737] __sys_sendmmsg+0x200/0x420 [ 628.491485][T13737] ? __pfx___sys_sendmmsg+0x10/0x10 [ 628.491533][T13737] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 628.491596][T13737] ? fput+0x70/0xf0 [ 628.491631][T13737] ? ksys_write+0x1b9/0x240 [ 628.491660][T13737] ? __pfx_ksys_write+0x10/0x10 [ 628.491698][T13737] __x64_sys_sendmmsg+0x9c/0x100 [ 628.491731][T13737] ? lockdep_hardirqs_on+0x7c/0x110 [ 628.491773][T13737] do_syscall_64+0xcd/0x230 [ 628.491820][T13737] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 628.491852][T13737] RIP: 0033:0x7f42e278e969 [ 628.491877][T13737] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 628.491908][T13737] RSP: 002b:00007f42e3638038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 628.491936][T13737] RAX: ffffffffffffffda RBX: 00007f42e29b6080 RCX: 00007f42e278e969 [ 628.491974][T13737] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000003 [ 628.491993][T13737] RBP: 00007f42e3638090 R08: 0000000000000000 R09: 0000000000000000 [ 628.492013][T13737] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 628.492033][T13737] R13: 0000000000000001 R14: 00007f42e29b6080 R15: 00007ffe5e956c08 [ 628.492074][T13737] [ 629.416134][T13745] FAULT_INJECTION: forcing a failure. [ 629.416134][T13745] name failslab, interval 1, probability 0, space 0, times 0 [ 629.431295][T12867] Bluetooth: hci0: unexpected subevent 0x01 length: 4 < 18 [ 629.435329][T13745] CPU: 0 UID: 0 PID: 13745 Comm: syz.2.1611 Not tainted 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 PREEMPT(full) [ 629.435378][T13745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 629.435401][T13745] Call Trace: [ 629.435412][T13745] [ 629.435425][T13745] dump_stack_lvl+0x16c/0x1f0 [ 629.435482][T13745] should_fail_ex+0x512/0x640 [ 629.435530][T13745] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 629.435574][T13745] should_failslab+0xc2/0x120 [ 629.435617][T13745] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 629.435655][T13745] ? lockdep_init_map_type+0x5c/0x280 [ 629.435701][T13745] ? seq_open+0x55/0x170 [ 629.435748][T13745] seq_open+0x55/0x170 [ 629.435791][T13745] kernfs_fop_open+0x59f/0xda0 [ 629.435837][T13745] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 629.435898][T13745] do_dentry_open+0x741/0x1c10 [ 629.435934][T13745] ? __pfx_kernfs_fop_open+0x10/0x10 [ 629.435987][T13745] vfs_open+0x82/0x3f0 [ 629.436037][T13745] path_openat+0x1e5e/0x2d40 [ 629.436086][T13745] ? __pfx_path_openat+0x10/0x10 [ 629.436131][T13745] do_filp_open+0x20b/0x470 [ 629.436172][T13745] ? __pfx_do_filp_open+0x10/0x10 [ 629.436239][T13745] ? alloc_fd+0x471/0x7d0 [ 629.436304][T13745] do_sys_openat2+0x11b/0x1d0 [ 629.436351][T13745] ? __pfx_do_sys_openat2+0x10/0x10 [ 629.436401][T13745] ? __pfx___might_resched+0x10/0x10 [ 629.436450][T13745] __x64_sys_openat+0x174/0x210 [ 629.436497][T13745] ? __pfx___x64_sys_openat+0x10/0x10 [ 629.436546][T13745] ? rcu_is_watching+0x12/0xc0 [ 629.436591][T13745] do_syscall_64+0xcd/0x230 [ 629.436642][T13745] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 629.436678][T13745] RIP: 0033:0x7fe1bb18e969 [ 629.436705][T13745] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 629.436748][T13745] RSP: 002b:00007fe1bbf13038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 629.436780][T13745] RAX: ffffffffffffffda RBX: 00007fe1bb3b5fa0 RCX: 00007fe1bb18e969 [ 629.436804][T13745] RDX: 0000000000000000 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 629.436826][T13745] RBP: 00007fe1bb210ab1 R08: 0000000000000000 R09: 0000000000000000 [ 629.436848][T13745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 629.436868][T13745] R13: 0000000000000000 R14: 00007fe1bb3b5fa0 R15: 00007ffcf9a79918 [ 629.436912][T13745] [ 629.626051][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.745128][ T30] audit: type=1800 audit(4294967389.374:70): pid=13747 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1610" name="dbroot" dev="configfs" ino=43886 res=0 errno=0 [ 629.801249][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 630.935380][T12867] Bluetooth: hci1: unexpected subevent 0x01 length: 4 < 18 [ 631.920160][T13761] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1615'. [ 633.067936][T13766] syz.0.1610 (13766) used greatest stack depth: 21080 bytes left [ 633.920855][T13783] busy [ 636.508881][T13822] FAULT_INJECTION: forcing a failure. [ 636.508881][T13822] name failslab, interval 1, probability 0, space 0, times 0 [ 636.524705][T13822] CPU: 0 UID: 0 PID: 13822 Comm: syz.2.1626 Not tainted 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 PREEMPT(full) [ 636.524753][T13822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 636.524773][T13822] Call Trace: [ 636.524784][T13822] [ 636.524796][T13822] dump_stack_lvl+0x16c/0x1f0 [ 636.524848][T13822] should_fail_ex+0x512/0x640 [ 636.524895][T13822] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 636.524937][T13822] should_failslab+0xc2/0x120 [ 636.524977][T13822] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 636.525015][T13822] ? alloc_inode+0xc3/0x240 [ 636.525061][T13822] alloc_inode+0xc3/0x240 [ 636.525101][T13822] path_from_stashed+0x2be/0xb00 [ 636.525140][T13822] ? __pfx_path_from_stashed+0x10/0x10 [ 636.525174][T13822] ? do_raw_read_unlock+0x44/0xe0 [ 636.525233][T13822] ns_get_path+0x5f/0x80 [ 636.525286][T13822] proc_ns_get_link+0x121/0x260 [ 636.525338][T13822] ? __pfx_proc_ns_get_link+0x10/0x10 [ 636.525388][T13822] ? __pfx___might_resched+0x10/0x10 [ 636.525428][T13822] ? __pfx_proc_ns_get_link+0x10/0x10 [ 636.525477][T13822] step_into+0x1b22/0x2270 [ 636.525540][T13822] ? __pfx_step_into+0x10/0x10 [ 636.525586][T13822] ? find_held_lock+0x2b/0x80 [ 636.525628][T13822] path_openat+0x749/0x2d40 [ 636.525672][T13822] ? __pfx_path_openat+0x10/0x10 [ 636.525713][T13822] do_filp_open+0x20b/0x470 [ 636.525743][T13822] ? __pfx_do_filp_open+0x10/0x10 [ 636.525807][T13822] ? alloc_fd+0x471/0x7d0 [ 636.525867][T13822] do_sys_openat2+0x11b/0x1d0 [ 636.525910][T13822] ? __pfx_do_sys_openat2+0x10/0x10 [ 636.525967][T13822] __x64_sys_openat+0x174/0x210 [ 636.526011][T13822] ? __pfx___x64_sys_openat+0x10/0x10 [ 636.526057][T13822] ? do_user_addr_fault+0x843/0x1370 [ 636.526099][T13822] do_syscall_64+0xcd/0x230 [ 636.526147][T13822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 636.526179][T13822] RIP: 0033:0x7fe1bb18d2d0 [ 636.526204][T13822] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 636.526236][T13822] RSP: 002b:00007fe1bbf12f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 636.526266][T13822] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fe1bb18d2d0 [ 636.526288][T13822] RDX: 0000000000000002 RSI: 00007fe1bbf12fa0 RDI: 00000000ffffff9c [ 636.526308][T13822] RBP: 00007fe1bbf12fa0 R08: 0000000000000000 R09: 0000000000000000 [ 636.526327][T13822] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 636.526346][T13822] R13: 0000000000000000 R14: 00007fe1bb3b5fa0 R15: 00007ffcf9a79918 [ 636.526385][T13822] [ 636.818971][T13831] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1627'. [ 637.638151][T13839] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1628'. [ 637.716118][T13840] ubi0: attaching mtd0 [ 637.723780][T13840] ubi0: scanning is finished [ 637.808176][T13838] HfR: entered promiscuous mode [ 637.850249][T13840] ubi0 error: ubi_read_volume_table: LEB size too small for a volume record [ 637.986717][T13840] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 638.004767][T13843] blktrace: Concurrent blktraces are not allowed on loop2 [ 639.075872][T13858] busy [ 639.115667][T12867] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 640.213686][T13872] netlink: 186 bytes leftover after parsing attributes in process `syz.0.1633'. [ 643.540644][T13903] busy [ 644.696519][T13918] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1643'. [ 645.329578][T13928] blktrace: Concurrent blktraces are not allowed on loop2 [ 646.479028][T13953] busy [ 647.483121][T13970] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input17 [ 648.285522][T13919] syz.0.1635 (13919) used greatest stack depth: 20744 bytes left [ 648.604358][T14001] can: request_module (can-proto-3) failed. [ 649.886456][T14026] busy [ 650.586239][T12867] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 651.641762][T13610] syz.0.1579 (13610) used greatest stack depth: 19752 bytes left [ 651.818761][T14047] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1664'. [ 691.061104][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 691.068263][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 752.499582][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 752.506851][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 813.296489][ T31] INFO: task jbd2/sda1-8:5162 blocked for more than 143 seconds. [ 813.305081][ T31] Not tainted 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 [ 813.313576][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 813.323229][ T31] task:jbd2/sda1-8 state:D stack:26008 pid:5162 tgid:5162 ppid:2 task_flags:0x240040 flags:0x00004000 [ 813.336873][ T31] Call Trace: [ 813.340644][ T31] [ 813.343882][ T31] __schedule+0x116f/0x5de0 [ 813.349332][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 813.354866][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 813.361013][ T31] ? __pfx___schedule+0x10/0x10 [ 813.366642][ T31] ? find_held_lock+0x2b/0x80 [ 813.371851][ T31] ? schedule+0x2d7/0x3a0 [ 813.376818][ T31] schedule+0xe7/0x3a0 [ 813.381337][ T31] io_schedule+0xbf/0x130 [ 813.386175][ T31] bit_wait_io+0x15/0xe0 [ 813.391063][ T31] __wait_on_bit+0x62/0x180 [ 813.396622][ T31] ? __pfx_bit_wait_io+0x10/0x10 [ 813.402131][ T31] out_of_line_wait_on_bit+0xd9/0x110 [ 813.408889][ T31] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 813.416047][ T31] ? __pfx_wake_bit_function+0x10/0x10 [ 813.422221][ T31] ? __pfx___might_resched+0x10/0x10 [ 813.428395][ T31] __wait_on_buffer+0x64/0x70 [ 813.433592][ T31] jbd2_journal_commit_transaction+0x382e/0x6830 [ 813.441401][ T31] ? __pfx_jbd2_journal_commit_transaction+0x10/0x10 [ 813.449020][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 813.455625][ T31] ? debug_object_deactivate+0x1ec/0x3a0 [ 813.462228][ T31] ? __pfx_debug_object_deactivate+0x10/0x10 [ 813.469033][ T31] ? find_held_lock+0x2b/0x80 [ 813.474223][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 813.480752][ T31] ? rcu_is_watching+0x12/0xc0 [ 813.486102][ T31] kjournald2+0x1f4/0x760 [ 813.490947][ T31] ? __pfx_kjournald2+0x10/0x10 [ 813.496501][ T31] ? find_held_lock+0x2b/0x80 [ 813.501699][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 813.508770][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 813.514541][ T31] ? __kthread_parkme+0x19e/0x250 [ 813.520178][ T31] ? __pfx_kjournald2+0x10/0x10 [ 813.525619][ T31] kthread+0x3c2/0x780 [ 813.530262][ T31] ? __pfx_kthread+0x10/0x10 [ 813.535409][ T31] ? __pfx_kthread+0x10/0x10 [ 813.540903][ T31] ? __pfx_kthread+0x10/0x10 [ 813.546237][ T31] ? __pfx_kthread+0x10/0x10 [ 813.551438][ T31] ? rcu_is_watching+0x12/0xc0 [ 813.556769][ T31] ? __pfx_kthread+0x10/0x10 [ 813.561872][ T31] ret_from_fork+0x45/0x80 [ 813.567213][ T31] ? __pfx_kthread+0x10/0x10 [ 813.572424][ T31] ret_from_fork_asm+0x1a/0x30 [ 813.577782][ T31] [ 813.581155][ T31] INFO: task syz-executor:5819 blocked for more than 143 seconds. [ 813.589819][ T31] Not tainted 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 [ 813.598379][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 813.609367][ T31] task:syz-executor state:D stack:23160 pid:5819 tgid:5819 ppid:5817 task_flags:0x440100 flags:0x00000002 [ 813.623224][ T31] Call Trace: [ 813.626936][ T31] [ 813.630332][ T31] __schedule+0x116f/0x5de0 [ 813.635427][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 813.641125][ T31] ? __pfx___schedule+0x10/0x10 [ 813.647117][ T31] ? find_held_lock+0x2b/0x80 [ 813.652319][ T31] ? schedule+0x2d7/0x3a0 [ 813.657337][ T31] schedule+0xe7/0x3a0 [ 813.661872][ T31] io_schedule+0xbf/0x130 [ 813.667116][ T31] bit_wait_io+0x15/0xe0 [ 813.671843][ T31] __wait_on_bit+0x62/0x180 [ 813.677051][ T31] ? __pfx_bit_wait_io+0x10/0x10 [ 813.682581][ T31] out_of_line_wait_on_bit+0xd9/0x110 [ 813.688872][ T31] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 813.695700][ T31] ? __pfx_wake_bit_function+0x10/0x10 [ 813.701766][ T31] do_get_write_access+0x93d/0x12a0 [ 813.707593][ T31] jbd2_journal_get_write_access+0x1d6/0x280 [ 813.714238][ T31] __ext4_journal_get_write_access+0x6a/0x340 [ 813.721127][ T31] ext4_reserve_inode_write+0x1be/0x320 [ 813.727474][ T31] __ext4_mark_inode_dirty+0x197/0x870 [ 813.733514][ T31] ? trace_kmem_cache_alloc+0x28/0xc0 [ 813.739631][ T31] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 813.746680][ T31] ? rcu_is_watching+0x12/0xc0 [ 813.752074][ T31] ? trace_jbd2_handle_start+0x1a8/0x230 [ 813.758566][ T31] ? jbd2__journal_start+0xf6/0x6a0 [ 813.764345][ T31] ? __ext4_journal_start_sb+0x195/0x690 [ 813.770945][ T31] ? __ext4_journal_start_sb+0x19e/0x690 [ 813.777279][ T31] ? ext4_dirty_inode+0xa1/0x130 [ 813.782749][ T31] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 813.788769][ T31] ext4_dirty_inode+0xd9/0x130 [ 813.794199][ T31] ? rcu_is_watching+0x12/0xc0 [ 813.799537][ T31] __mark_inode_dirty+0x1eb/0xe50 [ 813.805126][ T31] generic_update_time+0xcf/0xf0 [ 813.810775][ T31] file_update_time+0x17d/0x1c0 [ 813.816223][ T31] ext4_page_mkwrite+0x35e/0x1750 [ 813.821806][ T31] ? tcp_recvmsg+0x1f9/0x680 [ 813.826939][ T31] ? __pfx_tcp_recvmsg+0x10/0x10 [ 813.832422][ T31] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 813.838667][ T31] ? vm_normal_page+0x13b/0x2b0 [ 813.844056][ T31] ? find_held_lock+0x2b/0x80 [ 813.849761][ T31] ? find_held_lock+0x2b/0x80 [ 813.854950][ T31] do_page_mkwrite+0x171/0x380 [ 813.861268][ T31] do_wp_page+0xb9e/0x58e0 [ 813.866513][ T31] ? __pfx_do_wp_page+0x10/0x10 [ 813.872496][ T31] ? do_raw_spin_lock+0x12c/0x2b0 [ 813.878448][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 813.884568][ T31] ? ___pte_offset_map+0x1bc/0x540 [ 813.890358][ T31] __handle_mm_fault+0x1ada/0x2a40 [ 813.896122][ T31] ? __pfx___handle_mm_fault+0x10/0x10 [ 813.902183][ T31] ? lock_vma_under_rcu+0x47d/0x970 [ 813.907999][ T31] ? lock_vma_under_rcu+0x47d/0x970 [ 813.913811][ T31] handle_mm_fault+0x3fe/0xad0 [ 813.919164][ T31] do_user_addr_fault+0x60c/0x1370 [ 813.924847][ T31] exc_page_fault+0x5c/0xc0 [ 813.929899][ T31] asm_exc_page_fault+0x26/0x30 [ 813.935445][ T31] RIP: 0033:0x7ff005877e83 [ 813.940353][ T31] RSP: 002b:00007ffeca6fd9c0 EFLAGS: 00010202 [ 813.946557][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 813.947251][ T31] RAX: 0000000000000354 RBX: 0000000000000354 RCX: 0000000000000355 [ 813.953974][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 813.970398][ T31] RDX: ffffffff8248e591 RSI: 000055556b8e24a0 RDI: 00007ff003800000 [ 813.979884][ T31] RBP: 00007ffeca6fdcb0 R08: 000055556b8e24a8 R09: 0000000000000034 [ 813.988773][ T31] R10: 00007ff005800000 R11: 00007ffeca6fdec0 R12: 00007ffeca6fdd10 [ 813.997843][ T31] R13: 0000000000000004 R14: 00007ffeca6fda30 R15: 00007ffeca6fdb00 [ 814.006819][ T31] ? do_signalfd4+0x3f1/0x420 [ 814.012159][ T31] [ 814.015868][ T31] INFO: task syz.1.1660:14016 blocked for more than 144 seconds. [ 814.024401][ T31] Not tainted 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 [ 814.033040][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 814.043128][ T31] task:syz.1.1660 state:D stack:27016 pid:14016 tgid:14015 ppid:5831 task_flags:0x400140 flags:0x00404004 [ 814.056486][ T31] Call Trace: [ 814.060130][ T31] [ 814.063402][ T31] __schedule+0x116f/0x5de0 [ 814.068565][ T31] ? find_held_lock+0x2b/0x80 [ 814.073766][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 814.079893][ T31] ? __pfx___schedule+0x10/0x10 [ 814.085478][ T31] ? find_held_lock+0x2b/0x80 [ 814.090683][ T31] ? schedule+0x2d7/0x3a0 [ 814.095567][ T31] schedule+0xe7/0x3a0 [ 814.100140][ T31] io_schedule+0xbf/0x130 [ 814.104956][ T31] folio_wait_bit_common+0x3d6/0x9e0 [ 814.110852][ T31] ? folio_wait_bit_common+0x13a/0x9e0 [ 814.116949][ T31] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 814.123375][ T31] ? filemap_get_folios_tag+0x46a/0xae0 [ 814.129578][ T31] ? __pfx_wake_page_function+0x10/0x10 [ 814.135815][ T31] folio_wait_writeback+0x3c/0x90 [ 814.141605][ T31] __filemap_fdatawait_range+0x11f/0x200 [ 814.147957][ T31] ? __pfx___filemap_fdatawait_range+0x10/0x10 [ 814.154830][ T31] file_write_and_wait_range+0x101/0x140 [ 814.161175][ T31] ext4_sync_file+0x310/0xf10 [ 814.166442][ T31] ? __pfx___up_read+0x10/0x10 [ 814.171719][ T31] ? __pfx_ext4_sync_file+0x10/0x10 [ 814.178664][ T31] vfs_fsync_range+0x136/0x220 [ 814.184009][ T31] __do_sys_msync+0x3cb/0x5c0 [ 814.189286][ T31] do_syscall_64+0xcd/0x230 [ 814.194394][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 814.200965][ T31] RIP: 0033:0x7f42e278e969 [ 814.205904][ T31] RSP: 002b:00007f42e3659038 EFLAGS: 00000246 ORIG_RAX: 000000000000001a [ 814.215299][ T31] RAX: ffffffffffffffda RBX: 00007f42e29b5fa0 RCX: 00007f42e278e969 [ 814.224118][ T31] RDX: 0000000400000004 RSI: 0180000000000000 RDI: 000000001ffff000 [ 814.233002][ T31] RBP: 00007f42e2810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 814.241867][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 814.250900][ T31] R13: 0000000000000000 R14: 00007f42e29b5fa0 R15: 00007ffe5e956c08 [ 814.259790][ T31] [ 814.263193][ T31] INFO: task syz.3.1663:14037 blocked for more than 144 seconds. [ 814.271805][ T31] Not tainted 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 [ 814.281080][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 814.290749][ T31] task:syz.3.1663 state:D stack:29048 pid:14037 tgid:14035 ppid:5832 task_flags:0x400040 flags:0x00000004 [ 814.304111][ T31] Call Trace: [ 814.307897][ T31] [ 814.311174][ T31] __schedule+0x116f/0x5de0 [ 814.316334][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 814.321816][ T31] ? __pfx___schedule+0x10/0x10 [ 814.327357][ T31] ? find_held_lock+0x2b/0x80 [ 814.332623][ T31] ? schedule+0x2d7/0x3a0 [ 814.337491][ T31] schedule+0xe7/0x3a0 [ 814.342025][ T31] io_schedule+0xbf/0x130 [ 814.346905][ T31] folio_wait_bit_common+0x3d6/0x9e0 [ 814.352784][ T31] ? folio_wait_bit_common+0x13a/0x9e0 [ 814.358931][ T31] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 814.365420][ T31] ? filemap_get_folios_tag+0x46a/0xae0 [ 814.371600][ T31] ? __pfx_wake_page_function+0x10/0x10 [ 814.377942][ T31] folio_wait_writeback+0x3c/0x90 [ 814.384207][ T31] __filemap_fdatawait_range+0x11f/0x200 [ 814.390525][ T31] ? __pfx___filemap_fdatawait_range+0x10/0x10 [ 814.397566][ T31] file_write_and_wait_range+0x101/0x140 [ 814.403843][ T31] ext4_sync_file+0x310/0xf10 [ 814.409091][ T31] ? __pfx___up_read+0x10/0x10 [ 814.414384][ T31] ? __pfx_ext4_sync_file+0x10/0x10 [ 814.420435][ T31] vfs_fsync_range+0x136/0x220 [ 814.425764][ T31] __do_sys_msync+0x3cb/0x5c0 [ 814.430935][ T31] do_syscall_64+0xcd/0x230 [ 814.435992][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 814.442585][ T31] RIP: 0033:0x7f8f5e38e969 [ 814.447522][ T31] RSP: 002b:00007f8f5f1d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000001a [ 814.456866][ T31] RAX: ffffffffffffffda RBX: 00007f8f5e5b6080 RCX: 00007f8f5e38e969 [ 814.465712][ T31] RDX: 0000000400000004 RSI: 0180000000000000 RDI: 000000001ffff000 [ 814.474514][ T31] RBP: 00007f8f5e410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 814.483521][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 814.492943][ T31] R13: 0000000000000001 R14: 00007f8f5e5b6080 R15: 00007fffb7911918 [ 814.501940][ T31] [ 814.505344][ T31] INFO: task syz.3.1663:14038 blocked for more than 144 seconds. [ 814.513876][ T31] Not tainted 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 [ 814.522431][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 814.532655][ T31] task:syz.3.1663 state:D stack:24168 pid:14038 tgid:14038 ppid:14037 task_flags:0x400640 flags:0x00004006 [ 814.546008][ T31] Call Trace: [ 814.549644][ T31] [ 814.552910][ T31] __schedule+0x116f/0x5de0 [ 814.557954][ T31] ? kvm_sched_clock_read+0x11/0x20 [ 814.563728][ T31] ? sched_clock+0x38/0x60 [ 814.568689][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 814.574210][ T31] ? __pfx___schedule+0x10/0x10 [ 814.579703][ T31] ? find_held_lock+0x2b/0x80 [ 814.585032][ T31] ? schedule+0x2d7/0x3a0 [ 814.590427][ T31] schedule+0xe7/0x3a0 [ 814.595058][ T31] io_schedule+0xbf/0x130 [ 814.600141][ T31] folio_wait_bit_common+0x3d6/0x9e0 [ 814.606098][ T31] ? folio_wait_bit_common+0x13a/0x9e0 [ 814.612165][ T31] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 814.618806][ T31] ? __pfx_wake_page_function+0x10/0x10 [ 814.624946][ T31] ? __filemap_get_folio+0x333/0xc10 [ 814.630885][ T31] filemap_fault+0xd62/0x2740 [ 814.636343][ T31] ? __pfx_filemap_fault+0x10/0x10 [ 814.642041][ T31] __do_fault+0x10a/0x490 [ 814.646970][ T31] do_pte_missing+0x1031/0x3fb0 [ 814.652362][ T31] ? __handle_mm_fault+0x1010/0x2a40 [ 814.658326][ T31] __handle_mm_fault+0x103d/0x2a40 [ 814.663991][ T31] ? __pfx___handle_mm_fault+0x10/0x10 [ 814.670506][ T31] ? __pte_offset_map_lock+0x155/0x2f0 [ 814.676730][ T31] ? find_held_lock+0x2b/0x80 [ 814.682010][ T31] ? find_held_lock+0x2b/0x80 [ 814.687354][ T31] handle_mm_fault+0x3fe/0xad0 [ 814.692933][ T31] __get_user_pages+0x771/0x36f0 [ 814.698612][ T31] ? __pfx___get_user_pages+0x10/0x10 [ 814.704768][ T31] ? __kernel_write_iter+0x5a5/0xa90 [ 814.710669][ T31] get_dump_page+0x257/0x3d0 [ 814.716898][ T31] ? __pfx_get_dump_page+0x10/0x10 [ 814.722559][ T31] ? dump_user_range+0x73d/0xb30 [ 814.728068][ T31] ? copy_mc_enhanced_fast_string+0x8/0xf [ 814.734413][ T31] dump_user_range+0x1c3/0xb30 [ 814.739784][ T31] ? __pfx_dump_user_range+0x10/0x10 [ 814.745796][ T31] ? elf_coredump_extra_notes_write+0xbd/0x430 [ 814.752615][ T31] ? __pfx_writenote+0x10/0x10 [ 814.758126][ T31] elf_core_dump+0x288a/0x3a90 [ 814.763436][ T31] ? __pfx_elf_core_dump+0x10/0x10 [ 814.769161][ T31] ? kasan_save_stack+0x42/0x60 [ 814.774894][ T31] ? kasan_save_stack+0x33/0x60 [ 814.780525][ T31] ? kasan_save_track+0x14/0x30 [ 814.785962][ T31] ? __kasan_kmalloc+0xaa/0xb0 [ 814.791244][ T31] ? do_coredump+0x17aa/0x4480 [ 814.796947][ T31] ? get_signal+0x22e3/0x26d0 [ 814.802426][ T31] ? arch_do_signal_or_restart+0x8f/0x7a0 [ 814.808850][ T31] ? 0xffffffffff600000 [ 814.813510][ T31] ? do_coredump+0x3183/0x4480 [ 814.818973][ T31] do_coredump+0x3183/0x4480 [ 814.824090][ T31] ? __pfx_do_coredump+0x10/0x10 [ 814.829698][ T31] ? stack_trace_save+0x8e/0xc0 [ 814.835120][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 814.841158][ T31] ? stack_depot_save_flags+0x28/0xa50 [ 814.847292][ T31] ? __lock_acquire+0xaa4/0x1ba0 [ 814.852978][ T31] ? __kasan_slab_free+0x51/0x70 [ 814.858494][ T31] ? kmem_cache_free+0x2d4/0x4d0 [ 814.864078][ T31] ? __sigqueue_free+0xba/0x2a0 [ 814.869698][ T31] ? get_signal+0xcba/0x26d0 [ 814.875307][ T31] ? arch_do_signal_or_restart+0x8f/0x7a0 [ 814.881694][ T31] ? proc_coredump_connector+0x2d1/0x4f0 [ 814.888353][ T31] ? __pfx_proc_coredump_connector+0x10/0x10 [ 814.895610][ T31] ? rcu_is_watching+0x12/0xc0 [ 814.900910][ T31] get_signal+0x22e3/0x26d0 [ 814.906053][ T31] ? force_sig_fault+0xc4/0x100 [ 814.911632][ T31] ? __pfx_get_signal+0x10/0x10 [ 814.917079][ T31] arch_do_signal_or_restart+0x8f/0x7a0 [ 814.923248][ T31] ? trace_irq_disable.constprop.0+0xd4/0x120 [ 814.930043][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 814.936959][ T31] irqentry_exit_to_user_mode+0x13f/0x280 [ 814.943325][ T31] asm_exc_page_fault+0x26/0x30 [ 814.948765][ T31] RIP: 0033:0x7f8f5e38e971 [ 814.953665][ T31] RSP: 002b:000000000040000f EFLAGS: 00010217 [ 814.960416][ T31] RAX: 0000000000000000 RBX: 00007f8f5e5b5fa0 RCX: 00007f8f5e38e969 [ 814.969271][ T31] RDX: 0000000000000000 RSI: 000000000040000f RDI: 0000000000000002 [ 814.978684][ T31] RBP: 00007f8f5e410ab1 R08: 0000010000000003 R09: 0000000000000000 [ 814.987699][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 814.996577][ T31] R13: 0000000000000000 R14: 00007f8f5e5b5fa0 R15: 00007fffb7911918 [ 815.005802][ T31] [ 815.009200][ T31] INFO: task syz.2.1664:14042 blocked for more than 145 seconds. [ 815.017877][ T31] Not tainted 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 [ 815.026362][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 815.036136][ T31] task:syz.2.1664 state:D stack:25672 pid:14042 tgid:14042 ppid:5834 task_flags:0x440040 flags:0x00000004 [ 815.049556][ T31] Call Trace: [ 815.053184][ T31] [ 815.056623][ T31] __schedule+0x116f/0x5de0 [ 815.061665][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 815.067282][ T31] ? __pfx___schedule+0x10/0x10 [ 815.072836][ T31] ? find_held_lock+0x2b/0x80 [ 815.078130][ T31] ? schedule+0x2d7/0x3a0 [ 815.083054][ T31] schedule+0xe7/0x3a0 [ 815.087702][ T31] io_schedule+0xbf/0x130 [ 815.092621][ T31] bit_wait_io+0x15/0xe0 [ 815.097349][ T31] __wait_on_bit+0x62/0x180 [ 815.103026][ T31] ? __pfx_bit_wait_io+0x10/0x10 [ 815.108778][ T31] out_of_line_wait_on_bit+0xd9/0x110 [ 815.114893][ T31] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 815.121675][ T31] ? __pfx_wake_bit_function+0x10/0x10 [ 815.127904][ T31] do_get_write_access+0x93d/0x12a0 [ 815.133698][ T31] jbd2_journal_get_write_access+0x1d6/0x280 [ 815.140395][ T31] __ext4_journal_get_write_access+0x6a/0x340 [ 815.147755][ T31] ext4_reserve_inode_write+0x1be/0x320 [ 815.153943][ T31] __ext4_mark_inode_dirty+0x197/0x870 [ 815.160097][ T31] ? trace_kmem_cache_alloc+0x28/0xc0 [ 815.166106][ T31] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 815.172718][ T31] ? rcu_is_watching+0x12/0xc0 [ 815.178040][ T31] ? trace_jbd2_handle_start+0x1a8/0x230 [ 815.184700][ T31] ? jbd2__journal_start+0xf6/0x6a0 [ 815.190830][ T31] ? __ext4_journal_start_sb+0x195/0x690 [ 815.197465][ T31] ? __ext4_journal_start_sb+0x19e/0x690 [ 815.204070][ T31] ? ext4_dirty_inode+0xa1/0x130 [ 815.209647][ T31] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 815.215747][ T31] ext4_dirty_inode+0xd9/0x130 [ 815.221086][ T31] ? rcu_is_watching+0x12/0xc0 [ 815.226454][ T31] __mark_inode_dirty+0x1eb/0xe50 [ 815.232049][ T31] generic_update_time+0xcf/0xf0 [ 815.237570][ T31] file_update_time+0x17d/0x1c0 [ 815.242959][ T31] ext4_page_mkwrite+0x35e/0x1750 [ 815.248700][ T31] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 815.254769][ T31] do_page_mkwrite+0x171/0x380 [ 815.260120][ T31] do_pte_missing+0x29c/0x3fb0 [ 815.265475][ T31] ? __handle_mm_fault+0x1010/0x2a40 [ 815.271368][ T31] __handle_mm_fault+0x103d/0x2a40 [ 815.277119][ T31] ? __pfx___handle_mm_fault+0x10/0x10 [ 815.283669][ T31] ? lock_vma_under_rcu+0x47d/0x970 [ 815.289564][ T31] ? lock_vma_under_rcu+0x47d/0x970 [ 815.295569][ T31] handle_mm_fault+0x3fe/0xad0 [ 815.300911][ T31] do_user_addr_fault+0x60c/0x1370 [ 815.307164][ T31] exc_page_fault+0x5c/0xc0 [ 815.312181][ T31] asm_exc_page_fault+0x26/0x30 [ 815.317599][ T31] RIP: 0033:0x7fe1bb06eada [ 815.322503][ T31] RSP: 002b:00007ffcf9a79950 EFLAGS: 00010202 [ 815.329405][ T31] RAX: 0000001b30212000 RBX: 00007fe1bbee5720 RCX: 0000001b30211ff8 [ 815.338391][ T31] RDX: 0000001b2fe20220 RSI: 0000000000000008 RDI: 00007fe1bbee5720 [ 815.347366][ T31] RBP: ffffffff8946fb4b R08: 00007fe1bb3b61f8 R09: 00007fe1bb3a2000 [ 815.356241][ T31] R10: 00007fe1b9ffb008 R11: 0000000000000008 R12: 0000000000000008 [ 815.365062][ T31] R13: 00000000000001b3 R14: ffffffff8946ffba R15: 00000000000001dd [ 815.373939][ T31] ? __dev_queue_xmit+0x151a/0x43e0 [ 815.379905][ T31] ? __dev_queue_xmit+0x10ab/0x43e0 [ 815.386255][ T31] [ 815.389629][ T31] INFO: task syz.0.1665:14051 blocked for more than 145 seconds. [ 815.398326][ T31] Not tainted 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 [ 815.407156][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 815.416969][ T31] task:syz.0.1665 state:D stack:27560 pid:14051 tgid:14051 ppid:5828 task_flags:0x440040 flags:0x00000004 [ 815.430224][ T31] Call Trace: [ 815.433833][ T31] [ 815.437129][ T31] __schedule+0x116f/0x5de0 [ 815.442157][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 815.447729][ T31] ? __pfx___schedule+0x10/0x10 [ 815.453130][ T31] ? find_held_lock+0x2b/0x80 [ 815.458351][ T31] ? schedule+0x2d7/0x3a0 [ 815.463182][ T31] schedule+0xe7/0x3a0 [ 815.467767][ T31] io_schedule+0xbf/0x130 [ 815.472586][ T31] bit_wait_io+0x15/0xe0 [ 815.477358][ T31] __wait_on_bit+0x62/0x180 [ 815.482408][ T31] ? __pfx_bit_wait_io+0x10/0x10 [ 815.488506][ T31] out_of_line_wait_on_bit+0xd9/0x110 [ 815.494468][ T31] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 815.501249][ T31] ? __pfx_wake_bit_function+0x10/0x10 [ 815.507453][ T31] do_get_write_access+0x93d/0x12a0 [ 815.513454][ T31] jbd2_journal_get_write_access+0x1d6/0x280 [ 815.520134][ T31] __ext4_journal_get_write_access+0x6a/0x340 [ 815.527029][ T31] ext4_reserve_inode_write+0x1be/0x320 [ 815.533166][ T31] __ext4_mark_inode_dirty+0x197/0x870 [ 815.539268][ T31] ? trace_kmem_cache_alloc+0x28/0xc0 [ 815.545321][ T31] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 815.551947][ T31] ? rcu_is_watching+0x12/0xc0 [ 815.557344][ T31] ? trace_jbd2_handle_start+0x1a8/0x230 [ 815.563686][ T31] ? jbd2__journal_start+0xf6/0x6a0 [ 815.569791][ T31] ? __ext4_journal_start_sb+0x195/0x690 [ 815.576062][ T31] ? __ext4_journal_start_sb+0x19e/0x690 [ 815.582394][ T31] ? ext4_dirty_inode+0xa1/0x130 [ 815.587954][ T31] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 815.594257][ T31] ext4_dirty_inode+0xd9/0x130 [ 815.599706][ T31] ? rcu_is_watching+0x12/0xc0 [ 815.604985][ T31] __mark_inode_dirty+0x1eb/0xe50 [ 815.610635][ T31] generic_update_time+0xcf/0xf0 [ 815.616605][ T31] file_update_time+0x17d/0x1c0 [ 815.622017][ T31] ext4_page_mkwrite+0x35e/0x1750 [ 815.627678][ T31] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 815.633725][ T31] ? __pfx_filemap_map_pages+0x10/0x10 [ 815.640006][ T31] ? pte_alloc_one+0x2b1/0x380 [ 815.645366][ T31] do_page_mkwrite+0x171/0x380 [ 815.650652][ T31] do_pte_missing+0x29c/0x3fb0 [ 815.655992][ T31] ? do_raw_spin_unlock+0x172/0x230 [ 815.661783][ T31] ? __pmd_alloc+0x3c2/0x870 [ 815.666972][ T31] __handle_mm_fault+0x103d/0x2a40 [ 815.672638][ T31] ? __pfx___handle_mm_fault+0x10/0x10 [ 815.678705][ T31] ? lock_vma_under_rcu+0x47d/0x970 [ 815.684483][ T31] ? lock_vma_under_rcu+0x47d/0x970 [ 815.690427][ T31] handle_mm_fault+0x3fe/0xad0 [ 815.696292][ T31] do_user_addr_fault+0x60c/0x1370 [ 815.702070][ T31] exc_page_fault+0x5c/0xc0 [ 815.707119][ T31] asm_exc_page_fault+0x26/0x30 [ 815.712495][ T31] RIP: 0033:0x7f4f8786547b [ 815.717767][ T31] RSP: 002b:00007ffe5f8f98e0 EFLAGS: 00010246 [ 815.724486][ T31] RAX: 00000000003ffde8 RBX: 0000000000000000 RCX: 0000000000000000 [ 815.733726][ T31] RDX: 0000001b2fc20000 RSI: 0000000000400000 RDI: 00007f4f87a98d50 [ 815.742678][ T31] RBP: 0000000000000000 R08: 0000000000000004 R09: 0000000000040000 [ 815.751729][ T31] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 815.760595][ T31] R13: 0000000000000003 R14: 000000000009eacc R15: 00007ffe5f8f9b90 [ 815.769712][ T31] [ 815.773092][ T31] [ 815.773092][ T31] Showing all locks held in the system: [ 815.782114][ T31] 1 lock held by khungtaskd/31: [ 815.787535][ T31] #0: ffffffff8e3bf440 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 815.798964][ T31] 3 locks held by syz-executor/5819: [ 815.805005][ T31] #0: ffff8880349286c8 (vm_lock){++++}-{0:0}, at: do_user_addr_fault+0x452/0x1370 [ 815.815454][ T31] #1: ffff88814e266518 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x171/0x380 [ 815.826327][ T31] #2: ffff88814e26a950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x5e4/0x1410 [ 815.837019][ T31] 6 locks held by kworker/u8:24/7597: [ 815.842954][ T31] #0: ffff888141efc148 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 815.854844][ T31] #1: ffffc900047efd18 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 815.868333][ T31] #2: ffff88814e2660e0 (&type->s_umount_key#31){++++}-{4:4}, at: super_trylock_shared+0x1e/0xf0 [ 815.880360][ T31] #3: ffff88814e268b98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: do_writepages+0x1b2/0x820 [ 815.892052][ T31] #4: ffff88814e26a950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x5e4/0x1410 [ 815.903329][ T31] #5: ffff88807886e5d8 (&ei->i_data_sem){++++}-{4:4}, at: ext4_map_blocks+0x355/0x1390 [ 815.915002][ T31] 2 locks held by getty/13138: [ 815.920632][ T31] #0: ffff888034b2a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 815.931519][ T31] #1: ffffc900046a32f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 815.942860][ T31] 3 locks held by syz.3.1663/14038: [ 815.948651][ T31] #0: ffff888029fc4420 (sb_writers#5){.+.+}-{0:0}, at: get_signal+0x22e3/0x26d0 [ 815.958939][ T31] #1: ffff88801d3b01e0 (&mm->mmap_lock){++++}-{4:4}, at: dump_user_range+0x187/0xb30 [ 815.969603][ T31] #2: ffff88807886e8e8 (mapping.invalidate_lock#2){++++}-{4:4}, at: filemap_fault+0x2d8/0x2740 [ 815.981465][ T31] 3 locks held by syz.2.1664/14042: [ 815.987261][ T31] #0: ffff88802d4fb1c8 (vm_lock){++++}-{0:0}, at: do_user_addr_fault+0x452/0x1370 [ 815.997651][ T31] #1: ffff88814e266518 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x171/0x380 [ 816.008856][ T31] #2: ffff88814e26a950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x5e4/0x1410 [ 816.019870][ T31] 3 locks held by syz.0.1665/14051: [ 816.026019][ T31] #0: ffff88802038e6c8 (vm_lock){++++}-{0:0}, at: do_user_addr_fault+0x452/0x1370 [ 816.036413][ T31] #1: ffff88814e266518 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x171/0x380 [ 816.047012][ T31] #2: ffff88814e26a950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x5e4/0x1410 [ 816.058133][ T31] [ 816.060735][ T31] ============================================= [ 816.060735][ T31] [ 816.070383][ T31] NMI backtrace for cpu 0 [ 816.070405][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 PREEMPT(full) [ 816.070443][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 816.070461][ T31] Call Trace: [ 816.070470][ T31] [ 816.070482][ T31] dump_stack_lvl+0x116/0x1f0 [ 816.070528][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 816.070563][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 816.070613][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 816.070652][ T31] watchdog+0xf70/0x12c0 [ 816.070702][ T31] ? __pfx_watchdog+0x10/0x10 [ 816.070750][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 816.070794][ T31] ? __kthread_parkme+0x19e/0x250 [ 816.070834][ T31] ? __pfx_watchdog+0x10/0x10 [ 816.070874][ T31] kthread+0x3c2/0x780 [ 816.070918][ T31] ? __pfx_kthread+0x10/0x10 [ 816.070960][ T31] ? __pfx_kthread+0x10/0x10 [ 816.071003][ T31] ? __pfx_kthread+0x10/0x10 [ 816.071047][ T31] ? __pfx_kthread+0x10/0x10 [ 816.071089][ T31] ? rcu_is_watching+0x12/0xc0 [ 816.071116][ T31] ? __pfx_kthread+0x10/0x10 [ 816.071162][ T31] ret_from_fork+0x45/0x80 [ 816.071209][ T31] ? __pfx_kthread+0x10/0x10 [ 816.071255][ T31] ret_from_fork_asm+0x1a/0x30 [ 816.071318][ T31] [ 816.071329][ T31] Sending NMI from CPU 0 to CPUs 1: [ 816.219046][ C1] NMI backtrace for cpu 1 [ 816.219066][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 PREEMPT(full) [ 816.219099][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 816.219114][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 816.219152][ C1] Code: 16 65 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 99 20 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 816.219178][ C1] RSP: 0018:ffffc90000197df8 EFLAGS: 000002c2 [ 816.219198][ C1] RAX: 000000000021163f RBX: 0000000000000001 RCX: ffffffff8b6953e9 [ 816.219214][ C1] RDX: 0000000000000000 RSI: ffffffff8dbdb3fb RDI: ffffffff8bf46ca0 [ 816.219230][ C1] RBP: ffffed1003b5db40 R08: 0000000000000001 R09: ffffed10170a65bd [ 816.219247][ C1] R10: ffff8880b8532deb R11: 0000000000000000 R12: 0000000000000001 [ 816.219263][ C1] R13: ffff88801daeda00 R14: ffffffff90852010 R15: 0000000000000000 [ 816.219279][ C1] FS: 0000000000000000(0000) GS:ffff888124aec000(0000) knlGS:0000000000000000 [ 816.219302][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 816.219319][ C1] CR2: 00007ffeedeaad8c CR3: 000000000e180000 CR4: 00000000003526f0 [ 816.219335][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 816.219349][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 816.219364][ C1] Call Trace: [ 816.219372][ C1] [ 816.219379][ C1] default_idle+0x13/0x20 [ 816.219417][ C1] default_idle_call+0x6d/0xb0 [ 816.219453][ C1] do_idle+0x391/0x510 [ 816.219481][ C1] ? __pfx_do_idle+0x10/0x10 [ 816.219506][ C1] ? trace_sched_exit_tp+0x31/0x130 [ 816.219539][ C1] cpu_startup_entry+0x4f/0x60 [ 816.219563][ C1] start_secondary+0x21d/0x2b0 [ 816.219601][ C1] ? __pfx_start_secondary+0x10/0x10 [ 816.219644][ C1] common_startup_64+0x13e/0x148 [ 816.219681][ C1] [ 816.220086][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 816.435852][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 PREEMPT(full) [ 816.448946][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 816.460016][ T31] Call Trace: [ 816.463628][ T31] [ 816.466883][ T31] dump_stack_lvl+0x3d/0x1f0 [ 816.472055][ T31] panic+0x71c/0x800 [ 816.476364][ T31] ? __pfx_panic+0x10/0x10 [ 816.481235][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 816.487169][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 816.493763][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 816.499724][ T31] ? watchdog+0xdda/0x12c0 [ 816.504593][ T31] ? watchdog+0xdcd/0x12c0 [ 816.509462][ T31] watchdog+0xdeb/0x12c0 [ 816.514156][ T31] ? __pfx_watchdog+0x10/0x10 [ 816.519324][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 816.525081][ T31] ? __kthread_parkme+0x19e/0x250 [ 816.530643][ T31] ? __pfx_watchdog+0x10/0x10 [ 816.536009][ T31] kthread+0x3c2/0x780 [ 816.540520][ T31] ? __pfx_kthread+0x10/0x10 [ 816.545623][ T31] ? __pfx_kthread+0x10/0x10 [ 816.550692][ T31] ? __pfx_kthread+0x10/0x10 [ 816.555760][ T31] ? __pfx_kthread+0x10/0x10 [ 816.560825][ T31] ? rcu_is_watching+0x12/0xc0 [ 816.566066][ T31] ? __pfx_kthread+0x10/0x10 [ 816.571132][ T31] ret_from_fork+0x45/0x80 [ 816.576027][ T31] ? __pfx_kthread+0x10/0x10 [ 816.581119][ T31] ret_from_fork_asm+0x1a/0x30 [ 816.586396][ T31] [ 816.590003][ T31] Kernel Offset: disabled [ 816.594767][ T31] Rebooting in 86400 seconds..