last executing test programs: 7.668678691s ago: executing program 0 (id=401): close_range$auto(0x2, 0xa, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001480), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="000825bd700000dcdf251200000008000900525a00000800070001000000"], 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x0) r3 = socket(0x11, 0x3, 0x9) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000300)={0x7, 0x1, [{r3, 0x0, 0x2, 0x2}]}) read$auto_cachefiles_daemon_fops_internal(r5, &(0x7f0000000340)=""/88, 0x58) getgroups$auto(0x6, &(0x7f00000003c0)=0x8) r6 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) r7 = openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/dynamic_events\x00', 0x542, 0x0) write$auto_dynamic_events_ops_trace_dynevent(r7, &(0x7f0000000140)="65507307ff6587a72565e7720ef9769f20592e77a8977acfd064c712782b89f145862d9956b07a7c40f8a41ef9b7d5cf78f6b7b354a69aaecc3922f2e2df504d01273dd7e6e3c25f55a98d1f81622f", 0x4f) r8 = open(&(0x7f0000000100)='.\x00', 0x40000, 0x9) msgctl$auto_IPC_RMID(0x2, 0x0, &(0x7f0000000180)={{0x5, 0xee00, 0x0, 0xc4d, 0x7, 0x4, 0x6}, &(0x7f00000000c0)=0x2, &(0x7f0000000140)=0x7, 0x840d, 0x100006, 0x8, 0x1, 0x40000058bd, 0x3, 0x3, 0xc, @raw, @raw=0x7}) r10 = setfsgid$auto(0xee01) statx$auto(r8, &(0x7f0000000040)='./file0\x00', 0xd9d8, 0x21, &(0x7f0000000200)={0x1, 0x1, 0x7, 0x0, r9, r10, 0x2, 0x1, 0x6ef3, 0x101, 0x9, 0x0, {0x6, 0x81}, {0x8000000000000000, 0x80000000}, {0xb, 0x4}, {0x4}, 0xf, 0xb, 0x14000000, 0x281, 0xd, 0x2, 0x9, 0xa, 0x10, 0x401, 0x7, 0xee, [0xffffffff, 0x2, 0xd9, 0x6, 0x9, 0xd06, 0x3, 0x10000, 0x100000000]}) quotactl_fd$auto(r0, 0x7ff, r10, &(0x7f0000000140)="3159f08f7ee9951a1d0c83f481349ffb51f0f3cf06a9e333db7970362362544dc197644313b0176b61867add055f02056c9e48c55068cfbf80b71912b8cc5d09317e2cc9764aafc05ddf43455a96441b5e83c4dbd96f05b690e0c82cb7b48b67e9a9ea776c3b0749e3498e66e1256e269df71f48567d6ac30dac22b0a18ff0275cb8324d17ed90e0f4bc239e37da8d05461c4d4de8b0db5b405ea3bf1e2fa79aae1ce3e9efb3a7feb4d2f6cc24d49aedd14543adc45188cb5c7f65f4259486045a9e79a577914c0154bf7131f8c07ce92865") sendmsg$auto_TIPC_NL_NET_GET(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000400)={0x14, r6, 0x492a92567041df2f, 0x70bd2d, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) 6.676591037s ago: executing program 0 (id=408): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) write$auto_event_trigger_fops_trace(0xffffffffffffffff, 0x0, 0x0) io_uring_setup$auto(0x6, 0x0) r0 = socket(0x15, 0x5, 0x0) setsockopt$auto(r0, 0x114, 0x2, 0xffffffffffffffff, 0x20) socket(0xa, 0x1, 0x6) socket(0x11, 0x80003, 0x300) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket(0x2, 0x1, 0x0) getsockopt$auto(0xffffffffffffffff, 0x65, 0x2, 0xffffffffffffffff, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) write$auto(0x3, 0x0, 0xfffffdef) mbind$auto(0x9, 0x84, 0x4, 0x0, 0x80000000, 0x7f) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x687bcbd, 0x8, 0x0) shutdown$auto(0x200000003, 0x2) sysfs$auto(0x2, 0x1b, 0x0) r2 = openat$auto_bsg_fops_bsg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bsg/1:0:0:0\x00', 0x0, 0x0) openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f000000e680), 0x2, 0x0) r3 = openat$auto_tracing_mark_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/trace_marker\x00', 0x201, 0x0) write$auto_tracing_mark_fops_trace(r3, 0x0, 0x1f00) close_range$auto(0x2, 0x8000, 0x0) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000003fc0)='/sys/kernel/debug/tracing/trace_pipe\x00', 0x20a02, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0xc01) write$auto(r2, 0x0, 0x100082) socket(0x22, 0x1, 0x1) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) 6.020710936s ago: executing program 0 (id=413): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/ip_unprivileged_port_start\x00', 0x4401, 0x0) read$auto_proc_sys_file_operations_proc_sysctl(r0, 0x0, 0x0) r1 = openat$auto_tracing_err_log_fops_trace(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/tracing/error_log\x00', 0x101480, 0x0) pread64$auto(r1, &(0x7f0000000780)='ethtool\x00', 0x89f, 0x65) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xc18, 0x8000) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') io_uring_setup$auto(0x3, 0x0) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) r2 = io_uring_setup$auto(0x1, 0x0) write$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000001200)="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", 0x1000) r3 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/pagemap\x00', 0x0, 0x0) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/bpf_stats_enabled\x00', 0x163041, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r4, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, 0x5f, 0x0, 0x3}, 0x6f3) modify_ldt$auto(0x1, 0x0, 0x10) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) ioctl$auto(0xffffffffffffffff, 0x2, 0x9) close_range$auto(0x2, 0x8, 0x0) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages$auto(r5, 0x1002, 0x0, 0x0, 0x0, 0x2) close_range$auto(0x2, 0x8, 0x0) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) ioctl$auto_KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$auto(0x3, 0x4020aed2, r3) openat$auto_lockdown_ops_lockdown(0xffffffffffffff9c, &(0x7f0000000000), 0x18280, 0x0) r7 = semctl$auto_IPC_SET(0x1, 0xd0b, 0x1, 0x9) capget$auto(&(0x7f0000000040)={0x0, r7}, 0x0) 5.564056511s ago: executing program 0 (id=415): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x6, 0x0) r0 = socket(0xa, 0x5, 0x84) r1 = getsockopt$auto(r0, 0x84, 0x14, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_proc_oom_score_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_score_adj\x00', 0x142, 0x0) pwritev$auto(0x3, &(0x7f0000001000)={0x0, 0x8}, 0x5, 0x3, 0x9) r2 = socket(0xa, 0x3, 0x3b) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/pci/00/01.3\x00', 0x48041, 0x0) writev$auto(r3, &(0x7f0000000140)={0x0, 0x10004}, 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x40000002c55, 0x0) mmap$auto(0x0, 0x10000, 0xffb, 0x8000000008011, 0x3, 0x8008000) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_FS_IOC_ZERO_RANGE(r1, 0x40305839, r1) socket$nl_generic(0x10, 0x3, 0x10) socket(0x11, 0x80003, 0x300) mmap$auto(0x0, 0x400008, 0x7, 0x9b72, 0xffffffffffffffff, 0x0) r4 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0) ioctl$auto(r4, 0xc0104d08, r4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'geneve1\x00', 0x0}) listmount$auto(&(0x7f0000000000)={0x1f, @raw, 0x80000024, 0x0, 0x2}, 0x0, 0xf4240, 0x0) sendto$auto(0x3, 0x0, 0x13, 0xfffffff9, &(0x7f0000000080)=@xdp={0x2c, 0xdd86, r5, 0x10}, 0x22) 5.055731123s ago: executing program 2 (id=420): openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x400, 0x0) mmap$auto(0x700, 0x5, 0xfffffffffffffe01, 0x8011, 0x3, 0x4b000) 4.888411701s ago: executing program 1 (id=421): msync$auto(0x1ffff000, 0xe0a, 0x400000004) prctl$auto(0x35, 0x0, 0x10, 0x0, 0x0) read$auto_tracing_pipe_fops_trace(0xffffffffffffffff, 0x0, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) mmap$auto(0x0, 0x10000, 0x4000000000db, 0xeb1, 0x2, 0x8000) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x2000c800) syz_clone(0x0, 0x0, 0xffffffffffffff19, 0x0, 0x0, 0x0) msync$auto(0x1ffff000, 0xe0a, 0x400000004) (async) prctl$auto(0x35, 0x0, 0x10, 0x0, 0x0) (async) read$auto_tracing_pipe_fops_trace(0xffffffffffffffff, 0x0, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) (async) mmap$auto(0x0, 0x10000, 0x4000000000db, 0xeb1, 0x2, 0x8000) (async) read$auto(r0, 0x0, 0x20) (async) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) (async) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) (async) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001340), 0xffffffffffffffff) (async) sendmsg$auto_NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x2000c800) (async) syz_clone(0x0, 0x0, 0xffffffffffffff19, 0x0, 0x0, 0x0) (async) 4.881442186s ago: executing program 2 (id=422): r0 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/smaps_rollup\x00', 0x40000, 0x0) bpf$auto(0x6, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0xfff, 0x5, 0x10, 0x0) ioprio_set$auto(0x3, 0x0, 0x4b34) socket(0x15, 0x5, 0x0) madvise$auto(0x1ffff000, 0x7, 0x100000000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) sysfs$auto(0x2, 0x4d, 0x0) fsopen$auto(0x0, 0x1) syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pselect6$auto(0xffffffff, 0x0, &(0x7f0000000180)={[0x182, 0x200, 0x0, 0x3, 0x58, 0xb5, 0x8, 0x400, 0x400000000006, 0x4, 0x7ff, 0x9, 0x2, 0x7dde, 0xed1b, 0x8c5]}, 0x0, 0x0, 0x0) flock$auto(0x6, 0x1) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x8001, 0x2) shmget$auto(0xa, 0x10563, 0x568d1af2) madvise$auto(0x0, 0xffffffffffff0004, 0x19) read$auto_proc_pid_maps_operations_internal(r0, &(0x7f00000010c0)=""/4096, 0x1000) close_range$auto(0x2, 0x8000, 0x0) mknod$auto(0x0, 0x100, 0xf203) 4.22208243s ago: executing program 3 (id=423): mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x8, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) poll$auto(&(0x7f0000000080)={r0, 0x9, 0x9816}, 0x7f, 0x3) ioctl$auto_VHOST_SET_OWNER(r1, 0xaf01, 0x0) r2 = open(&(0x7f0000000100)='.\x00', 0x100, 0x0) poll$auto(&(0x7f0000000040)={r1, 0x7, 0x1}, 0xffff, 0x8) getdents64$auto(r2, 0x0, 0x400) ioctl$auto(0x3, 0x4008af03, 0x0) ioctl$auto_VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, 0x0) 4.015043295s ago: executing program 1 (id=424): openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/config/nvmet/discovery_nqn\x00', 0x189002, 0x0) (fail_nth: 8) 4.001062111s ago: executing program 3 (id=425): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) r1 = socket(0x2b, 0x1, 0x0) sendmmsg$auto(r1, 0x0, 0x5, 0x20000000) sendmsg$auto_NL80211_CMD_DISASSOCIATE(r1, 0x0, 0x1) fallocate$auto(0x8000000000000003, 0x7c4a, 0x20000020d, 0x100000000) io_uring_setup$auto(0x81c5, 0x0) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/config/target/dbroot\x00', 0x0, 0x0) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/net/rpc/use-gss-proxy\x00', 0x48041, 0x0) write$auto(r2, 0x0, 0x20000000000d) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = socket(0x2, 0x1, 0x0) sendmmsg$auto(r3, 0x0, 0x5, 0x20000000) write$auto(0x3, 0x0, 0xfffffdef) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000000540), r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$auto_NET_SHAPER_CMD_DELETE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x1c, r5, 0x9, 0x70bd27, 0x25dfdbfb, {}, [@NET_SHAPER_A_IFINDEX={0x8, 0x8, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0xc050) mmap$auto(0x0, 0x2120005, 0x9, 0x400000000000eb1, r4, 0x8000) write$auto(0x3, 0x0, 0x100082) ioctl$auto_SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000040)) write$auto(r0, &(0x7f0000000000)='+}\'.%&\x00', 0x5) mmap$auto(0x0, 0x2020009, 0x9, 0xeb1, 0xfffefffffffffffa, 0x8000) 3.912949579s ago: executing program 0 (id=426): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket(0x15, 0x5, 0x0) mbind$auto(0x20000000000005, 0x2, 0x3, 0x0, 0x80000000, 0x7f) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) socket(0xa, 0x4, 0x7) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0xc0000, 0x0) ioctl$auto(r0, 0x2, 0x9) ioctl$auto(r0, 0x400c4d01, r0) 2.958941115s ago: executing program 1 (id=427): openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x80002, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20000, 0x0) ioctl$auto_TCSBRK2(r0, 0x5409, 0x0) socket(0x28, 0x1, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/fs/pipe-max-size\x00', 0x382, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0xa00, 0x948b, 0x2, 0xfffffffffffffffc, 0x6, 0x3, 0x300000000000000, 0x80000001, 0x5, 0x6d3c, 0x5, 0x2]}, 0x0) 2.894763528s ago: executing program 2 (id=428): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) fanotify_init$auto(0x65, 0x2) io_uring_setup$auto(0x48, 0x0) socket(0xa, 0x1, 0x100) openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000440), 0x20201, 0x0) write$auto(0x3, 0x0, 0x1) 2.812457599s ago: executing program 0 (id=429): mmap$auto(0x0, 0x1, 0x4000000000df, 0x44eb2, 0x3, 0x300000000000) sysfs$auto(0x2, 0x2, 0x9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x400000000008000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) write$auto(0x3, 0x0, 0xfffffdef) socket$nl_generic(0x10, 0x3, 0x10) madvise$auto(0x8000000000000, 0x20499d, 0x9) socket$nl_generic(0x10, 0x3, 0x10) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) madvise$auto(0x108000, 0x800034, 0x200000b) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f00000003c0)=""/4096, 0x1000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x204180, 0x0) madvise$auto(0x0, 0xffffffffffff0004, 0x19) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) madvise$auto(0x5, 0x2, 0x0) mmap$auto(0x0, 0x400005, 0xa, 0x9b72, 0x2, 0x9) socket(0x10, 0x2, 0x0) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) mmap$auto(0x0, 0x8, 0xdf, 0x14, 0x2, 0x4b31) io_uring_setup$auto(0x1, 0x0) r0 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r0, 0x107, 0x1, 0x0, 0x8004) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) 2.682309236s ago: executing program 2 (id=430): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, 0x0, 0x14a402, 0x0) read$auto(0x3, 0x0, 0x1f40) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r0, &(0x7f0000000200)={0x0, 0x4000000a}, 0x20000000003) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x5c3043, 0x0) msync$auto(0x3, 0xb, 0x6) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0) 2.577680727s ago: executing program 3 (id=431): close_range$auto(0x0, 0xfffffffffffff000, 0xf) prctl$auto(0x19, 0x10000000000005, 0x100008, 0x6, 0x10005) r0 = fanotify_init$auto(0x401, 0x1) r1 = open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/bond0/bonding/lacp_rate\x00', 0x80002, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = socket(0xa, 0x801, 0x84) setsockopt$auto(0x3, 0x10000000084, 0x10, 0x0, 0x1a) mmap$auto(0x0, 0x2020008, 0xc, 0xeb1, r0, 0x8000) fsmount$auto(r1, 0xc, 0xffff634e) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$auto(r3, 0x0, 0x20) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) writev$auto(r4, 0x0, 0x3) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mlockall$auto(0x7) recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000380)={{&(0x7f00000001c0)="ae6d3fa58cc14c483eaeefbda25ed11e6584b0e06b6f7d2a0920bb3dac705aa384572b6a4be4e53907a7b258", 0x7fff, 0x0, 0x9, 0x0, 0x2, 0x9}, 0x2}, 0xfffffffd, 0x3, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) ppoll$auto(0x0, 0x7f, 0x0, &(0x7f00000001c0)={0x3}, 0x8) mount$auto(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='nfs\x00', 0x1, &(0x7f00000001c0)) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r5 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x20b42, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r5, 0xc0045002, 0x0) write$auto(0x3, 0x0, 0xfdef) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) io_uring_setup$auto(0x1, 0x0) mmap$auto(0x0, 0x40000b, 0xde, 0x9b72, 0x2, 0x8000) close_range$auto(r2, 0x8, 0x0) r6 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000007480)='/dev/cec12\x00', 0x400, 0x0) ioctl$auto_CEC_RECEIVE(r6, 0xc0386106, 0x0) 2.3635264s ago: executing program 2 (id=432): msgget$auto(0x0, 0x800e) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/smaps_rollup\x00', 0x40000, 0x0) bpf$auto(0x6, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0xfff, 0x5, 0x10, 0x0) ioprio_set$auto(0x3, 0x0, 0x4b34) socket(0x15, 0x5, 0x0) madvise$auto(0x1ffff000, 0x7, 0x100000000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) sysfs$auto(0x2, 0x4d, 0x0) fsopen$auto(0x0, 0x1) syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mbind$auto(0x2000, 0x100000004, 0x1000000f4, 0x0, 0x5, 0x2) clone$auto(0x9001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pselect6$auto(0xffffffff, 0x0, &(0x7f0000000180)={[0x182, 0x9bbb, 0x0, 0x3, 0x58, 0xb5, 0x8, 0x400, 0x6, 0x4, 0x7ff, 0xa5, 0x2, 0x7dde, 0xed1b, 0x8c5]}, 0x0, 0x0, 0x0) flock$auto(0x6, 0x1) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x8001, 0x2) shmget$auto(0xa, 0x10563, 0x568d1af2) 2.116615099s ago: executing program 1 (id=433): r0 = socket(0x2, 0x3, 0x1) recvfrom$auto(r0, 0x0, 0x800000000e, 0xfd, 0x0, 0xfffffffffffffffd) mprotect$auto(0x110c238000, 0x1, 0x3) 1.679136559s ago: executing program 1 (id=434): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0xa, 0x1, 0x100) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/tainted\x00', 0x28002, 0x0) readv$auto(r0, &(0x7f00000000c0)={0x0, 0xb}, 0x4) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram5\x00', 0xa0141, 0x0) write$auto(0x3, 0x0, 0x1) openat$auto_proc_coredump_filter_operations_base(0xffffffffffffff9c, 0x0, 0x800, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0xffffffffffffffff, 0x300000000000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x7, 0x0, 0x5, 0x3, 0x2000000000010006, 0x0, 0x7, 0x5, 0x2, 0x7, 0xaf, 0x9, 0x2, 0x3, 0x105, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, [0x1b16, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x77, 0x0, 0x0, 0x0, 0x4, 0x0, 0xc06f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x107, 0x6, 0x0, 0xfffffffffffffffe, 0x4, 0x0, 0x80000000000]}, 0x1fe, 0x81) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f00000000c0)) ioctl$auto_SNDCTL_DSP_CHANNELS(r1, 0xc0045006, 0x0) read$auto(r1, &(0x7f00000001c0)='/d\xfb\x92\x1a\'sp\x00\xce\xd2|,L\xfa\x97K\xd7\xc8\x7fm:\xc8a\xf8h\xf4\xd6\xdf\xb5~&-T\xaa\xeb\xd5\xb9\xa9\xf9u\x9fq\x15n\x82V\xe4\xf5\x18\xf0h\xa1V\xcdw\x9eB}(\xfb\xdb\xf3', 0x40100000001) read$auto_nsim_dev_trap_fa_cookie_fops_dev(r1, &(0x7f0000000000)=""/156, 0x9c) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) syz_clone3(&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, {0x15}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$auto_UI_DEV_CREATE(0xffffffffffffffff, 0x5501, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) 1.388005421s ago: executing program 3 (id=435): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/gspca_gl860/parameters/sensor\x00', 0x22001, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000000c0)='2', 0x1) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x1ff, 0x7, 0x1f, 0x7181, 0x1ffdf, 0x7, 0x4, 0x9, 0x9, 0x3, 0x4, 0x1, 0xb4, 0x9, 0x8, 0x10003, 0x80, 0x4, 0x0, 0xa, 0x22000, 0x200, 0x0, 0x84, [0x3, 0x4, 0x0, 0x2, 0x0, 0x2000, 0x0, 0xe, 0x70624ce7, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x4000, 0x0, 0x6, 0x0, 0xbffffffffffbfffd, 0x0, 0x1, 0x5, 0x7, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x400000000005b8, 0x14ee, 0x0, 0x0, 0x0, 0x6, 0xffffffffffffffff, 0x88e, 0x3, 0xfffffffffffffffe, 0x9, 0xa38, 0x0, 0x3, 0xfffffffffffffffc, 0x2, 0x1, 0x3]}, 0x1fe, 0xd) r1 = socket(0x1d, 0x3, 0x1) setsockopt$auto(r1, 0x65, 0x6, 0x0, 0x3) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f00"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r2 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) mmap$auto(0x0, 0x8, 0x80000000000000df, 0x10004000eb1, 0x8, 0x8000008000) r3 = clone$auto(0x4, 0x2, &(0x7f0000000040)=0x5, &(0x7f0000000380)=0x3, 0x2c8) prctl$auto_PR_SET_TIMERSLACK(0x1d, 0x115, r3, 0x2, 0x8) socket(0x15, 0x5, 0x0) memfd_create$auto(0x0, 0xe) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0xfffffffe, 0x1ff, 0x7, 0x1f, 0x7181, 0x1ffde, 0x7, 0x3, 0x9, 0x9, 0x3, 0x4, 0x1, 0xb4, 0x9, 0x8, 0x10003, 0x80, 0x4, 0x0, 0xa, 0x22000, 0x200, 0x0, 0x84, [0x3, 0x2, 0x0, 0x2, 0x0, 0x2000, 0x0, 0xe, 0x4000000070624ce7, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x4000, 0x0, 0x6, 0x0, 0xfffffffffffbfffd, 0x4, 0x1, 0x10000000000, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x400000000005b8, 0xffff, 0x6, 0x0, 0x0, 0x6, 0xffffffffffffffff, 0x88e, 0x8000000000008, 0xfffffffffffffffc, 0x9, 0xa38, 0x0, 0x3, 0xfffffffffffffffc, 0x2, 0x1, 0x4]}, 0x1fe, 0xd) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) unshare$auto(0x40000080) semctl$auto_SETVAL(0x0, 0x7, 0x10, 0xfff) socket(0x10, 0x2, 0x7fffffff) mmap$auto(0x0, 0x7f, 0x1, 0xeb1, 0x401, 0x8000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) socket(0x28, 0x1, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000340)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x4460, 0x15f4da0a, 0x1, 0x3, 0x1, 0x80000001, 0x7, 0x0, 0x5, 0x2, 0xffffffff]}, 0x0) close_range$auto(0x2, 0x8, 0x0) 1.17104606s ago: executing program 2 (id=436): openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) r0 = socket(0x2b, 0x1, 0x0) sendmmsg$auto(r0, 0x0, 0x5, 0x20000000) sendmsg$auto_NL80211_CMD_DISASSOCIATE(r0, 0x0, 0x1) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d) r1 = io_uring_setup$auto(0x81c5, 0x0) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/config/target/dbroot\x00', 0x0, 0x0) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = socket(0x2, 0x1, 0x0) sendmmsg$auto(r2, 0x0, 0x5, 0x20000000) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0xfffffffffffffffc, 0x3, 0x1, 0x9b72, r1, 0x8000) r3 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r3, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) syz_genetlink_get_family_id$auto_nl80211(0x0, r3) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_IPVS_CMD_GET_INFO(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x2ccc}}, 0x1) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0xfdef}, 0x1, 0x0, 0x0, 0x10}, 0x2020057) socket(0x1e, 0x1, 0x0) r4 = socketpair$auto(0x8, 0x5, 0x3, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) read$auto_proc_pid_set_timerslack_ns_operations_base(r4, &(0x7f0000000180)=""/129, 0x81) write$auto(0x3, 0x0, 0xfffffdef) shutdown$auto(0x200000003, 0x2) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2020009, 0x9, 0xeb1, 0xfffefffffffffffa, 0x8000) 604.61819ms ago: executing program 3 (id=437): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) semctl$auto(0x1ff, 0x2, 0x13, 0x1) r0 = socket(0xa, 0x1, 0x84) getsockopt$auto(r0, 0x0, 0x34, 0x0, 0x0) 125.606937ms ago: executing program 1 (id=438): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="5e0027617c36720add70ab0343990f7d0bbc96dc0b"], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) read$auto(r0, &(0x7f0000000040)='\x00', 0x10001) futex_requeue$auto(&(0x7f0000000040)={0x3, 0x6, 0x102, 0x2000000}, 0x80, 0x2, 0x101) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = socket(0x15, 0x5, 0x0) getsockopt$auto(r1, 0x114, 0x2717, 0xfffffffffffffffc, 0x0) pwrite64$auto(0xc8, &(0x7f0000000340)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdds\x1cJ\x99\x00:<\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\xadCl\x9e\xeb\xcd\vp\x99\x00\xc8\x06\xa5\xdc3\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0A\x94\xa3\xaef\x87\xd8\x95I\xfd\xa8\t\xac\x87\xb7\x1d\xd5\x83\xdcyu]\xde\xbe\xbf$<.}\x8b`\x04\xfc\xa2\xab\xb5]\x80\x00\xb9D\xc5\xbc\xf2a\xd66\xa5\xd3\xc1r\x96\x1e\x8db\x05=`\x01\x11\x04Tz\x87A$\x115\x95PUf\xa7\xfe\x19\x00\x82go}@W\xd5\xaej\x01\xbf>5n\x17S\xc0\x8a\xaf%O\xd1W\xa3ua+sUJ\xea\xf9\xb7p-\x128\x9d\xbaM_\xff\x1c\xc3sG\x04\xf2\xd3\xf3{;\xd4\xd7\x1c\x1dZ\xe9\xe9\xc9\x9cu5\xe9\xa2\xb3N\xd2\xc1\xc8\xa5\xadt\xd5BKD\x86\xeb%\a*\x06\xbb\x1e\xfb\x11U\f&\xcbP\xf1\xcf\xccb\xe8Wb\xc5ae\xe3\xf9l\xa9vK\xed\x8cL\xfb%g\x83;\xe1\xe2w\xd6\xaa6\x16\x8fx\x1a\xd7\xc8\xf4[\xbc\b\xe1Z\x92\x14Q\xde [ 89.066458][ T6123] dump_stack_lvl+0x16c/0x1f0 [ 89.066494][ T6123] should_fail_ex+0x50a/0x650 [ 89.066533][ T6123] ? fs_reclaim_acquire+0xae/0x150 [ 89.066567][ T6123] should_failslab+0xc2/0x120 [ 89.066591][ T6123] __kmalloc_node_track_caller_noprof+0xcf/0x510 [ 89.066630][ T6123] ? kstrdup_const+0x63/0x80 [ 89.066664][ T6123] kstrdup+0x53/0x100 [ 89.066693][ T6123] kstrdup_const+0x63/0x80 [ 89.066720][ T6123] __kernfs_new_node+0x9c/0x890 [ 89.066754][ T6123] ? hlock_class+0x4e/0x130 [ 89.066788][ T6123] ? __pfx___kernfs_new_node+0x10/0x10 [ 89.066826][ T6123] ? map_id_range_down+0x2bb/0x3a0 [ 89.066863][ T6123] ? __pfx_map_id_range_down+0x10/0x10 [ 89.066896][ T6123] ? __pfx___lock_acquire+0x10/0x10 [ 89.066933][ T6123] kernfs_new_node+0x186/0x240 [ 89.066965][ T6123] ? net_ns_get_ownership+0xf8/0x1b0 [ 89.067001][ T6123] kernfs_create_dir_ns+0x4c/0x150 [ 89.067034][ T6123] sysfs_create_dir_ns+0x13b/0x2b0 [ 89.067060][ T6123] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 89.067091][ T6123] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 89.067113][ T6123] ? kobject_add_internal+0x12d/0x990 [ 89.067143][ T6123] ? net_namespace+0x12/0x50 [ 89.067171][ T6123] ? device_namespace+0x76/0xa0 [ 89.067199][ T6123] kobject_add_internal+0x2c8/0x990 [ 89.067231][ T6123] kobject_add+0x16f/0x240 [ 89.067257][ T6123] ? __pfx_kobject_add+0x10/0x10 [ 89.067285][ T6123] ? lock_acquire+0x2f/0xb0 [ 89.067309][ T6123] ? get_device_parent+0x11f/0x4e0 [ 89.067334][ T6123] ? kobject_put+0xab/0x5a0 [ 89.067367][ T6123] device_add+0x289/0x1a70 [ 89.067394][ T6123] ? __pfx_dev_set_name+0x10/0x10 [ 89.067423][ T6123] ? __pfx_device_add+0x10/0x10 [ 89.067451][ T6123] ? __init_waitqueue_head+0xca/0x150 [ 89.067480][ T6123] netdev_register_kobject+0x183/0x3a0 [ 89.067511][ T6123] register_netdevice+0x147b/0x1eb0 [ 89.067547][ T6123] ? __pfx_register_netdevice+0x10/0x10 [ 89.067583][ T6123] ? __pfx_loopback_net_init+0x10/0x10 [ 89.067608][ T6123] register_netdev+0x34/0x50 [ 89.067636][ T6123] loopback_net_init+0x7a/0x170 [ 89.067660][ T6123] ? __pfx_loopback_net_init+0x10/0x10 [ 89.067683][ T6123] ops_init+0x1df/0x5f0 [ 89.067714][ T6123] setup_net+0x21f/0x860 [ 89.067745][ T6123] ? __pfx_setup_net+0x10/0x10 [ 89.067780][ T6123] ? down_read_killable+0xcc/0x380 [ 89.067809][ T6123] ? __pfx_down_read_killable+0x10/0x10 [ 89.067836][ T6123] ? __raw_spin_lock_init+0x3a/0x110 [ 89.067871][ T6123] ? debug_mutex_init+0x37/0x70 [ 89.067898][ T6123] copy_net_ns+0x2b4/0x6c0 [ 89.067921][ T6123] create_new_namespaces+0x3ea/0xad0 [ 89.067959][ T6123] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 89.067993][ T6123] ksys_unshare+0x45d/0xa40 [ 89.068014][ T6123] ? __pfx_ksys_unshare+0x10/0x10 [ 89.068035][ T6123] ? xfd_validate_state+0x5d/0x180 [ 89.068072][ T6123] __x64_sys_unshare+0x31/0x40 [ 89.068093][ T6123] do_syscall_64+0xcd/0x250 [ 89.068119][ T6123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.068147][ T6123] RIP: 0033:0x7f5930b8cde9 [ 89.068164][ T6123] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 89.068183][ T6123] RSP: 002b:00007f5931a4b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 89.068203][ T6123] RAX: ffffffffffffffda RBX: 00007f5930da5fa0 RCX: 00007f5930b8cde9 [ 89.068217][ T6123] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 89.068230][ T6123] RBP: 00007f5930c0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 89.068242][ T6123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 89.068255][ T6123] R13: 0000000000000000 R14: 00007f5930da5fa0 R15: 00007ffd6bb4a068 [ 89.068284][ T6123] [ 89.068303][ T6123] kobject: kobject_add_internal failed for lo (error: -12 parent: net) [ 89.280511][ T6130] netlink: 4 bytes leftover after parsing attributes in process `syz.2.58'. [ 90.194296][ T6111] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 90.200769][ T6111] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 90.208165][ T6111] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 90.214728][ T6111] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 90.236643][ T6133] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 90.823816][ T6153] netlink: 'syz.3.65': attribute type 10 has an invalid length. [ 90.983219][ T5838] Bluetooth: hci0: command 0x0c1a tx timeout [ 91.903210][ T6184] netlink: 24 bytes leftover after parsing attributes in process `syz.2.73'. [ 92.079068][ T6190] FAULT_INJECTION: forcing a failure. [ 92.079068][ T6190] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 92.123120][ T6190] CPU: 1 UID: 0 PID: 6190 Comm: syz.3.74 Not tainted 6.14.0-rc3-syzkaller-00079-g87a132e73910 #0 [ 92.123152][ T6190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 92.123165][ T6190] Call Trace: [ 92.123171][ T6190] [ 92.123180][ T6190] dump_stack_lvl+0x16c/0x1f0 [ 92.123215][ T6190] should_fail_ex+0x50a/0x650 [ 92.123248][ T6190] ? __pfx___might_resched+0x10/0x10 [ 92.123287][ T6190] should_fail_alloc_page+0xe7/0x130 [ 92.123312][ T6190] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 92.123349][ T6190] __alloc_frozen_pages_noprof+0x18e/0x2470 [ 92.123388][ T6190] ? __pfx_mark_lock+0x10/0x10 [ 92.123416][ T6190] ? mark_lock+0xb5/0xc60 [ 92.123444][ T6190] ? find_held_lock+0x2d/0x110 [ 92.123488][ T6190] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 92.123545][ T6190] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 92.123582][ T6190] ? policy_nodemask+0xea/0x4e0 [ 92.123621][ T6190] alloc_pages_mpol+0x1fc/0x540 [ 92.123645][ T6190] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 92.123680][ T6190] ? find_held_lock+0x2d/0x110 [ 92.123711][ T6190] folio_alloc_mpol_noprof+0x36/0x2f0 [ 92.123739][ T6190] shmem_alloc_folio+0x135/0x160 [ 92.123778][ T6190] shmem_alloc_and_add_folio+0x48e/0xc10 [ 92.123810][ T6190] ? shmem_huge_global_enabled+0x72/0x6b0 [ 92.123834][ T6190] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 92.123864][ T6190] ? shmem_allowable_huge_orders+0xd0/0x410 [ 92.123899][ T6190] shmem_get_folio_gfp+0x689/0x1530 [ 92.123932][ T6190] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 92.123959][ T6190] ? __pfx_mark_lock+0x10/0x10 [ 92.123995][ T6190] shmem_fault+0x200/0xae0 [ 92.124023][ T6190] ? __pfx_shmem_fault+0x10/0x10 [ 92.124049][ T6190] ? __pfx_lock_release+0x10/0x10 [ 92.124083][ T6190] ? __pfx_filemap_map_pages+0x10/0x10 [ 92.124110][ T6190] ? mark_held_locks+0x9f/0xe0 [ 92.124142][ T6190] ? pte_alloc_one+0x2b8/0x390 [ 92.124179][ T6190] ? __pfx_filemap_map_pages+0x10/0x10 [ 92.124205][ T6190] __do_fault+0x10a/0x490 [ 92.124232][ T6190] ? __pfx_filemap_map_pages+0x10/0x10 [ 92.124257][ T6190] do_pte_missing+0x1a8/0x3e10 [ 92.124291][ T6190] ? do_raw_spin_unlock+0x172/0x230 [ 92.124316][ T6190] ? __pmd_alloc+0x3c2/0x870 [ 92.124349][ T6190] __handle_mm_fault+0x1166/0x2c60 [ 92.124391][ T6190] ? __pfx___handle_mm_fault+0x10/0x10 [ 92.124442][ T6190] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 92.124500][ T6190] ? find_vma+0xc0/0x140 [ 92.124526][ T6190] ? __pfx_find_vma+0x10/0x10 [ 92.124557][ T6190] handle_mm_fault+0x3fa/0xaa0 [ 92.124596][ T6190] do_user_addr_fault+0x7a3/0x13f0 [ 92.124635][ T6190] exc_page_fault+0x5c/0xc0 [ 92.124662][ T6190] asm_exc_page_fault+0x26/0x30 [ 92.124692][ T6190] RIP: 0010:rep_movs_alternative+0x4a/0x70 [ 92.124727][ T6190] Code: 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 cc cc cc cc 48 89 c8 48 c1 e9 03 83 e0 07 f3 48 a5 89 c1 [ 92.124747][ T6190] RSP: 0018:ffffc9000575f890 EFLAGS: 00050206 [ 92.124766][ T6190] RAX: 0000000000000001 RBX: 0000000000000100 RCX: 0000000000000100 [ 92.124780][ T6190] RDX: 0000000000000000 RSI: ffff88807fb14000 RDI: 0000000000000000 [ 92.124794][ T6190] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffed100ff6281f [ 92.124807][ T6190] R10: ffff88807fb140ff R11: 0000000000000000 R12: ffffc9000575fc60 [ 92.124821][ T6190] R13: 0000000000000100 R14: ffff88807fb14000 R15: 00007ffffffff000 [ 92.124853][ T6190] _copy_to_iter+0x385/0x1560 [ 92.124880][ T6190] ? trace_lock_acquire+0x14e/0x1f0 [ 92.124910][ T6190] ? __pfx__copy_to_iter+0x10/0x10 [ 92.124932][ T6190] ? __virt_addr_valid+0x1a4/0x590 [ 92.124960][ T6190] ? __virt_addr_valid+0x5e/0x590 [ 92.124983][ T6190] ? __phys_addr_symbol+0x30/0x80 [ 92.125006][ T6190] ? __check_object_size+0x488/0x710 [ 92.125034][ T6190] simple_copy_to_iter+0x4f/0x80 [ 92.125063][ T6190] __skb_datagram_iter+0x122/0x8c0 [ 92.125087][ T6190] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 92.125115][ T6190] ? skb_recv_datagram+0x89/0xc0 [ 92.125144][ T6190] ? rcu_is_watching+0x12/0xc0 [ 92.125171][ T6190] skb_copy_datagram_iter+0x40/0x50 [ 92.125201][ T6190] netlink_recvmsg+0x299/0xf30 [ 92.125233][ T6190] ? __pfx_netlink_recvmsg+0x10/0x10 [ 92.125258][ T6190] ? aa_sk_perm+0x2f5/0xb20 [ 92.125289][ T6190] ? __pfx_aa_sk_perm+0x10/0x10 [ 92.125328][ T6190] sock_recvmsg+0x1f6/0x250 [ 92.125354][ T6190] sock_read_iter+0x2bb/0x3b0 [ 92.125378][ T6190] ? __pfx_sock_read_iter+0x10/0x10 [ 92.125414][ T6190] ? bpf_lsm_file_permission+0x9/0x10 [ 92.125461][ T6190] ? security_file_permission+0x71/0x210 [ 92.125493][ T6190] ? rw_verify_area+0xcf/0x680 [ 92.125524][ T6190] vfs_read+0xa53/0xbf0 [ 92.125558][ T6190] ? __pfx_vfs_read+0x10/0x10 [ 92.125590][ T6190] ? __fget_files+0x40/0x3a0 [ 92.125638][ T6190] ksys_read+0x207/0x250 [ 92.125667][ T6190] ? __pfx_ksys_read+0x10/0x10 [ 92.125706][ T6190] do_syscall_64+0xcd/0x250 [ 92.125737][ T6190] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.125767][ T6190] RIP: 0033:0x7fb8af18cde9 [ 92.125786][ T6190] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 92.125805][ T6190] RSP: 002b:00007fb8aff16038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 92.125826][ T6190] RAX: ffffffffffffffda RBX: 00007fb8af3a6080 RCX: 00007fb8af18cde9 [ 92.125841][ T6190] RDX: 000000000000fdef RSI: 0000000000000000 RDI: 0000000000000004 [ 92.125854][ T6190] RBP: 00007fb8aff16090 R08: 0000000000000000 R09: 0000000000000000 [ 92.125867][ T6190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 92.125880][ T6190] R13: 0000000000000000 R14: 00007fb8af3a6080 R15: 00007ffdf1aa4858 [ 92.125911][ T6190] [ 92.715980][ T6195] FAULT_INJECTION: forcing a failure. [ 92.715980][ T6195] name failslab, interval 1, probability 0, space 0, times 0 [ 92.729015][ T6195] CPU: 1 UID: 0 PID: 6195 Comm: syz.2.75 Not tainted 6.14.0-rc3-syzkaller-00079-g87a132e73910 #0 [ 92.729047][ T6195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 92.729062][ T6195] Call Trace: [ 92.729070][ T6195] [ 92.729080][ T6195] dump_stack_lvl+0x16c/0x1f0 [ 92.729116][ T6195] should_fail_ex+0x50a/0x650 [ 92.729156][ T6195] ? fs_reclaim_acquire+0xae/0x150 [ 92.729192][ T6195] should_failslab+0xc2/0x120 [ 92.729217][ T6195] __kmalloc_cache_node_noprof+0x6e/0x420 [ 92.729253][ T6195] ? __pfx___lock_acquire+0x10/0x10 [ 92.729285][ T6195] ? __get_vm_area_node+0x101/0x2f0 [ 92.729322][ T6195] __get_vm_area_node+0x101/0x2f0 [ 92.729358][ T6195] __vmalloc_node_range_noprof+0x26a/0x1530 [ 92.729392][ T6195] ? n_tty_open+0x1a/0x170 [ 92.729436][ T6195] ? rcu_is_watching+0x12/0xc0 [ 92.729467][ T6195] ? tty_ldisc_lock+0x65/0xb0 [ 92.729496][ T6195] ? n_tty_open+0x1a/0x170 [ 92.729535][ T6195] ? __ldsem_down_write_nested+0x10f/0x8d0 [ 92.729572][ T6195] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 92.729616][ T6195] ? n_tty_open+0x1a/0x170 [ 92.729650][ T6195] vzalloc_noprof+0x6b/0x90 [ 92.729679][ T6195] ? n_tty_open+0x1a/0x170 [ 92.729707][ T6195] ? __pfx_n_tty_open+0x10/0x10 [ 92.729735][ T6195] n_tty_open+0x1a/0x170 [ 92.729767][ T6195] ? __pfx_n_tty_open+0x10/0x10 [ 92.729798][ T6195] tty_ldisc_open+0x9c/0x120 [ 92.729825][ T6195] tty_ldisc_setup+0x40/0x100 [ 92.729853][ T6195] tty_init_dev.part.0+0x1e7/0x660 [ 92.729887][ T6195] tty_open+0xac1/0xf80 [ 92.729917][ T6195] ? chrdev_open+0x10e/0x6a0 [ 92.729957][ T6195] ? __pfx_tty_open+0x10/0x10 [ 92.729985][ T6195] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 92.730009][ T6195] ? lock_acquire+0x2f/0xb0 [ 92.730038][ T6195] ? chrdev_open+0x80/0x6a0 [ 92.730076][ T6195] ? __pfx_tty_open+0x10/0x10 [ 92.730106][ T6195] chrdev_open+0x237/0x6a0 [ 92.730140][ T6195] ? __pfx_apparmor_file_open+0x10/0x10 [ 92.730171][ T6195] ? __pfx_chrdev_open+0x10/0x10 [ 92.730209][ T6195] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 92.730247][ T6195] do_dentry_open+0x735/0x1c40 [ 92.730282][ T6195] ? __pfx_chrdev_open+0x10/0x10 [ 92.730318][ T6195] ? inode_permission+0xdd/0x5f0 [ 92.730346][ T6195] vfs_open+0x82/0x3f0 [ 92.730365][ T6195] ? may_open+0x1f2/0x400 [ 92.730392][ T6195] path_openat+0x1e88/0x2d80 [ 92.730451][ T6195] ? __pfx_path_openat+0x10/0x10 [ 92.730488][ T6195] ? __pfx___lock_acquire+0x10/0x10 [ 92.730518][ T6195] ? lock_acquire.part.0+0x11b/0x380 [ 92.730550][ T6195] ? find_held_lock+0x2d/0x110 [ 92.730581][ T6195] do_filp_open+0x20c/0x470 [ 92.730615][ T6195] ? __pfx_do_filp_open+0x10/0x10 [ 92.730646][ T6195] ? find_held_lock+0x2d/0x110 [ 92.730698][ T6195] ? alloc_fd+0x41f/0x760 [ 92.730741][ T6195] do_sys_openat2+0x17a/0x1e0 [ 92.730766][ T6195] ? __pfx_do_sys_openat2+0x10/0x10 [ 92.730805][ T6195] __x64_sys_openat+0x175/0x210 [ 92.730830][ T6195] ? __pfx___x64_sys_openat+0x10/0x10 [ 92.730871][ T6195] do_syscall_64+0xcd/0x250 [ 92.730904][ T6195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.730937][ T6195] RIP: 0033:0x7f5930b8cde9 [ 92.730957][ T6195] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 92.730980][ T6195] RSP: 002b:00007f5931a4b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 92.731004][ T6195] RAX: ffffffffffffffda RBX: 00007f5930da5fa0 RCX: 00007f5930b8cde9 [ 92.731020][ T6195] RDX: 0000000000000001 RSI: 0000400000000040 RDI: ffffffffffffff9c [ 92.731035][ T6195] RBP: 00007f5930c0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 92.731050][ T6195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 92.731064][ T6195] R13: 0000000000000000 R14: 00007f5930da5fa0 R15: 00007ffd6bb4a068 [ 92.731097][ T6195] [ 92.731299][ T6195] syz.2.75: vmalloc error: size 9128, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 92.752851][ T5838] Bluetooth: hci3: command 0x0c1a tx timeout [ 92.755445][ T6195] ,cpuset=/ [ 92.758553][ T5838] Bluetooth: hci1: command 0x0c1a tx timeout [ 92.763377][ T6195] ,mems_allowed=0-1 [ 92.763421][ T6195] CPU: 1 UID: 0 PID: 6195 Comm: syz.2.75 Not tainted 6.14.0-rc3-syzkaller-00079-g87a132e73910 #0 [ 92.763449][ T6195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 92.763461][ T6195] Call Trace: [ 92.763468][ T6195] [ 92.763476][ T6195] dump_stack_lvl+0x16c/0x1f0 [ 92.763509][ T6195] warn_alloc+0x24d/0x3a0 [ 92.763545][ T6195] ? __pfx_warn_alloc+0x10/0x10 [ 92.763575][ T6195] ? rcu_is_watching+0x12/0xc0 [ 92.763601][ T6195] ? __kmalloc_cache_node_noprof+0x2ad/0x420 [ 92.763644][ T6195] ? __kasan_kmalloc+0x8a/0xb0 [ 92.763679][ T6195] ? __get_vm_area_node+0x1dc/0x2f0 [ 92.763716][ T6195] __vmalloc_node_range_noprof+0xd24/0x1530 [ 92.763748][ T6195] ? rcu_is_watching+0x12/0xc0 [ 92.763775][ T6195] ? tty_ldisc_lock+0x65/0xb0 [ 92.763803][ T6195] ? n_tty_open+0x1a/0x170 [ 92.763837][ T6195] ? __ldsem_down_write_nested+0x10f/0x8d0 [ 92.763873][ T6195] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 92.763914][ T6195] ? n_tty_open+0x1a/0x170 [ 92.763946][ T6195] vzalloc_noprof+0x6b/0x90 [ 92.763976][ T6195] ? n_tty_open+0x1a/0x170 [ 92.764005][ T6195] ? __pfx_n_tty_open+0x10/0x10 [ 92.764035][ T6195] n_tty_open+0x1a/0x170 [ 92.764066][ T6195] ? __pfx_n_tty_open+0x10/0x10 [ 92.764097][ T6195] tty_ldisc_open+0x9c/0x120 [ 92.764122][ T6195] tty_ldisc_setup+0x40/0x100 [ 92.764149][ T6195] tty_init_dev.part.0+0x1e7/0x660 [ 92.764182][ T6195] tty_open+0xac1/0xf80 [ 92.764210][ T6195] ? chrdev_open+0x10e/0x6a0 [ 92.764249][ T6195] ? __pfx_tty_open+0x10/0x10 [ 92.764275][ T6195] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 92.764299][ T6195] ? lock_acquire+0x2f/0xb0 [ 92.764328][ T6195] ? chrdev_open+0x80/0x6a0 [ 92.764383][ T6195] ? __pfx_tty_open+0x10/0x10 [ 92.764421][ T6195] chrdev_open+0x237/0x6a0 [ 92.764456][ T6195] ? __pfx_apparmor_file_open+0x10/0x10 [ 92.764487][ T6195] ? __pfx_chrdev_open+0x10/0x10 [ 92.764526][ T6195] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 92.764563][ T6195] do_dentry_open+0x735/0x1c40 [ 92.764596][ T6195] ? __pfx_chrdev_open+0x10/0x10 [ 92.764631][ T6195] ? inode_permission+0xdd/0x5f0 [ 92.764658][ T6195] vfs_open+0x82/0x3f0 [ 92.764679][ T6195] ? may_open+0x1f2/0x400 [ 92.764708][ T6195] path_openat+0x1e88/0x2d80 [ 92.764753][ T6195] ? __pfx_path_openat+0x10/0x10 [ 92.764785][ T6195] ? __pfx___lock_acquire+0x10/0x10 [ 92.764814][ T6195] ? lock_acquire.part.0+0x11b/0x380 [ 92.764845][ T6195] ? find_held_lock+0x2d/0x110 [ 92.764874][ T6195] do_filp_open+0x20c/0x470 [ 92.764907][ T6195] ? __pfx_do_filp_open+0x10/0x10 [ 92.764937][ T6195] ? find_held_lock+0x2d/0x110 [ 92.764986][ T6195] ? alloc_fd+0x41f/0x760 [ 92.765027][ T6195] do_sys_openat2+0x17a/0x1e0 [ 92.765052][ T6195] ? __pfx_do_sys_openat2+0x10/0x10 [ 92.765090][ T6195] __x64_sys_openat+0x175/0x210 [ 92.765116][ T6195] ? __pfx___x64_sys_openat+0x10/0x10 [ 92.765155][ T6195] do_syscall_64+0xcd/0x250 [ 92.765187][ T6195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.765219][ T6195] RIP: 0033:0x7f5930b8cde9 [ 92.765238][ T6195] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 92.765261][ T6195] RSP: 002b:00007f5931a4b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 92.765283][ T6195] RAX: ffffffffffffffda RBX: 00007f5930da5fa0 RCX: 00007f5930b8cde9 [ 92.765300][ T6195] RDX: 0000000000000001 RSI: 0000400000000040 RDI: ffffffffffffff9c [ 92.765315][ T6195] RBP: 00007f5930c0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 92.765329][ T6195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 92.765343][ T6195] R13: 0000000000000000 R14: 00007f5930da5fa0 R15: 00007ffd6bb4a068 [ 92.765376][ T6195] [ 92.765385][ T6195] Mem-Info: [ 92.768540][ T5838] Bluetooth: hci2: command 0x0c1a tx timeout [ 93.519592][ T6195] active_anon:49711 inactive_anon:0 isolated_anon:0 [ 93.519592][ T6195] active_file:16130 inactive_file:38297 isolated_file:0 [ 93.519592][ T6195] unevictable:768 dirty:390 writeback:0 [ 93.519592][ T6195] slab_reclaimable:9914 slab_unreclaimable:93806 [ 93.519592][ T6195] mapped:43734 shmem:46578 pagetables:939 [ 93.519592][ T6195] sec_pagetables:0 bounce:0 [ 93.519592][ T6195] kernel_misc_reclaimable:0 [ 93.519592][ T6195] free:1302979 free_pcp:515 free_cma:0 [ 93.566037][ T6195] Node 0 active_anon:198944kB inactive_anon:0kB active_file:64520kB inactive_file:153112kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:175036kB dirty:1552kB writeback:0kB shmem:184976kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10480kB pagetables:3756kB sec_pagetables:0kB all_unreclaimable? no [ 93.602243][ T6195] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 93.634191][ T6195] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 93.661475][ T6195] lowmem_reserve[]: 0 2487 2487 0 0 [ 93.666838][ T6195] Node 0 DMA32 free:1290752kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB active_anon:199436kB inactive_anon:0kB active_file:64520kB inactive_file:153012kB unevictable:1536kB writepending:1544kB present:3129332kB managed:2547544kB mlocked:0kB bounce:0kB free_pcp:1664kB local_pcp:952kB free_cma:0kB [ 93.789286][ T6195] lowmem_reserve[]: 0 0 0 0 0 [ 93.810532][ T6195] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:100kB unevictable:0kB writepending:8kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 93.871577][ T6195] lowmem_reserve[]: 0 0 0 0 0 [ 93.897880][ T6195] Node 1 Normal free:3905772kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:8kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:468kB local_pcp:468kB free_cma:0kB [ 93.947929][ T6195] lowmem_reserve[]: 0 0 0 0 0 [ 93.952761][ T6195] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 94.023158][ T6195] Node 0 DMA32: 347*4kB (UM) 542*8kB (UME) 313*16kB (UM) 35*32kB (UME) 15*64kB (UME) 9*128kB (UME) 4*256kB (UME) 3*512kB (UM) 1*1024kB (U) 0*2048kB 308*4096kB (ME) = 1279116kB [ 94.133130][ T6195] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 94.157195][ T6195] Node 1 Normal: 175*4kB (UME) 22*8kB (UME) 32*16kB (UME) 190*32kB (UME) 93*64kB (UME) 23*128kB (UME) 17*256kB (UM) 10*512kB (UME) 7*1024kB (UME) 3*2048kB (UE) 944*4096kB (UM) = 3905772kB [ 94.227839][ T6195] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 94.267798][ T6195] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 94.287426][ T6195] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 94.317961][ T6195] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 94.381395][ T6195] 106193 total pagecache pages [ 94.403122][ T6195] 0 pages in swap cache [ 94.408019][ T6195] Free swap = 124824kB [ 94.412212][ T6195] Total swap = 124996kB [ 94.416988][ T6195] 2097051 pages RAM [ 94.420922][ T6195] 0 pages HighMem/MovableOnly [ 94.431049][ T6195] 428507 pages reserved [ 94.453120][ T6195] 0 pages cma reserved [ 94.457443][ T6195] tty tty17: ldisc open failed (-12), clearing slot 16 [ 96.506252][ T6235] ovs_: entered promiscuous mode [ 96.802133][ T6251] ubi0: attaching mtd0 [ 96.808332][ T6251] ubi0: scanning is finished [ 96.812982][ T6251] ubi0: empty MTD device detected [ 97.271154][ T6251] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 97.313351][ T6251] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 97.347943][ T6251] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 97.379083][ T6251] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 97.423711][ T6251] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 97.441208][ T6251] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 97.463125][ T6251] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 4163385216 [ 97.593147][ T6251] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 97.618020][ T6255] ubi0: background thread "ubi_bgt0d" started, PID 6255 [ 98.018610][ T6266] HfR: entered promiscuous mode [ 98.143681][ T6266] netlink: 12 bytes leftover after parsing attributes in process `syz.1.96'. [ 98.200893][ T6266] HfR: left promiscuous mode [ 98.258491][ T6269] device-mapper: ioctl: Unable to rename non-existent device, to „ [ 98.923592][ T6279] FAULT_INJECTION: forcing a failure. [ 98.923592][ T6279] name failslab, interval 1, probability 0, space 0, times 0 [ 98.957387][ T6279] CPU: 0 UID: 0 PID: 6279 Comm: syz.0.100 Not tainted 6.14.0-rc3-syzkaller-00079-g87a132e73910 #0 [ 98.957424][ T6279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 98.957440][ T6279] Call Trace: [ 98.957447][ T6279] [ 98.957457][ T6279] dump_stack_lvl+0x16c/0x1f0 [ 98.957494][ T6279] should_fail_ex+0x50a/0x650 [ 98.957532][ T6279] ? fs_reclaim_acquire+0xae/0x150 [ 98.957567][ T6279] should_failslab+0xc2/0x120 [ 98.957590][ T6279] __kmalloc_cache_node_noprof+0x6e/0x420 [ 98.957624][ T6279] ? __pfx___lock_acquire+0x10/0x10 [ 98.957655][ T6279] ? __get_vm_area_node+0x101/0x2f0 [ 98.957692][ T6279] __get_vm_area_node+0x101/0x2f0 [ 98.957728][ T6279] __vmalloc_node_range_noprof+0x26a/0x1530 [ 98.957761][ T6279] ? n_tty_open+0x1a/0x170 [ 98.957793][ T6279] ? rcu_is_watching+0x12/0xc0 [ 98.957822][ T6279] ? tty_ldisc_lock+0x65/0xb0 [ 98.957850][ T6279] ? n_tty_open+0x1a/0x170 [ 98.957885][ T6279] ? __ldsem_down_write_nested+0x10f/0x8d0 [ 98.957921][ T6279] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 98.957966][ T6279] ? n_tty_open+0x1a/0x170 [ 98.957999][ T6279] vzalloc_noprof+0x6b/0x90 [ 98.958038][ T6279] ? n_tty_open+0x1a/0x170 [ 98.958070][ T6279] ? __pfx_n_tty_open+0x10/0x10 [ 98.958102][ T6279] n_tty_open+0x1a/0x170 [ 98.958134][ T6279] ? __pfx_n_tty_open+0x10/0x10 [ 98.958165][ T6279] tty_ldisc_open+0x9c/0x120 [ 98.958191][ T6279] tty_ldisc_setup+0x40/0x100 [ 98.958219][ T6279] tty_init_dev.part.0+0x1e7/0x660 [ 98.958252][ T6279] tty_open+0xac1/0xf80 [ 98.958281][ T6279] ? chrdev_open+0x10e/0x6a0 [ 98.958321][ T6279] ? __pfx_tty_open+0x10/0x10 [ 98.958349][ T6279] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 98.958372][ T6279] ? lock_acquire+0x2f/0xb0 [ 98.958401][ T6279] ? chrdev_open+0x80/0x6a0 [ 98.958439][ T6279] ? __pfx_tty_open+0x10/0x10 [ 98.958469][ T6279] chrdev_open+0x237/0x6a0 [ 98.958502][ T6279] ? __pfx_apparmor_file_open+0x10/0x10 [ 98.958533][ T6279] ? __pfx_chrdev_open+0x10/0x10 [ 98.958571][ T6279] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 98.958609][ T6279] do_dentry_open+0x735/0x1c40 [ 98.958642][ T6279] ? __pfx_chrdev_open+0x10/0x10 [ 98.958679][ T6279] ? inode_permission+0xdd/0x5f0 [ 98.958709][ T6279] vfs_open+0x82/0x3f0 [ 98.958731][ T6279] ? may_open+0x1f2/0x400 [ 98.958762][ T6279] path_openat+0x1e88/0x2d80 [ 98.958809][ T6279] ? __pfx_path_openat+0x10/0x10 [ 98.958843][ T6279] ? __pfx___lock_acquire+0x10/0x10 [ 98.958873][ T6279] ? lock_acquire.part.0+0x11b/0x380 [ 98.958905][ T6279] ? find_held_lock+0x2d/0x110 [ 98.958936][ T6279] do_filp_open+0x20c/0x470 [ 98.958971][ T6279] ? __pfx_do_filp_open+0x10/0x10 [ 98.959003][ T6279] ? find_held_lock+0x2d/0x110 [ 98.959066][ T6279] ? alloc_fd+0x41f/0x760 [ 98.959112][ T6279] do_sys_openat2+0x17a/0x1e0 [ 98.959138][ T6279] ? __pfx_do_sys_openat2+0x10/0x10 [ 98.959181][ T6279] __x64_sys_openat+0x175/0x210 [ 98.959208][ T6279] ? __pfx___x64_sys_openat+0x10/0x10 [ 98.959250][ T6279] do_syscall_64+0xcd/0x250 [ 98.959283][ T6279] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.959316][ T6279] RIP: 0033:0x7f690798cde9 [ 98.959337][ T6279] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.959359][ T6279] RSP: 002b:00007f690887c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 98.959382][ T6279] RAX: ffffffffffffffda RBX: 00007f6907ba5fa0 RCX: 00007f690798cde9 [ 98.959399][ T6279] RDX: 0000000000000001 RSI: 0000400000000040 RDI: ffffffffffffff9c [ 98.959414][ T6279] RBP: 00007f6907a0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 98.959429][ T6279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 98.959443][ T6279] R13: 0000000000000000 R14: 00007f6907ba5fa0 R15: 00007ffcf2ed5d28 [ 98.959478][ T6279] [ 98.959495][ T6279] tty tty17: ldisc open failed (-12), clearing slot 16 [ 99.615989][ T6296] ubi: mtd0 is already attached to ubi0 [ 99.749717][ T6298] FAULT_INJECTION: forcing a failure. [ 99.749717][ T6298] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 99.798871][ T6298] CPU: 0 UID: 0 PID: 6298 Comm: syz.1.105 Not tainted 6.14.0-rc3-syzkaller-00079-g87a132e73910 #0 [ 99.798901][ T6298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 99.798913][ T6298] Call Trace: [ 99.798920][ T6298] [ 99.798929][ T6298] dump_stack_lvl+0x16c/0x1f0 [ 99.798972][ T6298] should_fail_ex+0x50a/0x650 [ 99.799008][ T6298] _copy_to_user+0x32/0xd0 [ 99.799034][ T6298] simple_read_from_buffer+0xd0/0x160 [ 99.799064][ T6298] proc_fail_nth_read+0x198/0x270 [ 99.799092][ T6298] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 99.799120][ T6298] ? rw_verify_area+0xcf/0x680 [ 99.799147][ T6298] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 99.799173][ T6298] vfs_read+0x1df/0xbf0 [ 99.799202][ T6298] ? __fget_files+0x1fc/0x3a0 [ 99.799233][ T6298] ? __pfx___mutex_lock+0x10/0x10 [ 99.799259][ T6298] ? __pfx_vfs_read+0x10/0x10 [ 99.799296][ T6298] ? __fget_files+0x206/0x3a0 [ 99.799335][ T6298] ksys_read+0x12b/0x250 [ 99.799363][ T6298] ? __pfx_ksys_read+0x10/0x10 [ 99.799403][ T6298] do_syscall_64+0xcd/0x250 [ 99.799433][ T6298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.799464][ T6298] RIP: 0033:0x7fb5a1d8b7fc [ 99.799482][ T6298] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 99.799502][ T6298] RSP: 002b:00007fb5a2c7a030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 99.799524][ T6298] RAX: ffffffffffffffda RBX: 00007fb5a1fa5fa0 RCX: 00007fb5a1d8b7fc [ 99.799539][ T6298] RDX: 000000000000000f RSI: 00007fb5a2c7a0a0 RDI: 0000000000000004 [ 99.799551][ T6298] RBP: 00007fb5a2c7a090 R08: 0000000000000000 R09: 0000000000000000 [ 99.799564][ T6298] R10: 0000000000000100 R11: 0000000000000246 R12: 0000000000000001 [ 99.799577][ T6298] R13: 0000000000000000 R14: 00007fb5a1fa5fa0 R15: 00007ffc2a0eb9e8 [ 99.799607][ T6298] [ 100.022633][ T6302] FAULT_INJECTION: forcing a failure. [ 100.022633][ T6302] name failslab, interval 1, probability 0, space 0, times 0 [ 100.036057][ T6302] CPU: 0 UID: 0 PID: 6302 Comm: syz.0.107 Not tainted 6.14.0-rc3-syzkaller-00079-g87a132e73910 #0 [ 100.036086][ T6302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 100.036100][ T6302] Call Trace: [ 100.036106][ T6302] [ 100.036116][ T6302] dump_stack_lvl+0x16c/0x1f0 [ 100.036149][ T6302] should_fail_ex+0x50a/0x650 [ 100.036188][ T6302] ? sctp_add_bind_addr+0x9a/0x3d0 [ 100.036209][ T6302] should_failslab+0xc2/0x120 [ 100.036232][ T6302] __kmalloc_cache_noprof+0x68/0x410 [ 100.036261][ T6302] ? rcu_is_watching+0x12/0xc0 [ 100.036289][ T6302] ? trace_lock_acquire+0x14e/0x1f0 [ 100.036319][ T6302] sctp_add_bind_addr+0x9a/0x3d0 [ 100.036346][ T6302] sctp_copy_local_addr_list+0x39e/0x5a0 [ 100.036377][ T6302] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 100.036410][ T6302] ? sctp_auth_asoc_copy_shkeys+0x2a7/0x360 [ 100.036445][ T6302] ? sctp_bind_addr_copy+0xe0/0x530 [ 100.036468][ T6302] sctp_bind_addr_copy+0xe0/0x530 [ 100.036497][ T6302] sctp_connect_new_asoc+0x1d8/0x790 [ 100.036528][ T6302] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 100.036563][ T6302] ? __ipv6_addr_type+0x225/0x300 [ 100.036591][ T6302] ? __ipv6_addr_type+0x225/0x300 [ 100.036621][ T6302] __sctp_connect+0x3f5/0xc60 [ 100.036654][ T6302] ? sctp_inet_connect+0xac/0x200 [ 100.036686][ T6302] ? __pfx___sctp_connect+0x10/0x10 [ 100.036716][ T6302] ? __pfx_sctp_inet_connect+0x10/0x10 [ 100.036750][ T6302] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 100.036788][ T6302] ? __pfx_sctp_inet_connect+0x10/0x10 [ 100.036817][ T6302] sctp_inet_connect+0x15f/0x200 [ 100.036850][ T6302] __sys_connect_file+0x13e/0x1a0 [ 100.036882][ T6302] __sys_connect+0x14f/0x170 [ 100.036916][ T6302] ? __pfx___sys_connect+0x10/0x10 [ 100.036957][ T6302] ? __pfx_ksys_write+0x10/0x10 [ 100.036996][ T6302] __x64_sys_connect+0x72/0xb0 [ 100.037022][ T6302] ? lockdep_hardirqs_on+0x7c/0x110 [ 100.037049][ T6302] do_syscall_64+0xcd/0x250 [ 100.037079][ T6302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.037109][ T6302] RIP: 0033:0x7f690798cde9 [ 100.037128][ T6302] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.037149][ T6302] RSP: 002b:00007f690887c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 100.037171][ T6302] RAX: ffffffffffffffda RBX: 00007f6907ba5fa0 RCX: 00007f690798cde9 [ 100.037186][ T6302] RDX: 0000000000000055 RSI: 00004000000018c0 RDI: 0000000000000003 [ 100.037200][ T6302] RBP: 00007f690887c090 R08: 0000000000000000 R09: 0000000000000000 [ 100.037214][ T6302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 100.037227][ T6302] R13: 0000000000000000 R14: 00007f6907ba5fa0 R15: 00007ffcf2ed5d28 [ 100.037259][ T6302] [ 101.134857][ T6325] size and base must be multiples of 4 kiB [ 101.140742][ T6325] CPU: 0 UID: 0 PID: 6325 Comm: syz.3.113 Not tainted 6.14.0-rc3-syzkaller-00079-g87a132e73910 #0 [ 101.140773][ T6325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 101.140787][ T6325] Call Trace: [ 101.140795][ T6325] [ 101.140805][ T6325] dump_stack_lvl+0x16c/0x1f0 [ 101.140843][ T6325] mtrr_add+0xdf/0x110 [ 101.140883][ T6325] mtrr_ioctl+0x7f1/0xcf0 [ 101.140916][ T6325] ? __pfx_mtrr_ioctl+0x10/0x10 [ 101.140952][ T6325] ? __pfx_lock_release+0x10/0x10 [ 101.141002][ T6325] ? __fget_files+0x206/0x3a0 [ 101.141037][ T6325] ? __pfx_mtrr_ioctl+0x10/0x10 [ 101.141068][ T6325] proc_reg_unlocked_ioctl+0x226/0x320 [ 101.141102][ T6325] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 101.141141][ T6325] __x64_sys_ioctl+0x190/0x200 [ 101.141172][ T6325] do_syscall_64+0xcd/0x250 [ 101.141204][ T6325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.141237][ T6325] RIP: 0033:0x7fb8af18cde9 [ 101.141257][ T6325] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 101.141279][ T6325] RSP: 002b:00007fb8aff16038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 101.141303][ T6325] RAX: ffffffffffffffda RBX: 00007fb8af3a6080 RCX: 00007fb8af18cde9 [ 101.141319][ T6325] RDX: 0000000000000006 RSI: 00000000400c4d01 RDI: 0000000000000006 [ 101.141334][ T6325] RBP: 00007fb8af20e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 101.141349][ T6325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 101.141364][ T6325] R13: 0000000000000000 R14: 00007fb8af3a6080 R15: 00007ffdf1aa4858 [ 101.141396][ T6325] [ 101.162416][ T6315] zero sized request [ 103.409313][ T6390] ubi: mtd0 is already attached to ubi0 [ 103.557614][ T6397] FAULT_INJECTION: forcing a failure. [ 103.557614][ T6397] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 103.579535][ T6397] CPU: 0 UID: 0 PID: 6397 Comm: syz.1.137 Not tainted 6.14.0-rc3-syzkaller-00079-g87a132e73910 #0 [ 103.579568][ T6397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 103.579580][ T6397] Call Trace: [ 103.579588][ T6397] [ 103.579597][ T6397] dump_stack_lvl+0x16c/0x1f0 [ 103.579629][ T6397] should_fail_ex+0x50a/0x650 [ 103.579668][ T6397] _copy_to_user+0x32/0xd0 [ 103.579694][ T6397] tomoyo_flush+0x168/0x500 [ 103.579730][ T6397] tomoyo_set_string+0xaf/0xe0 [ 103.579761][ T6397] tomoyo_print_entry+0x16d5/0x2720 [ 103.579793][ T6397] ? __might_fault+0x13b/0x190 [ 103.579815][ T6397] ? __pfx_lock_release+0x10/0x10 [ 103.579844][ T6397] ? trace_lock_acquire+0x14e/0x1f0 [ 103.579871][ T6397] ? __pfx_tomoyo_print_entry+0x10/0x10 [ 103.579901][ T6397] ? lock_acquire+0x2f/0xb0 [ 103.579927][ T6397] ? __might_fault+0xe3/0x190 [ 103.579949][ T6397] ? __might_fault+0xe3/0x190 [ 103.579977][ T6397] ? _copy_to_user+0x48/0xd0 [ 103.580008][ T6397] tomoyo_read_domain2+0xa3/0x380 [ 103.580044][ T6397] tomoyo_read_domain+0x3d2/0x9c0 [ 103.580084][ T6397] tomoyo_read_control+0x2a0/0x550 [ 103.580120][ T6397] ? __pfx_tomoyo_read+0x10/0x10 [ 103.580151][ T6397] vfs_read+0x1df/0xbf0 [ 103.580180][ T6397] ? __fget_files+0x1fc/0x3a0 [ 103.580210][ T6397] ? __pfx___mutex_lock+0x10/0x10 [ 103.580236][ T6397] ? __pfx_vfs_read+0x10/0x10 [ 103.580274][ T6397] ? __fget_files+0x206/0x3a0 [ 103.580320][ T6397] ksys_read+0x12b/0x250 [ 103.580348][ T6397] ? __pfx_ksys_read+0x10/0x10 [ 103.580386][ T6397] do_syscall_64+0xcd/0x250 [ 103.580415][ T6397] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.580444][ T6397] RIP: 0033:0x7fb5a1d8cde9 [ 103.580464][ T6397] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.580484][ T6397] RSP: 002b:00007fb5a2c7a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 103.580505][ T6397] RAX: ffffffffffffffda RBX: 00007fb5a1fa5fa0 RCX: 00007fb5a1d8cde9 [ 103.580523][ T6397] RDX: 000000000000fd98 RSI: 0000400000000040 RDI: 0000000000000003 [ 103.580537][ T6397] RBP: 00007fb5a2c7a090 R08: 0000000000000000 R09: 0000000000000000 [ 103.580549][ T6397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.580562][ T6397] R13: 0000000000000000 R14: 00007fb5a1fa5fa0 R15: 00007ffc2a0eb9e8 [ 103.580592][ T6397] [ 103.585163][ T6394] netlink: zone id is out of range [ 103.853150][ T6394] netlink: zone id is out of range [ 103.858387][ T6394] netlink: zone id is out of range [ 103.873730][ T6394] netlink: zone id is out of range [ 103.878899][ T6394] netlink: zone id is out of range [ 103.887157][ T6401] FAULT_INJECTION: forcing a failure. [ 103.887157][ T6401] name failslab, interval 1, probability 0, space 0, times 0 [ 103.946199][ T6394] netlink: zone id is out of range [ 103.961601][ T6394] netlink: zone id is out of range [ 103.973459][ T6401] CPU: 1 UID: 0 PID: 6401 Comm: syz.1.138 Not tainted 6.14.0-rc3-syzkaller-00079-g87a132e73910 #0 [ 103.973493][ T6401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 103.973514][ T6401] Call Trace: [ 103.973522][ T6401] [ 103.973532][ T6401] dump_stack_lvl+0x16c/0x1f0 [ 103.973569][ T6401] should_fail_ex+0x50a/0x650 [ 103.973605][ T6401] ? fs_reclaim_acquire+0xae/0x150 [ 103.973640][ T6401] should_failslab+0xc2/0x120 [ 103.973664][ T6401] __kmalloc_node_noprof+0xd1/0x510 [ 103.973701][ T6401] ? __vmalloc_node_range_noprof+0x3d8/0x1530 [ 103.973738][ T6401] __vmalloc_node_range_noprof+0x3d8/0x1530 [ 103.973784][ T6401] ? n_tty_open+0x1a/0x170 [ 103.973821][ T6401] ? __ldsem_down_write_nested+0x10f/0x8d0 [ 103.973857][ T6401] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 103.973901][ T6401] ? n_tty_open+0x1a/0x170 [ 103.973934][ T6401] vzalloc_noprof+0x6b/0x90 [ 103.973965][ T6401] ? n_tty_open+0x1a/0x170 [ 103.973995][ T6401] ? __pfx_n_tty_open+0x10/0x10 [ 103.974026][ T6401] n_tty_open+0x1a/0x170 [ 103.974057][ T6401] ? __pfx_n_tty_open+0x10/0x10 [ 103.974088][ T6401] tty_ldisc_open+0x9c/0x120 [ 103.974114][ T6401] tty_ldisc_setup+0x40/0x100 [ 103.974142][ T6401] tty_init_dev.part.0+0x1e7/0x660 [ 103.974175][ T6401] tty_open+0xac1/0xf80 [ 103.974205][ T6401] ? chrdev_open+0x10e/0x6a0 [ 103.974245][ T6401] ? __pfx_tty_open+0x10/0x10 [ 103.974272][ T6401] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 103.974297][ T6401] ? lock_acquire+0x2f/0xb0 [ 103.974324][ T6401] ? chrdev_open+0x80/0x6a0 [ 103.974362][ T6401] ? __pfx_tty_open+0x10/0x10 [ 103.974392][ T6401] chrdev_open+0x237/0x6a0 [ 103.974426][ T6401] ? __pfx_apparmor_file_open+0x10/0x10 [ 103.974457][ T6401] ? __pfx_chrdev_open+0x10/0x10 [ 103.974495][ T6401] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 103.974540][ T6401] do_dentry_open+0x735/0x1c40 [ 103.974572][ T6401] ? __pfx_chrdev_open+0x10/0x10 [ 103.974606][ T6401] ? inode_permission+0xdd/0x5f0 [ 103.974633][ T6401] vfs_open+0x82/0x3f0 [ 103.974654][ T6401] ? may_open+0x1f2/0x400 [ 103.974683][ T6401] path_openat+0x1e88/0x2d80 [ 103.974731][ T6401] ? __pfx_path_openat+0x10/0x10 [ 103.974764][ T6401] ? __pfx___lock_acquire+0x10/0x10 [ 103.974796][ T6401] ? lock_acquire.part.0+0x11b/0x380 [ 103.974828][ T6401] ? find_held_lock+0x2d/0x110 [ 103.974859][ T6401] do_filp_open+0x20c/0x470 [ 103.974894][ T6401] ? __pfx_do_filp_open+0x10/0x10 [ 103.974925][ T6401] ? find_held_lock+0x2d/0x110 [ 103.974978][ T6401] ? alloc_fd+0x41f/0x760 [ 103.975022][ T6401] do_sys_openat2+0x17a/0x1e0 [ 103.975048][ T6401] ? __pfx_do_sys_openat2+0x10/0x10 [ 103.975088][ T6401] __x64_sys_openat+0x175/0x210 [ 103.975115][ T6401] ? __pfx___x64_sys_openat+0x10/0x10 [ 103.975157][ T6401] do_syscall_64+0xcd/0x250 [ 103.975191][ T6401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.975223][ T6401] RIP: 0033:0x7fb5a1d8cde9 [ 103.975243][ T6401] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.975266][ T6401] RSP: 002b:00007fb5a2c7a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 103.975289][ T6401] RAX: ffffffffffffffda RBX: 00007fb5a1fa5fa0 RCX: 00007fb5a1d8cde9 [ 103.975305][ T6401] RDX: 0000000000000001 RSI: 0000400000000040 RDI: ffffffffffffff9c [ 103.975321][ T6401] RBP: 00007fb5a1e0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 103.975335][ T6401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 103.975349][ T6401] R13: 0000000000000000 R14: 00007fb5a1fa5fa0 R15: 00007ffc2a0eb9e8 [ 103.975382][ T6401] [ 103.975396][ T6401] warn_alloc: 1 callbacks suppressed [ 103.975409][ T6401] syz.1.138: vmalloc error: size 12288, failed to allocated page array size 24, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null) [ 104.006497][ T6394] netlink: zone id is out of range [ 104.024874][ T6401] ,cpuset= [ 104.075138][ T6394] netlink: zone id is out of range [ 104.146967][ T6401] / [ 104.361563][ T6394] netlink: zone id is out of range [ 104.443369][ T6401] ,mems_allowed=0-1 [ 104.450986][ T6401] CPU: 0 UID: 0 PID: 6401 Comm: syz.1.138 Not tainted 6.14.0-rc3-syzkaller-00079-g87a132e73910 #0 [ 104.451014][ T6401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 104.451026][ T6401] Call Trace: [ 104.451032][ T6401] [ 104.451041][ T6401] dump_stack_lvl+0x16c/0x1f0 [ 104.451076][ T6401] warn_alloc+0x24d/0x3a0 [ 104.451111][ T6401] ? __pfx_warn_alloc+0x10/0x10 [ 104.451140][ T6401] ? dump_stack_lvl+0x185/0x1f0 [ 104.451163][ T6401] ? lockdep_hardirqs_on+0x7c/0x110 [ 104.451197][ T6401] ? rcu_is_watching+0x12/0xc0 [ 104.451231][ T6401] ? trace_kmalloc+0x2d/0xd0 [ 104.451255][ T6401] ? __kmalloc_node_noprof+0x23d/0x510 [ 104.451295][ T6401] __vmalloc_node_range_noprof+0x1102/0x1530 [ 104.451339][ T6401] ? n_tty_open+0x1a/0x170 [ 104.451372][ T6401] ? __ldsem_down_write_nested+0x10f/0x8d0 [ 104.451403][ T6401] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 104.451445][ T6401] ? n_tty_open+0x1a/0x170 [ 104.451477][ T6401] vzalloc_noprof+0x6b/0x90 [ 104.451506][ T6401] ? n_tty_open+0x1a/0x170 [ 104.451535][ T6401] ? __pfx_n_tty_open+0x10/0x10 [ 104.451563][ T6401] n_tty_open+0x1a/0x170 [ 104.451592][ T6401] ? __pfx_n_tty_open+0x10/0x10 [ 104.451619][ T6401] tty_ldisc_open+0x9c/0x120 [ 104.451644][ T6401] tty_ldisc_setup+0x40/0x100 [ 104.451670][ T6401] tty_init_dev.part.0+0x1e7/0x660 [ 104.451701][ T6401] tty_open+0xac1/0xf80 [ 104.451729][ T6401] ? chrdev_open+0x10e/0x6a0 [ 104.451767][ T6401] ? __pfx_tty_open+0x10/0x10 [ 104.451791][ T6401] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 104.451812][ T6401] ? lock_acquire+0x2f/0xb0 [ 104.451837][ T6401] ? chrdev_open+0x80/0x6a0 [ 104.451870][ T6401] ? __pfx_tty_open+0x10/0x10 [ 104.451896][ T6401] chrdev_open+0x237/0x6a0 [ 104.451925][ T6401] ? __pfx_apparmor_file_open+0x10/0x10 [ 104.451951][ T6401] ? __pfx_chrdev_open+0x10/0x10 [ 104.451990][ T6401] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 104.452025][ T6401] do_dentry_open+0x735/0x1c40 [ 104.452056][ T6401] ? __pfx_chrdev_open+0x10/0x10 [ 104.452087][ T6401] ? inode_permission+0xdd/0x5f0 [ 104.452113][ T6401] vfs_open+0x82/0x3f0 [ 104.452133][ T6401] ? may_open+0x1f2/0x400 [ 104.452159][ T6401] path_openat+0x1e88/0x2d80 [ 104.452203][ T6401] ? __pfx_path_openat+0x10/0x10 [ 104.452239][ T6401] ? __pfx___lock_acquire+0x10/0x10 [ 104.452264][ T6401] ? lock_acquire.part.0+0x11b/0x380 [ 104.452292][ T6401] ? find_held_lock+0x2d/0x110 [ 104.452319][ T6401] do_filp_open+0x20c/0x470 [ 104.452348][ T6401] ? __pfx_do_filp_open+0x10/0x10 [ 104.452377][ T6401] ? find_held_lock+0x2d/0x110 [ 104.452425][ T6401] ? alloc_fd+0x41f/0x760 [ 104.452464][ T6401] do_sys_openat2+0x17a/0x1e0 [ 104.452486][ T6401] ? __pfx_do_sys_openat2+0x10/0x10 [ 104.452520][ T6401] __x64_sys_openat+0x175/0x210 [ 104.452545][ T6401] ? __pfx___x64_sys_openat+0x10/0x10 [ 104.452618][ T6401] do_syscall_64+0xcd/0x250 [ 104.452650][ T6401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.452681][ T6401] RIP: 0033:0x7fb5a1d8cde9 [ 104.452699][ T6401] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.452717][ T6401] RSP: 002b:00007fb5a2c7a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 104.452736][ T6401] RAX: ffffffffffffffda RBX: 00007fb5a1fa5fa0 RCX: 00007fb5a1d8cde9 [ 104.452751][ T6401] RDX: 0000000000000001 RSI: 0000400000000040 RDI: ffffffffffffff9c [ 104.452765][ T6401] RBP: 00007fb5a1e0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 104.452778][ T6401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 104.452790][ T6401] R13: 0000000000000000 R14: 00007fb5a1fa5fa0 R15: 00007ffc2a0eb9e8 [ 104.452822][ T6401] [ 104.452902][ T6401] Mem-Info: [ 104.828308][ T6401] active_anon:9788 inactive_anon:0 isolated_anon:0 [ 104.828308][ T6401] active_file:16088 inactive_file:38306 isolated_file:0 [ 104.828308][ T6401] unevictable:768 dirty:261 writeback:0 [ 104.828308][ T6401] slab_reclaimable:9837 slab_unreclaimable:94814 [ 104.828308][ T6401] mapped:26035 shmem:5671 pagetables:854 [ 104.828308][ T6401] sec_pagetables:0 bounce:0 [ 104.828308][ T6401] kernel_misc_reclaimable:0 [ 104.828308][ T6401] free:1341944 free_pcp:423 free_cma:0 [ 104.963220][ T6401] Node 0 active_anon:43452kB inactive_anon:0kB active_file:64352kB inactive_file:153148kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:105840kB dirty:1040kB writeback:0kB shmem:29548kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10512kB pagetables:3316kB sec_pagetables:0kB all_unreclaimable? no [ 105.203200][ T6401] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 105.345570][ T6401] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 105.374389][ T6427] FAULT_INJECTION: forcing a failure. [ 105.374389][ T6427] name failslab, interval 1, probability 0, space 0, times 0 [ 105.417273][ T6427] CPU: 1 UID: 0 PID: 6427 Comm: syz.2.145 Not tainted 6.14.0-rc3-syzkaller-00079-g87a132e73910 #0 [ 105.417307][ T6427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 105.417320][ T6427] Call Trace: [ 105.417327][ T6427] [ 105.417336][ T6427] dump_stack_lvl+0x16c/0x1f0 [ 105.417370][ T6427] should_fail_ex+0x50a/0x650 [ 105.417404][ T6427] ? fs_reclaim_acquire+0xae/0x150 [ 105.417442][ T6427] should_failslab+0xc2/0x120 [ 105.417466][ T6427] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 105.417500][ T6427] ? __pmd_alloc+0xc3/0x870 [ 105.417535][ T6427] __pmd_alloc+0xc3/0x870 [ 105.417571][ T6427] move_page_tables+0x2a11/0x3bd0 [ 105.417611][ T6427] ? __pfx_move_page_tables+0x10/0x10 [ 105.417635][ T6427] ? move_vma+0x5c7/0x1c60 [ 105.417672][ T6427] ? up_write+0x1b2/0x520 [ 105.417709][ T6427] move_vma+0x67b/0x1c60 [ 105.417739][ T6427] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10 [ 105.417774][ T6427] ? __pfx_move_vma+0x10/0x10 [ 105.417801][ T6427] ? __pfx_mtree_load+0x10/0x10 [ 105.417832][ T6427] ? mm_get_unmapped_area_vmflags+0x97/0xe0 [ 105.417863][ T6427] ? cap_mmap_addr+0x4b/0x120 [ 105.417886][ T6427] ? bpf_lsm_mmap_addr+0x9/0x10 [ 105.417919][ T6427] ? security_mmap_addr+0x6c/0x1e0 [ 105.417952][ T6427] __do_sys_mremap+0x1007/0x1630 [ 105.417984][ T6427] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 105.418014][ T6427] ? __pfx___do_sys_mremap+0x10/0x10 [ 105.418039][ T6427] ? __fget_files+0x206/0x3a0 [ 105.418077][ T6427] ? fput+0x67/0x440 [ 105.418101][ T6427] ? ksys_write+0x1ba/0x250 [ 105.418130][ T6427] ? __pfx_ksys_write+0x10/0x10 [ 105.418171][ T6427] do_syscall_64+0xcd/0x250 [ 105.418202][ T6427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.418233][ T6427] RIP: 0033:0x7f5930b8cde9 [ 105.418251][ T6427] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 105.418272][ T6427] RSP: 002b:00007f5931a2a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 105.418294][ T6427] RAX: ffffffffffffffda RBX: 00007f5930da6080 RCX: 00007f5930b8cde9 [ 105.418310][ T6427] RDX: 0000000000013fd4 RSI: 00000000000000b8 RDI: 0000000000004000 [ 105.418323][ T6427] RBP: 00007f5931a2a090 R08: 00000000fffff000 R09: 0000000000000000 [ 105.418337][ T6427] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 105.418351][ T6427] R13: 0000000000000001 R14: 00007f5930da6080 R15: 00007ffd6bb4a068 [ 105.418382][ T6427] [ 105.674317][ T6401] lowmem_reserve[]: 0 2487 2487 0 0 [ 105.679649][ T6401] Node 0 DMA32 free:1402120kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB active_anon:80860kB inactive_anon:0kB active_file:64608kB inactive_file:153048kB unevictable:1536kB writepending:1100kB present:3129332kB managed:2547544kB mlocked:0kB bounce:0kB free_pcp:5040kB local_pcp:1364kB free_cma:0kB [ 105.773166][ T6401] lowmem_reserve[]: 0 0 0 0 0 [ 105.777973][ T6401] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:100kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 105.883952][ T6401] lowmem_reserve[]: 0 0 0 0 0 [ 105.903525][ T6401] Node 1 Normal free:3906304kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 105.966145][ T6401] lowmem_reserve[]: 0 0 0 0 0 [ 105.979652][ T6430] ubi: mtd0 is already attached to ubi0 [ 105.990831][ T6401] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 106.048022][ T6401] Node 0 DMA32: 436*4kB (U) 480*8kB (UME) 283*16kB (UME) 12*32kB (UME) 11*64kB (UE) 102*128kB (UME) 78*256kB (UME) 41*512kB (M) 22*1024kB (UM) 6*2048kB (M) 317*4096kB (M) = 1398464kB [ 106.102934][ T6401] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 106.123380][ T6401] Node 1 Normal: 174*4kB (UME) 53*8kB (UME) 32*16kB (UME) 195*32kB (UME) 91*64kB (UME) 23*128kB (UME) 16*256kB (UM) 11*512kB (UME) 7*1024kB (UME) 3*2048kB (UE) 944*4096kB (UM) = 3906304kB [ 106.153260][ T6401] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 106.162905][ T6401] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 106.217913][ T6401] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 106.247454][ T6401] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 106.304533][ T6401] 71679 total pagecache pages [ 106.309282][ T6401] 0 pages in swap cache [ 106.345020][ T6401] Free swap = 124792kB [ 106.376826][ T6401] Total swap = 124996kB [ 106.398199][ T6401] 2097051 pages RAM [ 106.432843][ T6401] 0 pages HighMem/MovableOnly [ 106.462793][ T6401] 428507 pages reserved [ 106.483224][ T6401] 0 pages cma reserved [ 106.506794][ T6401] tty tty17: ldisc open failed (-12), clearing slot 16 [ 107.260584][ T6456] can: request_module (can-proto-0) failed. [ 107.356465][ T6462] can: request_module (can-proto-5) failed. [ 108.260384][ T6495] FAULT_INJECTION: forcing a failure. [ 108.260384][ T6495] name failslab, interval 1, probability 0, space 0, times 0 [ 108.291395][ T6495] CPU: 1 UID: 0 PID: 6495 Comm: syz.0.160 Not tainted 6.14.0-rc3-syzkaller-00079-g87a132e73910 #0 [ 108.291432][ T6495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 108.291446][ T6495] Call Trace: [ 108.291454][ T6495] [ 108.291464][ T6495] dump_stack_lvl+0x16c/0x1f0 [ 108.291500][ T6495] should_fail_ex+0x50a/0x650 [ 108.291537][ T6495] ? fs_reclaim_acquire+0xae/0x150 [ 108.291568][ T6495] should_failslab+0xc2/0x120 [ 108.291592][ T6495] __kmalloc_node_noprof+0xd1/0x510 [ 108.291627][ T6495] ? __vmalloc_node_range_noprof+0x3d8/0x1530 [ 108.291665][ T6495] __vmalloc_node_range_noprof+0x3d8/0x1530 [ 108.291708][ T6495] ? n_tty_open+0x1a/0x170 [ 108.291743][ T6495] ? __ldsem_down_write_nested+0x10f/0x8d0 [ 108.291778][ T6495] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 108.291821][ T6495] ? n_tty_open+0x1a/0x170 [ 108.291852][ T6495] vzalloc_noprof+0x6b/0x90 [ 108.291882][ T6495] ? n_tty_open+0x1a/0x170 [ 108.291911][ T6495] ? __pfx_n_tty_open+0x10/0x10 [ 108.291941][ T6495] n_tty_open+0x1a/0x170 [ 108.291971][ T6495] ? __pfx_n_tty_open+0x10/0x10 [ 108.292001][ T6495] tty_ldisc_open+0x9c/0x120 [ 108.292026][ T6495] tty_ldisc_setup+0x40/0x100 [ 108.292052][ T6495] tty_init_dev.part.0+0x1e7/0x660 [ 108.292085][ T6495] tty_open+0xac1/0xf80 [ 108.292121][ T6495] ? chrdev_open+0x10e/0x6a0 [ 108.292162][ T6495] ? __pfx_tty_open+0x10/0x10 [ 108.292190][ T6495] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 108.292214][ T6495] ? lock_acquire+0x2f/0xb0 [ 108.292243][ T6495] ? chrdev_open+0x80/0x6a0 [ 108.292280][ T6495] ? __pfx_tty_open+0x10/0x10 [ 108.292308][ T6495] chrdev_open+0x237/0x6a0 [ 108.292340][ T6495] ? __pfx_apparmor_file_open+0x10/0x10 [ 108.292369][ T6495] ? __pfx_chrdev_open+0x10/0x10 [ 108.292406][ T6495] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 108.292443][ T6495] do_dentry_open+0x735/0x1c40 [ 108.292475][ T6495] ? __pfx_chrdev_open+0x10/0x10 [ 108.292510][ T6495] ? inode_permission+0xdd/0x5f0 [ 108.292538][ T6495] vfs_open+0x82/0x3f0 [ 108.292559][ T6495] ? may_open+0x1f2/0x400 [ 108.292588][ T6495] path_openat+0x1e88/0x2d80 [ 108.292633][ T6495] ? __pfx_path_openat+0x10/0x10 [ 108.292665][ T6495] ? __pfx___lock_acquire+0x10/0x10 [ 108.292695][ T6495] ? lock_acquire.part.0+0x11b/0x380 [ 108.292725][ T6495] ? find_held_lock+0x2d/0x110 [ 108.292754][ T6495] do_filp_open+0x20c/0x470 [ 108.292787][ T6495] ? __pfx_do_filp_open+0x10/0x10 [ 108.292816][ T6495] ? find_held_lock+0x2d/0x110 [ 108.292862][ T6495] ? alloc_fd+0x41f/0x760 [ 108.292903][ T6495] do_sys_openat2+0x17a/0x1e0 [ 108.292927][ T6495] ? __pfx_do_sys_openat2+0x10/0x10 [ 108.292966][ T6495] __x64_sys_openat+0x175/0x210 [ 108.292991][ T6495] ? __pfx___x64_sys_openat+0x10/0x10 [ 108.293035][ T6495] do_syscall_64+0xcd/0x250 [ 108.293068][ T6495] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.293104][ T6495] RIP: 0033:0x7f690798cde9 [ 108.293123][ T6495] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 108.293146][ T6495] RSP: 002b:00007f690887c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 108.293168][ T6495] RAX: ffffffffffffffda RBX: 00007f6907ba5fa0 RCX: 00007f690798cde9 [ 108.293184][ T6495] RDX: 0000000000000001 RSI: 0000400000000040 RDI: ffffffffffffff9c [ 108.293198][ T6495] RBP: 00007f6907a0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 108.293213][ T6495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 108.293227][ T6495] R13: 0000000000000000 R14: 00007f6907ba5fa0 R15: 00007ffcf2ed5d28 [ 108.293262][ T6495] [ 108.465280][ T6495] tty tty17: ldisc open failed (-12), clearing slot 16 [ 109.637321][ T6532] FAULT_INJECTION: forcing a failure. [ 109.637321][ T6532] name failslab, interval 1, probability 0, space 0, times 0 [ 109.657581][ T6532] CPU: 1 UID: 0 PID: 6532 Comm: syz.0.172 Not tainted 6.14.0-rc3-syzkaller-00079-g87a132e73910 #0 [ 109.657614][ T6532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 109.657627][ T6532] Call Trace: [ 109.657634][ T6532] [ 109.657644][ T6532] dump_stack_lvl+0x16c/0x1f0 [ 109.657678][ T6532] should_fail_ex+0x50a/0x650 [ 109.657718][ T6532] ? fs_reclaim_acquire+0xae/0x150 [ 109.657749][ T6532] should_failslab+0xc2/0x120 [ 109.657772][ T6532] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 109.657807][ T6532] ? __alloc_skb+0x2b1/0x380 [ 109.657843][ T6532] __alloc_skb+0x2b1/0x380 [ 109.657871][ T6532] ? __pfx___alloc_skb+0x10/0x10 [ 109.657901][ T6532] ? __nla_validate_parse+0x601/0x2880 [ 109.657938][ T6532] ovs_dp_cmd_new+0x168/0xe50 [ 109.657967][ T6532] ? rcu_is_watching+0x12/0xc0 [ 109.657993][ T6532] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 109.658024][ T6532] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 109.658059][ T6532] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 109.658098][ T6532] genl_family_rcv_msg_doit+0x202/0x2f0 [ 109.658134][ T6532] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 109.658167][ T6532] ? trace_cap_capable+0x1a2/0x210 [ 109.658200][ T6532] ? bpf_lsm_capable+0x9/0x10 [ 109.658224][ T6532] ? security_capable+0x7e/0x260 [ 109.658260][ T6532] ? ns_capable+0xd7/0x110 [ 109.658295][ T6532] genl_rcv_msg+0x565/0x800 [ 109.658332][ T6532] ? __pfx_genl_rcv_msg+0x10/0x10 [ 109.658366][ T6532] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 109.658401][ T6532] netlink_rcv_skb+0x16b/0x440 [ 109.658430][ T6532] ? __pfx_genl_rcv_msg+0x10/0x10 [ 109.658464][ T6532] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 109.658507][ T6532] ? down_read+0xc9/0x330 [ 109.658540][ T6532] ? __pfx_down_read+0x10/0x10 [ 109.658570][ T6532] ? netlink_deliver_tap+0x1ae/0xd30 [ 109.658603][ T6532] genl_rcv+0x28/0x40 [ 109.658632][ T6532] netlink_unicast+0x53c/0x7f0 [ 109.658665][ T6532] ? __pfx_netlink_unicast+0x10/0x10 [ 109.658696][ T6532] ? __phys_addr_symbol+0x30/0x80 [ 109.658726][ T6532] ? __check_object_size+0x488/0x710 [ 109.658754][ T6532] netlink_sendmsg+0x8b8/0xd70 [ 109.658789][ T6532] ? __pfx_netlink_sendmsg+0x10/0x10 [ 109.658832][ T6532] ____sys_sendmsg+0xaaf/0xc90 [ 109.658858][ T6532] ? copy_msghdr_from_user+0x10b/0x160 [ 109.658889][ T6532] ? __pfx_____sys_sendmsg+0x10/0x10 [ 109.658929][ T6532] ___sys_sendmsg+0x135/0x1e0 [ 109.658964][ T6532] ? __pfx____sys_sendmsg+0x10/0x10 [ 109.659009][ T6532] ? __pfx_lock_release+0x10/0x10 [ 109.659038][ T6532] ? trace_lock_acquire+0x14e/0x1f0 [ 109.659076][ T6532] ? __fget_files+0x206/0x3a0 [ 109.659116][ T6532] __sys_sendmsg+0x16e/0x220 [ 109.659148][ T6532] ? __pfx___sys_sendmsg+0x10/0x10 [ 109.659202][ T6532] do_syscall_64+0xcd/0x250 [ 109.659233][ T6532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.659264][ T6532] RIP: 0033:0x7f690798cde9 [ 109.659283][ T6532] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.659304][ T6532] RSP: 002b:00007f690887c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 109.659325][ T6532] RAX: ffffffffffffffda RBX: 00007f6907ba5fa0 RCX: 00007f690798cde9 [ 109.659339][ T6532] RDX: 0000000000000080 RSI: 0000400000000140 RDI: 0000000000000003 [ 109.659351][ T6532] RBP: 00007f690887c090 R08: 0000000000000000 R09: 0000000000000000 [ 109.659364][ T6532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 109.659375][ T6532] R13: 0000000000000000 R14: 00007f6907ba5fa0 R15: 00007ffcf2ed5d28 [ 109.659404][ T6532] [ 110.369691][ T6542] FAULT_INJECTION: forcing a failure. [ 110.369691][ T6542] name failslab, interval 1, probability 0, space 0, times 0 [ 110.383000][ T6542] CPU: 1 UID: 0 PID: 6542 Comm: syz.3.175 Not tainted 6.14.0-rc3-syzkaller-00079-g87a132e73910 #0 [ 110.383033][ T6542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 110.383047][ T6542] Call Trace: [ 110.383053][ T6542] [ 110.383062][ T6542] dump_stack_lvl+0x16c/0x1f0 [ 110.383096][ T6542] should_fail_ex+0x50a/0x650 [ 110.383132][ T6542] ? fs_reclaim_acquire+0xae/0x150 [ 110.383164][ T6542] should_failslab+0xc2/0x120 [ 110.383188][ T6542] __kmalloc_node_noprof+0xd1/0x510 [ 110.383224][ T6542] ? __vmalloc_node_range_noprof+0x3d8/0x1530 [ 110.383262][ T6542] __vmalloc_node_range_noprof+0x3d8/0x1530 [ 110.383306][ T6542] ? n_tty_open+0x1a/0x170 [ 110.383344][ T6542] ? __ldsem_down_write_nested+0x10f/0x8d0 [ 110.383380][ T6542] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 110.383421][ T6542] ? n_tty_open+0x1a/0x170 [ 110.383452][ T6542] vzalloc_noprof+0x6b/0x90 [ 110.383481][ T6542] ? n_tty_open+0x1a/0x170 [ 110.383511][ T6542] ? __pfx_n_tty_open+0x10/0x10 [ 110.383536][ T6542] n_tty_open+0x1a/0x170 [ 110.383566][ T6542] ? __pfx_n_tty_open+0x10/0x10 [ 110.383595][ T6542] tty_ldisc_open+0x9c/0x120 [ 110.383618][ T6542] tty_ldisc_setup+0x40/0x100 [ 110.383642][ T6542] tty_init_dev.part.0+0x1e7/0x660 [ 110.383671][ T6542] tty_open+0xac1/0xf80 [ 110.383698][ T6542] ? chrdev_open+0x10e/0x6a0 [ 110.383735][ T6542] ? __pfx_tty_open+0x10/0x10 [ 110.383759][ T6542] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 110.383779][ T6542] ? lock_acquire+0x2f/0xb0 [ 110.383807][ T6542] ? chrdev_open+0x80/0x6a0 [ 110.383846][ T6542] ? __pfx_tty_open+0x10/0x10 [ 110.383874][ T6542] chrdev_open+0x237/0x6a0 [ 110.383904][ T6542] ? __pfx_apparmor_file_open+0x10/0x10 [ 110.383945][ T6542] ? __pfx_chrdev_open+0x10/0x10 [ 110.383984][ T6542] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 110.384022][ T6542] do_dentry_open+0x735/0x1c40 [ 110.384050][ T6542] ? __pfx_chrdev_open+0x10/0x10 [ 110.384085][ T6542] ? inode_permission+0xdd/0x5f0 [ 110.384111][ T6542] vfs_open+0x82/0x3f0 [ 110.384132][ T6542] ? may_open+0x1f2/0x400 [ 110.384158][ T6542] path_openat+0x1e88/0x2d80 [ 110.384202][ T6542] ? __pfx_path_openat+0x10/0x10 [ 110.384233][ T6542] ? __pfx___lock_acquire+0x10/0x10 [ 110.384260][ T6542] ? lock_acquire.part.0+0x11b/0x380 [ 110.384289][ T6542] ? find_held_lock+0x2d/0x110 [ 110.384318][ T6542] do_filp_open+0x20c/0x470 [ 110.384352][ T6542] ? __pfx_do_filp_open+0x10/0x10 [ 110.384383][ T6542] ? find_held_lock+0x2d/0x110 [ 110.384434][ T6542] ? alloc_fd+0x41f/0x760 [ 110.384472][ T6542] do_sys_openat2+0x17a/0x1e0 [ 110.384495][ T6542] ? __pfx_do_sys_openat2+0x10/0x10 [ 110.384533][ T6542] __x64_sys_openat+0x175/0x210 [ 110.384558][ T6542] ? __pfx___x64_sys_openat+0x10/0x10 [ 110.384595][ T6542] do_syscall_64+0xcd/0x250 [ 110.384624][ T6542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.384655][ T6542] RIP: 0033:0x7fb8af18cde9 [ 110.384671][ T6542] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.384691][ T6542] RSP: 002b:00007fb8aff37038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 110.384711][ T6542] RAX: ffffffffffffffda RBX: 00007fb8af3a5fa0 RCX: 00007fb8af18cde9 [ 110.384727][ T6542] RDX: 0000000000000001 RSI: 0000400000000040 RDI: ffffffffffffff9c [ 110.384742][ T6542] RBP: 00007fb8af20e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 110.384755][ T6542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 110.384768][ T6542] R13: 0000000000000000 R14: 00007fb8af3a5fa0 R15: 00007ffdf1aa4858 [ 110.384799][ T6542] [ 110.771084][ T6542] tty tty17: ldisc open failed (-12), clearing slot 16 [ 111.170158][ T6559] size and base must be multiples of 4 kiB [ 111.208639][ T6559] CPU: 1 UID: 0 PID: 6559 Comm: syz.2.179 Not tainted 6.14.0-rc3-syzkaller-00079-g87a132e73910 #0 [ 111.208675][ T6559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 111.208690][ T6559] Call Trace: [ 111.208701][ T6559] [ 111.208710][ T6559] dump_stack_lvl+0x16c/0x1f0 [ 111.208747][ T6559] mtrr_add+0xdf/0x110 [ 111.208779][ T6559] mtrr_ioctl+0x7f1/0xcf0 [ 111.208810][ T6559] ? __pfx_mtrr_ioctl+0x10/0x10 [ 111.208843][ T6559] ? __pfx_lock_release+0x10/0x10 [ 111.208888][ T6559] ? __fget_files+0x206/0x3a0 [ 111.208923][ T6559] ? __pfx_mtrr_ioctl+0x10/0x10 [ 111.208953][ T6559] proc_reg_unlocked_ioctl+0x226/0x320 [ 111.208988][ T6559] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 111.209025][ T6559] __x64_sys_ioctl+0x190/0x200 [ 111.209057][ T6559] do_syscall_64+0xcd/0x250 [ 111.209089][ T6559] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.209120][ T6559] RIP: 0033:0x7f5930b8cde9 [ 111.209140][ T6559] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.209162][ T6559] RSP: 002b:00007f5931a09038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 111.209186][ T6559] RAX: ffffffffffffffda RBX: 00007f5930da6160 RCX: 00007f5930b8cde9 [ 111.209203][ T6559] RDX: 0000000000000006 RSI: 00000000400c4d01 RDI: 0000000000000006 [ 111.209217][ T6559] RBP: 00007f5930c0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 111.209232][ T6559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 111.209251][ T6559] R13: 0000000000000000 R14: 00007f5930da6160 R15: 00007ffd6bb4a068 [ 111.209282][ T6559] [ 112.225143][ T6581] netlink: 28 bytes leftover after parsing attributes in process `syz.2.186'. [ 112.567021][ T6581] team0: Port device team_slave_1 removed [ 113.777476][ T6612] ptrace attach of "./syz-executor exec"[5829] was attempted by "./syz-executor exec"[6612] [ 114.381746][ T6624] size and base must be multiples of 4 kiB [ 114.401292][ T6624] CPU: 1 UID: 0 PID: 6624 Comm: syz.1.195 Not tainted 6.14.0-rc3-syzkaller-00079-g87a132e73910 #0 [ 114.401330][ T6624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 114.401345][ T6624] Call Trace: [ 114.401351][ T6624] [ 114.401362][ T6624] dump_stack_lvl+0x16c/0x1f0 [ 114.401399][ T6624] mtrr_add+0xdf/0x110 [ 114.401430][ T6624] mtrr_ioctl+0x7f1/0xcf0 [ 114.401462][ T6624] ? __pfx_mtrr_ioctl+0x10/0x10 [ 114.401496][ T6624] ? __pfx_lock_release+0x10/0x10 [ 114.401540][ T6624] ? __fget_files+0x206/0x3a0 [ 114.401574][ T6624] ? __pfx_mtrr_ioctl+0x10/0x10 [ 114.401605][ T6624] proc_reg_unlocked_ioctl+0x226/0x320 [ 114.401639][ T6624] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 114.401677][ T6624] __x64_sys_ioctl+0x190/0x200 [ 114.401708][ T6624] do_syscall_64+0xcd/0x250 [ 114.401740][ T6624] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.401772][ T6624] RIP: 0033:0x7fb5a1d8cde9 [ 114.401793][ T6624] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.401815][ T6624] RSP: 002b:00007fb5a2c38038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 114.401838][ T6624] RAX: ffffffffffffffda RBX: 00007fb5a1fa6160 RCX: 00007fb5a1d8cde9 [ 114.401853][ T6624] RDX: 0000000000000006 RSI: 00000000400c4d01 RDI: 0000000000000006 [ 114.401867][ T6624] RBP: 00007fb5a1e0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 114.401882][ T6624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 114.401896][ T6624] R13: 0000000000000000 R14: 00007fb5a1fa6160 R15: 00007ffc2a0eb9e8 [ 114.401927][ T6624] [ 115.686880][ T9] Process accounting resumed [ 116.289651][ T6668] FAULT_INJECTION: forcing a failure. [ 116.289651][ T6668] name failslab, interval 1, probability 0, space 0, times 0 [ 116.411017][ T6668] CPU: 0 UID: 0 PID: 6668 Comm: syz.3.210 Not tainted 6.14.0-rc3-syzkaller-00079-g87a132e73910 #0 [ 116.411050][ T6668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 116.411063][ T6668] Call Trace: [ 116.411071][ T6668] [ 116.411080][ T6668] dump_stack_lvl+0x16c/0x1f0 [ 116.411114][ T6668] should_fail_ex+0x50a/0x650 [ 116.411149][ T6668] ? fs_reclaim_acquire+0xae/0x150 [ 116.411182][ T6668] should_failslab+0xc2/0x120 [ 116.411204][ T6668] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 116.411238][ T6668] ? __alloc_skb+0x2b1/0x380 [ 116.411274][ T6668] __alloc_skb+0x2b1/0x380 [ 116.411302][ T6668] ? __pfx___alloc_skb+0x10/0x10 [ 116.411332][ T6668] ? __nla_validate_parse+0x601/0x2880 [ 116.411369][ T6668] __netdev_alloc_skb+0x76/0x920 [ 116.411405][ T6668] ovs_packet_cmd_execute+0x21d/0x1080 [ 116.411436][ T6668] ? __pfx_ovs_packet_cmd_execute+0x10/0x10 [ 116.411465][ T6668] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 116.411501][ T6668] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 116.411542][ T6668] genl_family_rcv_msg_doit+0x202/0x2f0 [ 116.411578][ T6668] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 116.411610][ T6668] ? trace_cap_capable+0x1a2/0x210 [ 116.411643][ T6668] ? bpf_lsm_capable+0x9/0x10 [ 116.411667][ T6668] ? security_capable+0x7e/0x260 [ 116.411703][ T6668] ? ns_capable+0xd7/0x110 [ 116.411738][ T6668] genl_rcv_msg+0x565/0x800 [ 116.411773][ T6668] ? __pfx_genl_rcv_msg+0x10/0x10 [ 116.411807][ T6668] ? __pfx_ovs_packet_cmd_execute+0x10/0x10 [ 116.411845][ T6668] netlink_rcv_skb+0x16b/0x440 [ 116.411874][ T6668] ? __pfx_genl_rcv_msg+0x10/0x10 [ 116.411908][ T6668] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 116.411952][ T6668] ? down_read+0xc9/0x330 [ 116.411980][ T6668] ? __pfx_down_read+0x10/0x10 [ 116.412018][ T6668] ? netlink_deliver_tap+0x1ae/0xd30 [ 116.412057][ T6668] genl_rcv+0x28/0x40 [ 116.412085][ T6668] netlink_unicast+0x53c/0x7f0 [ 116.412118][ T6668] ? __pfx_netlink_unicast+0x10/0x10 [ 116.412149][ T6668] ? __phys_addr_symbol+0x30/0x80 [ 116.412172][ T6668] ? __check_object_size+0x488/0x710 [ 116.412200][ T6668] netlink_sendmsg+0x8b8/0xd70 [ 116.412235][ T6668] ? __pfx_netlink_sendmsg+0x10/0x10 [ 116.412277][ T6668] ____sys_sendmsg+0xaaf/0xc90 [ 116.412302][ T6668] ? copy_msghdr_from_user+0x10b/0x160 [ 116.412333][ T6668] ? __pfx_____sys_sendmsg+0x10/0x10 [ 116.412375][ T6668] ___sys_sendmsg+0x135/0x1e0 [ 116.412409][ T6668] ? __pfx____sys_sendmsg+0x10/0x10 [ 116.412454][ T6668] ? __pfx_lock_release+0x10/0x10 [ 116.412485][ T6668] ? trace_lock_acquire+0x14e/0x1f0 [ 116.412523][ T6668] ? __fget_files+0x206/0x3a0 [ 116.412564][ T6668] __sys_sendmsg+0x16e/0x220 [ 116.412596][ T6668] ? __pfx___sys_sendmsg+0x10/0x10 [ 116.412650][ T6668] do_syscall_64+0xcd/0x250 [ 116.412680][ T6668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.412711][ T6668] RIP: 0033:0x7fb8af18cde9 [ 116.412730][ T6668] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.412750][ T6668] RSP: 002b:00007fb8aff37038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 116.412773][ T6668] RAX: ffffffffffffffda RBX: 00007fb8af3a5fa0 RCX: 00007fb8af18cde9 [ 116.412788][ T6668] RDX: 000000000000c800 RSI: 0000400000000000 RDI: 0000000000000003 [ 116.412802][ T6668] RBP: 00007fb8aff37090 R08: 0000000000000000 R09: 0000000000000000 [ 116.412815][ T6668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 116.412829][ T6668] R13: 0000000000000000 R14: 00007fb8af3a5fa0 R15: 00007ffdf1aa4858 [ 116.412861][ T6668] [ 116.877584][ T6675] size and base must be multiples of 4 kiB [ 116.884983][ T6675] CPU: 1 UID: 0 PID: 6675 Comm: syz.2.211 Not tainted 6.14.0-rc3-syzkaller-00079-g87a132e73910 #0 [ 116.885017][ T6675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 116.885031][ T6675] Call Trace: [ 116.885039][ T6675] [ 116.885048][ T6675] dump_stack_lvl+0x16c/0x1f0 [ 116.885084][ T6675] mtrr_add+0xdf/0x110 [ 116.885115][ T6675] mtrr_ioctl+0x7f1/0xcf0 [ 116.885148][ T6675] ? __pfx_mtrr_ioctl+0x10/0x10 [ 116.885183][ T6675] ? __pfx_lock_release+0x10/0x10 [ 116.885238][ T6675] ? __fget_files+0x206/0x3a0 [ 116.885274][ T6675] ? __pfx_mtrr_ioctl+0x10/0x10 [ 116.885306][ T6675] proc_reg_unlocked_ioctl+0x226/0x320 [ 116.885343][ T6675] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 116.885382][ T6675] __x64_sys_ioctl+0x190/0x200 [ 116.885413][ T6675] do_syscall_64+0xcd/0x250 [ 116.885445][ T6675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.885479][ T6675] RIP: 0033:0x7f5930b8cde9 [ 116.885498][ T6675] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.885523][ T6675] RSP: 002b:00007f5931a09038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 116.885546][ T6675] RAX: ffffffffffffffda RBX: 00007f5930da6160 RCX: 00007f5930b8cde9 [ 116.885563][ T6675] RDX: 0000000000000006 RSI: 00000000400c4d01 RDI: 0000000000000006 [ 116.885578][ T6675] RBP: 00007f5930c0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 116.885592][ T6675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 116.885606][ T6675] R13: 0000000000000000 R14: 00007f5930da6160 R15: 00007ffd6bb4a068 [ 116.885638][ T6675] [ 117.840387][ T6691] netlink: 1068 bytes leftover after parsing attributes in process `syz.3.216'. [ 117.855759][ T6691] net_ratelimit: 3 callbacks suppressed [ 117.855780][ T6691] openvswitch: netlink: Flow key attr not present in new flow. [ 118.724538][ T6721] size and base must be multiples of 4 kiB [ 118.730437][ T6721] CPU: 1 UID: 0 PID: 6721 Comm: syz.3.221 Not tainted 6.14.0-rc3-syzkaller-00079-g87a132e73910 #0 [ 118.730468][ T6721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 118.730481][ T6721] Call Trace: [ 118.730489][ T6721] [ 118.730499][ T6721] dump_stack_lvl+0x16c/0x1f0 [ 118.730534][ T6721] mtrr_add+0xdf/0x110 [ 118.730567][ T6721] mtrr_ioctl+0x7f1/0xcf0 [ 118.730598][ T6721] ? __pfx_mtrr_ioctl+0x10/0x10 [ 118.730633][ T6721] ? __pfx_lock_release+0x10/0x10 [ 118.730679][ T6721] ? __fget_files+0x206/0x3a0 [ 118.730714][ T6721] ? __pfx_mtrr_ioctl+0x10/0x10 [ 118.730744][ T6721] proc_reg_unlocked_ioctl+0x226/0x320 [ 118.730779][ T6721] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 118.730818][ T6721] __x64_sys_ioctl+0x190/0x200 [ 118.730850][ T6721] do_syscall_64+0xcd/0x250 [ 118.730882][ T6721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.730915][ T6721] RIP: 0033:0x7fb8af18cde9 [ 118.730936][ T6721] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 118.730958][ T6721] RSP: 002b:00007fb8acff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 118.730982][ T6721] RAX: ffffffffffffffda RBX: 00007fb8af3a6160 RCX: 00007fb8af18cde9 [ 118.730998][ T6721] RDX: 0000000000000006 RSI: 00000000400c4d01 RDI: 0000000000000006 [ 118.731013][ T6721] RBP: 00007fb8af20e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 118.731034][ T6721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 118.731049][ T6721] R13: 0000000000000000 R14: 00007fb8af3a6160 R15: 00007ffdf1aa4858 [ 118.731080][ T6721] [ 120.628795][ T6753] FAULT_INJECTION: forcing a failure. [ 120.628795][ T6753] name failslab, interval 1, probability 0, space 0, times 0 [ 120.743254][ T6753] CPU: 0 UID: 0 PID: 6753 Comm: syz.1.232 Not tainted 6.14.0-rc3-syzkaller-00079-g87a132e73910 #0 [ 120.743292][ T6753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 120.743312][ T6753] Call Trace: [ 120.743320][ T6753] [ 120.743331][ T6753] dump_stack_lvl+0x16c/0x1f0 [ 120.743370][ T6753] should_fail_ex+0x50a/0x650 [ 120.743409][ T6753] ? fs_reclaim_acquire+0xae/0x150 [ 120.743445][ T6753] should_failslab+0xc2/0x120 [ 120.743470][ T6753] __kmalloc_cache_node_noprof+0x6e/0x420 [ 120.743506][ T6753] ? __pfx___lock_acquire+0x10/0x10 [ 120.743535][ T6753] ? __get_vm_area_node+0x101/0x2f0 [ 120.743569][ T6753] __get_vm_area_node+0x101/0x2f0 [ 120.743604][ T6753] __vmalloc_node_range_noprof+0x26a/0x1530 [ 120.743654][ T6753] ? n_tty_open+0x1a/0x170 [ 120.743687][ T6753] ? rcu_is_watching+0x12/0xc0 [ 120.743714][ T6753] ? tty_ldisc_lock+0x65/0xb0 [ 120.743742][ T6753] ? n_tty_open+0x1a/0x170 [ 120.743777][ T6753] ? __ldsem_down_write_nested+0x10f/0x8d0 [ 120.743813][ T6753] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 120.743856][ T6753] ? n_tty_open+0x1a/0x170 [ 120.743890][ T6753] vzalloc_noprof+0x6b/0x90 [ 120.743920][ T6753] ? n_tty_open+0x1a/0x170 [ 120.743952][ T6753] ? __pfx_n_tty_open+0x10/0x10 [ 120.743984][ T6753] n_tty_open+0x1a/0x170 [ 120.744015][ T6753] ? __pfx_n_tty_open+0x10/0x10 [ 120.744047][ T6753] tty_ldisc_open+0x9c/0x120 [ 120.744074][ T6753] tty_ldisc_setup+0x40/0x100 [ 120.744101][ T6753] tty_init_dev.part.0+0x1e7/0x660 [ 120.744135][ T6753] tty_open+0xac1/0xf80 [ 120.744165][ T6753] ? chrdev_open+0x10e/0x6a0 [ 120.744205][ T6753] ? __pfx_tty_open+0x10/0x10 [ 120.744232][ T6753] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 120.744256][ T6753] ? lock_acquire+0x2f/0xb0 [ 120.744284][ T6753] ? chrdev_open+0x80/0x6a0 [ 120.744322][ T6753] ? __pfx_tty_open+0x10/0x10 [ 120.744352][ T6753] chrdev_open+0x237/0x6a0 [ 120.744385][ T6753] ? __pfx_apparmor_file_open+0x10/0x10 [ 120.744414][ T6753] ? __pfx_chrdev_open+0x10/0x10 [ 120.744452][ T6753] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 120.744490][ T6753] do_dentry_open+0x735/0x1c40 [ 120.744525][ T6753] ? __pfx_chrdev_open+0x10/0x10 [ 120.744562][ T6753] ? inode_permission+0xdd/0x5f0 [ 120.744592][ T6753] vfs_open+0x82/0x3f0 [ 120.744615][ T6753] ? may_open+0x1f2/0x400 [ 120.744653][ T6753] path_openat+0x1e88/0x2d80 [ 120.744704][ T6753] ? __pfx_path_openat+0x10/0x10 [ 120.744740][ T6753] ? __pfx___lock_acquire+0x10/0x10 [ 120.744771][ T6753] ? lock_acquire.part.0+0x11b/0x380 [ 120.744803][ T6753] ? find_held_lock+0x2d/0x110 [ 120.744834][ T6753] do_filp_open+0x20c/0x470 [ 120.744868][ T6753] ? __pfx_do_filp_open+0x10/0x10 [ 120.744898][ T6753] ? find_held_lock+0x2d/0x110 [ 120.744949][ T6753] ? alloc_fd+0x41f/0x760 [ 120.744993][ T6753] do_sys_openat2+0x17a/0x1e0 [ 120.745018][ T6753] ? __pfx_do_sys_openat2+0x10/0x10 [ 120.745058][ T6753] __x64_sys_openat+0x175/0x210 [ 120.745084][ T6753] ? __pfx___x64_sys_openat+0x10/0x10 [ 120.745126][ T6753] do_syscall_64+0xcd/0x250 [ 120.745159][ T6753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.745193][ T6753] RIP: 0033:0x7fb5a1d8cde9 [ 120.745214][ T6753] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.745236][ T6753] RSP: 002b:00007fb5a2c7a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 120.745260][ T6753] RAX: ffffffffffffffda RBX: 00007fb5a1fa5fa0 RCX: 00007fb5a1d8cde9 [ 120.745278][ T6753] RDX: 0000000000000001 RSI: 0000400000000040 RDI: ffffffffffffff9c [ 120.745293][ T6753] RBP: 00007fb5a1e0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 120.745308][ T6753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 120.745322][ T6753] R13: 0000000000000000 R14: 00007fb5a1fa5fa0 R15: 00007ffc2a0eb9e8 [ 120.745357][ T6753] [ 120.745371][ T6753] warn_alloc: 2 callbacks suppressed [ 120.745384][ T6753] syz.1.232: vmalloc error: size 9128, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 121.161555][ T6753] ,cpuset=/,mems_allowed=0-1 [ 121.174954][ T6753] CPU: 1 UID: 0 PID: 6753 Comm: syz.1.232 Not tainted 6.14.0-rc3-syzkaller-00079-g87a132e73910 #0 [ 121.174987][ T6753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 121.175001][ T6753] Call Trace: [ 121.175007][ T6753] [ 121.175017][ T6753] dump_stack_lvl+0x16c/0x1f0 [ 121.175051][ T6753] warn_alloc+0x24d/0x3a0 [ 121.175087][ T6753] ? __pfx_warn_alloc+0x10/0x10 [ 121.175119][ T6753] ? rcu_is_watching+0x12/0xc0 [ 121.175146][ T6753] ? __kmalloc_cache_node_noprof+0x2ad/0x420 [ 121.175185][ T6753] ? __kasan_kmalloc+0x8a/0xb0 [ 121.175219][ T6753] ? __get_vm_area_node+0x1dc/0x2f0 [ 121.175256][ T6753] __vmalloc_node_range_noprof+0xd24/0x1530 [ 121.175289][ T6753] ? rcu_is_watching+0x12/0xc0 [ 121.175316][ T6753] ? tty_ldisc_lock+0x65/0xb0 [ 121.175344][ T6753] ? n_tty_open+0x1a/0x170 [ 121.175379][ T6753] ? __ldsem_down_write_nested+0x10f/0x8d0 [ 121.175413][ T6753] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 121.175456][ T6753] ? n_tty_open+0x1a/0x170 [ 121.175489][ T6753] vzalloc_noprof+0x6b/0x90 [ 121.175519][ T6753] ? n_tty_open+0x1a/0x170 [ 121.175547][ T6753] ? __pfx_n_tty_open+0x10/0x10 [ 121.175576][ T6753] n_tty_open+0x1a/0x170 [ 121.175605][ T6753] ? __pfx_n_tty_open+0x10/0x10 [ 121.175648][ T6753] tty_ldisc_open+0x9c/0x120 [ 121.175674][ T6753] tty_ldisc_setup+0x40/0x100 [ 121.175700][ T6753] tty_init_dev.part.0+0x1e7/0x660 [ 121.175733][ T6753] tty_open+0xac1/0xf80 [ 121.175761][ T6753] ? chrdev_open+0x10e/0x6a0 [ 121.175801][ T6753] ? __pfx_tty_open+0x10/0x10 [ 121.175827][ T6753] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 121.175849][ T6753] ? lock_acquire+0x2f/0xb0 [ 121.175879][ T6753] ? chrdev_open+0x80/0x6a0 [ 121.175915][ T6753] ? __pfx_tty_open+0x10/0x10 [ 121.175944][ T6753] chrdev_open+0x237/0x6a0 [ 121.175975][ T6753] ? __pfx_apparmor_file_open+0x10/0x10 [ 121.176005][ T6753] ? __pfx_chrdev_open+0x10/0x10 [ 121.176041][ T6753] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 121.176078][ T6753] do_dentry_open+0x735/0x1c40 [ 121.176110][ T6753] ? __pfx_chrdev_open+0x10/0x10 [ 121.176145][ T6753] ? inode_permission+0xdd/0x5f0 [ 121.176174][ T6753] vfs_open+0x82/0x3f0 [ 121.176195][ T6753] ? may_open+0x1f2/0x400 [ 121.176223][ T6753] path_openat+0x1e88/0x2d80 [ 121.176270][ T6753] ? __pfx_path_openat+0x10/0x10 [ 121.176302][ T6753] ? __pfx___lock_acquire+0x10/0x10 [ 121.176330][ T6753] ? lock_acquire.part.0+0x11b/0x380 [ 121.176360][ T6753] ? find_held_lock+0x2d/0x110 [ 121.176393][ T6753] do_filp_open+0x20c/0x470 [ 121.176426][ T6753] ? __pfx_do_filp_open+0x10/0x10 [ 121.176455][ T6753] ? find_held_lock+0x2d/0x110 [ 121.176506][ T6753] ? alloc_fd+0x41f/0x760 [ 121.176547][ T6753] do_sys_openat2+0x17a/0x1e0 [ 121.176571][ T6753] ? __pfx_do_sys_openat2+0x10/0x10 [ 121.176611][ T6753] __x64_sys_openat+0x175/0x210 [ 121.176645][ T6753] ? __pfx___x64_sys_openat+0x10/0x10 [ 121.176686][ T6753] do_syscall_64+0xcd/0x250 [ 121.176717][ T6753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.176748][ T6753] RIP: 0033:0x7fb5a1d8cde9 [ 121.176767][ T6753] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 121.176788][ T6753] RSP: 002b:00007fb5a2c7a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 121.176809][ T6753] RAX: ffffffffffffffda RBX: 00007fb5a1fa5fa0 RCX: 00007fb5a1d8cde9 [ 121.176824][ T6753] RDX: 0000000000000001 RSI: 0000400000000040 RDI: ffffffffffffff9c [ 121.176839][ T6753] RBP: 00007fb5a1e0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 121.176852][ T6753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 121.176866][ T6753] R13: 0000000000000000 R14: 00007fb5a1fa5fa0 R15: 00007ffc2a0eb9e8 [ 121.176899][ T6753] [ 121.176908][ T6753] Mem-Info: [ 121.418284][ T6741] device-mapper: ioctl: Invalid ioctl structure: uuid , name , dev 400008000000006 [ 121.438580][ T6753] active_anon:33528 inactive_anon:0 isolated_anon:0 [ 121.438580][ T6753] active_file:16296 inactive_file:37931 isolated_file:0 [ 121.438580][ T6753] unevictable:768 dirty:437 writeback:0 [ 121.438580][ T6753] slab_reclaimable:9893 slab_unreclaimable:94053 [ 121.438580][ T6753] mapped:34141 shmem:26409 pagetables:885 [ 121.438580][ T6753] sec_pagetables:0 bounce:0 [ 121.438580][ T6753] kernel_misc_reclaimable:0 [ 121.438580][ T6753] free:1316763 free_pcp:1949 free_cma:0 [ 121.664005][ T6753] Node 0 active_anon:136536kB inactive_anon:0kB active_file:65184kB inactive_file:151716kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:137132kB dirty:1748kB writeback:0kB shmem:106916kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10464kB pagetables:3540kB sec_pagetables:0kB all_unreclaimable? no [ 121.783077][ T6753] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:8kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 121.872600][ T6753] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 121.937643][ T6753] lowmem_reserve[]: 0 2487 2487 0 0 [ 121.943001][ T6753] Node 0 DMA32 free:1339228kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB active_anon:146028kB inactive_anon:0kB active_file:65184kB inactive_file:151624kB unevictable:1536kB writepending:1748kB present:3129332kB managed:2547544kB mlocked:0kB bounce:0kB free_pcp:1880kB local_pcp:1012kB free_cma:0kB [ 122.025385][ T6753] lowmem_reserve[]: 0 0 0 0 0 [ 122.056337][ T6753] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:92kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 122.191158][ T6753] lowmem_reserve[]: 0 0 0 0 0 [ 122.209105][ T6753] Node 1 Normal free:3906404kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:8kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:32kB local_pcp:32kB free_cma:0kB [ 122.215588][ T6777] size and base must be multiples of 4 kiB [ 122.268320][ T6775] process 'syz.0.237' launched ':,' with NULL argv: empty string added [ 122.282278][ T6753] lowmem_reserve[]: 0 0 0 0 0 [ 122.291690][ T6753] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 122.306193][ T6753] Node 0 DMA32: 37*4kB (U) 430*8kB (UE) 234*16kB (UE) 330*32kB (UME) 397*64kB (UME) 91*128kB (UME) 24*256kB (UME) 18*512kB (UM) 5*1024kB (M) 2*2048kB (M) 306*4096kB (ME) = 1332900kB [ 122.328892][ T6753] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 122.340406][ T6777] CPU: 1 UID: 0 PID: 6777 Comm: syz.2.234 Not tainted 6.14.0-rc3-syzkaller-00079-g87a132e73910 #0 [ 122.340439][ T6777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 122.340452][ T6777] Call Trace: [ 122.340459][ T6777] [ 122.340474][ T6777] dump_stack_lvl+0x16c/0x1f0 [ 122.340505][ T6777] mtrr_add+0xdf/0x110 [ 122.340533][ T6777] mtrr_ioctl+0x7f1/0xcf0 [ 122.340559][ T6777] ? __pfx_mtrr_ioctl+0x10/0x10 [ 122.340589][ T6777] ? __pfx_lock_release+0x10/0x10 [ 122.340628][ T6777] ? __fget_files+0x206/0x3a0 [ 122.340661][ T6777] ? __pfx_mtrr_ioctl+0x10/0x10 [ 122.340689][ T6777] proc_reg_unlocked_ioctl+0x226/0x320 [ 122.340722][ T6777] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 122.340755][ T6777] __x64_sys_ioctl+0x190/0x200 [ 122.340781][ T6777] do_syscall_64+0xcd/0x250 [ 122.340810][ T6777] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.340839][ T6777] RIP: 0033:0x7f5930b8cde9 [ 122.340856][ T6777] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 122.340875][ T6777] RSP: 002b:00007f5931a09038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 122.340896][ T6777] RAX: ffffffffffffffda RBX: 00007f5930da6160 RCX: 00007f5930b8cde9 [ 122.340911][ T6777] RDX: 0000000000000006 RSI: 00000000400c4d01 RDI: 0000000000000006 [ 122.340924][ T6777] RBP: 00007f5930c0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 122.340938][ T6777] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 122.340951][ T6777] R13: 0000000000000000 R14: 00007f5930da6160 R15: 00007ffd6bb4a068 [ 122.340981][ T6777] [ 122.540277][ T6753] Node 1 Normal: 181*4kB (UME) 58*8kB (UME) 32*16kB (UME) 194*32kB (UME) 90*64kB (UME) 22*128kB (UME) 15*256kB (UM) 12*512kB (UME) 7*1024kB (UME) 3*2048kB (UE) 944*4096kB (UM) = 3906404kB [ 122.585534][ T6753] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 122.615407][ T6753] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 122.661788][ T6753] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 122.693225][ T6753] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 122.702757][ T6753] 88893 total pagecache pages [ 122.723246][ T6753] 0 pages in swap cache [ 122.727465][ T6753] Free swap = 124740kB [ 122.731645][ T6753] Total swap = 124996kB [ 122.783107][ T6753] 2097051 pages RAM [ 122.788166][ T6753] 0 pages HighMem/MovableOnly [ 122.803762][ T6753] 428507 pages reserved [ 122.816575][ T6753] 0 pages cma reserved [ 122.842553][ T6753] tty tty17: ldisc open failed (-12), clearing slot 16 [ 123.034162][ T6792] FAULT_INJECTION: forcing a failure. [ 123.034162][ T6792] name failslab, interval 1, probability 0, space 0, times 0 [ 123.047225][ T6792] CPU: 1 UID: 0 PID: 6792 Comm: syz.1.243 Not tainted 6.14.0-rc3-syzkaller-00079-g87a132e73910 #0 [ 123.047254][ T6792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 123.047266][ T6792] Call Trace: [ 123.047273][ T6792] [ 123.047282][ T6792] dump_stack_lvl+0x16c/0x1f0 [ 123.047315][ T6792] should_fail_ex+0x50a/0x650 [ 123.047355][ T6792] should_failslab+0xc2/0x120 [ 123.047379][ T6792] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 123.047411][ T6792] ? do_raw_spin_lock+0x12d/0x2c0 [ 123.047433][ T6792] ? inet_bind2_bucket_create+0x36/0x590 [ 123.047462][ T6792] inet_bind2_bucket_create+0x36/0x590 [ 123.047490][ T6792] __inet_hash_connect+0xfa4/0x1900 [ 123.047526][ T6792] ? __pfx___inet_check_established+0x10/0x10 [ 123.047566][ T6792] ? __pfx___inet_hash_connect+0x10/0x10 [ 123.047605][ T6792] tcp_v4_connect+0xddc/0x1b80 [ 123.047658][ T6792] ? __pfx_tcp_v4_connect+0x10/0x10 [ 123.047702][ T6792] __inet_stream_connect+0x3c7/0x1020 [ 123.047743][ T6792] ? __pfx___inet_stream_connect+0x10/0x10 [ 123.047792][ T6792] tcp_sendmsg_fastopen+0x3d7/0x700 [ 123.047833][ T6792] tcp_sendmsg_locked+0x2075/0x37c0 [ 123.047870][ T6792] ? hlock_class+0x4e/0x130 [ 123.047893][ T6792] ? mark_lock+0xb5/0xc60 [ 123.047920][ T6792] ? __pfx___lock_acquire+0x10/0x10 [ 123.047955][ T6792] ? __pfx_mark_lock+0x10/0x10 [ 123.047986][ T6792] ? lock_acquire.part.0+0x11b/0x380 [ 123.048023][ T6792] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 123.048060][ T6792] ? tcp_sendmsg+0x20/0x50 [ 123.048093][ T6792] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 123.048118][ T6792] ? mark_held_locks+0x9f/0xe0 [ 123.048150][ T6792] ? __local_bh_enable_ip+0xa4/0x120 [ 123.048188][ T6792] tcp_sendmsg+0x2e/0x50 [ 123.048218][ T6792] ? __pfx_tcp_sendmsg+0x10/0x10 [ 123.048251][ T6792] inet_sendmsg+0xb9/0x140 [ 123.048284][ T6792] ____sys_sendmsg+0x98c/0xc90 [ 123.048312][ T6792] ? __pfx_____sys_sendmsg+0x10/0x10 [ 123.048334][ T6792] ? __lock_acquire+0xcc5/0x3c40 [ 123.048380][ T6792] ___sys_sendmsg+0x135/0x1e0 [ 123.048414][ T6792] ? __pfx____sys_sendmsg+0x10/0x10 [ 123.048462][ T6792] ? trace_lock_acquire+0x14e/0x1f0 [ 123.048518][ T6792] __sys_sendmmsg+0x201/0x420 [ 123.048555][ T6792] ? __pfx___sys_sendmmsg+0x10/0x10 [ 123.048599][ T6792] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 123.048646][ T6792] ? fput+0x67/0x440 [ 123.048671][ T6792] ? ksys_write+0x1ba/0x250 [ 123.048701][ T6792] ? __pfx_ksys_write+0x10/0x10 [ 123.048738][ T6792] __x64_sys_sendmmsg+0x9c/0x100 [ 123.048769][ T6792] ? lockdep_hardirqs_on+0x7c/0x110 [ 123.048796][ T6792] do_syscall_64+0xcd/0x250 [ 123.048827][ T6792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.048856][ T6792] RIP: 0033:0x7fb5a1d8cde9 [ 123.048875][ T6792] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 123.048896][ T6792] RSP: 002b:00007fb5a2c7a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 123.048918][ T6792] RAX: ffffffffffffffda RBX: 00007fb5a1fa5fa0 RCX: 00007fb5a1d8cde9 [ 123.048933][ T6792] RDX: 0000000000000005 RSI: 0000400000000140 RDI: 0000000000000004 [ 123.048947][ T6792] RBP: 00007fb5a2c7a090 R08: 0000000000000000 R09: 0000000000000000 [ 123.048960][ T6792] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 123.048973][ T6792] R13: 0000000000000000 R14: 00007fb5a1fa5fa0 R15: 00007ffc2a0eb9e8 [ 123.049006][ T6792] [ 125.025068][ T6822] erspan0: entered allmulticast mode [ 125.108039][ T6820] size and base must be multiples of 4 kiB [ 125.123308][ T6820] CPU: 1 UID: 0 PID: 6820 Comm: syz.0.252 Not tainted 6.14.0-rc3-syzkaller-00079-g87a132e73910 #0 [ 125.123345][ T6820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 125.123359][ T6820] Call Trace: [ 125.123366][ T6820] [ 125.123375][ T6820] dump_stack_lvl+0x16c/0x1f0 [ 125.123422][ T6820] mtrr_add+0xdf/0x110 [ 125.123456][ T6820] mtrr_ioctl+0x7f1/0xcf0 [ 125.123489][ T6820] ? __pfx_mtrr_ioctl+0x10/0x10 [ 125.123525][ T6820] ? __pfx_lock_release+0x10/0x10 [ 125.123570][ T6820] ? __fget_files+0x206/0x3a0 [ 125.123605][ T6820] ? __pfx_mtrr_ioctl+0x10/0x10 [ 125.123636][ T6820] proc_reg_unlocked_ioctl+0x226/0x320 [ 125.123671][ T6820] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 125.123708][ T6820] __x64_sys_ioctl+0x190/0x200 [ 125.123740][ T6820] do_syscall_64+0xcd/0x250 [ 125.123772][ T6820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.123805][ T6820] RIP: 0033:0x7f690798cde9 [ 125.123826][ T6820] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.123848][ T6820] RSP: 002b:00007f690887c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 125.123871][ T6820] RAX: ffffffffffffffda RBX: 00007f6907ba5fa0 RCX: 00007f690798cde9 [ 125.123887][ T6820] RDX: 0000000000000006 RSI: 00000000400c4d01 RDI: 0000000000000006 [ 125.123902][ T6820] RBP: 00007f6907a0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 125.123916][ T6820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 125.123930][ T6820] R13: 0000000000000000 R14: 00007f6907ba5fa0 R15: 00007ffcf2ed5d28 [ 125.123961][ T6820] [ 125.820396][ T54] Bluetooth: hci2: Malformed LE Event: 0x1d [ 127.397470][ T6877] size and base must be multiples of 4 kiB [ 127.403633][ T6877] CPU: 1 UID: 0 PID: 6877 Comm: syz.1.264 Not tainted 6.14.0-rc3-syzkaller-00079-g87a132e73910 #0 [ 127.403665][ T6877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 127.403679][ T6877] Call Trace: [ 127.403687][ T6877] [ 127.403700][ T6877] dump_stack_lvl+0x16c/0x1f0 [ 127.403735][ T6877] mtrr_add+0xdf/0x110 [ 127.403767][ T6877] mtrr_ioctl+0x7f1/0xcf0 [ 127.403799][ T6877] ? __pfx_mtrr_ioctl+0x10/0x10 [ 127.403835][ T6877] ? __pfx_lock_release+0x10/0x10 [ 127.403881][ T6877] ? __fget_files+0x206/0x3a0 [ 127.403915][ T6877] ? __pfx_mtrr_ioctl+0x10/0x10 [ 127.403945][ T6877] proc_reg_unlocked_ioctl+0x226/0x320 [ 127.403980][ T6877] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 127.404018][ T6877] __x64_sys_ioctl+0x190/0x200 [ 127.404049][ T6877] do_syscall_64+0xcd/0x250 [ 127.404081][ T6877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.404114][ T6877] RIP: 0033:0x7fb5a1d8cde9 [ 127.404133][ T6877] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.404155][ T6877] RSP: 002b:00007fb5a2c38038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 127.404175][ T6877] RAX: ffffffffffffffda RBX: 00007fb5a1fa6160 RCX: 00007fb5a1d8cde9 [ 127.404187][ T6877] RDX: 0000000000000006 RSI: 00000000400c4d01 RDI: 0000000000000006 [ 127.404198][ T6877] RBP: 00007fb5a1e0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 127.404218][ T6877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 127.404233][ T6877] R13: 0000000000000000 R14: 00007fb5a1fa6160 R15: 00007ffc2a0eb9e8 [ 127.404264][ T6877] [ 128.772454][ T6883] random: crng reseeded on system resumption [ 128.914284][ T6902] FAULT_INJECTION: forcing a failure. [ 128.914284][ T6902] name failslab, interval 1, probability 0, space 0, times 0 [ 129.051502][ T6902] CPU: 0 UID: 0 PID: 6902 Comm: syz.3.270 Not tainted 6.14.0-rc3-syzkaller-00079-g87a132e73910 #0 [ 129.051537][ T6902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 129.051550][ T6902] Call Trace: [ 129.051558][ T6902] [ 129.051567][ T6902] dump_stack_lvl+0x16c/0x1f0 [ 129.051601][ T6902] should_fail_ex+0x50a/0x650 [ 129.051641][ T6902] should_failslab+0xc2/0x120 [ 129.051667][ T6902] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 129.051703][ T6902] ? skb_clone+0x190/0x3f0 [ 129.051740][ T6902] skb_clone+0x190/0x3f0 [ 129.051773][ T6902] netlink_deliver_tap+0xabd/0xd30 [ 129.051816][ T6902] netlink_unicast+0x5e1/0x7f0 [ 129.051849][ T6902] ? __pfx_netlink_unicast+0x10/0x10 [ 129.051879][ T6902] ? __phys_addr_symbol+0x30/0x80 [ 129.051902][ T6902] ? __check_object_size+0x488/0x710 [ 129.051930][ T6902] netlink_sendmsg+0x8b8/0xd70 [ 129.051965][ T6902] ? __pfx_netlink_sendmsg+0x10/0x10 [ 129.052008][ T6902] ____sys_sendmsg+0xaaf/0xc90 [ 129.052033][ T6902] ? copy_msghdr_from_user+0x10b/0x160 [ 129.052063][ T6902] ? __pfx_____sys_sendmsg+0x10/0x10 [ 129.052104][ T6902] ___sys_sendmsg+0x135/0x1e0 [ 129.052138][ T6902] ? __pfx____sys_sendmsg+0x10/0x10 [ 129.052183][ T6902] ? __pfx_lock_release+0x10/0x10 [ 129.052215][ T6902] ? trace_lock_acquire+0x14e/0x1f0 [ 129.052251][ T6902] ? __fget_files+0x206/0x3a0 [ 129.052292][ T6902] __sys_sendmsg+0x16e/0x220 [ 129.052324][ T6902] ? __pfx___sys_sendmsg+0x10/0x10 [ 129.052377][ T6902] do_syscall_64+0xcd/0x250 [ 129.052408][ T6902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.052439][ T6902] RIP: 0033:0x7fb8af18cde9 [ 129.052458][ T6902] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 129.052479][ T6902] RSP: 002b:00007fb8aff37038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 129.052502][ T6902] RAX: ffffffffffffffda RBX: 00007fb8af3a5fa0 RCX: 00007fb8af18cde9 [ 129.052518][ T6902] RDX: 0000000000040000 RSI: 0000400000000240 RDI: 0000000000000003 [ 129.052532][ T6902] RBP: 00007fb8aff37090 R08: 0000000000000000 R09: 0000000000000000 [ 129.052546][ T6902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 129.052559][ T6902] R13: 0000000000000000 R14: 00007fb8af3a5fa0 R15: 00007ffdf1aa4858 [ 129.052591][ T6902] [ 129.617803][ T6910] netlink: 244 bytes leftover after parsing attributes in process `syz.1.274'. [ 129.931919][ T6917] netlink: 338 bytes leftover after parsing attributes in process `syz.3.275'. [ 129.978142][ T6923] size and base must be multiples of 4 kiB [ 129.984008][ T6923] CPU: 1 UID: 0 PID: 6923 Comm: syz.1.276 Not tainted 6.14.0-rc3-syzkaller-00079-g87a132e73910 #0 [ 129.984039][ T6923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 129.984053][ T6923] Call Trace: [ 129.984060][ T6923] [ 129.984070][ T6923] dump_stack_lvl+0x16c/0x1f0 [ 129.984110][ T6923] mtrr_add+0xdf/0x110 [ 129.984139][ T6923] mtrr_ioctl+0x7f1/0xcf0 [ 129.984167][ T6923] ? __pfx_mtrr_ioctl+0x10/0x10 [ 129.984197][ T6923] ? __pfx_lock_release+0x10/0x10 [ 129.984240][ T6923] ? __fget_files+0x206/0x3a0 [ 129.984271][ T6923] ? __pfx_mtrr_ioctl+0x10/0x10 [ 129.984300][ T6923] proc_reg_unlocked_ioctl+0x226/0x320 [ 129.984333][ T6923] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 129.984371][ T6923] __x64_sys_ioctl+0x190/0x200 [ 129.984401][ T6923] do_syscall_64+0xcd/0x250 [ 129.984433][ T6923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.984466][ T6923] RIP: 0033:0x7fb5a1d8cde9 [ 129.984485][ T6923] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 129.984507][ T6923] RSP: 002b:00007fb5a2c38038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 129.984530][ T6923] RAX: ffffffffffffffda RBX: 00007fb5a1fa6160 RCX: 00007fb5a1d8cde9 [ 129.984546][ T6923] RDX: 0000000000000006 RSI: 00000000400c4d01 RDI: 0000000000000006 [ 129.984562][ T6923] RBP: 00007fb5a1e0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 129.984577][ T6923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 129.984592][ T6923] R13: 0000000000000000 R14: 00007fb5a1fa6160 R15: 00007ffc2a0eb9e8 [ 129.984623][ T6923] [ 130.044107][ T6919] netlink: 338 bytes leftover after parsing attributes in process `syz.3.275'. [ 130.599723][ T6908] FAULT_INJECTION: forcing a failure. [ 130.599723][ T6908] name failslab, interval 1, probability 0, space 0, times 0 [ 130.675218][ T6908] CPU: 1 UID: 0 PID: 6908 Comm: syz.0.273 Not tainted 6.14.0-rc3-syzkaller-00079-g87a132e73910 #0 [ 130.675254][ T6908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 130.675268][ T6908] Call Trace: [ 130.675276][ T6908] [ 130.675285][ T6908] dump_stack_lvl+0x16c/0x1f0 [ 130.675322][ T6908] should_fail_ex+0x50a/0x650 [ 130.675359][ T6908] ? fs_reclaim_acquire+0xae/0x150 [ 130.675394][ T6908] should_failslab+0xc2/0x120 [ 130.675433][ T6908] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 130.675477][ T6908] ? security_inode_alloc+0x3b/0x2b0 [ 130.675514][ T6908] security_inode_alloc+0x3b/0x2b0 [ 130.675541][ T6908] inode_init_always_gfp+0xce4/0x1030 [ 130.675582][ T6908] alloc_inode+0x82/0x230 [ 130.675602][ T6908] iget_locked+0x2ee/0x8a0 [ 130.675626][ T6908] ? __pfx_rwsem_read_trylock+0x10/0x10 [ 130.675670][ T6908] ? __pfx_iget_locked+0x10/0x10 [ 130.675690][ T6908] ? kernfs_iop_lookup+0xa3/0x330 [ 130.675741][ T6908] kernfs_get_inode+0x48/0x460 [ 130.675773][ T6908] kernfs_iop_lookup+0x1ec/0x330 [ 130.675804][ T6908] ? __pfx_kernfs_iop_lookup+0x10/0x10 [ 130.675838][ T6908] lookup_open.isra.0+0x4d9/0x1580 [ 130.675871][ T6908] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 130.675916][ T6908] ? path_openat+0x88a/0x2d80 [ 130.675961][ T6908] ? lookup_fast+0x153/0x5f0 [ 130.675993][ T6908] path_openat+0x904/0x2d80 [ 130.676043][ T6908] ? __pfx_path_openat+0x10/0x10 [ 130.676085][ T6908] ? __pfx___lock_acquire+0x10/0x10 [ 130.676121][ T6908] ? lock_acquire.part.0+0x11b/0x380 [ 130.676161][ T6908] ? find_held_lock+0x2d/0x110 [ 130.676197][ T6908] do_filp_open+0x20c/0x470 [ 130.676238][ T6908] ? __pfx_do_filp_open+0x10/0x10 [ 130.676271][ T6908] ? find_held_lock+0x2d/0x110 [ 130.676319][ T6908] ? alloc_fd+0x41f/0x760 [ 130.676373][ T6908] do_sys_openat2+0x17a/0x1e0 [ 130.676406][ T6908] ? __pfx_do_sys_openat2+0x10/0x10 [ 130.676452][ T6908] __x64_sys_openat+0x175/0x210 [ 130.676484][ T6908] ? __pfx___x64_sys_openat+0x10/0x10 [ 130.676533][ T6908] do_syscall_64+0xcd/0x250 [ 130.676567][ T6908] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.676600][ T6908] RIP: 0033:0x7f690798cde9 [ 130.676619][ T6908] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.676643][ T6908] RSP: 002b:00007f690887c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 130.676664][ T6908] RAX: ffffffffffffffda RBX: 00007f6907ba5fa0 RCX: 00007f690798cde9 [ 130.676679][ T6908] RDX: 0000000000000000 RSI: 0000400000000000 RDI: ffffffffffffff9c [ 130.676696][ T6908] RBP: 00007f6907a0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 130.676712][ T6908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 130.676727][ T6908] R13: 0000000000000000 R14: 00007f6907ba5fa0 R15: 00007ffcf2ed5d28 [ 130.676761][ T6908] [ 133.221374][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.229478][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.179691][ T7033] netlink: 'syz.0.301': attribute type 27 has an invalid length. [ 135.218141][ T7033] netlink: 334 bytes leftover after parsing attributes in process `syz.0.301'. [ 137.899400][ T7092] netlink: 36 bytes leftover after parsing attributes in process `syz.0.312'. [ 138.159905][ T7102] FAULT_INJECTION: forcing a failure. [ 138.159905][ T7102] name failslab, interval 1, probability 0, space 0, times 0 [ 138.510805][ T7102] CPU: 1 UID: 0 PID: 7102 Comm: syz.3.314 Not tainted 6.14.0-rc3-syzkaller-00079-g87a132e73910 #0 [ 138.510840][ T7102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 138.510852][ T7102] Call Trace: [ 138.510860][ T7102] [ 138.510869][ T7102] dump_stack_lvl+0x16c/0x1f0 [ 138.510903][ T7102] should_fail_ex+0x50a/0x650 [ 138.510937][ T7102] ? fs_reclaim_acquire+0xae/0x150 [ 138.510969][ T7102] should_failslab+0xc2/0x120 [ 138.510992][ T7102] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 138.511026][ T7102] ? alloc_empty_file+0x73/0x1e0 [ 138.511055][ T7102] alloc_empty_file+0x73/0x1e0 [ 138.511086][ T7102] path_openat+0xe1/0x2d80 [ 138.511117][ T7102] ? hlock_class+0x4e/0x130 [ 138.511141][ T7102] ? __lock_acquire+0x15a9/0x3c40 [ 138.511182][ T7102] ? __pfx_path_openat+0x10/0x10 [ 138.511214][ T7102] ? __pfx___lock_acquire+0x10/0x10 [ 138.511243][ T7102] ? lock_acquire.part.0+0x11b/0x380 [ 138.511274][ T7102] ? find_held_lock+0x2d/0x110 [ 138.511302][ T7102] do_filp_open+0x20c/0x470 [ 138.511335][ T7102] ? __pfx_do_filp_open+0x10/0x10 [ 138.511365][ T7102] ? find_held_lock+0x2d/0x110 [ 138.511412][ T7102] ? alloc_fd+0x41f/0x760 [ 138.511452][ T7102] do_sys_openat2+0x17a/0x1e0 [ 138.511478][ T7102] ? __pfx_do_sys_openat2+0x10/0x10 [ 138.511506][ T7102] ? __fget_files+0x206/0x3a0 [ 138.511543][ T7102] __x64_sys_openat+0x175/0x210 [ 138.511568][ T7102] ? __pfx___x64_sys_openat+0x10/0x10 [ 138.511593][ T7102] ? ksys_write+0x1ba/0x250 [ 138.511634][ T7102] do_syscall_64+0xcd/0x250 [ 138.511665][ T7102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.511696][ T7102] RIP: 0033:0x7fb8af18cde9 [ 138.511714][ T7102] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 138.511739][ T7102] RSP: 002b:00007fb8aff16038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 138.511762][ T7102] RAX: ffffffffffffffda RBX: 00007fb8af3a6080 RCX: 00007fb8af18cde9 [ 138.511777][ T7102] RDX: 0000000000000001 RSI: 00004000000001c0 RDI: ffffffffffffff9c [ 138.511793][ T7102] RBP: 00007fb8aff16090 R08: 0000000000000000 R09: 0000000000000000 [ 138.511807][ T7102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 138.511820][ T7102] R13: 0000000000000000 R14: 00007fb8af3a6080 R15: 00007ffdf1aa4858 [ 138.511851][ T7102] [ 142.177987][ T7175] FAULT_INJECTION: forcing a failure. [ 142.177987][ T7175] name failslab, interval 1, probability 0, space 0, times 0 [ 142.348274][ T7175] CPU: 0 UID: 0 PID: 7175 Comm: syz.2.336 Not tainted 6.14.0-rc3-syzkaller-00079-g87a132e73910 #0 [ 142.348309][ T7175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 142.348322][ T7175] Call Trace: [ 142.348329][ T7175] [ 142.348339][ T7175] dump_stack_lvl+0x16c/0x1f0 [ 142.348372][ T7175] should_fail_ex+0x50a/0x650 [ 142.348404][ T7175] ? fs_reclaim_acquire+0xae/0x150 [ 142.348435][ T7175] ? tomoyo_encode2+0x100/0x3e0 [ 142.348463][ T7175] should_failslab+0xc2/0x120 [ 142.348493][ T7175] __kmalloc_noprof+0xcb/0x510 [ 142.348526][ T7175] ? d_absolute_path+0x137/0x1b0 [ 142.348550][ T7175] ? rcu_is_watching+0x12/0xc0 [ 142.348577][ T7175] tomoyo_encode2+0x100/0x3e0 [ 142.348609][ T7175] tomoyo_encode+0x29/0x50 [ 142.348636][ T7175] tomoyo_realpath_from_path+0x19d/0x720 [ 142.348679][ T7175] tomoyo_path_number_perm+0x248/0x590 [ 142.348704][ T7175] ? tomoyo_path_number_perm+0x235/0x590 [ 142.348731][ T7175] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 142.348785][ T7175] ? __pfx_lock_release+0x10/0x10 [ 142.348815][ T7175] ? trace_lock_acquire+0x14e/0x1f0 [ 142.348844][ T7175] ? lock_acquire+0x2f/0xb0 [ 142.348872][ T7175] ? __fget_files+0x40/0x3a0 [ 142.348907][ T7175] ? __fget_files+0x206/0x3a0 [ 142.348941][ T7175] security_file_ioctl+0x9b/0x240 [ 142.348970][ T7175] __x64_sys_ioctl+0xb7/0x200 [ 142.349000][ T7175] do_syscall_64+0xcd/0x250 [ 142.349031][ T7175] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.349063][ T7175] RIP: 0033:0x7f5930b8cde9 [ 142.349082][ T7175] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.349103][ T7175] RSP: 002b:00007f5931a4b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 142.349125][ T7175] RAX: ffffffffffffffda RBX: 00007f5930da5fa0 RCX: 00007f5930b8cde9 [ 142.349141][ T7175] RDX: 0000000000000000 RSI: 0000000000001277 RDI: 0000000000000004 [ 142.349155][ T7175] RBP: 00007f5931a4b090 R08: 0000000000000000 R09: 0000000000000000 [ 142.349169][ T7175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 142.349183][ T7175] R13: 0000000000000000 R14: 00007f5930da5fa0 R15: 00007ffd6bb4a068 [ 142.349214][ T7175] [ 142.349270][ T7175] ERROR: Out of memory at tomoyo_realpath_from_path. [ 142.638495][ T7157] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 142.716552][ T7157] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 142.758801][ T7157] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 142.785439][ T7157] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 142.813310][ T7157] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 144.179080][ T54] Bluetooth: hci0: command 0x0c1a tx timeout [ 144.821488][ T54] Bluetooth: hci3: command 0x0c1a tx timeout [ 144.827577][ T54] Bluetooth: hci1: command 0x0c1a tx timeout [ 144.834317][ T5838] Bluetooth: hci2: command 0x0c1a tx timeout [ 146.258300][ T5152] Bluetooth: hci0: command 0x0c1a tx timeout [ 147.079363][ T7265] netlink: 186 bytes leftover after parsing attributes in process `syz.0.359'. [ 151.305108][ T7344] size and base must be multiples of 4 kiB [ 151.328487][ T7344] CPU: 1 UID: 0 PID: 7344 Comm: syz.1.380 Not tainted 6.14.0-rc3-syzkaller-00079-g87a132e73910 #0 [ 151.328523][ T7344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 151.328538][ T7344] Call Trace: [ 151.328545][ T7344] [ 151.328556][ T7344] dump_stack_lvl+0x16c/0x1f0 [ 151.328592][ T7344] mtrr_add+0xdf/0x110 [ 151.328624][ T7344] mtrr_ioctl+0x7f1/0xcf0 [ 151.328655][ T7344] ? __pfx_mtrr_ioctl+0x10/0x10 [ 151.328688][ T7344] ? __pfx_lock_release+0x10/0x10 [ 151.328733][ T7344] ? __fget_files+0x206/0x3a0 [ 151.328768][ T7344] ? __pfx_mtrr_ioctl+0x10/0x10 [ 151.328798][ T7344] proc_reg_unlocked_ioctl+0x226/0x320 [ 151.328833][ T7344] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 151.328871][ T7344] __x64_sys_ioctl+0x190/0x200 [ 151.328910][ T7344] do_syscall_64+0xcd/0x250 [ 151.328944][ T7344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.328977][ T7344] RIP: 0033:0x7fb5a1d8cde9 [ 151.328996][ T7344] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 151.329019][ T7344] RSP: 002b:00007fb5a2c38038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 151.329043][ T7344] RAX: ffffffffffffffda RBX: 00007fb5a1fa6160 RCX: 00007fb5a1d8cde9 [ 151.329060][ T7344] RDX: 0000000000000006 RSI: 00000000400c4d01 RDI: 0000000000000006 [ 151.329075][ T7344] RBP: 00007fb5a1e0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 151.329089][ T7344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 151.329103][ T7344] R13: 0000000000000000 R14: 00007fb5a1fa6160 R15: 00007ffc2a0eb9e8 [ 151.329134][ T7344] [ 151.945143][ T7361] netlink: 8 bytes leftover after parsing attributes in process `syz.2.383'. [ 151.949689][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 151.961064][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 152.841233][ T29] audit: type=1800 audit(4294967297.270:2): pid=7387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.392" name="discovery_nqn" dev="configfs" ino=13335 res=0 errno=0 [ 153.033376][ T7400] size and base must be multiples of 4 kiB [ 153.051695][ T7400] CPU: 0 UID: 0 PID: 7400 Comm: syz.2.395 Not tainted 6.14.0-rc3-syzkaller-00079-g87a132e73910 #0 [ 153.051731][ T7400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 153.051746][ T7400] Call Trace: [ 153.051754][ T7400] [ 153.051764][ T7400] dump_stack_lvl+0x16c/0x1f0 [ 153.051799][ T7400] mtrr_add+0xdf/0x110 [ 153.051832][ T7400] mtrr_ioctl+0x7f1/0xcf0 [ 153.051863][ T7400] ? __pfx_mtrr_ioctl+0x10/0x10 [ 153.051897][ T7400] ? __pfx_lock_release+0x10/0x10 [ 153.051942][ T7400] ? __fget_files+0x206/0x3a0 [ 153.051976][ T7400] ? __pfx_mtrr_ioctl+0x10/0x10 [ 153.052006][ T7400] proc_reg_unlocked_ioctl+0x226/0x320 [ 153.052040][ T7400] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 153.052078][ T7400] __x64_sys_ioctl+0x190/0x200 [ 153.052108][ T7400] do_syscall_64+0xcd/0x250 [ 153.052139][ T7400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.052174][ T7400] RIP: 0033:0x7f5930b8cde9 [ 153.052194][ T7400] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 153.052217][ T7400] RSP: 002b:00007f5931a09038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 153.052240][ T7400] RAX: ffffffffffffffda RBX: 00007f5930da6160 RCX: 00007f5930b8cde9 [ 153.052257][ T7400] RDX: 0000000000000006 RSI: 00000000400c4d01 RDI: 0000000000000006 [ 153.052272][ T7400] RBP: 00007f5930c0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 153.052287][ T7400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 153.052301][ T7400] R13: 0000000000000000 R14: 00007f5930da6160 R15: 00007ffd6bb4a068 [ 153.052333][ T7400] [ 153.219896][ C0] vkms_vblank_simulate: vblank timer overrun [ 154.487939][ T7418] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 154.496508][ T7418] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 154.503450][ T7418] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 154.511858][ T7418] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 154.517945][ T7418] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 155.287366][ T7462] size and base must be multiples of 4 kiB [ 155.309685][ T7462] CPU: 1 UID: 0 PID: 7462 Comm: syz.2.411 Not tainted 6.14.0-rc3-syzkaller-00079-g87a132e73910 #0 [ 155.309722][ T7462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 155.309736][ T7462] Call Trace: [ 155.309744][ T7462] [ 155.309754][ T7462] dump_stack_lvl+0x16c/0x1f0 [ 155.309790][ T7462] mtrr_add+0xdf/0x110 [ 155.309823][ T7462] mtrr_ioctl+0x7f1/0xcf0 [ 155.309854][ T7462] ? __pfx_mtrr_ioctl+0x10/0x10 [ 155.309888][ T7462] ? __pfx_lock_release+0x10/0x10 [ 155.309935][ T7462] ? __fget_files+0x206/0x3a0 [ 155.309969][ T7462] ? __pfx_mtrr_ioctl+0x10/0x10 [ 155.309999][ T7462] proc_reg_unlocked_ioctl+0x226/0x320 [ 155.310034][ T7462] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 155.310073][ T7462] __x64_sys_ioctl+0x190/0x200 [ 155.310104][ T7462] do_syscall_64+0xcd/0x250 [ 155.310136][ T7462] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.310169][ T7462] RIP: 0033:0x7f5930b8cde9 [ 155.310189][ T7462] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 155.310211][ T7462] RSP: 002b:00007f5931a09038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 155.310235][ T7462] RAX: ffffffffffffffda RBX: 00007f5930da6160 RCX: 00007f5930b8cde9 [ 155.310252][ T7462] RDX: 0000000000000006 RSI: 00000000400c4d01 RDI: 0000000000000006 [ 155.310266][ T7462] RBP: 00007f5930c0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 155.310281][ T7462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 155.310295][ T7462] R13: 0000000000000000 R14: 00007f5930da6160 R15: 00007ffd6bb4a068 [ 155.310328][ T7462] [ 156.018300][ T5152] Bluetooth: hci0: command 0x0c1a tx timeout [ 156.588379][ T5152] Bluetooth: hci3: command 0x0c1a tx timeout [ 156.594422][ T54] Bluetooth: hci1: command 0x0c1a tx timeout [ 156.594461][ T5152] Bluetooth: hci2: command 0x0c1a tx timeout [ 156.639940][ T7491] FAULT_INJECTION: forcing a failure. [ 156.639940][ T7491] name failslab, interval 1, probability 0, space 0, times 0 [ 156.738484][ T7491] CPU: 1 UID: 0 PID: 7491 Comm: syz.1.421 Not tainted 6.14.0-rc3-syzkaller-00079-g87a132e73910 #0 [ 156.738517][ T7491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 156.738530][ T7491] Call Trace: [ 156.738537][ T7491] [ 156.738547][ T7491] dump_stack_lvl+0x16c/0x1f0 [ 156.738581][ T7491] should_fail_ex+0x50a/0x650 [ 156.738616][ T7491] ? fs_reclaim_acquire+0xae/0x150 [ 156.738649][ T7491] should_failslab+0xc2/0x120 [ 156.738673][ T7491] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 156.738708][ T7491] ? anon_vma_fork+0xe6/0x620 [ 156.738746][ T7491] anon_vma_fork+0xe6/0x620 [ 156.738776][ T7491] ? anon_vma_name+0x75/0x100 [ 156.738805][ T7491] copy_process+0x82c8/0x8c50 [ 156.738855][ T7491] ? __pfx_copy_process+0x10/0x10 [ 156.738876][ T7491] ? __pfx___futex_wait+0x10/0x10 [ 156.738910][ T7491] ? try_to_wake_up+0x158/0x1490 [ 156.738969][ T7491] kernel_clone+0xfd/0x960 [ 156.738995][ T7491] ? __pfx_kernel_clone+0x10/0x10 [ 156.739039][ T7491] __do_sys_clone+0xcf/0x120 [ 156.739067][ T7491] ? __pfx___do_sys_clone+0x10/0x10 [ 156.739090][ T7491] ? __sys_sendmsg+0x19a/0x220 [ 156.739138][ T7491] ? rcu_is_watching+0x12/0xc0 [ 156.739175][ T7491] do_syscall_64+0xcd/0x250 [ 156.739206][ T7491] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.739238][ T7491] RIP: 0033:0x7fb5a1d8cde9 [ 156.739258][ T7491] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 156.739280][ T7491] RSP: 002b:00007fb5a2c79fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 156.739303][ T7491] RAX: ffffffffffffffda RBX: 00007fb5a1fa5fa0 RCX: 00007fb5a1d8cde9 [ 156.739325][ T7491] RDX: 0000000000000000 RSI: ffffffffffffff10 RDI: 0000000000000000 [ 156.739340][ T7491] RBP: 00007fb5a1e0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 156.739354][ T7491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 156.739368][ T7491] R13: 0000000000000000 R14: 00007fb5a1fa5fa0 R15: 00007ffc2a0eb9e8 [ 156.739402][ T7491] [ 157.448533][ T29] audit: type=1800 audit(4294967301.880:3): pid=7512 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.425" name="dbroot" dev="configfs" ino=13686 res=0 errno=0 [ 157.523657][ T7513] FAULT_INJECTION: forcing a failure. [ 157.523657][ T7513] name failslab, interval 1, probability 0, space 0, times 0 [ 157.556392][ T7513] CPU: 1 UID: 0 PID: 7513 Comm: syz.1.424 Not tainted 6.14.0-rc3-syzkaller-00079-g87a132e73910 #0 [ 157.556428][ T7513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 157.556442][ T7513] Call Trace: [ 157.556448][ T7513] [ 157.556458][ T7513] dump_stack_lvl+0x16c/0x1f0 [ 157.556493][ T7513] should_fail_ex+0x50a/0x650 [ 157.556527][ T7513] ? fs_reclaim_acquire+0xae/0x150 [ 157.556559][ T7513] ? memcg_list_lru_alloc+0x29f/0x730 [ 157.556584][ T7513] should_failslab+0xc2/0x120 [ 157.556608][ T7513] __kmalloc_noprof+0xcb/0x510 [ 157.556641][ T7513] ? do_sys_openat2+0x17a/0x1e0 [ 157.556674][ T7513] memcg_list_lru_alloc+0x29f/0x730 [ 157.556707][ T7513] ? __pfx_memcg_list_lru_alloc+0x10/0x10 [ 157.556733][ T7513] ? trace_lock_acquire+0x14e/0x1f0 [ 157.556765][ T7513] ? lock_acquire+0x2f/0xb0 [ 157.556793][ T7513] ? get_mem_cgroup_from_objcg+0xe1/0x210 [ 157.556832][ T7513] __memcg_slab_post_alloc_hook+0x12c/0x9b0 [ 157.556874][ T7513] ? kasan_save_track+0x14/0x30 [ 157.556910][ T7513] kmem_cache_alloc_lru_noprof+0x363/0x3d0 [ 157.556945][ T7513] ? alloc_inode+0xbf/0x230 [ 157.556967][ T7513] ? find_held_lock+0x2d/0x110 [ 157.556995][ T7513] alloc_inode+0xbf/0x230 [ 157.557027][ T7513] new_inode+0x22/0x210 [ 157.557052][ T7513] ? __pfx_lock_release+0x10/0x10 [ 157.557085][ T7513] configfs_new_inode+0x24/0x4a0 [ 157.557121][ T7513] configfs_create+0xd9/0x3b0 [ 157.557157][ T7513] configfs_lookup+0x38f/0x780 [ 157.557184][ T7513] ? __pfx_configfs_lookup+0x10/0x10 [ 157.557218][ T7513] lookup_open.isra.0+0x4d9/0x1580 [ 157.557255][ T7513] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 157.557291][ T7513] ? path_openat+0x88a/0x2d80 [ 157.557333][ T7513] ? mnt_get_write_access+0x20c/0x300 [ 157.557367][ T7513] path_openat+0x904/0x2d80 [ 157.557412][ T7513] ? __pfx_path_openat+0x10/0x10 [ 157.557444][ T7513] ? __pfx___lock_acquire+0x10/0x10 [ 157.557473][ T7513] ? lock_acquire.part.0+0x11b/0x380 [ 157.557504][ T7513] ? find_held_lock+0x2d/0x110 [ 157.557533][ T7513] do_filp_open+0x20c/0x470 [ 157.557567][ T7513] ? __pfx_do_filp_open+0x10/0x10 [ 157.557596][ T7513] ? find_held_lock+0x2d/0x110 [ 157.557646][ T7513] ? alloc_fd+0x41f/0x760 [ 157.557688][ T7513] do_sys_openat2+0x17a/0x1e0 [ 157.557713][ T7513] ? __pfx_do_sys_openat2+0x10/0x10 [ 157.557742][ T7513] ? __fget_files+0x206/0x3a0 [ 157.557780][ T7513] __x64_sys_openat+0x175/0x210 [ 157.557806][ T7513] ? __pfx___x64_sys_openat+0x10/0x10 [ 157.557831][ T7513] ? ksys_write+0x1ba/0x250 [ 157.557874][ T7513] do_syscall_64+0xcd/0x250 [ 157.557905][ T7513] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.557961][ T7513] RIP: 0033:0x7fb5a1d8cde9 [ 157.557980][ T7513] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.558001][ T7513] RSP: 002b:00007fb5a2c7a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 157.558031][ T7513] RAX: ffffffffffffffda RBX: 00007fb5a1fa5fa0 RCX: 00007fb5a1d8cde9 [ 157.558046][ T7513] RDX: 0000000000189002 RSI: 0000400000000100 RDI: ffffffffffffff9c [ 157.558060][ T7513] RBP: 00007fb5a2c7a090 R08: 0000000000000000 R09: 0000000000000000 [ 157.558074][ T7513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.558087][ T7513] R13: 0000000000000001 R14: 00007fb5a1fa5fa0 R15: 00007ffc2a0eb9e8 [ 157.558119][ T7513] [ 158.111781][ T5152] Bluetooth: hci0: command 0x0c1a tx timeout [ 160.215254][ T29] audit: type=1800 audit(4294967304.650:4): pid=7555 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.436" name="dbroot" dev="configfs" ino=13739 res=0 errno=0 [ 161.302663][ T7532] lo: entered allmulticast mode [ 161.453914][ T7567] Console: switching to colour VGA+ 80x25 [ 161.679200][ T7567] ================================================================== [ 161.679220][ T7567] BUG: KASAN: slab-out-of-bounds in fbcon_prepare_logo+0xa15/0xc80 [ 161.679262][ T7567] Read of size 10 at addr ffff88803552535a by task syz.1.438/7567 [ 161.679285][ T7567] [ 161.679295][ T7567] CPU: 1 UID: 0 PID: 7567 Comm: syz.1.438 Not tainted 6.14.0-rc3-syzkaller-00079-g87a132e73910 #0 [ 161.679324][ T7567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 161.679339][ T7567] Call Trace: [ 161.679347][ T7567] [ 161.679357][ T7567] dump_stack_lvl+0x116/0x1f0 [ 161.679388][ T7567] print_report+0xc3/0x670 [ 161.679428][ T7567] ? __virt_addr_valid+0x5e/0x590 [ 161.679453][ T7567] ? __phys_addr+0xc6/0x150 [ 161.679480][ T7567] kasan_report+0xd9/0x110 [ 161.679502][ T7567] ? fbcon_prepare_logo+0xa15/0xc80 [ 161.679536][ T7567] ? fbcon_prepare_logo+0xa15/0xc80 [ 161.679568][ T7567] kasan_check_range+0xef/0x1a0 [ 161.679595][ T7567] __asan_memcpy+0x23/0x60 [ 161.679626][ T7567] fbcon_prepare_logo+0xa15/0xc80 [ 161.679661][ T7567] fbcon_init+0xd41/0x1890 [ 161.679690][ T7567] ? __pfx_drm_fb_helper_set_par+0x10/0x10 [ 161.679719][ T7567] visual_init+0x31d/0x620 [ 161.679743][ T7567] do_bind_con_driver.isra.0+0x57a/0xbf0 [ 161.679776][ T7567] store_bind+0x61d/0x760 [ 161.679806][ T7567] ? __pfx_store_bind+0x10/0x10 [ 161.679839][ T7567] dev_attr_store+0x55/0x80 [ 161.679871][ T7567] ? __pfx_dev_attr_store+0x10/0x10 [ 161.679902][ T7567] sysfs_kf_write+0x117/0x170 [ 161.679929][ T7567] kernfs_fop_write_iter+0x33d/0x500 [ 161.679953][ T7567] ? __pfx_sysfs_kf_write+0x10/0x10 [ 161.679982][ T7567] vfs_write+0x5ae/0x1150 [ 161.680014][ T7567] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 161.680041][ T7567] ? __pfx___mutex_lock+0x10/0x10 [ 161.680071][ T7567] ? __pfx_vfs_write+0x10/0x10 [ 161.680108][ T7567] ksys_write+0x12b/0x250 [ 161.680139][ T7567] ? __pfx_ksys_write+0x10/0x10 [ 161.680175][ T7567] do_syscall_64+0xcd/0x250 [ 161.680205][ T7567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.680239][ T7567] RIP: 0033:0x7fb5a1d8cde9 [ 161.680259][ T7567] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 161.680283][ T7567] RSP: 002b:00007fb5a2c7a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 161.680307][ T7567] RAX: ffffffffffffffda RBX: 00007fb5a1fa5fa0 RCX: 00007fb5a1d8cde9 [ 161.680325][ T7567] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000003 [ 161.680340][ T7567] RBP: 00007fb5a1e0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 161.680357][ T7567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 161.680373][ T7567] R13: 0000000000000000 R14: 00007fb5a1fa5fa0 R15: 00007ffc2a0eb9e8 [ 161.680396][ T7567] [ 161.680406][ T7567] [ 161.680412][ T7567] Allocated by task 7567: [ 161.680424][ T7567] kasan_save_stack+0x33/0x60 [ 161.680456][ T7567] kasan_save_track+0x14/0x30 [ 161.680489][ T7567] __kasan_kmalloc+0xaa/0xb0 [ 161.680519][ T7567] __kmalloc_noprof+0x21c/0x510 [ 161.680552][ T7567] vc_do_resize+0x1e3/0x10f0 [ 161.680576][ T7567] fbcon_init+0xd1d/0x1890 [ 161.680604][ T7567] visual_init+0x31d/0x620 [ 161.680624][ T7567] do_bind_con_driver.isra.0+0x57a/0xbf0 [ 161.680650][ T7567] store_bind+0x61d/0x760 [ 161.680674][ T7567] dev_attr_store+0x55/0x80 [ 161.680702][ T7567] sysfs_kf_write+0x117/0x170 [ 161.680726][ T7567] kernfs_fop_write_iter+0x33d/0x500 [ 161.680749][ T7567] vfs_write+0x5ae/0x1150 [ 161.680777][ T7567] ksys_write+0x12b/0x250 [ 161.680805][ T7567] do_syscall_64+0xcd/0x250 [ 161.680839][ T7567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.680873][ T7567] [ 161.680880][ T7567] The buggy address belongs to the object at ffff888035525300 [ 161.680880][ T7567] which belongs to the cache kmalloc-64 of size 64 [ 161.680900][ T7567] The buggy address is located 30 bytes to the right of [ 161.680900][ T7567] allocated 60-byte region [ffff888035525300, ffff88803552533c) [ 161.680926][ T7567] [ 161.680932][ T7567] The buggy address belongs to the physical page: [ 161.680949][ T7567] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x35525 [ 161.680973][ T7567] ksm flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 161.680999][ T7567] page_type: f5(slab) [ 161.681021][ T7567] raw: 00fff00000000000 ffff88801b0418c0 ffffea0001f90a80 dead000000000003 [ 161.681042][ T7567] raw: 0000000000000000 0000000080200020 00000000f5000000 0000000000000000 [ 161.681057][ T7567] page dumped because: kasan: bad access detected [ 161.681073][ T7567] page_owner tracks the page as allocated [ 161.681081][ T7567] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5208, tgid 5208 (udevd), ts 108822971340, free_ts 103016402286 [ 161.681121][ T7567] post_alloc_hook+0x181/0x1b0 [ 161.681154][ T7567] get_page_from_freelist+0xfce/0x2f80 [ 161.681191][ T7567] __alloc_frozen_pages_noprof+0x221/0x2470 [ 161.681226][ T7567] alloc_pages_mpol+0x1fc/0x540 [ 161.681247][ T7567] new_slab+0x23d/0x330 [ 161.681274][ T7567] ___slab_alloc+0xc5d/0x1720 [ 161.681301][ T7567] __slab_alloc.constprop.0+0x56/0xb0 [ 161.681332][ T7567] __kmalloc_noprof+0x2ec/0x510 [ 161.681363][ T7567] tomoyo_encode2+0x100/0x3e0 [ 161.681394][ T7567] tomoyo_encode+0x29/0x50 [ 161.681422][ T7567] tomoyo_realpath_from_path+0x19d/0x720 [ 161.681454][ T7567] tomoyo_path_perm+0x276/0x460 [ 161.681478][ T7567] security_file_truncate+0x84/0x1e0 [ 161.681508][ T7567] path_openat+0xc8c/0x2d80 [ 161.681539][ T7567] do_filp_open+0x20c/0x470 [ 161.681569][ T7567] do_sys_openat2+0x17a/0x1e0 [ 161.681591][ T7567] page last free pid 5839 tgid 5839 stack trace: [ 161.681605][ T7567] free_frozen_pages+0x6db/0xfb0 [ 161.681636][ T7567] __put_partials+0x14c/0x170 [ 161.681665][ T7567] qlist_free_all+0x4e/0x120 [ 161.681695][ T7567] kasan_quarantine_reduce+0x195/0x1e0 [ 161.681725][ T7567] __kasan_slab_alloc+0x69/0x90 [ 161.681757][ T7567] kmem_cache_alloc_noprof+0x226/0x3d0 [ 161.681789][ T7567] vm_area_dup+0x21/0x2f0 [ 161.681822][ T7567] copy_process+0x776f/0x8c50 [ 161.681850][ T7567] kernel_clone+0xfd/0x960 [ 161.681871][ T7567] __do_sys_clone+0xcf/0x120 [ 161.681893][ T7567] do_syscall_64+0xcd/0x250 [ 161.681921][ T7567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.681953][ T7567] [ 161.681959][ T7567] Memory state around the buggy address: [ 161.681973][ T7567] ffff888035525200: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 161.681990][ T7567] ffff888035525280: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 161.682007][ T7567] >ffff888035525300: 00 00 00 00 00 00 00 04 fc fc fc fc fc fc fc fc [ 161.682020][ T7567] ^ [ 161.682034][ T7567] ffff888035525380: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 161.682051][ T7567] ffff888035525400: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 161.682064][ T7567] ================================================================== [ 161.690499][ T7567] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 161.690520][ T7567] CPU: 1 UID: 0 PID: 7567 Comm: syz.1.438 Not tainted 6.14.0-rc3-syzkaller-00079-g87a132e73910 #0 [ 161.690551][ T7567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 161.690567][ T7567] Call Trace: [ 161.690575][ T7567] [ 161.690585][ T7567] dump_stack_lvl+0x3d/0x1f0 [ 161.690621][ T7567] panic+0x71d/0x800 [ 161.690648][ T7567] ? __pfx_panic+0x10/0x10 [ 161.690677][ T7567] ? preempt_schedule_thunk+0x1a/0x30 [ 161.690711][ T7567] ? preempt_schedule_common+0x44/0xc0 [ 161.690742][ T7567] check_panic_on_warn+0xab/0xb0 [ 161.690770][ T7567] end_report+0x117/0x180 [ 161.690805][ T7567] kasan_report+0xe9/0x110 [ 161.690833][ T7567] ? fbcon_prepare_logo+0xa15/0xc80 [ 161.690867][ T7567] ? fbcon_prepare_logo+0xa15/0xc80 [ 161.690902][ T7567] kasan_check_range+0xef/0x1a0 [ 161.690930][ T7567] __asan_memcpy+0x23/0x60 [ 161.690962][ T7567] fbcon_prepare_logo+0xa15/0xc80 [ 161.690996][ T7567] fbcon_init+0xd41/0x1890 [ 161.691025][ T7567] ? __pfx_drm_fb_helper_set_par+0x10/0x10 [ 161.691054][ T7567] visual_init+0x31d/0x620 [ 161.691078][ T7567] do_bind_con_driver.isra.0+0x57a/0xbf0 [ 161.691111][ T7567] store_bind+0x61d/0x760 [ 161.691141][ T7567] ? __pfx_store_bind+0x10/0x10 [ 161.691167][ T7567] dev_attr_store+0x55/0x80 [ 161.691198][ T7567] ? __pfx_dev_attr_store+0x10/0x10 [ 161.691228][ T7567] sysfs_kf_write+0x117/0x170 [ 161.691257][ T7567] kernfs_fop_write_iter+0x33d/0x500 [ 161.691281][ T7567] ? __pfx_sysfs_kf_write+0x10/0x10 [ 161.691309][ T7567] vfs_write+0x5ae/0x1150 [ 161.691339][ T7567] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 161.691364][ T7567] ? __pfx___mutex_lock+0x10/0x10 [ 161.691405][ T7567] ? __pfx_vfs_write+0x10/0x10 [ 161.691447][ T7567] ksys_write+0x12b/0x250 [ 161.691480][ T7567] ? __pfx_ksys_write+0x10/0x10 [ 161.691517][ T7567] do_syscall_64+0xcd/0x250 [ 161.691552][ T7567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.691585][ T7567] RIP: 0033:0x7fb5a1d8cde9 [ 161.691604][ T7567] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 161.691629][ T7567] RSP: 002b:00007fb5a2c7a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 161.691655][ T7567] RAX: ffffffffffffffda RBX: 00007fb5a1fa5fa0 RCX: 00007fb5a1d8cde9 [ 161.691673][ T7567] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000003 [ 161.691689][ T7567] RBP: 00007fb5a1e0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 161.691705][ T7567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 161.691721][ T7567] R13: 0000000000000000 R14: 00007fb5a1fa5fa0 R15: 00007ffc2a0eb9e8 [ 161.691744][ T7567] [ 161.691876][ T7567] Kernel Offset: disabled