last executing test programs: 6.455804736s ago: executing program 3 (id=777): mmap$auto(0x10, 0x20009, 0x4000000000e3, 0xeb1, 0xffffffffffffffff, 0x8400) socket(0xa, 0x1, 0x100) r0 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x101100, 0x0) ioctl$auto_SW_SYNC_GET_DEADLINE(r0, 0xc0105702, &(0x7f0000000000)={0x0, 0x0, r0}) ioperm$auto(0x5, 0x0, 0x1) modify_ldt$auto(0x1, 0x0, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40, 0x0) r2 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) pread64$auto(r2, &(0x7f0000000040)='\x00\x00\x00\x88\xde\x90\a\'\x9bM\xa0\x848\xbbz(\xe9\x05<\x82\xfe\xe2\xf6 \x0f8\xfb\xa7\xb4\xa0\x9e\xcb\xec\x9e{W\xed>\xe7l\xcb\x90\\/\x84\x99!*\xe3\x99}x\xd4\xa5D\xfa\xe5\xf9od^\xa6', 0x7ff, 0x400) r3 = socket(0x1e, 0xa, 0x7) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket(0x21, 0x3, 0x9) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000180)={[0x1ff, 0x7, 0xd, 0xf, 0x948d, 0x4, 0x15f4da0a, 0x3, 0x1, 0x62, 0x80000001, 0x4, 0x1, 0x9, 0x1, 0xffffffffffdffffe]}, 0x0) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0xd48b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x29, 0x2, 0x6]}, 0x0) mmap$auto(0x7, 0x20009, 0x5, 0xeb1, 0x405, 0x8000) write$auto(0x3, 0x0, 0xffd8) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c050}, 0x4c89c) mmap$auto(0x4, 0x5, 0x2, 0x9b73, r1, 0x8000) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x50b41, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) mount$auto(0x0, &(0x7f0000001500)='./file0\x00', &(0x7f0000001540)='cifs\x00', 0x8002, 0x0) mmap$auto(0x0, 0x20009, 0x4, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x10, 0x7) listen$auto(0x3, 0x8d) setxattrat$auto(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, 0x4c) 5.792821772s ago: executing program 3 (id=780): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r0 = socket$nl_generic(0x10, 0x3, 0x10) statmount$auto(0x0, &(0x7f0000000440)={0x8, 0x1, 0x9, 0x3, 0x13, 0x940, 0x1ffe0, 0x3, 0x6, 0x2, 0x9, 0x5, 0x2, 0x7, 0xb0, 0x9, 0x5, 0x3, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0xfffffffffffffffc], "e3f55e4acc2b2dc2188ab4a133a5a0329f8ff754691b7b2cee79400e4e9a2c45ff7a83839b0d69b635fe6528926c4d014f85c7e4048904fbf55f6edba7800ca3a1335f5af91a4b2dffbc10c30252fdb03ef4bca05d01d460655ac0111e20cf671566e2374ead67fb1c3ed7ddb087fe8ff33ed8c239e94d2e"}, 0x1fe, 0x81) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2, 0x1, 0x106) r2 = socket(0xf, 0x3, 0x2) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendmsg$auto_THERMAL_GENL_CMD_CDEV_GET(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20046000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20044101}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) pwrite64$auto(0xc8, &(0x7f0000000180)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x1f\a/\x00\x03\x00\xfd\xfdX\xd3\x1d\xf8\xbebZ\xddL\x01\x00\x00\xff^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x88\v\xae\xa9i8W\xe5\x00!\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00v\xd9\xe5H.-\x14\xee\xbc\xae\xe1\x85\xb2b\xd42\x89\x05e\x03z\xe6q\xcd\x91\tM\xd2\x90\xc91\xd9\x86\xe4\x8e\x0fI\xf0b2\nfa\xb8\x1a\xdb\xaa0P\xca\xb2W\xe3\x14\xb9Cx\x0e4\xc9\xb4\xdc4\xe3\x8f\x1c\xa5\x89\x8d\x84V\x97dg \x9f\xcd\x8fA\x16\x01\xc5.\x7fG\x86L\xa4\xd6h\xea\x11x\xce\x96t\xc7~# )\x8c6\x06\xd7\xfcu\x8c{t\xa5\x92JW\x8b\xb3Oj%\xb5H\x91F\x1b\x01\xef\x0e\xc5\xac\xcfK\xd5\x98\xce\xd6?\t\xa8\xb7\xce\x87\xdb\xb0\xaa\x8al8qF\re\xa7\xda\x1f\x9ad\b!\xddBD\xd9', 0x3d, 0x7a) bind$auto(r2, 0x0, 0x4) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv6/conf/default/ignore_routes_with_linkdown\x00', 0x42a81, 0x0) r5 = io_uring_setup$auto(0x4, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) futex_wait$auto(0x0, 0x0, 0x7f, 0x2, 0x0, 0x1) futex_wake$auto(0x0, 0x8, 0x7, 0x2) setsockopt$auto(r5, 0x104000000000010e, 0x1, 0x0, 0x16) pwrite64$auto(r4, &(0x7f0000000000)='/proc/sys/net/ipv6/coX\t/all/forwarding\x00', 0x7, 0x1) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000003b40)={'veth0_to_hsr\x00', 0x0}) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYRES16=r6], 0x1ac}}, 0x40001) ioctl$auto_XFS_IOC_ALLOCSP(0xffffffffffffffff, 0x4030580a, &(0x7f0000000000)={0x61c, 0xcb5, 0x5, 0xfffffffffffffe00, 0x2, 0xffffffffffffffff}) 4.80555831s ago: executing program 3 (id=785): close_range$auto(0x0, 0xfffffffffffff000, 0x2) mmap$auto(0x0, 0x8000, 0xdf, 0xeb1, 0x401, 0x400000008000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/bonding/all_slaves_active\x00', 0xb02, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x3, 0xa) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x201, 0x0) open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x80842, 0x91) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x86) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x2, 0x80002, 0x73) socket(0x2, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_trace_options_core_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/options/hash-ptr\x00', 0x10b000, 0x0) openat$auto_event_trigger_fops_trace(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/trigger\x00', 0x1, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r1 = openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000200), 0xc02, 0x0) write$auto(r1, 0x0, 0xc3) shutdown$auto(r0, 0x7) 4.596048646s ago: executing program 3 (id=788): openat$auto_proc_environ_operations_base(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/environ\x00', 0x60100, 0x0) mmap$auto(0x3, 0x4, 0x5, 0xeb1, 0xffffffffffffffff, 0x10) socket(0xa, 0x1, 0x100) r0 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x70200, 0x0) ioctl$auto_SW_SYNC_GET_DEADLINE(r0, 0xc0105702, &(0x7f0000000000)={0x0, 0x0, r0}) ioperm$auto(0x7, 0x1, 0x7) modify_ldt$auto(0x1, 0x0, 0x10) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40, 0x0) r2 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) pread64$auto(r2, &(0x7f0000000040)='\x00\x00\x00\x88\xde\x90\a\'\x9bM\xa0\x848\xbbz(\xe9\x05<\x82\xfe\xe2\xf6 \x0f8\xfb\xa7\xb4\xa0\x9e\xcb\xec\x9e{W\xed>\xe7l\xcb\x90\\/\x84\x99!*\xe3\x99}x\xd4\xa5D\xfa\xe5\xf9od^\xa6', 0x7ff, 0x400) socket(0x1e, 0xa, 0x7) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket(0x21, 0x3, 0x9) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1fe, 0x7, 0x11, 0x8fd6, 0x400, 0x3, 0x15f0da0a, 0x7, 0xffff, 0x62, 0x80000201, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x4, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) mmap$auto(0x7, 0x20009, 0x5, 0xeb1, 0x405, 0x8000) write$auto(0x3, 0x0, 0xffd8) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc850}, 0x8800) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x50b41, 0x0) msync$auto(0x1ffff000, 0x180080000000001, 0x400000004) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) mount$auto(0x0, &(0x7f0000001500)='./file0\x00', &(0x7f0000001540)='cifs\x00', 0x8002, 0x0) mmap$auto(0x5, 0x8454, 0x4000000000df, 0xeb1, r1, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x0, 0x10, 0x1) listen$auto(0x3, 0x8d) setxattrat$auto(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, 0x4c) 3.957438697s ago: executing program 1 (id=793): close_range$auto(0x0, 0xfffffffffffff000, 0x2) mmap$auto(0x0, 0x8000, 0xdf, 0xeb1, 0x401, 0x400000008000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/bonding/all_slaves_active\x00', 0xb02, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x3, 0xa) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x201, 0x0) open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x80842, 0x91) r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, 0x0, 0x2dc08f24db163610, 0x0) openat$auto_drm_edid_fops_drm_debugfs(0xffffffffffffff9c, 0x0, 0x40901, 0x0) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0xd4, 0x1, 0x6, 0x0, 0x1, 0x368e, 0x2, {0x100000000, 0x10000}, 0x5, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x9, 0x81, 0xdfffffffffff628e, 0x6, 0xdeb1, 0x808}) socket(0x2b, 0x1, 0x1) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D1\x00', 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0xa3db) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x4a801, 0x0) mmap$auto(0x2, 0x2020009, 0x3, 0xeb5, 0xfffffffffffffffb, 0x10) openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, 0x0, 0x12000, 0x0) socket(0x3, 0x5, 0x5) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mtd0ro\x00', 0x2000, 0x0) sendmsg$auto_SMC_NETLINK_DISABLE_SEID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="0157"], 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x810) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_hsr(&(0x7f00000002c0), 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/btrfs/features/extended_iref\x00', 0x18b440, 0x0) read$auto(r2, 0x0, 0x9) r3 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010029bd700001dcdf2503000000040006000c000180080010000400"], 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x800) 3.430972141s ago: executing program 1 (id=794): socket(0x2a, 0x2, 0x0) getpeername$auto(0x3, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_split_huge_pages_fops_huge_memory(0xffffffffffffff9c, &(0x7f00000000c0), 0x642, 0x0) write$auto_split_huge_pages_fops_huge_memory(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001180), 0xffffffffffffffff) r1 = openat$auto_proc_pid_attr_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x1, 0x0) write$auto(r1, 0x0, 0x5) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event0\x00', 0x80, 0x0) fcntl$auto(0x3, 0x4, 0xa553) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev5\x00', 0x280, 0x0) epoll_pwait2$auto(0xffffffffffffffff, 0x0, 0xeda, 0x0, &(0x7f0000000200), 0x8) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/v4l-subdev0\x00', 0x8100, 0x0) capset$auto(&(0x7f00000002c0)={0x6}, &(0x7f00000001c0)={0x7fffffff, 0x8, 0x9}) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0x10, 0x2, 0x4) socket(0x10, 0x3, 0x6) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x100, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x10, 0x2, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x10, 0x3, 0x6) r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYRES32=r4, @ANYRES16=r5, @ANYRES8=r3, @ANYRES32, @ANYRES8=r2, @ANYRES32=r3, @ANYBLOB="0800fb00", @ANYRES32=r4], 0x2f0}, 0x1, 0x0, 0x0, 0x40000}, 0x50) 3.2592506s ago: executing program 1 (id=795): mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20b42, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r0 = openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/clear_refs\x00', 0x2, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB=']'], 0x1ac}}, 0x40000) recvmmsg$auto(r1, 0x0, 0xfffffff9, 0x10, 0x0) write$auto_proc_clear_refs_operations_internal(r0, 0x0, 0xffffff4b) getrandom$auto(0x0, 0x6000000, 0x3) 2.081923848s ago: executing program 0 (id=800): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x1, 0x5, 0x106) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc2481, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xde, 0x10, 0x401, 0xd) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) socket(0x2, 0x1, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x80000, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) sendto$auto(0x3, 0x0, 0x18, 0x101, 0x0, 0x1c) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmsg$auto_NL80211_CMD_ASSOC_MLO_RECONF(r0, 0x0, 0x80) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) close_range$auto(0x2, 0xa, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x1000) rseq$auto(&(0x7f0000000340)={0x400010, 0x80000000, 0x67, 0x98, 0x400007, 0x1ff}, 0x0, 0x11, 0x6) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) statmount$auto(&(0x7f0000000000)={0x7e, @raw, 0x80000028, 0x6, 0x2}, 0x0, 0x227, 0x0) rseq$auto(&(0x7f0000000040)={0xa7ca, 0x100, 0x5, 0x7f, 0x41, 0x3, "a79df4dc80c64e78c1a2e3bc3a188d2d5797f86f5375ceff07215ae0d2a9bd9a34088eb6e07fc405a7dc90b465a7012eccc85945323516e5020abdd117635c9a870557f7a2174d5d2c3ec8c34bdbb167124ac7ca7a699f493c3c6c651051c3bc81993c26366be39992b8c91dcca5cba6b3afde653209b8bcb2d739edcc675b77a804215175996c85ab44468f921e232f5348096e1e9d1e505919fa4ed7746e84b4556d893e2f635d5d12d51145c6ce4c062827a3afd1da8519d8dc389f88a78fb8e8b7413175ae33e9ac257d9e919ce4357f8668c3f26b5746d03fab9ed9cd6999f41d17566799706444f104aa9856"}, 0x3, 0x4, 0x1) fanotify_init$auto(0x65, 0x2) socket(0x10, 0x80002, 0x8) 2.080239715s ago: executing program 2 (id=801): pwrite64$auto(0xc8, &(0x7f0000000340)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdds\x1cJ\x99\x00:+\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\xadCl\x9e\xeb\xcd\vp\x99\x00\xc8\x06\xa5\xdc3\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0A\x94\xa3\xaef\x87\xd8\x95I\xfd\xa8\t\xac\x87\xb7\x1d\xd5\x83\xdcyu]\xde\xbe\xbf$<.}\x8b`\x04\xfc\xa2\xab\xb5]\x80\x00\xb9D\xc5\xbc\xf2a\xd66\xa5\xd3\xc1r\x96\x1e\x8db\x05=`\x01\x11\x04Tz\x87A$\x115\x95PUf\xa7\xfe\x19\x00\x82go}@W\xd5\xaej\x01\xbf>5n\x17S\xc0\x8a\xaf%O\xd1W\xa3ua+sUJ\xea\xf9\xb7p-\x128\x9d\xbaM_\xff\x1c\xc3sG\x04\xf2\xd3\xf3{;\xd4\xd7\x1c\x1dZ\xe9\xe9\xc9\x9cu5\xe9\xa2\xb3N\xd2\xc1\xc8\xa5\xadt\xd5BKD\x86\xeb%\a*\x06\xbb\x1e\xfb\x11U\f&\xcbP\xf1\xcf\xccb\xe8Wb\xc5ae\xe3\xf9l\xa9vK\xed\x8cL\xfb%g\x83;\xe1\xe2w\xd6\xaa6\x16\x8fx\x1a\xd7\xc8\xf4[\xbc\b\xe1Z\x92\x14Q\xde5n\x17S\xc0\x8a\xaf%O\xd1W\xa3ua+sUJ\xea\xf9\xb7p-\x128\x9d\xbaM_\xff\x1c\xc3sG\x04\xf2\xd3\xf3{;\xd4\xd7\x1c\x1dZ\xe9\xe9\xc9\x9cu5\xe9\xa2\xb3N\xd2\xc1\xc8\xa5\xadt\xd5BKD\x86\xeb%\a*\x06\xbb\x1e\xfb\x11U\f&\xcbP\xf1\xcf\xccb\xe8Wb\xc5ae\xe3\xf9l\xa9vK\xed\x8cL\xfb%g\x83;\xe1\xe2w\xd6\xaa6\x16\x8fx\x1a\xd7\xc8\xf4[\xbc\b\xe1Z\x92\x14Q\xde\xe7l\xcb\x90\\/\x84\x99!*\xe3\x99}x\xd4\xa5D\xfa\xe5\xf9od^\xa6', 0x7ff, 0x400) socket(0x1e, 0xa, 0x7) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/midiC2D1\x00', 0x410000, 0x0) socket(0x21, 0x3, 0x9) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x7ff, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) mmap$auto(0x7, 0x20009, 0x5, 0xeb1, 0x405, 0x8000) write$auto(0x3, 0x0, 0xffd8) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc850}, 0x8800) mmap$auto(0x0, 0x3, 0x2, 0x9b73, r1, 0x7ffc) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x50b41, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) mount$auto(0x0, &(0x7f0000001500)='./file0\x00', &(0x7f0000001540)='cifs\x00', 0x8002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x10, 0x7) listen$auto(0x3, 0x8d) setxattrat$auto(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, 0x4c) 68.99177ms ago: executing program 0 (id=815): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x1, 0x5, 0x106) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc2481, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xde, 0x10, 0x401, 0xd) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) socket(0x2, 0x1, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x80000, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) sendto$auto(0x3, 0x0, 0x18, 0x101, 0x0, 0x1c) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmsg$auto_NL80211_CMD_ASSOC_MLO_RECONF(r0, 0x0, 0x80) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) close_range$auto(0x2, 0xa, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x1000) rseq$auto(&(0x7f0000000340)={0x400010, 0x80000000, 0x67, 0x98, 0x400007, 0x1ff}, 0x0, 0x11, 0x6) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) statmount$auto(&(0x7f0000000000)={0x7e, @raw, 0x80000028, 0x6, 0x2}, 0x0, 0x227, 0x0) rseq$auto(&(0x7f0000000040)={0xa7ca, 0x100, 0x5, 0x7f, 0x41, 0x3, "a79df4dc80c64e78c1a2e3bc3a188d2d5797f86f5375ceff07215ae0d2a9bd9a34088eb6e07fc405a7dc90b465a7012eccc85945323516e5020abdd117635c9a870557f7a2174d5d2c3ec8c34bdbb167124ac7ca7a699f493c3c6c651051c3bc81993c26366be39992b8c91dcca5cba6b3afde653209b8bcb2d739edcc675b77a804215175996c85ab44468f921e232f5348096e1e9d1e505919fa4ed7746e84b4556d893e2f635d5d12d51145c6ce4c062827a3afd1da8519d8dc389f88a78fb8e8b7413175ae33e9ac257d9e919ce4357f8668c3f26b5746d03fab9ed9cd6999f41d17566799706444f104aa9856"}, 0x3, 0x4, 0x1) fanotify_init$auto(0x65, 0x2) socket(0x10, 0x80002, 0x8) 0s ago: executing program 2 (id=816): io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0xf, 0x29f, 0x100, 0x83, 0x7, 0x6, 0x2}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x76c5, 0x8, 0x100000000}}) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = socket(0x2, 0x3, 0xa) r3 = getsockopt$auto(r2, 0x0, 0x30, 0x0, 0x0) ioctl$auto_SNDCTL_DSP_GETISPACE(r1, 0x8010500d, &(0x7f0000000040)) r4 = socket(0x10, 0x2, 0x0) sigaltstack$auto(&(0x7f0000000180)={&(0x7f00000000c0), 0x0, 0x2}, &(0x7f0000000280)={0x0, 0x9}) sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) ioctl$auto_USBDEVFS_FREE_STREAMS(r3, 0x8008551d, &(0x7f0000000140)=ANY=[@ANYBLOB="0500000000010000792a92b6dc41157ae1806ffd12d2d679483a503695ba5a23bd352b07767204f6ec062791ad74ae400f4eb54f8bd1278a8da3dda9f359c910b84b4bbeea269613b3889a3448f8cb905ff1d11351376916e7f344af7df5e451a4e6bec2d63331b6347fe5e9"]) ioctl$auto_PPPIOCATTCHAN(r0, 0x40047438, &(0x7f0000000000)=0xb6) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0xf, 0x29f, 0x100, 0x83, 0x7, 0x6, 0x2}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x76c5, 0x8, 0x100000000}}) (async) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) socket(0x2, 0x3, 0xa) (async) getsockopt$auto(r2, 0x0, 0x30, 0x0, 0x0) (async) ioctl$auto_SNDCTL_DSP_GETISPACE(r1, 0x8010500d, &(0x7f0000000040)) (async) socket(0x10, 0x2, 0x0) (async) sigaltstack$auto(&(0x7f0000000180)={&(0x7f00000000c0), 0x0, 0x2}, &(0x7f0000000280)={0x0, 0x9}) (async) sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) (async) ioctl$auto_USBDEVFS_FREE_STREAMS(r3, 0x8008551d, &(0x7f0000000140)=ANY=[@ANYBLOB="0500000000010000792a92b6dc41157ae1806ffd12d2d679483a503695ba5a23bd352b07767204f6ec062791ad74ae400f4eb54f8bd1278a8da3dda9f359c910b84b4bbeea269613b3889a3448f8cb905ff1d11351376916e7f344af7df5e451a4e6bec2d63331b6347fe5e9"]) (async) ioctl$auto_PPPIOCATTCHAN(r0, 0x40047438, &(0x7f0000000000)=0xb6) (async) kernel console output (not intermixed with test programs): 7f83c2f8e169 [ 288.549917][ T6454] RDX: 0000000000000003 RSI: 0000000002020009 RDI: 0000000000000000 [ 288.549939][ T6454] RBP: 00007f83c3010a68 R08: fffffffffffffffa R09: 0000000000008000 [ 288.549977][ T6454] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 288.549995][ T6454] R13: 0000000000000000 R14: 00007f83c31b5fa0 R15: 00007fffc41737a8 [ 288.550036][ T6454] [ 288.824583][ T6457] CIFS mount error: No usable UNC path provided in device string! [ 288.824583][ T6457] [ 288.834732][ T6457] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 288.894494][ T6459] bridge0: port 3(syz_tun) entered blocking state [ 288.901152][ T6459] bridge0: port 3(syz_tun) entered disabled state [ 288.907783][ T6459] syz_tun: entered allmulticast mode [ 288.914863][ T6459] syz_tun: entered promiscuous mode [ 288.920925][ T6459] bridge0: port 3(syz_tun) entered blocking state [ 288.927828][ T6459] bridge0: port 3(syz_tun) entered forwarding state [ 289.117684][ T6464] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input5 [ 289.350333][ T6468] netlink: 8 bytes leftover after parsing attributes in process `syz.0.115'. [ 289.590526][ T30] audit: type=1326 audit(6039880695.182:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6476 comm="syz.3.117" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f33e838e169 code=0x0 [ 289.644814][ T6480] FAULT_INJECTION: forcing a failure. [ 289.644814][ T6480] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 289.677096][ T6480] CPU: 0 UID: 0 PID: 6480 Comm: syz.3.117 Not tainted 6.15.0-rc2-syzkaller-00087-gcfb2e2c57aef #0 PREEMPT(full) [ 289.677133][ T6480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 289.677149][ T6480] Call Trace: [ 289.677158][ T6480] [ 289.677168][ T6480] dump_stack_lvl+0x16c/0x1f0 [ 289.677214][ T6480] should_fail_ex+0x512/0x640 [ 289.677251][ T6480] _copy_from_user+0x2e/0xd0 [ 289.677288][ T6480] comm_write+0xc4/0x2f0 [ 289.677326][ T6480] ? __pfx_comm_write+0x10/0x10 [ 289.677371][ T6480] ? __pfx_comm_write+0x10/0x10 [ 289.677408][ T6480] vfs_writev+0x6c4/0xdc0 [ 289.677443][ T6480] ? __pfx___mutex_trylock_common+0x10/0x10 [ 289.677483][ T6480] ? __pfx_vfs_writev+0x10/0x10 [ 289.677519][ T6480] ? __mutex_lock+0x1ca/0xb90 [ 289.677568][ T6480] ? __pfx___mutex_lock+0x10/0x10 [ 289.677624][ T6480] ? __fget_files+0x20e/0x3c0 [ 289.677672][ T6480] ? __fget_files+0x180/0x3c0 [ 289.677722][ T6480] ? do_writev+0x132/0x330 [ 289.677756][ T6480] do_writev+0x132/0x330 [ 289.677791][ T6480] ? __pfx_do_writev+0x10/0x10 [ 289.677858][ T6480] do_syscall_64+0xcd/0x260 [ 289.677917][ T6480] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.677946][ T6480] RIP: 0033:0x7f33e838e169 [ 289.677967][ T6480] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 289.677993][ T6480] RSP: 002b:00007f33e921e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 289.678018][ T6480] RAX: ffffffffffffffda RBX: 00007f33e85b6080 RCX: 00007f33e838e169 [ 289.678036][ T6480] RDX: 0000000000000007 RSI: 0000200000000200 RDI: 0000000000000003 [ 289.678069][ T6480] RBP: 00007f33e921e090 R08: 0000000000000000 R09: 0000000000000000 [ 289.678087][ T6480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 289.678105][ T6480] R13: 0000000000000001 R14: 00007f33e85b6080 R15: 00007ffea30899d8 [ 289.678144][ T6480] [ 289.691257][ T6469] netlink: 8 bytes leftover after parsing attributes in process `syz.0.115'. [ 289.953682][ T6481] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 290.590517][ T6502] dlm: non-version read from control device 97 [ 290.837549][ T6511] netlink: 330 bytes leftover after parsing attributes in process `syz.3.124'. [ 290.846075][ T6504] FAULT_INJECTION: forcing a failure. [ 290.846075][ T6504] name failslab, interval 1, probability 0, space 0, times 0 [ 290.904774][ T6504] CPU: 1 UID: 0 PID: 6504 Comm: syz.1.121 Not tainted 6.15.0-rc2-syzkaller-00087-gcfb2e2c57aef #0 PREEMPT(full) [ 290.904808][ T6504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 290.904821][ T6504] Call Trace: [ 290.904830][ T6504] [ 290.904839][ T6504] dump_stack_lvl+0x16c/0x1f0 [ 290.904883][ T6504] should_fail_ex+0x512/0x640 [ 290.904912][ T6504] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 290.904954][ T6504] should_failslab+0xc2/0x120 [ 290.904980][ T6504] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 290.905014][ T6504] ? __pfx_acct_collect+0x10/0x10 [ 290.905037][ T6504] ? taskstats_exit+0x654/0xbe0 [ 290.905064][ T6504] taskstats_exit+0x654/0xbe0 [ 290.905092][ T6504] ? __pfx_taskstats_exit+0x10/0x10 [ 290.905126][ T6504] do_exit+0x85f/0x2c30 [ 290.905146][ T6504] ? __pfx_futex_wake_mark+0x10/0x10 [ 290.905176][ T6504] ? __pfx_do_exit+0x10/0x10 [ 290.905217][ T6504] ? do_raw_spin_lock+0x12c/0x2b0 [ 290.905255][ T6504] ? find_held_lock+0x2b/0x80 [ 290.905295][ T6504] do_group_exit+0xd3/0x2a0 [ 290.905319][ T6504] get_signal+0x2673/0x26d0 [ 290.905357][ T6504] ? fd_install+0x225/0x750 [ 290.905399][ T6504] ? __pfx_get_signal+0x10/0x10 [ 290.905433][ T6504] ? do_futex+0x122/0x350 [ 290.905471][ T6504] ? __pfx_do_futex+0x10/0x10 [ 290.905511][ T6504] arch_do_signal_or_restart+0x8f/0x7d0 [ 290.905553][ T6504] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 290.905606][ T6504] ? rcu_is_watching+0x12/0xc0 [ 290.905663][ T6504] syscall_exit_to_user_mode+0x150/0x2a0 [ 290.905706][ T6504] do_syscall_64+0xda/0x260 [ 290.905749][ T6504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.905777][ T6504] RIP: 0033:0x7f51d6d8e169 [ 290.905799][ T6504] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 290.905824][ T6504] RSP: 002b:00007f51d7bee0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 290.905850][ T6504] RAX: fffffffffffffe00 RBX: 00007f51d6fb6088 RCX: 00007f51d6d8e169 [ 290.905868][ T6504] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f51d6fb6088 [ 290.905884][ T6504] RBP: 00007f51d6fb6080 R08: 0000000000000000 R09: 0000000000000000 [ 290.905900][ T6504] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f51d6fb608c [ 290.905916][ T6504] R13: 0000000000000000 R14: 00007fff67a5dd90 R15: 00007fff67a5de78 [ 290.905950][ T6504] [ 291.722805][ T30] audit: type=1326 audit(6039880697.282:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6527 comm="syz.3.130" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f33e838e169 code=0x0 [ 291.752036][ T6531] FAULT_INJECTION: forcing a failure. [ 291.752036][ T6531] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 291.805284][ T6531] CPU: 1 UID: 0 PID: 6531 Comm: syz.3.130 Not tainted 6.15.0-rc2-syzkaller-00087-gcfb2e2c57aef #0 PREEMPT(full) [ 291.805320][ T6531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 291.805335][ T6531] Call Trace: [ 291.805344][ T6531] [ 291.805354][ T6531] dump_stack_lvl+0x16c/0x1f0 [ 291.805398][ T6531] should_fail_ex+0x512/0x640 [ 291.805434][ T6531] should_fail_alloc_page+0xe7/0x130 [ 291.805462][ T6531] prepare_alloc_pages+0x3c2/0x610 [ 291.805495][ T6531] ? look_up_lock_class+0x59/0x150 [ 291.805538][ T6531] __alloc_frozen_pages_noprof+0x18f/0x23a0 [ 291.805589][ T6531] ? __lock_acquire+0xaa4/0x1ba0 [ 291.805623][ T6531] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 291.805702][ T6531] ? find_held_lock+0x2b/0x80 [ 291.805740][ T6531] ? process_measurement+0x51f/0x2360 [ 291.805782][ T6531] ? down_write+0x14d/0x200 [ 291.805807][ T6531] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 291.805841][ T6531] ? policy_nodemask+0xea/0x4e0 [ 291.805871][ T6531] alloc_pages_mpol+0x1fb/0x550 [ 291.805899][ T6531] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 291.805937][ T6531] alloc_pages_noprof+0x131/0x390 [ 291.805965][ T6531] __pmd_alloc+0x3f/0x870 [ 291.805997][ T6531] ? find_held_lock+0x2b/0x80 [ 291.806035][ T6531] __handle_mm_fault+0x948/0x2a40 [ 291.806120][ T6531] ? __pfx___handle_mm_fault+0x10/0x10 [ 291.806191][ T6531] ? find_vma+0xbf/0x140 [ 291.806230][ T6531] ? __pfx_find_vma+0x10/0x10 [ 291.806270][ T6531] handle_mm_fault+0x3fe/0xad0 [ 291.806328][ T6531] do_user_addr_fault+0x7a6/0x1370 [ 291.806372][ T6531] ? rcu_is_watching+0x12/0xc0 [ 291.806416][ T6531] exc_page_fault+0x5c/0xc0 [ 291.806461][ T6531] asm_exc_page_fault+0x26/0x30 [ 291.806492][ T6531] RIP: 0010:rep_movs_alternative+0xf/0x90 [ 291.806529][ T6531] Code: c4 10 c3 cc cc cc cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 66 [ 291.806558][ T6531] RSP: 0018:ffffc900194afbb8 EFLAGS: 00050202 [ 291.806583][ T6531] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000002 [ 291.806601][ T6531] RDX: fffff52003295f82 RSI: 0000000000000000 RDI: ffffc900194afc08 [ 291.806619][ T6531] RBP: 0000000000000002 R08: 0000000000000001 R09: fffff52003295f81 [ 291.806637][ T6531] R10: ffffc900194afc09 R11: 0000000000000000 R12: 0000000000000000 [ 291.806655][ T6531] R13: ffffc900194afc08 R14: ffff888023e4f018 R15: 0000000000000002 [ 291.806698][ T6531] _copy_from_user+0x98/0xd0 [ 291.806740][ T6531] comm_write+0xc4/0x2f0 [ 291.806782][ T6531] ? __pfx_comm_write+0x10/0x10 [ 291.806835][ T6531] ? __pfx_comm_write+0x10/0x10 [ 291.806876][ T6531] vfs_writev+0x6c4/0xdc0 [ 291.806914][ T6531] ? __pfx___mutex_trylock_common+0x10/0x10 [ 291.806958][ T6531] ? __pfx_vfs_writev+0x10/0x10 [ 291.806999][ T6531] ? __mutex_lock+0x1ca/0xb90 [ 291.807055][ T6531] ? __pfx___mutex_lock+0x10/0x10 [ 291.807118][ T6531] ? __fget_files+0x20e/0x3c0 [ 291.807161][ T6531] ? __fget_files+0x180/0x3c0 [ 291.807233][ T6531] ? do_writev+0x132/0x330 [ 291.807282][ T6531] do_writev+0x132/0x330 [ 291.807319][ T6531] ? __pfx_do_writev+0x10/0x10 [ 291.807369][ T6531] do_syscall_64+0xcd/0x260 [ 291.807414][ T6531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.807442][ T6531] RIP: 0033:0x7f33e838e169 [ 291.807490][ T6531] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 291.807517][ T6531] RSP: 002b:00007f33e921e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 291.807544][ T6531] RAX: ffffffffffffffda RBX: 00007f33e85b6080 RCX: 00007f33e838e169 [ 291.807563][ T6531] RDX: 0000000000000007 RSI: 0000200000000200 RDI: 0000000000000003 [ 291.807580][ T6531] RBP: 00007f33e921e090 R08: 0000000000000000 R09: 0000000000000000 [ 291.807597][ T6531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 291.807614][ T6531] R13: 0000000000000001 R14: 00007f33e85b6080 R15: 00007ffea30899d8 [ 291.807664][ T6531] [ 292.747688][ T6541] netlink: 8 bytes leftover after parsing attributes in process `syz.0.133'. [ 292.781859][ T30] audit: type=1326 audit(6039880698.352:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6543 comm="syz.3.132" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f33e838e169 code=0x0 [ 292.819513][ T6541] netlink: 32 bytes leftover after parsing attributes in process `syz.0.133'. [ 292.841435][ T6541] netlink: 8 bytes leftover after parsing attributes in process `syz.0.133'. [ 293.758124][ T6559] FAULT_INJECTION: forcing a failure. [ 293.758124][ T6559] name fail_futex, interval 1, probability 0, space 0, times 0 [ 293.775991][ T6559] CPU: 1 UID: 0 PID: 6559 Comm: syz.3.138 Not tainted 6.15.0-rc2-syzkaller-00087-gcfb2e2c57aef #0 PREEMPT(full) [ 293.776031][ T6559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 293.776048][ T6559] Call Trace: [ 293.776057][ T6559] [ 293.776067][ T6559] dump_stack_lvl+0x16c/0x1f0 [ 293.776122][ T6559] should_fail_ex+0x512/0x640 [ 293.776161][ T6559] get_futex_key+0x49e/0x1000 [ 293.776206][ T6559] ? __pfx_get_futex_key+0x10/0x10 [ 293.776246][ T6559] ? __pfx___schedule+0x10/0x10 [ 293.776294][ T6559] futex_wait_setup+0x78/0x290 [ 293.776331][ T6559] __futex_wait+0x266/0x3c0 [ 293.776360][ T6559] ? __pfx___futex_wait+0x10/0x10 [ 293.776395][ T6559] ? __pfx_futex_wake_mark+0x10/0x10 [ 293.776436][ T6559] futex_wait+0xe8/0x380 [ 293.776462][ T6559] ? __pfx_futex_wait+0x10/0x10 [ 293.776499][ T6559] ? fd_install+0x225/0x750 [ 293.776537][ T6559] ? putname+0x154/0x1a0 [ 293.776572][ T6559] do_futex+0x229/0x350 [ 293.776615][ T6559] ? __pfx_do_futex+0x10/0x10 [ 293.776645][ T6559] ? rcu_read_unlock+0x17/0x60 [ 293.776669][ T6559] __x64_sys_futex+0x1e0/0x4c0 [ 293.776702][ T6559] ? __pfx___x64_sys_futex+0x10/0x10 [ 293.776732][ T6559] ? rcu_is_watching+0x12/0xc0 [ 293.776765][ T6559] do_syscall_64+0xcd/0x260 [ 293.776797][ T6559] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.776818][ T6559] RIP: 0033:0x7f33e838e169 [ 293.776834][ T6559] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 293.776854][ T6559] RSP: 002b:00007f33e923f0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 293.776872][ T6559] RAX: ffffffffffffffda RBX: 00007f33e85b5fa8 RCX: 00007f33e838e169 [ 293.776886][ T6559] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f33e85b5fa8 [ 293.776898][ T6559] RBP: 00007f33e85b5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 293.776910][ T6559] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f33e85b5fac [ 293.776923][ T6559] R13: 0000000000000000 R14: 00007ffea30898f0 R15: 00007ffea30899d8 [ 293.776948][ T6559] [ 294.276040][ T6569] CIFS mount error: No usable UNC path provided in device string! [ 294.276040][ T6569] [ 294.286472][ T6569] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 294.646223][ T30] audit: type=1326 audit(6039880700.232:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6575 comm="syz.2.142" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd8eed8e169 code=0x0 [ 294.701104][ T6578] FAULT_INJECTION: forcing a failure. [ 294.701104][ T6578] name failslab, interval 1, probability 0, space 0, times 0 [ 294.714163][ T6578] CPU: 1 UID: 0 PID: 6578 Comm: syz.2.142 Not tainted 6.15.0-rc2-syzkaller-00087-gcfb2e2c57aef #0 PREEMPT(full) [ 294.714203][ T6578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 294.714220][ T6578] Call Trace: [ 294.714230][ T6578] [ 294.714241][ T6578] dump_stack_lvl+0x16c/0x1f0 [ 294.714319][ T6578] should_fail_ex+0x512/0x640 [ 294.714368][ T6578] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 294.714419][ T6578] should_failslab+0xc2/0x120 [ 294.714448][ T6578] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 294.714497][ T6578] ? __pmd_alloc+0xc3/0x870 [ 294.714549][ T6578] __pmd_alloc+0xc3/0x870 [ 294.714580][ T6578] ? find_held_lock+0x2b/0x80 [ 294.714620][ T6578] __handle_mm_fault+0x948/0x2a40 [ 294.714671][ T6578] ? __pfx___handle_mm_fault+0x10/0x10 [ 294.714757][ T6578] ? find_vma+0xbf/0x140 [ 294.714789][ T6578] ? __pfx_find_vma+0x10/0x10 [ 294.714827][ T6578] handle_mm_fault+0x3fe/0xad0 [ 294.714878][ T6578] do_user_addr_fault+0x7a6/0x1370 [ 294.714919][ T6578] ? rcu_is_watching+0x12/0xc0 [ 294.714961][ T6578] exc_page_fault+0x5c/0xc0 [ 294.715003][ T6578] asm_exc_page_fault+0x26/0x30 [ 294.715031][ T6578] RIP: 0010:rep_movs_alternative+0xf/0x90 [ 294.715067][ T6578] Code: c4 10 c3 cc cc cc cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 66 [ 294.715094][ T6578] RSP: 0018:ffffc90019aefbb8 EFLAGS: 00050202 [ 294.715121][ T6578] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000002 [ 294.715138][ T6578] RDX: fffff5200335df82 RSI: 0000000000000000 RDI: ffffc90019aefc08 [ 294.715157][ T6578] RBP: 0000000000000002 R08: 0000000000000001 R09: fffff5200335df81 [ 294.715173][ T6578] R10: ffffc90019aefc09 R11: 0000000000000000 R12: 0000000000000000 [ 294.715190][ T6578] R13: ffffc90019aefc08 R14: ffff8880589e7018 R15: 0000000000000002 [ 294.715230][ T6578] _copy_from_user+0x98/0xd0 [ 294.715270][ T6578] comm_write+0xc4/0x2f0 [ 294.715316][ T6578] ? __pfx_comm_write+0x10/0x10 [ 294.715366][ T6578] ? __pfx_comm_write+0x10/0x10 [ 294.715406][ T6578] vfs_writev+0x6c4/0xdc0 [ 294.715443][ T6578] ? __pfx___mutex_trylock_common+0x10/0x10 [ 294.715485][ T6578] ? __pfx_vfs_writev+0x10/0x10 [ 294.715524][ T6578] ? __mutex_lock+0x1ca/0xb90 [ 294.715578][ T6578] ? __pfx___mutex_lock+0x10/0x10 [ 294.715638][ T6578] ? __fget_files+0x20e/0x3c0 [ 294.715678][ T6578] ? __fget_files+0x180/0x3c0 [ 294.715732][ T6578] ? do_writev+0x132/0x330 [ 294.715768][ T6578] do_writev+0x132/0x330 [ 294.715829][ T6578] ? __pfx_do_writev+0x10/0x10 [ 294.715882][ T6578] do_syscall_64+0xcd/0x260 [ 294.715931][ T6578] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.715961][ T6578] RIP: 0033:0x7fd8eed8e169 [ 294.715984][ T6578] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 294.716010][ T6578] RSP: 002b:00007fd8efb25038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 294.716036][ T6578] RAX: ffffffffffffffda RBX: 00007fd8eefb6080 RCX: 00007fd8eed8e169 [ 294.716055][ T6578] RDX: 0000000000000007 RSI: 0000200000000200 RDI: 0000000000000003 [ 294.716073][ T6578] RBP: 00007fd8efb25090 R08: 0000000000000000 R09: 0000000000000000 [ 294.716091][ T6578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 294.716108][ T6578] R13: 0000000000000001 R14: 00007fd8eefb6080 R15: 00007ffcc9fd3988 [ 294.716146][ T6578] [ 296.064841][ T6585] page: refcount:8 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 296.080424][ T6585] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 296.089010][ T6585] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 296.130626][ T6585] raw: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 296.139300][ T6585] raw: 0000000000000000 0000000000000000 00000008ffffffff 0000000000000000 [ 296.170674][ T6585] head: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 296.179440][ T6585] head: 0000000000000000 0000000000000000 00000008ffffffff 0000000000000000 [ 296.359761][ T6592] random: crng reseeded on system resumption [ 296.404222][ T6585] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 296.418289][ T6585] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 296.427582][ T6585] page dumped because: unmovable page [ 296.453088][ T6585] page_owner tracks the page as allocated [ 296.497301][ T6585] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 15, tgid 15 (ksoftirqd/0), ts 253048095324, free_ts 34656763775 [ 296.527483][ T6585] post_alloc_hook+0x181/0x1b0 [ 296.528789][ T6591] could not allocate digest TFM handle [ 296.574488][ T6585] get_page_from_freelist+0x135c/0x3920 [ 296.587140][ T6585] __alloc_frozen_pages_noprof+0x263/0x23a0 [ 296.593718][ T6585] alloc_pages_mpol+0x1fb/0x550 [ 296.598976][ T6585] alloc_pages_noprof+0x131/0x390 [ 296.607906][ T6585] skb_page_frag_refill+0x186/0x5a0 [ 296.613672][ T6585] try_fill_recv+0x79c/0x2690 [ 296.618621][ T6585] virtnet_poll+0x1e23/0x3c00 [ 296.626911][ T6585] __napi_poll.constprop.0+0xb7/0x550 [ 296.633625][ T6585] net_rx_action+0xa97/0x1010 [ 296.683541][ T6585] handle_softirqs+0x216/0x8e0 [ 296.706903][ T6585] run_ksoftirqd+0x3a/0x60 [ 296.718671][ T6585] smpboot_thread_fn+0x3f4/0xae0 [ 296.734660][ T6585] kthread+0x3c2/0x780 [ 296.746696][ T6585] ret_from_fork+0x45/0x80 [ 296.752507][ T6585] ret_from_fork_asm+0x1a/0x30 [ 296.757460][ T6585] page last free pid 1 tgid 1 stack trace: [ 296.774680][ T6585] __free_frozen_pages+0x69d/0xff0 [ 296.781914][ T6585] free_contig_range+0x135/0x3f0 [ 296.787028][ T6585] destroy_args+0x66f/0x830 [ 296.793488][ T6585] debug_vm_pgtable+0x130e/0x2d50 [ 296.798618][ T6585] do_one_initcall+0x120/0x6e0 [ 296.804388][ T6585] kernel_init_freeable+0x5c2/0x900 [ 296.809806][ T6585] kernel_init+0x1c/0x2b0 [ 296.822070][ T6585] ret_from_fork+0x45/0x80 [ 296.850153][ T6585] ret_from_fork_asm+0x1a/0x30 [ 297.458666][ T6607] FAULT_INJECTION: forcing a failure. [ 297.458666][ T6607] name fail_futex, interval 1, probability 0, space 0, times 0 [ 297.479922][ T30] audit: type=1326 audit(6039880703.052:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6612 comm="syz.3.151" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f33e838e169 code=0x0 [ 297.512543][ T6615] FAULT_INJECTION: forcing a failure. [ 297.512543][ T6615] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 297.527203][ T6607] CPU: 1 UID: 0 PID: 6607 Comm: syz.1.149 Not tainted 6.15.0-rc2-syzkaller-00087-gcfb2e2c57aef #0 PREEMPT(full) [ 297.527255][ T6607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 297.527272][ T6607] Call Trace: [ 297.527281][ T6607] [ 297.527290][ T6607] dump_stack_lvl+0x16c/0x1f0 [ 297.527337][ T6607] should_fail_ex+0x512/0x640 [ 297.527374][ T6607] get_futex_key+0x49e/0x1000 [ 297.527417][ T6607] ? __pfx_get_futex_key+0x10/0x10 [ 297.527469][ T6607] futex_wake+0xe7/0x4e0 [ 297.527493][ T6607] ? rcu_is_watching+0x12/0xc0 [ 297.527532][ T6607] ? __pfx_futex_wake+0x10/0x10 [ 297.527575][ T6607] do_futex+0x1e3/0x350 [ 297.527616][ T6607] ? __pfx_do_futex+0x10/0x10 [ 297.527652][ T6607] ? __might_fault+0xe3/0x190 [ 297.527706][ T6607] mm_release+0x24e/0x300 [ 297.527743][ T6607] do_exit+0x898/0x2c30 [ 297.527766][ T6607] ? __pfx_futex_wake_mark+0x10/0x10 [ 297.527799][ T6607] ? __pfx_do_exit+0x10/0x10 [ 297.527842][ T6607] ? do_raw_spin_lock+0x12c/0x2b0 [ 297.527873][ T6607] ? find_held_lock+0x2b/0x80 [ 297.527914][ T6607] do_group_exit+0xd3/0x2a0 [ 297.527941][ T6607] get_signal+0x2673/0x26d0 [ 297.527994][ T6607] ? fd_install+0x225/0x750 [ 297.528040][ T6607] ? __pfx_get_signal+0x10/0x10 [ 297.528078][ T6607] ? do_futex+0x122/0x350 [ 297.528117][ T6607] ? __pfx_do_futex+0x10/0x10 [ 297.528160][ T6607] arch_do_signal_or_restart+0x8f/0x7d0 [ 297.528205][ T6607] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 297.528267][ T6607] ? rcu_is_watching+0x12/0xc0 [ 297.528305][ T6607] syscall_exit_to_user_mode+0x150/0x2a0 [ 297.528344][ T6607] do_syscall_64+0xda/0x260 [ 297.528384][ T6607] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.528409][ T6607] RIP: 0033:0x7f51d6d8e169 [ 297.528429][ T6607] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 297.528453][ T6607] RSP: 002b:00007f51d7c0f0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 297.528477][ T6607] RAX: fffffffffffffe00 RBX: 00007f51d6fb5fa8 RCX: 00007f51d6d8e169 [ 297.528494][ T6607] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f51d6fb5fa8 [ 297.528508][ T6607] RBP: 00007f51d6fb5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 297.528522][ T6607] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f51d6fb5fac [ 297.528537][ T6607] R13: 0000000000000000 R14: 00007fff67a5dd90 R15: 00007fff67a5de78 [ 297.528568][ T6607] [ 297.900133][ T6615] CPU: 0 UID: 0 PID: 6615 Comm: syz.3.151 Not tainted 6.15.0-rc2-syzkaller-00087-gcfb2e2c57aef #0 PREEMPT(full) [ 297.900177][ T6615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 297.900195][ T6615] Call Trace: [ 297.900206][ T6615] [ 297.900218][ T6615] dump_stack_lvl+0x16c/0x1f0 [ 297.900272][ T6615] should_fail_ex+0x512/0x640 [ 297.900315][ T6615] should_fail_alloc_page+0xe7/0x130 [ 297.900349][ T6615] prepare_alloc_pages+0x3c2/0x610 [ 297.900397][ T6615] __alloc_frozen_pages_noprof+0x18f/0x23a0 [ 297.900451][ T6615] ? stack_trace_save+0x8e/0xc0 [ 297.900494][ T6615] ? __pfx_stack_trace_save+0x10/0x10 [ 297.900537][ T6615] ? stack_depot_save_flags+0x28/0xa50 [ 297.900578][ T6615] ? __alloc_frozen_pages_noprof+0x298/0x23a0 [ 297.900636][ T6615] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 297.900684][ T6615] ? __kasan_slab_alloc+0x89/0x90 [ 297.900742][ T6615] ? __pmd_alloc+0xc3/0x870 [ 297.900778][ T6615] ? handle_mm_fault+0x3fe/0xad0 [ 297.900819][ T6615] ? do_user_addr_fault+0x7a6/0x1370 [ 297.900854][ T6615] ? exc_page_fault+0x5c/0xc0 [ 297.900894][ T6615] ? asm_exc_page_fault+0x26/0x30 [ 297.900924][ T6615] ? rep_movs_alternative+0xf/0x90 [ 297.900957][ T6615] ? _copy_from_user+0x98/0xd0 [ 297.900994][ T6615] ? comm_write+0xc4/0x2f0 [ 297.901053][ T6615] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 297.901091][ T6615] ? policy_nodemask+0xea/0x4e0 [ 297.901136][ T6615] alloc_pages_mpol+0x1fb/0x550 [ 297.901168][ T6615] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 297.901198][ T6615] ? cgroup_rstat_updated+0x2a/0xb20 [ 297.901247][ T6615] alloc_pages_noprof+0x131/0x390 [ 297.901278][ T6615] pte_alloc_one+0x19/0x380 [ 297.901319][ T6615] do_pte_missing+0x1c0b/0x3fb0 [ 297.901363][ T6615] ? do_raw_spin_unlock+0x172/0x230 [ 297.901403][ T6615] ? __pmd_alloc+0x3c2/0x870 [ 297.901435][ T6615] ? find_held_lock+0x2b/0x80 [ 297.901477][ T6615] __handle_mm_fault+0x103d/0x2a40 [ 297.901534][ T6615] ? __pfx___handle_mm_fault+0x10/0x10 [ 297.901601][ T6615] ? find_vma+0xbf/0x140 [ 297.901633][ T6615] ? __pfx_find_vma+0x10/0x10 [ 297.901672][ T6615] handle_mm_fault+0x3fe/0xad0 [ 297.901722][ T6615] do_user_addr_fault+0x7a6/0x1370 [ 297.901830][ T6615] ? rcu_is_watching+0x12/0xc0 [ 297.901871][ T6615] exc_page_fault+0x5c/0xc0 [ 297.901912][ T6615] asm_exc_page_fault+0x26/0x30 [ 297.901939][ T6615] RIP: 0010:rep_movs_alternative+0xf/0x90 [ 297.901972][ T6615] Code: c4 10 c3 cc cc cc cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 66 [ 297.902063][ T6615] RSP: 0018:ffffc90019a9fbb8 EFLAGS: 00050202 [ 297.902091][ T6615] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000002 [ 297.902108][ T6615] RDX: fffff52003353f82 RSI: 0000000000000000 RDI: ffffc90019a9fc08 [ 297.902138][ T6615] RBP: 0000000000000002 R08: 0000000000000001 R09: fffff52003353f81 [ 297.902155][ T6615] R10: ffffc90019a9fc09 R11: 0000000000000000 R12: 0000000000000000 [ 297.902171][ T6615] R13: ffffc90019a9fc08 R14: ffff888058ae3ab8 R15: 0000000000000002 [ 297.902213][ T6615] _copy_from_user+0x98/0xd0 [ 297.902253][ T6615] comm_write+0xc4/0x2f0 [ 297.902291][ T6615] ? __pfx_comm_write+0x10/0x10 [ 297.902338][ T6615] ? __pfx_comm_write+0x10/0x10 [ 297.902376][ T6615] vfs_writev+0x6c4/0xdc0 [ 297.902411][ T6615] ? __pfx___mutex_trylock_common+0x10/0x10 [ 297.902459][ T6615] ? __pfx_vfs_writev+0x10/0x10 [ 297.902496][ T6615] ? __mutex_lock+0x1ca/0xb90 [ 297.902547][ T6615] ? __pfx___mutex_lock+0x10/0x10 [ 297.902604][ T6615] ? __fget_files+0x20e/0x3c0 [ 297.902642][ T6615] ? __fget_files+0x180/0x3c0 [ 297.902700][ T6615] ? do_writev+0x132/0x330 [ 297.902734][ T6615] do_writev+0x132/0x330 [ 297.902771][ T6615] ? __pfx_do_writev+0x10/0x10 [ 297.902820][ T6615] do_syscall_64+0xcd/0x260 [ 297.902867][ T6615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.902896][ T6615] RIP: 0033:0x7f33e838e169 [ 297.902919][ T6615] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 297.902945][ T6615] RSP: 002b:00007f33e921e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 297.902969][ T6615] RAX: ffffffffffffffda RBX: 00007f33e85b6080 RCX: 00007f33e838e169 [ 297.902988][ T6615] RDX: 0000000000000007 RSI: 0000200000000200 RDI: 0000000000000003 [ 297.903004][ T6615] RBP: 00007f33e921e090 R08: 0000000000000000 R09: 0000000000000000 [ 297.903020][ T6615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 297.903036][ T6615] R13: 0000000000000001 R14: 00007f33e85b6080 R15: 00007ffea30899d8 [ 297.903090][ T6615] [ 298.563358][ T30] audit: type=1800 audit(6039880704.152:10): pid=6620 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.153" name="SYSV00000400" dev="tmpfs" ino=0 res=0 errno=0 [ 299.776752][ T30] audit: type=1326 audit(6039880705.362:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6650 comm="syz.2.162" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd8eed8e169 code=0x0 [ 299.828424][ T6654] FAULT_INJECTION: forcing a failure. [ 299.828424][ T6654] name failslab, interval 1, probability 0, space 0, times 0 [ 299.862306][ T6654] CPU: 1 UID: 0 PID: 6654 Comm: syz.2.162 Not tainted 6.15.0-rc2-syzkaller-00087-gcfb2e2c57aef #0 PREEMPT(full) [ 299.862366][ T6654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 299.862384][ T6654] Call Trace: [ 299.862394][ T6654] [ 299.862406][ T6654] dump_stack_lvl+0x16c/0x1f0 [ 299.862457][ T6654] should_fail_ex+0x512/0x640 [ 299.862491][ T6654] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 299.862552][ T6654] should_failslab+0xc2/0x120 [ 299.862582][ T6654] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 299.862632][ T6654] ? ptlock_alloc+0x1f/0x70 [ 299.862680][ T6654] ptlock_alloc+0x1f/0x70 [ 299.862723][ T6654] pte_alloc_one+0x6d/0x380 [ 299.862765][ T6654] do_pte_missing+0x1c0b/0x3fb0 [ 299.862810][ T6654] ? do_raw_spin_unlock+0x172/0x230 [ 299.862850][ T6654] ? __pmd_alloc+0x3c2/0x870 [ 299.862885][ T6654] ? find_held_lock+0x2b/0x80 [ 299.862929][ T6654] __handle_mm_fault+0x103d/0x2a40 [ 299.862987][ T6654] ? __pfx___handle_mm_fault+0x10/0x10 [ 299.863057][ T6654] ? find_vma+0xbf/0x140 [ 299.863090][ T6654] ? __pfx_find_vma+0x10/0x10 [ 299.863130][ T6654] handle_mm_fault+0x3fe/0xad0 [ 299.863182][ T6654] do_user_addr_fault+0x7a6/0x1370 [ 299.863225][ T6654] ? rcu_is_watching+0x12/0xc0 [ 299.863269][ T6654] exc_page_fault+0x5c/0xc0 [ 299.863314][ T6654] asm_exc_page_fault+0x26/0x30 [ 299.863345][ T6654] RIP: 0010:rep_movs_alternative+0xf/0x90 [ 299.863381][ T6654] Code: c4 10 c3 cc cc cc cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 66 [ 299.863411][ T6654] RSP: 0018:ffffc90019547bb8 EFLAGS: 00050202 [ 299.863435][ T6654] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000002 [ 299.863452][ T6654] RDX: fffff520032a8f82 RSI: 0000000000000000 RDI: ffffc90019547c08 [ 299.863471][ T6654] RBP: 0000000000000002 R08: 0000000000000001 R09: fffff520032a8f81 [ 299.863489][ T6654] R10: ffffc90019547c09 R11: 0000000000000000 R12: 0000000000000000 [ 299.863507][ T6654] R13: ffffc90019547c08 R14: ffff88806c796028 R15: 0000000000000002 [ 299.863555][ T6654] _copy_from_user+0x98/0xd0 [ 299.863597][ T6654] comm_write+0xc4/0x2f0 [ 299.863639][ T6654] ? __pfx_comm_write+0x10/0x10 [ 299.863691][ T6654] ? __pfx_comm_write+0x10/0x10 [ 299.863732][ T6654] vfs_writev+0x6c4/0xdc0 [ 299.863771][ T6654] ? __pfx___mutex_trylock_common+0x10/0x10 [ 299.863814][ T6654] ? __pfx_vfs_writev+0x10/0x10 [ 299.863855][ T6654] ? __mutex_lock+0x1ca/0xb90 [ 299.863912][ T6654] ? __pfx___mutex_lock+0x10/0x10 [ 299.863975][ T6654] ? __fget_files+0x20e/0x3c0 [ 299.864018][ T6654] ? __fget_files+0x180/0x3c0 [ 299.864074][ T6654] ? do_writev+0x132/0x330 [ 299.864112][ T6654] do_writev+0x132/0x330 [ 299.864152][ T6654] ? __pfx_do_writev+0x10/0x10 [ 299.864207][ T6654] do_syscall_64+0xcd/0x260 [ 299.864258][ T6654] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.864289][ T6654] RIP: 0033:0x7fd8eed8e169 [ 299.864314][ T6654] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 299.864343][ T6654] RSP: 002b:00007fd8efb25038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 299.864370][ T6654] RAX: ffffffffffffffda RBX: 00007fd8eefb6080 RCX: 00007fd8eed8e169 [ 299.864389][ T6654] RDX: 0000000000000007 RSI: 0000200000000200 RDI: 0000000000000003 [ 299.864407][ T6654] RBP: 00007fd8efb25090 R08: 0000000000000000 R09: 0000000000000000 [ 299.864424][ T6654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 299.864442][ T6654] R13: 0000000000000001 R14: 00007fd8eefb6080 R15: 00007ffcc9fd3988 [ 299.864483][ T6654] [ 300.462505][ T6663] CIFS mount error: No usable UNC path provided in device string! [ 300.462505][ T6663] [ 300.480790][ T6663] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 301.168942][ T6675] netlink: 186 bytes leftover after parsing attributes in process `syz.1.168'. [ 301.226129][ T6675] netlink: 28 bytes leftover after parsing attributes in process `syz.1.168'. [ 301.374822][ T6684] netlink: 'syz.0.171': attribute type 5 has an invalid length. [ 301.382778][ T6684] netlink: 314 bytes leftover after parsing attributes in process `syz.0.171'. [ 301.806861][ T30] audit: type=1326 audit(6039880707.392:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6691 comm="syz.1.173" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f51d6d8e169 code=0x0 [ 301.862238][ T6695] FAULT_INJECTION: forcing a failure. [ 301.862238][ T6695] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 301.888599][ T6695] CPU: 0 UID: 0 PID: 6695 Comm: syz.1.173 Not tainted 6.15.0-rc2-syzkaller-00087-gcfb2e2c57aef #0 PREEMPT(full) [ 301.888647][ T6695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 301.888664][ T6695] Call Trace: [ 301.888674][ T6695] [ 301.888685][ T6695] dump_stack_lvl+0x16c/0x1f0 [ 301.888735][ T6695] should_fail_ex+0x512/0x640 [ 301.888776][ T6695] should_fail_alloc_page+0xe7/0x130 [ 301.888808][ T6695] prepare_alloc_pages+0x3c2/0x610 [ 301.888853][ T6695] __alloc_frozen_pages_noprof+0x18f/0x23a0 [ 301.888911][ T6695] ? __lock_acquire+0x5ca/0x1ba0 [ 301.888949][ T6695] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 301.889021][ T6695] ? find_held_lock+0x2b/0x80 [ 301.889060][ T6695] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 301.889095][ T6695] ? policy_nodemask+0xea/0x4e0 [ 301.889128][ T6695] alloc_pages_mpol+0x1fb/0x550 [ 301.889158][ T6695] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 301.889199][ T6695] folio_alloc_mpol_noprof+0x36/0x2f0 [ 301.889238][ T6695] shmem_alloc_folio+0x135/0x160 [ 301.889282][ T6695] shmem_alloc_and_add_folio+0x499/0xc20 [ 301.889340][ T6695] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 301.889393][ T6695] ? shmem_allowable_huge_orders+0xcb/0x2f0 [ 301.889450][ T6695] shmem_get_folio_gfp+0x687/0x1530 [ 301.889509][ T6695] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 301.889561][ T6695] ? filemap_map_pages+0xf6c/0x1680 [ 301.889599][ T6695] shmem_fault+0x1fe/0xa30 [ 301.889659][ T6695] ? __pfx_shmem_fault+0x10/0x10 [ 301.889712][ T6695] ? __pfx_filemap_map_pages+0x10/0x10 [ 301.889755][ T6695] __do_fault+0x10a/0x490 [ 301.889787][ T6695] do_pte_missing+0x1031/0x3fb0 [ 301.889829][ T6695] ? do_raw_spin_unlock+0x172/0x230 [ 301.889866][ T6695] ? __pmd_alloc+0x3c2/0x870 [ 301.889899][ T6695] ? find_held_lock+0x2b/0x80 [ 301.889940][ T6695] __handle_mm_fault+0x103d/0x2a40 [ 301.890013][ T6695] ? __pfx___handle_mm_fault+0x10/0x10 [ 301.890079][ T6695] ? find_vma+0xbf/0x140 [ 301.890112][ T6695] ? __pfx_find_vma+0x10/0x10 [ 301.890152][ T6695] handle_mm_fault+0x3fe/0xad0 [ 301.890204][ T6695] do_user_addr_fault+0x7a6/0x1370 [ 301.890246][ T6695] ? rcu_is_watching+0x12/0xc0 [ 301.890290][ T6695] exc_page_fault+0x5c/0xc0 [ 301.890333][ T6695] asm_exc_page_fault+0x26/0x30 [ 301.890360][ T6695] RIP: 0010:rep_movs_alternative+0xf/0x90 [ 301.890397][ T6695] Code: c4 10 c3 cc cc cc cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 66 [ 301.890426][ T6695] RSP: 0018:ffffc9001958fbb8 EFLAGS: 00050202 [ 301.890450][ T6695] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000002 [ 301.890468][ T6695] RDX: fffff520032b1f82 RSI: 0000000000000000 RDI: ffffc9001958fc08 [ 301.890488][ T6695] RBP: 0000000000000002 R08: 0000000000000001 R09: fffff520032b1f81 [ 301.890507][ T6695] R10: ffffc9001958fc09 R11: 0000000000000000 R12: 0000000000000000 [ 301.890526][ T6695] R13: ffffc9001958fc08 R14: ffff888058a5a578 R15: 0000000000000002 [ 301.890568][ T6695] _copy_from_user+0x98/0xd0 [ 301.890617][ T6695] comm_write+0xc4/0x2f0 [ 301.890658][ T6695] ? __pfx_comm_write+0x10/0x10 [ 301.890704][ T6695] ? __pfx_comm_write+0x10/0x10 [ 301.890739][ T6695] vfs_writev+0x6c4/0xdc0 [ 301.890775][ T6695] ? __pfx___mutex_trylock_common+0x10/0x10 [ 301.890816][ T6695] ? __pfx_vfs_writev+0x10/0x10 [ 301.890857][ T6695] ? __mutex_lock+0x1ca/0xb90 [ 301.890911][ T6695] ? __pfx___mutex_lock+0x10/0x10 [ 301.890973][ T6695] ? __fget_files+0x20e/0x3c0 [ 301.891016][ T6695] ? __fget_files+0x180/0x3c0 [ 301.891073][ T6695] ? do_writev+0x132/0x330 [ 301.891110][ T6695] do_writev+0x132/0x330 [ 301.891152][ T6695] ? __pfx_do_writev+0x10/0x10 [ 301.891206][ T6695] do_syscall_64+0xcd/0x260 [ 301.891258][ T6695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.891289][ T6695] RIP: 0033:0x7f51d6d8e169 [ 301.891315][ T6695] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 301.891343][ T6695] RSP: 002b:00007f51d7bee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 301.891371][ T6695] RAX: ffffffffffffffda RBX: 00007f51d6fb6080 RCX: 00007f51d6d8e169 [ 301.891391][ T6695] RDX: 0000000000000007 RSI: 0000200000000200 RDI: 0000000000000003 [ 301.891410][ T6695] RBP: 00007f51d7bee090 R08: 0000000000000000 R09: 0000000000000000 [ 301.891429][ T6695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 301.891448][ T6695] R13: 0000000000000001 R14: 00007f51d6fb6080 R15: 00007fff67a5de78 [ 301.891490][ T6695] [ 303.372634][ T6713] ptm ptm8: ldisc open failed (-12), clearing slot 8 [ 304.979906][ T30] audit: type=1326 audit(6039880710.562:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6741 comm="syz.3.183" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f33e838e169 code=0x0 [ 305.026556][ T6743] FAULT_INJECTION: forcing a failure. [ 305.026556][ T6743] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 305.071345][ T6743] CPU: 0 UID: 0 PID: 6743 Comm: syz.3.183 Not tainted 6.15.0-rc2-syzkaller-00087-gcfb2e2c57aef #0 PREEMPT(full) [ 305.071387][ T6743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 305.071415][ T6743] Call Trace: [ 305.071424][ T6743] [ 305.071434][ T6743] dump_stack_lvl+0x16c/0x1f0 [ 305.071478][ T6743] should_fail_ex+0x512/0x640 [ 305.071530][ T6743] _copy_to_user+0x32/0xd0 [ 305.071569][ T6743] simple_read_from_buffer+0xcb/0x170 [ 305.071612][ T6743] proc_fail_nth_read+0x197/0x270 [ 305.071652][ T6743] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 305.071706][ T6743] ? rw_verify_area+0xcf/0x680 [ 305.071737][ T6743] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 305.071775][ T6743] vfs_read+0x1de/0xc70 [ 305.071835][ T6743] ? __pfx___mutex_lock+0x10/0x10 [ 305.071878][ T6743] ? __pfx_vfs_read+0x10/0x10 [ 305.071927][ T6743] ? __fget_files+0x20e/0x3c0 [ 305.071980][ T6743] ksys_read+0x12a/0x240 [ 305.072017][ T6743] ? __pfx_ksys_read+0x10/0x10 [ 305.072068][ T6743] do_syscall_64+0xcd/0x260 [ 305.072113][ T6743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.072141][ T6743] RIP: 0033:0x7f33e838cb7c [ 305.072162][ T6743] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 305.072186][ T6743] RSP: 002b:00007f33e921e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 305.072210][ T6743] RAX: ffffffffffffffda RBX: 00007f33e85b6080 RCX: 00007f33e838cb7c [ 305.072228][ T6743] RDX: 000000000000000f RSI: 00007f33e921e0a0 RDI: 0000000000000004 [ 305.072244][ T6743] RBP: 00007f33e921e090 R08: 0000000000000000 R09: 0000000000000000 [ 305.072260][ T6743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 305.072275][ T6743] R13: 0000000000000001 R14: 00007f33e85b6080 R15: 00007ffea30899d8 [ 305.072311][ T6743] [ 306.253177][ T6768] process 'syz.0.190' launched '/dev/fd/6' with NULL argv: empty string added [ 306.294253][ T30] audit: type=1326 audit(6039880711.882:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6772 comm="syz.2.192" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd8eed8e169 code=0x0 [ 306.506641][ T6776] netlink: 84 bytes leftover after parsing attributes in process `syz.2.192'. [ 308.256717][ T6818] CIFS mount error: No usable UNC path provided in device string! [ 308.256717][ T6818] [ 308.267211][ T6818] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 310.582855][ T6853] Invalid ELF header magic: != ELF [ 310.987196][ T6858] FAULT_INJECTION: forcing a failure. [ 310.987196][ T6858] name failslab, interval 1, probability 0, space 0, times 0 [ 311.004362][ T6858] CPU: 0 UID: 0 PID: 6858 Comm: syz.3.212 Not tainted 6.15.0-rc2-syzkaller-00087-gcfb2e2c57aef #0 PREEMPT(full) [ 311.004401][ T6858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 311.004419][ T6858] Call Trace: [ 311.004428][ T6858] [ 311.004440][ T6858] dump_stack_lvl+0x16c/0x1f0 [ 311.004489][ T6858] should_fail_ex+0x512/0x640 [ 311.004558][ T6858] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 311.004624][ T6858] should_failslab+0xc2/0x120 [ 311.004655][ T6858] __kmalloc_cache_noprof+0x6a/0x3e0 [ 311.004701][ T6858] ? mirred_init_net+0x56/0x270 [ 311.004746][ T6858] ? __pfx_mirred_init_net+0x10/0x10 [ 311.004790][ T6858] mirred_init_net+0x56/0x270 [ 311.004833][ T6858] ops_init+0x1df/0x5f0 [ 311.004883][ T6858] setup_net+0x21e/0x850 [ 311.004933][ T6858] ? __pfx_setup_net+0x10/0x10 [ 311.004976][ T6858] ? lockdep_init_map_type+0x5c/0x280 [ 311.005015][ T6858] ? __pfx_down_read_killable+0x10/0x10 [ 311.005051][ T6858] ? debug_mutex_init+0x37/0x70 [ 311.005097][ T6858] copy_net_ns+0x2a6/0x5f0 [ 311.005152][ T6858] create_new_namespaces+0x3ea/0xad0 [ 311.005209][ T6858] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 311.005259][ T6858] ksys_unshare+0x45b/0xa40 [ 311.005309][ T6858] ? __pfx_ksys_unshare+0x10/0x10 [ 311.005356][ T6858] ? xfd_validate_state+0x5d/0x180 [ 311.005394][ T6858] ? rcu_is_watching+0x12/0xc0 [ 311.005445][ T6858] __x64_sys_unshare+0x31/0x40 [ 311.005494][ T6858] do_syscall_64+0xcd/0x260 [ 311.005545][ T6858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.005577][ T6858] RIP: 0033:0x7f33e838e169 [ 311.005603][ T6858] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 311.005633][ T6858] RSP: 002b:00007f33e923f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 311.005663][ T6858] RAX: ffffffffffffffda RBX: 00007f33e85b5fa0 RCX: 00007f33e838e169 [ 311.005684][ T6858] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 311.005714][ T6858] RBP: 00007f33e8410a68 R08: 0000000000000000 R09: 0000000000000000 [ 311.005732][ T6858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 311.005749][ T6858] R13: 0000000000000000 R14: 00007f33e85b5fa0 R15: 00007ffea30899d8 [ 311.005797][ T6858] [ 311.582125][ T6866] tipc: Started in network mode [ 311.587203][ T6866] tipc: Node identity ffffffff, cluster identity 4711 [ 311.615695][ T6866] tipc: Node number set to 4294967295 [ 312.945182][ T6904] cifs: Unknown parameter 'T.ŸÜÛæ¨Å¼c[ŸÐê€$âæµÈ)ü±UóÑnEó-Ê™¾l®öÚ-ºŒ -¾_€™¯Ôåáª5Z äoåé¢mžÐfwYÍhº*/ÿxDlÝ©Š×ígÕkÇAí³ùÏ7ÍØØ9’ôXöa/fê_ÿAR£ˆ™‘ÈxM ‚v¬—pÿ±$^;ôØq‡3±«£n졵-6©+e„k„¾ñÇ<°kœcÔ)n.üeMÍ÷Na¨t®ÐSMÎÆ1,' [ 314.121021][ T6937] CIFS mount error: No usable UNC path provided in device string! [ 314.121021][ T6937] [ 314.131399][ T6937] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 315.928775][ T6946] bond0: option all_slaves_active: invalid value () [ 315.971366][ T6971] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 315.982780][ T6971] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 316.030031][ T6971] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 316.108958][ T6971] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 316.167083][ T6971] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 316.211426][ T6971] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 316.235491][ T6971] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 316.330444][ T6971] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 316.345359][ T6971] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 316.358251][ T6971] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 316.375099][ T6971] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 316.385259][ T6971] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 316.399701][ T6971] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 317.991163][ T7010] syz.2.246 (7010): /proc/7006/oom_adj is deprecated, please use /proc/7006/oom_score_adj instead. [ 318.009941][ T5863] Bluetooth: hci0: command 0x0c1a tx timeout [ 318.171967][ T5863] Bluetooth: hci2: command 0x0c1a tx timeout [ 318.411613][ T5863] Bluetooth: hci1: command 0x0c1a tx timeout [ 318.418275][ T5860] Bluetooth: hci3: command 0x0c1a tx timeout [ 318.685653][ T7025] netlink: 8 bytes leftover after parsing attributes in process `syz.1.249'. [ 319.327752][ T7044] netlink: 8 bytes leftover after parsing attributes in process `syz.0.252'. [ 320.156284][ T5863] Bluetooth: hci0: command 0x0c1a tx timeout [ 320.254949][ T5863] Bluetooth: hci2: command 0x0c1a tx timeout [ 320.495180][ T5863] Bluetooth: hci1: command 0x0c1a tx timeout [ 320.502028][ T5860] Bluetooth: hci3: command 0x0c1a tx timeout [ 322.169956][ T5863] Bluetooth: hci0: command 0x0c1a tx timeout [ 322.263584][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.274019][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.330000][ T5863] Bluetooth: hci2: command 0x0c1a tx timeout [ 322.570126][ T5860] Bluetooth: hci3: command 0x0c1a tx timeout [ 322.576258][ T5863] Bluetooth: hci1: command 0x0c1a tx timeout [ 323.831885][ T7104] netlink: 4 bytes leftover after parsing attributes in process `syz.0.267'. [ 324.410021][ T5863] Bluetooth: hci2: command 0x0c1a tx timeout [ 326.004753][ T30] audit: type=1326 audit(6039880731.582:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7150 comm="syz.1.278" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f51d6d8e169 code=0x0 [ 326.445477][ T5863] Bluetooth: hci1: unexpected event 0x3e length: 726 > 260 [ 326.445520][ T5863] Bluetooth: hci1: unexpected subevent 0x05 length: 725 > 12 [ 328.406548][ T7178] FAULT_INJECTION: forcing a failure. [ 328.406548][ T7178] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 328.445209][ T7178] CPU: 0 UID: 0 PID: 7178 Comm: syz.1.284 Not tainted 6.15.0-rc2-syzkaller-00087-gcfb2e2c57aef #0 PREEMPT(full) [ 328.445256][ T7178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 328.445271][ T7178] Call Trace: [ 328.445279][ T7178] [ 328.445288][ T7178] dump_stack_lvl+0x16c/0x1f0 [ 328.445338][ T7178] should_fail_ex+0x512/0x640 [ 328.445369][ T7178] _copy_from_user+0x2e/0xd0 [ 328.445394][ T7178] core_sys_select+0x35a/0xbe0 [ 328.445428][ T7178] ? __pfx_core_sys_select+0x10/0x10 [ 328.445460][ T7178] ? proc_fail_nth_write+0x9f/0x250 [ 328.445514][ T7178] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 328.445550][ T7178] kern_select+0x15d/0x1e0 [ 328.445577][ T7178] ? __pfx_kern_select+0x10/0x10 [ 328.445606][ T7178] ? __pfx_ksys_write+0x10/0x10 [ 328.445636][ T7178] __x64_sys_select+0xbd/0x160 [ 328.445661][ T7178] ? do_syscall_64+0x91/0x260 [ 328.445688][ T7178] ? lockdep_hardirqs_on+0x7c/0x110 [ 328.445714][ T7178] do_syscall_64+0xcd/0x260 [ 328.445743][ T7178] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.445762][ T7178] RIP: 0033:0x7f51d6d8e169 [ 328.445777][ T7178] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 328.445795][ T7178] RSP: 002b:00007f51d7bcd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 328.445813][ T7178] RAX: ffffffffffffffda RBX: 00007f51d6fb6160 RCX: 00007f51d6d8e169 [ 328.445826][ T7178] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000e [ 328.445837][ T7178] RBP: 00007f51d7bcd090 R08: 0000000000000000 R09: 0000000000000000 [ 328.445848][ T7178] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 328.445860][ T7178] R13: 0000000000000001 R14: 00007f51d6fb6160 R15: 00007fff67a5de78 [ 328.445883][ T7178] [ 328.635675][ T5863] Bluetooth: hci1: command 0x0c1a tx timeout [ 330.919210][ T7200] IPVS: length: 150994944 != 15703474184 [ 331.738097][ T30] audit: type=1326 audit(6039880737.313:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7210 comm="syz.1.292" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f51d6d8e169 code=0x0 [ 331.861010][ T7216] FAULT_INJECTION: forcing a failure. [ 331.861010][ T7216] name fail_futex, interval 1, probability 0, space 0, times 0 [ 331.900269][ T7216] CPU: 1 UID: 0 PID: 7216 Comm: syz.3.291 Not tainted 6.15.0-rc2-syzkaller-00087-gcfb2e2c57aef #0 PREEMPT(full) [ 331.900316][ T7216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 331.900334][ T7216] Call Trace: [ 331.900345][ T7216] [ 331.900357][ T7216] dump_stack_lvl+0x16c/0x1f0 [ 331.900412][ T7216] should_fail_ex+0x512/0x640 [ 331.900455][ T7216] get_futex_key+0x49e/0x1000 [ 331.900498][ T7216] ? __page_table_check_zero+0x32d/0x5b0 [ 331.900556][ T7216] ? __pfx_get_futex_key+0x10/0x10 [ 331.900595][ T7216] ? get_page_from_freelist+0x133c/0x3920 [ 331.900642][ T7216] futex_wait_setup+0x78/0x290 [ 331.900676][ T7216] __futex_wait+0x266/0x3c0 [ 331.900704][ T7216] ? __pfx___futex_wait+0x10/0x10 [ 331.900737][ T7216] ? __pfx_futex_wake_mark+0x10/0x10 [ 331.900769][ T7216] ? __alloc_frozen_pages_noprof+0x298/0x23a0 [ 331.900815][ T7216] futex_wait+0xe8/0x380 [ 331.900840][ T7216] ? __pfx_futex_wait+0x10/0x10 [ 331.900874][ T7216] ? fd_install+0x225/0x750 [ 331.900910][ T7216] ? putname+0x154/0x1a0 [ 331.900942][ T7216] do_futex+0x229/0x350 [ 331.900981][ T7216] ? __pfx_do_futex+0x10/0x10 [ 331.901019][ T7216] ? rcu_read_unlock+0x17/0x60 [ 331.901051][ T7216] __x64_sys_futex+0x1e0/0x4c0 [ 331.901090][ T7216] ? __pfx_native_tss_update_io_bitmap+0x10/0x10 [ 331.901125][ T7216] ? __pfx___x64_sys_futex+0x10/0x10 [ 331.901176][ T7216] do_syscall_64+0xcd/0x260 [ 331.901232][ T7216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.901264][ T7216] RIP: 0033:0x7f33e838e169 [ 331.901285][ T7216] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 331.901312][ T7216] RSP: 002b:00007f33e91fd0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 331.901337][ T7216] RAX: ffffffffffffffda RBX: 00007f33e85b6168 RCX: 00007f33e838e169 [ 331.901354][ T7216] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f33e85b6168 [ 331.901371][ T7216] RBP: 00007f33e85b6160 R08: 0000000000000000 R09: 0000000000000000 [ 331.901387][ T7216] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f33e85b616c [ 331.901403][ T7216] R13: 0000000000000000 R14: 00007ffea30898f0 R15: 00007ffea30899d8 [ 331.901436][ T7216] [ 332.746866][ T7224] FAULT_INJECTION: forcing a failure. [ 332.746866][ T7224] name fail_futex, interval 1, probability 0, space 0, times 0 [ 332.769120][ T7224] CPU: 0 UID: 0 PID: 7224 Comm: syz.3.294 Not tainted 6.15.0-rc2-syzkaller-00087-gcfb2e2c57aef #0 PREEMPT(full) [ 332.769173][ T7224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 332.769188][ T7224] Call Trace: [ 332.769196][ T7224] [ 332.769206][ T7224] dump_stack_lvl+0x16c/0x1f0 [ 332.769250][ T7224] should_fail_ex+0x512/0x640 [ 332.769298][ T7224] get_futex_key+0x49e/0x1000 [ 332.769338][ T7224] ? __pfx_get_futex_key+0x10/0x10 [ 332.769383][ T7224] futex_wake+0xe7/0x4e0 [ 332.769403][ T7224] ? rcu_is_watching+0x12/0xc0 [ 332.769433][ T7224] ? __pfx_futex_wake+0x10/0x10 [ 332.769489][ T7224] do_futex+0x1e3/0x350 [ 332.769530][ T7224] ? __pfx_do_futex+0x10/0x10 [ 332.769567][ T7224] ? __might_fault+0xe3/0x190 [ 332.769618][ T7224] mm_release+0x24e/0x300 [ 332.769656][ T7224] do_exit+0x898/0x2c30 [ 332.769676][ T7224] ? __pfx___might_resched+0x10/0x10 [ 332.769714][ T7224] ? __pfx_do_exit+0x10/0x10 [ 332.769745][ T7224] ? do_raw_spin_lock+0x12c/0x2b0 [ 332.769766][ T7224] ? find_held_lock+0x2b/0x80 [ 332.769796][ T7224] do_group_exit+0xd3/0x2a0 [ 332.769823][ T7224] get_signal+0x2673/0x26d0 [ 332.769871][ T7224] ? poll_select_finish+0x377/0x6b0 [ 332.769913][ T7224] ? __pfx_get_signal+0x10/0x10 [ 332.769972][ T7224] arch_do_signal_or_restart+0x8f/0x7d0 [ 332.770041][ T7224] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 332.770102][ T7224] ? __pfx_ksys_write+0x10/0x10 [ 332.770155][ T7224] syscall_exit_to_user_mode+0x150/0x2a0 [ 332.770204][ T7224] do_syscall_64+0xda/0x260 [ 332.770255][ T7224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.770286][ T7224] RIP: 0033:0x7f33e838e169 [ 332.770310][ T7224] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 332.770339][ T7224] RSP: 002b:00007f33e91fd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 332.770368][ T7224] RAX: fffffffffffffdfe RBX: 00007f33e85b6160 RCX: 00007f33e838e169 [ 332.770387][ T7224] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000e [ 332.770404][ T7224] RBP: 00007f33e91fd090 R08: 0000000000000000 R09: 0000000000000000 [ 332.770421][ T7224] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 332.770438][ T7224] R13: 0000000000000001 R14: 00007f33e85b6160 R15: 00007ffea30899d8 [ 332.770473][ T7224] [ 333.437457][ T7212] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 335.154045][ T7257] FAULT_INJECTION: forcing a failure. [ 335.154045][ T7257] name fail_futex, interval 1, probability 0, space 0, times 0 [ 335.250545][ T7257] CPU: 0 UID: 0 PID: 7257 Comm: syz.2.302 Not tainted 6.15.0-rc2-syzkaller-00087-gcfb2e2c57aef #0 PREEMPT(full) [ 335.250591][ T7257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 335.250610][ T7257] Call Trace: [ 335.250620][ T7257] [ 335.250631][ T7257] dump_stack_lvl+0x16c/0x1f0 [ 335.250684][ T7257] should_fail_ex+0x512/0x640 [ 335.250749][ T7257] get_futex_key+0x49e/0x1000 [ 335.250794][ T7257] ? __pfx_get_page_from_freelist+0x10/0x10 [ 335.250848][ T7257] ? __pfx_get_futex_key+0x10/0x10 [ 335.250892][ T7257] ? trace_mm_page_alloc+0x11f/0x1a0 [ 335.250930][ T7257] ? __alloc_frozen_pages_noprof+0x298/0x23a0 [ 335.250988][ T7257] futex_wake+0xe7/0x4e0 [ 335.251022][ T7257] ? __pfx_futex_wake+0x10/0x10 [ 335.251052][ T7257] ? __lock_acquire+0x5ca/0x1ba0 [ 335.251085][ T7257] ? fd_install+0x225/0x750 [ 335.251128][ T7257] ? putname+0x154/0x1a0 [ 335.251167][ T7257] do_futex+0x1e3/0x350 [ 335.251227][ T7257] ? __pfx_do_futex+0x10/0x10 [ 335.251272][ T7257] ? rcu_read_unlock+0x17/0x60 [ 335.251310][ T7257] __x64_sys_futex+0x1e0/0x4c0 [ 335.251356][ T7257] ? __pfx_native_tss_update_io_bitmap+0x10/0x10 [ 335.251396][ T7257] ? __pfx___x64_sys_futex+0x10/0x10 [ 335.251455][ T7257] do_syscall_64+0xcd/0x260 [ 335.251504][ T7257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.251539][ T7257] RIP: 0033:0x7fd8eed8e169 [ 335.251563][ T7257] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 335.251592][ T7257] RSP: 002b:00007fd8efb460e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 335.251621][ T7257] RAX: ffffffffffffffda RBX: 00007fd8eefb5fa8 RCX: 00007fd8eed8e169 [ 335.251640][ T7257] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fd8eefb5fac [ 335.251658][ T7257] RBP: 00007fd8eefb5fa0 R08: 00007fd8efb47000 R09: 0000000000000000 [ 335.251676][ T7257] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd8eefb5fac [ 335.251700][ T7257] R13: 0000000000000000 R14: 00007ffcc9fd38a0 R15: 00007ffcc9fd3988 [ 335.251738][ T7257] [ 336.251888][ T30] audit: type=1326 audit(6039880741.833:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7275 comm="syz.0.307" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f83c2f8e169 code=0x0 [ 339.204984][ T30] audit: type=1326 audit(6039880744.793:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7310 comm="syz.1.316" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f51d6d8e169 code=0x0 [ 339.226541][ C1] vkms_vblank_simulate: vblank timer overrun [ 339.364375][ T7313] FAULT_INJECTION: forcing a failure. [ 339.364375][ T7313] name fail_futex, interval 1, probability 0, space 0, times 0 [ 339.418538][ T7313] CPU: 1 UID: 0 PID: 7313 Comm: syz.2.314 Not tainted 6.15.0-rc2-syzkaller-00087-gcfb2e2c57aef #0 PREEMPT(full) [ 339.418583][ T7313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 339.418602][ T7313] Call Trace: [ 339.418612][ T7313] [ 339.418623][ T7313] dump_stack_lvl+0x16c/0x1f0 [ 339.418679][ T7313] should_fail_ex+0x512/0x640 [ 339.418722][ T7313] get_futex_key+0x49e/0x1000 [ 339.418768][ T7313] ? __pfx_get_page_from_freelist+0x10/0x10 [ 339.418820][ T7313] ? __pfx_get_futex_key+0x10/0x10 [ 339.418864][ T7313] ? trace_mm_page_alloc+0x11f/0x1a0 [ 339.418902][ T7313] ? __alloc_frozen_pages_noprof+0x298/0x23a0 [ 339.418958][ T7313] futex_wake+0xe7/0x4e0 [ 339.418991][ T7313] ? __pfx_futex_wake+0x10/0x10 [ 339.419021][ T7313] ? __lock_acquire+0x5ca/0x1ba0 [ 339.419054][ T7313] ? fd_install+0x225/0x750 [ 339.419095][ T7313] ? putname+0x154/0x1a0 [ 339.419133][ T7313] do_futex+0x1e3/0x350 [ 339.419179][ T7313] ? __pfx_do_futex+0x10/0x10 [ 339.419225][ T7313] ? rcu_read_unlock+0x17/0x60 [ 339.419263][ T7313] __x64_sys_futex+0x1e0/0x4c0 [ 339.419311][ T7313] ? __pfx_native_tss_update_io_bitmap+0x10/0x10 [ 339.419352][ T7313] ? __pfx___x64_sys_futex+0x10/0x10 [ 339.419414][ T7313] do_syscall_64+0xcd/0x260 [ 339.419474][ T7313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.419507][ T7313] RIP: 0033:0x7fd8eed8e169 [ 339.419531][ T7313] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 339.419560][ T7313] RSP: 002b:00007fd8efb460e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 339.419588][ T7313] RAX: ffffffffffffffda RBX: 00007fd8eefb5fa8 RCX: 00007fd8eed8e169 [ 339.419608][ T7313] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fd8eefb5fac [ 339.419626][ T7313] RBP: 00007fd8eefb5fa0 R08: 00007fd8efb47000 R09: 0000000000000000 [ 339.419644][ T7313] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd8eefb5fac [ 339.419662][ T7313] R13: 0000000000000000 R14: 00007ffcc9fd38a0 R15: 00007ffcc9fd3988 [ 339.419700][ T7313] [ 339.623081][ C1] vkms_vblank_simulate: vblank timer overrun [ 341.223933][ T7366] netlink: 'syz.3.325': attribute type 33 has an invalid length. [ 341.235844][ T7366] netlink: 322 bytes leftover after parsing attributes in process `syz.3.325'. [ 341.245843][ T7366] netlink: 'syz.3.325': attribute type 33 has an invalid length. [ 341.268020][ T7366] netlink: 322 bytes leftover after parsing attributes in process `syz.3.325'. [ 341.422199][ T7370] FAULT_INJECTION: forcing a failure. [ 341.422199][ T7370] name failslab, interval 1, probability 0, space 0, times 0 [ 341.456607][ T7370] CPU: 0 UID: 0 PID: 7370 Comm: syz.0.327 Not tainted 6.15.0-rc2-syzkaller-00087-gcfb2e2c57aef #0 PREEMPT(full) [ 341.456650][ T7370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 341.456668][ T7370] Call Trace: [ 341.456678][ T7370] [ 341.456689][ T7370] dump_stack_lvl+0x16c/0x1f0 [ 341.456741][ T7370] should_fail_ex+0x512/0x640 [ 341.456777][ T7370] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 341.456830][ T7370] should_failslab+0xc2/0x120 [ 341.456861][ T7370] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 341.456908][ T7370] ? __pfx_acct_collect+0x10/0x10 [ 341.456939][ T7370] ? taskstats_exit+0x654/0xbe0 [ 341.456976][ T7370] taskstats_exit+0x654/0xbe0 [ 341.457010][ T7370] ? __pfx_taskstats_exit+0x10/0x10 [ 341.457054][ T7370] do_exit+0x85f/0x2c30 [ 341.457079][ T7370] ? __pfx_futex_wake_mark+0x10/0x10 [ 341.457117][ T7370] ? __pfx_do_exit+0x10/0x10 [ 341.457167][ T7370] ? do_raw_spin_lock+0x12c/0x2b0 [ 341.457201][ T7370] ? find_held_lock+0x2b/0x80 [ 341.457247][ T7370] do_group_exit+0xd3/0x2a0 [ 341.457279][ T7370] get_signal+0x2673/0x26d0 [ 341.457327][ T7370] ? fd_install+0x225/0x750 [ 341.457382][ T7370] ? __pfx_get_signal+0x10/0x10 [ 341.457425][ T7370] ? do_futex+0x122/0x350 [ 341.457477][ T7370] ? __pfx_do_futex+0x10/0x10 [ 341.457525][ T7370] arch_do_signal_or_restart+0x8f/0x7d0 [ 341.457576][ T7370] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 341.457639][ T7370] ? rcu_is_watching+0x12/0xc0 [ 341.457686][ T7370] syscall_exit_to_user_mode+0x150/0x2a0 [ 341.457736][ T7370] do_syscall_64+0xda/0x260 [ 341.457787][ T7370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.457819][ T7370] RIP: 0033:0x7f83c2f8e169 [ 341.457844][ T7370] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 341.457873][ T7370] RSP: 002b:00007f83c3dbc0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 341.457902][ T7370] RAX: fffffffffffffe00 RBX: 00007f83c31b5fa8 RCX: 00007f83c2f8e169 [ 341.457923][ T7370] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f83c31b5fa8 [ 341.457941][ T7370] RBP: 00007f83c31b5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 341.457960][ T7370] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f83c31b5fac [ 341.457978][ T7370] R13: 0000000000000000 R14: 00007fffc41736c0 R15: 00007fffc41737a8 [ 341.458017][ T7370] [ 341.973452][ T30] audit: type=1326 audit(6039880747.563:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7378 comm="syz.2.329" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd8eed8e169 code=0x0 syzkaller syzkaller login: [ 344.594078][ T7440] FAULT_INJECTION: forcing a failure. [ 344.594078][ T7440] name fail_futex, interval 1, probability 0, space 0, times 0 [ 344.652732][ T7440] CPU: 1 UID: 0 PID: 7440 Comm: syz.0.338 Not tainted 6.15.0-rc2-syzkaller-00087-gcfb2e2c57aef #0 PREEMPT(full) [ 344.652772][ T7440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 344.652789][ T7440] Call Trace: [ 344.652799][ T7440] [ 344.652810][ T7440] dump_stack_lvl+0x16c/0x1f0 [ 344.652859][ T7440] should_fail_ex+0x512/0x640 [ 344.652899][ T7440] get_futex_key+0x49e/0x1000 [ 344.652946][ T7440] ? __pfx_get_futex_key+0x10/0x10 [ 344.653000][ T7440] futex_wake+0xe7/0x4e0 [ 344.653026][ T7440] ? rcu_is_watching+0x12/0xc0 [ 344.653068][ T7440] ? __pfx_futex_wake+0x10/0x10 [ 344.653113][ T7440] do_futex+0x1e3/0x350 [ 344.653157][ T7440] ? __pfx_do_futex+0x10/0x10 [ 344.653196][ T7440] ? __might_fault+0xe3/0x190 [ 344.653263][ T7440] mm_release+0x24e/0x300 [ 344.653305][ T7440] do_exit+0x898/0x2c30 [ 344.653328][ T7440] ? __pfx_futex_wake_mark+0x10/0x10 [ 344.653365][ T7440] ? __pfx_do_exit+0x10/0x10 [ 344.653411][ T7440] ? do_raw_spin_lock+0x12c/0x2b0 [ 344.653445][ T7440] ? find_held_lock+0x2b/0x80 [ 344.653490][ T7440] do_group_exit+0xd3/0x2a0 [ 344.653520][ T7440] get_signal+0x2673/0x26d0 [ 344.653565][ T7440] ? fd_install+0x225/0x750 [ 344.653616][ T7440] ? __pfx_get_signal+0x10/0x10 [ 344.653674][ T7440] ? do_futex+0x122/0x350 [ 344.653719][ T7440] ? __pfx_do_futex+0x10/0x10 [ 344.653767][ T7440] arch_do_signal_or_restart+0x8f/0x7d0 [ 344.653817][ T7440] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 344.653879][ T7440] ? rcu_is_watching+0x12/0xc0 [ 344.653925][ T7440] syscall_exit_to_user_mode+0x150/0x2a0 [ 344.653975][ T7440] do_syscall_64+0xda/0x260 [ 344.654025][ T7440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.654056][ T7440] RIP: 0033:0x7f83c2f8e169 [ 344.654080][ T7440] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 344.654109][ T7440] RSP: 002b:00007f83c3dbc0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 344.654137][ T7440] RAX: fffffffffffffe00 RBX: 00007f83c31b5fa8 RCX: 00007f83c2f8e169 [ 344.654156][ T7440] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f83c31b5fa8 [ 344.654174][ T7440] RBP: 00007f83c31b5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 344.654192][ T7440] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f83c31b5fac [ 344.654210][ T7440] R13: 0000000000000000 R14: 00007fffc41736c0 R15: 00007fffc41737a8 [ 344.654256][ T7440] [ 346.927298][ T7505] program syz.0.348 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 347.013485][ T7505] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 347.747770][ T7511] FAULT_INJECTION: forcing a failure. [ 347.747770][ T7511] name fail_futex, interval 1, probability 0, space 0, times 0 [ 347.769355][ T7511] CPU: 1 UID: 0 PID: 7511 Comm: syz.2.349 Not tainted 6.15.0-rc2-syzkaller-00087-gcfb2e2c57aef #0 PREEMPT(full) [ 347.769394][ T7511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 347.769412][ T7511] Call Trace: [ 347.769422][ T7511] [ 347.769433][ T7511] dump_stack_lvl+0x16c/0x1f0 [ 347.769483][ T7511] should_fail_ex+0x512/0x640 [ 347.769523][ T7511] get_futex_key+0x49e/0x1000 [ 347.769572][ T7511] ? __pfx_get_futex_key+0x10/0x10 [ 347.769629][ T7511] futex_wake+0xe7/0x4e0 [ 347.769655][ T7511] ? rcu_is_watching+0x12/0xc0 [ 347.769697][ T7511] ? __pfx_futex_wake+0x10/0x10 [ 347.769753][ T7511] do_futex+0x1e3/0x350 [ 347.769803][ T7511] ? __pfx_do_futex+0x10/0x10 [ 347.769845][ T7511] ? __might_fault+0xe3/0x190 [ 347.769903][ T7511] mm_release+0x24e/0x300 [ 347.769950][ T7511] do_exit+0x898/0x2c30 [ 347.769974][ T7511] ? __pfx_futex_wake_mark+0x10/0x10 [ 347.770011][ T7511] ? __pfx_do_exit+0x10/0x10 [ 347.770059][ T7511] ? do_raw_spin_lock+0x12c/0x2b0 [ 347.770094][ T7511] ? find_held_lock+0x2b/0x80 [ 347.770141][ T7511] do_group_exit+0xd3/0x2a0 [ 347.770172][ T7511] get_signal+0x2673/0x26d0 [ 347.770220][ T7511] ? fd_install+0x225/0x750 [ 347.770271][ T7511] ? __pfx_get_signal+0x10/0x10 [ 347.770311][ T7511] ? do_futex+0x122/0x350 [ 347.770355][ T7511] ? __pfx_do_futex+0x10/0x10 [ 347.770403][ T7511] arch_do_signal_or_restart+0x8f/0x7d0 [ 347.770454][ T7511] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 347.770515][ T7511] ? rcu_is_watching+0x12/0xc0 [ 347.770561][ T7511] syscall_exit_to_user_mode+0x150/0x2a0 [ 347.770611][ T7511] do_syscall_64+0xda/0x260 [ 347.770659][ T7511] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.770691][ T7511] RIP: 0033:0x7fd8eed8e169 [ 347.770716][ T7511] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 347.770752][ T7511] RSP: 002b:00007fd8ecbf60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 347.770781][ T7511] RAX: fffffffffffffe00 RBX: 00007fd8eefb6168 RCX: 00007fd8eed8e169 [ 347.770801][ T7511] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fd8eefb6168 [ 347.770819][ T7511] RBP: 00007fd8eefb6160 R08: 0000000000000000 R09: 0000000000000000 [ 347.770837][ T7511] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd8eefb616c [ 347.770855][ T7511] R13: 0000000000000000 R14: 00007ffcc9fd38a0 R15: 00007ffcc9fd3988 [ 347.770893][ T7511] [ 348.368694][ T7523] Invalid ELF header magic: != ELF [ 349.005066][ T7540] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 350.698765][ T5863] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 350.874844][ T7570] FAULT_INJECTION: forcing a failure. [ 350.874844][ T7570] name fail_futex, interval 1, probability 0, space 0, times 0 [ 350.942862][ T7570] CPU: 1 UID: 0 PID: 7570 Comm: syz.0.361 Not tainted 6.15.0-rc2-syzkaller-00087-gcfb2e2c57aef #0 PREEMPT(full) [ 350.942904][ T7570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 350.942922][ T7570] Call Trace: [ 350.942931][ T7570] [ 350.942943][ T7570] dump_stack_lvl+0x16c/0x1f0 [ 350.942994][ T7570] should_fail_ex+0x512/0x640 [ 350.943037][ T7570] get_futex_key+0x49e/0x1000 [ 350.943085][ T7570] ? __pfx_get_futex_key+0x10/0x10 [ 350.943144][ T7570] futex_wake+0xe7/0x4e0 [ 350.943170][ T7570] ? rcu_is_watching+0x12/0xc0 [ 350.943213][ T7570] ? __pfx_futex_wake+0x10/0x10 [ 350.943261][ T7570] do_futex+0x1e3/0x350 [ 350.943306][ T7570] ? __pfx_do_futex+0x10/0x10 [ 350.943347][ T7570] ? __might_fault+0xe3/0x190 [ 350.943408][ T7570] mm_release+0x24e/0x300 [ 350.943449][ T7570] do_exit+0x898/0x2c30 [ 350.943473][ T7570] ? __pfx_futex_wake_mark+0x10/0x10 [ 350.943510][ T7570] ? __pfx_do_exit+0x10/0x10 [ 350.943558][ T7570] ? do_raw_spin_lock+0x12c/0x2b0 [ 350.943592][ T7570] ? find_held_lock+0x2b/0x80 [ 350.943637][ T7570] do_group_exit+0xd3/0x2a0 [ 350.943668][ T7570] get_signal+0x2673/0x26d0 [ 350.943714][ T7570] ? kmem_cache_free+0x2d4/0x4d0 [ 350.943766][ T7570] ? fd_install+0x225/0x750 [ 350.943817][ T7570] ? __pfx_get_signal+0x10/0x10 [ 350.943858][ T7570] ? do_futex+0x122/0x350 [ 350.943902][ T7570] ? __pfx_do_futex+0x10/0x10 [ 350.943963][ T7570] arch_do_signal_or_restart+0x8f/0x7d0 [ 350.944012][ T7570] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 350.944072][ T7570] ? rcu_is_watching+0x12/0xc0 [ 350.944121][ T7570] syscall_exit_to_user_mode+0x150/0x2a0 [ 350.944188][ T7570] do_syscall_64+0xda/0x260 [ 350.944239][ T7570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.944271][ T7570] RIP: 0033:0x7f83c2f8e169 [ 350.944295][ T7570] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 350.944325][ T7570] RSP: 002b:00007f83c3d7a0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 350.944355][ T7570] RAX: fffffffffffffe00 RBX: 00007f83c31b6168 RCX: 00007f83c2f8e169 [ 350.944375][ T7570] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f83c31b6168 [ 350.944394][ T7570] RBP: 00007f83c31b6160 R08: 0000000000000000 R09: 0000000000000000 [ 350.944412][ T7570] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f83c31b616c [ 350.944431][ T7570] R13: 0000000000000000 R14: 00007fffc41736c0 R15: 00007fffc41737a8 [ 350.944470][ T7570] [ 352.492114][ T7604] netlink: 8 bytes leftover after parsing attributes in process `syz.3.369'. [ 352.857154][ T7614] ubi0: attaching mtd0 [ 352.867723][ T7614] ubi0: scanning is finished [ 352.880239][ T7614] ubi0: empty MTD device detected [ 353.069969][ T7614] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 353.098278][ T7614] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 353.119919][ T7614] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 353.126998][ T7614] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 353.139935][ T7614] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 353.150238][ T7614] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 353.163816][ T7614] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3547771263 [ 353.199980][ T7614] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 353.213822][ T7621] ubi0: background thread "ubi_bgt0d" started, PID 7621 [ 353.538268][ T7631] random: crng reseeded on system resumption [ 353.899999][ T7627] FAULT_INJECTION: forcing a failure. [ 353.899999][ T7627] name fail_futex, interval 1, probability 0, space 0, times 0 [ 353.930651][ T7627] CPU: 0 UID: 0 PID: 7627 Comm: syz.3.375 Not tainted 6.15.0-rc2-syzkaller-00087-gcfb2e2c57aef #0 PREEMPT(full) [ 353.930694][ T7627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 353.930712][ T7627] Call Trace: [ 353.930722][ T7627] [ 353.930733][ T7627] dump_stack_lvl+0x16c/0x1f0 [ 353.930784][ T7627] should_fail_ex+0x512/0x640 [ 353.930826][ T7627] get_futex_key+0x49e/0x1000 [ 353.930874][ T7627] ? __pfx_get_futex_key+0x10/0x10 [ 353.930932][ T7627] futex_wake+0xe7/0x4e0 [ 353.930958][ T7627] ? rcu_is_watching+0x12/0xc0 [ 353.931002][ T7627] ? __pfx_futex_wake+0x10/0x10 [ 353.931050][ T7627] do_futex+0x1e3/0x350 [ 353.931095][ T7627] ? __pfx_do_futex+0x10/0x10 [ 353.931150][ T7627] ? __might_fault+0xe3/0x190 [ 353.931213][ T7627] mm_release+0x24e/0x300 [ 353.931259][ T7627] do_exit+0x898/0x2c30 [ 353.931283][ T7627] ? __pfx_futex_wake_mark+0x10/0x10 [ 353.931319][ T7627] ? __pfx_do_exit+0x10/0x10 [ 353.931376][ T7627] ? do_raw_spin_lock+0x12c/0x2b0 [ 353.931407][ T7627] ? find_held_lock+0x2b/0x80 [ 353.931456][ T7627] do_group_exit+0xd3/0x2a0 [ 353.931485][ T7627] get_signal+0x2673/0x26d0 [ 353.931528][ T7627] ? fd_install+0x225/0x750 [ 353.931573][ T7627] ? __pfx_get_signal+0x10/0x10 [ 353.931610][ T7627] ? do_futex+0x122/0x350 [ 353.931651][ T7627] ? __pfx_do_futex+0x10/0x10 [ 353.931705][ T7627] arch_do_signal_or_restart+0x8f/0x7d0 [ 353.931767][ T7627] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 353.931823][ T7627] ? rcu_is_watching+0x12/0xc0 [ 353.931865][ T7627] syscall_exit_to_user_mode+0x150/0x2a0 [ 353.931917][ T7627] do_syscall_64+0xda/0x260 [ 353.931959][ T7627] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.932003][ T7627] RIP: 0033:0x7f33e838e169 [ 353.932025][ T7627] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 353.932052][ T7627] RSP: 002b:00007f33e91fd0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 353.932078][ T7627] RAX: fffffffffffffe00 RBX: 00007f33e85b6168 RCX: 00007f33e838e169 [ 353.932096][ T7627] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f33e85b6168 [ 353.932112][ T7627] RBP: 00007f33e85b6160 R08: 0000000000000000 R09: 0000000000000000 [ 353.932128][ T7627] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f33e85b616c [ 353.932144][ T7627] R13: 0000000000000000 R14: 00007ffea30898f0 R15: 00007ffea30899d8 [ 353.932179][ T7627] [ 354.547333][ T7647] netlink: 'syz.3.382': attribute type 11 has an invalid length. [ 354.558957][ T7647] netlink: 'syz.3.382': attribute type 11 has an invalid length. [ 354.573293][ T7647] netlink: 'syz.3.382': attribute type 11 has an invalid length. [ 354.595450][ T30] audit: type=1326 audit(6039880760.183:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7646 comm="syz.3.382" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f33e838e169 code=0x0 [ 354.847288][ T7654] zero sized request [ 354.856754][ T7653] zero sized request [ 355.349740][ T30] audit: type=1326 audit(6039880760.933:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7658 comm="syz.1.385" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f51d6d8e169 code=0x0 [ 356.618690][ T7680] net_ratelimit: 75 callbacks suppressed [ 356.618707][ T7680] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 358.604469][ T7721] CIFS mount error: No usable UNC path provided in device string! [ 358.604469][ T7721] [ 358.614970][ T7721] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 359.204617][ T7727] Invalid ELF header magic: != ELF [ 359.508959][ T7730] Invalid ELF header magic: != ELF [ 359.788404][ T7738] netlink: 4 bytes leftover after parsing attributes in process `syz.3.399'. [ 360.957107][ T7751] udc dummy_udc.0: soft-connect without a gadget driver [ 361.114453][ T7745] FAULT_INJECTION: forcing a failure. [ 361.114453][ T7745] name fail_futex, interval 1, probability 0, space 0, times 0 [ 361.166535][ T7745] CPU: 1 UID: 0 PID: 7745 Comm: syz.0.400 Not tainted 6.15.0-rc2-syzkaller-00087-gcfb2e2c57aef #0 PREEMPT(full) [ 361.166574][ T7745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 361.166590][ T7745] Call Trace: [ 361.166599][ T7745] [ 361.166609][ T7745] dump_stack_lvl+0x16c/0x1f0 [ 361.166656][ T7745] should_fail_ex+0x512/0x640 [ 361.166693][ T7745] get_futex_key+0x49e/0x1000 [ 361.166736][ T7745] ? __pfx_get_futex_key+0x10/0x10 [ 361.166822][ T7745] futex_wake+0xe7/0x4e0 [ 361.166846][ T7745] ? rcu_is_watching+0x12/0xc0 [ 361.166885][ T7745] ? __pfx_futex_wake+0x10/0x10 [ 361.166934][ T7745] do_futex+0x1e3/0x350 [ 361.166976][ T7745] ? __pfx_do_futex+0x10/0x10 [ 361.167014][ T7745] ? __might_fault+0xe3/0x190 [ 361.167067][ T7745] mm_release+0x24e/0x300 [ 361.167104][ T7745] do_exit+0x898/0x2c30 [ 361.167136][ T7745] ? __pfx_futex_wake_mark+0x10/0x10 [ 361.167168][ T7745] ? __pfx_do_exit+0x10/0x10 [ 361.167209][ T7745] ? do_raw_spin_lock+0x12c/0x2b0 [ 361.167238][ T7745] ? find_held_lock+0x2b/0x80 [ 361.167278][ T7745] do_group_exit+0xd3/0x2a0 [ 361.167304][ T7745] get_signal+0x2673/0x26d0 [ 361.167346][ T7745] ? fd_install+0x225/0x750 [ 361.167388][ T7745] ? __pfx_get_signal+0x10/0x10 [ 361.167424][ T7745] ? do_futex+0x122/0x350 [ 361.167480][ T7745] ? __pfx_do_futex+0x10/0x10 [ 361.167525][ T7745] arch_do_signal_or_restart+0x8f/0x7d0 [ 361.167572][ T7745] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 361.167628][ T7745] ? rcu_is_watching+0x12/0xc0 [ 361.167670][ T7745] syscall_exit_to_user_mode+0x150/0x2a0 [ 361.167715][ T7745] do_syscall_64+0xda/0x260 [ 361.167760][ T7745] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.167789][ T7745] RIP: 0033:0x7f83c2f8e169 [ 361.167822][ T7745] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 361.167847][ T7745] RSP: 002b:00007f83c3d7a0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 361.167872][ T7745] RAX: fffffffffffffe00 RBX: 00007f83c31b6168 RCX: 00007f83c2f8e169 [ 361.167888][ T7745] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f83c31b6168 [ 361.167904][ T7745] RBP: 00007f83c31b6160 R08: 0000000000000000 R09: 0000000000000000 [ 361.167919][ T7745] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f83c31b616c [ 361.167941][ T7745] R13: 0000000000000000 R14: 00007fffc41736c0 R15: 00007fffc41737a8 [ 361.167975][ T7745] [ 361.744490][ T30] audit: type=1326 audit(6039880767.333:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7765 comm="syz.2.406" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd8eed8e169 code=0x0 [ 362.762276][ T7779] CIFS mount error: No usable UNC path provided in device string! [ 362.762276][ T7779] [ 362.772492][ T7779] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 363.039298][ T7787] CIFS mount error: No usable UNC path provided in device string! [ 363.039298][ T7787] [ 363.050020][ T7787] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 364.134508][ T7809] netlink: 44 bytes leftover after parsing attributes in process `syz.1.408'. [ 364.162191][ T7809] netlink: 44 bytes leftover after parsing attributes in process `syz.1.408'. [ 364.669575][ T7807] FAULT_INJECTION: forcing a failure. [ 364.669575][ T7807] name fail_futex, interval 1, probability 0, space 0, times 0 [ 364.682996][ T7807] CPU: 0 UID: 0 PID: 7807 Comm: syz.3.413 Not tainted 6.15.0-rc2-syzkaller-00087-gcfb2e2c57aef #0 PREEMPT(full) [ 364.683026][ T7807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 364.683038][ T7807] Call Trace: [ 364.683045][ T7807] [ 364.683053][ T7807] dump_stack_lvl+0x16c/0x1f0 [ 364.683089][ T7807] should_fail_ex+0x512/0x640 [ 364.683137][ T7807] get_futex_key+0x49e/0x1000 [ 364.683171][ T7807] ? __pfx_get_futex_key+0x10/0x10 [ 364.683211][ T7807] futex_wake+0xe7/0x4e0 [ 364.683230][ T7807] ? rcu_is_watching+0x12/0xc0 [ 364.683260][ T7807] ? __pfx_futex_wake+0x10/0x10 [ 364.683293][ T7807] do_futex+0x1e3/0x350 [ 364.683325][ T7807] ? __pfx_do_futex+0x10/0x10 [ 364.683354][ T7807] ? __might_fault+0xe3/0x190 [ 364.683403][ T7807] mm_release+0x24e/0x300 [ 364.683434][ T7807] do_exit+0x898/0x2c30 [ 364.683451][ T7807] ? __pfx_futex_wake_mark+0x10/0x10 [ 364.683477][ T7807] ? __pfx_do_exit+0x10/0x10 [ 364.683510][ T7807] ? do_raw_spin_lock+0x12c/0x2b0 [ 364.683535][ T7807] ? find_held_lock+0x2b/0x80 [ 364.683567][ T7807] do_group_exit+0xd3/0x2a0 [ 364.683588][ T7807] get_signal+0x2673/0x26d0 [ 364.683622][ T7807] ? fd_install+0x225/0x750 [ 364.683657][ T7807] ? __pfx_get_signal+0x10/0x10 [ 364.683686][ T7807] ? do_futex+0x122/0x350 [ 364.683722][ T7807] ? __pfx_do_futex+0x10/0x10 [ 364.683756][ T7807] arch_do_signal_or_restart+0x8f/0x7d0 [ 364.683791][ T7807] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 364.683834][ T7807] ? rcu_is_watching+0x12/0xc0 [ 364.683866][ T7807] syscall_exit_to_user_mode+0x150/0x2a0 [ 364.683900][ T7807] do_syscall_64+0xda/0x260 [ 364.683935][ T7807] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.683957][ T7807] RIP: 0033:0x7f33e838e169 [ 364.683974][ T7807] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 364.683995][ T7807] RSP: 002b:00007f33e91fd0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 364.684016][ T7807] RAX: fffffffffffffe00 RBX: 00007f33e85b6168 RCX: 00007f33e838e169 [ 364.684031][ T7807] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f33e85b6168 [ 364.684044][ T7807] RBP: 00007f33e85b6160 R08: 0000000000000000 R09: 0000000000000000 [ 364.684058][ T7807] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f33e85b616c [ 364.684071][ T7807] R13: 0000000000000000 R14: 00007ffea30898f0 R15: 00007ffea30899d8 [ 364.684099][ T7807] [ 365.713646][ T7832] CIFS mount error: No usable UNC path provided in device string! [ 365.713646][ T7832] [ 365.723714][ T7832] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 366.833742][ T7844] CIFS mount error: No usable UNC path provided in device string! [ 366.833742][ T7844] [ 366.845578][ T7844] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 369.296825][ T7866] FAULT_INJECTION: forcing a failure. [ 369.296825][ T7866] name fail_futex, interval 1, probability 0, space 0, times 0 [ 369.316662][ T7866] CPU: 1 UID: 0 PID: 7866 Comm: syz.2.429 Not tainted 6.15.0-rc2-syzkaller-00087-gcfb2e2c57aef #0 PREEMPT(full) [ 369.316703][ T7866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 369.316721][ T7866] Call Trace: [ 369.316732][ T7866] [ 369.316741][ T7866] dump_stack_lvl+0x16c/0x1f0 [ 369.316778][ T7866] should_fail_ex+0x512/0x640 [ 369.316807][ T7866] get_futex_key+0x49e/0x1000 [ 369.316842][ T7866] ? __pfx_get_futex_key+0x10/0x10 [ 369.316882][ T7866] futex_wake+0xe7/0x4e0 [ 369.316900][ T7866] ? rcu_is_watching+0x12/0xc0 [ 369.316930][ T7866] ? __pfx_futex_wake+0x10/0x10 [ 369.316963][ T7866] do_futex+0x1e3/0x350 [ 369.316995][ T7866] ? __pfx_do_futex+0x10/0x10 [ 369.317024][ T7866] ? __might_fault+0xe3/0x190 [ 369.317066][ T7866] mm_release+0x24e/0x300 [ 369.317095][ T7866] do_exit+0x898/0x2c30 [ 369.317112][ T7866] ? __pfx_futex_wake_mark+0x10/0x10 [ 369.317138][ T7866] ? __pfx_do_exit+0x10/0x10 [ 369.317172][ T7866] ? do_raw_spin_lock+0x12c/0x2b0 [ 369.317196][ T7866] ? find_held_lock+0x2b/0x80 [ 369.317233][ T7866] do_group_exit+0xd3/0x2a0 [ 369.317255][ T7866] get_signal+0x2673/0x26d0 [ 369.317289][ T7866] ? fd_install+0x225/0x750 [ 369.317325][ T7866] ? __pfx_get_signal+0x10/0x10 [ 369.317354][ T7866] ? do_futex+0x122/0x350 [ 369.317385][ T7866] ? __pfx_do_futex+0x10/0x10 [ 369.317419][ T7866] arch_do_signal_or_restart+0x8f/0x7d0 [ 369.317454][ T7866] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 369.317497][ T7866] ? rcu_is_watching+0x12/0xc0 [ 369.317529][ T7866] syscall_exit_to_user_mode+0x150/0x2a0 [ 369.317563][ T7866] do_syscall_64+0xda/0x260 [ 369.317597][ T7866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.317619][ T7866] RIP: 0033:0x7fd8eed8e169 [ 369.317637][ T7866] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 369.317658][ T7866] RSP: 002b:00007fd8ecbf60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 369.317683][ T7866] RAX: fffffffffffffe00 RBX: 00007fd8eefb6168 RCX: 00007fd8eed8e169 [ 369.317698][ T7866] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fd8eefb6168 [ 369.317711][ T7866] RBP: 00007fd8eefb6160 R08: 0000000000000000 R09: 0000000000000000 [ 369.317724][ T7866] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd8eefb616c [ 369.317737][ T7866] R13: 0000000000000000 R14: 00007ffcc9fd38a0 R15: 00007ffcc9fd3988 [ 369.317764][ T7866] [ 370.614639][ T30] audit: type=1326 audit(6039880776.203:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7896 comm="syz.1.435" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f51d6d8e169 code=0x0 [ 371.302747][ T7909] netlink: 'syz.0.439': attribute type 11 has an invalid length. [ 371.334363][ T7909] netlink: 8 bytes leftover after parsing attributes in process `syz.0.439'. [ 373.618563][ T7956] CIFS mount error: No usable UNC path provided in device string! [ 373.618563][ T7956] [ 373.632143][ T7956] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 374.502873][ T7960] nfs4: Unknown parameter 'nfsd' [ 374.836105][ T7967] syz.0.452 uses obsolete (PF_INET,SOCK_PACKET) [ 375.874788][ T7985] FAULT_INJECTION: forcing a failure. [ 375.874788][ T7985] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 375.915051][ T7985] CPU: 0 UID: 0 PID: 7985 Comm: syz.3.455 Not tainted 6.15.0-rc2-syzkaller-00087-gcfb2e2c57aef #0 PREEMPT(full) [ 375.915096][ T7985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 375.915115][ T7985] Call Trace: [ 375.915125][ T7985] [ 375.915137][ T7985] dump_stack_lvl+0x16c/0x1f0 [ 375.915190][ T7985] should_fail_ex+0x512/0x640 [ 375.915233][ T7985] should_fail_alloc_page+0xe7/0x130 [ 375.915266][ T7985] prepare_alloc_pages+0x3c2/0x610 [ 375.915311][ T7985] __alloc_frozen_pages_noprof+0x18f/0x23a0 [ 375.915368][ T7985] ? futex_wait+0x120/0x380 [ 375.915407][ T7985] ? __pfx_futex_wait+0x10/0x10 [ 375.915443][ T7985] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 375.915493][ T7985] ? kmem_cache_free+0x2d4/0x4d0 [ 375.915538][ T7985] ? fd_install+0x225/0x750 [ 375.915579][ T7985] ? putname+0x154/0x1a0 [ 375.915617][ T7985] ? do_futex+0x122/0x350 [ 375.915661][ T7985] ? aa_get_newest_label+0x375/0x680 [ 375.915691][ T7985] ? __pfx_do_futex+0x10/0x10 [ 375.915736][ T7985] ? __pfx_aa_get_newest_label+0x10/0x10 [ 375.915768][ T7985] ? rcu_is_watching+0x12/0xc0 [ 375.915806][ T7985] ? trace_cap_capable+0x18d/0x200 [ 375.915840][ T7985] __alloc_pages_noprof+0xb/0x1b0 [ 375.915888][ T7985] ___kmalloc_large_node+0x82/0x1e0 [ 375.915930][ T7985] __kmalloc_large_noprof+0x1c/0x70 [ 375.915965][ T7985] ? bpf_lsm_locked_down+0x9/0x10 [ 375.916012][ T7985] ksys_ioperm+0x3c9/0x4f0 [ 375.916048][ T7985] do_syscall_64+0xcd/0x260 [ 375.916099][ T7985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.916131][ T7985] RIP: 0033:0x7f33e838e169 [ 375.916157][ T7985] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 375.916187][ T7985] RSP: 002b:00007f33e921e038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ad [ 375.916216][ T7985] RAX: ffffffffffffffda RBX: 00007f33e85b6080 RCX: 00007f33e838e169 [ 375.916236][ T7985] RDX: 0000000000000010 RSI: 0000000000000fff RDI: 0000000000000002 [ 375.916253][ T7985] RBP: 00007f33e8410a68 R08: 0000000000000000 R09: 0000000000000000 [ 375.916271][ T7985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 375.916289][ T7985] R13: 0000000000000000 R14: 00007f33e85b6080 R15: 00007ffea30899d8 [ 375.916327][ T7985] [ 376.959919][ T8005] CIFS mount error: No usable UNC path provided in device string! [ 376.959919][ T8005] [ 376.988564][ T8005] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 377.495444][ T5863] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 377.617747][ T8019] CIFS mount error: No usable UNC path provided in device string! [ 377.617747][ T8019] [ 377.628182][ T8019] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 380.642671][ T5860] Bluetooth: hci1: unexpected event 0x03 length: 2 < 11 [ 380.843291][ T8052] input input7: cannot allocate more than FF_MAX_EFFECTS effects [ 381.176319][ T8053] Invalid ELF header magic: != ELF [ 381.752870][ T8060] aoe: can't write to that file. [ 381.851382][ T8081] netlink: zone id is out of range [ 381.856563][ T8081] netlink: zone id is out of range [ 381.964433][ T8081] netlink: zone id is out of range [ 381.969744][ T8081] netlink: zone id is out of range [ 381.976579][ T8081] netlink: zone id is out of range [ 381.983694][ T8081] netlink: zone id is out of range [ 381.988903][ T8081] netlink: zone id is out of range [ 381.994553][ T8081] netlink: zone id is out of range [ 381.999756][ T8081] netlink: zone id is out of range [ 382.005355][ T8081] netlink: zone id is out of range [ 382.984634][ T8100] capability: warning: `syz.0.482' uses 32-bit capabilities (legacy support in use) [ 383.034567][ T8100] device-mapper: ioctl: Unable to rename non-existent device,  to „ [ 383.167699][ T8102] netlink: 28 bytes leftover after parsing attributes in process `syz.0.483'. [ 383.406138][ T8108] ima: policy update failed [ 383.420587][ T30] audit: type=1802 audit(6039880789.003:24): pid=8108 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.486" res=0 errno=0 [ 383.702446][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.708862][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 383.817809][ T8124] netlink: 28 bytes leftover after parsing attributes in process `syz.0.488'. [ 384.135622][ T8124] bond0: (slave bond_slave_0): Releasing backup interface [ 384.161161][ T8135] CIFS mount error: No usable UNC path provided in device string! [ 384.161161][ T8135] [ 384.173846][ T8135] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 384.320085][ T30] audit: type=1800 audit(6039880789.883:25): pid=8138 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.492" name="dummy_udc" dev="gadgetfs" ino=6564 res=0 errno=0 [ 385.466218][ T8145] FAULT_INJECTION: forcing a failure. [ 385.466218][ T8145] name failslab, interval 1, probability 0, space 0, times 0 [ 385.484282][ T8145] CPU: 0 UID: 0 PID: 8145 Comm: syz.1.496 Not tainted 6.15.0-rc2-syzkaller-00087-gcfb2e2c57aef #0 PREEMPT(full) [ 385.484321][ T8145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 385.484337][ T8145] Call Trace: [ 385.484346][ T8145] [ 385.484356][ T8145] dump_stack_lvl+0x16c/0x1f0 [ 385.484403][ T8145] should_fail_ex+0x512/0x640 [ 385.484433][ T8145] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 385.484480][ T8145] should_failslab+0xc2/0x120 [ 385.484506][ T8145] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 385.484546][ T8145] ? __proc_create+0xc3/0x8c0 [ 385.484575][ T8145] ? __proc_create+0x2ce/0x8c0 [ 385.484626][ T8145] __proc_create+0x2ce/0x8c0 [ 385.484659][ T8145] ? __pfx___proc_create+0x10/0x10 [ 385.484699][ T8145] ? _raw_write_unlock+0x28/0x50 [ 385.484743][ T8145] proc_create_reg+0x7d/0x180 [ 385.484781][ T8145] proc_create_data+0x86/0x110 [ 385.484815][ T8145] ? __pfx_proc_create_data+0x10/0x10 [ 385.484852][ T8145] ? cache_register_net+0x137/0x5e0 [ 385.484896][ T8145] cache_register_net+0x1e0/0x5e0 [ 385.484938][ T8145] gss_svc_init_net+0x98/0x660 [ 385.484978][ T8145] ? __pfx_canbcm_pernet_init+0x10/0x10 [ 385.485021][ T8145] ? __pfx_rpcsec_gss_init_net+0x10/0x10 [ 385.485054][ T8145] ops_init+0x1df/0x5f0 [ 385.485100][ T8145] setup_net+0x21e/0x850 [ 385.485148][ T8145] ? __pfx_setup_net+0x10/0x10 [ 385.485187][ T8145] ? lockdep_init_map_type+0x5c/0x280 [ 385.485217][ T8145] ? __pfx_down_read_killable+0x10/0x10 [ 385.485250][ T8145] ? debug_mutex_init+0x37/0x70 [ 385.485291][ T8145] copy_net_ns+0x2a6/0x5f0 [ 385.485339][ T8145] create_new_namespaces+0x3ea/0xad0 [ 385.485390][ T8145] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 385.485437][ T8145] ksys_unshare+0x45b/0xa40 [ 385.485483][ T8145] ? __pfx_ksys_unshare+0x10/0x10 [ 385.485527][ T8145] ? xfd_validate_state+0x5d/0x180 [ 385.485562][ T8145] ? rcu_is_watching+0x12/0xc0 [ 385.485608][ T8145] __x64_sys_unshare+0x31/0x40 [ 385.485653][ T8145] do_syscall_64+0xcd/0x260 [ 385.485700][ T8145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.485729][ T8145] RIP: 0033:0x7f51d6d8e169 [ 385.485753][ T8145] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 385.485781][ T8145] RSP: 002b:00007f51d7c0f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 385.485809][ T8145] RAX: ffffffffffffffda RBX: 00007f51d6fb5fa0 RCX: 00007f51d6d8e169 [ 385.485828][ T8145] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 385.485845][ T8145] RBP: 00007f51d6e10a68 R08: 0000000000000000 R09: 0000000000000000 [ 385.485862][ T8145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 385.485878][ T8145] R13: 0000000000000000 R14: 00007f51d6fb5fa0 R15: 00007fff67a5de78 [ 385.485924][ T8145] [ 387.670797][ T8195] CIFS mount error: No usable UNC path provided in device string! [ 387.670797][ T8195] [ 387.681324][ T8195] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 389.217588][ T8233] netlink: 'syz.3.513': attribute type 4 has an invalid length. [ 389.278555][ T8233] netlink: 314 bytes leftover after parsing attributes in process `syz.3.513'. [ 390.396494][ T8251] netlink: 'syz.3.516': attribute type 39 has an invalid length. [ 390.412486][ T8251] netlink: 330 bytes leftover after parsing attributes in process `syz.3.516'. [ 391.659763][ T5860] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 393.256519][ T8314] netlink: 28 bytes leftover after parsing attributes in process `syz.1.529'. [ 393.763107][ T8321] netlink: 12 bytes leftover after parsing attributes in process `syz.2.531'. [ 396.585755][ T8377] CIFS mount error: No usable UNC path provided in device string! [ 396.585755][ T8377] [ 396.596035][ T8377] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 397.338960][ T8381] Invalid ELF header magic: != ELF [ 397.535501][ T8402] netlink: 28 bytes leftover after parsing attributes in process `syz.0.548'. [ 398.564376][ T8430] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !PjE ùrõ£Ò„yù*›"¤l-ý¤ôy–ú„ [ 399.206550][ T8449] CIFS mount error: No usable UNC path provided in device string! [ 399.206550][ T8449] [ 399.217183][ T8449] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 401.822877][ T8495] CIFS mount error: No usable UNC path provided in device string! [ 401.822877][ T8495] [ 401.846434][ T8495] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 403.947868][ T8533] FAULT_INJECTION: forcing a failure. [ 403.947868][ T8533] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 403.978894][ T8533] CPU: 1 UID: 0 PID: 8533 Comm: syz.0.577 Not tainted 6.15.0-rc2-syzkaller-00087-gcfb2e2c57aef #0 PREEMPT(full) [ 403.978937][ T8533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 403.978956][ T8533] Call Trace: [ 403.978966][ T8533] [ 403.978977][ T8533] dump_stack_lvl+0x16c/0x1f0 [ 403.979028][ T8533] should_fail_ex+0x512/0x640 [ 403.979070][ T8533] _copy_from_user+0x2e/0xd0 [ 403.979123][ T8533] ucma_write+0x128/0x330 [ 403.979203][ T8533] ? __pfx_ucma_write+0x10/0x10 [ 403.979252][ T8533] ? bpf_lsm_file_permission+0x9/0x10 [ 403.979295][ T8533] ? security_file_permission+0x71/0x210 [ 403.979338][ T8533] ? rw_verify_area+0xcf/0x680 [ 403.979382][ T8533] vfs_write+0x25c/0x1180 [ 403.979423][ T8533] ? __pfx_ucma_write+0x10/0x10 [ 403.979482][ T8533] ? __pfx_vfs_write+0x10/0x10 [ 403.979527][ T8533] ? do_sys_openat2+0x157/0x1d0 [ 403.979560][ T8533] ? __pfx_do_sys_openat2+0x10/0x10 [ 403.979596][ T8533] ? fd_install+0x244/0x750 [ 403.979655][ T8533] ksys_write+0x205/0x240 [ 403.979699][ T8533] ? __pfx_ksys_write+0x10/0x10 [ 403.979741][ T8533] ? rcu_is_watching+0x12/0xc0 [ 403.979794][ T8533] do_syscall_64+0xcd/0x260 [ 403.979845][ T8533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.979878][ T8533] RIP: 0033:0x7f83c2f8e169 [ 403.979901][ T8533] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 403.979931][ T8533] RSP: 002b:00007f83c3dbc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 403.979963][ T8533] RAX: ffffffffffffffda RBX: 00007f83c31b5fa0 RCX: 00007f83c2f8e169 [ 403.979984][ T8533] RDX: 00000000000000c3 RSI: 0000000000000000 RDI: 0000000000000014 [ 403.980003][ T8533] RBP: 00007f83c3dbc090 R08: 0000000000000000 R09: 0000000000000000 [ 403.980023][ T8533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 403.980042][ T8533] R13: 0000000000000000 R14: 00007f83c31b5fa0 R15: 00007fffc41737a8 [ 403.980083][ T8533] [ 404.175782][ C1] vkms_vblank_simulate: vblank timer overrun [ 404.949034][ T8550] CIFS mount error: No usable UNC path provided in device string! [ 404.949034][ T8550] [ 404.959914][ T8550] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 405.587424][ T8559] debugfs: Directory '!PjE ùrõ£Ò„yù*›"¤l-ý¤ôy–ú„L̓÷ÓÄ]' with parent 'ieee80211' already present! [ 407.558678][ T8593] FAULT_INJECTION: forcing a failure. [ 407.558678][ T8593] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 407.629349][ T8593] CPU: 1 UID: 0 PID: 8593 Comm: syz.2.591 Not tainted 6.15.0-rc2-syzkaller-00087-gcfb2e2c57aef #0 PREEMPT(full) [ 407.629381][ T8593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 407.629394][ T8593] Call Trace: [ 407.629402][ T8593] [ 407.629410][ T8593] dump_stack_lvl+0x16c/0x1f0 [ 407.629447][ T8593] should_fail_ex+0x512/0x640 [ 407.629476][ T8593] _copy_from_user+0x2e/0xd0 [ 407.629504][ T8593] ucma_migrate_id+0xd4/0xb80 [ 407.629535][ T8593] ? __pfx_ucma_migrate_id+0x10/0x10 [ 407.629557][ T8593] ? __might_fault+0xe3/0x190 [ 407.629590][ T8593] ? __might_fault+0xe3/0x190 [ 407.629630][ T8593] ? __pfx_ucma_migrate_id+0x10/0x10 [ 407.629655][ T8593] ucma_write+0x1f8/0x330 [ 407.629689][ T8593] ? __pfx_ucma_write+0x10/0x10 [ 407.629722][ T8593] ? bpf_lsm_file_permission+0x9/0x10 [ 407.629749][ T8593] ? security_file_permission+0x71/0x210 [ 407.629797][ T8593] ? rw_verify_area+0xcf/0x680 [ 407.629838][ T8593] vfs_write+0x25c/0x1180 [ 407.629877][ T8593] ? __pfx_ucma_write+0x10/0x10 [ 407.629932][ T8593] ? __pfx_vfs_write+0x10/0x10 [ 407.629983][ T8593] ? do_sys_openat2+0x157/0x1d0 [ 407.630032][ T8593] ? __pfx_do_sys_openat2+0x10/0x10 [ 407.630068][ T8593] ? fd_install+0x244/0x750 [ 407.630127][ T8593] ksys_write+0x205/0x240 [ 407.630170][ T8593] ? __pfx_ksys_write+0x10/0x10 [ 407.630212][ T8593] ? rcu_is_watching+0x12/0xc0 [ 407.630263][ T8593] do_syscall_64+0xcd/0x260 [ 407.630315][ T8593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.630346][ T8593] RIP: 0033:0x7fd8eed8e169 [ 407.630371][ T8593] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 407.630401][ T8593] RSP: 002b:00007fd8efb46038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 407.630431][ T8593] RAX: ffffffffffffffda RBX: 00007fd8eefb5fa0 RCX: 00007fd8eed8e169 [ 407.630452][ T8593] RDX: 00000000000000c3 RSI: 0000000000000000 RDI: 0000000000000014 [ 407.630470][ T8593] RBP: 00007fd8efb46090 R08: 0000000000000000 R09: 0000000000000000 [ 407.630488][ T8593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 407.630506][ T8593] R13: 0000000000000000 R14: 00007fd8eefb5fa0 R15: 00007ffcc9fd3988 [ 407.630544][ T8593] [ 407.850223][ C1] vkms_vblank_simulate: vblank timer overrun [ 408.175824][ T8601] netlink: 8 bytes leftover after parsing attributes in process `syz.0.593'. [ 408.845481][ T8617] FAULT_INJECTION: forcing a failure. [ 408.845481][ T8617] name fail_futex, interval 1, probability 0, space 0, times 0 [ 408.914663][ T8617] CPU: 1 UID: 0 PID: 8617 Comm: syz.2.597 Not tainted 6.15.0-rc2-syzkaller-00087-gcfb2e2c57aef #0 PREEMPT(full) [ 408.914712][ T8617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 408.914731][ T8617] Call Trace: [ 408.914742][ T8617] [ 408.914754][ T8617] dump_stack_lvl+0x16c/0x1f0 [ 408.914807][ T8617] should_fail_ex+0x512/0x640 [ 408.914852][ T8617] get_futex_key+0x49e/0x1000 [ 408.914896][ T8617] ? __pfx_get_page_from_freelist+0x10/0x10 [ 408.914949][ T8617] ? __pfx_get_futex_key+0x10/0x10 [ 408.915005][ T8617] ? trace_mm_page_alloc+0x11f/0x1a0 [ 408.915046][ T8617] ? __alloc_frozen_pages_noprof+0x298/0x23a0 [ 408.915105][ T8617] futex_wake+0xe7/0x4e0 [ 408.915139][ T8617] ? __pfx_futex_wake+0x10/0x10 [ 408.915169][ T8617] ? __lock_acquire+0x5ca/0x1ba0 [ 408.915203][ T8617] ? fd_install+0x225/0x750 [ 408.915246][ T8617] ? putname+0x154/0x1a0 [ 408.915283][ T8617] do_futex+0x1e3/0x350 [ 408.915330][ T8617] ? __pfx_do_futex+0x10/0x10 [ 408.915377][ T8617] ? rcu_read_unlock+0x17/0x60 [ 408.915417][ T8617] __x64_sys_futex+0x1e0/0x4c0 [ 408.915466][ T8617] ? __pfx_native_tss_update_io_bitmap+0x10/0x10 [ 408.915509][ T8617] ? __pfx___x64_sys_futex+0x10/0x10 [ 408.915573][ T8617] do_syscall_64+0xcd/0x260 [ 408.915625][ T8617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.915664][ T8617] RIP: 0033:0x7fd8eed8e169 [ 408.915690][ T8617] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 408.915723][ T8617] RSP: 002b:00007fd8efb250e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 408.915755][ T8617] RAX: ffffffffffffffda RBX: 00007fd8eefb6088 RCX: 00007fd8eed8e169 [ 408.915777][ T8617] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fd8eefb608c [ 408.915798][ T8617] RBP: 00007fd8eefb6080 R08: 00007fd8efb47000 R09: 0000000000000000 [ 408.915830][ T8617] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd8eefb608c [ 408.915849][ T8617] R13: 0000000000000000 R14: 00007ffcc9fd38a0 R15: 00007ffcc9fd3988 [ 408.915886][ T8617] [ 410.410948][ T8652] netlink: 8 bytes leftover after parsing attributes in process `syz.3.606'. [ 411.571294][ T8672] Invalid ELF header magic: != ELF [ 411.576593][ T8671] FAULT_INJECTION: forcing a failure. [ 411.576593][ T8671] name fail_futex, interval 1, probability 0, space 0, times 0 [ 411.612570][ T8671] CPU: 1 UID: 0 PID: 8671 Comm: syz.1.609 Not tainted 6.15.0-rc2-syzkaller-00087-gcfb2e2c57aef #0 PREEMPT(full) [ 411.612611][ T8671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 411.612630][ T8671] Call Trace: [ 411.612639][ T8671] [ 411.612651][ T8671] dump_stack_lvl+0x16c/0x1f0 [ 411.612703][ T8671] should_fail_ex+0x512/0x640 [ 411.612744][ T8671] get_futex_key+0x49e/0x1000 [ 411.612801][ T8671] ? __pfx_get_futex_key+0x10/0x10 [ 411.612858][ T8671] futex_wake+0xe7/0x4e0 [ 411.612884][ T8671] ? rcu_is_watching+0x12/0xc0 [ 411.612928][ T8671] ? __pfx_futex_wake+0x10/0x10 [ 411.612975][ T8671] do_futex+0x1e3/0x350 [ 411.613022][ T8671] ? __pfx_do_futex+0x10/0x10 [ 411.613064][ T8671] ? __might_fault+0xe3/0x190 [ 411.613124][ T8671] mm_release+0x24e/0x300 [ 411.613177][ T8671] do_exit+0x898/0x2c30 [ 411.613201][ T8671] ? __pfx_futex_wake_mark+0x10/0x10 [ 411.613238][ T8671] ? __pfx_do_exit+0x10/0x10 [ 411.613286][ T8671] ? do_raw_spin_lock+0x12c/0x2b0 [ 411.613320][ T8671] ? find_held_lock+0x2b/0x80 [ 411.613366][ T8671] do_group_exit+0xd3/0x2a0 [ 411.613397][ T8671] get_signal+0x2673/0x26d0 [ 411.613445][ T8671] ? fd_install+0x225/0x750 [ 411.613494][ T8671] ? __pfx_get_signal+0x10/0x10 [ 411.613535][ T8671] ? do_futex+0x122/0x350 [ 411.613579][ T8671] ? __pfx_do_futex+0x10/0x10 [ 411.613627][ T8671] arch_do_signal_or_restart+0x8f/0x7d0 [ 411.613685][ T8671] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 411.613757][ T8671] ? rcu_is_watching+0x12/0xc0 [ 411.613806][ T8671] syscall_exit_to_user_mode+0x150/0x2a0 [ 411.613875][ T8671] do_syscall_64+0xda/0x260 [ 411.613934][ T8671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.613963][ T8671] RIP: 0033:0x7f51d6d8e169 [ 411.613985][ T8671] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 411.614012][ T8671] RSP: 002b:00007f51d7bee0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 411.614038][ T8671] RAX: fffffffffffffe00 RBX: 00007f51d6fb6088 RCX: 00007f51d6d8e169 [ 411.614056][ T8671] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f51d6fb6088 [ 411.614073][ T8671] RBP: 00007f51d6fb6080 R08: 0000000000000000 R09: 0000000000000000 [ 411.614090][ T8671] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f51d6fb608c [ 411.614106][ T8671] R13: 0000000000000000 R14: 00007fff67a5dd90 R15: 00007fff67a5de78 [ 411.614142][ T8671] [ 413.639591][ T8723] netlink: 8 bytes leftover after parsing attributes in process `syz.3.622'. [ 415.545090][ T8760] FAULT_INJECTION: forcing a failure. [ 415.545090][ T8760] name fail_futex, interval 1, probability 0, space 0, times 0 [ 415.696251][ T8760] CPU: 0 UID: 0 PID: 8760 Comm: syz.2.628 Not tainted 6.15.0-rc2-syzkaller-00087-gcfb2e2c57aef #0 PREEMPT(full) [ 415.696297][ T8760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 415.696318][ T8760] Call Trace: [ 415.696329][ T8760] [ 415.696341][ T8760] dump_stack_lvl+0x16c/0x1f0 [ 415.696395][ T8760] should_fail_ex+0x512/0x640 [ 415.696441][ T8760] get_futex_key+0x49e/0x1000 [ 415.696495][ T8760] ? __pfx_get_page_from_freelist+0x10/0x10 [ 415.696552][ T8760] ? __pfx_get_futex_key+0x10/0x10 [ 415.696600][ T8760] ? trace_mm_page_alloc+0x11f/0x1a0 [ 415.696641][ T8760] ? __alloc_frozen_pages_noprof+0x298/0x23a0 [ 415.696700][ T8760] futex_wake+0xe7/0x4e0 [ 415.696737][ T8760] ? __pfx_futex_wake+0x10/0x10 [ 415.696769][ T8760] ? __lock_acquire+0x5ca/0x1ba0 [ 415.696807][ T8760] ? fd_install+0x225/0x750 [ 415.696855][ T8760] ? putname+0x154/0x1a0 [ 415.696896][ T8760] do_futex+0x1e3/0x350 [ 415.696947][ T8760] ? __pfx_do_futex+0x10/0x10 [ 415.696997][ T8760] ? rcu_read_unlock+0x17/0x60 [ 415.697038][ T8760] __x64_sys_futex+0x1e0/0x4c0 [ 415.697089][ T8760] ? __pfx_native_tss_update_io_bitmap+0x10/0x10 [ 415.697133][ T8760] ? __pfx___x64_sys_futex+0x10/0x10 [ 415.697200][ T8760] do_syscall_64+0xcd/0x260 [ 415.697267][ T8760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.697299][ T8760] RIP: 0033:0x7fd8eed8e169 [ 415.697323][ T8760] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 415.697352][ T8760] RSP: 002b:00007fd8efb250e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 415.697380][ T8760] RAX: ffffffffffffffda RBX: 00007fd8eefb6088 RCX: 00007fd8eed8e169 [ 415.697399][ T8760] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fd8eefb608c [ 415.697415][ T8760] RBP: 00007fd8eefb6080 R08: 00007fd8efb47000 R09: 0000000000000000 [ 415.697432][ T8760] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd8eefb608c [ 415.697449][ T8760] R13: 0000000000000000 R14: 00007ffcc9fd38a0 R15: 00007ffcc9fd3988 [ 415.697493][ T8760] [ 417.605604][ T8805] FAULT_INJECTION: forcing a failure. [ 417.605604][ T8805] name fail_futex, interval 1, probability 0, space 0, times 0 [ 417.630784][ T8805] CPU: 1 UID: 0 PID: 8805 Comm: syz.0.648 Not tainted 6.15.0-rc2-syzkaller-00087-gcfb2e2c57aef #0 PREEMPT(full) [ 417.630826][ T8805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 417.630845][ T8805] Call Trace: [ 417.630854][ T8805] [ 417.630866][ T8805] dump_stack_lvl+0x16c/0x1f0 [ 417.630917][ T8805] should_fail_ex+0x512/0x640 [ 417.630958][ T8805] get_futex_key+0x49e/0x1000 [ 417.631007][ T8805] ? __pfx_get_futex_key+0x10/0x10 [ 417.631069][ T8805] futex_wake+0xe7/0x4e0 [ 417.631096][ T8805] ? rcu_is_watching+0x12/0xc0 [ 417.631140][ T8805] ? __pfx_futex_wake+0x10/0x10 [ 417.631190][ T8805] do_futex+0x1e3/0x350 [ 417.631237][ T8805] ? __pfx_do_futex+0x10/0x10 [ 417.631303][ T8805] ? __might_fault+0xe3/0x190 [ 417.631353][ T8805] mm_release+0x24e/0x300 [ 417.631391][ T8805] do_exit+0x898/0x2c30 [ 417.631411][ T8805] ? __pfx_futex_wake_mark+0x10/0x10 [ 417.631444][ T8805] ? __pfx_do_exit+0x10/0x10 [ 417.631485][ T8805] ? do_raw_spin_lock+0x12c/0x2b0 [ 417.631516][ T8805] ? find_held_lock+0x2b/0x80 [ 417.631555][ T8805] do_group_exit+0xd3/0x2a0 [ 417.631582][ T8805] get_signal+0x2673/0x26d0 [ 417.631622][ T8805] ? fd_install+0x225/0x750 [ 417.631667][ T8805] ? __pfx_get_signal+0x10/0x10 [ 417.631721][ T8805] ? do_futex+0x122/0x350 [ 417.631761][ T8805] ? __pfx_do_futex+0x10/0x10 [ 417.631805][ T8805] arch_do_signal_or_restart+0x8f/0x7d0 [ 417.631851][ T8805] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 417.631907][ T8805] ? rcu_is_watching+0x12/0xc0 [ 417.631950][ T8805] syscall_exit_to_user_mode+0x150/0x2a0 [ 417.631995][ T8805] do_syscall_64+0xda/0x260 [ 417.632041][ T8805] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.632070][ T8805] RIP: 0033:0x7f83c2f8e169 [ 417.632092][ T8805] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 417.632120][ T8805] RSP: 002b:00007f83c3d9b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 417.632146][ T8805] RAX: fffffffffffffe00 RBX: 00007f83c31b6088 RCX: 00007f83c2f8e169 [ 417.632165][ T8805] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f83c31b6088 [ 417.632183][ T8805] RBP: 00007f83c31b6080 R08: 0000000000000000 R09: 0000000000000000 [ 417.632200][ T8805] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f83c31b608c [ 417.632217][ T8805] R13: 0000000000000000 R14: 00007fffc41736c0 R15: 00007fffc41737a8 [ 417.632253][ T8805] [ 418.206167][ T8816] CIFS mount error: No usable UNC path provided in device string! [ 418.206167][ T8816] [ 418.216975][ T8816] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 420.169365][ T8854] FAULT_INJECTION: forcing a failure. [ 420.169365][ T8854] name failslab, interval 1, probability 0, space 0, times 0 [ 420.191659][ T8854] CPU: 1 UID: 0 PID: 8854 Comm: syz.2.653 Not tainted 6.15.0-rc2-syzkaller-00087-gcfb2e2c57aef #0 PREEMPT(full) [ 420.191695][ T8854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 420.191711][ T8854] Call Trace: [ 420.191719][ T8854] [ 420.191728][ T8854] dump_stack_lvl+0x16c/0x1f0 [ 420.191771][ T8854] should_fail_ex+0x512/0x640 [ 420.191801][ T8854] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 420.191842][ T8854] should_failslab+0xc2/0x120 [ 420.191868][ T8854] __kmalloc_cache_noprof+0x6a/0x3e0 [ 420.191905][ T8854] ? kobject_create_and_add+0x4a/0xf0 [ 420.191937][ T8854] kobject_create_and_add+0x4a/0xf0 [ 420.191965][ T8854] add_disk_fwnode+0x8d0/0x13a0 [ 420.192004][ T8854] loop_add+0x909/0xb70 [ 420.192032][ T8854] ? do_vfs_ioctl+0x512/0x1990 [ 420.192064][ T8854] ? __pfx_loop_add+0x10/0x10 [ 420.192106][ T8854] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 420.192193][ T8854] ? find_held_lock+0x2b/0x80 [ 420.192238][ T8854] loop_control_ioctl+0x13c/0x630 [ 420.192274][ T8854] ? __pfx_loop_control_ioctl+0x10/0x10 [ 420.192314][ T8854] ? __pfx_loop_control_ioctl+0x10/0x10 [ 420.192351][ T8854] __x64_sys_ioctl+0x190/0x200 [ 420.192391][ T8854] do_syscall_64+0xcd/0x260 [ 420.192441][ T8854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.192472][ T8854] RIP: 0033:0x7fd8eed8e169 [ 420.192496][ T8854] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 420.192524][ T8854] RSP: 002b:00007fd8efb46038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 420.192551][ T8854] RAX: ffffffffffffffda RBX: 00007fd8eefb5fa0 RCX: 00007fd8eed8e169 [ 420.192571][ T8854] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000007 [ 420.192589][ T8854] RBP: 00007fd8eee10a68 R08: 0000000000000000 R09: 0000000000000000 [ 420.192606][ T8854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 420.192623][ T8854] R13: 0000000000000000 R14: 00007fd8eefb5fa0 R15: 00007ffcc9fd3988 [ 420.192661][ T8854] [ 420.706244][ T8862] blktrace: Concurrent blktraces are not allowed on ram7 [ 420.790258][ T8862] netlink: 28 bytes leftover after parsing attributes in process `syz.1.656'. [ 423.846507][ T8906] net_ratelimit: 5515 callbacks suppressed [ 423.846523][ T8906] netlink: zone id is out of range [ 423.925357][ T30] audit: type=1400 audit(4294967324.170:26): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=8900 comm="syz.2.665" [ 423.927394][ T8906] netlink: zone id is out of range [ 424.005229][ T8906] netlink: zone id is out of range [ 424.014356][ T8906] netlink: zone id is out of range [ 424.076224][ T8906] netlink: zone id is out of range [ 424.092391][ T8906] netlink: zone id is out of range [ 424.103805][ T8906] netlink: zone id is out of range [ 424.116918][ T8906] netlink: zone id is out of range [ 424.122537][ T8906] netlink: zone id is out of range [ 424.127819][ T8906] netlink: zone id is out of range [ 425.053679][ T8926] Invalid ELF header magic: != ELF [ 427.421794][ T8980] netlink: 28 bytes leftover after parsing attributes in process `syz.2.677'. [ 427.462378][ T8980] bond0: (slave bond_slave_0): Releasing backup interface [ 427.987066][ T8995] Invalid ELF header magic: != ELF [ 428.474426][ T9005] CIFS mount error: No usable UNC path provided in device string! [ 428.474426][ T9005] [ 428.506400][ T9005] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 430.809422][ T9048] bridge0: port 3(syz_tun) entered blocking state [ 430.818773][ T9048] bridge0: port 3(syz_tun) entered disabled state [ 430.892421][ T9048] syz_tun: entered allmulticast mode [ 430.899567][ T9048] syz_tun: entered promiscuous mode [ 431.952795][ T9065] CIFS mount error: No usable UNC path provided in device string! [ 431.952795][ T9065] [ 431.964872][ T9065] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 432.430173][ T9079] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 432.464876][ T9079] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 432.544494][ T9079] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 432.562164][ T9079] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 432.574989][ T9079] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 432.615874][ T9079] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 432.650086][ T9079] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 433.152653][ T9100] CIFS mount error: No usable UNC path provided in device string! [ 433.152653][ T9100] [ 433.189565][ T9100] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 433.274619][ T9098] bridge0: port 3(syz_tun) entered blocking state [ 433.290071][ T9098] bridge0: port 3(syz_tun) entered disabled state [ 433.296711][ T9098] syz_tun: entered allmulticast mode [ 433.303808][ T9098] syz_tun: entered promiscuous mode [ 433.331431][ T9098] bridge0: port 3(syz_tun) entered blocking state [ 433.338040][ T9098] bridge0: port 3(syz_tun) entered forwarding state [ 434.492093][ T5860] Bluetooth: hci2: command 0x0c1a tx timeout [ 434.498178][ T5860] Bluetooth: hci0: command 0x0c1a tx timeout [ 434.569885][ T5860] Bluetooth: hci3: command 0x0c1a tx timeout [ 434.659891][ T5860] Bluetooth: hci1: command 0x0c1a tx timeout [ 435.751521][ T9139] bridge0: port 4(team0) entered blocking state [ 435.757930][ T9139] bridge0: port 4(team0) entered disabled state [ 435.792544][ T9139] team0: entered allmulticast mode [ 435.797723][ T9139] team_slave_0: entered allmulticast mode [ 435.875091][ T9139] team_slave_1: entered allmulticast mode [ 435.898209][ T9139] team0: entered promiscuous mode [ 435.969130][ T9139] team_slave_0: entered promiscuous mode [ 435.991512][ T9139] team_slave_1: entered promiscuous mode [ 436.005574][ T9139] bridge0: port 4(team0) entered blocking state [ 436.012035][ T9139] bridge0: port 4(team0) entered forwarding state [ 436.591831][ T5860] Bluetooth: hci2: command 0x0c1a tx timeout [ 436.652214][ T5860] Bluetooth: hci3: command 0x0c1a tx timeout [ 436.739914][ T5860] Bluetooth: hci1: command 0x0c1a tx timeout [ 437.861169][ T9178] FAULT_INJECTION: forcing a failure. [ 437.861169][ T9178] name failslab, interval 1, probability 0, space 0, times 0 [ 437.922976][ T9178] CPU: 1 UID: 0 PID: 9178 Comm: syz.2.729 Not tainted 6.15.0-rc2-syzkaller-00087-gcfb2e2c57aef #0 PREEMPT(full) [ 437.923023][ T9178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 437.923043][ T9178] Call Trace: [ 437.923053][ T9178] [ 437.923065][ T9178] dump_stack_lvl+0x16c/0x1f0 [ 437.923117][ T9178] should_fail_ex+0x512/0x640 [ 437.923152][ T9178] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 437.923205][ T9178] should_failslab+0xc2/0x120 [ 437.923234][ T9178] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 437.923294][ T9178] ? ptlock_alloc+0x1f/0x70 [ 437.923338][ T9178] ptlock_alloc+0x1f/0x70 [ 437.923376][ T9178] pte_alloc_one+0x6d/0x380 [ 437.923414][ T9178] __pte_alloc+0x6d/0x3c0 [ 437.923444][ T9178] ? __pfx___pte_alloc+0x10/0x10 [ 437.923477][ T9178] ? do_raw_spin_lock+0x12c/0x2b0 [ 437.923509][ T9178] ? find_held_lock+0x2b/0x80 [ 437.923548][ T9178] do_pte_missing+0x2925/0x3fb0 [ 437.923614][ T9178] ? _raw_spin_unlock+0x28/0x50 [ 437.923652][ T9178] ? __pmd_alloc+0x3c2/0x870 [ 437.923700][ T9178] __handle_mm_fault+0x103d/0x2a40 [ 437.923758][ T9178] ? __pfx___handle_mm_fault+0x10/0x10 [ 437.923801][ T9178] ? __lock_acquire+0xaa4/0x1ba0 [ 437.923862][ T9178] handle_mm_fault+0x3fe/0xad0 [ 437.923914][ T9178] __get_user_pages+0x771/0x36f0 [ 437.923965][ T9178] ? __pfx_mt_find+0x10/0x10 [ 437.924016][ T9178] ? __pfx___get_user_pages+0x10/0x10 [ 437.924072][ T9178] populate_vma_page_range+0x278/0x3a0 [ 437.924118][ T9178] ? __pfx_populate_vma_page_range+0x10/0x10 [ 437.924160][ T9178] ? __pfx_find_vma_intersection+0x10/0x10 [ 437.924208][ T9178] __mm_populate+0x1d8/0x380 [ 437.924252][ T9178] ? __pfx___mm_populate+0x10/0x10 [ 437.924297][ T9178] ? up_write+0x209/0x520 [ 437.924335][ T9178] vm_mmap_pgoff+0x362/0x450 [ 437.924377][ T9178] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 437.924423][ T9178] ? __x64_sys_futex+0x1e0/0x4c0 [ 437.924465][ T9178] ? __x64_sys_futex+0x1e9/0x4c0 [ 437.924516][ T9178] ksys_mmap_pgoff+0x7d/0x5c0 [ 437.924553][ T9178] ? __pfx_do_writev+0x10/0x10 [ 437.924590][ T9178] ? rcu_is_watching+0x12/0xc0 [ 437.924645][ T9178] __x64_sys_mmap+0x125/0x190 [ 437.924694][ T9178] do_syscall_64+0xcd/0x260 [ 437.924741][ T9178] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.924772][ T9178] RIP: 0033:0x7fd8eed8e169 [ 437.924795][ T9178] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 437.924826][ T9178] RSP: 002b:00007fd8efb25038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 437.924855][ T9178] RAX: ffffffffffffffda RBX: 00007fd8eefb6080 RCX: 00007fd8eed8e169 [ 437.924874][ T9178] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 437.924891][ T9178] RBP: 00007fd8eee10a68 R08: 0000000000000002 R09: 0000000000008000 [ 437.924908][ T9178] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 437.924925][ T9178] R13: 0000000000000000 R14: 00007fd8eefb6080 R15: 00007ffcc9fd3988 [ 437.924962][ T9178] [ 438.605072][ T9190] CIFS mount error: No usable UNC path provided in device string! [ 438.605072][ T9190] [ 438.623934][ T9190] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 438.960251][ T9203] CIFS mount error: No usable UNC path provided in device string! [ 438.960251][ T9203] [ 438.975299][ T9203] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 441.835068][ T9264] CIFS mount error: No usable UNC path provided in device string! [ 441.835068][ T9264] [ 441.848481][ T9264] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 443.222245][ T9287] CIFS mount error: No usable UNC path provided in device string! [ 443.222245][ T9287] [ 443.236670][ T9287] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 443.277994][ T9289] netlink: 342 bytes leftover after parsing attributes in process `syz.0.757'. [ 444.706427][ T9323] net_ratelimit: 160 callbacks suppressed [ 444.706452][ T9323] openvswitch: netlink: Tunnel attr 10596 out of range max 16 [ 445.136117][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.142752][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 446.378425][ T9369] CIFS mount error: No usable UNC path provided in device string! [ 446.378425][ T9369] [ 446.416241][ T9369] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 448.202493][ T9422] CIFS mount error: No usable UNC path provided in device string! [ 448.202493][ T9422] [ 448.217974][ T9422] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 448.801037][ T9432] random: crng reseeded on system resumption [ 448.925744][ T9440] openvswitch: netlink: Tunnel attr 10596 out of range max 16 [ 449.640275][ T9450] netlink: 'syz.2.796': attribute type 5 has an invalid length. [ 449.657326][ T9450] netlink: 314 bytes leftover after parsing attributes in process `syz.2.796'. [ 449.997533][ T9456] netlink: 342 bytes leftover after parsing attributes in process `syz.2.798'. [ 450.221933][ T9458] FAULT_INJECTION: forcing a failure. [ 450.221933][ T9458] name fail_futex, interval 1, probability 0, space 0, times 0 [ 450.290022][ T9460] netlink: 4 bytes leftover after parsing attributes in process `syz.0.799'. [ 450.338869][ T9458] CPU: 0 UID: 0 PID: 9458 Comm: syz.2.798 Not tainted 6.15.0-rc2-syzkaller-00087-gcfb2e2c57aef #0 PREEMPT(full) [ 450.338916][ T9458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 450.338935][ T9458] Call Trace: [ 450.338945][ T9458] [ 450.338957][ T9458] dump_stack_lvl+0x16c/0x1f0 [ 450.339007][ T9458] should_fail_ex+0x512/0x640 [ 450.339048][ T9458] get_futex_key+0x49e/0x1000 [ 450.339092][ T9458] ? __pfx_get_page_from_freelist+0x10/0x10 [ 450.339144][ T9458] ? __pfx_get_futex_key+0x10/0x10 [ 450.339189][ T9458] ? trace_mm_page_alloc+0x11f/0x1a0 [ 450.339225][ T9458] ? __alloc_frozen_pages_noprof+0x298/0x23a0 [ 450.339279][ T9458] futex_wake+0xe7/0x4e0 [ 450.339312][ T9458] ? __pfx_futex_wake+0x10/0x10 [ 450.339341][ T9458] ? __lock_acquire+0x5ca/0x1ba0 [ 450.339372][ T9458] ? fd_install+0x225/0x750 [ 450.339413][ T9458] ? putname+0x154/0x1a0 [ 450.339447][ T9458] do_futex+0x1e3/0x350 [ 450.339500][ T9458] ? __pfx_do_futex+0x10/0x10 [ 450.339546][ T9458] ? rcu_read_unlock+0x17/0x60 [ 450.339586][ T9458] __x64_sys_futex+0x1e0/0x4c0 [ 450.339633][ T9458] ? __pfx_native_tss_update_io_bitmap+0x10/0x10 [ 450.339673][ T9458] ? __pfx___x64_sys_futex+0x10/0x10 [ 450.339733][ T9458] do_syscall_64+0xcd/0x260 [ 450.339788][ T9458] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.339819][ T9458] RIP: 0033:0x7fd8eed8e169 [ 450.339843][ T9458] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 450.339874][ T9458] RSP: 002b:00007fd8efb250e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 450.339903][ T9458] RAX: ffffffffffffffda RBX: 00007fd8eefb6088 RCX: 00007fd8eed8e169 [ 450.339923][ T9458] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fd8eefb608c [ 450.339943][ T9458] RBP: 00007fd8eefb6080 R08: 00007fd8efb47000 R09: 0000000000000000 [ 450.339962][ T9458] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd8eefb608c [ 450.339986][ T9458] R13: 0000000000000000 R14: 00007ffcc9fd38a0 R15: 00007ffcc9fd3988 [ 450.340026][ T9458] [ 452.341359][ T9505] netlink: 342 bytes leftover after parsing attributes in process `syz.3.813'. [ 452.417531][ T9502] CIFS mount error: No usable UNC path provided in device string! [ 452.417531][ T9502] [ 452.479707][ T9502] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 452.783949][ T9515] [ 452.786304][ T9515] ====================================================== [ 452.793349][ T9515] WARNING: possible circular locking dependency detected [ 452.800371][ T9515] 6.15.0-rc2-syzkaller-00087-gcfb2e2c57aef #0 Not tainted [ 452.807485][ T9515] ------------------------------------------------------ [ 452.814500][ T9515] syz.2.816/9515 is trying to acquire lock: [ 452.820398][ T9515] ffff8880347cb198 (sk_lock-AF_INET){+.+.}-{0:0}, at: sockopt_lock_sock+0x54/0x70 [ 452.829740][ T9515] [ 452.829740][ T9515] but task is already holding lock: [ 452.837108][ T9515] ffffffff9012e7e8 (rtnl_mutex){+.+.}-{4:4}, at: do_ip_getsockopt+0x1843/0x2220 [ 452.846177][ T9515] [ 452.846177][ T9515] which lock already depends on the new lock. [ 452.846177][ T9515] [ 452.856600][ T9515] [ 452.856600][ T9515] the existing dependency chain (in reverse order) is: [ 452.865714][ T9515] [ 452.865714][ T9515] -> #2 (rtnl_mutex){+.+.}-{4:4}: [ 452.873225][ T9515] __mutex_lock+0x199/0xb90 [ 452.878276][ T9515] do_ipv6_setsockopt+0x2042/0x4420 [ 452.884008][ T9515] ipv6_setsockopt+0xcb/0x170 [ 452.889227][ T9515] tcp_setsockopt+0xa4/0x100 [ 452.894362][ T9515] smc_setsockopt+0x1b3/0xa00 [ 452.899577][ T9515] do_sock_setsockopt+0x221/0x470 [ 452.905158][ T9515] __sys_setsockopt+0x1a0/0x230 [ 452.910549][ T9515] __x64_sys_setsockopt+0xbd/0x160 [ 452.916226][ T9515] do_syscall_64+0xcd/0x260 [ 452.921290][ T9515] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.927720][ T9515] [ 452.927720][ T9515] -> #1 (&smc->clcsock_release_lock){+.+.}-{4:4}: [ 452.936345][ T9515] __mutex_lock+0x199/0xb90 [ 452.941407][ T9515] smc_switch_to_fallback+0x2d/0x9f0 [ 452.947226][ T9515] smc_sendmsg+0x13d/0x520 [ 452.952178][ T9515] ____sys_sendmsg+0xa95/0xc70 [ 452.957483][ T9515] ___sys_sendmsg+0x134/0x1d0 [ 452.962693][ T9515] __sys_sendmsg+0x16d/0x220 [ 452.967813][ T9515] do_syscall_64+0xcd/0x260 [ 452.972871][ T9515] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.979285][ T9515] [ 452.979285][ T9515] -> #0 (sk_lock-AF_INET){+.+.}-{0:0}: [ 452.986943][ T9515] __lock_acquire+0x1173/0x1ba0 [ 452.992326][ T9515] lock_acquire+0x179/0x350 [ 452.997358][ T9515] lock_sock_nested+0x41/0xf0 [ 453.002570][ T9515] sockopt_lock_sock+0x54/0x70 [ 453.007977][ T9515] do_ip_getsockopt+0x13e4/0x2220 [ 453.013539][ T9515] ip_getsockopt+0x9b/0x1e0 [ 453.018575][ T9515] raw_getsockopt+0x4d/0x1f0 [ 453.023693][ T9515] do_sock_getsockopt+0x3fc/0x800 [ 453.029271][ T9515] __sys_getsockopt+0x12f/0x260 [ 453.034656][ T9515] __x64_sys_getsockopt+0xbd/0x160 [ 453.040303][ T9515] do_syscall_64+0xcd/0x260 [ 453.045352][ T9515] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.051778][ T9515] [ 453.051778][ T9515] other info that might help us debug this: [ 453.051778][ T9515] [ 453.062004][ T9515] Chain exists of: [ 453.062004][ T9515] sk_lock-AF_INET --> &smc->clcsock_release_lock --> rtnl_mutex [ 453.062004][ T9515] [ 453.075574][ T9515] Possible unsafe locking scenario: [ 453.075574][ T9515] [ 453.083033][ T9515] CPU0 CPU1 [ 453.088400][ T9515] ---- ---- [ 453.093771][ T9515] lock(rtnl_mutex); [ 453.097767][ T9515] lock(&smc->clcsock_release_lock); [ 453.105705][ T9515] lock(rtnl_mutex); [ 453.112212][ T9515] lock(sk_lock-AF_INET); [ 453.116634][ T9515] [ 453.116634][ T9515] *** DEADLOCK *** [ 453.116634][ T9515] [ 453.124774][ T9515] 1 lock held by syz.2.816/9515: [ 453.129717][ T9515] #0: ffffffff9012e7e8 (rtnl_mutex){+.+.}-{4:4}, at: do_ip_getsockopt+0x1843/0x2220 [ 453.139335][ T9515] [ 453.139335][ T9515] stack backtrace: [ 453.145227][ T9515] CPU: 0 UID: 0 PID: 9515 Comm: syz.2.816 Not tainted 6.15.0-rc2-syzkaller-00087-gcfb2e2c57aef #0 PREEMPT(full) [ 453.145256][ T9515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 453.145271][ T9515] Call Trace: [ 453.145279][ T9515] [ 453.145287][ T9515] dump_stack_lvl+0x116/0x1f0 [ 453.145323][ T9515] print_circular_bug+0x275/0x350 [ 453.145361][ T9515] check_noncircular+0x14c/0x170 [ 453.145400][ T9515] __lock_acquire+0x1173/0x1ba0 [ 453.145425][ T9515] ? do_ip_getsockopt+0x1843/0x2220 [ 453.145450][ T9515] lock_acquire+0x179/0x350 [ 453.145469][ T9515] ? sockopt_lock_sock+0x54/0x70 [ 453.145503][ T9515] lock_sock_nested+0x41/0xf0 [ 453.145532][ T9515] ? sockopt_lock_sock+0x54/0x70 [ 453.145561][ T9515] sockopt_lock_sock+0x54/0x70 [ 453.145590][ T9515] do_ip_getsockopt+0x13e4/0x2220 [ 453.145615][ T9515] ? __pfx_do_ip_getsockopt+0x10/0x10 [ 453.145659][ T9515] ? cgroup_rstat_updated+0x2a/0xb20 [ 453.145693][ T9515] ? find_held_lock+0x2b/0x80 [ 453.145724][ T9515] ? count_memcg_events_mm.constprop.0+0x138/0x340 [ 453.145752][ T9515] ? __up_read+0x1f8/0x750 [ 453.145778][ T9515] ? __pfx___up_read+0x10/0x10 [ 453.145804][ T9515] ? do_user_addr_fault+0x829/0x1370 [ 453.145835][ T9515] ? do_user_addr_fault+0x843/0x1370 [ 453.145868][ T9515] ip_getsockopt+0x9b/0x1e0 [ 453.145893][ T9515] ? __pfx_ip_getsockopt+0x10/0x10 [ 453.145921][ T9515] raw_getsockopt+0x4d/0x1f0 [ 453.145944][ T9515] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 453.145984][ T9515] do_sock_getsockopt+0x3fc/0x800 [ 453.146024][ T9515] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 453.146063][ T9515] ? __fget_files+0x204/0x3c0 [ 453.146106][ T9515] __sys_getsockopt+0x12f/0x260 [ 453.146140][ T9515] __x64_sys_getsockopt+0xbd/0x160 [ 453.146177][ T9515] ? do_syscall_64+0x91/0x260 [ 453.146214][ T9515] ? lockdep_hardirqs_on+0x7c/0x110 [ 453.146248][ T9515] do_syscall_64+0xcd/0x260 [ 453.146285][ T9515] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.146310][ T9515] RIP: 0033:0x7fd8eed8e169 [ 453.146330][ T9515] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 453.146355][ T9515] RSP: 002b:00007fd8efb46038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 453.146378][ T9515] RAX: ffffffffffffffda RBX: 00007fd8eefb5fa0 RCX: 00007fd8eed8e169 [ 453.146394][ T9515] RDX: 0000000000000030 RSI: 0000000000000000 RDI: 0000000000000005 [ 453.146410][ T9515] RBP: 00007fd8eee10a68 R08: 0000000000000000 R09: 0000000000000000 [ 453.146426][ T9515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 453.146440][ T9515] R13: 0000000000000000 R14: 00007fd8eefb5fa0 R15: 00007ffcc9fd3988 [ 453.146463][ T9515]