Warning: Permanently added '[localhost]:48432' (ED25519) to the list of known hosts. 2024/10/02 11:35:36 ignoring optional flag "sandboxArg"="0" 2024/10/02 11:35:36 ignoring optional flag "type"="qemu" 2024/10/02 11:35:36 parsed 1 programs [ 66.253092][ T39] kauditd_printk_skb: 27 callbacks suppressed [ 66.253104][ T39] audit: type=1400 audit(1727868938.906:142): avc: denied { unlink } for pid=5579 comm="syz-executor" name="swap-file" dev="sda1" ino=1930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 67.067694][ T5579] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 69.200962][ T84] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.204705][ T84] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.219992][ T84] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.223462][ T84] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.748484][ T5402] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 69.751976][ T5402] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 69.754376][ T5402] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 69.756630][ T5402] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 69.758919][ T5402] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 69.761083][ T5402] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 69.864626][ T39] audit: type=1401 audit(1727868942.516:143): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" [ 70.130720][ T5686] chnl_net:caif_netlink_parms(): no params data found [ 70.178767][ T5686] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.180701][ T5686] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.182907][ T5686] bridge_slave_0: entered allmulticast mode [ 70.184938][ T5686] bridge_slave_0: entered promiscuous mode [ 70.187474][ T5686] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.189364][ T5686] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.191874][ T5686] bridge_slave_1: entered allmulticast mode [ 70.193927][ T5686] bridge_slave_1: entered promiscuous mode [ 70.214546][ T5686] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.218367][ T5686] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.240520][ T5686] team0: Port device team_slave_0 added [ 70.245160][ T5686] team0: Port device team_slave_1 added [ 70.269700][ T5686] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.273013][ T5686] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.279620][ T5686] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.283264][ T5686] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.285096][ T5686] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.291912][ T5686] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.320916][ T5686] hsr_slave_0: entered promiscuous mode [ 70.322938][ T5686] hsr_slave_1: entered promiscuous mode [ 70.835508][ T5686] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 70.840454][ T5686] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 70.844078][ T5686] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 70.847185][ T5686] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 70.859115][ T5686] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.861590][ T5686] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.863783][ T5686] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.865609][ T5686] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.892514][ T84] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.895629][ T84] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.910110][ T5686] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.917733][ T5686] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.923438][ T1103] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.925148][ T1103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.932403][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.934854][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.029295][ T5686] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.046422][ T5686] veth0_vlan: entered promiscuous mode [ 71.050677][ T5686] veth1_vlan: entered promiscuous mode [ 71.064703][ T5686] veth0_macvtap: entered promiscuous mode [ 71.067851][ T5686] veth1_macvtap: entered promiscuous mode [ 71.074694][ T5686] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.079880][ T5686] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.085256][ T5686] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.088451][ T5686] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.092238][ T5686] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.095084][ T5686] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2024/10/02 11:35:43 executed programs: 0 [ 71.173996][ T66] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 71.178131][ T66] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 71.180668][ T66] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 71.184109][ T66] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 71.187011][ T66] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 71.190270][ T66] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 71.191776][ T84] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.213023][ T1379] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.215160][ T1379] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.264386][ T84] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.291105][ T5745] chnl_net:caif_netlink_parms(): no params data found [ 71.333032][ T84] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.358439][ T5745] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.360400][ T5745] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.362887][ T5745] bridge_slave_0: entered allmulticast mode [ 71.365756][ T5745] bridge_slave_0: entered promiscuous mode [ 71.370046][ T5745] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.374348][ T5745] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.376929][ T5745] bridge_slave_1: entered allmulticast mode [ 71.379333][ T5745] bridge_slave_1: entered promiscuous mode [ 71.401897][ T5745] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.407056][ T5745] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.437922][ T5745] team0: Port device team_slave_0 added [ 71.440791][ T5745] team0: Port device team_slave_1 added [ 71.473551][ T5745] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.476242][ T5745] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.485706][ T5745] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.524167][ T84] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.529383][ T5745] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.534084][ T5745] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.543206][ T5745] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.581129][ T5745] hsr_slave_0: entered promiscuous mode [ 71.584092][ T5745] hsr_slave_1: entered promiscuous mode [ 71.586800][ T5745] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.589516][ T5745] Cannot create hsr debugfs directory [ 73.211839][ T66] Bluetooth: hci0: command tx timeout [ 74.818039][ T84] bridge_slave_1: left allmulticast mode [ 74.820143][ T84] bridge_slave_1: left promiscuous mode [ 74.822829][ T84] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.827012][ T84] bridge_slave_0: left allmulticast mode [ 74.829135][ T84] bridge_slave_0: left promiscuous mode [ 74.831648][ T84] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.059372][ T84] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 75.065696][ T84] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 75.070379][ T84] bond0 (unregistering): Released all slaves [ 75.226214][ T84] hsr_slave_0: left promiscuous mode [ 75.228741][ T84] hsr_slave_1: left promiscuous mode [ 75.231414][ T84] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 75.234202][ T84] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 75.237313][ T84] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 75.240025][ T84] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 75.260543][ T84] veth1_macvtap: left promiscuous mode [ 75.263215][ T84] veth0_macvtap: left promiscuous mode [ 75.264712][ T84] veth1_vlan: left promiscuous mode [ 75.266163][ T84] veth0_vlan: left promiscuous mode [ 75.291211][ T66] Bluetooth: hci0: command tx timeout [ 75.647239][ T84] team0 (unregistering): Port device team_slave_1 removed [ 75.693331][ T84] team0 (unregistering): Port device team_slave_0 removed [ 76.290148][ T5745] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 76.294326][ T5745] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 76.299231][ T5745] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 76.304092][ T5745] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 76.334000][ T827] cfg80211: failed to load regulatory.db [ 76.372810][ T5745] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.384090][ T5745] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.389854][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.392134][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.400401][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.402776][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.536374][ T5745] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.562063][ T5745] veth0_vlan: entered promiscuous mode [ 76.569648][ T5745] veth1_vlan: entered promiscuous mode [ 76.592173][ T5745] veth0_macvtap: entered promiscuous mode [ 76.597383][ T5745] veth1_macvtap: entered promiscuous mode [ 76.610168][ T5745] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.617667][ T5745] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.623874][ T5745] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.627095][ T5745] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.630287][ T5745] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.634047][ T5745] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.668193][ T70] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.671628][ T70] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.684753][ T70] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.686825][ T70] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2024/10/02 11:35:49 executed programs: 2 [ 76.724967][ T39] audit: type=1400 audit(1727868949.376:144): avc: denied { prog_load } for pid=5877 comm="syz.0.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 76.732906][ T39] audit: type=1400 audit(1727868949.376:145): avc: denied { bpf } for pid=5877 comm="syz.0.15" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 76.740039][ T39] audit: type=1400 audit(1727868949.376:146): avc: denied { perfmon } for pid=5877 comm="syz.0.15" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 76.746124][ T39] audit: type=1400 audit(1727868949.376:147): avc: denied { prog_run } for pid=5877 comm="syz.0.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 76.746362][ T5878] FAULT_INJECTION: forcing a failure. [ 76.746362][ T5878] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 76.746406][ T5878] [ 76.746411][ T5878] ====================================================== [ 76.746415][ T5878] WARNING: possible circular locking dependency detected [ 76.746428][ T5878] 6.12.0-rc1-syzkaller-ge32cde8d2bd7 #0 Not tainted [ 76.746436][ T5878] ------------------------------------------------------ [ 76.746440][ T5878] syz.0.15/5878 is trying to acquire lock: [ 76.746447][ T5878] ffffffff8e1a5eb8 ((console_sem).lock){-...}-{2:2}, at: down_trylock+0x12/0x70 [ 76.746490][ T5878] [ 76.746490][ T5878] but task is already holding lock: [ 76.746494][ T5878] ffff88806a62a858 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x6c1/0xdc0 [ 76.746534][ T5878] [ 76.746534][ T5878] which lock already depends on the new lock. [ 76.746534][ T5878] [ 76.746538][ T5878] [ 76.746538][ T5878] the existing dependency chain (in reverse order) is: [ 76.746543][ T5878] [ 76.746543][ T5878] -> #3 (&base->lock){-.-.}-{2:2}: [ 76.746563][ T5878] _raw_spin_lock_irqsave+0x3a/0x60 [ 76.746581][ T5878] lock_timer_base+0x5d/0x220 [ 76.746601][ T5878] __mod_timer+0x426/0xdc0 [ 76.746621][ T5878] add_timer_global+0x8a/0xc0 [ 76.746643][ T5878] __queue_delayed_work+0x1ba/0x2e0 [ 76.746660][ T5878] queue_delayed_work_on+0x12a/0x150 [ 76.746675][ T5878] psi_task_change+0x1b4/0x2e0 [ 76.746696][ T5878] enqueue_task+0x1a5/0x350 [ 76.746712][ T5878] wake_up_new_task+0x662/0xd30 [ 76.746725][ T5878] kernel_clone+0x236/0x960 [ 76.746744][ T5878] user_mode_thread+0xb4/0xf0 [ 76.746762][ T5878] rest_init+0x23/0x2b0 [ 76.746781][ T5878] start_kernel+0x3e4/0x4d0 [ 76.746800][ T5878] x86_64_start_reservations+0x18/0x30 [ 76.746819][ T5878] x86_64_start_kernel+0xb2/0xc0 [ 76.746838][ T5878] common_startup_64+0x13e/0x148 [ 76.746857][ T5878] [ 76.746857][ T5878] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 76.746878][ T5878] _raw_spin_lock_nested+0x31/0x40 [ 76.746893][ T5878] raw_spin_rq_lock_nested+0x29/0x130 [ 76.746908][ T5878] task_rq_lock+0xcf/0x3b0 [ 76.746921][ T5878] cgroup_move_task+0x82/0x250 [ 76.746941][ T5878] css_set_move_task+0x288/0x5f0 [ 76.746966][ T5878] cgroup_post_fork+0x1c6/0x910 [ 76.746985][ T5878] copy_process+0x50e4/0x8dc0 [ 76.747003][ T5878] kernel_clone+0xfd/0x960 [ 76.747021][ T5878] user_mode_thread+0xb4/0xf0 [ 76.747040][ T5878] rest_init+0x23/0x2b0 [ 76.747062][ T5878] start_kernel+0x3e4/0x4d0 [ 76.747080][ T5878] x86_64_start_reservations+0x18/0x30 [ 76.747100][ T5878] x86_64_start_kernel+0xb2/0xc0 [ 76.747119][ T5878] common_startup_64+0x13e/0x148 [ 76.747137][ T5878] [ 76.747137][ T5878] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 76.747158][ T5878] _raw_spin_lock_irqsave+0x3a/0x60 [ 76.747174][ T5878] try_to_wake_up+0x9a/0x1440 [ 76.747187][ T5878] up+0x79/0xb0 [ 76.747205][ T5878] __up_console_sem+0x85/0xe0 [ 76.747220][ T5878] console_unlock+0x1dc/0x210 [ 76.747239][ T5878] vga_remove_vgacon+0x90/0xd0 [ 76.747260][ T5878] aperture_remove_conflicting_pci_devices+0x16a/0x1e0 [ 76.747277][ T5878] virtio_gpu_probe+0x40c/0x4f0 [ 76.747298][ T5878] virtio_dev_probe+0x586/0x8a0 [ 76.747314][ T5878] really_probe+0x23e/0xa90 [ 76.747329][ T5878] __driver_probe_device+0x1de/0x440 [ 76.747341][ T5878] driver_probe_device+0x4c/0x1b0 [ 76.747351][ T5878] __driver_attach+0x283/0x580 [ 76.747360][ T5878] bus_for_each_dev+0x13c/0x1d0 [ 76.747368][ T5878] bus_add_driver+0x2e9/0x690 [ 76.747377][ T5878] driver_register+0x15c/0x4b0 [ 76.747388][ T5878] do_one_initcall+0x128/0x700 [ 76.747400][ T5878] kernel_init_freeable+0x5c7/0x900 [ 76.747411][ T5878] kernel_init+0x1c/0x2b0 [ 76.747426][ T5878] ret_from_fork+0x45/0x80 [ 76.747434][ T5878] ret_from_fork_asm+0x1a/0x30 [ 76.747446][ T5878] [ 76.747446][ T5878] -> #0 ((console_sem).lock){-...}-{2:2}: [ 76.747457][ T5878] __lock_acquire+0x250b/0x3ce0 [ 76.747465][ T5878] lock_acquire.part.0+0x11b/0x380 [ 76.747473][ T5878] _raw_spin_lock_irqsave+0x3a/0x60 [ 76.747481][ T5878] down_trylock+0x12/0x70 [ 76.747492][ T5878] __down_trylock_console_sem+0x40/0x140 [ 76.747501][ T5878] vprintk_emit+0x3ec/0x6f0 [ 76.747510][ T5878] vprintk+0x7f/0xa0 [ 76.747520][ T5878] _printk+0xc8/0x100 [ 76.747528][ T5878] should_fail_ex+0x46c/0x5b0 [ 76.747544][ T5878] strncpy_from_user+0x3b/0x2a0 [ 76.747556][ T5878] strncpy_from_user_nofault+0x7f/0x180 [ 76.747569][ T5878] bpf_probe_read_compat_str+0xf1/0x170 [ 76.747583][ T5878] bpf_prog_d0e9ac47b081aec3+0x49/0x4b [ 76.747591][ T5878] bpf_trace_run2+0x231/0x590 [ 76.747602][ T5878] __bpf_trace_timer_start+0xc7/0x100 [ 76.747612][ T5878] enqueue_timer+0x2b4/0x550 [ 76.747621][ T5878] __mod_timer+0x8d7/0xdc0 [ 76.747633][ T5878] add_timer_global+0x8a/0xc0 [ 76.747645][ T5878] __queue_delayed_work+0x1ba/0x2e0 [ 76.747653][ T5878] queue_delayed_work_on+0x12a/0x150 [ 76.747661][ T5878] fbcon_cursor+0x4aa/0x5f0 [ 76.747672][ T5878] hide_cursor+0x84/0x220 [ 76.747688][ T5878] do_con_write+0x21e6/0x7bb0 [ 76.747707][ T5878] con_write+0x23/0xb0 [ 76.747727][ T5878] n_tty_write+0x419/0x1140 [ 76.747743][ T5878] file_tty_write.constprop.0+0x506/0x9a0 [ 76.747764][ T5878] vfs_write+0x6b5/0x1140 [ 76.747784][ T5878] ksys_write+0x12f/0x260 [ 76.747804][ T5878] do_syscall_64+0xcd/0x250 [ 76.747823][ T5878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.747841][ T5878] [ 76.747841][ T5878] other info that might help us debug this: [ 76.747841][ T5878] [ 76.747846][ T5878] Chain exists of: [ 76.747846][ T5878] (console_sem).lock --> &rq->__lock --> &base->lock [ 76.747846][ T5878] [ 76.747868][ T5878] Possible unsafe locking scenario: [ 76.747868][ T5878] [ 76.747871][ T5878] CPU0 CPU1 [ 76.747875][ T5878] ---- ---- [ 76.747878][ T5878] lock(&base->lock); [ 76.747886][ T5878] lock(&rq->__lock); [ 76.747895][ T5878] lock(&base->lock); [ 76.747904][ T5878] lock((console_sem).lock); [ 76.747913][ T5878] [ 76.747913][ T5878] *** DEADLOCK *** [ 76.747913][ T5878] [ 76.747916][ T5878] 7 locks held by syz.0.15/5878: [ 76.747927][ T5878] #0: ffff8880461230a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 76.747965][ T5878] #1: ffff888046123130 (&tty->atomic_write_lock){+.+.}-{3:3}, at: file_tty_write.constprop.0+0x281/0x9a0 [ 76.748007][ T5878] #2: ffff8880461232e8 (&tty->termios_rwsem){++++}-{3:3}, at: n_tty_write+0x1bd/0x1140 [ 76.748043][ T5878] #3: ffffc9000351b380 (&ldata->output_lock){+.+.}-{3:3}, at: n_tty_write+0x533/0x1140 [ 76.748079][ T5878] #4: ffffffff8e1a5a40 (console_lock){+.+.}-{0:0}, at: do_con_write+0x154/0x7bb0 [ 76.748122][ T5878] #5: ffff88806a62a858 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x6c1/0xdc0 [ 76.748163][ T5878] #6: ffffffff8e1b8340 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run2+0x1c2/0x590 [ 76.748202][ T5878] [ 76.748202][ T5878] stack backtrace: [ 76.748207][ T5878] CPU: 0 UID: 0 PID: 5878 Comm: syz.0.15 Not tainted 6.12.0-rc1-syzkaller-ge32cde8d2bd7 #0 [ 76.748226][ T5878] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 76.748236][ T5878] Call Trace: [ 76.748241][ T5878] [ 76.748247][ T5878] dump_stack_lvl+0x116/0x1f0 [ 76.748271][ T5878] print_circular_bug+0x41c/0x610 [ 76.748296][ T5878] check_noncircular+0x31a/0x400 [ 76.748320][ T5878] ? __pfx_check_noncircular+0x10/0x10 [ 76.748344][ T5878] ? __pfx_format_decode+0x10/0x10 [ 76.748361][ T5878] ? lockdep_lock+0xc6/0x200 [ 76.748383][ T5878] ? __pfx_lockdep_lock+0x10/0x10 [ 76.748404][ T5878] __lock_acquire+0x250b/0x3ce0 [ 76.748429][ T5878] ? __pfx___lock_acquire+0x10/0x10 [ 76.748446][ T5878] ? vprintk_store+0x22a/0xb70 [ 76.748465][ T5878] lock_acquire.part.0+0x11b/0x380 [ 76.748480][ T5878] ? down_trylock+0x12/0x70 [ 76.748500][ T5878] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 76.748516][ T5878] ? rcu_is_watching+0x12/0xc0 [ 76.748535][ T5878] ? trace_lock_acquire+0x14a/0x1d0 [ 76.748553][ T5878] ? down_trylock+0x12/0x70 [ 76.748568][ T5878] ? lock_acquire+0x2f/0xb0 [ 76.748576][ T5878] ? down_trylock+0x12/0x70 [ 76.748587][ T5878] ? vprintk+0x7f/0xa0 [ 76.748599][ T5878] _raw_spin_lock_irqsave+0x3a/0x60 [ 76.748609][ T5878] ? down_trylock+0x12/0x70 [ 76.748620][ T5878] down_trylock+0x12/0x70 [ 76.748631][ T5878] __down_trylock_console_sem+0x40/0x140 [ 76.748641][ T5878] vprintk_emit+0x3ec/0x6f0 [ 76.748652][ T5878] ? __pfx_vprintk_emit+0x10/0x10 [ 76.748663][ T5878] ? hlock_class+0x4e/0x130 [ 76.748676][ T5878] ? __lock_acquire+0xbdd/0x3ce0 [ 76.748684][ T5878] vprintk+0x7f/0xa0 [ 76.748696][ T5878] _printk+0xc8/0x100 [ 76.748703][ T5878] ? __pfx__printk+0x10/0x10 [ 76.748712][ T5878] ? ___ratelimit+0x24c/0x570 [ 76.748723][ T5878] ? __pfx____ratelimit+0x10/0x10 [ 76.748735][ T5878] should_fail_ex+0x46c/0x5b0 [ 76.748749][ T5878] strncpy_from_user+0x3b/0x2a0 [ 76.748761][ T5878] ? rcu_is_watching+0x12/0xc0 [ 76.748772][ T5878] strncpy_from_user_nofault+0x7f/0x180 [ 76.748784][ T5878] bpf_probe_read_compat_str+0xf1/0x170 [ 76.748796][ T5878] bpf_prog_d0e9ac47b081aec3+0x49/0x4b [ 76.748804][ T5878] bpf_trace_run2+0x231/0x590 [ 76.748816][ T5878] ? __pfx_bpf_trace_run2+0x10/0x10 [ 76.748828][ T5878] ? debug_object_activate+0x199/0x540 [ 76.748839][ T5878] ? do_raw_spin_unlock+0x172/0x230 [ 76.748850][ T5878] __bpf_trace_timer_start+0xc7/0x100 [ 76.748861][ T5878] ? __pfx___bpf_trace_timer_start+0x10/0x10 [ 76.748872][ T5878] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 76.748883][ T5878] enqueue_timer+0x2b4/0x550 [ 76.748894][ T5878] __mod_timer+0x8d7/0xdc0 [ 76.748907][ T5878] ? lockdep_hardirqs_on+0x7c/0x110 [ 76.748918][ T5878] ? __pfx___mod_timer+0x10/0x10 [ 76.748931][ T5878] ? clear_pending_if_disabled+0xa9/0x210 [ 76.748944][ T5878] add_timer_global+0x8a/0xc0 [ 76.748956][ T5878] __queue_delayed_work+0x1ba/0x2e0 [ 76.748967][ T5878] queue_delayed_work_on+0x12a/0x150 [ 76.748977][ T5878] fbcon_cursor+0x4aa/0x5f0 [ 76.748986][ T5878] ? lock_acquire+0x2f/0xb0 [ 76.748995][ T5878] hide_cursor+0x84/0x220 [ 76.749006][ T5878] do_con_write+0x21e6/0x7bb0 [ 76.749019][ T5878] ? __pfx___mutex_trylock_common+0x10/0x10 [ 76.749028][ T5878] ? n_tty_write+0x533/0x1140 [ 76.749041][ T5878] ? trace_contention_end+0xea/0x140 [ 76.749057][ T5878] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 76.749072][ T5878] ? find_held_lock+0x2d/0x110 [ 76.749091][ T5878] ? n_tty_write+0x533/0x1140 [ 76.749106][ T5878] ? __pfx_do_con_write+0x10/0x10 [ 76.749129][ T5878] ? __pfx___mutex_lock+0x10/0x10 [ 76.749147][ T5878] ? n_tty_write+0x1e9/0x1140 [ 76.749166][ T5878] ? mark_held_locks+0x9f/0xe0 [ 76.749181][ T5878] con_write+0x23/0xb0 [ 76.749203][ T5878] n_tty_write+0x419/0x1140 [ 76.749222][ T5878] ? __pfx_n_tty_write+0x10/0x10 [ 76.749235][ T5878] ? __virt_addr_valid+0x1a4/0x590 [ 76.749247][ T5878] ? __pfx_woken_wake_function+0x10/0x10 [ 76.749260][ T5878] ? __virt_addr_valid+0x5e/0x590 [ 76.749270][ T5878] ? __phys_addr_symbol+0x30/0x80 [ 76.749281][ T5878] ? __check_object_size+0x488/0x710 [ 76.749291][ T5878] ? __pfx_n_tty_write+0x10/0x10 [ 76.749301][ T5878] file_tty_write.constprop.0+0x506/0x9a0 [ 76.749315][ T5878] vfs_write+0x6b5/0x1140 [ 76.749328][ T5878] ? __pfx_tty_write+0x10/0x10 [ 76.749340][ T5878] ? trace_lock_acquire+0x14a/0x1d0 [ 76.749351][ T5878] ? __pfx_vfs_write+0x10/0x10 [ 76.749364][ T5878] ? __fget_files+0x40/0x3f0 [ 76.749379][ T5878] ksys_write+0x12f/0x260 [ 76.749392][ T5878] ? __pfx_ksys_write+0x10/0x10 [ 76.749406][ T5878] do_syscall_64+0xcd/0x250 [ 76.749417][ T5878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.749433][ T5878] RIP: 0033:0x7f407037def9 [ 76.749442][ T5878] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.749450][ T5878] RSP: 002b:00007f4071123038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 76.749460][ T5878] RAX: ffffffffffffffda RBX: 00007f4070535f80 RCX: 00007f407037def9 [ 76.749466][ T5878] RDX: 0000000000001006 RSI: 0000000020001040 RDI: 0000000000000006 [ 76.749472][ T5878] RBP: 00007f4071123090 R08: 0000000000000000 R09: 0000000000000000 [ 76.749477][ T5878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 76.749483][ T5878] R13: 0000000000000000 R14: 00007f4070535f80 R15: 00007ffd38b25ce8 [ 76.749491][ T5878] [ 76.749496][ T5878] CPU: 0 UID: 0 PID: 5878 Comm: syz.0.15 Not tainted 6.12.0-rc1-syzkaller-ge32cde8d2bd7 #0 [ 76.749507][ T5878] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 76.749513][ T5878] Call Trace: [ 76.749516][ T5878] [ 76.749519][ T5878] dump_stack_lvl+0x116/0x1f0 [ 76.749532][ T5878] should_fail_ex+0x497/0x5b0 [ 76.749577][ T5878] strncpy_from_user+0x3b/0x2a0 [ 76.749590][ T5878] ? rcu_is_watching+0x12/0xc0 [ 76.749601][ T5878] strncpy_from_user_nofault+0x7f/0x180 [ 76.749613][ T5878] bpf_probe_read_compat_str+0xf1/0x170 [ 76.749626][ T5878] bpf_prog_d0e9ac47b081aec3+0x49/0x4b [ 76.749634][ T5878] bpf_trace_run2+0x231/0x590 [ 76.749646][ T5878] ? __pfx_bpf_trace_run2+0x10/0x10 [ 76.749659][ T5878] ? debug_object_activate+0x199/0x540 [ 76.749670][ T5878] ? do_raw_spin_unlock+0x172/0x230 [ 76.749681][ T5878] __bpf_trace_timer_start+0xc7/0x100 [ 76.749692][ T5878] ? __pfx___bpf_trace_timer_start+0x10/0x10 [ 76.749704][ T5878] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 76.749715][ T5878] enqueue_timer+0x2b4/0x550 [ 76.749727][ T5878] __mod_timer+0x8d7/0xdc0 [ 76.749740][ T5878] ? lockdep_hardirqs_on+0x7c/0x110 [ 76.749751][ T5878] ? __pfx___mod_timer+0x10/0x10 [ 76.749764][ T5878] ? clear_pending_if_disabled+0xa9/0x210 [ 76.749776][ T5878] add_timer_global+0x8a/0xc0 [ 76.749789][ T5878] __queue_delayed_work+0x1ba/0x2e0 [ 76.749799][ T5878] queue_delayed_work_on+0x12a/0x150 [ 76.749810][ T5878] fbcon_cursor+0x4aa/0x5f0 [ 76.749819][ T5878] ? lock_acquire+0x2f/0xb0 [ 76.749828][ T5878] hide_cursor+0x84/0x220 [ 76.749839][ T5878] do_con_write+0x21e6/0x7bb0 [ 76.749853][ T5878] ? __pfx___mutex_trylock_common+0x10/0x10 [ 76.749862][ T5878] ? n_tty_write+0x533/0x1140 [ 76.749872][ T5878] ? trace_contention_end+0xea/0x140 [ 76.749882][ T5878] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 76.749891][ T5878] ? find_held_lock+0x2d/0x110 [ 76.749902][ T5878] ? n_tty_write+0x533/0x1140 [ 76.749911][ T5878] ? __pfx_do_con_write+0x10/0x10 [ 76.749925][ T5878] ? __pfx___mutex_lock+0x10/0x10 [ 76.749936][ T5878] ? n_tty_write+0x1e9/0x1140 [ 76.749946][ T5878] ? mark_held_locks+0x9f/0xe0 [ 76.749955][ T5878] con_write+0x23/0xb0 [ 76.749968][ T5878] n_tty_write+0x419/0x1140 [ 76.749979][ T5878] ? __pfx_n_tty_write+0x10/0x10 [ 76.749988][ T5878] ? __virt_addr_valid+0x1a4/0x590 [ 76.750000][ T5878] ? __pfx_woken_wake_function+0x10/0x10 [ 76.750012][ T5878] ? __virt_addr_valid+0x5e/0x590 [ 76.750023][ T5878] ? __phys_addr_symbol+0x30/0x80 [ 76.750034][ T5878] ? __check_object_size+0x488/0x710 [ 76.750044][ T5878] ? __pfx_n_tty_write+0x10/0x10 [ 76.750056][ T5878] file_tty_write.constprop.0+0x506/0x9a0 [ 76.750071][ T5878] vfs_write+0x6b5/0x1140 [ 76.750084][ T5878] ? __pfx_tty_write+0x10/0x10 [ 76.750097][ T5878] ? trace_lock_acquire+0x14a/0x1d0 [ 76.750108][ T5878] ? __pfx_vfs_write+0x10/0x10 [ 76.750121][ T5878] ? __fget_files+0x40/0x3f0 [ 76.750136][ T5878] ksys_write+0x12f/0x260 [ 76.750149][ T5878] ? __pfx_ksys_write+0x10/0x10 [ 76.750163][ T5878] do_syscall_64+0xcd/0x250 [ 76.750175][ T5878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.750186][ T5878] RIP: 0033:0x7f407037def9 [ 76.750193][ T5878] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.750201][ T5878] RSP: 002b:00007f4071123038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 76.750211][ T5878] RAX: ffffffffffffffda RBX: 00007f4070535f80 RCX: 00007f407037def9 [ 76.750217][ T5878] RDX: 0000000000001006 RSI: 0000000020001040 RDI: 0000000000000006 [ 76.750222][ T5878] RBP: 00007f4071123090 R08: 0000000000000000 R09: 0000000000000000 [ 76.750228][ T5878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 76.750234][ T5878] R13: 0000000000000000 R14: 00007f4070535f80 R15: 00007ffd38b25ce8 [ 76.750242][ T5878] [ 77.232236][ T5880] FAULT_INJECTION: forcing a failure. [ 77.232236][ T5880] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 77.232253][ T5880] CPU: 1 UID: 0 PID: 5880 Comm: syz.0.16 Not tainted 6.12.0-rc1-syzkaller-ge32cde8d2bd7 #0 [ 77.232266][ T5880] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 77.232272][ T5880] Call Trace: [ 77.232275][ T5880] [ 77.232279][ T5880] dump_stack_lvl+0x116/0x1f0 [ 77.232295][ T5880] should_fail_ex+0x497/0x5b0 [ 77.232311][ T5880] ? sys_imageblit+0x5bb/0x21d0 [ 77.232325][ T5880] strncpy_from_user+0x3b/0x2a0 [ 77.232338][ T5880] ? rcu_is_watching+0x12/0xc0 [ 77.232351][ T5880] strncpy_from_user_nofault+0x7f/0x180 [ 77.232365][ T5880] bpf_probe_read_compat_str+0xf1/0x170 [ 77.232379][ T5880] bpf_prog_d0e9ac47b081aec3+0x49/0x4b [ 77.232387][ T5880] bpf_trace_run2+0x231/0x590 [ 77.232400][ T5880] ? __pfx_bpf_trace_run2+0x10/0x10 [ 77.232413][ T5880] ? do_raw_spin_unlock+0x172/0x230 [ 77.232425][ T5880] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 77.232437][ T5880] __bpf_trace_timer_start+0xc7/0x100 [ 77.232456][ T5880] ? __pfx___bpf_trace_timer_start+0x10/0x10 [ 77.232468][ T5880] ? _raw_spin_lock_irqsave+0x42/0x60 [ 77.232477][ T5880] ? lock_timer_base+0x5d/0x220 [ 77.232489][ T5880] enqueue_timer+0x2b4/0x550 [ 77.232501][ T5880] __mod_timer+0x8d7/0xdc0 [ 77.232516][ T5880] ? __pfx_lock_release+0x10/0x10 [ 77.232525][ T5880] ? __pfx___mod_timer+0x10/0x10 [ 77.232537][ T5880] ? input_handler_for_each_handle+0x3e/0x250 [ 77.232553][ T5880] ? lock_acquire+0x2f/0xb0 [ 77.232562][ T5880] ? __pfx_kd_sound_helper+0x10/0x10 [ 77.232576][ T5880] kd_mksound+0x114/0x130 [ 77.232589][ T5880] ? __pfx_kd_mksound+0x10/0x10 [ 77.232602][ T5880] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 77.232613][ T5880] do_con_write+0x2e6f/0x7bb0 [ 77.232629][ T5880] ? __pfx_do_con_write+0x10/0x10 [ 77.232643][ T5880] ? __pfx___mutex_lock+0x10/0x10 [ 77.232655][ T5880] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 77.232672][ T5880] ? con_write+0x81/0xb0 [ 77.232686][ T5880] con_write+0x23/0xb0 [ 77.232699][ T5880] n_tty_write+0x419/0x1140 [ 77.232711][ T5880] ? __pfx_n_tty_write+0x10/0x10 [ 77.232720][ T5880] ? __virt_addr_valid+0x1a4/0x590 [ 77.232733][ T5880] ? __pfx_woken_wake_function+0x10/0x10 [ 77.232746][ T5880] ? __virt_addr_valid+0x5e/0x590 [ 77.232756][ T5880] ? __phys_addr_symbol+0x30/0x80 [ 77.232767][ T5880] ? __check_object_size+0x488/0x710 [ 77.232779][ T5880] ? __pfx_n_tty_write+0x10/0x10 [ 77.232789][ T5880] file_tty_write.constprop.0+0x506/0x9a0 [ 77.232804][ T5880] vfs_write+0x6b5/0x1140 [ 77.232817][ T5880] ? __pfx_tty_write+0x10/0x10 [ 77.232830][ T5880] ? trace_lock_acquire+0x14a/0x1d0 [ 77.232842][ T5880] ? __pfx_vfs_write+0x10/0x10 [ 77.232855][ T5880] ? __fget_files+0x40/0x3f0 [ 77.232870][ T5880] ksys_write+0x12f/0x260 [ 77.232883][ T5880] ? __pfx_ksys_write+0x10/0x10 [ 77.232896][ T5880] ? rcu_is_watching+0x12/0xc0 [ 77.232907][ T5880] ? rcu_is_watching+0x12/0xc0 [ 77.232918][ T5880] do_syscall_64+0xcd/0x250 [ 77.232935][ T5880] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.232946][ T5880] RIP: 0033:0x7f407037def9 [ 77.232954][ T5880] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 77.232963][ T5880] RSP: 002b:00007f4071123038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 77.232974][ T5880] RAX: ffffffffffffffda RBX: 00007f4070535f80 RCX: 00007f407037def9 [ 77.232980][ T5880] RDX: 0000000000001006 RSI: 0000000020001040 RDI: 0000000000000006 [ 77.232986][ T5880] RBP: 00007f4071123090 R08: 0000000000000000 R09: 0000000000000000 [ 77.232992][ T5880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 77.232997][ T5880] R13: 0000000000000000 R14: 00007f4070535f80 R15: 00007ffd38b25ce8 [ 77.233005][ T5880] [ 77.370938][ T66] Bluetooth: hci0: command tx timeout [ 77.373409][ T5882] FAULT_INJECTION: forcing a failure. [ 77.373409][ T5882] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 77.373424][ T5882] CPU: 1 UID: 0 PID: 5882 Comm: syz.0.17 Not tainted 6.12.0-rc1-syzkaller-ge32cde8d2bd7 #0 [ 77.373436][ T5882] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 77.373442][ T5882] Call Trace: [ 77.373446][ T5882] [ 77.373449][ T5882] dump_stack_lvl+0x116/0x1f0 [ 77.373466][ T5882] should_fail_ex+0x497/0x5b0 [ 77.373481][ T5882] ? sys_imageblit+0x5bb/0x21d0 [ 77.373496][ T5882] strncpy_from_user+0x3b/0x2a0 [ 77.373508][ T5882] ? rcu_is_watching+0x12/0xc0 [ 77.373522][ T5882] strncpy_from_user_nofault+0x7f/0x180 [ 77.373570][ T5882] bpf_probe_read_compat_str+0xf1/0x170 [ 77.373593][ T5882] bpf_prog_d0e9ac47b081aec3+0x49/0x4b [ 77.373606][ T5882] bpf_trace_run2+0x231/0x590 [ 77.373627][ T5882] ? __pfx_bpf_trace_run2+0x10/0x10 [ 77.373656][ T5882] ? do_raw_spin_unlock+0x172/0x230 [ 77.373675][ T5882] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 77.373695][ T5882] __bpf_trace_timer_start+0xc7/0x100 [ 77.373716][ T5882] ? __pfx___bpf_trace_timer_start+0x10/0x10 [ 77.373737][ T5882] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 77.373756][ T5882] enqueue_timer+0x2b4/0x550 [ 77.373773][ T5882] __mod_timer+0x8d7/0xdc0 [ 77.373787][ T5882] ? __pfx_lock_release+0x10/0x10 [ 77.373800][ T5882] ? __pfx___mod_timer+0x10/0x10 [ 77.373819][ T5882] ? input_handler_for_each_handle+0x3e/0x250 [ 77.373843][ T5882] ? lock_acquire+0x2f/0xb0 [ 77.373857][ T5882] ? __pfx_kd_sound_helper+0x10/0x10 [ 77.373879][ T5882] kd_mksound+0x114/0x130 [ 77.373900][ T5882] ? __pfx_kd_mksound+0x10/0x10 [ 77.373921][ T5882] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 77.373938][ T5882] do_con_write+0x2e6f/0x7bb0 [ 77.373967][ T5882] ? __pfx_do_con_write+0x10/0x10 [ 77.373982][ T5882] ? __pfx___mutex_lock+0x10/0x10 [ 77.373995][ T5882] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 77.374008][ T5882] ? con_write+0x81/0xb0 [ 77.374021][ T5882] con_write+0x23/0xb0 [ 77.374034][ T5882] n_tty_write+0x419/0x1140 [ 77.374046][ T5882] ? __pfx_n_tty_write+0x10/0x10 [ 77.374055][ T5882] ? __virt_addr_valid+0x1a4/0x590 [ 77.374068][ T5882] ? __pfx_woken_wake_function+0x10/0x10 [ 77.374080][ T5882] ? __virt_addr_valid+0x5e/0x590 [ 77.374091][ T5882] ? __phys_addr_symbol+0x30/0x80 [ 77.374102][ T5882] ? __check_object_size+0x488/0x710 [ 77.374113][ T5882] ? __pfx_n_tty_write+0x10/0x10 [ 77.374123][ T5882] file_tty_write.constprop.0+0x506/0x9a0 [ 77.374138][ T5882] vfs_write+0x6b5/0x1140 [ 77.374151][ T5882] ? __pfx_tty_write+0x10/0x10 [ 77.374163][ T5882] ? trace_lock_acquire+0x14a/0x1d0 [ 77.374175][ T5882] ? __pfx_vfs_write+0x10/0x10 [ 77.374189][ T5882] ? __fget_files+0x40/0x3f0 [ 77.374204][ T5882] ksys_write+0x12f/0x260 [ 77.374217][ T5882] ? __pfx_ksys_write+0x10/0x10 [ 77.374231][ T5882] ? rcu_is_watching+0x12/0xc0 [ 77.374242][ T5882] ? rcu_is_watching+0x12/0xc0 [ 77.374254][ T5882] do_syscall_64+0xcd/0x250 [ 77.374266][ T5882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.374279][ T5882] RIP: 0033:0x7f407037def9 [ 77.374288][ T5882] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 77.374297][ T5882] RSP: 002b:00007f4071123038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 77.374308][ T5882] RAX: ffffffffffffffda RBX: 00007f4070535f80 RCX: 00007f407037def9 [ 77.374314][ T5882] RDX: 0000000000001006 RSI: 0000000020001040 RDI: 0000000000000006 [ 77.374320][ T5882] RBP: 00007f4071123090 R08: 0000000000000000 R09: 0000000000000000 [ 77.374326][ T5882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 77.374331][ T5882] R13: 0000000000000000 R14: 00007f4070535f80 R15: 00007ffd38b25ce8 [ 77.374342][ T5882] [ 77.512238][ T5884] FAULT_INJECTION: forcing a failure. [ 77.512238][ T5884] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 77.512254][ T5884] CPU: 3 UID: 0 PID: 5884 Comm: syz.0.18 Not tainted 6.12.0-rc1-syzkaller-ge32cde8d2bd7 #0 [ 77.512266][ T5884] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 77.512272][ T5884] Call Trace: [ 77.512276][ T5884] [ 77.512280][ T5884] dump_stack_lvl+0x116/0x1f0 [ 77.512296][ T5884] should_fail_ex+0x497/0x5b0 [ 77.512311][ T5884] ? sys_imageblit+0x5bb/0x21d0 [ 77.512326][ T5884] strncpy_from_user+0x3b/0x2a0 [ 77.512338][ T5884] ? rcu_is_watching+0x12/0xc0 [ 77.512351][ T5884] strncpy_from_user_nofault+0x7f/0x180 [ 77.512365][ T5884] bpf_probe_read_compat_str+0xf1/0x170 [ 77.512379][ T5884] bpf_prog_d0e9ac47b081aec3+0x49/0x4b [ 77.512387][ T5884] bpf_trace_run2+0x231/0x590 [ 77.512399][ T5884] ? __pfx_bpf_trace_run2+0x10/0x10 [ 77.512412][ T5884] ? do_raw_spin_unlock+0x172/0x230 [ 77.512424][ T5884] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 77.512436][ T5884] __bpf_trace_timer_start+0xc7/0x100 [ 77.512449][ T5884] ? __pfx___bpf_trace_timer_start+0x10/0x10 [ 77.512460][ T5884] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 77.512471][ T5884] enqueue_timer+0x2b4/0x550 [ 77.512483][ T5884] __mod_timer+0x8d7/0xdc0 [ 77.512497][ T5884] ? __pfx_lock_release+0x10/0x10 [ 77.512506][ T5884] ? __pfx___mod_timer+0x10/0x10 [ 77.512518][ T5884] ? input_handler_for_each_handle+0x3e/0x250 [ 77.512533][ T5884] ? lock_acquire+0x2f/0xb0 [ 77.512542][ T5884] ? __pfx_kd_sound_helper+0x10/0x10 [ 77.512556][ T5884] kd_mksound+0x114/0x130 [ 77.512569][ T5884] ? __pfx_kd_mksound+0x10/0x10 [ 77.512582][ T5884] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 77.512592][ T5884] do_con_write+0x2e6f/0x7bb0 [ 77.512608][ T5884] ? __pfx_do_con_write+0x10/0x10 [ 77.512622][ T5884] ? __pfx___mutex_lock+0x10/0x10 [ 77.512641][ T5884] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 77.512653][ T5884] ? con_write+0x81/0xb0 [ 77.512671][ T5884] con_write+0x23/0xb0 [ 77.512684][ T5884] n_tty_write+0x419/0x1140 [ 77.512699][ T5884] ? __pfx_n_tty_write+0x10/0x10 [ 77.512708][ T5884] ? __virt_addr_valid+0x1a4/0x590 [ 77.512721][ T5884] ? __pfx_woken_wake_function+0x10/0x10 [ 77.512734][ T5884] ? __virt_addr_valid+0x5e/0x590 [ 77.512745][ T5884] ? __phys_addr_symbol+0x30/0x80 [ 77.512755][ T5884] ? __check_object_size+0x488/0x710 [ 77.512767][ T5884] ? __pfx_n_tty_write+0x10/0x10 [ 77.512776][ T5884] file_tty_write.constprop.0+0x506/0x9a0 [ 77.512791][ T5884] vfs_write+0x6b5/0x1140 [ 77.512804][ T5884] ? __pfx_tty_write+0x10/0x10 [ 77.512817][ T5884] ? trace_lock_acquire+0x14a/0x1d0 [ 77.512829][ T5884] ? __pfx_vfs_write+0x10/0x10 [ 77.512842][ T5884] ? __fget_files+0x40/0x3f0 [ 77.512857][ T5884] ksys_write+0x12f/0x260 [ 77.512870][ T5884] ? __pfx_ksys_write+0x10/0x10 [ 77.512883][ T5884] ? rcu_is_watching+0x12/0xc0 [ 77.512894][ T5884] ? rcu_is_watching+0x12/0xc0 [ 77.512905][ T5884] do_syscall_64+0xcd/0x250 [ 77.512918][ T5884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.512929][ T5884] RIP: 0033:0x7f407037def9 [ 77.512937][ T5884] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 77.512946][ T5884] RSP: 002b:00007f4071123038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 77.512956][ T5884] RAX: ffffffffffffffda RBX: 00007f4070535f80 RCX: 00007f407037def9 [ 77.512963][ T5884] RDX: 0000000000001006 RSI: 0000000020001040 RDI: 0000000000000006 [ 77.512969][ T5884] RBP: 00007f4071123090 R08: 0000000000000000 R09: 0000000000000000 [ 77.512974][ T5884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 77.512980][ T5884] R13: 0000000000000000 R14: 00007f4070535f80 R15: 00007ffd38b25ce8 [ 77.512988][ T5884] [ 77.642432][ T5886] FAULT_INJECTION: forcing a failure. [ 77.642432][ T5886] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 77.642449][ T5886] CPU: 2 UID: 0 PID: 5886 Comm: syz.0.19 Not tainted 6.12.0-rc1-syzkaller-ge32cde8d2bd7 #0 [ 77.642461][ T5886] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 77.642466][ T5886] Call Trace: [ 77.642470][ T5886] [ 77.642474][ T5886] dump_stack_lvl+0x116/0x1f0 [ 77.642491][ T5886] should_fail_ex+0x497/0x5b0 [ 77.642506][ T5886] ? sys_imageblit+0x5bb/0x21d0 [ 77.642520][ T5886] strncpy_from_user+0x3b/0x2a0 [ 77.642533][ T5886] ? rcu_is_watching+0x12/0xc0 [ 77.642546][ T5886] strncpy_from_user_nofault+0x7f/0x180 [ 77.642560][ T5886] bpf_probe_read_compat_str+0xf1/0x170 [ 77.642574][ T5886] bpf_prog_d0e9ac47b081aec3+0x49/0x4b [ 77.642582][ T5886] bpf_trace_run2+0x231/0x590 [ 77.642595][ T5886] ? __pfx_bpf_trace_run2+0x10/0x10 [ 77.642607][ T5886] ? do_raw_spin_unlock+0x172/0x230 [ 77.642622][ T5886] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 77.642641][ T5886] __bpf_trace_timer_start+0xc7/0x100 [ 77.642662][ T5886] ? __pfx___bpf_trace_timer_start+0x10/0x10 [ 77.642683][ T5886] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 77.642701][ T5886] enqueue_timer+0x2b4/0x550 [ 77.642721][ T5886] __mod_timer+0x8d7/0xdc0 [ 77.642744][ T5886] ? __pfx_lock_release+0x10/0x10 [ 77.642757][ T5886] ? __pfx___mod_timer+0x10/0x10 [ 77.642776][ T5886] ? input_handler_for_each_handle+0x3e/0x250 [ 77.642800][ T5886] ? lock_acquire+0x2f/0xb0 [ 77.642816][ T5886] ? __pfx_kd_sound_helper+0x10/0x10 [ 77.642838][ T5886] kd_mksound+0x114/0x130 [ 77.642860][ T5886] ? __pfx_kd_mksound+0x10/0x10 [ 77.642882][ T5886] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 77.642899][ T5886] do_con_write+0x2e6f/0x7bb0 [ 77.642931][ T5886] ? __pfx_do_con_write+0x10/0x10 [ 77.642955][ T5886] ? __pfx___mutex_lock+0x10/0x10 [ 77.642977][ T5886] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 77.643002][ T5886] ? con_write+0x81/0xb0 [ 77.643028][ T5886] con_write+0x23/0xb0 [ 77.643052][ T5886] n_tty_write+0x419/0x1140 [ 77.643078][ T5886] ? __pfx_n_tty_write+0x10/0x10 [ 77.643095][ T5886] ? __virt_addr_valid+0x1a4/0x590 [ 77.643118][ T5886] ? __pfx_woken_wake_function+0x10/0x10 [ 77.643141][ T5886] ? __virt_addr_valid+0x5e/0x590 [ 77.643161][ T5886] ? __phys_addr_symbol+0x30/0x80 [ 77.643182][ T5886] ? __check_object_size+0x488/0x710 [ 77.643202][ T5886] ? __pfx_n_tty_write+0x10/0x10 [ 77.643220][ T5886] file_tty_write.constprop.0+0x506/0x9a0 [ 77.643249][ T5886] vfs_write+0x6b5/0x1140 [ 77.643271][ T5886] ? __pfx_tty_write+0x10/0x10 [ 77.643293][ T5886] ? trace_lock_acquire+0x14a/0x1d0 [ 77.643312][ T5886] ? __pfx_vfs_write+0x10/0x10 [ 77.643336][ T5886] ? __fget_files+0x40/0x3f0 [ 77.643360][ T5886] ksys_write+0x12f/0x260 [ 77.643380][ T5886] ? __pfx_ksys_write+0x10/0x10 [ 77.643406][ T5886] ? rcu_is_watching+0x12/0xc0 [ 77.643427][ T5886] ? rcu_is_watching+0x12/0xc0 [ 77.643446][ T5886] do_syscall_64+0xcd/0x250 [ 77.643467][ T5886] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.643486][ T5886] RIP: 0033:0x7f407037def9 [ 77.643498][ T5886] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 77.643513][ T5886] RSP: 002b:00007f4071123038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 77.643530][ T5886] RAX: ffffffffffffffda RBX: 00007f4070535f80 RCX: 00007f407037def9 [ 77.643542][ T5886] RDX: 0000000000001006 RSI: 0000000020001040 RDI: 0000000000000006 [ 77.643551][ T5886] RBP: 00007f4071123090 R08: 0000000000000000 R09: 0000000000000000 [ 77.643561][ T5886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 77.643570][ T5886] R13: 0000000000000000 R14: 00007f4070535f80 R15: 00007ffd38b25ce8 [ 77.643585][ T5886] [ 77.782096][ T5888] FAULT_INJECTION: forcing a failure. [ 77.782096][ T5888] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 77.782112][ T5888] CPU: 3 UID: 0 PID: 5888 Comm: syz.0.20 Not tainted 6.12.0-rc1-syzkaller-ge32cde8d2bd7 #0 [ 77.782123][ T5888] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 77.782130][ T5888] Call Trace: [ 77.782133][ T5888] [ 77.782137][ T5888] dump_stack_lvl+0x116/0x1f0 [ 77.782154][ T5888] should_fail_ex+0x497/0x5b0 [ 77.782169][ T5888] ? sys_imageblit+0x5bb/0x21d0 [ 77.782183][ T5888] strncpy_from_user+0x3b/0x2a0 [ 77.782196][ T5888] ? rcu_is_watching+0x12/0xc0 [ 77.782208][ T5888] strncpy_from_user_nofault+0x7f/0x180 [ 77.782222][ T5888] bpf_probe_read_compat_str+0xf1/0x170 [ 77.782236][ T5888] bpf_prog_d0e9ac47b081aec3+0x49/0x4b [ 77.782244][ T5888] bpf_trace_run2+0x231/0x590 [ 77.782257][ T5888] ? __pfx_bpf_trace_run2+0x10/0x10 [ 77.782270][ T5888] ? do_raw_spin_unlock+0x172/0x230 [ 77.782281][ T5888] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 77.782293][ T5888] __bpf_trace_timer_start+0xc7/0x100 [ 77.782305][ T5888] ? __pfx___bpf_trace_timer_start+0x10/0x10 [ 77.782321][ T5888] ? _raw_spin_lock_irqsave+0x42/0x60 [ 77.782336][ T5888] ? lock_timer_base+0x5d/0x220 [ 77.782355][ T5888] enqueue_timer+0x2b4/0x550 [ 77.782375][ T5888] __mod_timer+0x8d7/0xdc0 [ 77.782393][ T5888] ? __pfx_lock_release+0x10/0x10 [ 77.782402][ T5888] ? __pfx___mod_timer+0x10/0x10 [ 77.782414][ T5888] ? input_handler_for_each_handle+0x3e/0x250 [ 77.782430][ T5888] ? lock_acquire+0x2f/0xb0 [ 77.782447][ T5888] ? __pfx_kd_sound_helper+0x10/0x10 [ 77.782461][ T5888] kd_mksound+0x114/0x130 [ 77.782474][ T5888] ? __pfx_kd_mksound+0x10/0x10 [ 77.782488][ T5888] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 77.782498][ T5888] do_con_write+0x2e6f/0x7bb0 [ 77.782514][ T5888] ? __pfx_do_con_write+0x10/0x10 [ 77.782528][ T5888] ? __pfx___mutex_lock+0x10/0x10 [ 77.782540][ T5888] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 77.782552][ T5888] ? con_write+0x81/0xb0 [ 77.782566][ T5888] con_write+0x23/0xb0 [ 77.782579][ T5888] n_tty_write+0x419/0x1140 [ 77.782591][ T5888] ? __pfx_n_tty_write+0x10/0x10 [ 77.782601][ T5888] ? __virt_addr_valid+0x1a4/0x590 [ 77.782613][ T5888] ? __pfx_woken_wake_function+0x10/0x10 [ 77.782626][ T5888] ? __virt_addr_valid+0x5e/0x590 [ 77.782637][ T5888] ? __phys_addr_symbol+0x30/0x80 [ 77.782648][ T5888] ? __check_object_size+0x488/0x710 [ 77.782659][ T5888] ? __pfx_n_tty_write+0x10/0x10 [ 77.782669][ T5888] file_tty_write.constprop.0+0x506/0x9a0 [ 77.782686][ T5888] vfs_write+0x6b5/0x1140 [ 77.782702][ T5888] ? __pfx_tty_write+0x10/0x10 [ 77.782717][ T5888] ? trace_lock_acquire+0x14a/0x1d0 [ 77.782729][ T5888] ? __pfx_vfs_write+0x10/0x10 [ 77.782743][ T5888] ? __fget_files+0x40/0x3f0 [ 77.782758][ T5888] ksys_write+0x12f/0x260 [ 77.782771][ T5888] ? __pfx_ksys_write+0x10/0x10 [ 77.782784][ T5888] ? rcu_is_watching+0x12/0xc0 [ 77.782795][ T5888] ? rcu_is_watching+0x12/0xc0 [ 77.782807][ T5888] do_syscall_64+0xcd/0x250 [ 77.782819][ T5888] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.782831][ T5888] RIP: 0033:0x7f407037def9 [ 77.782839][ T5888] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 77.782848][ T5888] RSP: 002b:00007f4071123038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 77.782859][ T5888] RAX: ffffffffffffffda RBX: 00007f4070535f80 RCX: 00007f407037def9 [ 77.782868][ T5888] RDX: 0000000000001006 RSI: 0000000020001040 RDI: 0000000000000006 [ 77.782878][ T5888] RBP: 00007f4071123090 R08: 0000000000000000 R09: 0000000000000000 [ 77.782887][ T5888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 77.782898][ T5888] R13: 0000000000000000 R14: 00007f4070535f80 R15: 00007ffd38b25ce8 [ 77.782908][ T5888] [ 77.933376][ T5890] FAULT_INJECTION: forcing a failure. [ 77.933376][ T5890] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 77.933393][ T5890] CPU: 0 UID: 0 PID: 5890 Comm: syz.0.21 Not tainted 6.12.0-rc1-syzkaller-ge32cde8d2bd7 #0 [ 77.933405][ T5890] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 77.933412][ T5890] Call Trace: [ 77.933415][ T5890] [ 77.933419][ T5890] dump_stack_lvl+0x116/0x1f0 [ 77.933441][ T5890] should_fail_ex+0x497/0x5b0 [ 77.933457][ T5890] ? sys_imageblit+0x5bb/0x21d0 [ 77.933471][ T5890] strncpy_from_user+0x3b/0x2a0 [ 77.933484][ T5890] ? rcu_is_watching+0x12/0xc0 [ 77.933497][ T5890] strncpy_from_user_nofault+0x7f/0x180 [ 77.933512][ T5890] bpf_probe_read_compat_str+0xf1/0x170 [ 77.933542][ T5890] bpf_prog_d0e9ac47b081aec3+0x49/0x4b [ 77.933553][ T5890] bpf_trace_run2+0x231/0x590 [ 77.933566][ T5890] ? __pfx_bpf_trace_run2+0x10/0x10 [ 77.933579][ T5890] ? do_raw_spin_unlock+0x172/0x230 [ 77.933591][ T5890] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 77.933603][ T5890] __bpf_trace_timer_start+0xc7/0x100 [ 77.933616][ T5890] ? __pfx___bpf_trace_timer_start+0x10/0x10 [ 77.933628][ T5890] ? _raw_spin_lock_irqsave+0x42/0x60 [ 77.933638][ T5890] ? lock_timer_base+0x5d/0x220 [ 77.933649][ T5890] enqueue_timer+0x2b4/0x550 [ 77.933661][ T5890] __mod_timer+0x8d7/0xdc0 [ 77.933675][ T5890] ? __pfx_lock_release+0x10/0x10 [ 77.933684][ T5890] ? __pfx___mod_timer+0x10/0x10 [ 77.933697][ T5890] ? input_handler_for_each_handle+0x3e/0x250 [ 77.933713][ T5890] ? lock_acquire+0x2f/0xb0 [ 77.933723][ T5890] ? __pfx_kd_sound_helper+0x10/0x10 [ 77.933737][ T5890] kd_mksound+0x114/0x130 [ 77.933750][ T5890] ? __pfx_kd_mksound+0x10/0x10 [ 77.933763][ T5890] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 77.933774][ T5890] do_con_write+0x2e6f/0x7bb0 [ 77.933790][ T5890] ? __pfx_do_con_write+0x10/0x10 [ 77.933803][ T5890] ? __pfx___mutex_lock+0x10/0x10 [ 77.933816][ T5890] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 77.933828][ T5890] ? con_write+0x81/0xb0 [ 77.933853][ T5890] con_write+0x23/0xb0 [ 77.933867][ T5890] n_tty_write+0x419/0x1140 [ 77.933879][ T5890] ? __pfx_n_tty_write+0x10/0x10 [ 77.933888][ T5890] ? __virt_addr_valid+0x1a4/0x590 [ 77.933901][ T5890] ? __pfx_woken_wake_function+0x10/0x10 [ 77.933914][ T5890] ? __virt_addr_valid+0x5e/0x590 [ 77.933925][ T5890] ? __phys_addr_symbol+0x30/0x80 [ 77.933935][ T5890] ? __check_object_size+0x488/0x710 [ 77.933946][ T5890] ? __pfx_n_tty_write+0x10/0x10 [ 77.933956][ T5890] file_tty_write.constprop.0+0x506/0x9a0 [ 77.933971][ T5890] vfs_write+0x6b5/0x1140 [ 77.933984][ T5890] ? __pfx_tty_write+0x10/0x10 [ 77.933997][ T5890] ? trace_lock_acquire+0x14a/0x1d0 [ 77.934009][ T5890] ? __pfx_vfs_write+0x10/0x10 [ 77.934022][ T5890] ? __fget_files+0x40/0x3f0 [ 77.934037][ T5890] ksys_write+0x12f/0x260 [ 77.934050][ T5890] ? __pfx_ksys_write+0x10/0x10 [ 77.934064][ T5890] ? rcu_is_watching+0x12/0xc0 [ 77.934074][ T5890] ? rcu_is_watching+0x12/0xc0 [ 77.934086][ T5890] do_syscall_64+0xcd/0x250 [ 77.934099][ T5890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.934112][ T5890] RIP: 0033:0x7f407037def9 [ 77.934120][ T5890] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 77.934130][ T5890] RSP: 002b:00007f4071123038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 77.934140][ T5890] RAX: ffffffffffffffda RBX: 00007f4070535f80 RCX: 00007f407037def9 [ 77.934146][ T5890] RDX: 0000000000001006 RSI: 0000000020001040 RDI: 0000000000000006 [ 77.934152][ T5890] RBP: 00007f4071123090 R08: 0000000000000000 R09: 0000000000000000 [ 77.934158][ T5890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 77.934164][ T5890] R13: 0000000000000000 R14: 00007f4070535f80 R15: 00007ffd38b25ce8 [ 77.934172][ T5890] [ 77.947262][ T39] audit: type=1400 audit(1727868950.596:148): avc: denied { rename } for pid=4812 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 77.947292][ T39] audit: type=1400 audit(1727868950.596:149): avc: denied { unlink } for pid=4812 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 77.947306][ T39] audit: type=1400 audit(1727868950.596:150): avc: denied { create } for pid=4812 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 78.082558][ T5892] FAULT_INJECTION: forcing a failure. [ 78.082558][ T5892] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 78.082580][ T5892] CPU: 3 UID: 0 PID: 5892 Comm: syz.0.22 Not tainted 6.12.0-rc1-syzkaller-ge32cde8d2bd7 #0 [ 78.082597][ T5892] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 78.082606][ T5892] Call Trace: [ 78.082610][ T5892] [ 78.082616][ T5892] dump_stack_lvl+0x116/0x1f0 [ 78.082639][ T5892] should_fail_ex+0x497/0x5b0 [ 78.082668][ T5892] ? sys_imageblit+0x5bb/0x21d0 [ 78.082688][ T5892] strncpy_from_user+0x3b/0x2a0 [ 78.082707][ T5892] ? rcu_is_watching+0x12/0xc0 [ 78.082726][ T5892] strncpy_from_user_nofault+0x7f/0x180 [ 78.082746][ T5892] bpf_probe_read_compat_str+0xf1/0x170 [ 78.082766][ T5892] bpf_prog_d0e9ac47b081aec3+0x49/0x4b [ 78.082778][ T5892] bpf_trace_run2+0x231/0x590 [ 78.082797][ T5892] ? __pfx_bpf_trace_run2+0x10/0x10 [ 78.082816][ T5892] ? do_raw_spin_unlock+0x172/0x230 [ 78.082833][ T5892] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 78.082851][ T5892] __bpf_trace_timer_start+0xc7/0x100 [ 78.082868][ T5892] ? __pfx___bpf_trace_timer_start+0x10/0x10 [ 78.082887][ T5892] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 78.082903][ T5892] enqueue_timer+0x2b4/0x550 [ 78.082921][ T5892] __mod_timer+0x8d7/0xdc0 [ 78.082942][ T5892] ? __pfx_lock_release+0x10/0x10 [ 78.082955][ T5892] ? __pfx___mod_timer+0x10/0x10 [ 78.082973][ T5892] ? input_handler_for_each_handle+0x3e/0x250 [ 78.082997][ T5892] ? lock_acquire+0x2f/0xb0 [ 78.083010][ T5892] ? __pfx_kd_sound_helper+0x10/0x10 [ 78.083030][ T5892] kd_mksound+0x114/0x130 [ 78.083049][ T5892] ? __pfx_kd_mksound+0x10/0x10 [ 78.083070][ T5892] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 78.083084][ T5892] do_con_write+0x2e6f/0x7bb0 [ 78.083110][ T5892] ? __pfx_do_con_write+0x10/0x10 [ 78.083130][ T5892] ? __pfx___mutex_lock+0x10/0x10 [ 78.083148][ T5892] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 78.083167][ T5892] ? con_write+0x81/0xb0 [ 78.083189][ T5892] con_write+0x23/0xb0 [ 78.083213][ T5892] n_tty_write+0x419/0x1140 [ 78.083234][ T5892] ? __pfx_n_tty_write+0x10/0x10 [ 78.083252][ T5892] ? __virt_addr_valid+0x1a4/0x590 [ 78.083274][ T5892] ? __pfx_woken_wake_function+0x10/0x10 [ 78.083296][ T5892] ? __virt_addr_valid+0x5e/0x590 [ 78.083314][ T5892] ? __phys_addr_symbol+0x30/0x80 [ 78.083333][ T5892] ? __check_object_size+0x488/0x710 [ 78.083354][ T5892] ? __pfx_n_tty_write+0x10/0x10 [ 78.083372][ T5892] file_tty_write.constprop.0+0x506/0x9a0 [ 78.083398][ T5892] vfs_write+0x6b5/0x1140 [ 78.083420][ T5892] ? __pfx_tty_write+0x10/0x10 [ 78.083441][ T5892] ? trace_lock_acquire+0x14a/0x1d0 [ 78.083461][ T5892] ? __pfx_vfs_write+0x10/0x10 [ 78.083485][ T5892] ? __fget_files+0x40/0x3f0 [ 78.083512][ T5892] ksys_write+0x12f/0x260 [ 78.083535][ T5892] ? __pfx_ksys_write+0x10/0x10 [ 78.083558][ T5892] ? rcu_is_watching+0x12/0xc0 [ 78.083578][ T5892] ? rcu_is_watching+0x12/0xc0 [ 78.083599][ T5892] do_syscall_64+0xcd/0x250 [ 78.083622][ T5892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.083642][ T5892] RIP: 0033:0x7f407037def9 [ 78.083660][ T5892] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 78.083676][ T5892] RSP: 002b:00007f4071123038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 78.083695][ T5892] RAX: ffffffffffffffda RBX: 00007f4070535f80 RCX: 00007f407037def9 [ 78.083707][ T5892] RDX: 0000000000001006 RSI: 0000000020001040 RDI: 0000000000000006 [ 78.083718][ T5892] RBP: 00007f4071123090 R08: 0000000000000000 R09: 0000000000000000 [ 78.083729][ T5892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 78.083738][ T5892] R13: 0000000000000000 R14: 00007f4070535f80 R15: 00007ffd38b25ce8 [ 78.083752][ T5892] [ 78.222424][ T5894] FAULT_INJECTION: forcing a failure. [ 78.222424][ T5894] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 78.222440][ T5894] CPU: 0 UID: 0 PID: 5894 Comm: syz.0.23 Not tainted 6.12.0-rc1-syzkaller-ge32cde8d2bd7 #0 [ 78.222452][ T5894] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 78.222458][ T5894] Call Trace: [ 78.222462][ T5894] [ 78.222466][ T5894] dump_stack_lvl+0x116/0x1f0 [ 78.222489][ T5894] should_fail_ex+0x497/0x5b0 [ 78.222506][ T5894] ? sys_imageblit+0x5bb/0x21d0 [ 78.222520][ T5894] strncpy_from_user+0x3b/0x2a0 [ 78.222534][ T5894] ? rcu_is_watching+0x12/0xc0 [ 78.222547][ T5894] strncpy_from_user_nofault+0x7f/0x180 [ 78.222561][ T5894] bpf_probe_read_compat_str+0xf1/0x170 [ 78.222575][ T5894] bpf_prog_d0e9ac47b081aec3+0x49/0x4b [ 78.222583][ T5894] bpf_trace_run2+0x231/0x590 [ 78.222596][ T5894] ? __pfx_bpf_trace_run2+0x10/0x10 [ 78.222609][ T5894] ? do_raw_spin_unlock+0x172/0x230 [ 78.222620][ T5894] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 78.222632][ T5894] __bpf_trace_timer_start+0xc7/0x100 [ 78.222645][ T5894] ? __pfx___bpf_trace_timer_start+0x10/0x10 [ 78.222657][ T5894] ? _raw_spin_lock_irqsave+0x42/0x60 [ 78.222666][ T5894] ? lock_timer_base+0x5d/0x220 [ 78.222678][ T5894] enqueue_timer+0x2b4/0x550 [ 78.222690][ T5894] __mod_timer+0x8d7/0xdc0 [ 78.222704][ T5894] ? __pfx_lock_release+0x10/0x10 [ 78.222713][ T5894] ? __pfx___mod_timer+0x10/0x10 [ 78.222725][ T5894] ? input_handler_for_each_handle+0x3e/0x250 [ 78.222741][ T5894] ? lock_acquire+0x2f/0xb0 [ 78.222750][ T5894] ? __pfx_kd_sound_helper+0x10/0x10 [ 78.222763][ T5894] kd_mksound+0x114/0x130 [ 78.222776][ T5894] ? __pfx_kd_mksound+0x10/0x10 [ 78.222789][ T5894] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 78.222800][ T5894] do_con_write+0x2e6f/0x7bb0 [ 78.222816][ T5894] ? __pfx_do_con_write+0x10/0x10 [ 78.222829][ T5894] ? __pfx___mutex_lock+0x10/0x10 [ 78.222841][ T5894] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 78.222854][ T5894] ? con_write+0x81/0xb0 [ 78.222868][ T5894] con_write+0x23/0xb0 [ 78.222881][ T5894] n_tty_write+0x419/0x1140 [ 78.222893][ T5894] ? __pfx_n_tty_write+0x10/0x10 [ 78.222902][ T5894] ? __virt_addr_valid+0x1a4/0x590 [ 78.222915][ T5894] ? __pfx_woken_wake_function+0x10/0x10 [ 78.222928][ T5894] ? __virt_addr_valid+0x5e/0x590 [ 78.222939][ T5894] ? __phys_addr_symbol+0x30/0x80 [ 78.222950][ T5894] ? __check_object_size+0x488/0x710 [ 78.222962][ T5894] ? __pfx_n_tty_write+0x10/0x10 [ 78.222971][ T5894] file_tty_write.constprop.0+0x506/0x9a0 [ 78.222986][ T5894] vfs_write+0x6b5/0x1140 [ 78.223000][ T5894] ? __pfx_tty_write+0x10/0x10 [ 78.223012][ T5894] ? trace_lock_acquire+0x14a/0x1d0 [ 78.223025][ T5894] ? __pfx_vfs_write+0x10/0x10 [ 78.223038][ T5894] ? __fget_files+0x40/0x3f0 [ 78.223054][ T5894] ksys_write+0x12f/0x260 [ 78.223066][ T5894] ? __pfx_ksys_write+0x10/0x10 [ 78.223080][ T5894] ? rcu_is_watching+0x12/0xc0 [ 78.223091][ T5894] ? rcu_is_watching+0x12/0xc0 [ 78.223102][ T5894] do_syscall_64+0xcd/0x250 [ 78.223115][ T5894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.223127][ T5894] RIP: 0033:0x7f407037def9 [ 78.223134][ T5894] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 78.223143][ T5894] RSP: 002b:00007f4071123038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 78.223154][ T5894] RAX: ffffffffffffffda RBX: 00007f4070535f80 RCX: 00007f407037def9 [ 78.223160][ T5894] RDX: 0000000000001006 RSI: 0000000020001040 RDI: 0000000000000006 [ 78.223166][ T5894] RBP: 00007f4071123090 R08: 0000000000000000 R09: 0000000000000000 [ 78.223172][ T5894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 78.223178][ T5894] R13: 0000000000000000 R14: 00007f4070535f80 R15: 00007ffd38b25ce8 [ 78.223186][ T5894] [ 78.357873][ T5896] FAULT_INJECTION: forcing a failure. [ 78.357873][ T5896] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 78.357899][ T5896] CPU: 0 UID: 0 PID: 5896 Comm: syz.0.24 Not tainted 6.12.0-rc1-syzkaller-ge32cde8d2bd7 #0 [ 78.357918][ T5896] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 78.357928][ T5896] Call Trace: [ 78.357934][ T5896] [ 78.357940][ T5896] dump_stack_lvl+0x116/0x1f0 [ 78.357968][ T5896] should_fail_ex+0x497/0x5b0 [ 78.357995][ T5896] ? sys_imageblit+0x5bb/0x21d0 [ 78.358027][ T5896] strncpy_from_user+0x3b/0x2a0 [ 78.358049][ T5896] ? rcu_is_watching+0x12/0xc0 [ 78.358071][ T5896] strncpy_from_user_nofault+0x7f/0x180 [ 78.358094][ T5896] bpf_probe_read_compat_str+0xf1/0x170 [ 78.358118][ T5896] bpf_prog_d0e9ac47b081aec3+0x49/0x4b [ 78.358132][ T5896] bpf_trace_run2+0x231/0x590 [ 78.358154][ T5896] ? __pfx_bpf_trace_run2+0x10/0x10 [ 78.358177][ T5896] ? do_raw_spin_unlock+0x172/0x230 [ 78.358197][ T5896] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 78.358221][ T5896] __bpf_trace_timer_start+0xc7/0x100 [ 78.358246][ T5896] ? __pfx___bpf_trace_timer_start+0x10/0x10 [ 78.358269][ T5896] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 78.358289][ T5896] enqueue_timer+0x2b4/0x550 [ 78.358311][ T5896] __mod_timer+0x8d7/0xdc0 [ 78.358336][ T5896] ? __pfx_lock_release+0x10/0x10 [ 78.358352][ T5896] ? __pfx___mod_timer+0x10/0x10 [ 78.358376][ T5896] ? input_handler_for_each_handle+0x3e/0x250 [ 78.358405][ T5896] ? lock_acquire+0x2f/0xb0 [ 78.358427][ T5896] ? __pfx_kd_sound_helper+0x10/0x10 [ 78.358455][ T5896] kd_mksound+0x114/0x130 [ 78.358482][ T5896] ? __pfx_kd_mksound+0x10/0x10 [ 78.358507][ T5896] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 78.358525][ T5896] do_con_write+0x2e6f/0x7bb0 [ 78.358560][ T5896] ? __pfx_do_con_write+0x10/0x10 [ 78.358585][ T5896] ? __pfx___mutex_lock+0x10/0x10 [ 78.358607][ T5896] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 78.358630][ T5896] ? con_write+0x81/0xb0 [ 78.358657][ T5896] con_write+0x23/0xb0 [ 78.358681][ T5896] n_tty_write+0x419/0x1140 [ 78.358705][ T5896] ? __pfx_n_tty_write+0x10/0x10 [ 78.358721][ T5896] ? __virt_addr_valid+0x1a4/0x590 [ 78.358744][ T5896] ? __pfx_woken_wake_function+0x10/0x10 [ 78.358767][ T5896] ? __virt_addr_valid+0x5e/0x590 [ 78.358788][ T5896] ? __phys_addr_symbol+0x30/0x80 [ 78.358808][ T5896] ? __check_object_size+0x488/0x710 [ 78.358829][ T5896] ? __pfx_n_tty_write+0x10/0x10 [ 78.358847][ T5896] file_tty_write.constprop.0+0x506/0x9a0 [ 78.358875][ T5896] vfs_write+0x6b5/0x1140 [ 78.358900][ T5896] ? __pfx_tty_write+0x10/0x10 [ 78.358923][ T5896] ? trace_lock_acquire+0x14a/0x1d0 [ 78.358945][ T5896] ? __pfx_vfs_write+0x10/0x10 [ 78.358977][ T5896] ? __fget_files+0x40/0x3f0 [ 78.359006][ T5896] ksys_write+0x12f/0x260 [ 78.359028][ T5896] ? __pfx_ksys_write+0x10/0x10 [ 78.359051][ T5896] ? rcu_is_watching+0x12/0xc0 [ 78.359070][ T5896] ? rcu_is_watching+0x12/0xc0 [ 78.359089][ T5896] do_syscall_64+0xcd/0x250 [ 78.359111][ T5896] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.359130][ T5896] RIP: 0033:0x7f407037def9 [ 78.359143][ T5896] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 78.359159][ T5896] RSP: 002b:00007f4071123038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 78.359176][ T5896] RAX: ffffffffffffffda RBX: 00007f4070535f80 RCX: 00007f407037def9 [ 78.359187][ T5896] RDX: 0000000000001006 RSI: 0000000020001040 RDI: 0000000000000006 [ 78.359197][ T5896] RBP: 00007f4071123090 R08: 0000000000000000 R09: 0000000000000000 [ 78.359208][ T5896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 78.359223][ T5896] R13: 0000000000000000 R14: 00007f4070535f80 R15: 00007ffd38b25ce8 [ 78.359239][ T5896] [ 78.523630][ T5898] FAULT_INJECTION: forcing a failure. [ 78.523630][ T5898] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 78.523654][ T5898] CPU: 1 UID: 0 PID: 5898 Comm: syz.0.25 Not tainted 6.12.0-rc1-syzkaller-ge32cde8d2bd7 #0 [ 78.523671][ T5898] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 78.523680][ T5898] Call Trace: [ 78.523685][ T5898] [ 78.523695][ T5898] dump_stack_lvl+0x116/0x1f0 [ 78.523718][ T5898] should_fail_ex+0x497/0x5b0 [ 78.523742][ T5898] ? sys_imageblit+0x5bb/0x21d0 [ 78.523763][ T5898] strncpy_from_user+0x3b/0x2a0 [ 78.523782][ T5898] ? rcu_is_watching+0x12/0xc0 [ 78.523801][ T5898] strncpy_from_user_nofault+0x7f/0x180 [ 78.523821][ T5898] bpf_probe_read_compat_str+0xf1/0x170 [ 78.523841][ T5898] bpf_prog_d0e9ac47b081aec3+0x49/0x4b [ 78.523853][ T5898] bpf_trace_run2+0x231/0x590 [ 78.523873][ T5898] ? __pfx_bpf_trace_run2+0x10/0x10 [ 78.523892][ T5898] ? do_raw_spin_unlock+0x172/0x230 [ 78.523910][ T5898] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 78.523928][ T5898] __bpf_trace_timer_start+0xc7/0x100 [ 78.523946][ T5898] ? __pfx___bpf_trace_timer_start+0x10/0x10 [ 78.523964][ T5898] ? _raw_spin_lock_irqsave+0x42/0x60 [ 78.523978][ T5898] ? lock_timer_base+0x5d/0x220 [ 78.523997][ T5898] enqueue_timer+0x2b4/0x550 [ 78.524015][ T5898] __mod_timer+0x8d7/0xdc0 [ 78.524035][ T5898] ? __pfx_lock_release+0x10/0x10 [ 78.524049][ T5898] ? __pfx___mod_timer+0x10/0x10 [ 78.524068][ T5898] ? input_handler_for_each_handle+0x3e/0x250 [ 78.524091][ T5898] ? lock_acquire+0x2f/0xb0 [ 78.524105][ T5898] ? __pfx_kd_sound_helper+0x10/0x10 [ 78.524125][ T5898] kd_mksound+0x114/0x130 [ 78.524145][ T5898] ? __pfx_kd_mksound+0x10/0x10 [ 78.524165][ T5898] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 78.524179][ T5898] do_con_write+0x2e6f/0x7bb0 [ 78.524205][ T5898] ? __pfx_do_con_write+0x10/0x10 [ 78.524225][ T5898] ? __pfx___mutex_lock+0x10/0x10 [ 78.524243][ T5898] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 78.524263][ T5898] ? con_write+0x81/0xb0 [ 78.524284][ T5898] con_write+0x23/0xb0 [ 78.524304][ T5898] n_tty_write+0x419/0x1140 [ 78.524323][ T5898] ? __pfx_n_tty_write+0x10/0x10 [ 78.524337][ T5898] ? __virt_addr_valid+0x1a4/0x590 [ 78.524355][ T5898] ? __pfx_woken_wake_function+0x10/0x10 [ 78.524375][ T5898] ? __virt_addr_valid+0x5e/0x590 [ 78.524391][ T5898] ? __phys_addr_symbol+0x30/0x80 [ 78.524408][ T5898] ? __check_object_size+0x488/0x710 [ 78.524425][ T5898] ? __pfx_n_tty_write+0x10/0x10 [ 78.524440][ T5898] file_tty_write.constprop.0+0x506/0x9a0 [ 78.524463][ T5898] vfs_write+0x6b5/0x1140 [ 78.524483][ T5898] ? __pfx_tty_write+0x10/0x10 [ 78.524503][ T5898] ? trace_lock_acquire+0x14a/0x1d0 [ 78.524520][ T5898] ? __pfx_vfs_write+0x10/0x10 [ 78.524541][ T5898] ? __fget_files+0x40/0x3f0 [ 78.524565][ T5898] ksys_write+0x12f/0x260 [ 78.524584][ T5898] ? __pfx_ksys_write+0x10/0x10 [ 78.524604][ T5898] ? rcu_is_watching+0x12/0xc0 [ 78.524621][ T5898] ? rcu_is_watching+0x12/0xc0 [ 78.524638][ T5898] do_syscall_64+0xcd/0x250 [ 78.524657][ T5898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.524674][ T5898] RIP: 0033:0x7f407037def9 [ 78.524686][ T5898] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 78.524704][ T5898] RSP: 002b:00007f4071123038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 78.524720][ T5898] RAX: ffffffffffffffda RBX: 00007f4070535f80 RCX: 00007f407037def9 [ 78.524730][ T5898] RDX: 0000000000001006 RSI: 0000000020001040 RDI: 0000000000000006 [ 78.524739][ T5898] RBP: 00007f4071123090 R08: 0000000000000000 R09: 0000000000000000 [ 78.524748][ T5898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 78.524757][ T5898] R13: 0000000000000000 R14: 00007f4070535f80 R15: 00007ffd38b25ce8 [ 78.524770][ T5898] [ 78.663200][ T5900] FAULT_INJECTION: forcing a failure. [ 78.663200][ T5900] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 78.663216][ T5900] CPU: 0 UID: 0 PID: 5900 Comm: syz.0.26 Not tainted 6.12.0-rc1-syzkaller-ge32cde8d2bd7 #0 [ 78.663228][ T5900] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 78.663234][ T5900] Call Trace: [ 78.663238][ T5900] [ 78.663242][ T5900] dump_stack_lvl+0x116/0x1f0 [ 78.663260][ T5900] should_fail_ex+0x497/0x5b0 [ 78.663275][ T5900] ? sys_imageblit+0x5bb/0x21d0 [ 78.663289][ T5900] strncpy_from_user+0x3b/0x2a0 [ 78.663302][ T5900] ? rcu_is_watching+0x12/0xc0 [ 78.663314][ T5900] strncpy_from_user_nofault+0x7f/0x180 [ 78.663327][ T5900] bpf_probe_read_compat_str+0xf1/0x170 [ 78.663342][ T5900] bpf_prog_d0e9ac47b081aec3+0x49/0x4b [ 78.663350][ T5900] bpf_trace_run2+0x231/0x590 [ 78.663365][ T5900] ? __pfx_bpf_trace_run2+0x10/0x10 [ 78.663378][ T5900] ? do_raw_spin_unlock+0x172/0x230 [ 78.663390][ T5900] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 78.663402][ T5900] __bpf_trace_timer_start+0xc7/0x100 [ 78.663414][ T5900] ? __pfx___bpf_trace_timer_start+0x10/0x10 [ 78.663426][ T5900] ? _raw_spin_lock_irqsave+0x42/0x60 [ 78.663436][ T5900] ? lock_timer_base+0x5d/0x220 [ 78.663460][ T5900] enqueue_timer+0x2b4/0x550 [ 78.663475][ T5900] __mod_timer+0x8d7/0xdc0 [ 78.663489][ T5900] ? __pfx_lock_release+0x10/0x10 [ 78.663498][ T5900] ? __pfx___mod_timer+0x10/0x10 [ 78.663510][ T5900] ? input_handler_for_each_handle+0x3e/0x250 [ 78.663526][ T5900] ? lock_acquire+0x2f/0xb0 [ 78.663535][ T5900] ? __pfx_kd_sound_helper+0x10/0x10 [ 78.663548][ T5900] kd_mksound+0x114/0x130 [ 78.663561][ T5900] ? __pfx_kd_mksound+0x10/0x10 [ 78.663575][ T5900] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 78.663585][ T5900] do_con_write+0x2e6f/0x7bb0 [ 78.663602][ T5900] ? __pfx_do_con_write+0x10/0x10 [ 78.663620][ T5900] ? __pfx___mutex_lock+0x10/0x10 [ 78.663632][ T5900] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 78.663645][ T5900] ? con_write+0x81/0xb0 [ 78.663659][ T5900] con_write+0x23/0xb0 [ 78.663672][ T5900] n_tty_write+0x419/0x1140 [ 78.663684][ T5900] ? __pfx_n_tty_write+0x10/0x10 [ 78.663693][ T5900] ? __virt_addr_valid+0x1a4/0x590 [ 78.663706][ T5900] ? __pfx_woken_wake_function+0x10/0x10 [ 78.663719][ T5900] ? __virt_addr_valid+0x5e/0x590 [ 78.663730][ T5900] ? __phys_addr_symbol+0x30/0x80 [ 78.663740][ T5900] ? __check_object_size+0x488/0x710 [ 78.663752][ T5900] ? __pfx_n_tty_write+0x10/0x10 [ 78.663761][ T5900] file_tty_write.constprop.0+0x506/0x9a0 [ 78.663776][ T5900] vfs_write+0x6b5/0x1140 [ 78.663790][ T5900] ? __pfx_tty_write+0x10/0x10 [ 78.663802][ T5900] ? trace_lock_acquire+0x14a/0x1d0 [ 78.663814][ T5900] ? __pfx_vfs_write+0x10/0x10 [ 78.663827][ T5900] ? __fget_files+0x40/0x3f0 [ 78.663842][ T5900] ksys_write+0x12f/0x260 [ 78.663856][ T5900] ? __pfx_ksys_write+0x10/0x10 [ 78.663869][ T5900] ? rcu_is_watching+0x12/0xc0 [ 78.663880][ T5900] ? rcu_is_watching+0x12/0xc0 [ 78.663891][ T5900] do_syscall_64+0xcd/0x250 [ 78.663903][ T5900] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.663916][ T5900] RIP: 0033:0x7f407037def9 [ 78.663924][ T5900] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 78.663933][ T5900] RSP: 002b:00007f4071123038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 78.663943][ T5900] RAX: ffffffffffffffda RBX: 00007f4070535f80 RCX: 00007f407037def9 [ 78.663950][ T5900] RDX: 0000000000001006 RSI: 0000000020001040 RDI: 0000000000000006 [ 78.663956][ T5900] RBP: 00007f4071123090 R08: 0000000000000000 R09: 0000000000000000 [ 78.663961][ T5900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 78.663967][ T5900] R13: 0000000000000000 R14: 00007f4070535f80 R15: 00007ffd38b25ce8 [ 78.663976][ T5900] [ 78.812222][ T5902] FAULT_INJECTION: forcing a failure. [ 78.812222][ T5902] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 78.812238][ T5902] CPU: 0 UID: 0 PID: 5902 Comm: syz.0.27 Not tainted 6.12.0-rc1-syzkaller-ge32cde8d2bd7 #0 [ 78.812250][ T5902] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 78.812256][ T5902] Call Trace: [ 78.812260][ T5902] [ 78.812264][ T5902] dump_stack_lvl+0x116/0x1f0 [ 78.812281][ T5902] should_fail_ex+0x497/0x5b0 [ 78.812297][ T5902] ? sys_imageblit+0x5bb/0x21d0 [ 78.812311][ T5902] strncpy_from_user+0x3b/0x2a0 [ 78.812323][ T5902] ? rcu_is_watching+0x12/0xc0 [ 78.812336][ T5902] strncpy_from_user_nofault+0x7f/0x180 [ 78.812350][ T5902] bpf_probe_read_compat_str+0xf1/0x170 [ 78.812364][ T5902] bpf_prog_d0e9ac47b081aec3+0x49/0x4b [ 78.812372][ T5902] bpf_trace_run2+0x231/0x590 [ 78.812385][ T5902] ? __pfx_bpf_trace_run2+0x10/0x10 [ 78.812398][ T5902] ? do_raw_spin_unlock+0x172/0x230 [ 78.812409][ T5902] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 78.812429][ T5902] __bpf_trace_timer_start+0xc7/0x100 [ 78.812441][ T5902] ? __pfx___bpf_trace_timer_start+0x10/0x10 [ 78.812459][ T5902] ? _raw_spin_lock_irqsave+0x42/0x60 [ 78.812474][ T5902] ? lock_timer_base+0x5d/0x220 [ 78.812494][ T5902] enqueue_timer+0x2b4/0x550 [ 78.812513][ T5902] __mod_timer+0x8d7/0xdc0 [ 78.812536][ T5902] ? __pfx_lock_release+0x10/0x10 [ 78.812551][ T5902] ? __pfx___mod_timer+0x10/0x10 [ 78.812571][ T5902] ? input_handler_for_each_handle+0x3e/0x250 [ 78.812597][ T5902] ? lock_acquire+0x2f/0xb0 [ 78.812613][ T5902] ? __pfx_kd_sound_helper+0x10/0x10 [ 78.812637][ T5902] kd_mksound+0x114/0x130 [ 78.812659][ T5902] ? __pfx_kd_mksound+0x10/0x10 [ 78.812680][ T5902] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 78.812697][ T5902] do_con_write+0x2e6f/0x7bb0 [ 78.812729][ T5902] ? __pfx_do_con_write+0x10/0x10 [ 78.812754][ T5902] ? __pfx___mutex_lock+0x10/0x10 [ 78.812776][ T5902] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 78.812800][ T5902] ? con_write+0x81/0xb0 [ 78.812826][ T5902] con_write+0x23/0xb0 [ 78.812851][ T5902] n_tty_write+0x419/0x1140 [ 78.812874][ T5902] ? __pfx_n_tty_write+0x10/0x10 [ 78.812891][ T5902] ? __virt_addr_valid+0x1a4/0x590 [ 78.812913][ T5902] ? __pfx_woken_wake_function+0x10/0x10 [ 78.812937][ T5902] ? __virt_addr_valid+0x5e/0x590 [ 78.812958][ T5902] ? __phys_addr_symbol+0x30/0x80 [ 78.812978][ T5902] ? __check_object_size+0x488/0x710 [ 78.812998][ T5902] ? __pfx_n_tty_write+0x10/0x10 [ 78.813016][ T5902] file_tty_write.constprop.0+0x506/0x9a0 [ 78.813044][ T5902] vfs_write+0x6b5/0x1140 [ 78.813070][ T5902] ? __pfx_tty_write+0x10/0x10 [ 78.813093][ T5902] ? trace_lock_acquire+0x14a/0x1d0 [ 78.813115][ T5902] ? __pfx_vfs_write+0x10/0x10 [ 78.813140][ T5902] ? __fget_files+0x40/0x3f0 [ 78.813169][ T5902] ksys_write+0x12f/0x260 [ 78.813193][ T5902] ? __pfx_ksys_write+0x10/0x10 [ 78.813218][ T5902] ? rcu_is_watching+0x12/0xc0 [ 78.813240][ T5902] ? rcu_is_watching+0x12/0xc0 [ 78.813261][ T5902] do_syscall_64+0xcd/0x250 [ 78.813286][ T5902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.813308][ T5902] RIP: 0033:0x7f407037def9 [ 78.813323][ T5902] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 78.813340][ T5902] RSP: 002b:00007f4071123038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 78.813358][ T5902] RAX: ffffffffffffffda RBX: 00007f4070535f80 RCX: 00007f407037def9 [ 78.813370][ T5902] RDX: 0000000000001006 RSI: 0000000020001040 RDI: 0000000000000006 [ 78.813381][ T5902] RBP: 00007f4071123090 R08: 0000000000000000 R09: 0000000000000000 [ 78.813392][ T5902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 78.813402][ T5902] R13: 0000000000000000 R14: 00007f4070535f80 R15: 00007ffd38b25ce8 [ 78.813424][ T5902] [ 78.942421][ T5904] FAULT_INJECTION: forcing a failure. [ 78.942421][ T5904] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 78.942445][ T5904] CPU: 2 UID: 0 PID: 5904 Comm: syz.0.28 Not tainted 6.12.0-rc1-syzkaller-ge32cde8d2bd7 #0 [ 78.942461][ T5904] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 78.942467][ T5904] Call Trace: [ 78.942473][ T5904] [ 78.942479][ T5904] dump_stack_lvl+0x116/0x1f0 [ 78.942505][ T5904] should_fail_ex+0x497/0x5b0 [ 78.942529][ T5904] ? sys_imageblit+0x5bb/0x21d0 [ 78.942553][ T5904] strncpy_from_user+0x3b/0x2a0 [ 78.942575][ T5904] ? rcu_is_watching+0x12/0xc0 [ 78.942590][ T5904] strncpy_from_user_nofault+0x7f/0x180 [ 78.942612][ T5904] bpf_probe_read_compat_str+0xf1/0x170 [ 78.942635][ T5904] bpf_prog_d0e9ac47b081aec3+0x49/0x4b [ 78.942648][ T5904] bpf_trace_run2+0x231/0x590 [ 78.942669][ T5904] ? __pfx_bpf_trace_run2+0x10/0x10 [ 78.942691][ T5904] ? do_raw_spin_unlock+0x172/0x230 [ 78.942711][ T5904] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 78.942724][ T5904] __bpf_trace_timer_start+0xc7/0x100 [ 78.942743][ T5904] ? __pfx___bpf_trace_timer_start+0x10/0x10 [ 78.942765][ T5904] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 78.942783][ T5904] enqueue_timer+0x2b4/0x550 [ 78.942801][ T5904] __mod_timer+0x8d7/0xdc0 [ 78.942815][ T5904] ? __pfx_lock_release+0x10/0x10 [ 78.942824][ T5904] ? __pfx___mod_timer+0x10/0x10 [ 78.942836][ T5904] ? input_handler_for_each_handle+0x3e/0x250 [ 78.942852][ T5904] ? lock_acquire+0x2f/0xb0 [ 78.942861][ T5904] ? __pfx_kd_sound_helper+0x10/0x10 [ 78.942882][ T5904] kd_mksound+0x114/0x130 [ 78.942904][ T5904] ? __pfx_kd_mksound+0x10/0x10 [ 78.942927][ T5904] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 78.942941][ T5904] do_con_write+0x2e6f/0x7bb0 [ 78.942965][ T5904] ? __pfx_do_con_write+0x10/0x10 [ 78.942988][ T5904] ? __pfx___mutex_lock+0x10/0x10 [ 78.943008][ T5904] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 78.943029][ T5904] ? con_write+0x81/0xb0 [ 78.943052][ T5904] con_write+0x23/0xb0 [ 78.943068][ T5904] n_tty_write+0x419/0x1140 [ 78.943089][ T5904] ? __pfx_n_tty_write+0x10/0x10 [ 78.943104][ T5904] ? __virt_addr_valid+0x1a4/0x590 [ 78.943125][ T5904] ? __pfx_woken_wake_function+0x10/0x10 [ 78.943146][ T5904] ? __virt_addr_valid+0x5e/0x590 [ 78.943165][ T5904] ? __phys_addr_symbol+0x30/0x80 [ 78.943178][ T5904] ? __check_object_size+0x488/0x710 [ 78.943195][ T5904] ? __pfx_n_tty_write+0x10/0x10 [ 78.943212][ T5904] file_tty_write.constprop.0+0x506/0x9a0 [ 78.943238][ T5904] vfs_write+0x6b5/0x1140 [ 78.943258][ T5904] ? __pfx_tty_write+0x10/0x10 [ 78.943270][ T5904] ? trace_lock_acquire+0x14a/0x1d0 [ 78.943282][ T5904] ? __pfx_vfs_write+0x10/0x10 [ 78.943304][ T5904] ? __fget_files+0x40/0x3f0 [ 78.943330][ T5904] ksys_write+0x12f/0x260 [ 78.943352][ T5904] ? __pfx_ksys_write+0x10/0x10 [ 78.943368][ T5904] ? rcu_is_watching+0x12/0xc0 [ 78.943386][ T5904] ? rcu_is_watching+0x12/0xc0 [ 78.943406][ T5904] do_syscall_64+0xcd/0x250 [ 78.943433][ T5904] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.943448][ T5904] RIP: 0033:0x7f407037def9 [ 78.943458][ T5904] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 78.943473][ T5904] RSP: 002b:00007f4071123038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 78.943491][ T5904] RAX: ffffffffffffffda RBX: 00007f4070535f80 RCX: 00007f407037def9 [ 78.943502][ T5904] RDX: 0000000000001006 RSI: 0000000020001040 RDI: 0000000000000006 [ 78.943512][ T5904] RBP: 00007f4071123090 R08: 0000000000000000 R09: 0000000000000000 [ 78.943522][ T5904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 78.943532][ T5904] R13: 0000000000000000 R14: 00007f4070535f80 R15: 00007ffd38b25ce8 [ 78.943542][ T5904] [ 79.092553][ T5906] FAULT_INJECTION: forcing a failure. [ 79.092553][ T5906] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 79.092577][ T5906] CPU: 1 UID: 0 PID: 5906 Comm: syz.0.29 Not tainted 6.12.0-rc1-syzkaller-ge32cde8d2bd7 #0 [ 79.092595][ T5906] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 79.092605][ T5906] Call Trace: [ 79.092611][ T5906] [ 79.092617][ T5906] dump_stack_lvl+0x116/0x1f0 [ 79.092644][ T5906] should_fail_ex+0x497/0x5b0 [ 79.092669][ T5906] ? sys_imageblit+0x5bb/0x21d0 [ 79.092692][ T5906] strncpy_from_user+0x3b/0x2a0 [ 79.092712][ T5906] ? rcu_is_watching+0x12/0xc0 [ 79.092733][ T5906] strncpy_from_user_nofault+0x7f/0x180 [ 79.092755][ T5906] bpf_probe_read_compat_str+0xf1/0x170 [ 79.092778][ T5906] bpf_prog_d0e9ac47b081aec3+0x49/0x4b [ 79.092790][ T5906] bpf_trace_run2+0x231/0x590 [ 79.092812][ T5906] ? __pfx_bpf_trace_run2+0x10/0x10 [ 79.092834][ T5906] ? do_raw_spin_unlock+0x172/0x230 [ 79.092852][ T5906] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 79.092874][ T5906] __bpf_trace_timer_start+0xc7/0x100 [ 79.092894][ T5906] ? __pfx___bpf_trace_timer_start+0x10/0x10 [ 79.092915][ T5906] ? _raw_spin_lock_irqsave+0x42/0x60 [ 79.092933][ T5906] ? lock_timer_base+0x5d/0x220 [ 79.092954][ T5906] enqueue_timer+0x2b4/0x550 [ 79.092976][ T5906] __mod_timer+0x8d7/0xdc0 [ 79.093002][ T5906] ? __pfx_lock_release+0x10/0x10 [ 79.093018][ T5906] ? __pfx___mod_timer+0x10/0x10 [ 79.093041][ T5906] ? input_handler_for_each_handle+0x3e/0x250 [ 79.093070][ T5906] ? lock_acquire+0x2f/0xb0 [ 79.093087][ T5906] ? __pfx_kd_sound_helper+0x10/0x10 [ 79.093111][ T5906] kd_mksound+0x114/0x130 [ 79.093136][ T5906] ? __pfx_kd_mksound+0x10/0x10 [ 79.093161][ T5906] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 79.093179][ T5906] do_con_write+0x2e6f/0x7bb0 [ 79.093210][ T5906] ? __pfx_do_con_write+0x10/0x10 [ 79.093235][ T5906] ? __pfx___mutex_lock+0x10/0x10 [ 79.093256][ T5906] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 79.093280][ T5906] ? con_write+0x81/0xb0 [ 79.093306][ T5906] con_write+0x23/0xb0 [ 79.093330][ T5906] n_tty_write+0x419/0x1140 [ 79.093353][ T5906] ? __pfx_n_tty_write+0x10/0x10 [ 79.093371][ T5906] ? __virt_addr_valid+0x1a4/0x590 [ 79.093393][ T5906] ? __pfx_woken_wake_function+0x10/0x10 [ 79.093417][ T5906] ? __virt_addr_valid+0x5e/0x590 [ 79.093444][ T5906] ? __phys_addr_symbol+0x30/0x80 [ 79.093464][ T5906] ? __check_object_size+0x488/0x710 [ 79.093485][ T5906] ? __pfx_n_tty_write+0x10/0x10 [ 79.093504][ T5906] file_tty_write.constprop.0+0x506/0x9a0 [ 79.093562][ T5906] vfs_write+0x6b5/0x1140 [ 79.093588][ T5906] ? __pfx_tty_write+0x10/0x10 [ 79.093611][ T5906] ? trace_lock_acquire+0x14a/0x1d0 [ 79.093631][ T5906] ? __pfx_vfs_write+0x10/0x10 [ 79.093651][ T5906] ? __fget_files+0x40/0x3f0 [ 79.093676][ T5906] ksys_write+0x12f/0x260 [ 79.093698][ T5906] ? __pfx_ksys_write+0x10/0x10 [ 79.093720][ T5906] ? rcu_is_watching+0x12/0xc0 [ 79.093740][ T5906] ? rcu_is_watching+0x12/0xc0 [ 79.093760][ T5906] do_syscall_64+0xcd/0x250 [ 79.093784][ T5906] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.093806][ T5906] RIP: 0033:0x7f407037def9 [ 79.093821][ T5906] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 79.093838][ T5906] RSP: 002b:00007f4071123038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 79.093858][ T5906] RAX: ffffffffffffffda RBX: 00007f4070535f80 RCX: 00007f407037def9 [ 79.093870][ T5906] RDX: 0000000000001006 RSI: 0000000020001040 RDI: 0000000000000006 [ 79.093881][ T5906] RBP: 00007f4071123090 R08: 0000000000000000 R09: 0000000000000000 [ 79.093892][ T5906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 79.093903][ T5906] R13: 0000000000000000 R14: 00007f4070535f80 R15: 00007ffd38b25ce8 [ 79.093919][ T5906] [ 79.242622][ T5908] FAULT_INJECTION: forcing a failure. [ 79.242622][ T5908] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 79.242640][ T5908] CPU: 2 UID: 0 PID: 5908 Comm: syz.0.30 Not tainted 6.12.0-rc1-syzkaller-ge32cde8d2bd7 #0 [ 79.242652][ T5908] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 79.242659][ T5908] Call Trace: [ 79.242662][ T5908] [ 79.242666][ T5908] dump_stack_lvl+0x116/0x1f0 [ 79.242686][ T5908] should_fail_ex+0x497/0x5b0 [ 79.242702][ T5908] ? sys_imageblit+0x5bb/0x21d0 [ 79.242716][ T5908] strncpy_from_user+0x3b/0x2a0 [ 79.242729][ T5908] ? rcu_is_watching+0x12/0xc0 [ 79.242743][ T5908] strncpy_from_user_nofault+0x7f/0x180 [ 79.242757][ T5908] bpf_probe_read_compat_str+0xf1/0x170 [ 79.242771][ T5908] bpf_prog_d0e9ac47b081aec3+0x49/0x4b [ 79.242779][ T5908] bpf_trace_run2+0x231/0x590 [ 79.242792][ T5908] ? __pfx_bpf_trace_run2+0x10/0x10 [ 79.242805][ T5908] ? do_raw_spin_unlock+0x172/0x230 [ 79.242817][ T5908] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 79.242829][ T5908] __bpf_trace_timer_start+0xc7/0x100 [ 79.242842][ T5908] ? __pfx___bpf_trace_timer_start+0x10/0x10 [ 79.242854][ T5908] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 79.242865][ T5908] enqueue_timer+0x2b4/0x550 [ 79.242881][ T5908] __mod_timer+0x8d7/0xdc0 [ 79.242895][ T5908] ? __pfx_lock_release+0x10/0x10 [ 79.242904][ T5908] ? __pfx___mod_timer+0x10/0x10 [ 79.242919][ T5908] ? input_handler_for_each_handle+0x3e/0x250 [ 79.242936][ T5908] ? lock_acquire+0x2f/0xb0 [ 79.242945][ T5908] ? __pfx_kd_sound_helper+0x10/0x10 [ 79.242958][ T5908] kd_mksound+0x114/0x130 [ 79.242972][ T5908] ? __pfx_kd_mksound+0x10/0x10 [ 79.242985][ T5908] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 79.242995][ T5908] do_con_write+0x2e6f/0x7bb0 [ 79.243015][ T5908] ? __pfx_do_con_write+0x10/0x10 [ 79.243029][ T5908] ? __pfx___mutex_lock+0x10/0x10 [ 79.243041][ T5908] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 79.243053][ T5908] ? con_write+0x81/0xb0 [ 79.243067][ T5908] con_write+0x23/0xb0 [ 79.243081][ T5908] n_tty_write+0x419/0x1140 [ 79.243093][ T5908] ? __pfx_n_tty_write+0x10/0x10 [ 79.243102][ T5908] ? __virt_addr_valid+0x1a4/0x590 [ 79.243115][ T5908] ? __pfx_woken_wake_function+0x10/0x10 [ 79.243128][ T5908] ? __virt_addr_valid+0x5e/0x590 [ 79.243139][ T5908] ? __phys_addr_symbol+0x30/0x80 [ 79.243150][ T5908] ? __check_object_size+0x488/0x710 [ 79.243161][ T5908] ? __pfx_n_tty_write+0x10/0x10 [ 79.243171][ T5908] file_tty_write.constprop.0+0x506/0x9a0 [ 79.243186][ T5908] vfs_write+0x6b5/0x1140 [ 79.243199][ T5908] ? __pfx_tty_write+0x10/0x10 [ 79.243212][ T5908] ? trace_lock_acquire+0x14a/0x1d0 [ 79.243224][ T5908] ? __pfx_vfs_write+0x10/0x10 [ 79.243240][ T5908] ? __fget_files+0x40/0x3f0 [ 79.243263][ T5908] ksys_write+0x12f/0x260 [ 79.243283][ T5908] ? __pfx_ksys_write+0x10/0x10 [ 79.243311][ T5908] ? rcu_is_watching+0x12/0xc0 [ 79.243323][ T5908] ? rcu_is_watching+0x12/0xc0 [ 79.243334][ T5908] do_syscall_64+0xcd/0x250 [ 79.243348][ T5908] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.243360][ T5908] RIP: 0033:0x7f407037def9 [ 79.243368][ T5908] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 79.243377][ T5908] RSP: 002b:00007f4071123038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 79.243387][ T5908] RAX: ffffffffffffffda RBX: 00007f4070535f80 RCX: 00007f407037def9 [ 79.243394][ T5908] RDX: 0000000000001006 RSI: 0000000020001040 RDI: 0000000000000006 [ 79.243400][ T5908] RBP: 00007f4071123090 R08: 0000000000000000 R09: 0000000000000000 [ 79.243405][ T5908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 79.243411][ T5908] R13: 0000000000000000 R14: 00007f4070535f80 R15: 00007ffd38b25ce8 [ 79.243419][ T5908] [ 79.392316][ T5910] FAULT_INJECTION: forcing a failure. [ 79.392316][ T5910] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 79.392341][ T5910] CPU: 0 UID: 0 PID: 5910 Comm: syz.0.31 Not tainted 6.12.0-rc1-syzkaller-ge32cde8d2bd7 #0 [ 79.392362][ T5910] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 79.392371][ T5910] Call Trace: [ 79.392376][ T5910] [ 79.392384][ T5910] dump_stack_lvl+0x116/0x1f0 [ 79.392410][ T5910] should_fail_ex+0x497/0x5b0 [ 79.392436][ T5910] ? sys_imageblit+0x5bb/0x21d0 [ 79.392458][ T5910] strncpy_from_user+0x3b/0x2a0 [ 79.392479][ T5910] ? rcu_is_watching+0x12/0xc0 [ 79.392500][ T5910] strncpy_from_user_nofault+0x7f/0x180 [ 79.392522][ T5910] bpf_probe_read_compat_str+0xf1/0x170 [ 79.392546][ T5910] bpf_prog_d0e9ac47b081aec3+0x49/0x4b [ 79.392560][ T5910] bpf_trace_run2+0x231/0x590 [ 79.392581][ T5910] ? __pfx_bpf_trace_run2+0x10/0x10 [ 79.392603][ T5910] ? do_raw_spin_unlock+0x172/0x230 [ 79.392627][ T5910] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 79.392646][ T5910] __bpf_trace_timer_start+0xc7/0x100 [ 79.392665][ T5910] ? __pfx___bpf_trace_timer_start+0x10/0x10 [ 79.392684][ T5910] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 79.392706][ T5910] enqueue_timer+0x2b4/0x550 [ 79.392725][ T5910] __mod_timer+0x8d7/0xdc0 [ 79.392747][ T5910] ? __pfx_lock_release+0x10/0x10 [ 79.392765][ T5910] ? __pfx___mod_timer+0x10/0x10 [ 79.392785][ T5910] ? input_handler_for_each_handle+0x3e/0x250 [ 79.392810][ T5910] ? lock_acquire+0x2f/0xb0 [ 79.392824][ T5910] ? __pfx_kd_sound_helper+0x10/0x10 [ 79.392846][ T5910] kd_mksound+0x114/0x130 [ 79.392867][ T5910] ? __pfx_kd_mksound+0x10/0x10 [ 79.392888][ T5910] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 79.392903][ T5910] do_con_write+0x2e6f/0x7bb0 [ 79.392931][ T5910] ? __pfx_do_con_write+0x10/0x10 [ 79.392955][ T5910] ? __pfx___mutex_lock+0x10/0x10 [ 79.392977][ T5910] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 79.393001][ T5910] ? con_write+0x81/0xb0 [ 79.393028][ T5910] con_write+0x23/0xb0 [ 79.393054][ T5910] n_tty_write+0x419/0x1140 [ 79.393076][ T5910] ? __pfx_n_tty_write+0x10/0x10 [ 79.393094][ T5910] ? __virt_addr_valid+0x1a4/0x590 [ 79.393116][ T5910] ? __pfx_woken_wake_function+0x10/0x10 [ 79.393140][ T5910] ? __virt_addr_valid+0x5e/0x590 [ 79.393161][ T5910] ? __phys_addr_symbol+0x30/0x80 [ 79.393182][ T5910] ? __check_object_size+0x488/0x710 [ 79.393202][ T5910] ? __pfx_n_tty_write+0x10/0x10 [ 79.393221][ T5910] file_tty_write.constprop.0+0x506/0x9a0 [ 79.393248][ T5910] vfs_write+0x6b5/0x1140 [ 79.393271][ T5910] ? __pfx_tty_write+0x10/0x10 [ 79.393294][ T5910] ? trace_lock_acquire+0x14a/0x1d0 [ 79.393313][ T5910] ? __pfx_vfs_write+0x10/0x10 [ 79.393336][ T5910] ? __fget_files+0x40/0x3f0 [ 79.393364][ T5910] ksys_write+0x12f/0x260 [ 79.393388][ T5910] ? __pfx_ksys_write+0x10/0x10 [ 79.393413][ T5910] ? rcu_is_watching+0x12/0xc0 [ 79.393434][ T5910] ? rcu_is_watching+0x12/0xc0 [ 79.393457][ T5910] do_syscall_64+0xcd/0x250 [ 79.393484][ T5910] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.393508][ T5910] RIP: 0033:0x7f407037def9 [ 79.393548][ T5910] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 79.393566][ T5910] RSP: 002b:00007f4071123038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 79.393585][ T5910] RAX: ffffffffffffffda RBX: 00007f4070535f80 RCX: 00007f407037def9 [ 79.393599][ T5910] RDX: 0000000000001006 RSI: 0000000020001040 RDI: 0000000000000006 [ 79.393611][ T5910] RBP: 00007f4071123090 R08: 0000000000000000 R09: 0000000000000000 [ 79.393627][ T5910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 79.393638][ T5910] R13: 0000000000000000 R14: 00007f4070535f80 R15: 00007ffd38b25ce8 [ 79.393657][ T5910] [ 79.450967][ T66] Bluetooth: hci0: command tx timeout [ 79.542397][ T5912] FAULT_INJECTION: forcing a failure. [ 79.542397][ T5912] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 79.542413][ T5912] CPU: 0 UID: 0 PID: 5912 Comm: syz.0.32 Not tainted 6.12.0-rc1-syzkaller-ge32cde8d2bd7 #0 [ 79.542424][ T5912] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 79.542431][ T5912] Call Trace: [ 79.542434][ T5912] [ 79.542438][ T5912] dump_stack_lvl+0x116/0x1f0 [ 79.542455][ T5912] should_fail_ex+0x497/0x5b0 [ 79.542471][ T5912] ? sys_imageblit+0x5bb/0x21d0 [ 79.542485][ T5912] strncpy_from_user+0x3b/0x2a0 [ 79.542498][ T5912] ? rcu_is_watching+0x12/0xc0 [ 79.542511][ T5912] strncpy_from_user_nofault+0x7f/0x180 [ 79.542524][ T5912] bpf_probe_read_compat_str+0xf1/0x170 [ 79.542539][ T5912] bpf_prog_d0e9ac47b081aec3+0x49/0x4b [ 79.542547][ T5912] bpf_trace_run2+0x231/0x590 [ 79.542559][ T5912] ? __pfx_bpf_trace_run2+0x10/0x10 [ 79.542572][ T5912] ? do_raw_spin_unlock+0x172/0x230 [ 79.542583][ T5912] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 79.542595][ T5912] __bpf_trace_timer_start+0xc7/0x100 [ 79.542607][ T5912] ? __pfx___bpf_trace_timer_start+0x10/0x10 [ 79.542619][ T5912] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 79.542629][ T5912] enqueue_timer+0x2b4/0x550 [ 79.542647][ T5912] __mod_timer+0x8d7/0xdc0 [ 79.542661][ T5912] ? __pfx_lock_release+0x10/0x10 [ 79.542670][ T5912] ? __pfx___mod_timer+0x10/0x10 [ 79.542682][ T5912] ? input_handler_for_each_handle+0x3e/0x250 [ 79.542698][ T5912] ? lock_acquire+0x2f/0xb0 [ 79.542707][ T5912] ? __pfx_kd_sound_helper+0x10/0x10 [ 79.542720][ T5912] kd_mksound+0x114/0x130 [ 79.542733][ T5912] ? __pfx_kd_mksound+0x10/0x10 [ 79.542746][ T5912] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 79.542756][ T5912] do_con_write+0x2e6f/0x7bb0 [ 79.542772][ T5912] ? __pfx_do_con_write+0x10/0x10 [ 79.542785][ T5912] ? __pfx___mutex_lock+0x10/0x10 [ 79.542798][ T5912] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 79.542810][ T5912] ? con_write+0x81/0xb0 [ 79.542824][ T5912] con_write+0x23/0xb0 [ 79.542837][ T5912] n_tty_write+0x419/0x1140 [ 79.542849][ T5912] ? __pfx_n_tty_write+0x10/0x10 [ 79.542858][ T5912] ? __virt_addr_valid+0x1a4/0x590 [ 79.542871][ T5912] ? __pfx_woken_wake_function+0x10/0x10 [ 79.542883][ T5912] ? __virt_addr_valid+0x5e/0x590 [ 79.542895][ T5912] ? __phys_addr_symbol+0x30/0x80 [ 79.542905][ T5912] ? __check_object_size+0x488/0x710 [ 79.542917][ T5912] ? __pfx_n_tty_write+0x10/0x10 [ 79.542927][ T5912] file_tty_write.constprop.0+0x506/0x9a0 [ 79.542941][ T5912] vfs_write+0x6b5/0x1140 [ 79.542955][ T5912] ? __pfx_tty_write+0x10/0x10 [ 79.542967][ T5912] ? trace_lock_acquire+0x14a/0x1d0 [ 79.542979][ T5912] ? __pfx_vfs_write+0x10/0x10 [ 79.542992][ T5912] ? __fget_files+0x40/0x3f0 [ 79.543007][ T5912] ksys_write+0x12f/0x260 [ 79.543020][ T5912] ? __pfx_ksys_write+0x10/0x10 [ 79.543033][ T5912] ? rcu_is_watching+0x12/0xc0 [ 79.543044][ T5912] ? rcu_is_watching+0x12/0xc0 [ 79.543055][ T5912] do_syscall_64+0xcd/0x250 [ 79.543067][ T5912] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.543079][ T5912] RIP: 0033:0x7f407037def9 [ 79.543087][ T5912] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 79.543096][ T5912] RSP: 002b:00007f4071123038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 79.543106][ T5912] RAX: ffffffffffffffda RBX: 00007f4070535f80 RCX: 00007f407037def9 [ 79.543112][ T5912] RDX: 0000000000001006 RSI: 0000000020001040 RDI: 0000000000000006 [ 79.543118][ T5912] RBP: 00007f4071123090 R08: 0000000000000000 R09: 0000000000000000 [ 79.543124][ T5912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 79.543130][ T5912] R13: 0000000000000000 R14: 00007f4070535f80 R15: 00007ffd38b25ce8 [ 79.543138][ T5912] [ 79.662389][ T5914] FAULT_INJECTION: forcing a failure. [ 79.662389][ T5914] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 79.662414][ T5914] CPU: 0 UID: 0 PID: 5914 Comm: syz.0.33 Not tainted 6.12.0-rc1-syzkaller-ge32cde8d2bd7 #0 [ 79.662434][ T5914] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 79.662445][ T5914] Call Trace: [ 79.662451][ T5914] [ 79.662458][ T5914] dump_stack_lvl+0x116/0x1f0 [ 79.662486][ T5914] should_fail_ex+0x497/0x5b0 [ 79.662513][ T5914] ? sys_imageblit+0x5bb/0x21d0 [ 79.662538][ T5914] strncpy_from_user+0x3b/0x2a0 [ 79.662562][ T5914] ? rcu_is_watching+0x12/0xc0 [ 79.662584][ T5914] strncpy_from_user_nofault+0x7f/0x180 [ 79.662614][ T5914] bpf_probe_read_compat_str+0xf1/0x170 [ 79.662640][ T5914] bpf_prog_d0e9ac47b081aec3+0x49/0x4b [ 79.662659][ T5914] bpf_trace_run2+0x231/0x590 [ 79.662686][ T5914] ? __pfx_bpf_trace_run2+0x10/0x10 [ 79.662712][ T5914] ? do_raw_spin_unlock+0x172/0x230 [ 79.662733][ T5914] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 79.662753][ T5914] __bpf_trace_timer_start+0xc7/0x100 [ 79.662775][ T5914] ? __pfx___bpf_trace_timer_start+0x10/0x10 [ 79.662798][ T5914] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 79.662819][ T5914] enqueue_timer+0x2b4/0x550 [ 79.662842][ T5914] __mod_timer+0x8d7/0xdc0 [ 79.662868][ T5914] ? __pfx_lock_release+0x10/0x10 [ 79.662884][ T5914] ? __pfx___mod_timer+0x10/0x10 [ 79.662907][ T5914] ? input_handler_for_each_handle+0x3e/0x250 [ 79.662936][ T5914] ? lock_acquire+0x2f/0xb0 [ 79.662952][ T5914] ? __pfx_kd_sound_helper+0x10/0x10 [ 79.662977][ T5914] kd_mksound+0x114/0x130 [ 79.663001][ T5914] ? __pfx_kd_mksound+0x10/0x10 [ 79.663026][ T5914] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 79.663044][ T5914] do_con_write+0x2e6f/0x7bb0 [ 79.663075][ T5914] ? __pfx_do_con_write+0x10/0x10 [ 79.663100][ T5914] ? __pfx___mutex_lock+0x10/0x10 [ 79.663122][ T5914] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 79.663146][ T5914] ? con_write+0x81/0xb0 [ 79.663172][ T5914] con_write+0x23/0xb0 [ 79.663197][ T5914] n_tty_write+0x419/0x1140 [ 79.663220][ T5914] ? __pfx_n_tty_write+0x10/0x10 [ 79.663237][ T5914] ? __virt_addr_valid+0x1a4/0x590 [ 79.663259][ T5914] ? __pfx_woken_wake_function+0x10/0x10 [ 79.663282][ T5914] ? __virt_addr_valid+0x5e/0x590 [ 79.663303][ T5914] ? __phys_addr_symbol+0x30/0x80 [ 79.663324][ T5914] ? __check_object_size+0x488/0x710 [ 79.663345][ T5914] ? __pfx_n_tty_write+0x10/0x10 [ 79.663362][ T5914] file_tty_write.constprop.0+0x506/0x9a0 [ 79.663390][ T5914] vfs_write+0x6b5/0x1140 [ 79.663416][ T5914] ? __pfx_tty_write+0x10/0x10 [ 79.663439][ T5914] ? trace_lock_acquire+0x14a/0x1d0 [ 79.663461][ T5914] ? __pfx_vfs_write+0x10/0x10 [ 79.663487][ T5914] ? __fget_files+0x40/0x3f0 [ 79.663516][ T5914] ksys_write+0x12f/0x260 [ 79.663540][ T5914] ? __pfx_ksys_write+0x10/0x10 [ 79.663565][ T5914] ? rcu_is_watching+0x12/0xc0 [ 79.663586][ T5914] ? rcu_is_watching+0x12/0xc0 [ 79.663612][ T5914] do_syscall_64+0xcd/0x250 [ 79.663635][ T5914] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.663657][ T5914] RIP: 0033:0x7f407037def9 [ 79.663671][ T5914] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 79.663687][ T5914] RSP: 002b:00007f4071123038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 79.663706][ T5914] RAX: ffffffffffffffda RBX: 00007f4070535f80 RCX: 00007f407037def9 [ 79.663718][ T5914] RDX: 0000000000001006 RSI: 0000000020001040 RDI: 0000000000000006 [ 79.663729][ T5914] RBP: 00007f4071123090 R08: 0000000000000000 R09: 0000000000000000 [ 79.663740][ T5914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 79.663751][ T5914] R13: 0000000000000000 R14: 00007f4070535f80 R15: 00007ffd38b25ce8 [ 79.663767][ T5914] [ 79.830610][ T5916] FAULT_INJECTION: forcing a failure. [ 79.830610][ T5916] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 79.830643][ T5916] CPU: 1 UID: 0 PID: 5916 Comm: syz.0.34 Not tainted 6.12.0-rc1-syzkaller-ge32cde8d2bd7 #0 [ 79.830664][ T5916] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 79.830674][ T5916] Call Trace: [ 79.830680][ T5916] [ 79.830686][ T5916] dump_stack_lvl+0x116/0x1f0 [ 79.830714][ T5916] should_fail_ex+0x497/0x5b0 [ 79.830739][ T5916] ? lock_release+0x4f6/0x6f0 [ 79.830756][ T5916] strncpy_from_user+0x3b/0x2a0 [ 79.830778][ T5916] ? rcu_is_watching+0x12/0xc0 [ 79.830799][ T5916] strncpy_from_user_nofault+0x7f/0x180 [ 79.830826][ T5916] bpf_probe_read_compat_str+0xf1/0x170 [ 79.830841][ T5916] bpf_prog_d0e9ac47b081aec3+0x49/0x4b [ 79.830849][ T5916] bpf_trace_run2+0x231/0x590 [ 79.830861][ T5916] ? __pfx_bpf_trace_run2+0x10/0x10 [ 79.830874][ T5916] ? do_raw_spin_unlock+0x172/0x230 [ 79.830885][ T5916] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 79.830897][ T5916] __bpf_trace_timer_start+0xc7/0x100 [ 79.830909][ T5916] ? __pfx___bpf_trace_timer_start+0x10/0x10 [ 79.830921][ T5916] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 79.830932][ T5916] enqueue_timer+0x2b4/0x550 [ 79.830944][ T5916] __mod_timer+0x8d7/0xdc0 [ 79.830958][ T5916] ? __pfx_lock_release+0x10/0x10 [ 79.830967][ T5916] ? __pfx___mod_timer+0x10/0x10 [ 79.830979][ T5916] ? input_handler_for_each_handle+0x3e/0x250 [ 79.830995][ T5916] ? lock_acquire+0x2f/0xb0 [ 79.831003][ T5916] ? __pfx_kd_sound_helper+0x10/0x10 [ 79.831017][ T5916] kd_mksound+0x114/0x130 [ 79.831030][ T5916] ? __pfx_kd_mksound+0x10/0x10 [ 79.831043][ T5916] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 79.831053][ T5916] do_con_write+0x2e6f/0x7bb0 [ 79.831070][ T5916] ? __pfx_do_con_write+0x10/0x10 [ 79.831083][ T5916] ? __pfx___mutex_lock+0x10/0x10 [ 79.831096][ T5916] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 79.831108][ T5916] ? con_write+0x81/0xb0 [ 79.831122][ T5916] con_write+0x23/0xb0 [ 79.831135][ T5916] n_tty_write+0x419/0x1140 [ 79.831180][ T5916] ? __pfx_n_tty_write+0x10/0x10 [ 79.831192][ T5916] ? __virt_addr_valid+0x1a4/0x590 [ 79.831205][ T5916] ? __pfx_woken_wake_function+0x10/0x10 [ 79.831218][ T5916] ? __virt_addr_valid+0x5e/0x590 [ 79.831229][ T5916] ? __phys_addr_symbol+0x30/0x80 [ 79.831240][ T5916] ? __check_object_size+0x488/0x710 [ 79.831251][ T5916] ? __pfx_n_tty_write+0x10/0x10 [ 79.831261][ T5916] file_tty_write.constprop.0+0x506/0x9a0 [ 79.831276][ T5916] vfs_write+0x6b5/0x1140 [ 79.831290][ T5916] ? __pfx_tty_write+0x10/0x10 [ 79.831302][ T5916] ? trace_lock_acquire+0x14a/0x1d0 [ 79.831315][ T5916] ? __pfx_vfs_write+0x10/0x10 [ 79.831328][ T5916] ? __fget_files+0x40/0x3f0 [ 79.831343][ T5916] ksys_write+0x12f/0x260 [ 79.831356][ T5916] ? __pfx_ksys_write+0x10/0x10 [ 79.831370][ T5916] ? rcu_is_watching+0x12/0xc0 [ 79.831380][ T5916] ? rcu_is_watching+0x12/0xc0 [ 79.831392][ T5916] do_syscall_64+0xcd/0x250 [ 79.831408][ T5916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.831420][ T5916] RIP: 0033:0x7f407037def9 [ 79.831429][ T5916] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 79.831438][ T5916] RSP: 002b:00007f4071123038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 79.831448][ T5916] RAX: ffffffffffffffda RBX: 00007f4070535f80 RCX: 00007f407037def9 [ 79.831455][ T5916] RDX: 0000000000001006 RSI: 0000000020001040 RDI: 0000000000000006 [ 79.831461][ T5916] RBP: 00007f4071123090 R08: 0000000000000000 R09: 0000000000000000 [ 79.831466][ T5916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 79.831472][ T5916] R13: 0000000000000000 R14: 00007f4070535f80 R15: 00007ffd38b25ce8 [ 79.831480][ T5916] [ 79.980339][ T5918] FAULT_INJECTION: forcing a failure. [ 79.980339][ T5918] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 79.980357][ T5918] CPU: 0 UID: 0 PID: 5918 Comm: syz.0.35 Not tainted 6.12.0-rc1-syzkaller-ge32cde8d2bd7 #0 [ 79.980370][ T5918] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 79.980376][ T5918] Call Trace: [ 79.980380][ T5918] [ 79.980384][ T5918] dump_stack_lvl+0x116/0x1f0 [ 79.980401][ T5918] should_fail_ex+0x497/0x5b0 [ 79.980418][ T5918] ? lock_release+0x4f6/0x6f0 [ 79.980429][ T5918] strncpy_from_user+0x3b/0x2a0 [ 79.980441][ T5918] ? rcu_is_watching+0x12/0xc0 [ 79.980454][ T5918] strncpy_from_user_nofault+0x7f/0x180 [ 79.980467][ T5918] bpf_probe_read_compat_str+0xf1/0x170 [ 79.980481][ T5918] bpf_prog_d0e9ac47b081aec3+0x49/0x4b [ 79.980489][ T5918] bpf_trace_run2+0x231/0x590 [ 79.980502][ T5918] ? __pfx_bpf_trace_run2+0x10/0x10 [ 79.980515][ T5918] ? do_raw_spin_unlock+0x172/0x230 [ 79.980525][ T5918] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 79.980537][ T5918] __bpf_trace_timer_start+0xc7/0x100 [ 79.980563][ T5918] ? __pfx___bpf_trace_timer_start+0x10/0x10 [ 79.980575][ T5918] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 79.980586][ T5918] enqueue_timer+0x2b4/0x550 [ 79.980598][ T5918] __mod_timer+0x8d7/0xdc0 [ 79.980612][ T5918] ? __pfx_lock_release+0x10/0x10 [ 79.980620][ T5918] ? __pfx___mod_timer+0x10/0x10 [ 79.980633][ T5918] ? input_handler_for_each_handle+0x3e/0x250 [ 79.980648][ T5918] ? lock_acquire+0x2f/0xb0 [ 79.980661][ T5918] ? __pfx_kd_sound_helper+0x10/0x10 [ 79.980674][ T5918] kd_mksound+0x114/0x130 [ 79.980687][ T5918] ? __pfx_kd_mksound+0x10/0x10 [ 79.980701][ T5918] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 79.980711][ T5918] do_con_write+0x2e6f/0x7bb0 [ 79.980727][ T5918] ? __pfx_do_con_write+0x10/0x10 [ 79.980740][ T5918] ? __pfx___mutex_lock+0x10/0x10 [ 79.980753][ T5918] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 79.980765][ T5918] ? con_write+0x81/0xb0 [ 79.980779][ T5918] con_write+0x23/0xb0 [ 79.980793][ T5918] n_tty_write+0x419/0x1140 [ 79.980815][ T5918] ? __pfx_n_tty_write+0x10/0x10 [ 79.980826][ T5918] ? __virt_addr_valid+0x1a4/0x590 [ 79.980838][ T5918] ? __pfx_woken_wake_function+0x10/0x10 [ 79.980851][ T5918] ? __virt_addr_valid+0x5e/0x590 [ 79.980862][ T5918] ? __phys_addr_symbol+0x30/0x80 [ 79.980873][ T5918] ? __check_object_size+0x488/0x710 [ 79.980885][ T5918] ? __pfx_n_tty_write+0x10/0x10 [ 79.980895][ T5918] file_tty_write.constprop.0+0x506/0x9a0 [ 79.980910][ T5918] vfs_write+0x6b5/0x1140 [ 79.980923][ T5918] ? __pfx_tty_write+0x10/0x10 [ 79.980935][ T5918] ? trace_lock_acquire+0x14a/0x1d0 [ 79.980954][ T5918] ? __pfx_vfs_write+0x10/0x10 [ 79.980976][ T5918] ? __fget_files+0x40/0x3f0 [ 79.981002][ T5918] ksys_write+0x12f/0x260 [ 79.981024][ T5918] ? __pfx_ksys_write+0x10/0x10 [ 79.981047][ T5918] ? rcu_is_watching+0x12/0xc0 [ 79.981066][ T5918] ? rcu_is_watching+0x12/0xc0 [ 79.981078][ T5918] do_syscall_64+0xcd/0x250 [ 79.981091][ T5918] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.981103][ T5918] RIP: 0033:0x7f407037def9 [ 79.981112][ T5918] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 79.981121][ T5918] RSP: 002b:00007f4071123038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 79.981133][ T5918] RAX: ffffffffffffffda RBX: 00007f4070535f80 RCX: 00007f407037def9 [ 79.981144][ T5918] RDX: 0000000000001006 RSI: 0000000020001040 RDI: 0000000000000006 [ 79.981154][ T5918] RBP: 00007f4071123090 R08: 0000000000000000 R09: 0000000000000000 [ 79.981164][ T5918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 79.981186][ T5918] R13: 0000000000000000 R14: 00007f4070535f80 R15: 00007ffd38b25ce8 [ 79.981203][ T5918] [ 80.142298][ T5920] FAULT_INJECTION: forcing a failure. [ 80.142298][ T5920] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 80.142314][ T5920] CPU: 0 UID: 0 PID: 5920 Comm: syz.0.36 Not tainted 6.12.0-rc1-syzkaller-ge32cde8d2bd7 #0 [ 80.142326][ T5920] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 80.142332][ T5920] Call Trace: [ 80.142336][ T5920] [ 80.142340][ T5920] dump_stack_lvl+0x116/0x1f0 [ 80.142357][ T5920] should_fail_ex+0x497/0x5b0 [ 80.142373][ T5920] ? sys_imageblit+0x5bb/0x21d0 [ 80.142387][ T5920] strncpy_from_user+0x3b/0x2a0 [ 80.142399][ T5920] ? rcu_is_watching+0x12/0xc0 [ 80.142417][ T5920] strncpy_from_user_nofault+0x7f/0x180 [ 80.142432][ T5920] bpf_probe_read_compat_str+0xf1/0x170 [ 80.142446][ T5920] bpf_prog_d0e9ac47b081aec3+0x49/0x4b [ 80.142454][ T5920] bpf_trace_run2+0x231/0x590 [ 80.142467][ T5920] ? __pfx_bpf_trace_run2+0x10/0x10 [ 80.142479][ T5920] ? do_raw_spin_unlock+0x172/0x230 [ 80.142491][ T5920] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 80.142503][ T5920] __bpf_trace_timer_start+0xc7/0x100 [ 80.142515][ T5920] ? __pfx___bpf_trace_timer_start+0x10/0x10 [ 80.142528][ T5920] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 80.142538][ T5920] enqueue_timer+0x2b4/0x550 [ 80.142550][ T5920] __mod_timer+0x8d7/0xdc0 [ 80.142564][ T5920] ? __pfx_lock_release+0x10/0x10 [ 80.142573][ T5920] ? __pfx___mod_timer+0x10/0x10 [ 80.142585][ T5920] ? input_handler_for_each_handle+0x3e/0x250 [ 80.142601][ T5920] ? lock_acquire+0x2f/0xb0 [ 80.142610][ T5920] ? __pfx_kd_sound_helper+0x10/0x10 [ 80.142624][ T5920] kd_mksound+0x114/0x130 [ 80.142637][ T5920] ? __pfx_kd_mksound+0x10/0x10 [ 80.142650][ T5920] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 80.142660][ T5920] do_con_write+0x2e6f/0x7bb0 [ 80.142679][ T5920] ? __pfx_do_con_write+0x10/0x10 [ 80.142692][ T5920] ? __pfx___mutex_lock+0x10/0x10 [ 80.142705][ T5920] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 80.142717][ T5920] ? con_write+0x81/0xb0 [ 80.142731][ T5920] con_write+0x23/0xb0 [ 80.142744][ T5920] n_tty_write+0x419/0x1140 [ 80.142756][ T5920] ? __pfx_n_tty_write+0x10/0x10 [ 80.142766][ T5920] ? __virt_addr_valid+0x1a4/0x590 [ 80.142778][ T5920] ? __pfx_woken_wake_function+0x10/0x10 [ 80.142792][ T5920] ? __virt_addr_valid+0x5e/0x590 [ 80.142804][ T5920] ? __phys_addr_symbol+0x30/0x80 [ 80.142815][ T5920] ? __check_object_size+0x488/0x710 [ 80.142826][ T5920] ? __pfx_n_tty_write+0x10/0x10 [ 80.142836][ T5920] file_tty_write.constprop.0+0x506/0x9a0 [ 80.142851][ T5920] vfs_write+0x6b5/0x1140 [ 80.142865][ T5920] ? __pfx_tty_write+0x10/0x10 [ 80.142878][ T5920] ? trace_lock_acquire+0x14a/0x1d0 [ 80.142889][ T5920] ? __pfx_vfs_write+0x10/0x10 [ 80.142903][ T5920] ? __fget_files+0x40/0x3f0 [ 80.142918][ T5920] ksys_write+0x12f/0x260 [ 80.142931][ T5920] ? __pfx_ksys_write+0x10/0x10 [ 80.142944][ T5920] ? rcu_is_watching+0x12/0xc0 [ 80.142955][ T5920] ? rcu_is_watching+0x12/0xc0 [ 80.142966][ T5920] do_syscall_64+0xcd/0x250 [ 80.142979][ T5920] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.142991][ T5920] RIP: 0033:0x7f407037def9 [ 80.142999][ T5920] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 80.143008][ T5920] RSP: 002b:00007f4071123038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 80.143018][ T5920] RAX: ffffffffffffffda RBX: 00007f4070535f80 RCX: 00007f407037def9 [ 80.143025][ T5920] RDX: 0000000000001006 RSI: 0000000020001040 RDI: 0000000000000006 [ 80.143030][ T5920] RBP: 00007f4071123090 R08: 0000000000000000 R09: 0000000000000000 [ 80.143037][ T5920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 80.143042][ T5920] R13: 0000000000000000 R14: 00007f4070535f80 R15: 00007ffd38b25ce8 [ 80.143051][ T5920] [ 80.292457][ T5922] FAULT_INJECTION: forcing a failure. [ 80.292457][ T5922] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 80.292481][ T5922] CPU: 0 UID: 0 PID: 5922 Comm: syz.0.37 Not tainted 6.12.0-rc1-syzkaller-ge32cde8d2bd7 #0 [ 80.292504][ T5922] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 80.292515][ T5922] Call Trace: [ 80.292520][ T5922] [ 80.292529][ T5922] dump_stack_lvl+0x116/0x1f0 [ 80.292558][ T5922] should_fail_ex+0x497/0x5b0 [ 80.292584][ T5922] ? sys_imageblit+0x5bb/0x21d0 [ 80.292608][ T5922] strncpy_from_user+0x3b/0x2a0 [ 80.292633][ T5922] ? rcu_is_watching+0x12/0xc0 [ 80.292658][ T5922] strncpy_from_user_nofault+0x7f/0x180 [ 80.292680][ T5922] bpf_probe_read_compat_str+0xf1/0x170 [ 80.292704][ T5922] bpf_prog_d0e9ac47b081aec3+0x49/0x4b [ 80.292718][ T5922] bpf_trace_run2+0x231/0x590 [ 80.292739][ T5922] ? __pfx_bpf_trace_run2+0x10/0x10 [ 80.292761][ T5922] ? do_raw_spin_unlock+0x172/0x230 [ 80.292781][ T5922] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 80.292801][ T5922] __bpf_trace_timer_start+0xc7/0x100 [ 80.292822][ T5922] ? __pfx___bpf_trace_timer_start+0x10/0x10 [ 80.292844][ T5922] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 80.292863][ T5922] enqueue_timer+0x2b4/0x550 [ 80.292883][ T5922] __mod_timer+0x8d7/0xdc0 [ 80.292905][ T5922] ? __pfx_lock_release+0x10/0x10 [ 80.292919][ T5922] ? __pfx___mod_timer+0x10/0x10 [ 80.292939][ T5922] ? input_handler_for_each_handle+0x3e/0x250 [ 80.292964][ T5922] ? lock_acquire+0x2f/0xb0 [ 80.292979][ T5922] ? __pfx_kd_sound_helper+0x10/0x10 [ 80.293000][ T5922] kd_mksound+0x114/0x130 [ 80.293021][ T5922] ? __pfx_kd_mksound+0x10/0x10 [ 80.293042][ T5922] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 80.293058][ T5922] do_con_write+0x2e6f/0x7bb0 [ 80.293088][ T5922] ? __pfx_do_con_write+0x10/0x10 [ 80.293111][ T5922] ? __pfx___mutex_lock+0x10/0x10 [ 80.293132][ T5922] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 80.293155][ T5922] ? con_write+0x81/0xb0 [ 80.293181][ T5922] con_write+0x23/0xb0 [ 80.293205][ T5922] n_tty_write+0x419/0x1140 [ 80.293228][ T5922] ? __pfx_n_tty_write+0x10/0x10 [ 80.293245][ T5922] ? __virt_addr_valid+0x1a4/0x590 [ 80.293269][ T5922] ? __pfx_woken_wake_function+0x10/0x10 [ 80.293293][ T5922] ? __virt_addr_valid+0x5e/0x590 [ 80.293314][ T5922] ? __phys_addr_symbol+0x30/0x80 [ 80.293334][ T5922] ? __check_object_size+0x488/0x710 [ 80.293359][ T5922] ? __pfx_n_tty_write+0x10/0x10 [ 80.293378][ T5922] file_tty_write.constprop.0+0x506/0x9a0 [ 80.293406][ T5922] vfs_write+0x6b5/0x1140 [ 80.293432][ T5922] ? __pfx_tty_write+0x10/0x10 [ 80.293455][ T5922] ? trace_lock_acquire+0x14a/0x1d0 [ 80.293478][ T5922] ? __pfx_vfs_write+0x10/0x10 [ 80.293503][ T5922] ? __fget_files+0x40/0x3f0 [ 80.293561][ T5922] ksys_write+0x12f/0x260 [ 80.293586][ T5922] ? __pfx_ksys_write+0x10/0x10 [ 80.293610][ T5922] ? rcu_is_watching+0x12/0xc0 [ 80.293632][ T5922] ? rcu_is_watching+0x12/0xc0 [ 80.293655][ T5922] do_syscall_64+0xcd/0x250 [ 80.293679][ T5922] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.293701][ T5922] RIP: 0033:0x7f407037def9 [ 80.293715][ T5922] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 80.293733][ T5922] RSP: 002b:00007f4071123038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 80.293752][ T5922] RAX: ffffffffffffffda RBX: 00007f4070535f80 RCX: 00007f407037def9 [ 80.293764][ T5922] RDX: 0000000000001006 RSI: 0000000020001040 RDI: 0000000000000006 [ 80.293776][ T5922] RBP: 00007f4071123090 R08: 0000000000000000 R09: 0000000000000000 [ 80.293787][ T5922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 80.293798][ T5922] R13: 0000000000000000 R14: 00007f4070535f80 R15: 00007ffd38b25ce8 [ 80.293815][ T5922] [ 80.452803][ T5924] FAULT_INJECTION: forcing a failure. [ 80.452803][ T5924] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 80.452821][ T5924] CPU: 0 UID: 0 PID: 5924 Comm: syz.0.38 Not tainted 6.12.0-rc1-syzkaller-ge32cde8d2bd7 #0 [ 80.452833][ T5924] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 80.452840][ T5924] Call Trace: [ 80.452844][ T5924] [ 80.452848][ T5924] dump_stack_lvl+0x116/0x1f0 [ 80.452865][ T5924] should_fail_ex+0x497/0x5b0 [ 80.452881][ T5924] ? sys_imageblit+0x5bb/0x21d0 [ 80.452895][ T5924] strncpy_from_user+0x3b/0x2a0 [ 80.452908][ T5924] ? rcu_is_watching+0x12/0xc0 [ 80.452921][ T5924] strncpy_from_user_nofault+0x7f/0x180 [ 80.452935][ T5924] bpf_probe_read_compat_str+0xf1/0x170 [ 80.452949][ T5924] bpf_prog_d0e9ac47b081aec3+0x49/0x4b [ 80.452957][ T5924] bpf_trace_run2+0x231/0x590 [ 80.452971][ T5924] ? __pfx_bpf_trace_run2+0x10/0x10 [ 80.452988][ T5924] ? do_raw_spin_unlock+0x172/0x230 [ 80.453006][ T5924] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 80.453026][ T5924] __bpf_trace_timer_start+0xc7/0x100 [ 80.453047][ T5924] ? __pfx___bpf_trace_timer_start+0x10/0x10 [ 80.453068][ T5924] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 80.453087][ T5924] enqueue_timer+0x2b4/0x550 [ 80.453109][ T5924] __mod_timer+0x8d7/0xdc0 [ 80.453130][ T5924] ? __pfx_lock_release+0x10/0x10 [ 80.453139][ T5924] ? __pfx___mod_timer+0x10/0x10 [ 80.453152][ T5924] ? input_handler_for_each_handle+0x3e/0x250 [ 80.453168][ T5924] ? lock_acquire+0x2f/0xb0 [ 80.453177][ T5924] ? __pfx_kd_sound_helper+0x10/0x10 [ 80.453190][ T5924] kd_mksound+0x114/0x130 [ 80.453204][ T5924] ? __pfx_kd_mksound+0x10/0x10 [ 80.453217][ T5924] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 80.453228][ T5924] do_con_write+0x2e6f/0x7bb0 [ 80.453244][ T5924] ? __pfx_do_con_write+0x10/0x10 [ 80.453258][ T5924] ? __pfx___mutex_lock+0x10/0x10 [ 80.453270][ T5924] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 80.453283][ T5924] ? con_write+0x81/0xb0 [ 80.453297][ T5924] con_write+0x23/0xb0 [ 80.453310][ T5924] n_tty_write+0x419/0x1140 [ 80.453322][ T5924] ? __pfx_n_tty_write+0x10/0x10 [ 80.453332][ T5924] ? __virt_addr_valid+0x1a4/0x590 [ 80.453344][ T5924] ? __pfx_woken_wake_function+0x10/0x10 [ 80.453357][ T5924] ? __virt_addr_valid+0x5e/0x590 [ 80.453368][ T5924] ? __phys_addr_symbol+0x30/0x80 [ 80.453379][ T5924] ? __check_object_size+0x488/0x710 [ 80.453392][ T5924] ? __pfx_n_tty_write+0x10/0x10 [ 80.453402][ T5924] file_tty_write.constprop.0+0x506/0x9a0 [ 80.453417][ T5924] vfs_write+0x6b5/0x1140 [ 80.453431][ T5924] ? __pfx_tty_write+0x10/0x10 [ 80.453443][ T5924] ? trace_lock_acquire+0x14a/0x1d0 [ 80.453455][ T5924] ? __pfx_vfs_write+0x10/0x10 [ 80.453469][ T5924] ? __fget_files+0x40/0x3f0 [ 80.453484][ T5924] ksys_write+0x12f/0x260 [ 80.453497][ T5924] ? __pfx_ksys_write+0x10/0x10 [ 80.453538][ T5924] ? rcu_is_watching+0x12/0xc0 [ 80.453550][ T5924] ? rcu_is_watching+0x12/0xc0 [ 80.453561][ T5924] do_syscall_64+0xcd/0x250 [ 80.453574][ T5924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.453586][ T5924] RIP: 0033:0x7f407037def9 [ 80.453595][ T5924] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 80.453604][ T5924] RSP: 002b:00007f4071123038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 80.453615][ T5924] RAX: ffffffffffffffda RBX: 00007f4070535f80 RCX: 00007f407037def9 [ 80.453621][ T5924] RDX: 0000000000001006 RSI: 0000000020001040 RDI: 0000000000000006 [ 80.453627][ T5924] RBP: 00007f4071123090 R08: 0000000000000000 R09: 0000000000000000 [ 80.453633][ T5924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 80.453643][ T5924] R13: 0000000000000000 R14: 00007f4070535f80 R15: 00007ffd38b25ce8 [ 80.453651][ T5924] [ 80.582082][ T5926] FAULT_INJECTION: forcing a failure. [ 80.582082][ T5926] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 80.582098][ T5926] CPU: 2 UID: 0 PID: 5926 Comm: syz.0.39 Not tainted 6.12.0-rc1-syzkaller-ge32cde8d2bd7 #0 [ 80.582110][ T5926] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 80.582116][ T5926] Call Trace: [ 80.582119][ T5926] [ 80.582124][ T5926] dump_stack_lvl+0x116/0x1f0 [ 80.582141][ T5926] should_fail_ex+0x497/0x5b0 [ 80.582156][ T5926] ? sys_imageblit+0x5bb/0x21d0 [ 80.582170][ T5926] strncpy_from_user+0x3b/0x2a0 [ 80.582183][ T5926] ? rcu_is_watching+0x12/0xc0 [ 80.582196][ T5926] strncpy_from_user_nofault+0x7f/0x180 [ 80.582210][ T5926] bpf_probe_read_compat_str+0xf1/0x170 [ 80.582224][ T5926] bpf_prog_d0e9ac47b081aec3+0x49/0x4b [ 80.582231][ T5926] bpf_trace_run2+0x231/0x590 [ 80.582244][ T5926] ? __pfx_bpf_trace_run2+0x10/0x10 [ 80.582257][ T5926] ? do_raw_spin_unlock+0x172/0x230 [ 80.582269][ T5926] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 80.582282][ T5926] __bpf_trace_timer_start+0xc7/0x100 [ 80.582294][ T5926] ? __pfx___bpf_trace_timer_start+0x10/0x10 [ 80.582306][ T5926] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 80.582317][ T5926] enqueue_timer+0x2b4/0x550 [ 80.582329][ T5926] __mod_timer+0x8d7/0xdc0 [ 80.582342][ T5926] ? __pfx_lock_release+0x10/0x10 [ 80.582351][ T5926] ? __pfx___mod_timer+0x10/0x10 [ 80.582364][ T5926] ? input_handler_for_each_handle+0x3e/0x250 [ 80.582380][ T5926] ? lock_acquire+0x2f/0xb0 [ 80.582389][ T5926] ? __pfx_kd_sound_helper+0x10/0x10 [ 80.582410][ T5926] kd_mksound+0x114/0x130 [ 80.582423][ T5926] ? __pfx_kd_mksound+0x10/0x10 [ 80.582437][ T5926] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 80.582447][ T5926] do_con_write+0x2e6f/0x7bb0 [ 80.582474][ T5926] ? __pfx_do_con_write+0x10/0x10 [ 80.582495][ T5926] ? __pfx___mutex_lock+0x10/0x10 [ 80.582513][ T5926] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 80.582538][ T5926] ? con_write+0x81/0xb0 [ 80.582562][ T5926] con_write+0x23/0xb0 [ 80.582586][ T5926] n_tty_write+0x419/0x1140 [ 80.582607][ T5926] ? __pfx_n_tty_write+0x10/0x10 [ 80.582624][ T5926] ? __virt_addr_valid+0x1a4/0x590 [ 80.582644][ T5926] ? __pfx_woken_wake_function+0x10/0x10 [ 80.582665][ T5926] ? __virt_addr_valid+0x5e/0x590 [ 80.582684][ T5926] ? __phys_addr_symbol+0x30/0x80 [ 80.582703][ T5926] ? __check_object_size+0x488/0x710 [ 80.582722][ T5926] ? __pfx_n_tty_write+0x10/0x10 [ 80.582739][ T5926] file_tty_write.constprop.0+0x506/0x9a0 [ 80.582765][ T5926] vfs_write+0x6b5/0x1140 [ 80.582789][ T5926] ? __pfx_tty_write+0x10/0x10 [ 80.582812][ T5926] ? trace_lock_acquire+0x14a/0x1d0 [ 80.582834][ T5926] ? __pfx_vfs_write+0x10/0x10 [ 80.582858][ T5926] ? __fget_files+0x40/0x3f0 [ 80.582884][ T5926] ksys_write+0x12f/0x260 [ 80.582906][ T5926] ? __pfx_ksys_write+0x10/0x10 [ 80.582928][ T5926] ? rcu_is_watching+0x12/0xc0 [ 80.582949][ T5926] ? rcu_is_watching+0x12/0xc0 [ 80.582970][ T5926] do_syscall_64+0xcd/0x250 [ 80.582991][ T5926] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.583012][ T5926] RIP: 0033:0x7f407037def9 [ 80.583026][ T5926] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 80.583041][ T5926] RSP: 002b:00007f4071123038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 80.583059][ T5926] RAX: ffffffffffffffda RBX: 00007f4070535f80 RCX: 00007f407037def9 [ 80.583070][ T5926] RDX: 0000000000001006 RSI: 0000000020001040 RDI: 0000000000000006 [ 80.583081][ T5926] RBP: 00007f4071123090 R08: 0000000000000000 R09: 0000000000000000 [ 80.583090][ T5926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 80.583099][ T5926] R13: 0000000000000000 R14: 00007f4070535f80 R15: 00007ffd38b25ce8 [ 80.583112][ T5926] [ 80.733473][ T5928] FAULT_INJECTION: forcing a failure. [ 80.733473][ T5928] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 80.733499][ T5928] CPU: 0 UID: 0 PID: 5928 Comm: syz.0.40 Not tainted 6.12.0-rc1-syzkaller-ge32cde8d2bd7 #0 [ 80.733537][ T5928] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 80.733548][ T5928] Call Trace: [ 80.733554][ T5928] [ 80.733560][ T5928] dump_stack_lvl+0x116/0x1f0 [ 80.733587][ T5928] should_fail_ex+0x497/0x5b0 [ 80.733611][ T5928] ? sys_imageblit+0x5bb/0x21d0 [ 80.733634][ T5928] strncpy_from_user+0x3b/0x2a0 [ 80.733660][ T5928] ? rcu_is_watching+0x12/0xc0 [ 80.733681][ T5928] strncpy_from_user_nofault+0x7f/0x180 [ 80.733703][ T5928] bpf_probe_read_compat_str+0xf1/0x170 [ 80.733726][ T5928] bpf_prog_d0e9ac47b081aec3+0x49/0x4b [ 80.733739][ T5928] bpf_trace_run2+0x231/0x590 [ 80.733760][ T5928] ? __pfx_bpf_trace_run2+0x10/0x10 [ 80.733782][ T5928] ? do_raw_spin_unlock+0x172/0x230 [ 80.733801][ T5928] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 80.733821][ T5928] __bpf_trace_timer_start+0xc7/0x100 [ 80.733841][ T5928] ? __pfx___bpf_trace_timer_start+0x10/0x10 [ 80.733862][ T5928] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 80.733893][ T5928] enqueue_timer+0x2b4/0x550 [ 80.733913][ T5928] __mod_timer+0x8d7/0xdc0 [ 80.733936][ T5928] ? __pfx_lock_release+0x10/0x10 [ 80.733951][ T5928] ? __pfx___mod_timer+0x10/0x10 [ 80.733972][ T5928] ? input_handler_for_each_handle+0x3e/0x250 [ 80.733997][ T5928] ? lock_acquire+0x2f/0xb0 [ 80.734012][ T5928] ? __pfx_kd_sound_helper+0x10/0x10 [ 80.734034][ T5928] kd_mksound+0x114/0x130 [ 80.734056][ T5928] ? __pfx_kd_mksound+0x10/0x10 [ 80.734078][ T5928] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 80.734094][ T5928] do_con_write+0x2e6f/0x7bb0 [ 80.734122][ T5928] ? __pfx_do_con_write+0x10/0x10 [ 80.734144][ T5928] ? __pfx___mutex_lock+0x10/0x10 [ 80.734164][ T5928] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 80.734185][ T5928] ? con_write+0x81/0xb0 [ 80.734209][ T5928] con_write+0x23/0xb0 [ 80.734231][ T5928] n_tty_write+0x419/0x1140 [ 80.734252][ T5928] ? __pfx_n_tty_write+0x10/0x10 [ 80.734267][ T5928] ? __virt_addr_valid+0x1a4/0x590 [ 80.734288][ T5928] ? __pfx_woken_wake_function+0x10/0x10 [ 80.734308][ T5928] ? __virt_addr_valid+0x5e/0x590 [ 80.734327][ T5928] ? __phys_addr_symbol+0x30/0x80 [ 80.734345][ T5928] ? __check_object_size+0x488/0x710 [ 80.734363][ T5928] ? __pfx_n_tty_write+0x10/0x10 [ 80.734380][ T5928] file_tty_write.constprop.0+0x506/0x9a0 [ 80.734405][ T5928] vfs_write+0x6b5/0x1140 [ 80.734427][ T5928] ? __pfx_tty_write+0x10/0x10 [ 80.734448][ T5928] ? trace_lock_acquire+0x14a/0x1d0 [ 80.734468][ T5928] ? __pfx_vfs_write+0x10/0x10 [ 80.734491][ T5928] ? __fget_files+0x40/0x3f0 [ 80.734517][ T5928] ksys_write+0x12f/0x260 [ 80.734538][ T5928] ? __pfx_ksys_write+0x10/0x10 [ 80.734560][ T5928] ? rcu_is_watching+0x12/0xc0 [ 80.734579][ T5928] ? rcu_is_watching+0x12/0xc0 [ 80.734598][ T5928] do_syscall_64+0xcd/0x250 [ 80.734619][ T5928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.734639][ T5928] RIP: 0033:0x7f407037def9 [ 80.734656][ T5928] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 80.734672][ T5928] RSP: 002b:00007f4071123038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 80.734690][ T5928] RAX: ffffffffffffffda RBX: 00007f4070535f80 RCX: 00007f407037def9 [ 80.734701][ T5928] RDX: 0000000000001006 RSI: 0000000020001040 RDI: 0000000000000006 [ 80.734711][ T5928] RBP: 00007f4071123090 R08: 0000000000000000 R09: 0000000000000000 [ 80.734722][ T5928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 80.734732][ T5928] R13: 0000000000000000 R14: 00007f4070535f80 R15: 00007ffd38b25ce8 [ 80.734747][ T5928] [ 80.861831][ T5930] FAULT_INJECTION: forcing a failure. [ 80.861831][ T5930] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 80.861847][ T5930] CPU: 0 UID: 0 PID: 5930 Comm: syz.0.41 Not tainted 6.12.0-rc1-syzkaller-ge32cde8d2bd7 #0 [ 80.861859][ T5930] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 80.861866][ T5930] Call Trace: [ 80.861869][ T5930] [ 80.861873][ T5930] dump_stack_lvl+0x116/0x1f0 [ 80.861891][ T5930] should_fail_ex+0x497/0x5b0 [ 80.861909][ T5930] ? sys_imageblit+0x5bb/0x21d0 [ 80.861926][ T5930] strncpy_from_user+0x3b/0x2a0 [ 80.861939][ T5930] ? rcu_is_watching+0x12/0xc0 [ 80.861952][ T5930] strncpy_from_user_nofault+0x7f/0x180 [ 80.861966][ T5930] bpf_probe_read_compat_str+0xf1/0x170 [ 80.861980][ T5930] bpf_prog_d0e9ac47b081aec3+0x49/0x4b [ 80.861989][ T5930] bpf_trace_run2+0x231/0x590 [ 80.862002][ T5930] ? __pfx_bpf_trace_run2+0x10/0x10 [ 80.862015][ T5930] ? do_raw_spin_unlock+0x172/0x230 [ 80.862027][ T5930] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 80.862039][ T5930] __bpf_trace_timer_start+0xc7/0x100 [ 80.862051][ T5930] ? __pfx___bpf_trace_timer_start+0x10/0x10 [ 80.862063][ T5930] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 80.862074][ T5930] enqueue_timer+0x2b4/0x550 [ 80.862086][ T5930] __mod_timer+0x8d7/0xdc0 [ 80.862100][ T5930] ? __pfx_lock_release+0x10/0x10 [ 80.862109][ T5930] ? __pfx___mod_timer+0x10/0x10 [ 80.862122][ T5930] ? input_handler_for_each_handle+0x3e/0x250 [ 80.862137][ T5930] ? lock_acquire+0x2f/0xb0 [ 80.862146][ T5930] ? __pfx_kd_sound_helper+0x10/0x10 [ 80.862160][ T5930] kd_mksound+0x114/0x130 [ 80.862173][ T5930] ? __pfx_kd_mksound+0x10/0x10 [ 80.862187][ T5930] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 80.862197][ T5930] do_con_write+0x2e6f/0x7bb0 [ 80.862213][ T5930] ? __pfx_do_con_write+0x10/0x10 [ 80.862227][ T5930] ? __pfx___mutex_lock+0x10/0x10 [ 80.862239][ T5930] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 80.862251][ T5930] ? con_write+0x81/0xb0 [ 80.862265][ T5930] con_write+0x23/0xb0 [ 80.862278][ T5930] n_tty_write+0x419/0x1140 [ 80.862290][ T5930] ? __pfx_n_tty_write+0x10/0x10 [ 80.862300][ T5930] ? __virt_addr_valid+0x1a4/0x590 [ 80.862312][ T5930] ? __pfx_woken_wake_function+0x10/0x10 [ 80.862326][ T5930] ? __virt_addr_valid+0x5e/0x590 [ 80.862337][ T5930] ? __phys_addr_symbol+0x30/0x80 [ 80.862348][ T5930] ? __check_object_size+0x488/0x710 [ 80.862359][ T5930] ? __pfx_n_tty_write+0x10/0x10 [ 80.862369][ T5930] file_tty_write.constprop.0+0x506/0x9a0 [ 80.862387][ T5930] vfs_write+0x6b5/0x1140 [ 80.862400][ T5930] ? __pfx_tty_write+0x10/0x10 [ 80.862413][ T5930] ? trace_lock_acquire+0x14a/0x1d0 [ 80.862425][ T5930] ? __pfx_vfs_write+0x10/0x10 [ 80.862438][ T5930] ? __fget_files+0x40/0x3f0 [ 80.862453][ T5930] ksys_write+0x12f/0x260 [ 80.862467][ T5930] ? __pfx_ksys_write+0x10/0x10 [ 80.862480][ T5930] ? rcu_is_watching+0x12/0xc0 [ 80.862491][ T5930] ? rcu_is_watching+0x12/0xc0 [ 80.862502][ T5930] do_syscall_64+0xcd/0x250 [ 80.862514][ T5930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.862526][ T5930] RIP: 0033:0x7f407037def9 [ 80.862534][ T5930] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 80.862544][ T5930] RSP: 002b:00007f4071123038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 80.862555][ T5930] RAX: ffffffffffffffda RBX: 00007f4070535f80 RCX: 00007f407037def9 [ 80.862562][ T5930] RDX: 0000000000001006 RSI: 0000000020001040 RDI: 0000000000000006 [ 80.862568][ T5930] RBP: 00007f4071123090 R08: 0000000000000000 R09: 0000000000000000 [ 80.862574][ T5930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 80.862580][ T5930] R13: 0000000000000000 R14: 00007f4070535f80 R15: 00007ffd38b25ce8 [ 80.862589][ T5930] [ 80.982804][ T5932] FAULT_INJECTION: forcing a failure. [ 80.982804][ T5932] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 80.982820][ T5932] CPU: 2 UID: 0 PID: 5932 Comm: syz.0.42 Not tainted 6.12.0-rc1-syzkaller-ge32cde8d2bd7 #0 [ 80.982832][ T5932] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 80.982838][ T5932] Call Trace: [ 80.982842][ T5932] [ 80.982846][ T5932] dump_stack_lvl+0x116/0x1f0 [ 80.982863][ T5932] should_fail_ex+0x497/0x5b0 [ 80.982878][ T5932] ? sys_imageblit+0x5bb/0x21d0 [ 80.982892][ T5932] strncpy_from_user+0x3b/0x2a0 [ 80.982905][ T5932] ? rcu_is_watching+0x12/0xc0 [ 80.982918][ T5932] strncpy_from_user_nofault+0x7f/0x180 [ 80.982931][ T5932] bpf_probe_read_compat_str+0xf1/0x170 [ 80.982945][ T5932] bpf_prog_d0e9ac47b081aec3+0x49/0x4b [ 80.982954][ T5932] bpf_trace_run2+0x231/0x590 [ 80.982966][ T5932] ? __pfx_bpf_trace_run2+0x10/0x10 [ 80.982980][ T5932] ? do_raw_spin_unlock+0x172/0x230 [ 80.982991][ T5932] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 80.983004][ T5932] __bpf_trace_timer_start+0xc7/0x100 [ 80.983016][ T5932] ? __pfx___bpf_trace_timer_start+0x10/0x10 [ 80.983029][ T5932] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 80.983040][ T5932] enqueue_timer+0x2b4/0x550 [ 80.983052][ T5932] __mod_timer+0x8d7/0xdc0 [ 80.983066][ T5932] ? __pfx_lock_release+0x10/0x10 [ 80.983074][ T5932] ? __pfx___mod_timer+0x10/0x10 [ 80.983087][ T5932] ? input_handler_for_each_handle+0x3e/0x250 [ 80.983102][ T5932] ? lock_acquire+0x2f/0xb0 [ 80.983111][ T5932] ? __pfx_kd_sound_helper+0x10/0x10 [ 80.983125][ T5932] kd_mksound+0x114/0x130 [ 80.983138][ T5932] ? __pfx_kd_mksound+0x10/0x10 [ 80.983151][ T5932] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 80.983164][ T5932] do_con_write+0x2e6f/0x7bb0 [ 80.983191][ T5932] ? __pfx_do_con_write+0x10/0x10 [ 80.983215][ T5932] ? __pfx___mutex_lock+0x10/0x10 [ 80.983235][ T5932] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 80.983257][ T5932] ? con_write+0x81/0xb0 [ 80.983281][ T5932] con_write+0x23/0xb0 [ 80.983302][ T5932] n_tty_write+0x419/0x1140 [ 80.983314][ T5932] ? __pfx_n_tty_write+0x10/0x10 [ 80.983324][ T5932] ? __virt_addr_valid+0x1a4/0x590 [ 80.983336][ T5932] ? __pfx_woken_wake_function+0x10/0x10 [ 80.983349][ T5932] ? __virt_addr_valid+0x5e/0x590 [ 80.983360][ T5932] ? __phys_addr_symbol+0x30/0x80 [ 80.983371][ T5932] ? __check_object_size+0x488/0x710 [ 80.983383][ T5932] ? __pfx_n_tty_write+0x10/0x10 [ 80.983393][ T5932] file_tty_write.constprop.0+0x506/0x9a0 [ 80.983408][ T5932] vfs_write+0x6b5/0x1140 [ 80.983427][ T5932] ? __pfx_tty_write+0x10/0x10 [ 80.983440][ T5932] ? trace_lock_acquire+0x14a/0x1d0 [ 80.983452][ T5932] ? __pfx_vfs_write+0x10/0x10 [ 80.983466][ T5932] ? __fget_files+0x40/0x3f0 [ 80.983481][ T5932] ksys_write+0x12f/0x260 [ 80.983500][ T5932] ? __pfx_ksys_write+0x10/0x10 [ 80.983520][ T5932] ? rcu_is_watching+0x12/0xc0 [ 80.983537][ T5932] ? rcu_is_watching+0x12/0xc0 [ 80.983556][ T5932] do_syscall_64+0xcd/0x250 [ 80.983574][ T5932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.983586][ T5932] RIP: 0033:0x7f407037def9 [ 80.983594][ T5932] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 80.983604][ T5932] RSP: 002b:00007f4071123038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 80.983615][ T5932] RAX: ffffffffffffffda RBX: 00007f4070535f80 RCX: 00007f407037def9 [ 80.983622][ T5932] RDX: 0000000000001006 RSI: 0000000020001040 RDI: 0000000000000006 [ 80.983628][ T5932] RBP: 00007f4071123090 R08: 0000000000000000 R09: 0000000000000000 [ 80.983634][ T5932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 80.983640][ T5932] R13: 0000000000000000 R14: 00007f4070535f80 R15: 00007ffd38b25ce8 [ 80.983648][ T5932] [ 81.134154][ T5934] FAULT_INJECTION: forcing a failure. [ 81.134154][ T5934] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 81.134172][ T5934] CPU: 0 UID: 0 PID: 5934 Comm: syz.0.43 Not tainted 6.12.0-rc1-syzkaller-ge32cde8d2bd7 #0 [ 81.134184][ T5934] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 81.134190][ T5934] Call Trace: [ 81.134193][ T5934] [ 81.134197][ T5934] dump_stack_lvl+0x116/0x1f0 [ 81.134215][ T5934] should_fail_ex+0x497/0x5b0 [ 81.134230][ T5934] ? sys_imageblit+0x5bb/0x21d0 [ 81.134244][ T5934] strncpy_from_user+0x3b/0x2a0 [ 81.134257][ T5934] ? rcu_is_watching+0x12/0xc0 [ 81.134270][ T5934] strncpy_from_user_nofault+0x7f/0x180 [ 81.134284][ T5934] bpf_probe_read_compat_str+0xf1/0x170 [ 81.134298][ T5934] bpf_prog_d0e9ac47b081aec3+0x49/0x4b [ 81.134306][ T5934] bpf_trace_run2+0x231/0x590 [ 81.134319][ T5934] ? __pfx_bpf_trace_run2+0x10/0x10 [ 81.134332][ T5934] ? do_raw_spin_unlock+0x172/0x230 [ 81.134368][ T5934] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 81.134381][ T5934] __bpf_trace_timer_start+0xc7/0x100 [ 81.134394][ T5934] ? __pfx___bpf_trace_timer_start+0x10/0x10 [ 81.134406][ T5934] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 81.134417][ T5934] enqueue_timer+0x2b4/0x550 [ 81.134429][ T5934] __mod_timer+0x8d7/0xdc0 [ 81.134443][ T5934] ? __pfx_lock_release+0x10/0x10 [ 81.134452][ T5934] ? __pfx___mod_timer+0x10/0x10 [ 81.134465][ T5934] ? input_handler_for_each_handle+0x3e/0x250 [ 81.134481][ T5934] ? lock_acquire+0x2f/0xb0 [ 81.134490][ T5934] ? __pfx_kd_sound_helper+0x10/0x10 [ 81.134504][ T5934] kd_mksound+0x114/0x130 [ 81.134517][ T5934] ? __pfx_kd_mksound+0x10/0x10 [ 81.134531][ T5934] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 81.134541][ T5934] do_con_write+0x2e6f/0x7bb0 [ 81.134558][ T5934] ? __pfx_do_con_write+0x10/0x10 [ 81.134571][ T5934] ? __pfx___mutex_lock+0x10/0x10 [ 81.134583][ T5934] ? __pfx___mutex_unlock_sl VM DIAGNOSIS: 11:35:49 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000072 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff850a6d05 RDI=ffffffff9aae1b80 RBP=ffffffff9aae1b40 RSP=ffffc90003d77658 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=722d302e32312e36 R12=0000000000000000 R13=0000000000000072 R14=ffffffff850a6ca0 R15=0000000000000000 RIP=ffffffff850a6d2f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f40711236c0 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000000000005 CR3=000000002e170000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fffffffe Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4071123060 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f40703f199a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f40703f19a7 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f40703f19a1 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f40703f19b5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f40703f1a3b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f40703f1b19 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7000642520732520 6425206425000a67 6e69747465736572 203a732520656c62 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5500410005560005 4100054100000a42 4b4c515140564057 051f560005404947 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=00000000000411dc RBX=0000000000000001 RCX=ffffffff8b21cdd9 RDX=ffffed100d4e7026 RSI=ffffffff8bd19cc0 RDI=ffffffff81647efc RBP=ffffed1003b58910 RSP=ffffc90000187e08 R8 =0000000000000000 R9 =ffffed100d4e7025 R10=ffff88806a73812b R11=0000000000000000 R12=0000000000000001 R13=ffff88801dac4880 R14=ffffffff905f2b88 R15=0000000000000000 RIP=ffffffff8b21e1bf RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000000000005 CR3=000000002ad7a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=000000000c000001 Opmask01=0000000000000000 Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=00000000feffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffeeffd04a0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6c5f5f0045544156 4952505f4342494c ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000042494c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6362696c5f5f0045 5441564952505f43 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5b3e343c00003035 3278302f64637830 2b34365f6c6c6163 7379735f6f642000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5134343600003035 3272302564637230 2134365566666163 7373735565642000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 202020383e203100 2034202030202033 2020312020332020 6620206620203020 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202033202000 2020202020202020 2020202020202020 2020202020202020 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2a32692a33322a6e 3e2a38692a33322a 6e3e2a6b692a3332 2a323e2a3c6e2a33 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6c6c2a326b2a3b69 2a3d692a323e2a39 692a3b3a2a393d2a 6c6c2a6c6c2a3a6c ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=00000000000454cc RBX=0000000000000002 RCX=ffffffff8b21cdd9 RDX=ffffed100d507026 RSI=ffffffff8bd19cc0 RDI=ffffffff81647efc RBP=ffffed1003b5b000 RSP=ffffc90000197e08 R8 =0000000000000000 R9 =ffffed100d507025 R10=ffff88806a83812b R11=0000000000000000 R12=0000000000000002 R13=ffff88801dad8000 R14=ffffffff905f2b88 R15=0000000000000000 RIP=ffffffff8b21e1bf RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000000000005 CR3=00000000299b4000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000020000 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd38b26080 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f40703f199a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f40703f19a7 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f40703f19a1 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f40703f19b5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f40703f1a3b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f40703f1b19 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000003a71c RBX=0000000000000003 RCX=ffffffff8b21cdd9 RDX=ffffed100d527026 RSI=ffffffff8bd19cc0 RDI=ffffffff81647efc RBP=ffffed1003b5b488 RSP=ffffc900001a7e08 R8 =0000000000000000 R9 =ffffed100d527025 R10=ffff88806a93812b R11=0000000000000000 R12=0000000000000003 R13=ffff88801dada440 R14=ffffffff905f2b88 R15=0000000000000000 RIP=ffffffff8b21e1bf RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000000000005 CR3=00000000285dc000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000001000 Opmask01=00000000ffffffff Opmask02=00000000fff80800 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffce4e8d640 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6c5f5f0045544156 4952505f4342494c ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000042494c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6362696c5f5f0045 5441564952505f43 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f6e3a6d5e007325 2e73250064252e73 2500656c6f736e6f 632f7665642f000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f4b1f485e005600 0b56000041000b56 000040494a564b4a 460a5340410a000a ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 T5946] ? __pfx_woken_wake_function+0x10/0x10 [ 82.041556][ T5946] ? __virt_addr_valid+0x5e/0x590 [ 82.041568][ T5946] ? __phys_addr_symbol+0x30/0x80 [ 82.041579][ T5946] ? __check_object_size+0x488/0x710 [ 82.041591][ T5946] ? __pfx_n_tty_write+0x10/0x10 [ 82.041609][ T5946] file_tty_write.constprop.0+0x506/0x9a0 [ 82.041635][ T5946] vfs_write+0x6b5/0x1140 [ 82.041658][ T5946] ? __pfx_tty_write+0x10/0x10 [ 82.041675][ T5946] ? trace_lock_acquire+0x14a/0x1d0 [ 82.041688][ T5946] ? __pfx_vfs_write+0x10/0x10 [ 82.041702][ T5946] ? __fget_files+0x40/0x3f0 [ 82.041717][ T5946] ksys_write+0x12f/0x260 [ 82.041731][ T5946] ? __pfx_ksys_write+0x10/0x10 [ 82.041744][ T5946] ? rcu_is_watching+0x12/0xc0 [ 82.041755][ T5946] ? rcu_is_watching+0x12/0xc0 [ 82.041767][ T5946] do_syscall_64+0xcd/0x250 [ 82.041783][ T5946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.041803][ T5946] RIP: 0033:0x7f407037def9 [ 82.041817][ T5946] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 82.041833][ T5946] RSP: 002b:00007f4071123038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 82.041851][ T5946] RAX: ffffffffffffffda RBX: 00007f4070535f80 RCX: 00007f407037def9 [ 82.041863][ T5946] RDX: 0000000000001006 RSI: 0000000020001040 RDI: 0000000000000006 [ 82.041875][ T5946] RBP: 00007f4071123090 R08: 0000000000000000 R09: 0000000000000000 [ 82.041886][ T5946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 82.041896][ T5946] R13: 0000000000000000 R14: 00007f4070535f80 R15: 00007ffd38b25ce8 [ 82.041912][ T5946] [ 82.164928][ T5949] FAULT_INJECTION: forcing a failure. [ 82.164928][ T5949] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 82.164954][ T5949] CPU: 2 UID: 0 PID: 5949 Comm: syz.0.50 Not tainted 6.12.0-rc1-syzkaller-ge32cde8d2bd7 #0 [ 82.164976][ T5949] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 82.164987][ T5949] Call Trace: [ 82.164993][ T5949] [ 82.165000][ T5949] dump_stack_lvl+0x116/0x1f0 [ 82.165029][ T5949] should_fail_ex+0x497/0x5b0 [ 82.165057][ T5949] ? sys_imageblit+0x5bb/0x21d0 [ 82.165082][ T5949] strncpy_from_user+0x3b/0x2a0 [ 82.165105][ T5949] ? rcu_is_watching+0x12/0xc0 [ 82.165128][ T5949] strncpy_from_user_nofault+0x7f/0x180 [ 82.165152][ T5949] bpf_probe_read_compat_str+0xf1/0x170 [ 82.165177][ T5949] bpf_prog_d0e9ac47b081aec3+0x49/0x4b [ 82.165199][ T5949] bpf_trace_run2+0x231/0x590 [ 82.165223][ T5949] ? __pfx_bpf_trace_run2+0x10/0x10 [ 82.165248][ T5949] ? do_raw_spin_unlock+0x172/0x230 [ 82.165269][ T5949] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 82.165290][ T5949] __bpf_trace_timer_start+0xc7/0x100 [ 82.165310][ T5949] ? __pfx___bpf_trace_timer_start+0x10/0x10 [ 82.165331][ T5949] ? _raw_spin_lock_irqsave+0x42/0x60 [ 82.165347][ T5949] ? lock_timer_base+0x5d/0x220 [ 82.165368][ T5949] enqueue_timer+0x2b4/0x550 [ 82.165380][ T5949] __mod_timer+0x8d7/0xdc0 [ 82.165398][ T5949] ? __pfx_lock_release+0x10/0x10 [ 82.165407][ T5949] ? __pfx___mod_timer+0x10/0x10 [ 82.165420][ T5949] ? input_handler_for_each_handle+0x3e/0x250 [ 82.165436][ T5949] ? lock_acquire+0x2f/0xb0 [ 82.165445][ T5949] ? __pfx_kd_sound_helper+0x10/0x10 [ 82.165458][ T5949] kd_mksound+0x114/0x130 [ 82.165472][ T5949] ? __pfx_kd_mksound+0x10/0x10 [ 82.165485][ T5949] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 82.165526][ T5949] do_con_write+0x2e6f/0x7bb0 [ 82.165556][ T5949] ? __pfx_do_con_write+0x10/0x10 [ 82.165570][ T5949] ? __pfx___mutex_lock+0x10/0x10 [ 82.165583][ T5949] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 82.165601][ T5949] ? con_write+0x81/0xb0 [ 82.165622][ T5949] con_write+0x23/0xb0 [ 82.165644][ T5949] n_tty_write+0x419/0x1140 [ 82.165666][ T5949] ? __pfx_n_tty_write+0x10/0x10 [ 82.165682][ T5949] ? __virt_addr_valid+0x1a4/0x590 [ 82.165704][ T5949] ? __pfx_woken_wake_function+0x10/0x10 [ 82.165726][ T5949] ? __virt_addr_valid+0x5e/0x590 [ 82.165746][ T5949] ? __phys_addr_symbol+0x30/0x80 [ 82.165765][ T5949] ? __check_object_size+0x488/0x710 [ 82.165784][ T5949] ? __pfx_n_tty_write+0x10/0x10 [ 82.165802][ T5949] file_tty_write.constprop.0+0x506/0x9a0 [ 82.165829][ T5949] vfs_write+0x6b5/0x1140 [ 82.165852][ T5949] ? __pfx_tty_write+0x10/0x10 [ 82.165874][ T5949] ? trace_lock_acquire+0x14a/0x1d0 [ 82.165894][ T5949] ? __pfx_vfs_write+0x10/0x10 [ 82.165910][ T5949] ? __fget_files+0x40/0x3f0 [ 82.165926][ T5949] ksys_write+0x12f/0x260 [ 82.165939][ T5949] ? __pfx_ksys_write+0x10/0x10 [ 82.165952][ T5949] ? rcu_is_watching+0x12/0xc0 [ 82.165963][ T5949] ? rcu_is_watching+0x12/0xc0 [ 82.165975][ T5949] do_syscall_64+0xcd/0x250 [ 82.165987][ T5949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.165999][ T5949] RIP: 0033:0x7f407037def9 [ 82.166007][ T5949] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 82.166017][ T5949] RSP: 002b:00007f4071123038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 82.166027][ T5949] RAX: ffffffffffffffda RBX: 00007f4070535f80 RCX: 00007f407037def9 [ 82.166034][ T5949] RDX: 0000000000001006 RSI: 0000000020001040 RDI: 0000000000000006 [ 82.166040][ T5949] RBP: 00007f4071123090 R08: 0000000000000000 R09: 0000000000000000 [ 82.166046][ T5949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 82.166052][ T5949] R13: 0000000000000000 R14: 00007f4070535f80 R15: 00007ffd38b25ce8 [ 82.166060][ T5949] [ 82.312027][ T5951] FAULT_INJECTION: forcing a failure. [ 82.312027][ T5951] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 82.312044][ T5951] CPU: 0 UID: 0 PID: 5951 Comm: syz.0.51 Not tainted 6.12.0-rc1-syzkaller-ge32cde8d2bd7 #0 [ 82.312056][ T5951] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 82.312062][ T5951] Call Trace: [ 82.312065][ T5951] [ 82.312072][ T5951] dump_stack_lvl+0x116/0x1f0 [ 82.312097][ T5951] should_fail_ex+0x497/0x5b0 [ 82.312119][ T5951] ? sys_imageblit+0x5bb/0x21d0 [ 82.312133][ T5951] strncpy_from_user+0x3b/0x2a0 [ 82.312146][ T5951] ? rcu_is_watching+0x12/0xc0 [ 82.312159][ T5951] strncpy_from_user_nofault+0x7f/0x180 [ 82.312173][ T5951] bpf_probe_read_compat_str+0xf1/0x170 [ 82.312187][ T5951] bpf_prog_d0e9ac47b081aec3+0x49/0x4b [ 82.312195][ T5951] bpf_trace_run2+0x231/0x590 [ 82.312208][ T5951] ? __pfx_bpf_trace_run2+0x10/0x10 [ 82.312221][ T5951] ? do_raw_spin_unlock+0x172/0x230 [ 82.312232][ T5951] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 82.312245][ T5951] __bpf_trace_timer_start+0xc7/0x100 [ 82.312257][ T5951] ? __pfx___bpf_trace_timer_start+0x10/0x10 [ 82.312270][ T5951] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 82.312281][ T5951] enqueue_timer+0x2b4/0x550 [ 82.312293][ T5951] __mod_timer+0x8d7/0xdc0 [ 82.312307][ T5951] ? __pfx_lock_release+0x10/0x10 [ 82.312316][ T5951] ? __pfx___mod_timer+0x10/0x10 [ 82.312328][ T5951] ? input_handler_for_each_handle+0x3e/0x250 [ 82.312346][ T5951] ? lock_acquire+0x2f/0xb0 [ 82.312355][ T5951] ? __pfx_kd_sound_helper+0x10/0x10 [ 82.312373][ T5951] kd_mksound+0x114/0x130 [ 82.312386][ T5951] ? __pfx_kd_mksound+0x10/0x10 [ 82.312399][ T5951] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 82.312409][ T5951] do_con_write+0x2e6f/0x7bb0 [ 82.312426][ T5951] ? __pfx_do_con_write+0x10/0x10 [ 82.312440][ T5951] ? __pfx___mutex_lock+0x10/0x10 [ 82.312453][ T5951] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 82.312465][ T5951] ? con_write+0x81/0xb0 [ 82.312479][ T5951] con_write+0x23/0xb0 [ 82.312492][ T5951] n_tty_write+0x419/0x1140 [ 82.312505][ T5951] ? __pfx_n_tty_write+0x10/0x10 [ 82.312514][ T5951] ? __virt_addr_valid+0x1a4/0x590 [ 82.312527][ T5951] ? __pfx_woken_wake_function+0x10/0x10 [ 82.312540][ T5951] ? __virt_addr_valid+0x5e/0x590 [ 82.312551][ T5951] ? __phys_addr_symbol+0x30/0x80 [ 82.312562][ T5951] ? __check_object_size+0x488/0x710 [ 82.312574][ T5951] ? __pfx_n_tty_write+0x10/0x10 [ 82.312584][ T5951] file_tty_write.constprop.0+0x506/0x9a0 [ 82.312599][ T5951] vfs_write+0x6b5/0x1140 [ 82.312619][ T5951] ? __pfx_tty_write+0x10/0x10 [ 82.312632][ T5951] ? trace_lock_acquire+0x14a/0x1d0 [ 82.312644][ T5951] ? __pfx_vfs_write+0x10/0x10 [ 82.312658][ T5951] ? __fget_files+0x40/0x3f0 [ 82.312673][ T5951] ksys_write+0x12f/0x260 [ 82.312686][ T5951] ? __pfx_ksys_write+0x10/0x10 [ 82.312699][ T5951] ? rcu_is_watching+0x12/0xc0 [ 82.312710][ T5951] ? rcu_is_watching+0x12/0xc0 [ 82.312721][ T5951] do_syscall_64+0xcd/0x250 [ 82.312734][ T5951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.312746][ T5951] RIP: 0033:0x7f407037def9 [ 82.312754][ T5951] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 82.312763][ T5951] RSP: 002b:00007f4071123038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 82.312773][ T5951] RAX: ffffffffffffffda RBX: 00007f4070535f80 RCX: 00007f407037def9 [ 82.312780][ T5951] RDX: 0000000000001006 RSI: 0000000020001040 RDI: 0000000000000006 [ 82.312786][ T5951] RBP: 00007f4071123090 R08: 0000000000000000 R09: 0000000000000000 [ 82.312792][ T5951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 82.312798][ T5951] R13: 0000000000000000 R14: 00007f4070535f80 R15: 00007ffd38b25ce8 [ 82.312806][ T5951] [ 82.463029][ T5953] FAULT_INJECTION: forcing a failure. [ 82.463029][ T5953] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 82.463055][ T5953] CPU: 0 UID: 0 PID: 5953 Comm: syz.0.52 Not tainted 6.12.0-rc1-syzkaller-ge32cde8d2bd7 #0 [ 82.463076][ T5953] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 82.463087][ T5953] Call Trace: [ 82.463093][ T5953] [ 82.463101][ T5953] dump_stack_lvl+0x116/0x1f0 [ 82.463129][ T5953] should_fail_ex+0x497/0x5b0 [ 82.463157][ T5953] ? sys_imageblit+0x5bb/0x21d0 [ 82.463182][ T5953] strncpy_from_user+0x3b/0x2a0 [ 82.463204][ T5953] ? rcu_is_watching+0x12/0xc0 [ 82.463228][ T5953] strncpy_from_user_nofault+0x7f/0x180 [ 82.463251][ T5953] bpf_probe_read_compat_str+0xf1/0x170 [ 82.463277][ T5953] bpf_prog_d0e9ac47b081aec3+0x49/0x4b [ 82.463292][ T5953] bpf_trace_run2+0x231/0x590 [ 82.463315][ T5953] ? __pfx_bpf_trace_run2+0x10/0x10 [ 82.463338][ T5953] ? do_raw_spin_unlock+0x172/0x230 [ 82.463360][ T5953] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 82.463382][ T5953] __bpf_trace_timer_start+0xc7/0x100 [ 82.463404][ T5953] ? __pfx___bpf_trace_timer_start+0x10/0x10 [ 82.463427][ T5953] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 82.463447][ T5953] enqueue_timer+0x2b4/0x550 [ 82.463469][ T5953] __mod_timer+0x8d7/0xdc0 [ 82.463495][ T5953] ? __pfx_lock_release+0x10/0x10 [ 82.463512][ T5953] ? __pfx___mod_timer+0x10/0x10 [ 82.463534][ T5953] ? input_handler_for_each_handle+0x3e/0x250 [ 82.463563][ T5953] ? lock_acquire+0x2f/0xb0 [ 82.463580][ T5953] ? __pfx_kd_sound_helper+0x10/0x10 [ 82.463604][ T5953] kd_mksound+0x114/0x130 [ 82.463628][ T5953] ? __pfx_kd_mksound+0x10/0x10 [ 82.463653][ T5953] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 82.463672][ T5953] do_con_write+0x2e6f/0x7bb0 [ 82.463708][ T5953] ? __pfx_do_con_write+0x10/0x10 [ 82.463733][ T5953] ? __pfx___mutex_lock+0x10/0x10 [ 82.463756][ T5953] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 82.463780][ T5953] ? con_write+0x81/0xb0 [ 82.463805][ T5953] con_write+0x23/0xb0 [ 82.463829][ T5953] n_tty_write+0x419/0x1140 [ 82.463851][ T5953] ? __pfx_n_tty_write+0x10/0x10 [ 82.463868][ T5953] ? __virt_addr_valid+0x1a4/0x590 [ 82.463890][ T5953] ? __pfx_woken_wake_function+0x10/0x10 [ 82.463913][ T5953] ? __virt_addr_valid+0x5e/0x590 [ 82.463934][ T5953] ? __phys_addr_symbol+0x30/0x80 [ 82.463954][ T5953] ? __check_object_size+0x488/0x710 [ 82.463975][ T5953] ? __pfx_n_tty_write+0x10/0x10 [ 82.463994][ T5953] file_tty_write.constprop.0+0x506/0x9a0 [ 82.464022][ T5953] vfs_write+0x6b5/0x1140 [ 82.464047][ T5953] ? __pfx_tty_write+0x10/0x10 [ 82.464071][ T5953] ? trace_lock_acquire+0x14a/0x1d0 [ 82.464093][ T5953] ? __pfx_vfs_write+0x10/0x10 [ 82.464118][ T5953] ? __fget_files+0x40/0x3f0 [ 82.464195][ T5953] ksys_write+0x12f/0x260 [ 82.464222][ T5953] ? __pfx_ksys_write+0x10/0x10 [ 82.464246][ T5953] ? rcu_is_watching+0x12/0xc0 [ 82.464265][ T5953] ? rcu_is_watching+0x12/0xc0 [ 82.464284][ T5953] do_syscall_64+0xcd/0x250 [ 82.464307][ T5953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.464328][ T5953] RIP: 0033:0x7f407037def9 [ 82.464341][ T5953] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 82.464358][ T5953] RSP: 002b:00007f4071123038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 82.464377][ T5953] RAX: ffffffffffffffda RBX: 00007f4070535f80 RCX: 00007f407037def9 [ 82.464390][ T5953] RDX: 0000000000001006 RSI: 0000000020001040 RDI: 0000000000000006 [ 82.464401][ T5953] RBP: 00007f4071123090 R08: 0000000000000000 R09: 0000000000000000 [ 82.464413][ T5953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 82.464424][ T5953] R13: 0000000000000000 R14: 00007f4070535f80 R15: 00007ffd38b25ce8 [ 82.464439][ T5953] [ 82.602921][ T5955] FAULT_INJECTION: forcing a failure. [ 82.602921][ T5955] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 82.602938][ T5955] CPU: 3 UID: 0 PID: 5955 Comm: syz.0.53 Not tainted 6.12.0-rc1-syzkaller-ge32cde8d2bd7 #0 [ 82.602950][ T5955] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 82.602956][ T5955] Call Trace: [ 82.602959][ T5955] [ 82.602963][ T5955] dump_stack_lvl+0x116/0x1f0 [ 82.602979][ T5955] should_fail_ex+0x497/0x5b0 [ 82.602994][ T5955] ? sys_imageblit+0x5bb/0x21d0 [ 82.603009][ T5955] strncpy_from_user+0x3b/0x2a0 [ 82.603022][ T5955] ? rcu_is_watching+0x12/0xc0 [ 82.603034][ T5955] strncpy_from_user_nofault+0x7f/0x180 [ 82.603048][ T5955] bpf_probe_read_compat_str+0xf1/0x170 [ 82.603063][ T5955] bpf_prog_d0e9ac47b081aec3+0x49/0x4b [ 82.603071][ T5955] bpf_trace_run2+0x231/0x590 [ 82.603084][ T5955] ? __pfx_bpf_trace_run2+0x10/0x10 [ 82.603097][ T5955] ? do_raw_spin_unlock+0x172/0x230 [ 82.603108][ T5955] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 82.603121][ T5955] __bpf_trace_timer_start+0xc7/0x100 [ 82.603133][ T5955] ? __pfx___bpf_trace_timer_start+0x10/0x10 [ 82.603145][ T5955] ? _raw_spin_lock_irqsave+0x42/0x60 [ 82.603155][ T5955] ? lock_timer_base+0x5d/0x220 [ 82.603167][ T5955] enqueue_timer+0x2b4/0x550 [ 82.603178][ T5955] __mod_timer+0x8d7/0xdc0 [ 82.603192][ T5955] ? __pfx_lock_release+0x10/0x10 [ 82.603201][ T5955] ? __pfx___mod_timer+0x10/0x10 [ 82.603213][ T5955] ? input_handler_for_each_handle+0x3e/0x250 [ 82.603230][ T5955] ? lock_acquire+0x2f/0xb0 [ 82.603239][ T5955] ? __pfx_kd_sound_helper+0x10/0x10 [ 82.603252][ T5955] kd_mksound+0x114/0x130 [ 82.603266][ T5955] ? __pfx_kd_mksound+0x10/0x10 [ 82.603279][ T5955] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 82.603289][ T5955] do_con_write+0x2e6f/0x7bb0 [ 82.603306][ T5955] ? __pfx_do_con_write+0x10/0x10 [ 82.603319][ T5955] ? __pfx___mutex_lock+0x10/0x10 [ 82.603331][ T5955] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 82.603344][ T5955] ? con_write+0x81/0xb0 [ 82.603358][ T5955] con_write+0x23/0xb0 [ 82.603371][ T5955] n_tty_write+0x419/0x1140 [ 82.603383][ T5955] ? __pfx_n_tty_write+0x10/0x10 [ 82.603392][ T5955] ? __virt_addr_valid+0x1a4/0x590 [ 82.603406][ T5955] ? __pfx_woken_wake_function+0x10/0x10 [ 82.603419][ T5955] ? __virt_addr_valid+0x5e/0x590 [ 82.603430][ T5955] ? __phys_addr_symbol+0x30/0x80 [ 82.603440][ T5955] ? __check_object_size+0x488/0x710 [ 82.603452][ T5955] ? __pfx_n_tty_write+0x10/0x10 [ 82.603462][ T5955] file_tty_write.constprop.0+0x506/0x9a0 [ 82.603477][ T5955] vfs_write+0x6b5/0x1140 [ 82.603490][ T5955] ? __pfx_tty_write+0x10/0x10 [ 82.603502][ T5955] ? trace_lock_acquire+0x14a/0x1d0 [ 82.603514][ T5955] ? __pfx_vfs_write+0x10/0x10 [ 82.603528][ T5955] ? __fget_files+0x40/0x3f0 [ 82.603542][ T5955] ksys_write+0x12f/0x260 [ 82.603556][ T5955] ? __pfx_ksys_write+0x10/0x10 [ 82.603569][ T5955] ? rcu_is_watching+0x12/0xc0 [ 82.603580][ T5955] ? rcu_is_watching+0x12/0xc0 [ 82.603591][ T5955] do_syscall_64+0xcd/0x250 [ 82.603609][ T5955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.603621][ T5955] RIP: 0033:0x7f407037def9 [ 82.603629][ T5955] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 82.603638][ T5955] RSP: 002b:00007f4071123038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 82.603648][ T5955] RAX: ffffffffffffffda RBX: 00007f4070535f80 RCX: 00007f407037def9 [ 82.603655][ T5955] RDX: 0000000000001006 RSI: 0000000020001040 RDI: 0000000000000006 [ 82.603661][ T5955] RBP: 00007f4071123090 R08: 0000000000000000 R09: 0000000000000000 [ 82.603667][ T5955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 82.603673][ T5955] R13: 0000000000000000 R14: 00007f4070535f80 R15: 00007ffd38b25ce8 [ 82.603681][ T5955] [ 82.772303][ T5958] FAULT_INJECTION: forcing a failure. [ 82.772303][ T5958] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 82.772321][ T5958] CPU: 2 UID: 0 PID: 5958 Comm: syz.0.54 Not tainted 6.12.0-rc1-syzkaller-ge32cde8d2bd7 #0 [ 82.772333][ T5958] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 82.772339][ T5958] Call Trace: [ 82.772342][ T5958] [ 82.772347][ T5958] dump_stack_lvl+0x116/0x1f0 [ 82.772363][ T5958] should_fail_ex+0x497/0x5b0 [ 82.772379][ T5958] ? sys_imageblit+0x5bb/0x21d0 [ 82.772393][ T5958] strncpy_from_user+0x3b/0x2a0 [ 82.772406][ T5958] ? rcu_is_watching+0x12/0xc0 [ 82.772419][ T5958] strncpy_from_user_nofault+0x7f/0x180 [ 82.772439][ T5958] bpf_probe_read_compat_str+0xf1/0x170 [ 82.772453][ T5958] bpf_prog_d0e9ac47b081aec3+0x49/0x4b [ 82.772461][ T5958] bpf_trace_run2+0x231/0x590 [ 82.772474][ T5958] ? __pfx_bpf_trace_run2+0x10/0x10 [ 82.772488][ T5958] ? do_raw_spin_unlock+0x172/0x230 [ 82.772499][ T5958] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 82.772511][ T5958] __bpf_trace_timer_start+0xc7/0x100 [ 82.772523][ T5958] ? __pfx___bpf_trace_timer_start+0x10/0x10 [ 82.772535][ T5958] ? _raw_spin_lock_irqsave+0x42/0x60 [ 82.772545][ T5958] ? lock_timer_base+0x5d/0x220 [ 82.772557][ T5958] enqueue_timer+0x2b4/0x550 [ 82.772569][ T5958] __mod_timer+0x8d7/0xdc0 [ 82.772582][ T5958] ? __pfx_lock_release+0x10/0x10 [ 82.772591][ T5958] ? __pfx___mod_timer+0x10/0x10 [ 82.772604][ T5958] ? input_handler_for_each_handle+0x3e/0x250 [ 82.772623][ T5958] ? lock_acquire+0x2f/0xb0 [ 82.772632][ T5958] ? __pfx_kd_sound_helper+0x10/0x10 [ 82.772652][ T5958] kd_mksound+0x114/0x130 [ 82.772671][ T5958] ? __pfx_kd_mksound+0x10/0x10 [ 82.772693][ T5958] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 82.772711][ T5958] do_con_write+0x2e6f/0x7bb0 [ 82.772740][ T5958] ? __pfx_do_con_write+0x10/0x10 [ 82.772763][ T5958] ? __pfx___mutex_lock+0x10/0x10 [ 82.772777][ T5958] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 82.772790][ T5958] ? con_write+0x81/0xb0 [ 82.772804][ T5958] con_write+0x23/0xb0 [ 82.772817][ T5958] n_tty_write+0x419/0x1140 [ 82.772829][ T5958] ? __pfx_n_tty_write+0x10/0x10 [ 82.772838][ T5958] ? __virt_addr_valid+0x1a4/0x590 [ 82.772851][ T5958] ? __pfx_woken_wake_function+0x10/0x10 [ 82.772864][ T5958] ? __virt_addr_valid+0x5e/0x590 [ 82.772875][ T5958] ? __phys_addr_symbol+0x30/0x80 [ 82.772886][ T5958] ? __check_object_size+0x488/0x710 [ 82.772898][ T5958] ? __pfx_n_tty_write+0x10/0x10 [ 82.772908][ T5958] file_tty_write.constprop.0+0x506/0x9a0 [ 82.772923][ T5958] vfs_write+0x6b5/0x1140 [ 82.772943][ T5958] ? __pfx_tty_write+0x10/0x10 [ 82.772962][ T5958] ? trace_lock_acquire+0x14a/0x1d0 [ 82.772980][ T5958] ? __pfx_vfs_write+0x10/0x10 [ 82.773001][ T5958] ? __fget_files+0x40/0x3f0 [ 82.773024][ T5958] ksys_write+0x12f/0x260 [ 82.773046][ T5958] ? __pfx_ksys_write+0x10/0x10 [ 82.773065][ T5958] ? rcu_is_watching+0x12/0xc0 [ 82.773083][ T5958] ? rcu_is_watching+0x12/0xc0 [ 82.773101][ T5958] do_syscall_64+0xcd/0x250 [ 82.773119][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.773138][ T5958] RIP: 0033:0x7f407037def9 [ 82.773151][ T5958] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 82.773167][ T5958] RSP: 002b:00007f4071123038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 82.773183][ T5958] RAX: ffffffffffffffda RBX: 00007f4070535f80 RCX: 00007f407037def9 [ 82.773197][ T5958] RDX: 0000000000001006 RSI: 0000000020001040 RDI: 0000000000000006 [ 82.773207][ T5958] RBP: 00007f4071123090 R08: 0000000000000000 R09: 0000000000000000 [ 82.773216][ T5958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 82.773225][ T5958] R13: 0000000000000000 R14: 00007f4070535f80 R15: 00007ffd38b25ce8 [ 82.773240][ T5958] [ 82.912185][ T5961] FAULT_INJECTION: forcing a failure. [ 82.912185][ T5961] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 82.912209][ T5961] CPU: 1 UID: 0 PID: 5961 Comm: syz.0.55 Not tainted 6.12.0-rc1-syzkaller-ge32cde8d2bd7 #0 [ 82.912228][ T5961] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 82.912239][ T5961] Call Trace: [ 82.912246][ T5961] [ 82.912252][ T5961] dump_stack_lvl+0x116/0x1f0 [ 82.912279][ T5961] should_fail_ex+0x497/0x5b0 [ 82.912303][ T5961] ? sys_imageblit+0x5bb/0x21d0 [ 82.912326][ T5961] strncpy_from_user+0x3b/0x2a0 [ 82.912348][ T5961] ? rcu_is_watching+0x12/0xc0 [ 82.912370][ T5961] strncpy_from_user_nofault+0x7f/0x180 [ 82.912393][ T5961] bpf_probe_read_compat_str+0xf1/0x170 [ 82.912416][ T5961] bpf_prog_d0e9ac47b081aec3+0x49/0x4b [ 82.912430][ T5961] bpf_trace_run2+0x231/0x590 [ 82.912451][ T5961] ? __pfx_bpf_trace_run2+0x10/0x10 [ 82.912472][ T5961] ? do_raw_spin_unlock+0x172/0x230 [ 82.912491][ T5961] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 82.912519][ T5961] __bpf_trace_timer_start+0xc7/0x100 [ 82.912540][ T5961] ? __pfx___bpf_trace_timer_start+0x10/0x10 [ 82.912565][ T5961] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 82.912589][ T5961] enqueue_timer+0x2b4/0x550 [ 82.912609][ T5961] __mod_timer+0x8d7/0xdc0 [ 82.912631][ T5961] ? __pfx_lock_release+0x10/0x10 [ 82.912646][ T5961] ? __pfx___mod_timer+0x10/0x10 [ 82.912669][ T5961] ? input_handler_for_each_handle+0x3e/0x250 [ 82.912696][ T5961] ? lock_acquire+0x2f/0xb0 [ 82.912712][ T5961] ? __pfx_kd_sound_helper+0x10/0x10 [ 82.912735][ T5961] kd_mksound+0x114/0x130 [ 82.912758][ T5961] ? __pfx_kd_mksound+0x10/0x10 [ 82.912782][ T5961] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 82.912800][ T5961] do_con_write+0x2e6f/0x7bb0 [ 82.912829][ T5961] ? __pfx_do_con_write+0x10/0x10 [ 82.912853][ T5961] ? __pfx___mutex_lock+0x10/0x10 [ 82.912875][ T5961] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 82.912898][ T5961] ? con_write+0x81/0xb0 [ 82.912924][ T5961] con_write+0x23/0xb0 [ 82.912948][ T5961] n_tty_write+0x419/0x1140 [ 82.912971][ T5961] ? __pfx_n_tty_write+0x10/0x10 [ 82.912989][ T5961] ? __virt_addr_valid+0x1a4/0x590 [ 82.913012][ T5961] ? __pfx_woken_wake_function+0x10/0x10 [ 82.913036][ T5961] ? __virt_addr_valid+0x5e/0x590 [ 82.913056][ T5961] ? __phys_addr_symbol+0x30/0x80 [ 82.913076][ T5961] ? __check_object_size+0x488/0x710 [ 82.913095][ T5961] ? __pfx_n_tty_write+0x10/0x10 [ 82.913112][ T5961] file_tty_write.constprop.0+0x506/0x9a0 [ 82.913139][ T5961] vfs_write+0x6b5/0x1140 [ 82.913165][ T5961] ? __pfx_tty_write+0x10/0x10 [ 82.913188][ T5961] ? trace_lock_acquire+0x14a/0x1d0 [ 82.913210][ T5961] ? __pfx_vfs_write+0x10/0x10 [ 82.913236][ T5961] ? __fget_files+0x40/0x3f0 [ 82.913266][ T5961] ksys_write+0x12f/0x260 [ 82.913290][ T5961] ? __pfx_ksys_write+0x10/0x10 [ 82.913316][ T5961] ? rcu_is_watching+0x12/0xc0 [ 82.913336][ T5961] ? rcu_is_watching+0x12/0xc0 [ 82.913358][ T5961] do_syscall_64+0xcd/0x250 [ 82.913382][ T5961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.913404][ T5961] RIP: 0033:0x7f407037def9 [ 82.913418][ T5961] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 82.913435][ T5961] RSP: 002b:00007f4071123038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 82.913455][ T5961] RAX: ffffffffffffffda RBX: 00007f4070535f80 RCX: 00007f407037def9 [ 82.913468][ T5961] RDX: 0000000000001006 RSI: 0000000020001040 RDI: 0000000000000006 [ 82.913479][ T5961] RBP: 00007f4071123090 R08: 0000000000000000 R09: 0000000000000000 [ 82.913522][ T5961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 82.913533][ T5961] R13: 0000000000000000 R14: 00007f4070535f80 R15: 00007ffd38b25ce8 [ 82.913549][ T5961] [ 83.062458][ T5963] FAULT_INJECTION: forcing a failure. [ 83.062458][ T5963] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 83.062475][ T5963] CPU: 3 UID: 0 PID: 5963 Comm: syz.0.56 Not tainted 6.12.0-rc1-syzkaller-ge32cde8d2bd7 #0 [ 83.062486][ T5963] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 83.062493][ T5963] Call Trace: [ 83.062496][ T5963] [ 83.062501][ T5963] dump_stack_lvl+0x116/0x1f0 [ 83.062518][ T5963] should_fail_ex+0x497/0x5b0 [ 83.062533][ T5963] ? sys_imageblit+0x5bb/0x21d0 [ 83.062548][ T5963] strncpy_from_user+0x3b/0x2a0 [ 83.062561][ T5963] ? rcu_is_watching+0x12/0xc0 [ 83.062574][ T5963] strncpy_from_user_nofault+0x7f/0x180 [ 83.062589][ T5963] bpf_probe_read_compat_str+0xf1/0x170 [ 83.062604][ T5963] bpf_prog_d0e9ac47b081aec3+0x49/0x4b [ 83.062612][ T5963] bpf_trace_run2+0x231/0x590 [ 83.062625][ T5963] ? __pfx_bpf_trace_run2+0x10/0x10 [ 83.062638][ T5963] ? do_raw_spin_unlock+0x172/0x230 [ 83.062655][ T5963] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 83.062673][ T5963] __bpf_trace_timer_start+0xc7/0x100 [ 83.062693][ T5963] ? __pfx___bpf_trace_timer_start+0x10/0x10 [ 83.062707][ T5963] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 83.062718][ T5963] enqueue_timer+0x2b4/0x550 [ 83.062730][ T5963] __mod_timer+0x8d7/0xdc0 [ 83.062744][ T5963] ? __pfx_lock_release+0x10/0x10 [ 83.062754][ T5963] ? __pfx___mod_timer+0x10/0x10 [ 83.062767][ T5963] ? input_handler_for_each_handle+0x3e/0x250 [ 83.062782][ T5963] ? lock_acquire+0x2f/0xb0 [ 83.062791][ T5963] ? __pfx_kd_sound_helper+0x10/0x10 [ 83.062805][ T5963] kd_mksound+0x114/0x130 [ 83.062818][ T5963] ? __pfx_kd_mksound+0x10/0x10 [ 83.062832][ T5963] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 83.062842][ T5963] do_con_write+0x2e6f/0x7bb0 [ 83.062859][ T5963] ? __pfx_do_con_write+0x10/0x10 [ 83.062872][ T5963] ? __pfx___mutex_lock+0x10/0x10 [ 83.062884][ T5963] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 83.062896][ T5963] ? con_write+0x81/0xb0 [ 83.062910][ T5963] con_write+0x23/0xb0 [ 83.062923][ T5963] n_tty_write+0x419/0x1140 [ 83.062936][ T5963] ? __pfx_n_tty_write+0x10/0x10 [ 83.062945][ T5963] ? __virt_addr_valid+0x1a4/0x590 [ 83.062958][ T5963] ? __pfx_woken_wake_function+0x10/0x10 [ 83.062970][ T5963] ? __virt_addr_valid+0x5e/0x590 [ 83.062981][ T5963] ? __phys_addr_symbol+0x30/0x80 [ 83.062992][ T5963] ? __check_object_size+0x488/0x710 [ 83.063004][ T5963] ? __pfx_n_tty_write+0x10/0x10 [ 83.063013][ T5963] file_tty_write.constprop.0+0x506/0x9a0 [ 83.063028][ T5963] vfs_write+0x6b5/0x1140 [ 83.063043][ T5963] ? __pfx_tty_write+0x10/0x10 [ 83.063055][ T5963] ? trace_lock_acquire+0x14a/0x1d0 [ 83.063067][ T5963] ? __pfx_vfs_write+0x10/0x10 [ 83.063080][ T5963] ? __fget_files+0x40/0x3f0 [ 83.063095][ T5963] ksys_write+0x12f/0x260 [ 83.063108][ T5963] ? __pfx_ksys_write+0x10/0x10 [ 83.063122][ T5963] ? rcu_is_watching+0x12/0xc0 [ 83.063132][ T5963] ? rcu_is_watching+0x12/0xc0 [ 83.063144][ T5963] do_syscall_64+0xcd/0x250 [ 83.063156][ T5963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.063168][ T5963] RIP: 0033:0x7f407037def9 [ 83.063176][ T5963] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 83.063185][ T5963] RSP: 002b:00007f4071123038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 83.063196][ T5963] RAX: ffffffffffffffda RBX: 00007f4070535f80 RCX: 00007f407037def9 [ 83.063202][ T5963] RDX: 0000000000001006 RSI: 0000000020001040 RDI: 0000000000000006 [ 83.063209][ T5963] RBP: 00007f4071123090 R08: 0000000000000000 R09: 0000000000000000 [ 83.063215][ T5963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 83.063220][ T5963] R13: 0000000000000000 R14: 00007f4070535f80 R15: 00007ffd38b25ce8 [ 83.063229][ T5963] [ 83.222208][ T5965] FAULT_INJECTION: forcing a failure. [ 83.222208][ T5965] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 83.222225][ T5965] CPU: 2 UID: 0 PID: 5965 Comm: syz.0.57 Not tainted 6.12.0-rc1-syzkaller-ge32cde8d2bd7 #0 [ 83.222238][ T5965] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 83.222244][ T5965] Call Trace: [ 83.222248][ T5965] [ 83.222253][ T5965] dump_stack_lvl+0x116/0x1f0 [ 83.222270][ T5965] should_fail_ex+0x497/0x5b0 [ 83.222286][ T5965] ? sys_imageblit+0x5bb/0x21d0 [ 83.222302][ T5965] strncpy_from_user+0x3b/0x2a0 [ 83.222315][ T5965] ? rcu_is_watching+0x12/0xc0 [ 83.222329][ T5965] strncpy_from_user_nofault+0x7f/0x180 [ 83.222343][ T5965] bpf_probe_read_compat_str+0xf1/0x170 [ 83.222367][ T5965] bpf_prog_d0e9ac47b081aec3+0x49/0x4b [ 83.222376][ T5965] bpf_trace_run2+0x231/0x590 [ 83.222390][ T5965] ? __pfx_bpf_trace_run2+0x10/0x10 [ 83.222404][ T5965] ? do_raw_spin_unlock+0x172/0x230 [ 83.222416][ T5965] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 83.222429][ T5965] __bpf_trace_timer_start+0xc7/0x100 [ 83.222441][ T5965] ? __pfx___bpf_trace_timer_start+0x10/0x10 [ 83.222455][ T5965] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 83.222466][ T5965] enqueue_timer+0x2b4/0x550 [ 83.222479][ T5965] __mod_timer+0x8d7/0xdc0 [ 83.222493][ T5965] ? __pfx_lock_release+0x10/0x10 [ 83.222506][ T5965] ? __pfx___mod_timer+0x10/0x10 [ 83.222519][ T5965] ? input_handler_for_each_handle+0x3e/0x250 [ 83.222536][ T5965] ? lock_acquire+0x2f/0xb0 [ 83.222548][ T5965] ? __pfx_kd_sound_helper+0x10/0x10 [ 83.222562][ T5965] kd_mksound+0x114/0x130 [ 83.222577][ T5965] ? __pfx_kd_mksound+0x10/0x10 [ 83.222591][ T5965] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 83.222601][ T5965] do_con_write+0x2e6f/0x7bb0 [ 83.222619][ T5965] ? __pfx_do_con_write+0x10/0x10 [ 83.222634][ T5965] ? __pfx___mutex_lock+0x10/0x10 [ 83.222646][ T5965] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 83.222660][ T5965] ? con_write+0x81/0xb0 [ 83.222675][ T5965] con_write+0x23/0xb0 [ 83.222689][ T5965] n_tty_write+0x419/0x1140 [ 83.222702][ T5965] ? __pfx_n_tty_write+0x10/0x10 [ 83.222711][ T5965] ? __virt_addr_valid+0x1a4/0x590 [ 83.222724][ T5965] ? __pfx_woken_wake_function+0x10/0x10 [ 83.222738][ T5965] ? __virt_addr_valid+0x5e/0x590 [ 83.222750][ T5965] ? __phys_addr_symbol+0x30/0x80 [ 83.222761][ T5965] ? __check_object_size+0x488/0x710 [ 83.222773][ T5965] ? __pfx_n_tty_write+0x10/0x10 [ 83.222784][ T5965] file_tty_write.constprop.0+0x506/0x9a0 [ 83.222800][ T5965] vfs_write+0x6b5/0x1140 [ 83.222814][ T5965] ? __pfx_tty_write+0x10/0x10 [ 83.222828][ T5965] ? trace_lock_acquire+0x14a/0x1d0 [ 83.222841][ T5965] ? __pfx_vfs_write+0x10/0x10 [ 83.222855][ T5965] ? __fget_files+0x40/0x3f0 [ 83.222871][ T5965] ksys_write+0x12f/0x260 [ 83.222885][ T5965] ? __pfx_ksys_write+0x10/0x10 [ 83.222899][ T5965] ? rcu_is_watching+0x12/0xc0 [ 83.222911][ T5965] ? rcu_is_watching+0x12/0xc0 [ 83.222923][ T5965] do_syscall_64+0xcd/0x250 [ 83.222936][ T5965] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.222949][ T5965] RIP: 0033:0x7f407037def9 [ 83.222958][ T5965] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 83.222968][ T5965] RSP: 002b:00007f4071123038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 83.222980][ T5965] RAX: ffffffffffffffda RBX: 00007f4070535f80 RCX: 00007f407037def9 [ 83.222987][ T5965] RDX: 0000000000001006 RSI: 0000000020001040 RDI: 0000000000000006 [ 83.222994][ T5965] RBP: 00007f4071123090 R08: 0000000000000000 R09: 0000000000000000 [ 83.223000][ T5965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 83.223007][ T5965] R13: 0000000000000000 R14: 00007f4070535f80 R15: 00007ffd38b25ce8 [ 83.223015][ T5965] [ 83.381233][ T5967] FAULT_INJECTION: forcing a failure. [ 83.381233][ T5967] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 83.381251][ T5967] CPU: 3 UID: 0 PID: 5967 Comm: syz.0.58 Not tainted 6.12.0-rc1-syzkaller-ge32cde8d2bd7 #0 [ 83.381264][ T5967] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 83.381271][ T5967] Call Trace: [ 83.381274][ T5967] [ 83.381278][ T5967] dump_stack_lvl+0x116/0x1f0 [ 83.381295][ T5967] should_fail_ex+0x497/0x5b0 [ 83.381310][ T5967] ? lock_release+0x4f6/0x6f0 [ 83.381320][ T5967] strncpy_from_user+0x3b/0x2a0 [ 83.381333][ T5967] ? rcu_is_watching+0x12/0xc0 [ 83.381345][ T5967] strncpy_from_user_nofault+0x7f/0x180 [ 83.381361][ T5967] bpf_probe_read_compat_str+0xf1/0x170 [ 83.381375][ T5967] bpf_prog_d0e9ac47b081aec3+0x49/0x4b [ 83.381383][ T5967] bpf_trace_run2+0x231/0x590 [ 83.381396][ T5967] ? __pfx_bpf_trace_run2+0x10/0x10 [ 83.381409][ T5967] ? do_raw_spin_unlock+0x172/0x230 [ 83.381421][ T5967] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 83.381433][ T5967] __bpf_trace_timer_start+0xc7/0x100 [ 83.381445][ T5967] ? __pfx___bpf_trace_timer_start+0x10/0x10 [ 83.381457][ T5967] ? _raw_spin_lock_irqsave+0x42/0x60 [ 83.381467][ T5967] ? lock_timer_base+0x5d/0x220 [ 83.381503][ T5967] enqueue_timer+0x2b4/0x550 [ 83.381517][ T5967] __mod_timer+0x8d7/0xdc0 [ 83.381531][ T5967] ? __pfx_lock_release+0x10/0x10 [ 83.381540][ T5967] ? __pfx___mod_timer+0x10/0x10 [ 83.381552][ T5967] ? input_handler_for_each_handle+0x3e/0x250 [ 83.381568][ T5967] ? lock_acquire+0x2f/0xb0 [ 83.381577][ T5967] ? __pfx_kd_sound_helper+0x10/0x10 [ 83.381591][ T5967] kd_mksound+0x114/0x130 [ 83.381610][ T5967] ? __pfx_kd_mksound+0x10/0x10 [ 83.381624][ T5967] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 83.381634][ T5967] do_con_write+0x2e6f/0x7bb0 [ 83.381651][ T5967] ? __pfx_do_con_write+0x10/0x10 [ 83.381664][ T5967] ? __pfx___mutex_lock+0x10/0x10 [ 83.381677][ T5967] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 83.381689][ T5967] ? con_write+0x81/0xb0 [ 83.381704][ T5967] con_write+0x23/0xb0 [ 83.381717][ T5967] n_tty_write+0x419/0x1140 [ 83.381729][ T5967] ? __pfx_n_tty_write+0x10/0x10 [ 83.381739][ T5967] ? __virt_addr_valid+0x1a4/0x590 [ 83.381751][ T5967] ? __pfx_woken_wake_function+0x10/0x10 [ 83.381764][ T5967] ? __virt_addr_valid+0x5e/0x590 [ 83.381776][ T5967] ? __phys_addr_symbol+0x30/0x80 [ 83.381787][ T5967] ? __check_object_size+0x488/0x710 [ 83.381798][ T5967] ? __pfx_n_tty_write+0x10/0x10 [ 83.381808][ T5967] file_tty_write.constprop.0+0x506/0x9a0 [ 83.381823][ T5967] vfs_write+0x6b5/0x1140 [ 83.381837][ T5967] ? __pfx_tty_write+0x10/0x10 [ 83.381850][ T5967] ? trace_lock_acquire+0x14a/0x1d0 [ 83.381862][ T5967] ? __pfx_vfs_write+0x10/0x10 [ 83.381876][ T5967] ? __fget_files+0x40/0x3f0 [ 83.381891][ T5967] ksys_write+0x12f/0x260 [ 83.381905][ T5967] ? __pfx_ksys_write+0x10/0x10 [ 83.381918][ T5967] ? rcu_is_watching+0x12/0xc0 [ 83.381929][ T5967] ? rcu_is_watching+0x12/0xc0 [ 83.381940][ T5967] do_syscall_64+0xcd/0x250 [ 83.381953][ T5967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.381965][ T5967] RIP: 0033:0x7f407037def9 [ 83.381973][ T5967] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 83.381983][ T5967] RSP: 002b:00007f4071123038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 83.381994][ T5967] RAX: ffffffffffffffda RBX: 00007f4070535f80 RCX: 00007f407037def9 [ 83.382000][ T5967] RDX: 0000000000001006 RSI: 0000000020001040 RDI: 0000000000000006 [ 83.382007][ T5967] RBP: 00007f4071123090 R08: 0000000000000000 R09: 0000000000000000 [ 83.382013][ T5967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 83.382018][ T5967] R13: 0000000000000000 R14: 00007f4070535f80 R15: 00007ffd38b25ce8 [ 83.382027][ T5967] [ 83.532064][ T5970] FAULT_INJECTION: forcing a failure. [ 83.532064][ T5970] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 83.532080][ T5970] CPU: 2 UID: 0 PID: 5970 Comm: syz.0.59 Not tainted 6.12.0-rc1-syzkaller-ge32cde8d2bd7 #0 [ 83.532092][ T5970] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 83.532098][ T5970] Call Trace: [ 83.532102][ T5970] [ 83.532106][ T5970] dump_stack_lvl+0x116/0x1f0 [ 83.532123][ T5970] should_fail_ex+0x497/0x5b0 [ 83.532138][ T5970] ? sys_imageblit+0x5bb/0x21d0 [ 83.532152][ T5970] strncpy_from_user+0x3b/0x2a0 [ 83.532165][ T5970] ? rcu_is_watching+0x12/0xc0 [ 83.532178][ T5970] strncpy_from_user_nofault+0x7f/0x180 [ 83.532192][ T5970] bpf_probe_read_compat_str+0xf1/0x170 [ 83.532206][ T5970] bpf_prog_d0e9ac47b081aec3+0x49/0x4b [ 83.532214][ T5970] bpf_trace_run2+0x231/0x590 [ 83.532227][ T5970] ? __pfx_bpf_trace_run2+0x10/0x10 [ 83.532240][ T5970] ? do_raw_spin_unlock+0x172/0x230 [ 83.532251][ T5970] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 83.532264][ T5970] __bpf_trace_timer_start+0xc7/0x100 [ 83.532276][ T5970] ? __pfx___bpf_trace_timer_start+0x10/0x10 [ 83.532288][ T5970] ? _raw_spin_lock_irqsave+0x42/0x60 [ 83.532298][ T5970] ? lock_timer_base+0x5d/0x220 [ 83.532309][ T5970] enqueue_timer+0x2b4/0x550 [ 83.532322][ T5970] __mod_timer+0x8d7/0xdc0 [ 83.532336][ T5970] ? __pfx_lock_release+0x10/0x10 [ 83.532345][ T5970] ? __pfx___mod_timer+0x10/0x10 [ 83.532357][ T5970] ? input_handler_for_each_handle+0x3e/0x250 [ 83.532373][ T5970] ? lock_acquire+0x2f/0xb0 [ 83.532382][ T5970] ? __pfx_kd_sound_helper+0x10/0x10 [ 83.532395][ T5970] kd_mksound+0x114/0x130 [ 83.532409][ T5970] ? __pfx_kd_mksound+0x10/0x10 [ 83.532423][ T5970] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 83.532433][ T5970] do_con_write+0x2e6f/0x7bb0 [ 83.532479][ T5970] ? __pfx_do_con_write+0x10/0x10 [ 83.532493][ T5970] ? __pfx___mutex_lock+0x10/0x10 [ 83.532521][ T5970] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 83.532534][ T5970] ? con_write+0x81/0xb0 [ 83.532547][ T5970] con_write+0x23/0xb0 [ 83.532561][ T5970] n_tty_write+0x419/0x1140 [ 83.532573][ T5970] ? __pfx_n_tty_write+0x10/0x10 [ 83.532582][ T5970] ? __virt_addr_valid+0x1a4/0x590 [ 83.532594][ T5970] ? __pfx_woken_wake_function+0x10/0x10 [ 83.532607][ T5970] ? __virt_addr_valid+0x5e/0x590 [ 83.532619][ T5970] ? __phys_addr_symbol+0x30/0x80 [ 83.532630][ T5970] ? __check_object_size+0x488/0x710 [ 83.532642][ T5970] ? __pfx_n_tty_write+0x10/0x10 [ 83.532658][ T5970] file_tty_write.constprop.0+0x506/0x9a0 [ 83.532673][ T5970] vfs_write+0x6b5/0x1140 [ 83.532686][ T5970] ? __pfx_tty_write+0x10/0x10 [ 83.532699][ T5970] ? trace_lock_acquire+0x14a/0x1d0 [ 83.532711][ T5970] ? __pfx_vfs_write+0x10/0x10 [ 83.532724][ T5970] ? __fget_files+0x40/0x3f0 [ 83.532740][ T5970] ksys_write+0x12f/0x260 [ 83.532753][ T5970] ? __pfx_ksys_write+0x10/0x10 [ 83.532766][ T5970] ? rcu_is_watching+0x12/0xc0 [ 83.532777][ T5970] ? rcu_is_watching+0x12/0xc0 [ 83.532789][ T5970] do_syscall_64+0xcd/0x250 [ 83.532801][ T5970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.532814][ T5970] RIP: 0033:0x7f407037def9 [ 83.532822][ T5970] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 83.532834][ T5970] RSP: 002b:00007f4071123038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 83.532846][ T5970] RAX: ffffffffffffffda RBX: 00007f4070535f80 RCX: 00007f407037def9 [ 83.532855][ T5970] RDX: 0000000000001006 RSI: 0000000020001040 RDI: 0000000000000006 [ 83.532861][ T5970] RBP: 00007f4071123090 R08: 0000000000000000 R09: 0000000000000000 [ 83.532867][ T5970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 83.532873][ T5970] R13: 0000000000000000 R14: 00007f4070535f80 R15: 00007ffd38b25ce8 [ 83.532881][ T5970] [ 83.665919][ T5972] FAULT_INJECTION: forcing a failure. [ 83.665919][ T5972] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 83.665944][ T5972] CPU: 0 UID: 0 PID: 5972 Comm: syz.0.60 Not tainted 6.12.0-rc1-syzkaller-ge32cde8d2bd7 #0 [ 83.665964][ T5972] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 83.665974][ T5972] Call Trace: [ 83.665980][ T5972] [ 83.665986][ T5972] dump_stack_lvl+0x116/0x1f0 [ 83.666012][ T5972] should_fail_ex+0x497/0x5b0 [ 83.666036][ T5972] ? sys_imageblit+0x5bb/0x21d0 [ 83.666060][ T5972] strncpy_from_user+0x3b/0x2a0 [ 83.666081][ T5972] ? rcu_is_watching+0x12/0xc0 [ 83.666103][ T5972] strncpy_from_user_nofault+0x7f/0x180 [ 83.666125][ T5972] bpf_probe_read_compat_str+0xf1/0x170 [ 83.666147][ T5972] bpf_prog_d0e9ac47b081aec3+0x49/0x4b [ 83.666161][ T5972] bpf_trace_run2+0x231/0x590 [ 83.666183][ T5972] ? __pfx_bpf_trace_run2+0x10/0x10 [ 83.666206][ T5972] ? do_raw_spin_unlock+0x172/0x230 [ 83.666225][ T5972] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 83.666245][ T5972] __bpf_trace_timer_start+0xc7/0x100 [ 83.666265][ T5972] ? __pfx___bpf_trace_timer_start+0x10/0x10 [ 83.666286][ T5972] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 83.666305][ T5972] enqueue_timer+0x2b4/0x550 [ 83.666325][ T5972] __mod_timer+0x8d7/0xdc0 [ 83.666349][ T5972] ? __pfx_lock_release+0x10/0x10 [ 83.666364][ T5972] ? __pfx___mod_timer+0x10/0x10 [ 83.666385][ T5972] ? input_handler_for_each_handle+0x3e/0x250 [ 83.666411][ T5972] ? lock_acquire+0x2f/0xb0 [ 83.666427][ T5972] ? __pfx_kd_sound_helper+0x10/0x10 [ 83.666449][ T5972] kd_mksound+0x114/0x130 [ 83.666470][ T5972] ? __pfx_kd_mksound+0x10/0x10 [ 83.666492][ T5972] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 83.666509][ T5972] do_con_write+0x2e6f/0x7bb0 [ 83.666539][ T5972] ? __pfx_do_con_write+0x10/0x10 [ 83.666561][ T5972] ? __pfx___mutex_lock+0x10/0x10 [ 83.666581][ T5972] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 83.666609][ T5972] ? con_write+0x81/0xb0 [ 83.666632][ T5972] con_write+0x23/0xb0 [ 83.666654][ T5972] n_tty_write+0x419/0x1140 [ 83.666676][ T5972] ? __pfx_n_tty_write+0x10/0x10 [ 83.666692][ T5972] ? __virt_addr_valid+0x1a4/0x590 [ 83.666714][ T5972] ? __pfx_woken_wake_function+0x10/0x10 [ 83.666735][ T5972] ? __virt_addr_valid+0x5e/0x590 [ 83.666754][ T5972] ? __phys_addr_symbol+0x30/0x80 [ 83.666773][ T5972] ? __check_object_size+0x488/0x710 [ 83.666791][ T5972] ? __pfx_n_tty_write+0x10/0x10 [ 83.666808][ T5972] file_tty_write.constprop.0+0x506/0x9a0 [ 83.666834][ T5972] vfs_write+0x6b5/0x1140 [ 83.666856][ T5972] ? __pfx_tty_write+0x10/0x10 [ 83.666877][ T5972] ? trace_lock_acquire+0x14a/0x1d0 [ 83.666898][ T5972] ? __pfx_vfs_write+0x10/0x10 [ 83.666920][ T5972] ? __fget_files+0x40/0x3f0 [ 83.666947][ T5972] ksys_write+0x12f/0x260 [ 83.666969][ T5972] ? __pfx_ksys_write+0x10/0x10 [ 83.666992][ T5972] ? rcu_is_watching+0x12/0xc0 [ 83.667011][ T5972] ? rcu_is_watching+0x12/0xc0 [ 83.667030][ T5972] do_syscall_64+0xcd/0x250 [ 83.667052][ T5972] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.667071][ T5972] RIP: 0033:0x7f407037def9 [ 83.667083][ T5972] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 83.667098][ T5972] RSP: 002b:00007f4071123038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 83.667116][ T5972] RAX: ffffffffffffffda RBX: 00007f4070535f80 RCX: 00007f407037def9 [ 83.667127][ T5972] RDX: 0000000000001006 RSI: 0000000020001040 RDI: 0000000000000006 [ 83.667137][ T5972] RBP: 00007f4071123090 R08: 0000000000000000 R09: 0000000000000000 [ 83.667148][ T5972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 83.667158][ T5972] R13: 0000000000000000 R14: 00007f4070535f80 R15: 00007ffd38b25ce8 [ 83.667173][ T5972] [ 83.822537][ T5974] FAULT_INJECTION: forcing a failure. [ 83.822537][ T5974] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 83.822553][ T5974] CPU: 2 UID: 0 PID: 5974 Comm: syz.0.61 Not tainted 6.12.0-rc1-syzkaller-ge32cde8d2bd7 #0 [ 83.822565][ T5974] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 83.822571][ T5974] Call Trace: [ 83.822575][ T5974] [ 83.822579][ T5974] dump_stack_lvl+0x116/0x1f0 [ 83.822601][ T5974] should_fail_ex+0x497/0x5b0 [ 83.822616][ T5974] ? sys_imageblit+0x5bb/0x21d0 [ 83.822630][ T5974] strncpy_from_user+0x3b/0x2a0 [ 83.822643][ T5974] ? rcu_is_watching+0x12/0xc0 [ 83.822656][ T5974] strncpy_from_user_nofault+0x7f/0x180 [ 83.822670][ T5974] bpf_probe_read_compat_str+0xf1/0x170 [ 83.822684][ T5974] bpf_prog_d0e9ac47b081aec3+0x49/0x4b [ 83.822692][ T5974] bpf_trace_run2+0x231/0x590 [ 83.822705][ T5974] ? __pfx_bpf_trace_run2+0x10/0x10 [ 83.822718][ T5974] ? do_raw_spin_unlock+0x172/0x230 [ 83.822730][ T5974] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 83.822741][ T5974] __bpf_trace_timer_start+0xc7/0x100 [ 83.822754][ T5974] ? __pfx___bpf_trace_timer_start+0x10/0x10 [ 83.822766][ T5974] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 83.822777][ T5974] enqueue_timer+0x2b4/0x550 [ 83.822789][ T5974] __mod_timer+0x8d7/0xdc0 [ 83.822804][ T5974] ? __pfx_lock_release+0x10/0x10 [ 83.822812][ T5974] ? __pfx___mod_timer+0x10/0x10 [ 83.822825][ T5974] ? input_handler_for_each_handle+0x3e/0x250 [ 83.822841][ T5974] ? lock_acquire+0x2f/0xb0 [ 83.822850][ T5974] ? __pfx_kd_sound_helper+0x10/0x10 [ 83.822863][ T5974] kd_mksound+0x114/0x130 [ 83.822877][ T5974] ? __pfx_kd_mksound+0x10/0x10 [ 83.822890][ T5974] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 83.822900][ T5974] do_con_write+0x2e6f/0x7bb0 [ 83.822917][ T5974] ? __pfx_do_con_write+0x10/0x10 [ 83.822931][ T5974] ? __pfx___mutex_lock+0x10/0x10 [ 83.822943][ T5974] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 83.822956][ T5974] ? con_write+0x81/0xb0 [ 83.822970][ T5974] con_write+0x23/0xb0 [ 83.822983][ T5974] n_tty_write+0x419/0x1140 [ 83.822995][ T5974] ? __pfx_n_tty_write+0x10/0x10 [ 83.823004][ T5974] ? __virt_addr_valid+0x1a4/0x590 [ 83.823017][ T5974] ? __pfx_woken_wake_function+0x10/0x10 [ 83.823031][ T5974] ? __virt_addr_valid+0x5e/0x590 [ 83.823042][ T5974] ? __phys_addr_symbol+0x30/0x80 [ 83.823053][ T5974] ? __check_object_size+0x488/0x710 [ 83.823082][ T5974] ? __pfx_n_tty_write+0x10/0x10 [ 83.823092][ T5974] file_tty_write.constprop.0+0x506/0x9a0 [ 83.823108][ T5974] vfs_write+0x6b5/0x1140 [ 83.823121][ T5974] ? __pfx_tty_write+0x10/0x10 [ 83.823134][ T5974] ? trace_lock_acquire+0x14a/0x1d0 [ 83.823147][ T5974] ? __pfx_vfs_write+0x10/0x10 [ 83.823160][ T5974] ? __fget_files+0x40/0x3f0 [ 83.823176][ T5974] ksys_write+0x12f/0x260 [ 83.823189][ T5974] ? __pfx_ksys_write+0x10/0x10 [ 83.823202][ T5974] ? rcu_is_watching+0x12/0xc0 [ 83.823213][ T5974] ? rcu_is_watching+0x12/0xc0 [ 83.823224][ T5974] do_syscall_64+0xcd/0x250 [ 83.823237][ T5974] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.823249][ T5974] RIP: 0033:0x7f407037def9 [ 83.823258][ T5974] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 83.823267][ T5974] RSP: 002b:00007f4071123038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 83.823278][ T5974] RAX: ffffffffffffffda RBX: 00007f4070535f80 RCX: 00007f407037def9 [ 83.823285][ T5974] RDX: 0000000000001006 RSI: 0000000020001040 RDI: 0000000000000006 [ 83.823291][ T5974] RBP: 00007f4071123090 R08: 0000000000000000 R09: 0000000000000000 [ 83.823297][ T5974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 83.823303][ T5974] R13: 0000000000000000 R14: 00007f4070535f80 R15: 00007ffd38b25ce8 [ 83.823312][ T5974] [ 83.972637][ T5976] FAULT_INJECTION: forcing a failure. [ 83.972637][ T5976] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 83.972662][ T5976] CPU: 0 UID: 0 PID: 5976 Comm: syz.0.62 Not tainted 6.12.0-rc1-syzkaller-ge32cde8d2bd7 #0 [ 83.972682][ T5976] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 83.972693][ T5976] Call Trace: [ 83.972698][ T5976] [ 83.972704][ T5976] dump_stack_lvl+0x116/0x1f0 [ 83.972730][ T5976] should_fail_ex+0x497/0x5b0 [ 83.972755][ T5976] ? sys_imageblit+0x5bb/0x21d0 [ 83.972779][ T5976] strncpy_from_user+0x3b/0x2a0 [ 83.972801][ T5976] ? rcu_is_watching+0x12/0xc0 [ 83.972821][ T5976] strncpy_from_user_nofault+0x7f/0x180 [ 83.972844][ T5976] bpf_probe_read_compat_str+0xf1/0x170 [ 83.972867][ T5976] bpf_prog_d0e9ac47b081aec3+0x49/0x4b [ 83.972881][ T5976] bpf_trace_run2+0x231/0x590 [ 83.972903][ T5976] ? __pfx_bpf_trace_run2+0x10/0x10 [ 83.972925][ T5976] ? do_raw_spin_unlock+0x172/0x230 [ 83.972944][ T5976] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 83.972964][ T5976] __bpf_trace_timer_start+0xc7/0x100 [ 83.972983][ T5976] ? __pfx___bpf_trace_timer_start+0x10/0x10 [ 83.973004][ T5976] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 83.973023][ T5976] enqueue_timer+0x2b4/0x550 [ 83.973043][ T5976] __mod_timer+0x8d7/0xdc0 [ 83.973066][ T5976] ? __pfx_lock_release+0x10/0x10 [ 83.973081][ T5976] ? __pfx___mod_timer+0x10/0x10 [ 83.973102][ T5976] ? input_handler_for_each_handle+0x3e/0x250 [ 83.973128][ T5976] ? lock_acquire+0x2f/0xb0 [ 83.973144][ T5976] ? __pfx_kd_sound_helper+0x10/0x10 [ 83.973165][ T5976] kd_mksound+0x114/0x130 [ 83.973187][ T5976] ? __pfx_kd_mksound+0x10/0x10 [ 83.973210][ T5976] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 83.973227][ T5976] do_con_write+0x2e6f/0x7bb0 [ 83.973255][ T5976] ? __pfx_do_con_write+0x10/0x10 [ 83.973277][ T5976] ? __pfx___mutex_lock+0x10/0x10 [ 83.973296][ T5976] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 83.973318][ T5976] ? con_write+0x81/0xb0 [ 83.973341][ T5976] con_write+0x23/0xb0 [ 83.973363][ T5976] n_tty_write+0x419/0x1140 [ 83.973385][ T5976] ? __pfx_n_tty_write+0x10/0x10 [ 83.973400][ T5976] ? __virt_addr_valid+0x1a4/0x590 [ 83.973420][ T5976] ? __pfx_woken_wake_function+0x10/0x10 [ 83.973441][ T5976] ? __virt_addr_valid+0x5e/0x590 [ 83.973459][ T5976] ? __phys_addr_symbol+0x30/0x80 [ 83.973501][ T5976] ? __check_object_size+0x488/0x710 [ 83.973520][ T5976] ? __pfx_n_tty_write+0x10/0x10 [ 83.973537][ T5976] file_tty_write.constprop.0+0x506/0x9a0 [ 83.973561][ T5976] vfs_write+0x6b5/0x1140 [ 83.973583][ T5976] ? __pfx_tty_write+0x10/0x10 [ 83.973611][ T5976] ? trace_lock_acquire+0x14a/0x1d0 [ 83.973630][ T5976] ? __pfx_vfs_write+0x10/0x10 [ 83.973653][ T5976] ? __fget_files+0x40/0x3f0 [ 83.973679][ T5976] ksys_write+0x12f/0x260 [ 83.973701][ T5976] ? __pfx_ksys_write+0x10/0x10 [ 83.973724][ T5976] ? rcu_is_watching+0x12/0xc0 [ 83.973744][ T5976] ? rcu_is_watching+0x12/0xc0 [ 83.973764][ T5976] do_syscall_64+0xcd/0x250 [ 83.973785][ T5976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.973804][ T5976] RIP: 0033:0x7f407037def9 [ 83.973817][ T5976] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 83.973833][ T5976] RSP: 002b:00007f4071123038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 83.973850][ T5976] RAX: ffffffffffffffda RBX: 00007f4070535f80 RCX: 00007f407037def9 [ 83.973862][ T5976] RDX: 0000000000001006 RSI: 0000000020001040 RDI: 0000000000000006 [ 83.973872][ T5976] RBP: 00007f4071123090 R08: 0000000000000000 R09: 0000000000000000 [ 83.973882][ T5976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 83.973892][ T5976] R13: 0000000000000000 R14: 00007f4070535f80 R15: 00007ffd38b25ce8 [ 83.973907][ T5976] [ 84.111998][ T5978] FAULT_INJECTION: forcing a failure. [ 84.111998][ T5978] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 84.112014][ T5978] CPU: 0 UID: 0 PID: 5978 Comm: syz.0.63 Not tainted 6.12.0-rc1-syzkaller-ge32cde8d2bd7 #0 [ 84.112026][ T5978] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 84.112032][ T5978] Call Trace: [ 84.112036][ T5978] [ 84.112040][ T5978] dump_stack_lvl+0x116/0x1f0 [ 84.112057][ T5978] should_fail_ex+0x497/0x5b0 [ 84.112072][ T5978] ? sys_imageblit+0x5bb/0x21d0 [ 84.112086][ T5978] strncpy_from_user+0x3b/0x2a0 [ 84.112099][ T5978] ? rcu_is_watching+0x12/0xc0 [ 84.112112][ T5978] strncpy_from_user_nofault+0x7f/0x180 [ 84.112127][ T5978] bpf_probe_read_compat_str+0xf1/0x170 [ 84.112140][ T5978] bpf_prog_d0e9ac47b081aec3+0x49/0x4b [ 84.112148][ T5978] bpf_trace_run2+0x231/0x590 [ 84.112161][ T5978] ? __pfx_bpf_trace_run2+0x10/0x10 [ 84.112174][ T5978] ? do_raw_spin_unlock+0x172/0x230 [ 84.112186][ T5978] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 84.112197][ T5978] __bpf_trace_timer_start+0xc7/0x100 [ 84.112209][ T5978] ? __pfx___bpf_trace_timer_start+0x10/0x10 [ 84.112222][ T5978] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 84.112233][ T5978] enqueue_timer+0x2b4/0x550 [ 84.112245][ T5978] __mod_timer+0x8d7/0xdc0 [ 84.112258][ T5978] ? __pfx_lock_release+0x10/0x10 [ 84.112267][ T5978] ? __pfx___mod_timer+0x10/0x10 [ 84.112280][ T5978] ? input_handler_for_each_handle+0x3e/0x250 [ 84.112296][ T5978] ? lock_acquire+0x2f/0xb0 [ 84.112305][ T5978] ? __pfx_kd_sound_helper+0x10/0x10 [ 84.112318][ T5978] kd_mksound+0x114/0x130 [ 84.112332][ T5978] ? __pfx_kd_mksound+0x10/0x10 [ 84.112345][ T5978] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 84.112355][ T5978] do_con_write+0x2e6f/0x7bb0 [ 84.112372][ T5978] ? __pfx_do_con_write+0x10/0x10 [ 84.112385][ T5978] ? __pfx___mutex_lock+0x10/0x10 [ 84.112397][ T5978] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 84.112410][ T5978] ? con_write+0x81/0xb0 [ 84.112424][ T5978] con_write+0x23/0xb0 [ 84.112437][ T5978] n_tty_write+0x419/0x1140 [ 84.112448][ T5978] ? __pfx_n_tty_write+0x10/0x10 [ 84.112458][ T5978] ? __virt_addr_valid+0x1a4/0x590 [ 84.112470][ T5978] ? __pfx_woken_wake_function+0x10/0x10 [ 84.112483][ T5978] ? __virt_addr_valid+0x5e/0x590 [ 84.112494][ T5978] ? __phys_addr_symbol+0x30/0x80 [ 84.112505][ T5978] ? __check_object_size+0x488/0x710 [ 84.112516][ T5978] ? __pfx_n_tty_write+0x10/0x10 [ 84.112531][ T5978] file_tty_write.constprop.0+0x506/0x9a0 [ 84.112546][ T5978] vfs_write+0x6b5/0x1140 [ 84.112560][ T5978] ? __pfx_tty_write+0x10/0x10 [ 84.112576][ T5978] ? trace_lock_acquire+0x14a/0x1d0 [ 84.112589][ T5978] ? __pfx_vfs_write+0x10/0x10 [ 84.112602][ T5978] ? __fget_files+0x40/0x3f0 [ 84.112617][ T5978] ksys_write+0x12f/0x260 [ 84.112630][ T5978] ? __pfx_ksys_write+0x10/0x10 [ 84.112643][ T5978] ? rcu_is_watching+0x12/0xc0 [ 84.112654][ T5978] ? rcu_is_watching+0x12/0xc0 [ 84.112666][ T5978] do_syscall_64+0xcd/0x250 [ 84.112678][ T5978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.112690][ T5978] RIP: 0033:0x7f407037def9 [ 84.112697][ T5978] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 84.112707][ T5978] RSP: 002b:00007f4071123038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 84.112717][ T5978] RAX: ffffffffffffffda RBX: 00007f4070535f80 RCX: 00007f407037def9 [ 84.112724][ T5978] RDX: 0000000000001006 RSI: 0000000020001040 RDI: 0000000000000006 [ 84.112730][ T5978] RBP: 00007f4071123090 R08: 0000000000000000 R09: 0000000000000000 [ 84.112736][ T5978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 84.112742][ T5978] R13: 0000000000000000 R14: 00007f4070535f80 R15: 00007ffd38b25ce8 [ 84.112750][ T5978] [ 84.263850][ T5980] FAULT_INJECTION: forcing a failure. [ 84.263850][ T5980] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 84.263879][ T5980] CPU: 0 UID: 0 PID: 5980 Comm: syz.0.64 Not tainted 6.12.0-rc1-syzkaller-ge32cde8d2bd7 #0 [ 84.263899][ T5980] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 84.263911][ T5980] Call Trace: [ 84.263917][ T5980] [ 84.263924][ T5980] dump_stack_lvl+0x116/0x1f0 [ 84.263952][ T5980] should_fail_ex+0x497/0x5b0 [ 84.263980][ T5980] ? sys_imageblit+0x5bb/0x21d0 [ 84.264005][ T5980] strncpy_from_user+0x3b/0x2a0 [ 84.264029][ T5980] ? rcu_is_watching+0x12/0xc0 [ 84.264052][ T5980] strncpy_from_user_nofault+0x7f/0x180 [ 84.264077][ T5980] bpf_probe_read_compat_str+0xf1/0x170 [ 84.264102][ T5980] bpf_prog_d0e9ac47b081aec3+0x49/0x4b [ 84.264118][ T5980] bpf_trace_run2+0x231/0x590 [ 84.264141][ T5980] ? __pfx_bpf_trace_run2+0x10/0x10 [ 84.264169][ T5980] ? do_raw_spin_unlock+0x172/0x230 [ 84.264194][ T5980] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 84.264216][ T5980] __bpf_trace_timer_start+0xc7/0x100 [ 84.264239][ T5980] ? __pfx___bpf_trace_timer_start+0x10/0x10 [ 84.264263][ T5980] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 84.264283][ T5980] enqueue_timer+0x2b4/0x550 [ 84.264328][ T5980] __mod_timer+0x8d7/0xdc0 [ 84.264354][ T5980] ? __pfx_lock_release+0x10/0x10 [ 84.264370][ T5980] ? __pfx___mod_timer+0x10/0x10 [ 84.264394][ T5980] ? input_handler_for_each_handle+0x3e/0x250 [ 84.264423][ T5980] ? lock_acquire+0x2f/0xb0 [ 84.264441][ T5980] ? __pfx_kd_sound_helper+0x10/0x10 [ 84.264466][ T5980] kd_mksound+0x114/0x130 [ 84.264490][ T5980] ? __pfx_kd_mksound+0x10/0x10 [ 84.264514][ T5980] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 84.264532][ T5980] do_con_write+0x2e6f/0x7bb0 [ 84.264562][ T5980] ? __pfx_do_con_write+0x10/0x10 [ 84.264592][ T5980] ? __pfx___mutex_lock+0x10/0x10 [ 84.264616][ T5980] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 84.264641][ T5980] ? con_write+0x81/0xb0 [ 84.264668][ T5980] con_write+0x23/0xb0 [ 84.264694][ T5980] n_tty_write+0x419/0x1140 [ 84.264719][ T5980] ? __pfx_n_tty_write+0x10/0x10 [ 84.264737][ T5980] ? __virt_addr_valid+0x1a4/0x590 [ 84.264762][ T5980] ? __pfx_woken_wake_function+0x10/0x10 [ 84.264786][ T5980] ? __virt_addr_valid+0x5e/0x590 [ 84.264808][ T5980] ? __phys_addr_symbol+0x30/0x80 [ 84.264829][ T5980] ? __check_object_size+0x488/0x710 [ 84.264850][ T5980] ? __pfx_n_tty_write+0x10/0x10 [ 84.264869][ T5980] file_tty_write.constprop.0+0x506/0x9a0 [ 84.264898][ T5980] vfs_write+0x6b5/0x1140 [ 84.264924][ T5980] ? __pfx_tty_write+0x10/0x10 [ 84.264948][ T5980] ? trace_lock_acquire+0x14a/0x1d0 [ 84.264971][ T5980] ? __pfx_vfs_write+0x10/0x10 [ 84.264997][ T5980] ? __fget_files+0x40/0x3f0 [ 84.265027][ T5980] ksys_write+0x12f/0x260 [ 84.265052][ T5980] ? __pfx_ksys_write+0x10/0x10 [ 84.265078][ T5980] ? rcu_is_watching+0x12/0xc0 [ 84.265099][ T5980] ? rcu_is_watching+0x12/0xc0 [ 84.265122][ T5980] do_syscall_64+0xcd/0x250 [ 84.265145][ T5980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.265167][ T5980] RIP: 0033:0x7f407037def9 [ 84.265197][ T5980] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 84.265215][ T5980] RSP: 002b:00007f4071123038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 84.265235][ T5980] RAX: ffffffffffffffda RBX: 00007f4070535f80 RCX: 00007f407037def9 [ 84.265248][ T5980] RDX: 0000000000001006 RSI: 0000000020001040 RDI: 0000000000000006 [ 84.265260][ T5980] RBP: 00007f4071123090 R08: 0000000000000000 R09: 0000000000000000 [ 84.265271][ T5980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 84.265282][ T5980] R13: 0000000000000000 R14: 00007f4070535f80 R15: 00007ffd38b25ce8 [ 84.265299][ T5980] [ 84.402906][ T5982] FAULT_INJECTION: forcing a failure. [ 84.402906][ T5982] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 84.402933][ T5982] CPU: 3 UID: 0 PID: 5982 Comm: syz.0.65 Not tainted 6.12.0-rc1-syzkaller-ge32cde8d2bd7 #0 [ 84.402954][ T5982] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 84.402966][ T5982] Call Trace: [ 84.402972][ T5982] [ 84.402979][ T5982] dump_stack_lvl+0x116/0x1f0 [ 84.403007][ T5982] should_fail_ex+0x497/0x5b0 [ 84.403035][ T5982] ? sys_imageblit+0x5bb/0x21d0 [ 84.403060][ T5982] strncpy_from_user+0x3b/0x2a0 [ 84.403083][ T5982] ? rcu_is_watching+0x12/0xc0 [ 84.403106][ T5982] strncpy_from_user_nofault+0x7f/0x180 [ 84.403130][ T5982] bpf_probe_read_compat_str+0xf1/0x170 [ 84.403155][ T5982] bpf_prog_d0e9ac47b081aec3+0x49/0x4b [ 84.403170][ T5982] bpf_trace_run2+0x231/0x590 [ 84.403194][ T5982] ? __pfx_bpf_trace_run2+0x10/0x10 [ 84.403219][ T5982] ? do_raw_spin_unlock+0x172/0x230 [ 84.403240][ T5982] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 84.403264][ T5982] __bpf_trace_timer_start+0xc7/0x100 [ 84.403287][ T5982] ? __pfx___bpf_trace_timer_start+0x10/0x10 [ 84.403309][ T5982] ? _raw_spin_lock_irqsave+0x42/0x60 [ 84.403327][ T5982] ? lock_timer_base+0x5d/0x220 [ 84.403350][ T5982] enqueue_timer+0x2b4/0x550 [ 84.403372][ T5982] __mod_timer+0x8d7/0xdc0 [ 84.403397][ T5982] ? __pfx_lock_release+0x10/0x10 [ 84.403414][ T5982] ? __pfx___mod_timer+0x10/0x10 [ 84.403436][ T5982] ? input_handler_for_each_handle+0x3e/0x250 [ 84.403464][ T5982] ? lock_acquire+0x2f/0xb0 [ 84.403482][ T5982] ? __pfx_kd_sound_helper+0x10/0x10 [ 84.403507][ T5982] kd_mksound+0x114/0x130 [ 84.403532][ T5982] ? __pfx_kd_mksound+0x10/0x10 [ 84.403558][ T5982] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 84.403582][ T5982] do_con_write+0x2e6f/0x7bb0 [ 84.403614][ T5982] ? __pfx_do_con_write+0x10/0x10 [ 84.403639][ T5982] ? __pfx___mutex_lock+0x10/0x10 [ 84.403662][ T5982] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 84.403686][ T5982] ? con_write+0x81/0xb0 [ 84.403713][ T5982] con_write+0x23/0xb0 [ 84.403738][ T5982] n_tty_write+0x419/0x1140 [ 84.403761][ T5982] ? __pfx_n_tty_write+0x10/0x10 [ 84.403778][ T5982] ? __virt_addr_valid+0x1a4/0x590 [ 84.403801][ T5982] ? __pfx_woken_wake_function+0x10/0x10 [ 84.403825][ T5982] ? __virt_addr_valid+0x5e/0x590 [ 84.403846][ T5982] ? __phys_addr_symbol+0x30/0x80 [ 84.403867][ T5982] ? __check_object_size+0x488/0x710 [ 84.403887][ T5982] ? __pfx_n_tty_write+0x10/0x10 [ 84.403906][ T5982] file_tty_write.constprop.0+0x506/0x9a0 [ 84.403935][ T5982] vfs_write+0x6b5/0x1140 [ 84.403960][ T5982] ? __pfx_tty_write+0x10/0x10 [ 84.403984][ T5982] ? trace_lock_acquire+0x14a/0x1d0 [ 84.404007][ T5982] ? __pfx_vfs_write+0x10/0x10 [ 84.404032][ T5982] ? __fget_files+0x40/0x3f0 [ 84.404062][ T5982] ksys_write+0x12f/0x260 [ 84.404086][ T5982] ? __pfx_ksys_write+0x10/0x10 [ 84.404111][ T5982] ? rcu_is_watching+0x12/0xc0 [ 84.404132][ T5982] ? rcu_is_watching+0x12/0xc0 [ 84.404154][ T5982] do_syscall_64+0xcd/0x250 [ 84.404177][ T5982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.404199][ T5982] RIP: 0033:0x7f407037def9 [ 84.404213][ T5982] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 84.404230][ T5982] RSP: 002b:00007f4071123038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 84.404250][ T5982] RAX: ffffffffffffffda RBX: 00007f4070535f80 RCX: 00007f407037def9 [ 84.404262][ T5982] RDX: 0000000000001006 RSI: 0000000020001040 RDI: 0000000000000006 [ 84.404273][ T5982] RBP: 00007f4071123090 R08: 0000000000000000 R09: 0000000000000000 [ 84.404285][ T5982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 84.404296][ T5982] R13: 0000000000000000 R14: 00007f4070535f80 R15: 00007ffd38b25ce8 [ 84.404312][ T5982] [ 84.552509][ T5984] FAULT_INJECTION: forcing a failure. [ 84.552509][ T5984] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 84.552527][ T5984] CPU: 1 UID: 0 PID: 5984 Comm: syz.0.66 Not tainted 6.12.0-rc1-syzkaller-ge32cde8d2bd7 #0 [ 84.552539][ T5984] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 84.552545][ T5984] Call Trace: [ 84.552549][ T5984] [ 84.552553][ T5984] dump_stack_lvl+0x116/0x1f0 [ 84.552570][ T5984] should_fail_ex+0x497/0x5b0 [ 84.552592][ T5984] ? sys_imageblit+0x5bb/0x21d0 [ 84.552606][ T5984] strncpy_from_user+0x3b/0x2a0 [ 84.552619][ T5984] ? rcu_is_watching+0x12/0xc0 [ 84.552632][ T5984] strncpy_from_user_nofault+0x7f/0x180 [ 84.552646][ T5984] bpf_probe_read_compat_str+0xf1/0x170 [ 84.552660][ T5984] bpf_prog_d0e9ac47b081aec3+0x49/0x4b [ 84.552668][ T5984] bpf_trace_run2+0x231/0x590 [ 84.552682][ T5984] ? __pfx_bpf_trace_run2+0x10/0x10 [ 84.552695][ T5984] ? do_raw_spin_unlock+0x172/0x230 [ 84.552707][ T5984] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 84.552719][ T5984] __bpf_trace_timer_start+0xc7/0x100 [ 84.552731][ T5984] ? __pfx___bpf_trace_timer_start+0x10/0x10 [ 84.552743][ T5984] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 84.552754][ T5984] enqueue_timer+0x2b4/0x550 [ 84.552767][ T5984] __mod_timer+0x8d7/0xdc0 [ 84.552780][ T5984] ? __pfx_lock_release+0x10/0x10 [ 84.552789][ T5984] ? __pfx___mod_timer+0x10/0x10 [ 84.552802][ T5984] ? input_handler_for_each_handle+0x3e/0x250 [ 84.552818][ T5984] ? lock_acquire+0x2f/0xb0 [ 84.552826][ T5984] ? __pfx_kd_sound_helper+0x10/0x10 [ 84.552840][ T5984] kd_mksound+0x114/0x130 [ 84.552853][ T5984] ? __pfx_kd_mksound+0x10/0x10 [ 84.552866][ T5984] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 84.552876][ T5984] do_con_write+0x2e6f/0x7bb0 [ 84.552893][ T5984] ? __pfx_do_con_write+0x10/0x10 [ 84.552906][ T5984] ? __pfx___mutex_lock+0x10/0x10 [ 84.552919][ T5984] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 84.552932][ T5984] ? con_write+0x81/0xb0 [ 84.552946][ T5984] con_write+0x23/0xb0 [ 84.552959][ T5984] n_tty_write+0x419/0x1140 [ 84.552971][ T5984] ? __pfx_n_tty_write+0x10/0x10 [ 84.552980][ T5984] ? __virt_addr_valid+0x1a4/0x590 [ 84.552993][ T5984] ? __pfx_woken_wake_function+0x10/0x10 [ 84.553006][ T5984] ? __virt_addr_valid+0x5e/0x590 [ 84.553017][ T5984] ? __phys_addr_symbol+0x30/0x80 [ 84.553028][ T5984] ? __check_object_size+0x488/0x710 [ 84.553040][ T5984] ? __pfx_n_tty_write+0x10/0x10 [ 84.553050][ T5984] file_tty_write.constprop.0+0x506/0x9a0 [ 84.553065][ T5984] vfs_write+0x6b5/0x1140 [ 84.553079][ T5984] ? __pfx_tty_write+0x10/0x10 [ 84.553092][ T5984] ? trace_lock_acquire+0x14a/0x1d0 [ 84.553104][ T5984] ? __pfx_vfs_write+0x10/0x10 [ 84.553118][ T5984] ? __fget_files+0x40/0x3f0 [ 84.553133][ T5984] ksys_write+0x12f/0x260 [ 84.553146][ T5984] ? __pfx_ksys_write+0x10/0x10 [ 84.553159][ T5984] ? rcu_is_watching+0x12/0xc0 [ 84.553170][ T5984] ? rcu_is_watching+0x12/0xc0 [ 84.553182][ T5984] do_syscall_64+0xcd/0x250 [ 84.553195][ T5984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.553207][ T5984] RIP: 0033:0x7f407037def9 [ 84.553215][ T5984] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 84.553224][ T5984] RSP: 002b:00007f4071123038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 84.553235][ T5984] RAX: ffffffffffffffda RBX: 00007f4070535f80 RCX: 00007f407037def9 [ 84.553241][ T5984] RDX: 0000000000001006 RSI: 0000000020001040 RDI: 0000000000000006 [ 84.553247][ T5984] RBP: 00007f4071123090 R08: 0000000000000000 R09: 0000000000000000 [ 84.553254][ T5984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 84.553260][ T5984] R13: 0000000000000000 R14: 00007f4070535f80 R15: 00007ffd38b25ce8 [ 84.553268][ T5984] [ 84.692261][ T5988] FAULT_INJECTION: forcing a failure. [ 84.692261][ T5988] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 84.692277][ T5988] CPU: 3 UID: 0 PID: 5988 Comm: syz.0.67 Not tainted 6.12.0-rc1-syzkaller-ge32cde8d2bd7 #0 [ 84.692288][ T5988] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 84.692295][ T5988] Call Trace: [ 84.692298][ T5988] [ 84.692302][ T5988] dump_stack_lvl+0x116/0x1f0 [ 84.692319][ T5988] should_fail_ex+0x497/0x5b0 [ 84.692333][ T5988] ? sys_imageblit+0x5bb/0x21d0 [ 84.692348][ T5988] strncpy_from_user+0x3b/0x2a0 [ 84.692361][ T5988] ? rcu_is_watching+0x12/0xc0 [ 84.692374][ T5988] strncpy_from_user_nofault+0x7f/0x180 [ 84.692387][ T5988] bpf_probe_read_compat_str+0xf1/0x170 [ 84.692401][ T5988] bpf_prog_d0e9ac47b081aec3+0x49/0x4b [ 84.692409][ T5988] bpf_trace_run2+0x231/0x590 [ 84.692422][ T5988] ? __pfx_bpf_trace_run2+0x10/0x10 [ 84.692435][ T5988] ? do_raw_spin_unlock+0x172/0x230 [ 84.692447][ T5988] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 84.692459][ T5988] __bpf_trace_timer_start+0xc7/0x100 [ 84.692471][ T5988] ? __pfx___bpf_trace_timer_start+0x10/0x10 [ 84.692483][ T5988] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 84.692494][ T5988] enqueue_timer+0x2b4/0x550 [ 84.692507][ T5988] __mod_timer+0x8d7/0xdc0 [ 84.692520][ T5988] ? __pfx_lock_release+0x10/0x10 [ 84.692529][ T5988] ? __pfx___mod_timer+0x10/0x10 [ 84.692542][ T5988] ? input_handler_for_each_handle+0x3e/0x250 [ 84.692557][ T5988] ? lock_acquire+0x2f/0xb0 [ 84.692566][ T5988] ? __pfx_kd_sound_helper+0x10/0x10 [ 84.692579][ T5988] kd_mksound+0x114/0x130 [ 84.692592][ T5988] ? __pfx_kd_mksound+0x10/0x10 [ 84.692612][ T5988] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 84.692622][ T5988] do_con_write+0x2e6f/0x7bb0 [ 84.692639][ T5988] ? __pfx_do_con_write+0x10/0x10 [ 84.692652][ T5988] ? __pfx___mutex_lock+0x10/0x10 [ 84.692664][ T5988] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 84.692677][ T5988] ? con_write+0x81/0xb0 [ 84.692691][ T5988] con_write+0x23/0xb0 [ 84.692704][ T5988] n_tty_write+0x419/0x1140 [ 84.692716][ T5988] ? __pfx_n_tty_write+0x10/0x10 [ 84.692725][ T5988] ? __virt_addr_valid+0x1a4/0x590 [ 84.692738][ T5988] ? __pfx_woken_wake_function+0x10/0x10 [ 84.692750][ T5988] ? __virt_addr_valid+0x5e/0x590 [ 84.692762][ T5988] ? __phys_addr_symbol+0x30/0x80 [ 84.692772][ T5988] ? __check_object_size+0x488/0x710 [ 84.692784][ T5988] ? __pfx_n_tty_write+0x10/0x10 [ 84.692794][ T5988] file_tty_write.constprop.0+0x506/0x9a0 [ 84.692809][ T5988] vfs_write+0x6b5/0x1140 [ 84.692822][ T5988] ? __pfx_tty_write+0x10/0x10 [ 84.692834][ T5988] ? trace_lock_acquire+0x14a/0x1d0 [ 84.692847][ T5988] ? __pfx_vfs_write+0x10/0x10 [ 84.692860][ T5988] ? __fget_files+0x40/0x3f0 [ 84.692875][ T5988] ksys_write+0x12f/0x260 [ 84.692888][ T5988] ? __pfx_ksys_write+0x10/0x10 [ 84.692901][ T5988] ? rcu_is_watching+0x12/0xc0 [ 84.692912][ T5988] ? rcu_is_watching+0x12/0xc0 [ 84.692923][ T5988] do_syscall_64+0xcd/0x250 [ 84.692936][ T5988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.692948][ T5988] RIP: 0033:0x7f407037def9 [ 84.692955][ T5988] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 84.692965][ T5988] RSP: 002b:00007f4071123038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 84.692975][ T5988] RAX: ffffffffffffffda RBX: 00007f4070535f80 RCX: 00007f407037def9 [ 84.692982][ T5988] RDX: 0000000000001006 RSI: 0000000020001040 RDI: 0000000000000006 [ 84.692988][ T5988] RBP: 00007f4071123090 R08: 0000000000000000 R09: 0000000000000000 [ 84.692994][ T5988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 84.693000][ T5988] R13: 0000000000000000 R14: 00007f4070535f80 R15: 00007ffd38b25ce8 [ 84.693008][ T5988] [ 84.842242][ T5990] FAULT_INJECTION: forcing a failure. [ 84.842242][ T5990] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 84.842258][ T5990] CPU: 0 UID: 0 PID: 5990 Comm: syz.0.68 Not tainted 6.12.0-rc1-syzkaller-ge32cde8d2bd7 #0 [ 84.842270][ T5990] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 84.842276][ T5990] Call Trace: [ 84.842280][ T5990] [ 84.842284][ T5990] dump_stack_lvl+0x116/0x1f0 [ 84.842301][ T5990] should_fail_ex+0x497/0x5b0 [ 84.842316][ T5990] ? sys_imageblit+0x5bb/0x21d0 [ 84.842334][ T5990] strncpy_from_user+0x3b/0x2a0 [ 84.842347][ T5990] ? rcu_is_watching+0x12/0xc0 [ 84.842360][ T5990] strncpy_from_user_nofault+0x7f/0x180 [ 84.842374][ T5990] bpf_probe_read_compat_str+0xf1/0x170 [ 84.842388][ T5990] bpf_prog_d0e9ac47b081aec3+0x49/0x4b [ 84.842396][ T5990] bpf_trace_run2+0x231/0x590 [ 84.842410][ T5990] ? __pfx_bpf_trace_run2+0x10/0x10 [ 84.842423][ T5990] ? do_raw_spin_unlock+0x172/0x230 [ 84.842434][ T5990] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 84.842446][ T5990] __bpf_trace_timer_start+0xc7/0x100 [ 84.842458][ T5990] ? __pfx___bpf_trace_timer_start+0x10/0x10 [ 84.842471][ T5990] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 84.842482][ T5990] enqueue_timer+0x2b4/0x550 [ 84.842494][ T5990] __mod_timer+0x8d7/0xdc0 [ 84.842508][ T5990] ? __pfx_lock_release+0x10/0x10 [ 84.842517][ T5990] ? __pfx___mod_timer+0x10/0x10 [ 84.842530][ T5990] ? input_handler_for_each_handle+0x3e/0x250 [ 84.842546][ T5990] ? lock_acquire+0x2f/0xb0 [ 84.842555][ T5990] ? __pfx_kd_sound_helper+0x10/0x10 [ 84.842568][ T5990] kd_mksound+0x114/0x130 [ 84.842588][ T5990] ? __pfx_kd_mksound+0x10/0x10 [ 84.842602][ T5990] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 84.842612][ T5990] do_con_write+0x2e6f/0x7bb0 [ 84.842629][ T5990] ? __pfx_do_con_write+0x10/0x10 [ 84.842642][ T5990] ? __pfx___mutex_lock+0x10/0x10 [ 84.842655][ T5990] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 84.842667][ T5990] ? con_write+0x81/0xb0 [ 84.842681][ T5990] con_write+0x23/0xb0 [ 84.842694][ T5990] n_tty_write+0x419/0x1140 [ 84.842706][ T5990] ? __pfx_n_tty_write+0x10/0x10 [ 84.842716][ T5990] ? __virt_addr_valid+0x1a4/0x590 [ 84.842729][ T5990] ? __pfx_woken_wake_function+0x10/0x10 [ 84.842742][ T5990] ? __virt_addr_valid+0x5e/0x590 [ 84.842753][ T5990] ? __phys_addr_symbol+0x30/0x80 [ 84.842764][ T5990] ? __check_object_size+0x488/0x710 [ 84.842776][ T5990] ? __pfx_n_tty_write+0x10/0x10 [ 84.842786][ T5990] file_tty_write.constprop.0+0x506/0x9a0 [ 84.842801][ T5990] vfs_write+0x6b5/0x1140 [ 84.842814][ T5990] ? __pfx_tty_write+0x10/0x10 [ 84.842827][ T5990] ? trace_lock_acquire+0x14a/0x1d0 [ 84.842839][ T5990] ? __pfx_vfs_write+0x10/0x10 [ 84.842857][ T5990] ? __fget_files+0x40/0x3f0 [ 84.842883][ T5990] ksys_write+0x12f/0x260 [ 84.842906][ T5990] ? __pfx_ksys_write+0x10/0x10 [ 84.842928][ T5990] ? rcu_is_watching+0x12/0xc0 [ 84.842948][ T5990] ? rcu_is_watching+0x12/0xc0 [ 84.842968][ T5990] do_syscall_64+0xcd/0x250 [ 84.842989][ T5990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.843002][ T5990] RIP: 0033:0x7f407037def9 [ 84.843010][ T5990] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 84.843019][ T5990] RSP: 002b:00007f4071123038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 84.843030][ T5990] RAX: ffffffffffffffda RBX: 00007f4070535f80 RCX: 00007f407037def9 [ 84.843037][ T5990] RDX: 0000000000001006 RSI: 0000000020001040 RDI: 0000000000000006 [ 84.843043][ T5990] RBP: 00007f4071123090 R08: 0000000000000000 R09: 0000000000000000 [ 84.843049][ T5990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 84.843055][ T5990] R13: 0000000000000000 R14: 00007f4070535f80 R15: 00007ffd38b25ce8 [ 84.843063][ T5990] [ 84.982467][ T5992] FAULT_INJECTION: forcing a failure. [ 84.982467][ T5992] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 84.982493][ T5992] CPU: 0 UID: 0 PID: 5992 Comm: syz.0.69 Not tainted 6.12.0-rc1-syzkaller-ge32cde8d2bd7 #0 [ 84.982514][ T5992] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 84.982525][ T5992] Call Trace: [ 84.982531][ T5992] [ 84.982538][ T5992] dump_stack_lvl+0x116/0x1f0 [ 84.982566][ T5992] should_fail_ex+0x497/0x5b0 [ 84.982592][ T5992] ? sys_imageblit+0x5bb/0x21d0 [ 84.982617][ T5992] strncpy_from_user+0x3b/0x2a0 [ 84.982641][ T5992] ? rcu_is_watching+0x12/0xc0 [ 84.982664][ T5992] strncpy_from_user_nofault+0x7f/0x180 [ 84.982688][ T5992] bpf_probe_read_compat_str+0xf1/0x170 [ 84.982713][ T5992] bpf_prog_d0e9ac47b081aec3+0x49/0x4b [ 84.982728][ T5992] bpf_trace_run2+0x231/0x590 [ 84.982751][ T5992] ? __pfx_bpf_trace_run2+0x10/0x10 [ 84.982776][ T5992] ? do_raw_spin_unlock+0x172/0x230 [ 84.982797][ T5992] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 84.982819][ T5992] __bpf_trace_timer_start+0xc7/0x100 [ 84.982842][ T5992] ? __pfx___bpf_trace_timer_start+0x10/0x10 [ 84.982865][ T5992] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 84.982886][ T5992] enqueue_timer+0x2b4/0x550 [ 84.982909][ T5992] __mod_timer+0x8d7/0xdc0 [ 84.982935][ T5992] ? __pfx_lock_release+0x10/0x10 [ 84.982951][ T5992] ? __pfx___mod_timer+0x10/0x10 [ 84.982975][ T5992] ? input_handler_for_each_handle+0x3e/0x250 [ 84.983004][ T5992] ? lock_acquire+0x2f/0xb0 [ 84.983020][ T5992] ? __pfx_kd_sound_helper+0x10/0x10 [ 84.983045][ T5992] kd_mksound+0x114/0x130 [ 84.983070][ T5992] ? __pfx_kd_mksound+0x10/0x10 [ 84.983096][ T5992] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 84.983114][ T5992] do_con_write+0x2e6f/0x7bb0 [ 84.983145][ T5992] ? __pfx_do_con_write+0x10/0x10 [ 84.983170][ T5992] ? __pfx___mutex_lock+0x10/0x10 [ 84.983192][ T5992] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 84.983216][ T5992] ? con_write+0x81/0xb0 [ 84.983242][ T5992] con_write+0x23/0xb0 [ 84.983267][ T5992] n_tty_write+0x419/0x1140 [ 84.983290][ T5992] ? __pfx_n_tty_write+0x10/0x10 [ 84.983308][ T5992] ? __virt_addr_valid+0x1a4/0x590 [ 84.983330][ T5992] ? __pfx_woken_wake_function+0x10/0x10 [ 84.983358][ T5992] ? __virt_addr_valid+0x5e/0x590 [ 84.983380][ T5992] ? __phys_addr_symbol+0x30/0x80 [ 84.983400][ T5992] ? __check_object_size+0x488/0x710 [ 84.983421][ T5992] ? __pfx_n_tty_write+0x10/0x10 [ 84.983440][ T5992] file_tty_write.constprop.0+0x506/0x9a0 [ 84.983469][ T5992] vfs_write+0x6b5/0x1140 [ 84.983494][ T5992] ? __pfx_tty_write+0x10/0x10 [ 84.983518][ T5992] ? trace_lock_acquire+0x14a/0x1d0 [ 84.983541][ T5992] ? __pfx_vfs_write+0x10/0x10 [ 84.983566][ T5992] ? __fget_files+0x40/0x3f0 [ 84.983594][ T5992] ksys_write+0x12f/0x260 [ 84.983619][ T5992] ? __pfx_ksys_write+0x10/0x10 [ 84.983645][ T5992] ? rcu_is_watching+0x12/0xc0 [ 84.983666][ T5992] ? rcu_is_watching+0x12/0xc0 [ 84.983687][ T5992] do_syscall_64+0xcd/0x250 [ 84.983711][ T5992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.983732][ T5992] RIP: 0033:0x7f407037def9 [ 84.983745][ T5992] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 84.983762][ T5992] RSP: 002b:00007f4071123038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 84.983781][ T5992] RAX: ffffffffffffffda RBX: 00007f4070535f80 RCX: 00007f407037def9 [ 84.983793][ T5992] RDX: 0000000000001006 RSI: 0000000020001040 RDI: 0000000000000006 [ 84.983804][ T5992] RBP: 00007f4071123090 R08: 0000000000000000 R09: 0000000000000000 [ 84.983815][ T5992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 84.983826][ T5992] R13: 0000000000000000 R14: 00007f4070535f80 R15: 00007ffd38b25ce8 [ 84.983843][ T5992] [ 85.152470][ T5994] FAULT_INJECTION: forcing a failure. [ 85.152470][ T5994] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 85.152496][ T5994] CPU: 1 UID: 0 PID: 5994 Comm: syz.0.70 Not tainted 6.12.0-rc1-syzkaller-ge32cde8d2bd7 #0 [ 85.152517][ T5994] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 85.152529][ T5994] Call Trace: [ 85.152535][ T5994] [ 85.152542][ T5994] dump_stack_lvl+0x116/0x1f0 [ 85.152570][ T5994] should_fail_ex+0x497/0x5b0 [ 85.152598][ T5994] ? sys_imageblit+0x5bb/0x21d0 [ 85.152624][ T5994] strncpy_from_user+0x3b/0x2a0 [ 85.152647][ T5994] ? rcu_is_watching+0x12/0xc0 [ 85.152670][ T5994] strncpy_from_user_nofault+0x7f/0x180 [ 85.152694][ T5994] bpf_probe_read_compat_str+0xf1/0x170 [ 85.152719][ T5994] bpf_prog_d0e9ac47b081aec3+0x49/0x4b [ 85.152734][ T5994] bpf_trace_run2+0x231/0x590 [ 85.152757][ T5994] ? __pfx_bpf_trace_run2+0x10/0x10 [ 85.152782][ T5994] ? do_raw_spin_unlock+0x172/0x230 [ 85.152803][ T5994] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 85.152824][ T5994] __bpf_trace_timer_start+0xc7/0x100 [ 85.152846][ T5994] ? __pfx___bpf_trace_timer_start+0x10/0x10 [ 85.152869][ T5994] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 85.152889][ T5994] enqueue_timer+0x2b4/0x550 [ 85.152911][ T5994] __mod_timer+0x8d7/0xdc0 [ 85.152936][ T5994] ? __pfx_lock_release+0x10/0x10 [ 85.152953][ T5994] ? __pfx___mod_timer+0x10/0x10 [ 85.152976][ T5994] ? input_handler_for_each_handle+0x3e/0x250 [ 85.153005][ T5994] ? lock_acquire+0x2f/0xb0 [ 85.153022][ T5994] ? __pfx_kd_sound_helper+0x10/0x10 [ 85.153047][ T5994] kd_mksound+0x114/0x130 [ 85.153072][ T5994] ? __pfx_kd_mksound+0x10/0x10 [ 85.153097][ T5994] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 85.153115][ T5994] do_con_write+0x2e6f/0x7bb0 [ 85.153146][ T5994] ? __pfx_do_con_write+0x10/0x10 [ 85.153171][ T5994] ? __pfx___mutex_lock+0x10/0x10 [ 85.153193][ T5994] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 85.153216][ T5994] ? con_write+0x81/0xb0 [ 85.153243][ T5994] con_write+0x23/0xb0 [ 85.153267][ T5994] n_tty_write+0x419/0x1140 [ 85.153314][ T5994] ? __pfx_n_tty_write+0x10/0x10 [ 85.153335][ T5994] ? __virt_addr_valid+0x1a4/0x590 [ 85.153358][ T5994] ? __pfx_woken_wake_function+0x10/0x10 [ 85.153381][ T5994] ? __virt_addr_valid+0x5e/0x590 [ 85.153402][ T5994] ? __phys_addr_symbol+0x30/0x80 [ 85.153422][ T5994] ? __check_object_size+0x488/0x710 [ 85.153442][ T5994] ? __pfx_n_tty_write+0x10/0x10 [ 85.153480][ T5994] file_tty_write.constprop.0+0x506/0x9a0 [ 85.153511][ T5994] vfs_write+0x6b5/0x1140 [ 85.153536][ T5994] ? __pfx_tty_write+0x10/0x10 [ 85.153560][ T5994] ? trace_lock_acquire+0x14a/0x1d0 [ 85.153582][ T5994] ? __pfx_vfs_write+0x10/0x10 [ 85.153607][ T5994] ? __fget_files+0x40/0x3f0 [ 85.153636][ T5994] ksys_write+0x12f/0x260 [ 85.153659][ T5994] ? __pfx_ksys_write+0x10/0x10 [ 85.153684][ T5994] ? rcu_is_watching+0x12/0xc0 [ 85.153705][ T5994] ? rcu_is_watching+0x12/0xc0 [ 85.153727][ T5994] do_syscall_64+0xcd/0x250 [ 85.153750][ T5994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.153771][ T5994] RIP: 0033:0x7f407037def9 [ 85.153784][ T5994] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.153801][ T5994] RSP: 002b:00007f4071123038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 85.153820][ T5994] RAX: ffffffffffffffda RBX: 00007f4070535f80 RCX: 00007f407037def9 [ 85.153832][ T5994] RDX: 0000000000001006 RSI: 0000000020001040 RDI: 0000000000000006 [ 85.153844][ T5994] RBP: 00007f4071123090 R08: 0000000000000000 R09: 0000000000000000 [ 85.153855][ T5994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 85.153866][ T5994] R13: 0000000000000000 R14: 00007f4070535f80 R15: 00007ffd38b25ce8 [ 85.153882][ T5994] [ 85.281927][ T5996] FAULT_INJECTION: forcing a failure. [ 85.281927][ T5996] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 85.281944][ T5996] CPU: 0 UID: 0 PID: 5996 Comm: syz.0.71 Not tainted 6.12.0-rc1-syzkaller-ge32cde8d2bd7 #0 [ 85.281956][ T5996] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 85.281962][ T5996] Call Trace: [ 85.281966][ T5996] [ 85.281970][ T5996] dump_stack_lvl+0x116/0x1f0 [ 85.281988][ T5996] should_fail_ex+0x497/0x5b0 [ 85.282003][ T5996] ? sys_imageblit+0x5bb/0x21d0 [ 85.282017][ T5996] strncpy_from_user+0x3b/0x2a0 [ 85.282030][ T5996] ? rcu_is_watching+0x12/0xc0 [ 85.282042][ T5996] strncpy_from_user_nofault+0x7f/0x180 [ 85.282055][ T5996] bpf_probe_read_compat_str+0xf1/0x170 [ 85.282070][ T5996] bpf_prog_d0e9ac47b081aec3+0x49/0x4b [ 85.282078][ T5996] bpf_trace_run2+0x231/0x590 [ 85.282091][ T5996] ? __pfx_bpf_trace_run2+0x10/0x10 [ 85.282104][ T5996] ? do_raw_spin_unlock+0x172/0x230 [ 85.282115][ T5996] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 85.282127][ T5996] __bpf_trace_timer_start+0xc7/0x100 [ 85.282140][ T5996] ? __pfx___bpf_trace_timer_start+0x10/0x10 [ 85.282152][ T5996] ? _raw_spin_lock_irqsave+0x42/0x60 [ 85.282161][ T5996] ? lock_timer_base+0x5d/0x220 [ 85.282173][ T5996] enqueue_timer+0x2b4/0x550 [ 85.282185][ T5996] __mod_timer+0x8d7/0xdc0 [ 85.282199][ T5996] ? __pfx_lock_release+0x10/0x10 [ 85.282208][ T5996] ? __pfx___mod_timer+0x10/0x10 [ 85.282220][ T5996] ? input_handler_for_each_handle+0x3e/0x250 [ 85.282236][ T5996] ? lock_acquire+0x2f/0xb0 [ 85.282245][ T5996] ? __pfx_kd_sound_helper+0x10/0x10 [ 85.282259][ T5996] kd_mksound+0x114/0x130 [ 85.282272][ T5996] ? __pfx_kd_mksound+0x10/0x10 [ 85.282287][ T5996] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 85.282298][ T5996] do_con_write+0x2e6f/0x7bb0 [ 85.282314][ T5996] ? __pfx_do_con_write+0x10/0x10 [ 85.282327][ T5996] ? __pfx___mutex_lock+0x10/0x10 [ 85.282339][ T5996] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 85.282352][ T5996] ? con_write+0x81/0xb0 [ 85.282366][ T5996] con_write+0x23/0xb0 [ 85.282379][ T5996] n_tty_write+0x419/0x1140 [ 85.282391][ T5996] ? __pfx_n_tty_write+0x10/0x10 [ 85.282400][ T5996] ? __virt_addr_valid+0x1a4/0x590 [ 85.282413][ T5996] ? __pfx_woken_wake_function+0x10/0x10 [ 85.282426][ T5996] ? __virt_addr_valid+0x5e/0x590 [ 85.282436][ T5996] ? __phys_addr_symbol+0x30/0x80 [ 85.282469][ T5996] ? __check_object_size+0x488/0x710 [ 85.282496][ T5996] ? __pfx_n_tty_write+0x10/0x10 [ 85.282506][ T5996] file_tty_write.constprop.0+0x506/0x9a0 [ 85.282521][ T5996] vfs_write+0x6b5/0x1140 [ 85.282540][ T5996] ? __pfx_tty_write+0x10/0x10 [ 85.282552][ T5996] ? trace_lock_acquire+0x14a/0x1d0 [ 85.282565][ T5996] ? __pfx_vfs_write+0x10/0x10 [ 85.282578][ T5996] ? __fget_files+0x40/0x3f0 [ 85.282593][ T5996] ksys_write+0x12f/0x260 [ 85.282606][ T5996] ? __pfx_ksys_write+0x10/0x10 [ 85.282619][ T5996] ? rcu_is_watching+0x12/0xc0 [ 85.282631][ T5996] ? rcu_is_watching+0x12/0xc0 [ 85.282642][ T5996] do_syscall_64+0xcd/0x250 [ 85.282655][ T5996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.282667][ T5996] RIP: 0033:0x7f407037def9 [ 85.282675][ T5996] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.282684][ T5996] RSP: 002b:00007f4071123038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 85.282695][ T5996] RAX: ffffffffffffffda RBX: 00007f4070535f80 RCX: 00007f407037def9 [ 85.282702][ T5996] RDX: 0000000000001006 RSI: 0000000020001040 RDI: 0000000000000006 [ 85.282708][ T5996] RBP: 00007f4071123090 R08: 0000000000000000 R09: 0000000000000000 [ 85.282714][ T5996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 85.282720][ T5996] R13: 0000000000000000 R14: 00007f4070535f80 R15: 00007ffd38b25ce8 [ 85.282728][ T5996] [ 85.411985][ T5998] FAULT_INJECTION: forcing a failure. [ 85.411985][ T5998] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 85.412001][ T5998] CPU: 3 UID: 0 PID: 5998 Comm: syz.0.72 Not tainted 6.12.0-rc1-syzkaller-ge32cde8d2bd7 #0 [ 85.412013][ T5998] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 85.412020][ T5998] Call Trace: [ 85.412023][ T5998] [ 85.412027][ T5998] dump_stack_lvl+0x116/0x1f0 [ 85.412044][ T5998] should_fail_ex+0x497/0x5b0 [ 85.412059][ T5998] ? sys_imageblit+0x5bb/0x21d0 [ 85.412073][ T5998] strncpy_from_user+0x3b/0x2a0 [ 85.412086][ T5998] ? rcu_is_watching+0x12/0xc0 [ 85.412115][ T5998] strncpy_from_user_nofault+0x7f/0x180 [ 85.412129][ T5998] bpf_probe_read_compat_str+0xf1/0x170 [ 85.412143][ T5998] bpf_prog_d0e9ac47b081aec3+0x49/0x4b [ 85.412151][ T5998] bpf_trace_run2+0x231/0x590 [ 85.412164][ T5998] ? __pfx_bpf_trace_run2+0x10/0x10 [ 85.412177][ T5998] ? do_raw_spin_unlock+0x172/0x230 [ 85.412189][ T5998] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 85.412201][ T5998] __bpf_trace_timer_start+0xc7/0x100 [ 85.412213][ T5998] ? __pfx___bpf_trace_timer_start+0x10/0x10 [ 85.412225][ T5998] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 85.412236][ T5998] enqueue_timer+0x2b4/0x550 [ 85.412248][ T5998] __mod_timer+0x8d7/0xdc0 [ 85.412262][ T5998] ? __pfx_lock_release+0x10/0x10 [ 85.412271][ T5998] ? __pfx___mod_timer+0x10/0x10 [ 85.412283][ T5998] ? input_handler_for_each_handle+0x3e/0x250 [ 85.412298][ T5998] ? lock_acquire+0x2f/0xb0 [ 85.412307][ T5998] ? __pfx_kd_sound_helper+0x10/0x10 [ 85.412321][ T5998] kd_mksound+0x114/0x130 [ 85.412334][ T5998] ? __pfx_kd_mksound+0x10/0x10 [ 85.412347][ T5998] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 85.412358][ T5998] do_con_write+0x2e6f/0x7bb0 [ 85.412376][ T5998] ? __pfx_do_con_write+0x10/0x10 [ 85.412390][ T5998] ? __pfx___mutex_lock+0x10/0x10 [ 85.412402][ T5998] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 85.412414][ T5998] ? con_write+0x81/0xb0 [ 85.412428][ T5998] con_write+0x23/0xb0 [ 85.412441][ T5998] n_tty_write+0x419/0x1140 [ 85.412454][ T5998] ? __pfx_n_tty_write+0x10/0x10 [ 85.412463][ T5998] ? __virt_addr_valid+0x1a4/0x590 [ 85.412475][ T5998] ? __pfx_woken_wake_function+0x10/0x10 [ 85.412488][ T5998] ? __virt_addr_valid+0x5e/0x590 [ 85.412499][ T5998] ? __phys_addr_symbol+0x30/0x80 [ 85.412510][ T5998] ? __check_object_size+0x488/0x710 [ 85.412522][ T5998] ? __pfx_n_tty_write+0x10/0x10 [ 85.412532][ T5998] file_tty_write.constprop.0+0x506/0x9a0 [ 85.412546][ T5998] vfs_write+0x6b5/0x1140 [ 85.412560][ T5998] ? __pfx_tty_write+0x10/0x10 [ 85.412572][ T5998] ? trace_lock_acquire+0x14a/0x1d0 [ 85.412584][ T5998] ? __pfx_vfs_write+0x10/0x10 [ 85.412598][ T5998] ? __fget_files+0x40/0x3f0 [ 85.412613][ T5998] ksys_write+0x12f/0x260 [ 85.412630][ T5998] ? __pfx_ksys_write+0x10/0x10 [ 85.412644][ T5998] ? rcu_is_watching+0x12/0xc0 [ 85.412655][ T5998] ? rcu_is_watching+0x12/0xc0 [ 85.412666][ T5998] do_syscall_64+0xcd/0x250 [ 85.412679][ T5998] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.412691][ T5998] RIP: 0033:0x7f407037def9 [ 85.412698][ T5998] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.412708][ T5998] RSP: 002b:00007f4071123038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 85.412719][ T5998] RAX: ffffffffffffffda RBX: 00007f4070535f80 RCX: 00007f407037def9 [ 85.412726][ T5998] RDX: 0000000000001006 RSI: 0000000020001040 RDI: 0000000000000006 [ 85.412733][ T5998] RBP: 00007f4071123090 R08: 0000000000000000 R09: 0000000000000000 [ 85.412739][ T5998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 85.412745][ T5998] R13: 0000000000000000 R14: 00007f4070535f80 R15: 00007ffd38b25ce8 [ 85.412753][ T5998] [ 85.543594][ T6000] FAULT_INJECTION: forcing a failure. [ 85.543594][ T6000] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 85.543619][ T6000] CPU: 0 UID: 0 PID: 6000 Comm: syz.0.73 Not tainted 6.12.0-rc1-syzkaller-ge32cde8d2bd7 #0 [ 85.543638][ T6000] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 85.543648][ T6000] Call Trace: [ 85.543653][ T6000] [ 85.543660][ T6000] dump_stack_lvl+0x116/0x1f0 [ 85.543685][ T6000] should_fail_ex+0x497/0x5b0 [ 85.543710][ T6000] ? sys_imageblit+0x5bb/0x21d0 [ 85.543734][ T6000] strncpy_from_user+0x3b/0x2a0 [ 85.543758][ T6000] ? rcu_is_watching+0x12/0xc0 [ 85.543778][ T6000] strncpy_from_user_nofault+0x7f/0x180 [ 85.543800][ T6000] bpf_probe_read_compat_str+0xf1/0x170 [ 85.543822][ T6000] bpf_prog_d0e9ac47b081aec3+0x49/0x4b [ 85.543835][ T6000] bpf_trace_run2+0x231/0x590 [ 85.543856][ T6000] ? __pfx_bpf_trace_run2+0x10/0x10 [ 85.543878][ T6000] ? do_raw_spin_unlock+0x172/0x230 [ 85.543897][ T6000] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 85.543935][ T6000] __bpf_trace_timer_start+0xc7/0x100 [ 85.543955][ T6000] ? __pfx___bpf_trace_timer_start+0x10/0x10 [ 85.543975][ T6000] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 85.544006][ T6000] enqueue_timer+0x2b4/0x550 [ 85.544027][ T6000] __mod_timer+0x8d7/0xdc0 [ 85.544050][ T6000] ? __pfx_lock_release+0x10/0x10 [ 85.544065][ T6000] ? __pfx___mod_timer+0x10/0x10 [ 85.544089][ T6000] ? input_handler_for_each_handle+0x3e/0x250 [ 85.544113][ T6000] ? lock_acquire+0x2f/0xb0 [ 85.544128][ T6000] ? __pfx_kd_sound_helper+0x10/0x10 [ 85.544148][ T6000] kd_mksound+0x114/0x130 [ 85.544169][ T6000] ? __pfx_kd_mksound+0x10/0x10 [ 85.544192][ T6000] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 85.544209][ T6000] do_con_write+0x2e6f/0x7bb0 [ 85.544236][ T6000] ? __pfx_do_con_write+0x10/0x10 [ 85.544261][ T6000] ? __pfx___mutex_lock+0x10/0x10 [ 85.544281][ T6000] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 85.544302][ T6000] ? con_write+0x81/0xb0 [ 85.544324][ T6000] con_write+0x23/0xb0 [ 85.544350][ T6000] n_tty_write+0x419/0x1140 [ 85.544371][ T6000] ? __pfx_n_tty_write+0x10/0x10 [ 85.544388][ T6000] ? __virt_addr_valid+0x1a4/0x590 [ 85.544411][ T6000] ? __pfx_woken_wake_function+0x10/0x10 [ 85.544432][ T6000] ? __virt_addr_valid+0x5e/0x590 [ 85.544450][ T6000] ? __phys_addr_symbol+0x30/0x80 [ 85.544468][ T6000] ? __check_object_size+0x488/0x710 [ 85.544485][ T6000] ? __pfx_n_tty_write+0x10/0x10 [ 85.544501][ T6000] file_tty_write.constprop.0+0x506/0x9a0 [ 85.544526][ T6000] vfs_write+0x6b5/0x1140 [ 85.544548][ T6000] ? __pfx_tty_write+0x10/0x10 [ 85.544568][ T6000] ? trace_lock_acquire+0x14a/0x1d0 [ 85.544588][ T6000] ? __pfx_vfs_write+0x10/0x10 [ 85.544610][ T6000] ? __fget_files+0x40/0x3f0 [ 85.544635][ T6000] ksys_write+0x12f/0x260 [ 85.544656][ T6000] ? __pfx_ksys_write+0x10/0x10 [ 85.544678][ T6000] ? rcu_is_watching+0x12/0xc0 [ 85.544696][ T6000] ? rcu_is_watching+0x12/0xc0 [ 85.544713][ T6000] do_syscall_64+0xcd/0x250 [ 85.544733][ T6000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.544751][ T6000] RIP: 0033:0x7f407037def9 [ 85.544764][ T6000] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.544779][ T6000] RSP: 002b:00007f4071123038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 85.544796][ T6000] RAX: ffffffffffffffda RBX: 00007f4070535f80 RCX: 00007f407037def9 [ 85.544807][ T6000] RDX: 0000000000001006 RSI: 0000000020001040 RDI: 0000000000000006 [ 85.544817][ T6000] RBP: 00007f4071123090 R08: 0000000000000000 R09: 0000000000000000 [ 85.544827][ T6000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 85.544837][ T6000] R13: 0000000000000000 R14: 00007f4070535f80 R15: 00007ffd38b25ce8 [ 85.544852][ T6000] [ 85.693077][ T6002] FAULT_INJECTION: forcing a failure. [ 85.693077][ T6002] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 85.693102][ T6002] CPU: 0 UID: 0 PID: 6002 Comm: syz.0.74 Not tainted 6.12.0-rc1-syzkaller-ge32cde8d2bd7 #0 [ 85.693121][ T6002] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 85.693131][ T6002] Call Trace: [ 85.693137][ T6002] [ 85.693144][ T6002] dump_stack_lvl+0x116/0x1f0 [ 85.693171][ T6002] should_fail_ex+0x497/0x5b0 [ 85.693196][ T6002] ? sys_imageblit+0x5bb/0x21d0 [ 85.693219][ T6002] strncpy_from_user+0x3b/0x2a0 [ 85.693240][ T6002] ? rcu_is_watching+0x12/0xc0 [ 85.693264][ T6002] strncpy_from_user_nofault+0x7f/0x180 [ 85.693284][ T6002] bpf_probe_read_compat_str+0xf1/0x170 [ 85.693306][ T6002] bpf_prog_d0e9ac47b081aec3+0x49/0x4b [ 85.693318][ T6002] bpf_trace_run2+0x231/0x590 [ 85.693345][ T6002] ? __pfx_bpf_trace_run2+0x10/0x10 [ 85.693366][ T6002] ? do_raw_spin_unlock+0x172/0x230 [ 85.693386][ T6002] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 85.693406][ T6002] __bpf_trace_timer_start+0xc7/0x100 [ 85.693426][ T6002] ? __pfx___bpf_trace_timer_start+0x10/0x10 [ 85.693450][ T6002] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 85.693491][ T6002] enqueue_timer+0x2b4/0x550 [ 85.693511][ T6002] __mod_timer+0x8d7/0xdc0 [ 85.693534][ T6002] ? __pfx_lock_release+0x10/0x10 [ 85.693549][ T6002] ? __pfx___mod_timer+0x10/0x10 [ 85.693570][ T6002] ? input_handler_for_each_handle+0x3e/0x250 [ 85.693595][ T6002] ? lock_acquire+0x2f/0xb0 [ 85.693614][ T6002] ? __pfx_kd_sound_helper+0x10/0x10 [ 85.693636][ T6002] kd_mksound+0x114/0x130 [ 85.693656][ T6002] ? __pfx_kd_mksound+0x10/0x10 [ 85.693678][ T6002] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 85.693694][ T6002] do_con_write+0x2e6f/0x7bb0 [ 85.693722][ T6002] ? __pfx_do_con_write+0x10/0x10 [ 85.693745][ T6002] ? __pfx___mutex_lock+0x10/0x10 [ 85.693764][ T6002] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 85.693788][ T6002] ? con_write+0x81/0xb0 [ 85.693810][ T6002] con_write+0x23/0xb0 [ 85.693832][ T6002] n_tty_write+0x419/0x1140 [ 85.693852][ T6002] ? __pfx_n_tty_write+0x10/0x10 [ 85.693867][ T6002] ? __virt_addr_valid+0x1a4/0x590 [ 85.693887][ T6002] ? __pfx_woken_wake_function+0x10/0x10 [ 85.693909][ T6002] ? __virt_addr_valid+0x5e/0x590 [ 85.693927][ T6002] ? __phys_addr_symbol+0x30/0x80 [ 85.693945][ T6002] ? __check_object_size+0x488/0x710 [ 85.693963][ T6002] ? __pfx_n_tty_write+0x10/0x10 [ 85.693979][ T6002] file_tty_write.constprop.0+0x506/0x9a0 [ 85.694004][ T6002] vfs_write+0x6b5/0x1140 [ 85.694025][ T6002] ? __pfx_tty_write+0x10/0x10 [ 85.694046][ T6002] ? trace_lock_acquire+0x14a/0x1d0 [ 85.694066][ T6002] ? __pfx_vfs_write+0x10/0x10 [ 85.694088][ T6002] ? __fget_files+0x40/0x3f0 [ 85.694114][ T6002] ksys_write+0x12f/0x260 [ 85.694136][ T6002] ? __pfx_ksys_write+0x10/0x10 [ 85.694159][ T6002] ? rcu_is_watching+0x12/0xc0 [ 85.694177][ T6002] ? rcu_is_watching+0x12/0xc0 [ 85.694200][ T6002] do_syscall_64+0xcd/0x250 [ 85.694220][ T6002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.694239][ T6002] RIP: 0033:0x7f407037def9 [ 85.694252][ T6002] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.694267][ T6002] RSP: 002b:00007f4071123038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 85.694284][ T6002] RAX: ffffffffffffffda RBX: 00007f4070535f80 RCX: 00007f407037def9 [ 85.694295][ T6002] RDX: 0000000000001006 RSI: 0000000020001040 RDI: 0000000000000006 [ 85.694306][ T6002] RBP: 00007f4071123090 R08: 0000000000000000 R09: 0000000000000000 [ 85.694317][ T6002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 85.694327][ T6002] R13: 0000000000000000 R14: 00007f4070535f80 R15: 00007ffd38b25ce8 [ 85.694346][ T6002] [ 85.862352][ T6004] FAULT_INJECTION: forcing a failure. [ 85.862352][ T6004] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 85.862377][ T6004] CPU: 2 UID: 0 PID: 6004 Comm: syz.0.75 Not tainted 6.12.0-rc1-syzkaller-ge32cde8d2bd7 #0 [ 85.862398][ T6004] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 85.862409][ T6004] Call Trace: [ 85.862416][ T6004] [ 85.862422][ T6004] dump_stack_lvl+0x116/0x1f0 [ 85.862451][ T6004] should_fail_ex+0x497/0x5b0 [ 85.862478][ T6004] ? sys_imageblit+0x5bb/0x21d0 [ 85.862504][ T6004] strncpy_from_user+0x3b/0x2a0 [ 85.862527][ T6004] ? rcu_is_watching+0x12/0xc0 [ 85.862550][ T6004] strncpy_from_user_nofault+0x7f/0x180 [ 85.862574][ T6004] bpf_probe_read_compat_str+0xf1/0x170 [ 85.862599][ T6004] bpf_prog_d0e9ac47b081aec3+0x49/0x4b [ 85.862613][ T6004] bpf_trace_run2+0x231/0x590 [ 85.862637][ T6004] ? __pfx_bpf_trace_run2+0x10/0x10 [ 85.862661][ T6004] ? do_raw_spin_unlock+0x172/0x230 [ 85.862683][ T6004] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 85.862705][ T6004] __bpf_trace_timer_start+0xc7/0x100 [ 85.862727][ T6004] ? __pfx___bpf_trace_timer_start+0x10/0x10 [ 85.862750][ T6004] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 85.862770][ T6004] enqueue_timer+0x2b4/0x550 [ 85.862792][ T6004] __mod_timer+0x8d7/0xdc0 [ 85.862818][ T6004] ? __pfx_lock_release+0x10/0x10 [ 85.862834][ T6004] ? __pfx___mod_timer+0x10/0x10 [ 85.862857][ T6004] ? input_handler_for_each_handle+0x3e/0x250 [ 85.862885][ T6004] ? lock_acquire+0x2f/0xb0 [ 85.862903][ T6004] ? __pfx_kd_sound_helper+0x10/0x10 [ 85.862927][ T6004] kd_mksound+0x114/0x130 [ 85.862951][ T6004] ? __pfx_kd_mksound+0x10/0x10 [ 85.862976][ T6004] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 85.862995][ T6004] do_con_write+0x2e6f/0x7bb0 [ 85.863027][ T6004] ? __pfx_do_con_write+0x10/0x10 [ 85.863051][ T6004] ? __pfx___mutex_lock+0x10/0x10 [ 85.863073][ T6004] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 85.863098][ T6004] ? con_write+0x81/0xb0 [ 85.863125][ T6004] con_write+0x23/0xb0 [ 85.863149][ T6004] n_tty_write+0x419/0x1140 [ 85.863172][ T6004] ? __pfx_n_tty_write+0x10/0x10 [ 85.863190][ T6004] ? __virt_addr_valid+0x1a4/0x590 [ 85.863212][ T6004] ? __pfx_woken_wake_function+0x10/0x10 [ 85.863236][ T6004] ? __virt_addr_valid+0x5e/0x590 [ 85.863257][ T6004] ? __phys_addr_symbol+0x30/0x80 [ 85.863277][ T6004] ? __check_object_size+0x488/0x710 [ 85.863298][ T6004] ? __pfx_n_tty_write+0x10/0x10 [ 85.863321][ T6004] file_tty_write.constprop.0+0x506/0x9a0 [ 85.863349][ T6004] vfs_write+0x6b5/0x1140 [ 85.863375][ T6004] ? __pfx_tty_write+0x10/0x10 [ 85.863398][ T6004] ? trace_lock_acquire+0x14a/0x1d0 [ 85.863421][ T6004] ? __pfx_vfs_write+0x10/0x10 [ 85.863445][ T6004] ? __fget_files+0x40/0x3f0 [ 85.863474][ T6004] ksys_write+0x12f/0x260 [ 85.863499][ T6004] ? __pfx_ksys_write+0x10/0x10 [ 85.863523][ T6004] ? rcu_is_watching+0x12/0xc0 [ 85.863544][ T6004] ? rcu_is_watching+0x12/0xc0 [ 85.863565][ T6004] do_syscall_64+0xcd/0x250 [ 85.863588][ T6004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.863613][ T6004] RIP: 0033:0x7f407037def9 [ 85.863626][ T6004] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.863643][ T6004] RSP: 002b:00007f4071123038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 85.863665][ T6004] RAX: ffffffffffffffda RBX: 00007f4070535f80 RCX: 00007f407037def9 [ 85.863681][ T6004] RDX: 0000000000001006 RSI: 0000000020001040 RDI: 0000000000000006 [ 85.863695][ T6004] RBP: 00007f4071123090 R08: 0000000000000000 R09: 0000000000000000 [ 85.863707][ T6004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 85.863718][ T6004] R13: 0000000000000000 R14: 00007f4070535f80 R15: 00007ffd38b25ce8 [ 85.863734][ T6004] [ 86.031069][ T6006] FAULT_INJECTION: forcing a failure. [ 86.031069][ T6006] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 86.031087][ T6006] CPU: 3 UID: 0 PID: 6006 Comm: syz.0.76 Not tainted 6.12.0-rc1-syzkaller-ge32cde8d2bd7 #0 [ 86.031099][ T6006] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 86.031106][ T6006] Call Trace: [ 86.031110][ T6006] [ 86.031113][ T6006] dump_stack_lvl+0x116/0x1f0 [ 86.031131][ T6006] should_fail_ex+0x497/0x5b0 [ 86.031147][ T6006] strncpy_from_user+0x3b/0x2a0 [ 86.031161][ T6006] ? rcu_is_watching+0x12/0xc0 [ 86.031173][ T6006] strncpy_from_user_nofault+0x7f/0x180 [ 86.031188][ T6006] bpf_probe_read_compat_str+0xf1/0x170 [ 86.031201][ T6006] bpf_prog_d0e9ac47b081aec3+0x49/0x4b [ 86.031210][ T6006] bpf_trace_run2+0x231/0x590 [ 86.031222][ T6006] ? __pfx_bpf_trace_run2+0x10/0x10 [ 86.031235][ T6006] ? do_raw_spin_unlock+0x172/0x230 [ 86.031248][ T6006] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 86.031264][ T6006] __bpf_trace_timer_start+0xc7/0x100 [ 86.031276][ T6006] ? __pfx___bpf_trace_timer_start+0x10/0x10 [ 86.031289][ T6006] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 86.031300][ T6006] enqueue_timer+0x2b4/0x550 [ 86.031316][ T6006] __mod_timer+0x8d7/0xdc0 [ 86.031330][ T6006] ? __pfx_lock_release+0x10/0x10 [ 86.031340][ T6006] ? __pfx___mod_timer+0x10/0x10 [ 86.031353][ T6006] ? input_handler_for_each_handle+0x3e/0x250 [ 86.031368][ T6006] ? lock_acquire+0x2f/0xb0 [ 86.031377][ T6006] ? __pfx_kd_sound_helper+0x10/0x10 [ 86.031391][ T6006] kd_mksound+0x114/0x130 [ 86.031405][ T6006] ? __pfx_kd_mksound+0x10/0x10 [ 86.031418][ T6006] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 86.031428][ T6006] do_con_write+0x2e6f/0x7bb0 [ 86.031445][ T6006] ? __pfx_do_con_write+0x10/0x10 [ 86.031459][ T6006] ? __pfx___mutex_lock+0x10/0x10 [ 86.031471][ T6006] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 86.031484][ T6006] ? con_write+0x81/0xb0 [ 86.031498][ T6006] con_write+0x23/0xb0 [ 86.031511][ T6006] n_tty_write+0x419/0x1140 [ 86.031523][ T6006] ? __pfx_n_tty_write+0x10/0x10 [ 86.031532][ T6006] ? __virt_addr_valid+0x1a4/0x590 [ 86.031545][ T6006] ? __pfx_woken_wake_function+0x10/0x10 [ 86.031558][ T6006] ? __virt_addr_valid+0x5e/0x590 [ 86.031569][ T6006] ? __phys_addr_symbol+0x30/0x80 [ 86.031580][ T6006] ? __check_object_size+0x488/0x710 [ 86.031592][ T6006] ? __pfx_n_tty_write+0x10/0x10 [ 86.031602][ T6006] file_tty_write.constprop.0+0x506/0x9a0 [ 86.031617][ T6006] vfs_write+0x6b5/0x1140 [ 86.031631][ T6006] ? __pfx_tty_write+0x10/0x10 [ 86.031643][ T6006] ? trace_lock_acquire+0x14a/0x1d0 [ 86.031655][ T6006] ? __pfx_vfs_write+0x10/0x10 [ 86.031702][ T6006] ? __fget_files+0x40/0x3f0 [ 86.031718][ T6006] ksys_write+0x12f/0x260 [ 86.031731][ T6006] ? __pfx_ksys_write+0x10/0x10 [ 86.031745][ T6006] ? rcu_is_watching+0x12/0xc0 [ 86.031756][ T6006] ? rcu_is_watching+0x12/0xc0 [ 86.031767][ T6006] do_syscall_64+0xcd/0x250 [ 86.031780][ T6006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.031791][ T6006] RIP: 0033:0x7f407037def9 [ 86.031800][ T6006] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.031809][ T6006] RSP: 002b:00007f4071123038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 86.031820][ T6006] RAX: ffffffffffffffda RBX: 00007f4070535f80 RCX: 00007f407037def9 [ 86.031826][ T6006] RDX: 0000000000001006 RSI: 0000000020001040 RDI: 0000000000000006 [ 86.031832][ T6006] RBP: 00007f4071123090 R08: 0000000000000000 R09: 0000000000000000 [ 86.031838][ T6006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 86.031844][ T6006] R13: 0000000000000000 R14: 00007f4070535f80 R15: 00007ffd38b25ce8 [ 86.031853][ T6006] [ 86.181194][ T6008] FAULT_INJECTION: forcing a failure. [ 86.181194][ T6008] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 86.181212][ T6008] CPU: 3 UID: 0 PID: 6008 Comm: syz.0.77 Not tainted 6.12.0-rc1-syzkaller-ge32cde8d2bd7 #0 [ 86.181224][ T6008] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 86.181230][ T6008] Call Trace: [ 86.181234][ T6008] [ 86.181238][ T6008] dump_stack_lvl+0x116/0x1f0 [ 86.181255][ T6008] should_fail_ex+0x497/0x5b0 [ 86.181270][ T6008] ? lock_release+0x4f6/0x6f0 [ 86.181280][ T6008] strncpy_from_user+0x3b/0x2a0 [ 86.181292][ T6008] ? rcu_is_watching+0x12/0xc0 [ 86.181304][ T6008] strncpy_from_user_nofault+0x7f/0x180 [ 86.181318][ T6008] bpf_probe_read_compat_str+0xf1/0x170 [ 86.181332][ T6008] bpf_prog_d0e9ac47b081aec3+0x49/0x4b [ 86.181340][ T6008] bpf_trace_run2+0x231/0x590 [ 86.181353][ T6008] ? __pfx_bpf_trace_run2+0x10/0x10 [ 86.181371][ T6008] ? do_raw_spin_unlock+0x172/0x230 [ 86.181382][ T6008] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 86.181394][ T6008] __bpf_trace_timer_start+0xc7/0x100 [ 86.181406][ T6008] ? __pfx___bpf_trace_timer_start+0x10/0x10 [ 86.181418][ T6008] ? _raw_spin_lock_irqsave+0x42/0x60 [ 86.181428][ T6008] ? lock_timer_base+0x5d/0x220 [ 86.181440][ T6008] enqueue_timer+0x2b4/0x550 [ 86.181474][ T6008] __mod_timer+0x8d7/0xdc0 [ 86.181495][ T6008] ? __pfx_lock_release+0x10/0x10 [ 86.181503][ T6008] ? __pfx___mod_timer+0x10/0x10 [ 86.181516][ T6008] ? input_handler_for_each_handle+0x3e/0x250 [ 86.181531][ T6008] ? lock_acquire+0x2f/0xb0 [ 86.181541][ T6008] ? __pfx_kd_sound_helper+0x10/0x10 [ 86.181554][ T6008] kd_mksound+0x114/0x130 [ 86.181567][ T6008] ? __pfx_kd_mksound+0x10/0x10 [ 86.181580][ T6008] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 86.181591][ T6008] do_con_write+0x2e6f/0x7bb0 [ 86.181607][ T6008] ? __pfx_do_con_write+0x10/0x10 [ 86.181621][ T6008] ? __pfx___mutex_lock+0x10/0x10 [ 86.181633][ T6008] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 86.181645][ T6008] ? con_write+0x81/0xb0 [ 86.181659][ T6008] con_write+0x23/0xb0 [ 86.181672][ T6008] n_tty_write+0x419/0x1140 [ 86.181684][ T6008] ? __pfx_n_tty_write+0x10/0x10 [ 86.181694][ T6008] ? __virt_addr_valid+0x1a4/0x590 [ 86.181706][ T6008] ? __pfx_woken_wake_function+0x10/0x10 [ 86.181719][ T6008] ? __virt_addr_valid+0x5e/0x590 [ 86.181730][ T6008] ? __phys_addr_symbol+0x30/0x80 [ 86.181741][ T6008] ? __check_object_size+0x488/0x710 [ 86.181752][ T6008] ? __pfx_n_tty_write+0x10/0x10 [ 86.181762][ T6008] file_tty_write.constprop.0+0x506/0x9a0 [ 86.181777][ T6008] vfs_write+0x6b5/0x1140 [ 86.181791][ T6008] ? __pfx_tty_write+0x10/0x10 [ 86.181804][ T6008] ? trace_lock_acquire+0x14a/0x1d0 [ 86.181816][ T6008] ? __pfx_vfs_write+0x10/0x10 [ 86.181829][ T6008] ? __fget_files+0x40/0x3f0 [ 86.181844][ T6008] ksys_write+0x12f/0x260 [ 86.181857][ T6008] ? __pfx_ksys_write+0x10/0x10 [ 86.181870][ T6008] ? rcu_is_watching+0x12/0xc0 [ 86.181881][ T6008] ? rcu_is_watching+0x12/0xc0 [ 86.181892][ T6008] do_syscall_64+0xcd/0x250 [ 86.181905][ T6008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.181917][ T6008] RIP: 0033:0x7f407037def9 [ 86.181928][ T6008] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.181938][ T6008] RSP: 002b:00007f4071123038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 86.181949][ T6008] RAX: ffffffffffffffda RBX: 00007f4070535f80 RCX: 00007f407037def9 [ 86.181955][ T6008] RDX: 0000000000001006 RSI: 0000000020001040 RDI: 0000000000000006 [ 86.181961][ T6008] RBP: 00007f4071123090 R08: 0000000000000000 R09: 0000000000000000 [ 86.181967][ T6008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 86.181973][ T6008] R13: 0000000000000000 R14: 00007f4070535f80 R15: 00007ffd38b25ce8 [ 86.181981][ T6008] [ 86.343566][ T6010] FAULT_INJECTION: forcing a failure. [ 86.343566][ T6010] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 86.343586][ T6010] CPU: 0 UID: 0 PID: 6010 Comm: syz.0.78 Not tainted 6.12.0-rc1-syzkaller-ge32cde8d2bd7 #0 [ 86.343598][ T6010] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 86.343604][ T6010] Call Trace: [ 86.343608][ T6010] [ 86.343612][ T6010] dump_stack_lvl+0x116/0x1f0 [ 86.343628][ T6010] should_fail_ex+0x497/0x5b0 [ 86.343644][ T6010] ? sys_imageblit+0x5bb/0x21d0 [ 86.343658][ T6010] strncpy_from_user+0x3b/0x2a0 [ 86.343670][ T6010] ? rcu_is_watching+0x12/0xc0 [ 86.343683][ T6010] strncpy_from_user_nofault+0x7f/0x180 [ 86.343696][ T6010] bpf_probe_read_compat_str+0xf1/0x170 [ 86.343710][ T6010] bpf_prog_d0e9ac47b081aec3+0x49/0x4b [ 86.343718][ T6010] bpf_trace_run2+0x231/0x590 [ 86.343731][ T6010] ? __pfx_bpf_trace_run2+0x10/0x10 [ 86.343744][ T6010] ? do_raw_spin_unlock+0x172/0x230 [ 86.343756][ T6010] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 86.343768][ T6010] __bpf_trace_timer_start+0xc7/0x100 [ 86.343780][ T6010] ? __pfx___bpf_trace_timer_start+0x10/0x10 [ 86.343793][ T6010] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 86.343804][ T6010] enqueue_timer+0x2b4/0x550 [ 86.343816][ T6010] __mod_timer+0x8d7/0xdc0 [ 86.343829][ T6010] ? __pfx_lock_release+0x10/0x10 [ 86.343838][ T6010] ? __pfx___mod_timer+0x10/0x10 [ 86.343851][ T6010] ? input_handler_for_each_handle+0x3e/0x250 [ 86.343867][ T6010] ? lock_acquire+0x2f/0xb0 [ 86.343875][ T6010] ? __pfx_kd_sound_helper+0x10/0x10 [ 86.343889][ T6010] kd_mksound+0x114/0x130 [ 86.343902][ T6010] ? __pfx_kd_mksound+0x10/0x10 [ 86.343915][ T6010] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 86.343926][ T6010] do_con_write+0x2e6f/0x7bb0 [ 86.343942][ T6010] ? __pfx_do_con_write+0x10/0x10 [ 86.343956][ T6010] ? __pfx___mutex_lock+0x10/0x10 [ 86.343968][ T6010] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 86.343980][ T6010] ? con_write+0x81/0xb0 [ 86.344008][ T6010] con_write+0x23/0xb0 [ 86.344023][ T6010] n_tty_write+0x419/0x1140 [ 86.344035][ T6010] ? __pfx_n_tty_write+0x10/0x10 [ 86.344044][ T6010] ? __virt_addr_valid+0x1a4/0x590 [ 86.344057][ T6010] ? __pfx_woken_wake_function+0x10/0x10 [ 86.344069][ T6010] ? __virt_addr_valid+0x5e/0x590 [ 86.344081][ T6010] ? __phys_addr_symbol+0x30/0x80 [ 86.344091][ T6010] ? __check_object_size+0x488/0x710 [ 86.344103][ T6010] ? __pfx_n_tty_write+0x10/0x10 [ 86.344112][ T6010] file_tty_write.constprop.0+0x506/0x9a0 [ 86.344128][ T6010] vfs_write+0x6b5/0x1140 [ 86.344142][ T6010] ? __pfx_tty_write+0x10/0x10 [ 86.344154][ T6010] ? trace_lock_acquire+0x14a/0x1d0 [ 86.344166][ T6010] ? __pfx_vfs_write+0x10/0x10 [ 86.344180][ T6010] ? __fget_files+0x40/0x3f0 [ 86.344195][ T6010] ksys_write+0x12f/0x260 [ 86.344208][ T6010] ? __pfx_ksys_write+0x10/0x10 [ 86.344221][ T6010] ? rcu_is_watching+0x12/0xc0 [ 86.344232][ T6010] ? rcu_is_watching+0x12/0xc0 [ 86.344243][ T6010] do_syscall_64+0xcd/0x250 [ 86.344256][ T6010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.344268][ T6010] RIP: 0033:0x7f407037def9 [ 86.344276][ T6010] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.344286][ T6010] RSP: 002b:00007f4071123038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 86.344296][ T6010] RAX: ffffffffffffffda RBX: 00007f4070535f80 RCX: 00007f407037def9 [ 86.344303][ T6010] RDX: 0000000000001006 RSI: 0000000020001040 RDI: 0000000000000006 [ 86.344309][ T6010] RBP: 00007f4071123090 R08: 0000000000000000 R09: 0000000000000000 [ 86.344315][ T6010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 86.344321][ T6010] R13: 0000000000000000 R14: 00007f4070535f80 R15: 00007ffd38b25ce8 [ 86.344329][ T6010] [ 86.472226][ T6012] FAULT_INJECTION: forcing a failure. [ 86.472226][ T6012] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 86.472242][ T6012] CPU: 0 UID: 0 PID: 6012 Comm: syz.0.79 Not tainted 6.12.0-rc1-syzkaller-ge32cde8d2bd7 #0 [ 86.472254][ T6012] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 86.472260][ T6012] Call Trace: [ 86.472264][ T6012] [ 86.472268][ T6012] dump_stack_lvl+0x116/0x1f0 [ 86.472294][ T6012] should_fail_ex+0x497/0x5b0 [ 86.472310][ T6012] ? sys_imageblit+0x5bb/0x21d0 [ 86.472324][ T6012] strncpy_from_user+0x3b/0x2a0 [ 86.472337][ T6012] ? rcu_is_watching+0x12/0xc0 [ 86.472350][ T6012] strncpy_from_user_nofault+0x7f/0x180 [ 86.472364][ T6012] bpf_probe_read_compat_str+0xf1/0x170 [ 86.472378][ T6012] bpf_prog_d0e9ac47b081aec3+0x49/0x4b [ 86.472386][ T6012] bpf_trace_run2+0x231/0x590 [ 86.472399][ T6012] ? __pfx_bpf_trace_run2+0x10/0x10 [ 86.472412][ T6012] ? do_raw_spin_unlock+0x172/0x230 [ 86.472424][ T6012] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 86.472436][ T6012] __bpf_trace_timer_start+0xc7/0x100 [ 86.472448][ T6012] ? __pfx___bpf_trace_timer_start+0x10/0x10 [ 86.472460][ T6012] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 86.472471][ T6012] enqueue_timer+0x2b4/0x550 [ 86.472483][ T6012] __mod_timer+0x8d7/0xdc0 [ 86.472497][ T6012] ? __pfx_lock_release+0x10/0x10 [ 86.472506][ T6012] ? __pfx___mod_timer+0x10/0x10 [ 86.472518][ T6012] ? input_handler_for_each_handle+0x3e/0x250 [ 86.472537][ T6012] ? lock_acquire+0x2f/0xb0 [ 86.472546][ T6012] ? __pfx_kd_sound_helper+0x10/0x10 [ 86.472560][ T6012] kd_mksound+0x114/0x130 [ 86.472573][ T6012] ? __pfx_kd_mksound+0x10/0x10 [ 86.472586][ T6012] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 86.472596][ T6012] do_con_write+0x2e6f/0x7bb0 [ 86.472612][ T6012] ? __pfx_do_con_write+0x10/0x10 [ 86.472626][ T6012] ? __pfx___mutex_lock+0x10/0x10 [ 86.472638][ T6012] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 86.472651][ T6012] ? con_write+0x81/0xb0 [ 86.472665][ T6012] con_write+0x23/0xb0 [ 86.472678][ T6012] n_tty_write+0x419/0x1140 [ 86.472690][ T6012] ? __pfx_n_tty_write+0x10/0x10 [ 86.472699][ T6012] ? __virt_addr_valid+0x1a4/0x590 [ 86.472712][ T6012] ? __pfx_woken_wake_function+0x10/0x10 [ 86.472725][ T6012] ? __virt_addr_valid+0x5e/0x590 [ 86.472736][ T6012] ? __phys_addr_symbol+0x30/0x80 [ 86.472746][ T6012] ? __check_object_size+0x488/0x710 [ 86.472758][ T6012] ? __pfx_n_tty_write+0x10/0x10 [ 86.472768][ T6012] file_tty_write.constprop.0+0x506/0x9a0 [ 86.472783][ T6012] vfs_write+0x6b5/0x1140 [ 86.472797][ T6012] ? __pfx_tty_write+0x10/0x10 [ 86.472809][ T6012] ? trace_lock_acquire+0x14a/0x1d0 [ 86.472821][ T6012] ? __pfx_vfs_write+0x10/0x10 [ 86.472835][ T6012] ? __fget_files+0x40/0x3f0 [ 86.472850][ T6012] ksys_write+0x12f/0x260 [ 86.472863][ T6012] ? __pfx_ksys_write+0x10/0x10 [ 86.472876][ T6012] ? rcu_is_watching+0x12/0xc0 [ 86.472887][ T6012] ? rcu_is_watching+0x12/0xc0 [ 86.472898][ T6012] do_syscall_64+0xcd/0x250 [ 86.472910][ T6012] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.472922][ T6012] RIP: 0033:0x7f407037def9 [ 86.472929][ T6012] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.472938][ T6012] RSP: 002b:00007f4071123038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 86.472948][ T6012] RAX: ffffffffffffffda RBX: 00007f4070535f80 RCX: 00007f407037def9 [ 86.472955][ T6012] RDX: 0000000000001006 RSI: 0000000020001040 RDI: 0000000000000006 [ 86.472961][ T6012] RBP: 00007f4071123090 R08: 0000000000000000 R09: 0000000000000000 [ 86.472967][ T6012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 86.472973][ T6012] R13: 0000000000000000 R14: 00007f4070535f80 R15: 00007ffd38b25ce8 [ 86.472981][ T6012] [ 86.622682][ T6014] FAULT_INJECTION: forcing a failure. [ 86.622682][ T6014] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 86.622698][ T6014] CPU: 3 UID: 0 PID: 6014 Comm: syz.0.80 Not tainted 6.12.0-rc1-syzkaller-ge32cde8d2bd7 #0 [ 86.622710][ T6014] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 86.622716][ T6014] Call Trace: [ 86.622720][ T6014] [ 86.622724][ T6014] dump_stack_lvl+0x116/0x1f0 [ 86.622742][ T6014] should_fail_ex+0x497/0x5b0 [ 86.622757][ T6014] ? sys_imageblit+0x5bb/0x21d0 [ 86.622770][ T6014] strncpy_from_user+0x3b/0x2a0 [ 86.622783][ T6014] ? rcu_is_watching+0x12/0xc0 [ 86.622796][ T6014] strncpy_from_user_nofault+0x7f/0x180 [ 86.622810][ T6014] bpf_probe_read_compat_str+0xf1/0x170 [ 86.622823][ T6014] bpf_prog_d0e9ac47b081aec3+0x49/0x4b [ 86.622832][ T6014] bpf_trace_run2+0x231/0x590 [ 86.622845][ T6014] ? __pfx_bpf_trace_run2+0x10/0x10 [ 86.622858][ T6014] ? do_raw_spin_unlock+0x172/0x230 [ 86.622869][ T6014] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 86.622882][ T6014] __bpf_trace_timer_start+0xc7/0x100 [ 86.622895][ T6014] ? __pfx___bpf_trace_timer_start+0x10/0x10 [ 86.622907][ T6014] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 86.622918][ T6014] enqueue_timer+0x2b4/0x550 [ 86.622930][ T6014] __mod_timer+0x8d7/0xdc0 [ 86.622943][ T6014] ? __pfx_lock_release+0x10/0x10 [ 86.622952][ T6014] ? __pfx___mod_timer+0x10/0x10 [ 86.622965][ T6014] ? input_handler_for_each_handle+0x3e/0x250 [ 86.622980][ T6014] ? lock_acquire+0x2f/0xb0 [ 86.622989][ T6014] ? __pfx_kd_sound_helper+0x10/0x10 [ 86.623002][ T6014] kd_mksound+0x114/0x130 [ 86.623016][ T6014] ? __pfx_kd_mksound+0x10/0x10 [ 86.623029][ T6014] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 86.623039][ T6014] do_con_write+0x2e6f/0x7bb0 [ 86.623055][ T6014] ? __pfx_do_con_write+0x10/0x10 [ 86.623068][ T6014] ? __pfx___mutex_lock+0x10/0x10 [ 86.623081][ T6014] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 86.623093][ T6014] ? con_write+0x81/0xb0 [ 86.623107][ T6014] con_write+0x23/0xb0 [ 86.623120][ T6014] n_tty_write+0x419/0x1140 [ 86.623132][ T6014] ? __pfx_n_tty_write+0x10/0x10 [ 86.623142][ T6014] ? __virt_addr_valid+0x1a4/0x590 [ 86.623154][ T6014] ? __pfx_woken_wake_function+0x10/0x10 [ 86.623167][ T6014] ? __virt_addr_valid+0x5e/0x590 [ 86.623178][ T6014] ? __phys_addr_symbol+0x30/0x80 [ 86.623189][ T6014] ? __check_object_size+0x488/0x710 [ 86.623200][ T6014] ? __pfx_n_tty_write+0x10/0x10 [ 86.623210][ T6014] file_tty_write.constprop.0+0x506/0x9a0 [ 86.623225][ T6014] vfs_write+0x6b5/0x1140 [ 86.623238][ T6014] ? __pfx_tty_write+0x10/0x10 [ 86.623250][ T6014] ? trace_lock_acquire+0x14a/0x1d0 [ 86.623262][ T6014] ? __pfx_vfs_write+0x10/0x10 [ 86.623276][ T6014] ? __fget_files+0x40/0x3f0 [ 86.623291][ T6014] ksys_write+0x12f/0x260 [ 86.623303][ T6014] ? __pfx_ksys_write+0x10/0x10 [ 86.623322][ T6014] ? rcu_is_watching+0x12/0xc0 [ 86.623334][ T6014] ? rcu_is_watching+0x12/0xc0 [ 86.623345][ T6014] do_syscall_64+0xcd/0x250 [ 86.623357][ T6014] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.623368][ T6014] RIP: 0033:0x7f407037def9 [ 86.623376][ T6014] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.623385][ T6014] RSP: 002b:00007f4071123038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 86.623396][ T6014] RAX: ffffffffffffffda RBX: 00007f4070535f80 RCX: 00007f407037def9 [ 86.623403][ T6014] RDX: 0000000000001006 RSI: 0000000020001040 RDI: 0000000000000006 [ 86.623409][ T6014] RBP: 00007f4071123090 R08: 0000000000000000 R09: 0000000000000000 [ 86.623415][ T6014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 86.623421][ T6014] R13: 0000000000000000 R14: 00007f4070535f80 R15: 00007ffd38b25ce8 [ 86.623430][ T6014] [ 86.753709][ T6016] FAULT_INJECTION: forcing a failure. [ 86.753709][ T6016] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 86.753734][ T6016] CPU: 0 UID: 0 PID: 6016 Comm: syz.0.81 Not tainted 6.12.0-rc1-syzkaller-ge32cde8d2bd7 #0 [ 86.753753][ T6016] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 86.753768][ T6016] Call Trace: [ 86.753773][ T6016]