last executing test programs: 6m27.102850297s ago: executing program 1 (id=2296): kill$auto(0x0, 0x21) madvise$auto(0x0, 0x200007, 0x8) socket(0x2, 0x2, 0x0) sendmsg$auto_BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, 0x0, 0x20000000) syz_genetlink_get_family_id$auto_tcp_metrics(0x0, 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0xf, 0x29f, 0x100, 0x83, 0x101, 0x6, 0x2}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x76c5, 0x8, 0x100000000}}) io_uring_register$auto(0x2, 0x11, &(0x7f0000000180), 0x83) 6m26.747244803s ago: executing program 1 (id=2298): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_MAC802154_HWSIM_CMD_GET_RADIO(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001200)=ANY=[@ANYBLOB='X-\x00\x00', @ANYRES16, @ANYBLOB="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"], 0x2d58}, 0x1, 0x0, 0x0, 0x48000}, 0x4000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0xa, 0x3, 0x3b) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "abe6de3d6468fe8000"}, 0x55) 6m26.41746706s ago: executing program 1 (id=2300): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) setsockopt$auto(0x3, 0x1, 0x29, 0x0, 0x28) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 6m26.015636835s ago: executing program 1 (id=2304): close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x3, 0x6) lsm_list_modules$auto(0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x401c5820, 0x0) mkdir$auto(0x0, 0x353) 6m23.697412588s ago: executing program 1 (id=2311): socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) socket(0x11, 0x80003, 0x300) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) 6m22.369307788s ago: executing program 1 (id=2317): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) r0 = socket(0x29, 0x5, 0x0) write$auto(0x3, 0x0, 0xfffffdef) sendmmsg$auto(r0, 0x0, 0x9a6, 0x3ec0) sendmsg$auto_NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0x24, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@NL80211_ATTR_FILS_NONCES={0x4}, @NL80211_ATTR_EPCS={0x4}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0xfd}]}, 0x24}, 0x1, 0x0, 0x0, 0x110}, 0x40000) write$auto(0x3, 0x0, 0x100082) semctl$auto(0x1ff, 0x2, 0x13, 0x1) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) 6m21.4002198s ago: executing program 32 (id=2317): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) r0 = socket(0x29, 0x5, 0x0) write$auto(0x3, 0x0, 0xfffffdef) sendmmsg$auto(r0, 0x0, 0x9a6, 0x3ec0) sendmsg$auto_NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0x24, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@NL80211_ATTR_FILS_NONCES={0x4}, @NL80211_ATTR_EPCS={0x4}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0xfd}]}, 0x24}, 0x1, 0x0, 0x0, 0x110}, 0x40000) write$auto(0x3, 0x0, 0x100082) semctl$auto(0x1ff, 0x2, 0x13, 0x1) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) 4m17.559962503s ago: executing program 0 (id=2767): mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000001c, 0x5, 0x100000000, 0x400000000009, 0x3fffffffff) setreuid$auto(0x0, 0x5) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x20) writev$auto(r0, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer\x00', 0x2, 0x0) 4m14.35606853s ago: executing program 0 (id=2775): socket$nl_generic(0x10, 0x3, 0x10) openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000400), 0x80001, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0xa, 0x2, 0x88) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x9a6, 0x0) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r0, @new_prog_fd=0x4, 0x4, @old_prog_fd=r0}, 0xa3) 4m14.068826228s ago: executing program 0 (id=2778): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="1103"], 0x14}}, 0x10040) read$auto(r0, 0x0, 0x80000001) open(0x0, 0x2a4c0, 0x20) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x8000, 0x0) mmap$auto(0x0, 0x2020009, 0x126, 0xf8, 0xffffffffffffffff, 0x8000) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto(r2, 0xc0045540, r1) 4m13.812634204s ago: executing program 0 (id=2780): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/kvm_amd/parameters/pause_filter_thresh\x00', 0x200, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0) write$auto_ocfs2_control_fops_stack_user(r1, &(0x7f0000003900)='\t', 0x1) r2 = socket(0xa, 0x1, 0x0) recvmmsg$auto(r2, &(0x7f0000000280)={{0x0, 0x1ff, &(0x7f0000000040)={0x0, 0xd}, 0x9, 0x0, 0x80000001, 0x2}, 0x1}, 0x80000000, 0x7956, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000140), r3) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x14, r4, 0x1, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20004041}, 0x4004040) read$auto(r0, 0x0, 0x1) 4m12.450482045s ago: executing program 0 (id=2784): close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x3, 0x6) lsm_list_modules$auto(0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x8643, 0x15e) ioctl$sock_SIOCGIFINDEX(r0, 0x401c5820, 0x0) rename$auto(&(0x7f0000000480)='./file0\x00', 0x0) 4m11.395662409s ago: executing program 0 (id=2789): r0 = gettid() mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x1, 0x106) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) connect$auto(0x4, 0x0, 0x10) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) kill$auto(r0, 0x11) 3m55.781353788s ago: executing program 33 (id=2789): r0 = gettid() mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x1, 0x106) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) connect$auto(0x4, 0x0, 0x10) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) kill$auto(r0, 0x11) 12.178184924s ago: executing program 2 (id=3834): mmap$auto(0x0, 0x400008, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x0, 0x0) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) r0 = open(0x0, 0x163340, 0x2a) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0xc0400, 0x0) r1 = open(&(0x7f0000000100)='.\x00', 0x40000, 0x0) getdents64$auto(r1, 0x0, 0x400) ioctl$auto(0x3, 0xc0285628, r0) 10.692625187s ago: executing program 2 (id=3840): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) timerfd_create$auto_CLOCK_MONOTONIC(0x1, 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) 6.310271174s ago: executing program 4 (id=3865): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x7, 0x2e, 0x4909b6fb, 0x1ffde, 0x7, 0x6, 0x2, 0x9, 0x3, 0x6, 0x4, 0xb4, 0x9, 0x2, 0x10000, 0x80, 0x7, 0x0, 0x7, 0x2000, 0x200, 0x0, 0x84}, 0x1fe, 0x200d) poll$auto(&(0x7f0000000040)={0xffffffffffffffff, 0x7, 0x8}, 0x80, 0x400400) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030004020000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a0001000000000000000000060007000a00000008000200", @ANYRES32=0x0, @ANYBLOB="080140"], 0x68}, 0x1, 0x0, 0x0, 0x18a64d47ddeca1f0}, 0x40090) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 5.982662286s ago: executing program 4 (id=3866): mmap$auto(0x9, 0x20007, 0xffffffffffff7fff, 0xeb1, 0xfffffffffffffffd, 0x40000007ffe) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0xa, 0x1, 0x84) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) eventfd$auto(0x8e) openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, &(0x7f0000000000), 0x22a40, 0x0) socket(0x2, 0x801, 0x100) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/vkms/drm/card1/card1-Virtual-1/status\x00', 0x20b42, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) 5.94385925s ago: executing program 3 (id=3867): mmap$auto(0x0, 0x20009, 0x5, 0xeb2, 0x8, 0x1008000) r0 = socket(0x10, 0x2, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid_for_children\x00') sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) recvmmsg$auto(r0, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty12\x00', 0x800, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="180027"], 0x1ac}, 0x1, 0x0, 0x0, 0x4000044}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc8}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x1f00) 5.672693478s ago: executing program 4 (id=3868): ioctl$auto_TIOCSTI2(0xffffffffffffffff, 0x5412, &(0x7f0000000140)) mlockall$auto(0x7) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/cifs/rdma_readwrite_threshold\x00', 0x20000, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio1\x00', 0x20b42, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x3) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r0 = socket(0xa, 0x1, 0x84) getsockopt$auto(r0, 0x0, 0x53, 0x0, &(0x7f0000000040)=0x28) 5.550451149s ago: executing program 3 (id=3869): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/fs/cifs/LookupCacheEnabled\x00', 0x48041, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f00000001c0), 0x80100, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, 0x38) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto(0x3, 0xae41, r2) ioctl$auto_KVM_CREATE_VM(r0, 0x8004ae98, 0x1000000) 5.434590717s ago: executing program 5 (id=3870): socket(0x10, 0x2, 0x4) mmap$auto(0x0, 0x2000d, 0x4000000200df, 0xeb1, 0x404, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01eb"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) bpf$auto(0x3, &(0x7f00000001c0)=@task_fd_query={0x0, 0xffffffffffffffff, 0x8, 0x10017, 0x8020000000a, 0x2, 0x5f, 0x20000000000803, 0x3}, 0x6f0) r0 = setfsuid$auto(0xee00) r1 = setfsuid$auto(0xee01) setresuid$auto(r0, r1, r0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 5.363008306s ago: executing program 2 (id=3871): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) getcwd$auto(0x0, 0xfffffffeffffffff) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x8, 0x2000000000002) r0 = open(&(0x7f0000000000)='./bus\x00', 0x12ba7e, 0x45) fanotify_mark$auto(0x0, 0x451, 0xa, r0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) inotify_init1$auto(0x3000000000000) inotify_add_watch$auto(0x4, 0x0, 0xe6e) open(&(0x7f0000000000)='./file0\x00', 0x4242, 0x0) 5.291778911s ago: executing program 4 (id=3872): mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @dev={0xac, 0x14, 0x14, 0xd}}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x101, 0x0, 0x5, 0x9ad}, 0x5}, 0x5, 0x20000000) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x1000, 0x0) r1 = gettid() readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) tkill$auto(r1, 0x7) mmap$auto(0x7ffffffd, 0x400004, 0x7, 0x9b72, r0, 0x5) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x2202, 0x0) readv$auto(0x3, 0x0, 0x1) 4.990277024s ago: executing program 3 (id=3873): openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x10b142, 0x0) ioctl$auto_MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201, 0x0) mmap$auto(0x0, 0xb991, 0x5, 0x19, 0xffffffffffffffff, 0x2) clock_adjtime$auto(0x0, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x0, 0x0) r0 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) read$auto_rng_chrdev_ops_core(r0, &(0x7f0000000040)=""/4096, 0xfffffe82) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) 4.930969066s ago: executing program 5 (id=3874): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0) openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, &(0x7f0000000040), 0x2482, 0x0) socket(0x10, 0x2, 0x6) openat$auto_proc_environ_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/environ\x00', 0x2000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/devices/virtual/net/rose9/ifindex\x00', 0x2000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/007/001\x00', 0xa901, 0x0) ioctl$auto_USBDEVFS_SUBMITURB32(r0, 0x802c550a, &(0x7f0000000300)=ANY=[@ANYBLOB="020000060000e6ff0400000001004000"]) ioctl$auto(r0, 0x4008550c, r0) io_uring_setup$auto(0x6, 0x0) 4.246141109s ago: executing program 2 (id=3875): prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$auto(0xfffffdfe, 0x2, 0x4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000180), 0x2a80, 0x0) openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket(0x11, 0x3, 0x9) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0xd4, 0x3, 0x6, 0x0, 0x10000, 0x1, 0x2, {0x2100000000, 0x10000}, 0x3, 0x6, 0x1, 0x1008000, 0x0, 0x80000004, 0x83, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x2}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x4, 0x15f4da0a, 0x1, 0x3, 0x1000000, 0x80000001, 0x7, 0x6d3c, 0x5, 0x2]}, 0x0) 4.089720963s ago: executing program 4 (id=3876): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) r0 = socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0x2, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) setsockopt$auto(0x3, 0x10000000084, 0xd, 0x0, 0x4) 3.904924584s ago: executing program 3 (id=3877): write$auto(0xffffffffffffffff, 0x0, 0x81) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) r1 = open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x80842, 0x20) read$auto(r1, 0x0, 0x1) ioctl$auto_IOCTL_VMCI_VERSION2(r0, 0x7a7, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, 0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) adjtimex$auto(0x0) ioctl$auto_IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, 0x0) close_range$auto(0x2, 0x8, 0x0) 3.209586515s ago: executing program 5 (id=3878): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) r0 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r0, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f000000c180), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_NAME_TABLE_GET(r1, &(0x7f000000ca40)={0x0, 0x0, &(0x7f000000ca00)={&(0x7f000000c1c0)={0x14, r2, 0x35712d2af9a9dbe3, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x841}, 0x4) 2.722786202s ago: executing program 3 (id=3879): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, 0x0, 0x80) madvise$auto(0x200000, 0xffffffffffff0005, 0x17) ioctl$auto(0xffffffffffffffff, 0x40084d02, 0xffffffffffffffff) statx$auto(0xffffffffffffffff, 0x0, 0x2, 0x4, 0x0) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000050}, 0x20008000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x8000000000000000, 0x15) madvise$auto(0x0, 0x1010001, 0x100000003) 1.220916666s ago: executing program 3 (id=3880): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) timerfd_create$auto_CLOCK_MONOTONIC(0x1, 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) 1.219877119s ago: executing program 5 (id=3888): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x3) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x2) landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x400, 0x7}, 0x9, 0x0) landlock_restrict_self$auto(r2, 0x0) landlock_restrict_self$auto(r1, 0x0) kill$auto(r0, 0x21) 1.21959948s ago: executing program 4 (id=3881): prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) sendto$auto(0xffffffffffffffff, 0x0, 0x401, 0x101, 0x0, 0x1c) sendmsg$auto_OVS_VPORT_CMD_SET(0xffffffffffffffff, 0x0, 0x20000000) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r0, 0x0, 0x1f40) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x6a1, 0x1) 1.219490886s ago: executing program 2 (id=3882): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) io_uring_setup$auto(0x5, &(0x7f0000000080)={0x200, 0x2, 0xe06, 0xffff0000, 0xfffffe01, 0xffffffff, r0, [0xb795, 0x7], {0xffff8001, 0x7, 0x1000, 0x6, 0x8, 0x70, 0x8, 0xc723, 0xffffffffffffffff}, {0x4, 0x81, 0x4, 0x8001, 0x7, 0x8, 0x9, 0x3, 0x4}}) write$auto(0x3, 0x0, 0xfdef) mmap$auto(0x0, 0x88b, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual/block/ram12/queue/read_ahead_kb\x00', 0x80000, 0x0) read$auto(r1, 0x0, 0x20) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_async\x00', 0x183941, 0x0) unshare$auto(0x40000080) 891.987905ms ago: executing program 5 (id=3883): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) open(&(0x7f00000001c0)='./cgroup\x00', 0x0, 0x6f) r0 = open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) r1 = socket(0xa, 0x2, 0x88) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r4, r3, 0x4, 0x1ff, r1, @relative_id=0x13, 0xe600}, 0xf) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r0, 0x0, 0x3}, 0xc) bpf$auto(0x3, &(0x7f00000001c0)=@bpf_attr_11={0x5, 0x81, 0xfffffffc, 0x161f, 0xf870e9f, 0xa4ea, 0x7}, 0x9) 3.195337ms ago: executing program 5 (id=3884): r0 = open(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x64) fchdir$auto(r0) mkdir$auto(&(0x7f0000000480)='./cgroup\x00', 0x6) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/cgroup.type\x00', 0x103042, 0x0) rmdir$auto(&(0x7f0000000300)='./cgroup\x00') openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) socket(0x2, 0x1, 0x0) epoll_create$auto(0x4) mq_open$auto(0x0, 0x5, 0x3, &(0x7f0000000040)={0xe7a2, 0x0, 0x1, 0xa}) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) 0s ago: executing program 2 (id=3885): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x40000002c55, 0x0) recvmsg$auto(0x4, 0x0, 0x33c) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)={0x14, r1, 0xb01, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000049}, 0x4000080) kernel console output (not intermixed with test programs): 4.627930][T14563] do_syscall_64+0xcd/0x230 [ 684.627965][T14563] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 684.627988][T14563] RIP: 0033:0x7fe51578e169 [ 684.628005][T14563] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 684.628027][T14563] RSP: 002b:00007fe51659d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 684.628048][T14563] RAX: ffffffffffffffda RBX: 00007fe5159b5fa0 RCX: 00007fe51578e169 [ 684.628069][T14563] RDX: 000000000cefbce6 RSI: 0000000000000000 RDI: 0000000000000005 [ 684.628083][T14563] RBP: 00007fe515810a68 R08: 0000000000000000 R09: 0000000000000000 [ 684.628097][T14563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 684.628110][T14563] R13: 0000000000000000 R14: 00007fe5159b5fa0 R15: 00007ffd2db97208 [ 684.628156][T14563] [ 685.902313][T14591] serio: Serial port ptm0 [ 686.194695][T14592] FAULT_INJECTION: forcing a failure. [ 686.194695][T14592] name failslab, interval 1, probability 0, space 0, times 0 [ 686.456852][T14592] CPU: 1 UID: 0 PID: 14592 Comm: syz.4.3071 Not tainted 6.15.0-rc2-syzkaller-00278-gfc96b232f8e7 #0 PREEMPT(full) [ 686.456888][T14592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 686.456903][T14592] Call Trace: [ 686.456910][T14592] [ 686.456919][T14592] dump_stack_lvl+0x16c/0x1f0 [ 686.456957][T14592] should_fail_ex+0x512/0x640 [ 686.456984][T14592] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 686.457016][T14592] should_failslab+0xc2/0x120 [ 686.457046][T14592] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 686.457073][T14592] ? kmem_cache_free+0x2d4/0x4d0 [ 686.457097][T14592] ? acpi_ps_alloc_op+0x25f/0x310 [ 686.457124][T14592] acpi_ps_alloc_op+0x25f/0x310 [ 686.457144][T14592] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 686.457179][T14592] acpi_ps_get_next_arg+0x4b9/0x1500 [ 686.457217][T14592] ? acpi_ps_complete_op+0x622/0xbb0 [ 686.457253][T14592] ? __pfx_acpi_ds_exec_end_op+0x10/0x10 [ 686.457294][T14592] acpi_ps_parse_loop+0x622/0x1d00 [ 686.457337][T14592] ? __pfx_acpi_ps_parse_loop+0x10/0x10 [ 686.457371][T14592] ? acpi_ns_get_normalized_pathname+0x97/0xd0 [ 686.457401][T14592] ? acpi_ds_call_control_method+0x91/0x700 [ 686.457441][T14592] acpi_ps_parse_aml+0x3c1/0xcb0 [ 686.457466][T14592] acpi_ps_execute_method+0x55a/0xb30 [ 686.457493][T14592] ? acpi_ut_acquire_mutex+0x125/0x1d0 [ 686.457523][T14592] acpi_ns_evaluate+0x76c/0xca0 [ 686.457550][T14592] ? kasan_save_track+0x14/0x30 [ 686.457579][T14592] acpi_evaluate_object+0x1fa/0xa90 [ 686.457616][T14592] ? do_syscall_64+0xcd/0x230 [ 686.457657][T14592] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 686.457683][T14592] ? __pfx_acpi_evaluate_object+0x10/0x10 [ 686.457720][T14592] ? __mutex_trylock_common+0xe9/0x250 [ 686.457762][T14592] acpi_evaluate_integer+0xdd/0x200 [ 686.457794][T14592] ? __pfx_acpi_evaluate_integer+0x10/0x10 [ 686.457839][T14592] ? __pfx_status_show+0x10/0x10 [ 686.457859][T14592] status_show+0xa0/0x120 [ 686.457879][T14592] ? __pfx_status_show+0x10/0x10 [ 686.457907][T14592] dev_attr_show+0x53/0xe0 [ 686.457933][T14592] ? __pfx_dev_attr_show+0x10/0x10 [ 686.457954][T14592] sysfs_kf_seq_show+0x213/0x3e0 [ 686.457995][T14592] seq_read_iter+0x506/0x12c0 [ 686.458044][T14592] kernfs_fop_read_iter+0x40f/0x5a0 [ 686.458074][T14592] ? rw_verify_area+0xcf/0x680 [ 686.458115][T14592] vfs_read+0x8c8/0xc70 [ 686.458142][T14592] ? __pfx___mutex_lock+0x10/0x10 [ 686.458176][T14592] ? __pfx_vfs_read+0x10/0x10 [ 686.458218][T14592] ksys_read+0x12a/0x240 [ 686.458241][T14592] ? __pfx_ksys_read+0x10/0x10 [ 686.458262][T14592] ? rcu_is_watching+0x12/0xc0 [ 686.458293][T14592] do_syscall_64+0xcd/0x230 [ 686.458329][T14592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 686.458352][T14592] RIP: 0033:0x7f32a958e169 [ 686.458370][T14592] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 686.458392][T14592] RSP: 002b:00007f32a73f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 686.458413][T14592] RAX: ffffffffffffffda RBX: 00007f32a97b5fa0 RCX: 00007f32a958e169 [ 686.458429][T14592] RDX: 0000000000000070 RSI: 0000200000000000 RDI: 0000000000000006 [ 686.458443][T14592] RBP: 00007f32a9610a68 R08: 0000000000000000 R09: 0000000000000000 [ 686.458457][T14592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 686.458470][T14592] R13: 0000000000000000 R14: 00007f32a97b5fa0 R15: 00007ffedfe2ba28 [ 686.458499][T14592] [ 687.192597][T14592] ACPI Error: Aborting method \_SB.IQST due to previous error (AE_NO_MEMORY) (20240827/psparse-529) [ 687.253943][T14592] ACPI Error: Aborting method \_SB.LNKA._STA due to previous error (AE_NO_MEMORY) (20240827/psparse-529) [ 687.849518][T14609] netlink: 330 bytes leftover after parsing attributes in process `syz.2.3076'. [ 687.899782][T14609] net veth1_virt_wifi : renamed from virt_wifi0 [ 691.101958][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 691.123590][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 691.440803][T14661] sp0: Synchronizing with TNC [ 696.851457][T14766] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3109'. [ 697.305797][T14771] netlink: 158 bytes leftover after parsing attributes in process `syz.4.3110'. [ 697.695008][T14785] cifs: Unknown parameter 'no+ 1`rsFn)aHāh`9kA}1\D@.ZCg^' [ 698.689475][T14799] [U] [ 698.692318][T14799] [U] [ 698.695031][T14799] [U] [ 698.697738][T14799] [U] [ 698.713496][T14774] Process accounting resumed [ 698.874979][T14799] [U] [ 698.877733][T14799] [U] [ 698.880439][T14799] [U] [ 698.883161][T14799] [U] [ 699.019342][T14799] [U] [ 699.022091][T14799] [U] [ 699.024802][T14799] [U] [ 699.027527][T14799] [U] [ 699.181198][T14799] [U] [ 699.183949][T14799] [U] [ 699.186674][T14799] [U] [ 699.189377][T14799] [U] [ 699.366407][T14799] [U] [ 699.369180][T14799] [U] [ 699.371892][T14799] [U] [ 699.374606][T14799] [U] [ 699.438336][T14807] netlink: 'syz.3.3116': attribute type 64 has an invalid length. [ 699.499710][T14807] netlink: 74 bytes leftover after parsing attributes in process `syz.3.3116'. [ 699.587548][T14799] [U] [ 702.831412][T14865] FAULT_INJECTION: forcing a failure. [ 702.831412][T14865] name failslab, interval 1, probability 0, space 0, times 0 [ 702.947154][T14865] CPU: 1 UID: 0 PID: 14865 Comm: syz.3.3128 Not tainted 6.15.0-rc2-syzkaller-00278-gfc96b232f8e7 #0 PREEMPT(full) [ 702.947195][T14865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 702.947210][T14865] Call Trace: [ 702.947217][T14865] [ 702.947225][T14865] dump_stack_lvl+0x16c/0x1f0 [ 702.947269][T14865] should_fail_ex+0x512/0x640 [ 702.947295][T14865] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 702.947326][T14865] should_failslab+0xc2/0x120 [ 702.947356][T14865] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 702.947382][T14865] ? do_syscall_64+0xcd/0x230 [ 702.947414][T14865] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 702.947446][T14865] ? acpi_ut_create_internal_object_dbg+0x78/0x3f0 [ 702.947482][T14865] acpi_ut_create_internal_object_dbg+0x78/0x3f0 [ 702.947517][T14865] acpi_ds_create_operand+0x30b/0x880 [ 702.947554][T14865] ? __pfx_acpi_ds_create_operand+0x10/0x10 [ 702.947599][T14865] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 702.947634][T14865] acpi_ds_create_operands+0x248/0x380 [ 702.947673][T14865] ? kmem_cache_alloc_noprof+0x1a1/0x3b0 [ 702.947700][T14865] ? __pfx_acpi_ds_create_operands+0x10/0x10 [ 702.947751][T14865] acpi_ds_exec_end_op+0x5ef/0x1460 [ 702.947791][T14865] ? __pfx_acpi_ds_exec_end_op+0x10/0x10 [ 702.947827][T14865] acpi_ps_parse_loop+0x425/0x1d00 [ 702.947871][T14865] ? __pfx_acpi_ps_parse_loop+0x10/0x10 [ 702.947909][T14865] ? acpi_ns_get_normalized_pathname+0x97/0xd0 [ 702.947939][T14865] ? acpi_ds_call_control_method+0x91/0x700 [ 702.947980][T14865] acpi_ps_parse_aml+0x3c1/0xcb0 [ 702.948005][T14865] acpi_ps_execute_method+0x55a/0xb30 [ 702.948031][T14865] ? acpi_ut_acquire_mutex+0x125/0x1d0 [ 702.948062][T14865] acpi_ns_evaluate+0x76c/0xca0 [ 702.948089][T14865] ? kasan_save_track+0x14/0x30 [ 702.948117][T14865] acpi_evaluate_object+0x1fa/0xa90 [ 702.948154][T14865] ? do_syscall_64+0xcd/0x230 [ 702.948191][T14865] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 702.948215][T14865] ? __pfx_acpi_evaluate_object+0x10/0x10 [ 702.948289][T14865] ? __mutex_trylock_common+0xe9/0x250 [ 702.948347][T14865] acpi_evaluate_integer+0xdd/0x200 [ 702.948380][T14865] ? __pfx_acpi_evaluate_integer+0x10/0x10 [ 702.948426][T14865] ? __pfx_status_show+0x10/0x10 [ 702.948446][T14865] status_show+0xa0/0x120 [ 702.948466][T14865] ? __pfx_status_show+0x10/0x10 [ 702.948496][T14865] dev_attr_show+0x53/0xe0 [ 702.948521][T14865] ? __pfx_dev_attr_show+0x10/0x10 [ 702.948543][T14865] sysfs_kf_seq_show+0x213/0x3e0 [ 702.948586][T14865] seq_read_iter+0x506/0x12c0 [ 702.948635][T14865] kernfs_fop_read_iter+0x40f/0x5a0 [ 702.948666][T14865] ? rw_verify_area+0xcf/0x680 [ 702.948706][T14865] vfs_read+0x8c8/0xc70 [ 702.948734][T14865] ? __pfx___mutex_lock+0x10/0x10 [ 702.948768][T14865] ? __pfx_vfs_read+0x10/0x10 [ 702.948813][T14865] ksys_read+0x12a/0x240 [ 702.948836][T14865] ? __pfx_ksys_read+0x10/0x10 [ 702.948858][T14865] ? rcu_is_watching+0x12/0xc0 [ 702.948891][T14865] do_syscall_64+0xcd/0x230 [ 702.948928][T14865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 702.948951][T14865] RIP: 0033:0x7fc705f8e169 [ 702.948971][T14865] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 702.948994][T14865] RSP: 002b:00007fc706daa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 702.949017][T14865] RAX: ffffffffffffffda RBX: 00007fc7061b5fa0 RCX: 00007fc705f8e169 [ 702.949033][T14865] RDX: 0000000000000070 RSI: 0000200000000000 RDI: 0000000000000006 [ 702.949047][T14865] RBP: 00007fc706010a68 R08: 0000000000000000 R09: 0000000000000000 [ 702.949061][T14865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 702.949075][T14865] R13: 0000000000000000 R14: 00007fc7061b5fa0 R15: 00007ffc325ad7e8 [ 702.949107][T14865] [ 703.434009][T14865] ACPI Error: Could not allocate an object descriptor (20240827/dsutils-617) [ 703.443102][T14865] ACPI Error: AE_NO_MEMORY, While creating Arg 0 (20240827/dsutils-725) [ 703.453050][T14865] ACPI Error: Aborting method \_SB.IQST due to previous error (AE_NO_MEMORY) (20240827/psparse-529) [ 703.464999][T14865] ACPI Error: Aborting method \_SB.LNKA._STA due to previous error (AE_NO_MEMORY) (20240827/psparse-529) [ 703.634626][T14873] netlink: 330 bytes leftover after parsing attributes in process `syz.2.3132'. [ 703.643798][T14873] : renamed from bond_slave_1 (while UP) [ 704.349785][T14894] loop6: detected capacity change from 0 to 8 [ 705.809790][T14926] netlink: 338 bytes leftover after parsing attributes in process `syz.2.3148'. [ 705.878426][T14926] netlink: 338 bytes leftover after parsing attributes in process `syz.2.3148'. [ 705.952210][T14931] netlink: 170 bytes leftover after parsing attributes in process `syz.2.3148'. [ 707.502205][T14959] FAULT_INJECTION: forcing a failure. [ 707.502205][T14959] name failslab, interval 1, probability 0, space 0, times 0 [ 707.566593][T14959] CPU: 1 UID: 0 PID: 14959 Comm: syz.3.3156 Not tainted 6.15.0-rc2-syzkaller-00278-gfc96b232f8e7 #0 PREEMPT(full) [ 707.566630][T14959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 707.566644][T14959] Call Trace: [ 707.566652][T14959] [ 707.566661][T14959] dump_stack_lvl+0x16c/0x1f0 [ 707.566701][T14959] should_fail_ex+0x512/0x640 [ 707.566728][T14959] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 707.566760][T14959] should_failslab+0xc2/0x120 [ 707.566792][T14959] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 707.566821][T14959] ? vm_area_dup+0x25/0x760 [ 707.566854][T14959] vm_area_dup+0x25/0x760 [ 707.566891][T14959] copy_process+0x7f67/0x91a0 [ 707.566944][T14959] ? __pfx_copy_process+0x10/0x10 [ 707.566980][T14959] ? try_to_wake_up+0xa2f/0x1680 [ 707.567010][T14959] ? plist_check_head+0xa3/0x150 [ 707.567035][T14959] ? find_held_lock+0x2b/0x80 [ 707.567064][T14959] ? wake_up_q+0xb0/0x160 [ 707.567085][T14959] ? do_raw_spin_unlock+0x172/0x230 [ 707.567111][T14959] kernel_clone+0xfc/0x960 [ 707.567144][T14959] ? __pfx_futex_wake+0x10/0x10 [ 707.567175][T14959] ? __pfx_kernel_clone+0x10/0x10 [ 707.567225][T14959] __do_sys_clone+0xce/0x120 [ 707.567257][T14959] ? __pfx___do_sys_clone+0x10/0x10 [ 707.567289][T14959] ? ksys_unshare+0x687/0xa40 [ 707.567337][T14959] ? rcu_is_watching+0x12/0xc0 [ 707.567369][T14959] do_syscall_64+0xcd/0x230 [ 707.567406][T14959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 707.567430][T14959] RIP: 0033:0x7fc705f8e169 [ 707.567449][T14959] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 707.567472][T14959] RSP: 002b:00007fc706da9fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 707.567494][T14959] RAX: ffffffffffffffda RBX: 00007fc7061b5fa0 RCX: 00007fc705f8e169 [ 707.567510][T14959] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000002360411 [ 707.567524][T14959] RBP: 00007fc706010a68 R08: 0000000000000000 R09: 0000000000000000 [ 707.567538][T14959] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 707.567552][T14959] R13: 0000000000000000 R14: 00007fc7061b5fa0 R15: 00007ffc325ad7e8 [ 707.567586][T14959] [ 708.684618][T14974] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3161'. [ 709.163715][T14983] sp0: Synchronizing with TNC [ 709.286500][T14985] netlink: 'syz.2.3165': attribute type 32 has an invalid length. [ 709.606928][T14991] netlink: 'syz.2.3168': attribute type 10 has an invalid length. [ 709.643920][T14991] netlink: 230 bytes leftover after parsing attributes in process `syz.2.3168'. [ 709.993379][T14998] usb usb34: usbfs: process 14998 (syz.2.3171) did not claim interface 0 before use [ 711.686006][T15026] netlink: 22 bytes leftover after parsing attributes in process `syz.3.3182'. [ 712.331729][T15037] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3186'. [ 712.421360][T15037] netlink: 354 bytes leftover after parsing attributes in process `syz.5.3186'. [ 713.328844][T15054] tipc: Started in network mode [ 713.333785][T15054] tipc: Node identity ffffffff, cluster identity 4711 [ 713.413028][T15054] tipc: Node number set to 4294967295 [ 716.106003][T15084] netlink: 330 bytes leftover after parsing attributes in process `syz.5.3202'. [ 716.106041][T15084] : renamed from bond_slave_1 (while UP) [ 716.462137][T15087] netlink: 338 bytes leftover after parsing attributes in process `syz.5.3203'. [ 716.558713][T15087] netlink: 338 bytes leftover after parsing attributes in process `syz.5.3203'. [ 716.610875][T15087] netlink: 210 bytes leftover after parsing attributes in process `syz.5.3203'. [ 716.653922][T15091] FAULT_INJECTION: forcing a failure. [ 716.653922][T15091] name failslab, interval 1, probability 0, space 0, times 0 [ 716.724190][T15091] CPU: 1 UID: 0 PID: 15091 Comm: syz.4.3205 Not tainted 6.15.0-rc2-syzkaller-00278-gfc96b232f8e7 #0 PREEMPT(full) [ 716.724227][T15091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 716.724241][T15091] Call Trace: [ 716.724250][T15091] [ 716.724259][T15091] dump_stack_lvl+0x16c/0x1f0 [ 716.724298][T15091] should_fail_ex+0x512/0x640 [ 716.724326][T15091] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 716.724354][T15091] should_failslab+0xc2/0x120 [ 716.724385][T15091] __kmalloc_cache_noprof+0x6a/0x3e0 [ 716.724409][T15091] ? lockdep_init_map_type+0x5c/0x280 [ 716.724442][T15091] ? dummy_hrtimer_create+0x45/0x170 [ 716.724472][T15091] dummy_hrtimer_create+0x45/0x170 [ 716.724499][T15091] ? __pfx_dummy_hrtimer_create+0x10/0x10 [ 716.724523][T15091] dummy_pcm_open+0xd1/0x5b0 [ 716.724547][T15091] snd_pcm_open_substream+0xa5d/0x17f0 [ 716.724583][T15091] ? __pfx_snd_pcm_open_substream+0x10/0x10 [ 716.724613][T15091] ? rcu_is_watching+0x12/0xc0 [ 716.724641][T15091] snd_pcm_open+0x29e/0x730 [ 716.724671][T15091] ? __pfx_snd_pcm_open+0x10/0x10 [ 716.724702][T15091] ? __pfx_default_wake_function+0x10/0x10 [ 716.724736][T15091] ? __pfx_snd_pcm_playback_open+0x10/0x10 [ 716.724764][T15091] snd_pcm_playback_open+0x86/0xe0 [ 716.724792][T15091] snd_open+0x1fe/0x450 [ 716.724827][T15091] ? __pfx_snd_open+0x10/0x10 [ 716.724860][T15091] chrdev_open+0x231/0x6a0 [ 716.724887][T15091] ? __pfx_apparmor_file_open+0x10/0x10 [ 716.724918][T15091] ? __pfx_chrdev_open+0x10/0x10 [ 716.724947][T15091] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 716.724990][T15091] do_dentry_open+0x741/0x1c10 [ 716.725017][T15091] ? __pfx_chrdev_open+0x10/0x10 [ 716.725049][T15091] vfs_open+0x82/0x3f0 [ 716.725085][T15091] path_openat+0x1e5e/0x2d40 [ 716.725120][T15091] ? __pfx_path_openat+0x10/0x10 [ 716.725158][T15091] do_filp_open+0x20b/0x470 [ 716.725184][T15091] ? __pfx_do_filp_open+0x10/0x10 [ 716.725230][T15091] ? alloc_fd+0x471/0x7d0 [ 716.725260][T15091] do_sys_openat2+0x11b/0x1d0 [ 716.725294][T15091] ? __pfx_do_sys_openat2+0x10/0x10 [ 716.725339][T15091] __x64_sys_openat+0x174/0x210 [ 716.725374][T15091] ? __pfx___x64_sys_openat+0x10/0x10 [ 716.725410][T15091] ? rcu_is_watching+0x12/0xc0 [ 716.725441][T15091] do_syscall_64+0xcd/0x230 [ 716.725478][T15091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 716.725502][T15091] RIP: 0033:0x7f32a958e169 [ 716.725521][T15091] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 716.725544][T15091] RSP: 002b:00007f32a73f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 716.725566][T15091] RAX: ffffffffffffffda RBX: 00007f32a97b5fa0 RCX: 00007f32a958e169 [ 716.725581][T15091] RDX: 000000000016b042 RSI: 0000200000005480 RDI: ffffffffffffff9c [ 716.725597][T15091] RBP: 00007f32a9610a68 R08: 0000000000000000 R09: 0000000000000000 [ 716.725611][T15091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 716.725625][T15091] R13: 0000000000000000 R14: 00007f32a97b5fa0 R15: 00007ffedfe2ba28 [ 716.725654][T15091] [ 719.422053][T15115] netlink: 'syz.4.3213': attribute type 16 has an invalid length. [ 719.550488][T15115] netlink: 50 bytes leftover after parsing attributes in process `syz.4.3213'. [ 720.293408][T15125] netlink: 54 bytes leftover after parsing attributes in process `syz.5.3219'. [ 723.417024][T15172] netlink: 338 bytes leftover after parsing attributes in process `syz.4.3232'. [ 723.506274][T15180] netlink: 338 bytes leftover after parsing attributes in process `syz.4.3232'. [ 723.617878][T15179] netlink: 338 bytes leftover after parsing attributes in process `syz.3.3233'. [ 723.682279][T15185] netlink: 342 bytes leftover after parsing attributes in process `syz.3.3233'. [ 723.750904][T15172] netlink: 290 bytes leftover after parsing attributes in process `syz.4.3232'. [ 723.808868][T15182] netlink: 338 bytes leftover after parsing attributes in process `syz.3.3233'. [ 724.530027][T15201] bond0: option all_slaves_active: invalid value () [ 725.078245][T15208] FAULT_INJECTION: forcing a failure. [ 725.078245][T15208] name failslab, interval 1, probability 0, space 0, times 0 [ 725.218993][T15208] CPU: 1 UID: 0 PID: 15208 Comm: syz.2.3238 Not tainted 6.15.0-rc2-syzkaller-00278-gfc96b232f8e7 #0 PREEMPT(full) [ 725.219028][T15208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 725.219042][T15208] Call Trace: [ 725.219050][T15208] [ 725.219058][T15208] dump_stack_lvl+0x16c/0x1f0 [ 725.219097][T15208] should_fail_ex+0x512/0x640 [ 725.219124][T15208] ? __kmalloc_noprof+0xbf/0x510 [ 725.219154][T15208] ? __register_sysctl_table+0xea2/0x1900 [ 725.219183][T15208] should_failslab+0xc2/0x120 [ 725.219214][T15208] __kmalloc_noprof+0xd2/0x510 [ 725.219240][T15208] ? __register_sysctl_table+0xe8e/0x1900 [ 725.219274][T15208] __register_sysctl_table+0xea2/0x1900 [ 725.219309][T15208] ? __pfx___register_sysctl_table+0x10/0x10 [ 725.219338][T15208] ? setup_mq_sysctls+0x5d/0x230 [ 725.219368][T15208] ? __asan_memcpy+0x3c/0x60 [ 725.219393][T15208] setup_mq_sysctls+0x13d/0x230 [ 725.219425][T15208] copy_ipcs+0x479/0x610 [ 725.219457][T15208] ? copy_utsname+0xab/0x470 [ 725.219491][T15208] create_new_namespaces+0x20a/0xad0 [ 725.219519][T15208] ? security_capable+0x7e/0x260 [ 725.219546][T15208] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 725.219577][T15208] ksys_unshare+0x45b/0xa40 [ 725.219612][T15208] ? __pfx_ksys_unshare+0x10/0x10 [ 725.219645][T15208] ? xfd_validate_state+0x5d/0x180 [ 725.219670][T15208] ? rcu_is_watching+0x12/0xc0 [ 725.219700][T15208] __x64_sys_unshare+0x31/0x40 [ 725.219733][T15208] do_syscall_64+0xcd/0x230 [ 725.219770][T15208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 725.219793][T15208] RIP: 0033:0x7f7d9298e169 [ 725.219811][T15208] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 725.219833][T15208] RSP: 002b:00007f7d93803038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 725.219855][T15208] RAX: ffffffffffffffda RBX: 00007f7d92bb5fa0 RCX: 00007f7d9298e169 [ 725.219870][T15208] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000400 [ 725.219884][T15208] RBP: 00007f7d92a10a68 R08: 0000000000000000 R09: 0000000000000000 [ 725.219898][T15208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 725.219911][T15208] R13: 0000000000000000 R14: 00007f7d92bb5fa0 R15: 00007ffe8c118bb8 [ 725.219940][T15208] [ 725.219949][T15208] sysctl could not get directory: /fs -12 [ 727.070470][T15222] sp0: Synchronizing with TNC [ 727.550856][T15228] netlink: 338 bytes leftover after parsing attributes in process `syz.4.3245'. [ 727.680654][T15232] netlink: 338 bytes leftover after parsing attributes in process `syz.4.3245'. [ 727.846542][T15228] netlink: 210 bytes leftover after parsing attributes in process `syz.4.3245'. [ 728.673044][T15243] FAULT_INJECTION: forcing a failure. [ 728.673044][T15243] name failslab, interval 1, probability 0, space 0, times 0 [ 728.809415][T15246] netlink: 338 bytes leftover after parsing attributes in process `syz.5.3252'. [ 728.845765][T15243] CPU: 1 UID: 0 PID: 15243 Comm: syz.4.3251 Not tainted 6.15.0-rc2-syzkaller-00278-gfc96b232f8e7 #0 PREEMPT(full) [ 728.845801][T15243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 728.845815][T15243] Call Trace: [ 728.845822][T15243] [ 728.845831][T15243] dump_stack_lvl+0x16c/0x1f0 [ 728.845869][T15243] should_fail_ex+0x512/0x640 [ 728.845897][T15243] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 728.845949][T15243] should_failslab+0xc2/0x120 [ 728.845980][T15243] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 728.846007][T15243] ? __proc_create+0xc3/0x8c0 [ 728.846035][T15243] ? __proc_create+0x2ce/0x8c0 [ 728.846066][T15243] __proc_create+0x2ce/0x8c0 [ 728.846095][T15243] ? __pfx___proc_create+0x10/0x10 [ 728.846172][T15243] proc_mkdir+0x81/0x170 [ 728.846201][T15243] ? __pfx_proc_mkdir+0x10/0x10 [ 728.846229][T15243] ? cache_register_net+0x137/0x5e0 [ 728.846265][T15243] cache_register_net+0x18f/0x5e0 [ 728.846297][T15243] nfsd_idmap_init+0x16e/0x250 [ 728.846326][T15243] ? __pfx_nfsd_net_init+0x10/0x10 [ 728.846349][T15243] nfsd_net_init+0x69/0x3d0 [ 728.846372][T15243] ? __pfx_nfsd_net_init+0x10/0x10 [ 728.846394][T15243] ops_init+0x1df/0x5f0 [ 728.846432][T15243] setup_net+0x21e/0x850 [ 728.846469][T15243] ? __pfx_setup_net+0x10/0x10 [ 728.846501][T15243] ? lockdep_init_map_type+0x5c/0x280 [ 728.846548][T15243] ? __pfx_down_read_killable+0x10/0x10 [ 728.846573][T15243] ? debug_mutex_init+0x37/0x70 [ 728.846598][T15243] copy_net_ns+0x2a6/0x5f0 [ 728.846637][T15243] create_new_namespaces+0x3ea/0xad0 [ 728.846671][T15243] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 728.846700][T15243] ksys_unshare+0x45b/0xa40 [ 728.846734][T15243] ? __pfx_ksys_unshare+0x10/0x10 [ 728.846766][T15243] ? xfd_validate_state+0x5d/0x180 [ 728.846791][T15243] ? rcu_is_watching+0x12/0xc0 [ 728.846843][T15243] __x64_sys_unshare+0x31/0x40 [ 728.846877][T15243] do_syscall_64+0xcd/0x230 [ 728.846914][T15243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 728.846937][T15243] RIP: 0033:0x7f32a958e169 [ 728.846956][T15243] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 728.846980][T15243] RSP: 002b:00007f32a73f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 728.847002][T15243] RAX: ffffffffffffffda RBX: 00007f32a97b5fa0 RCX: 00007f32a958e169 [ 728.847018][T15243] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 728.847032][T15243] RBP: 00007f32a9610a68 R08: 0000000000000000 R09: 0000000000000000 [ 728.847046][T15243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 728.847060][T15243] R13: 0000000000000000 R14: 00007f32a97b5fa0 R15: 00007ffedfe2ba28 [ 728.847090][T15243] [ 730.511658][T15265] netlink: 54 bytes leftover after parsing attributes in process `syz.2.3258'. [ 730.568007][T15244] Process accounting paused [ 733.080635][T15301] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3273'. [ 733.148508][T15301] bridge0: port 2(bridge_slave_1) entered disabled state [ 733.289623][T15301] bridge_slave_1 (unregistering): left allmulticast mode [ 733.318803][T15301] bridge_slave_1 (unregistering): left promiscuous mode [ 733.347058][T15301] bridge0: port 2(bridge_slave_1) entered disabled state [ 733.549172][T15308] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3284'. [ 734.560634][T15326] FAULT_INJECTION: forcing a failure. [ 734.560634][T15326] name failslab, interval 1, probability 0, space 0, times 0 [ 734.633698][T15326] CPU: 1 UID: 0 PID: 15326 Comm: syz.4.3281 Not tainted 6.15.0-rc2-syzkaller-00278-gfc96b232f8e7 #0 PREEMPT(full) [ 734.633735][T15326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 734.633749][T15326] Call Trace: [ 734.633757][T15326] [ 734.633766][T15326] dump_stack_lvl+0x16c/0x1f0 [ 734.633806][T15326] should_fail_ex+0x512/0x640 [ 734.633834][T15326] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 734.633863][T15326] should_failslab+0xc2/0x120 [ 734.633894][T15326] __kmalloc_cache_noprof+0x6a/0x3e0 [ 734.633919][T15326] ? do_signalfd4+0x172/0x420 [ 734.633946][T15326] do_signalfd4+0x172/0x420 [ 734.633970][T15326] __x64_sys_signalfd+0x120/0x1a0 [ 734.633994][T15326] ? __pfx___x64_sys_signalfd+0x10/0x10 [ 734.634017][T15326] ? rcu_is_watching+0x12/0xc0 [ 734.634048][T15326] do_syscall_64+0xcd/0x230 [ 734.634085][T15326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 734.634108][T15326] RIP: 0033:0x7f32a958e169 [ 734.634127][T15326] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 734.634149][T15326] RSP: 002b:00007f32a73f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000011a [ 734.634171][T15326] RAX: ffffffffffffffda RBX: 00007f32a97b5fa0 RCX: 00007f32a958e169 [ 734.634187][T15326] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 00000000ffffffff [ 734.634201][T15326] RBP: 00007f32a9610a68 R08: 0000000000000000 R09: 0000000000000000 [ 734.634215][T15326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 734.634229][T15326] R13: 0000000000000000 R14: 00007f32a97b5fa0 R15: 00007ffedfe2ba28 [ 734.634258][T15326] [ 735.821547][T15332] FAULT_INJECTION: forcing a failure. [ 735.821547][T15332] name failslab, interval 1, probability 0, space 0, times 0 [ 735.961476][T15332] CPU: 1 UID: 0 PID: 15332 Comm: syz.3.3283 Not tainted 6.15.0-rc2-syzkaller-00278-gfc96b232f8e7 #0 PREEMPT(full) [ 735.961517][T15332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 735.961532][T15332] Call Trace: [ 735.961539][T15332] [ 735.961548][T15332] dump_stack_lvl+0x16c/0x1f0 [ 735.961587][T15332] should_fail_ex+0x512/0x640 [ 735.961615][T15332] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 735.961668][T15332] should_failslab+0xc2/0x120 [ 735.961700][T15332] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 735.961729][T15332] ? get_tree_nodev+0x86/0x190 [ 735.961751][T15332] ? alloc_vfsmnt+0x23/0x6f0 [ 735.961784][T15332] alloc_vfsmnt+0x23/0x6f0 [ 735.961820][T15332] vfs_create_mount+0x93/0x500 [ 735.961858][T15332] fc_mount+0x9a/0xc0 [ 735.961890][T15332] mq_init_ns+0x426/0x620 [ 735.961920][T15332] copy_ipcs+0x383/0x610 [ 735.961944][T15332] ? copy_utsname+0xab/0x470 [ 735.961977][T15332] create_new_namespaces+0x20a/0xad0 [ 735.962006][T15332] ? security_capable+0x7e/0x260 [ 735.962032][T15332] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 735.962063][T15332] ksys_unshare+0x45b/0xa40 [ 735.962098][T15332] ? __pfx_ksys_unshare+0x10/0x10 [ 735.962130][T15332] ? xfd_validate_state+0x5d/0x180 [ 735.962155][T15332] ? rcu_is_watching+0x12/0xc0 [ 735.962185][T15332] __x64_sys_unshare+0x31/0x40 [ 735.962219][T15332] do_syscall_64+0xcd/0x230 [ 735.962256][T15332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 735.962280][T15332] RIP: 0033:0x7fc705f8e169 [ 735.962297][T15332] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 735.962320][T15332] RSP: 002b:00007fc706daa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 735.962343][T15332] RAX: ffffffffffffffda RBX: 00007fc7061b5fa0 RCX: 00007fc705f8e169 [ 735.962358][T15332] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000400 [ 735.962372][T15332] RBP: 00007fc706010a68 R08: 0000000000000000 R09: 0000000000000000 [ 735.962386][T15332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 735.962401][T15332] R13: 0000000000000000 R14: 00007fc7061b5fa0 R15: 00007ffc325ad7e8 [ 735.962429][T15332] [ 736.464006][T15340] netlink: 338 bytes leftover after parsing attributes in process `syz.4.3287'. [ 736.487952][T15340] netlink: 338 bytes leftover after parsing attributes in process `syz.4.3287'. [ 736.523717][T15340] netlink: 210 bytes leftover after parsing attributes in process `syz.4.3287'. [ 737.144236][T15354] FAULT_INJECTION: forcing a failure. [ 737.144236][T15354] name failslab, interval 1, probability 0, space 0, times 0 [ 737.358002][T15354] CPU: 1 UID: 0 PID: 15354 Comm: syz.3.3293 Not tainted 6.15.0-rc2-syzkaller-00278-gfc96b232f8e7 #0 PREEMPT(full) [ 737.358038][T15354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 737.358054][T15354] Call Trace: [ 737.358061][T15354] [ 737.358070][T15354] dump_stack_lvl+0x16c/0x1f0 [ 737.358109][T15354] should_fail_ex+0x512/0x640 [ 737.358137][T15354] ? __kmalloc_noprof+0xbf/0x510 [ 737.358167][T15354] ? lsm_blob_alloc+0x68/0x90 [ 737.358203][T15354] should_failslab+0xc2/0x120 [ 737.358234][T15354] __kmalloc_noprof+0xd2/0x510 [ 737.358261][T15354] ? down_write_nested+0x151/0x210 [ 737.358300][T15354] ? __pfx_test_keyed_super+0x10/0x10 [ 737.358333][T15354] lsm_blob_alloc+0x68/0x90 [ 737.358370][T15354] security_sb_alloc+0x28/0x230 [ 737.358395][T15354] alloc_super+0x23d/0xbd0 [ 737.358428][T15354] ? sget_fc+0xd3/0xc20 [ 737.358453][T15354] ? __pfx_test_keyed_super+0x10/0x10 [ 737.358486][T15354] sget_fc+0x116/0xc20 [ 737.358509][T15354] ? __pfx_set_anon_super_fc+0x10/0x10 [ 737.358547][T15354] ? __pfx_nfsd_fill_super+0x10/0x10 [ 737.358571][T15354] get_tree_keyed+0x59/0x1d0 [ 737.358596][T15354] vfs_get_tree+0x8b/0x340 [ 737.358631][T15354] path_mount+0x14d4/0x1f30 [ 737.358659][T15354] ? kmem_cache_free+0x2d4/0x4d0 [ 737.358685][T15354] ? __pfx_path_mount+0x10/0x10 [ 737.358715][T15354] ? putname+0x154/0x1a0 [ 737.358748][T15354] __x64_sys_mount+0x28d/0x310 [ 737.358776][T15354] ? __pfx___x64_sys_mount+0x10/0x10 [ 737.358802][T15354] ? rcu_is_watching+0x12/0xc0 [ 737.358834][T15354] do_syscall_64+0xcd/0x230 [ 737.358871][T15354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 737.358895][T15354] RIP: 0033:0x7fc705f8e169 [ 737.358913][T15354] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 737.358937][T15354] RSP: 002b:00007fc706daa038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 737.358959][T15354] RAX: ffffffffffffffda RBX: 00007fc7061b5fa0 RCX: 00007fc705f8e169 [ 737.358975][T15354] RDX: 00002000000001c0 RSI: 00002000000000c0 RDI: 0000000000000000 [ 737.358989][T15354] RBP: 00007fc706010a68 R08: 0000000000000000 R09: 0000000000000000 [ 737.359007][T15354] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 737.359021][T15354] R13: 0000000000000000 R14: 00007fc7061b5fa0 R15: 00007ffc325ad7e8 [ 737.359050][T15354] [ 738.761227][T15360] netlink: 342 bytes leftover after parsing attributes in process `syz.4.3303'. [ 739.710710][T15372] FAULT_INJECTION: forcing a failure. [ 739.710710][T15372] name failslab, interval 1, probability 0, space 0, times 0 [ 739.780759][T15372] CPU: 1 UID: 0 PID: 15372 Comm: syz.4.3299 Not tainted 6.15.0-rc2-syzkaller-00278-gfc96b232f8e7 #0 PREEMPT(full) [ 739.780796][T15372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 739.780810][T15372] Call Trace: [ 739.780817][T15372] [ 739.780826][T15372] dump_stack_lvl+0x16c/0x1f0 [ 739.780865][T15372] should_fail_ex+0x512/0x640 [ 739.780892][T15372] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 739.780924][T15372] should_failslab+0xc2/0x120 [ 739.780955][T15372] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 739.780983][T15372] ? get_tree_nodev+0x86/0x190 [ 739.781005][T15372] ? alloc_vfsmnt+0x23/0x6f0 [ 739.781038][T15372] alloc_vfsmnt+0x23/0x6f0 [ 739.781068][T15372] vfs_create_mount+0x93/0x500 [ 739.781105][T15372] fc_mount+0x9a/0xc0 [ 739.781135][T15372] mq_init_ns+0x426/0x620 [ 739.781165][T15372] copy_ipcs+0x383/0x610 [ 739.781189][T15372] ? copy_utsname+0xab/0x470 [ 739.781221][T15372] create_new_namespaces+0x20a/0xad0 [ 739.781249][T15372] ? security_capable+0x7e/0x260 [ 739.781275][T15372] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 739.781307][T15372] ksys_unshare+0x45b/0xa40 [ 739.781341][T15372] ? __pfx_ksys_unshare+0x10/0x10 [ 739.781373][T15372] ? xfd_validate_state+0x5d/0x180 [ 739.781398][T15372] ? rcu_is_watching+0x12/0xc0 [ 739.781428][T15372] __x64_sys_unshare+0x31/0x40 [ 739.781483][T15372] do_syscall_64+0xcd/0x230 [ 739.781519][T15372] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 739.781542][T15372] RIP: 0033:0x7f32a958e169 [ 739.781560][T15372] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 739.781581][T15372] RSP: 002b:00007f32a73f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 739.781603][T15372] RAX: ffffffffffffffda RBX: 00007f32a97b5fa0 RCX: 00007f32a958e169 [ 739.781618][T15372] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000400 [ 739.781632][T15372] RBP: 00007f32a9610a68 R08: 0000000000000000 R09: 0000000000000000 [ 739.781646][T15372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 739.781660][T15372] R13: 0000000000000000 R14: 00007f32a97b5fa0 R15: 00007ffedfe2ba28 [ 739.781687][T15372] [ 741.550353][T15389] size and base must be multiples of 4 kiB [ 741.556296][T15389] CPU: 1 UID: 0 PID: 15389 Comm: syz.4.3305 Not tainted 6.15.0-rc2-syzkaller-00278-gfc96b232f8e7 #0 PREEMPT(full) [ 741.556329][T15389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 741.556343][T15389] Call Trace: [ 741.556350][T15389] [ 741.556359][T15389] dump_stack_lvl+0x16c/0x1f0 [ 741.556398][T15389] mtrr_del+0xd1/0x110 [ 741.556437][T15389] mtrr_ioctl+0x922/0xcf0 [ 741.556458][T15389] ? __pfx_mtrr_ioctl+0x10/0x10 [ 741.556485][T15389] ? find_held_lock+0x2b/0x80 [ 741.556517][T15389] ? __fget_files+0x20e/0x3c0 [ 741.556540][T15389] ? __pfx_mtrr_ioctl+0x10/0x10 [ 741.556562][T15389] proc_reg_unlocked_ioctl+0x226/0x320 [ 741.556588][T15389] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 741.556617][T15389] __x64_sys_ioctl+0x190/0x200 [ 741.556654][T15389] do_syscall_64+0xcd/0x230 [ 741.556692][T15389] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 741.556715][T15389] RIP: 0033:0x7f32a958e169 [ 741.556734][T15389] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 741.556758][T15389] RSP: 002b:00007f32a73f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 741.556780][T15389] RAX: ffffffffffffffda RBX: 00007f32a97b5fa0 RCX: 00007f32a958e169 [ 741.556795][T15389] RDX: 0000000000000009 RSI: 00000000400c4d04 RDI: 0000000000000009 [ 741.556810][T15389] RBP: 00007f32a9610a68 R08: 0000000000000000 R09: 0000000000000000 [ 741.556825][T15389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 741.556839][T15389] R13: 0000000000000000 R14: 00007f32a97b5fa0 R15: 00007ffedfe2ba28 [ 741.556867][T15389] [ 742.595498][T15400] netlink: 330 bytes leftover after parsing attributes in process `syz.3.3309'. [ 742.708871][T15400] : renamed from hsr0 (while UP) [ 743.429540][T15413] FAULT_INJECTION: forcing a failure. [ 743.429540][T15413] name failslab, interval 1, probability 0, space 0, times 0 [ 743.570777][T15413] CPU: 1 UID: 0 PID: 15413 Comm: syz.3.3314 Not tainted 6.15.0-rc2-syzkaller-00278-gfc96b232f8e7 #0 PREEMPT(full) [ 743.570813][T15413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 743.570827][T15413] Call Trace: [ 743.570834][T15413] [ 743.570842][T15413] dump_stack_lvl+0x16c/0x1f0 [ 743.570906][T15413] should_fail_ex+0x512/0x640 [ 743.570934][T15413] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 743.570965][T15413] should_failslab+0xc2/0x120 [ 743.570996][T15413] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 743.571025][T15413] ? mas_alloc_nodes+0x18b/0x8b0 [ 743.571072][T15413] mas_alloc_nodes+0x18b/0x8b0 [ 743.571107][T15413] mas_node_count_gfp+0x105/0x130 [ 743.571138][T15413] mas_preallocate+0x53e/0xcd0 [ 743.571164][T15413] ? __pfx_mas_preallocate+0x10/0x10 [ 743.571195][T15413] ? mt_find+0x757/0xa30 [ 743.571233][T15413] vma_link+0x135/0x6a0 [ 743.571262][T15413] ? __pfx_vma_link+0x10/0x10 [ 743.571305][T15413] insert_vm_struct+0x196/0x3e0 [ 743.571327][T15413] ? __pfx_insert_vm_struct+0x10/0x10 [ 743.571352][T15413] ? lockdep_init_map_type+0x5c/0x280 [ 743.571389][T15413] alloc_bprm+0x76d/0xdd0 [ 743.571414][T15413] do_execveat_common.isra.0+0x1ce/0x610 [ 743.571442][T15413] __x64_sys_execve+0x8e/0xb0 [ 743.571465][T15413] do_syscall_64+0xcd/0x230 [ 743.571500][T15413] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 743.571523][T15413] RIP: 0033:0x7fc705f8e169 [ 743.571540][T15413] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 743.571562][T15413] RSP: 002b:00007fc706daa038 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 743.571582][T15413] RAX: ffffffffffffffda RBX: 00007fc7061b5fa0 RCX: 00007fc705f8e169 [ 743.571597][T15413] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000001c0 [ 743.571611][T15413] RBP: 00007fc706010a68 R08: 0000000000000000 R09: 0000000000000000 [ 743.571625][T15413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 743.571638][T15413] R13: 0000000000000000 R14: 00007fc7061b5fa0 R15: 00007ffc325ad7e8 [ 743.571666][T15413] [ 744.346353][T15417] netlink: 342 bytes leftover after parsing attributes in process `syz.3.3318'. [ 746.833801][T15438] FAULT_INJECTION: forcing a failure. [ 746.833801][T15438] name failslab, interval 1, probability 0, space 0, times 0 [ 746.957660][T15438] CPU: 1 UID: 0 PID: 15438 Comm: syz.2.3322 Not tainted 6.15.0-rc2-syzkaller-00278-gfc96b232f8e7 #0 PREEMPT(full) [ 746.957696][T15438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 746.957711][T15438] Call Trace: [ 746.957718][T15438] [ 746.957727][T15438] dump_stack_lvl+0x16c/0x1f0 [ 746.957767][T15438] should_fail_ex+0x512/0x640 [ 746.957795][T15438] ? __kvmalloc_node_noprof+0x122/0x600 [ 746.957825][T15438] should_failslab+0xc2/0x120 [ 746.957856][T15438] __kvmalloc_node_noprof+0x135/0x600 [ 746.957885][T15438] ? nf_hook_entries_grow+0x22b/0x860 [ 746.957918][T15438] ? nf_hook_entries_grow+0x22b/0x860 [ 746.957944][T15438] nf_hook_entries_grow+0x22b/0x860 [ 746.957981][T15438] __nf_register_net_hook+0x1cd/0x730 [ 746.958014][T15438] nf_register_net_hook+0x109/0x160 [ 746.958044][T15438] nf_register_net_hooks+0x5d/0xd0 [ 746.958074][T15438] ? __pfx_apparmor_nf_register+0x10/0x10 [ 746.958113][T15438] ops_init+0x1df/0x5f0 [ 746.958150][T15438] setup_net+0x21e/0x850 [ 746.958186][T15438] ? __pfx_setup_net+0x10/0x10 [ 746.958217][T15438] ? lockdep_init_map_type+0x5c/0x280 [ 746.958251][T15438] ? __pfx_down_read_killable+0x10/0x10 [ 746.958277][T15438] ? debug_mutex_init+0x37/0x70 [ 746.958303][T15438] copy_net_ns+0x2a6/0x5f0 [ 746.958343][T15438] create_new_namespaces+0x3ea/0xad0 [ 746.958378][T15438] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 746.958409][T15438] ksys_unshare+0x45b/0xa40 [ 746.958444][T15438] ? __pfx_ksys_unshare+0x10/0x10 [ 746.958476][T15438] ? xfd_validate_state+0x5d/0x180 [ 746.958501][T15438] ? rcu_is_watching+0x12/0xc0 [ 746.958533][T15438] __x64_sys_unshare+0x31/0x40 [ 746.958566][T15438] do_syscall_64+0xcd/0x230 [ 746.958611][T15438] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 746.958636][T15438] RIP: 0033:0x7f7d9298e169 [ 746.958655][T15438] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 746.958677][T15438] RSP: 002b:00007f7d93803038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 746.958704][T15438] RAX: ffffffffffffffda RBX: 00007f7d92bb5fa0 RCX: 00007f7d9298e169 [ 746.958720][T15438] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 746.958734][T15438] RBP: 00007f7d92a10a68 R08: 0000000000000000 R09: 0000000000000000 [ 746.958748][T15438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 746.958762][T15438] R13: 0000000000000000 R14: 00007f7d92bb5fa0 R15: 00007ffe8c118bb8 [ 746.958792][T15438] [ 748.031204][T15443] FAULT_INJECTION: forcing a failure. [ 748.031204][T15443] name failslab, interval 1, probability 0, space 0, times 0 [ 748.264728][T15443] CPU: 1 UID: 0 PID: 15443 Comm: syz.5.3324 Not tainted 6.15.0-rc2-syzkaller-00278-gfc96b232f8e7 #0 PREEMPT(full) [ 748.264765][T15443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 748.264780][T15443] Call Trace: [ 748.264788][T15443] [ 748.264797][T15443] dump_stack_lvl+0x16c/0x1f0 [ 748.264837][T15443] should_fail_ex+0x512/0x640 [ 748.264865][T15443] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 748.264898][T15443] should_failslab+0xc2/0x120 [ 748.264929][T15443] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 748.264959][T15443] ? alloc_unbound_pwq+0x3ff/0xe10 [ 748.264992][T15443] alloc_unbound_pwq+0x3ff/0xe10 [ 748.265027][T15443] apply_wqattrs_prepare+0x3af/0xbd0 [ 748.265067][T15443] apply_workqueue_attrs_locked+0x64/0xe0 [ 748.265097][T15443] __alloc_workqueue+0x1007/0x1810 [ 748.265140][T15443] alloc_workqueue+0xd2/0x200 [ 748.265172][T15443] ? __pfx_alloc_workqueue+0x10/0x10 [ 748.265203][T15443] ? __init_waitqueue_head+0xca/0x150 [ 748.265230][T15443] ? lockdep_init_map_type+0x5c/0x280 [ 748.265265][T15443] ? __alloc_disk_node+0x3fd/0x610 [ 748.265303][T15443] nbd_dev_add+0x526/0xbb0 [ 748.265339][T15443] ? __pfx_nbd_dev_add+0x10/0x10 [ 748.265372][T15443] ? nbd_genl_connect+0x98e/0x1c20 [ 748.265433][T15443] ? bpf_lsm_capable+0x9/0x10 [ 748.265462][T15443] ? __radix_tree_lookup+0x21f/0x2c0 [ 748.265500][T15443] nbd_genl_connect+0x8b0/0x1c20 [ 748.265543][T15443] ? __pfx_nbd_genl_connect+0x10/0x10 [ 748.265580][T15443] ? __nla_parse+0x40/0x60 [ 748.265618][T15443] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 748.265644][T15443] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 748.265676][T15443] genl_family_rcv_msg_doit+0x206/0x2f0 [ 748.265701][T15443] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 748.265725][T15443] ? genl_get_cmd+0x194/0x580 [ 748.265773][T15443] ? __local_bh_enable_ip+0xa4/0x120 [ 748.265802][T15443] ? __dev_queue_xmit+0x896/0x43e0 [ 748.265827][T15443] ? __radix_tree_lookup+0x21f/0x2c0 [ 748.265862][T15443] genl_rcv_msg+0x55c/0x800 [ 748.265888][T15443] ? __pfx_genl_rcv_msg+0x10/0x10 [ 748.265910][T15443] ? __pfx___dev_queue_xmit+0x10/0x10 [ 748.265936][T15443] ? __pfx_nbd_genl_connect+0x10/0x10 [ 748.265976][T15443] ? __lock_acquire+0xaa4/0x1ba0 [ 748.266014][T15443] netlink_rcv_skb+0x16a/0x440 [ 748.266049][T15443] ? __pfx_genl_rcv_msg+0x10/0x10 [ 748.266072][T15443] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 748.266123][T15443] ? __pfx_down_read+0x10/0x10 [ 748.266145][T15443] ? netlink_deliver_tap+0x1ae/0xd30 [ 748.266183][T15443] genl_rcv+0x28/0x40 [ 748.266218][T15443] netlink_unicast+0x53a/0x7f0 [ 748.266256][T15443] ? __pfx_netlink_unicast+0x10/0x10 [ 748.266289][T15443] ? __lock_acquire+0xaa4/0x1ba0 [ 748.266330][T15443] netlink_sendmsg+0x8d1/0xdd0 [ 748.266369][T15443] ? __pfx_netlink_sendmsg+0x10/0x10 [ 748.266435][T15443] ____sys_sendmsg+0xa95/0xc70 [ 748.266460][T15443] ? copy_msghdr_from_user+0x10a/0x160 [ 748.266492][T15443] ? __pfx_____sys_sendmsg+0x10/0x10 [ 748.266520][T15443] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 748.266560][T15443] ___sys_sendmsg+0x134/0x1d0 [ 748.266594][T15443] ? __pfx____sys_sendmsg+0x10/0x10 [ 748.266664][T15443] __sys_sendmsg+0x16d/0x220 [ 748.266696][T15443] ? __pfx___sys_sendmsg+0x10/0x10 [ 748.266727][T15443] ? __x64_sys_futex+0x1e0/0x4c0 [ 748.266764][T15443] ? rcu_is_watching+0x12/0xc0 [ 748.266797][T15443] do_syscall_64+0xcd/0x230 [ 748.266835][T15443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 748.266859][T15443] RIP: 0033:0x7fe51578e169 [ 748.266878][T15443] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 748.266902][T15443] RSP: 002b:00007fe51659d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 748.266925][T15443] RAX: ffffffffffffffda RBX: 00007fe5159b5fa0 RCX: 00007fe51578e169 [ 748.266941][T15443] RDX: 0000000000008880 RSI: 0000200000001e00 RDI: 0000000000000006 [ 748.266956][T15443] RBP: 00007fe515810a68 R08: 0000000000000000 R09: 0000000000000000 [ 748.266971][T15443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 748.266985][T15443] R13: 0000000000000000 R14: 00007fe5159b5fa0 R15: 00007ffd2db97208 [ 748.267016][T15443] [ 749.389886][T15443] block (null): Could not allocate knbd recv work queue. [ 749.458837][T15443] nbd: failed to add new device [ 750.183775][T15456] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3330'. [ 752.346906][T15496] FAULT_INJECTION: forcing a failure. [ 752.346906][T15496] name failslab, interval 1, probability 0, space 0, times 0 [ 752.398175][T15496] CPU: 1 UID: 0 PID: 15496 Comm: syz.2.3341 Not tainted 6.15.0-rc2-syzkaller-00278-gfc96b232f8e7 #0 PREEMPT(full) [ 752.398212][T15496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 752.398227][T15496] Call Trace: [ 752.398234][T15496] [ 752.398244][T15496] dump_stack_lvl+0x16c/0x1f0 [ 752.398284][T15496] should_fail_ex+0x512/0x640 [ 752.398313][T15496] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 752.398345][T15496] should_failslab+0xc2/0x120 [ 752.398376][T15496] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 752.398405][T15496] ? mas_alloc_nodes+0x18b/0x8b0 [ 752.398439][T15496] mas_alloc_nodes+0x18b/0x8b0 [ 752.398475][T15496] mas_node_count_gfp+0x105/0x130 [ 752.398507][T15496] mas_preallocate+0x53e/0xcd0 [ 752.398534][T15496] ? __pfx_mas_preallocate+0x10/0x10 [ 752.398566][T15496] ? mt_find+0x757/0xa30 [ 752.398606][T15496] vma_link+0x135/0x6a0 [ 752.398637][T15496] ? __pfx_vma_link+0x10/0x10 [ 752.398681][T15496] insert_vm_struct+0x196/0x3e0 [ 752.398705][T15496] ? __pfx_insert_vm_struct+0x10/0x10 [ 752.398730][T15496] ? lockdep_init_map_type+0x5c/0x280 [ 752.398768][T15496] alloc_bprm+0x76d/0xdd0 [ 752.398794][T15496] do_execveat_common.isra.0+0x1ce/0x610 [ 752.398823][T15496] __x64_sys_execve+0x8e/0xb0 [ 752.398847][T15496] do_syscall_64+0xcd/0x230 [ 752.398884][T15496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 752.398907][T15496] RIP: 0033:0x7f7d9298e169 [ 752.398925][T15496] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 752.398948][T15496] RSP: 002b:00007f7d93803038 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 752.398970][T15496] RAX: ffffffffffffffda RBX: 00007f7d92bb5fa0 RCX: 00007f7d9298e169 [ 752.398986][T15496] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000001c0 [ 752.399001][T15496] RBP: 00007f7d92a10a68 R08: 0000000000000000 R09: 0000000000000000 [ 752.399014][T15496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 752.399028][T15496] R13: 0000000000000000 R14: 00007f7d92bb5fa0 R15: 00007ffe8c118bb8 [ 752.399057][T15496] [ 752.939772][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 752.955329][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 753.710433][T15504] netlink: 342 bytes leftover after parsing attributes in process `syz.4.3344'. [ 753.769968][T15504] netlink: 242 bytes leftover after parsing attributes in process `syz.4.3344'. [ 753.809452][T15506] netlink: 146 bytes leftover after parsing attributes in process `syz.2.3345'. [ 754.134436][T15510] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3346'. [ 754.163939][T15512] FAULT_INJECTION: forcing a failure. [ 754.163939][T15512] name failslab, interval 1, probability 0, space 0, times 0 [ 754.213206][T15508] FAULT_INJECTION: forcing a failure. [ 754.213206][T15508] name failslab, interval 1, probability 0, space 0, times 0 [ 754.236058][T15512] CPU: 1 UID: 0 PID: 15512 Comm: syz.2.3347 Not tainted 6.15.0-rc2-syzkaller-00278-gfc96b232f8e7 #0 PREEMPT(full) [ 754.236104][T15512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 754.236118][T15512] Call Trace: [ 754.236125][T15512] [ 754.236134][T15512] dump_stack_lvl+0x16c/0x1f0 [ 754.236173][T15512] should_fail_ex+0x512/0x640 [ 754.236201][T15512] ? fs_reclaim_acquire+0xae/0x150 [ 754.236240][T15512] should_failslab+0xc2/0x120 [ 754.236271][T15512] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 754.236300][T15512] ? security_inode_alloc+0x3b/0x2b0 [ 754.236331][T15512] security_inode_alloc+0x3b/0x2b0 [ 754.236359][T15512] inode_init_always_gfp+0xce4/0x1030 [ 754.236387][T15512] alloc_inode+0x86/0x240 [ 754.236417][T15512] path_from_stashed+0x2be/0xb00 [ 754.236441][T15512] ? do_raw_spin_lock+0x12c/0x2b0 [ 754.236464][T15512] ? __pfx_path_from_stashed+0x10/0x10 [ 754.236490][T15512] ? do_raw_spin_unlock+0x172/0x230 [ 754.236516][T15512] ns_get_path+0x5f/0x80 [ 754.236537][T15512] proc_ns_get_link+0x121/0x260 [ 754.236560][T15512] ? __pfx_proc_ns_get_link+0x10/0x10 [ 754.236584][T15512] ? __pfx___might_resched+0x10/0x10 [ 754.236616][T15512] ? __pfx_proc_ns_get_link+0x10/0x10 [ 754.236639][T15512] step_into+0x1b22/0x2270 [ 754.236682][T15512] ? __pfx_step_into+0x10/0x10 [ 754.236717][T15512] ? find_held_lock+0x2b/0x80 [ 754.236750][T15512] path_openat+0x749/0x2d40 [ 754.236784][T15512] ? __pfx_path_openat+0x10/0x10 [ 754.236816][T15512] do_filp_open+0x20b/0x470 [ 754.236840][T15512] ? __pfx_do_filp_open+0x10/0x10 [ 754.236884][T15512] ? alloc_fd+0x471/0x7d0 [ 754.236913][T15512] do_sys_openat2+0x11b/0x1d0 [ 754.236946][T15512] ? __pfx_do_sys_openat2+0x10/0x10 [ 754.236996][T15512] __x64_sys_openat+0x174/0x210 [ 754.237030][T15512] ? __pfx___x64_sys_openat+0x10/0x10 [ 754.237067][T15512] ? rcu_is_watching+0x12/0xc0 [ 754.237098][T15512] do_syscall_64+0xcd/0x230 [ 754.237135][T15512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 754.237158][T15512] RIP: 0033:0x7f7d9298cad0 [ 754.237178][T15512] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 754.237202][T15512] RSP: 002b:00007f7d93802f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 754.237224][T15512] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f7d9298cad0 [ 754.237239][T15512] RDX: 0000000000000002 RSI: 00007f7d93802fa0 RDI: 00000000ffffff9c [ 754.237254][T15512] RBP: 00007f7d93802fa0 R08: 0000000000000000 R09: 0000000000000000 [ 754.237268][T15512] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 754.237282][T15512] R13: 0000000000000000 R14: 00007f7d92bb5fa0 R15: 00007ffe8c118bb8 [ 754.237310][T15512] [ 754.799848][T15508] CPU: 1 UID: 0 PID: 15508 Comm: syz.5.3343 Not tainted 6.15.0-rc2-syzkaller-00278-gfc96b232f8e7 #0 PREEMPT(full) [ 754.799887][T15508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 754.799902][T15508] Call Trace: [ 754.799915][T15508] [ 754.799925][T15508] dump_stack_lvl+0x16c/0x1f0 [ 754.799966][T15508] should_fail_ex+0x512/0x640 [ 754.799994][T15508] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 754.800027][T15508] should_failslab+0xc2/0x120 [ 754.800058][T15508] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 754.800087][T15508] ? __proc_create+0xc3/0x8c0 [ 754.800114][T15508] ? __proc_create+0x2ce/0x8c0 [ 754.800145][T15508] __proc_create+0x2ce/0x8c0 [ 754.800175][T15508] ? __pfx___proc_create+0x10/0x10 [ 754.800215][T15508] proc_create_reg+0x7d/0x180 [ 754.800247][T15508] proc_create_data+0x86/0x110 [ 754.800276][T15508] ? __pfx_proc_create_data+0x10/0x10 [ 754.800310][T15508] ? net_generic+0xf4/0x2a0 [ 754.800336][T15508] nfsd_net_init+0x11b/0x3d0 [ 754.800360][T15508] ? __pfx_nfsd_net_init+0x10/0x10 [ 754.800382][T15508] ops_init+0x1df/0x5f0 [ 754.800420][T15508] setup_net+0x21e/0x850 [ 754.800457][T15508] ? __pfx_setup_net+0x10/0x10 [ 754.800490][T15508] ? lockdep_init_map_type+0x5c/0x280 [ 754.800525][T15508] ? __pfx_down_read_killable+0x10/0x10 [ 754.800551][T15508] ? debug_mutex_init+0x37/0x70 [ 754.800578][T15508] copy_net_ns+0x2a6/0x5f0 [ 754.800618][T15508] create_new_namespaces+0x3ea/0xad0 [ 754.800654][T15508] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 754.800685][T15508] ksys_unshare+0x45b/0xa40 [ 754.800721][T15508] ? __pfx_ksys_unshare+0x10/0x10 [ 754.800753][T15508] ? xfd_validate_state+0x5d/0x180 [ 754.800779][T15508] ? rcu_is_watching+0x12/0xc0 [ 754.800810][T15508] __x64_sys_unshare+0x31/0x40 [ 754.800844][T15508] do_syscall_64+0xcd/0x230 [ 754.800887][T15508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 754.800916][T15508] RIP: 0033:0x7fe51578e169 [ 754.800935][T15508] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 754.800959][T15508] RSP: 002b:00007fe51659d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 754.800982][T15508] RAX: ffffffffffffffda RBX: 00007fe5159b5fa0 RCX: 00007fe51578e169 [ 754.800998][T15508] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 754.801012][T15508] RBP: 00007fe515810a68 R08: 0000000000000000 R09: 0000000000000000 [ 754.801027][T15508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 754.801041][T15508] R13: 0000000000000000 R14: 00007fe5159b5fa0 R15: 00007ffd2db97208 [ 754.801071][T15508] [ 755.269272][T15519] netlink: 330 bytes leftover after parsing attributes in process `syz.4.3349'. [ 755.278549][T15519] : renamed from hsr0 (while UP) [ 756.355293][T15529] FAULT_INJECTION: forcing a failure. [ 756.355293][T15529] name failslab, interval 1, probability 0, space 0, times 0 [ 756.414363][T15529] CPU: 1 UID: 0 PID: 15529 Comm: syz.4.3353 Not tainted 6.15.0-rc2-syzkaller-00278-gfc96b232f8e7 #0 PREEMPT(full) [ 756.414399][T15529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 756.414414][T15529] Call Trace: [ 756.414421][T15529] [ 756.414431][T15529] dump_stack_lvl+0x16c/0x1f0 [ 756.414471][T15529] should_fail_ex+0x512/0x640 [ 756.414499][T15529] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 756.414533][T15529] should_failslab+0xc2/0x120 [ 756.414565][T15529] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 756.414593][T15529] ? _raw_spin_unlock+0x28/0x50 [ 756.414622][T15529] ? alloc_inode+0xc3/0x240 [ 756.414657][T15529] alloc_inode+0xc3/0x240 [ 756.414688][T15529] new_inode+0x22/0x1c0 [ 756.414721][T15529] simple_fill_super+0x306/0x720 [ 756.414748][T15529] ? __pfx_nfsd_fill_super+0x10/0x10 [ 756.414773][T15529] nfsd_fill_super+0x90/0x530 [ 756.414802][T15529] ? __pfx_set_anon_super_fc+0x10/0x10 [ 756.414841][T15529] ? __pfx_nfsd_fill_super+0x10/0x10 [ 756.414864][T15529] get_tree_keyed+0x10b/0x1d0 [ 756.414889][T15529] vfs_get_tree+0x8b/0x340 [ 756.414923][T15529] path_mount+0x14d4/0x1f30 [ 756.414952][T15529] ? kmem_cache_free+0x2d4/0x4d0 [ 756.414978][T15529] ? __pfx_path_mount+0x10/0x10 [ 756.415009][T15529] ? putname+0x154/0x1a0 [ 756.415041][T15529] __x64_sys_mount+0x28d/0x310 [ 756.415068][T15529] ? __pfx___x64_sys_mount+0x10/0x10 [ 756.415094][T15529] ? rcu_is_watching+0x12/0xc0 [ 756.415127][T15529] do_syscall_64+0xcd/0x230 [ 756.415167][T15529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 756.415191][T15529] RIP: 0033:0x7f32a958e169 [ 756.415209][T15529] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 756.415232][T15529] RSP: 002b:00007f32a73f6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 756.415253][T15529] RAX: ffffffffffffffda RBX: 00007f32a97b5fa0 RCX: 00007f32a958e169 [ 756.415269][T15529] RDX: 00002000000001c0 RSI: 00002000000000c0 RDI: 0000000000000000 [ 756.415284][T15529] RBP: 00007f32a9610a68 R08: 0000000000000000 R09: 0000000000000000 [ 756.415298][T15529] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 756.415311][T15529] R13: 0000000000000000 R14: 00007f32a97b5fa0 R15: 00007ffedfe2ba28 [ 756.415341][T15529] [ 757.224721][T15536] openvswitch: netlink: IP tunnel dst address not specified [ 757.787057][T15548] netlink: 'syz.4.3362': attribute type 4 has an invalid length. [ 757.810899][T15548] netlink: 314 bytes leftover after parsing attributes in process `syz.4.3362'. [ 757.845245][T15548] IPv6: NLM_F_REPLACE set, but no existing node found! [ 758.130974][T15550] netlink: 330 bytes leftover after parsing attributes in process `syz.4.3363'. [ 759.051515][T15563] netlink: 330 bytes leftover after parsing attributes in process `syz.2.3368'. [ 759.760821][T12865] Bluetooth: hci3: command 0x0406 tx timeout [ 760.577476][T15583] netlink: 338 bytes leftover after parsing attributes in process `syz.4.3376'. [ 760.635765][T15583] netlink: 338 bytes leftover after parsing attributes in process `syz.4.3376'. [ 760.733377][T15492] Process accounting resumed [ 761.978378][T15611] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3384'. [ 762.511692][T15618] FAULT_INJECTION: forcing a failure. [ 762.511692][T15618] name failslab, interval 1, probability 0, space 0, times 0 [ 762.579963][T15618] CPU: 1 UID: 0 PID: 15618 Comm: syz.4.3388 Not tainted 6.15.0-rc2-syzkaller-00278-gfc96b232f8e7 #0 PREEMPT(full) [ 762.579999][T15618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 762.580014][T15618] Call Trace: [ 762.580021][T15618] [ 762.580030][T15618] dump_stack_lvl+0x16c/0x1f0 [ 762.580084][T15618] should_fail_ex+0x512/0x640 [ 762.580111][T15618] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 762.580145][T15618] should_failslab+0xc2/0x120 [ 762.580176][T15618] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 762.580208][T15618] ? kstrdup_const+0x63/0x80 [ 762.580243][T15618] kstrdup+0x53/0x100 [ 762.580274][T15618] kstrdup_const+0x63/0x80 [ 762.580311][T15618] __kernfs_new_node+0x9b/0x8a0 [ 762.580337][T15618] ? __pfx___kernfs_new_node+0x10/0x10 [ 762.580368][T15618] ? find_held_lock+0x2b/0x80 [ 762.580392][T15618] ? kernfs_root+0xee/0x2a0 [ 762.580419][T15618] kernfs_new_node+0x13c/0x1e0 [ 762.580451][T15618] kernfs_create_link+0xcc/0x240 [ 762.580486][T15618] sysfs_do_create_link_sd+0x90/0x140 [ 762.580510][T15618] sysfs_create_link+0x61/0xc0 [ 762.580531][T15618] device_add+0x62c/0x1a70 [ 762.580558][T15618] ? alloc_workqueue+0x198/0x200 [ 762.580589][T15618] ? __pfx_device_add+0x10/0x10 [ 762.580624][T15618] nfc_register_device+0x41/0x3c0 [ 762.580662][T15618] nci_register_device+0x7f1/0xb80 [ 762.580693][T15618] ? __pfx_nci_register_device+0x10/0x10 [ 762.580726][T15618] ? lockdep_init_map_type+0x5c/0x280 [ 762.580763][T15618] virtual_ncidev_open+0x141/0x220 [ 762.580791][T15618] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 762.580819][T15618] misc_open+0x35a/0x420 [ 762.580849][T15618] ? __pfx_misc_open+0x10/0x10 [ 762.580879][T15618] chrdev_open+0x231/0x6a0 [ 762.580904][T15618] ? __pfx_apparmor_file_open+0x10/0x10 [ 762.580934][T15618] ? __pfx_chrdev_open+0x10/0x10 [ 762.580963][T15618] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 762.581005][T15618] do_dentry_open+0x741/0x1c10 [ 762.581031][T15618] ? __pfx_chrdev_open+0x10/0x10 [ 762.581063][T15618] vfs_open+0x82/0x3f0 [ 762.581098][T15618] path_openat+0x1e5e/0x2d40 [ 762.581133][T15618] ? __pfx_path_openat+0x10/0x10 [ 762.581164][T15618] do_filp_open+0x20b/0x470 [ 762.581188][T15618] ? __pfx_do_filp_open+0x10/0x10 [ 762.581233][T15618] ? alloc_fd+0x471/0x7d0 [ 762.581263][T15618] do_sys_openat2+0x11b/0x1d0 [ 762.581300][T15618] ? __pfx_do_sys_openat2+0x10/0x10 [ 762.581344][T15618] __x64_sys_openat+0x174/0x210 [ 762.581377][T15618] ? __pfx___x64_sys_openat+0x10/0x10 [ 762.581411][T15618] ? rcu_is_watching+0x12/0xc0 [ 762.581443][T15618] do_syscall_64+0xcd/0x230 [ 762.581478][T15618] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 762.581501][T15618] RIP: 0033:0x7f32a958e169 [ 762.581519][T15618] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 762.581541][T15618] RSP: 002b:00007f32a73f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 762.581563][T15618] RAX: ffffffffffffffda RBX: 00007f32a97b5fa0 RCX: 00007f32a958e169 [ 762.581578][T15618] RDX: 0000000000000002 RSI: 0000200000000400 RDI: ffffffffffffff9c [ 762.581592][T15618] RBP: 00007f32a9610a68 R08: 0000000000000000 R09: 0000000000000000 [ 762.581606][T15618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 762.581620][T15618] R13: 0000000000000000 R14: 00007f32a97b5fa0 R15: 00007ffedfe2ba28 [ 762.581648][T15618] 1 [ 764.614465][T15648] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3396'. [ 768.052943][T15712] FAULT_INJECTION: forcing a failure. [ 768.052943][T15712] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 768.183051][T15712] CPU: 1 UID: 0 PID: 15712 Comm: syz.2.3420 Not tainted 6.15.0-rc2-syzkaller-00278-gfc96b232f8e7 #0 PREEMPT(full) [ 768.183088][T15712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 768.183103][T15712] Call Trace: [ 768.183111][T15712] [ 768.183121][T15712] dump_stack_lvl+0x16c/0x1f0 [ 768.183160][T15712] should_fail_ex+0x512/0x640 [ 768.183192][T15712] _copy_from_user+0x2e/0xd0 [ 768.183223][T15712] restore_sigcontext+0xcb/0x6a0 [ 768.183258][T15712] ? __pfx_restore_sigcontext+0x10/0x10 [ 768.183314][T15712] ? __pfx_restore_altstack+0x10/0x10 [ 768.183351][T15712] ? _raw_spin_unlock_irq+0x23/0x50 [ 768.183380][T15712] ? lockdep_hardirqs_on+0x7c/0x110 [ 768.183416][T15712] __do_sys_rt_sigreturn+0x1bb/0x230 [ 768.183455][T15712] ? __pfx___do_sys_rt_sigreturn+0x10/0x10 [ 768.183499][T15712] do_syscall_64+0xcd/0x230 [ 768.183536][T15712] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 768.183560][T15712] RIP: 0033:0x7f7d9292a359 [ 768.183578][T15712] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 768.183601][T15712] RSP: 002b:00007f7d93802a80 EFLAGS: 00000246 ORIG_RAX: 000000000000000f [ 768.183623][T15712] RAX: ffffffffffffffda RBX: 00007f7d92bb5fa0 RCX: 00007f7d9292a359 [ 768.183639][T15712] RDX: 00007f7d93802a80 RSI: 00007f7d93802bb0 RDI: 0000000000000011 [ 768.183654][T15712] RBP: 00007f7d92a10a68 R08: 0000000000000000 R09: 0000000000000000 [ 768.183668][T15712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 768.183682][T15712] R13: 0000000000000000 R14: 00007f7d92bb5fa0 R15: 00007ffe8c118bb8 [ 768.183710][T15712] [ 768.358094][ C1] vkms_vblank_simulate: vblank timer overrun [ 769.572274][T15736] input: isc as /devices/virtual/input/input9 [ 769.627912][T15736] FAULT_INJECTION: forcing a failure. [ 769.627912][T15736] name failslab, interval 1, probability 0, space 0, times 0 [ 769.717949][T15736] CPU: 1 UID: 0 PID: 15736 Comm: syz.4.3430 Not tainted 6.15.0-rc2-syzkaller-00278-gfc96b232f8e7 #0 PREEMPT(full) [ 769.717986][T15736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 769.718001][T15736] Call Trace: [ 769.718009][T15736] [ 769.718018][T15736] dump_stack_lvl+0x16c/0x1f0 [ 769.718056][T15736] should_fail_ex+0x512/0x640 [ 769.718085][T15736] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 769.718117][T15736] should_failslab+0xc2/0x120 [ 769.718148][T15736] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 769.718178][T15736] ? __kernfs_new_node+0xd2/0x8a0 [ 769.718206][T15736] __kernfs_new_node+0xd2/0x8a0 [ 769.718229][T15736] ? kernfs_add_one+0x14e/0x840 [ 769.718256][T15736] ? __pfx___kernfs_new_node+0x10/0x10 [ 769.718287][T15736] ? find_held_lock+0x2b/0x80 [ 769.718312][T15736] ? kernfs_root+0xee/0x2a0 [ 769.718341][T15736] kernfs_new_node+0x13c/0x1e0 [ 769.718373][T15736] kernfs_create_link+0xcc/0x240 [ 769.718409][T15736] sysfs_do_create_link_sd+0x90/0x140 [ 769.718434][T15736] sysfs_create_link+0x61/0xc0 [ 769.718456][T15736] device_add+0x50a/0x1a70 [ 769.718485][T15736] ? __pfx_device_add+0x10/0x10 [ 769.718510][T15736] ? __pfx_exact_lock+0x10/0x10 [ 769.718541][T15736] ? kobject_get+0xbb/0x150 [ 769.718578][T15736] cdev_device_add+0xc2/0x1e0 [ 769.718607][T15736] evdev_connect+0x3a4/0x4c0 [ 769.718633][T15736] input_attach_handler.isra.0+0x181/0x260 [ 769.718687][T15736] input_register_device+0xa84/0x1130 [ 769.718729][T15736] uinput_ioctl_handler.isra.0+0x1357/0x1df0 [ 769.718763][T15736] ? __pfx_uinput_ioctl_handler.isra.0+0x10/0x10 [ 769.718801][T15736] ? find_held_lock+0x2b/0x80 [ 769.718840][T15736] ? __pfx_uinput_ioctl+0x10/0x10 [ 769.718869][T15736] __x64_sys_ioctl+0x190/0x200 [ 769.718905][T15736] do_syscall_64+0xcd/0x230 [ 769.718948][T15736] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 769.718972][T15736] RIP: 0033:0x7f32a958e169 [ 769.718990][T15736] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 769.719013][T15736] RSP: 002b:00007f32a73f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 769.719035][T15736] RAX: ffffffffffffffda RBX: 00007f32a97b5fa0 RCX: 00007f32a958e169 [ 769.719050][T15736] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000005 [ 769.719065][T15736] RBP: 00007f32a9610a68 R08: 0000000000000000 R09: 0000000000000000 [ 769.719078][T15736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 769.719092][T15736] R13: 0000000000000000 R14: 00007f32a97b5fa0 R15: 00007ffedfe2ba28 [ 769.719121][T15736] [ 769.977348][ C1] vkms_vblank_simulate: vblank timer overrun [ 770.070761][T15736] input: failed to attach handler evdev to device input9, error: -12 [ 770.389518][T15749] FAULT_INJECTION: forcing a failure. [ 770.389518][T15749] name failslab, interval 1, probability 0, space 0, times 0 [ 770.437358][T15749] CPU: 1 UID: 0 PID: 15749 Comm: syz.4.3437 Not tainted 6.15.0-rc2-syzkaller-00278-gfc96b232f8e7 #0 PREEMPT(full) [ 770.437394][T15749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 770.437409][T15749] Call Trace: [ 770.437417][T15749] [ 770.437426][T15749] dump_stack_lvl+0x16c/0x1f0 [ 770.437465][T15749] should_fail_ex+0x512/0x640 [ 770.437493][T15749] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 770.437528][T15749] should_failslab+0xc2/0x120 [ 770.437560][T15749] __kmalloc_cache_noprof+0x6a/0x3e0 [ 770.437586][T15749] ? apply_wqattrs_prepare+0x130/0xbd0 [ 770.437618][T15749] apply_wqattrs_prepare+0x130/0xbd0 [ 770.437669][T15749] apply_workqueue_attrs_locked+0x64/0xe0 [ 770.437699][T15749] __alloc_workqueue+0x1007/0x1810 [ 770.437742][T15749] alloc_workqueue+0xd2/0x200 [ 770.437774][T15749] ? __pfx_alloc_workqueue+0x10/0x10 [ 770.437806][T15749] ? __init_waitqueue_head+0xca/0x150 [ 770.437832][T15749] ? lockdep_init_map_type+0x5c/0x280 [ 770.437867][T15749] ? __alloc_disk_node+0x3fd/0x610 [ 770.437904][T15749] nbd_dev_add+0x526/0xbb0 [ 770.437940][T15749] ? __pfx_nbd_dev_add+0x10/0x10 [ 770.437973][T15749] ? nbd_genl_connect+0x98e/0x1c20 [ 770.438029][T15749] ? bpf_lsm_capable+0x9/0x10 [ 770.438056][T15749] ? __radix_tree_lookup+0x21f/0x2c0 [ 770.438094][T15749] nbd_genl_connect+0x8b0/0x1c20 [ 770.438136][T15749] ? __pfx_nbd_genl_connect+0x10/0x10 [ 770.438174][T15749] ? __nla_parse+0x40/0x60 [ 770.438211][T15749] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 770.438237][T15749] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 770.438268][T15749] genl_family_rcv_msg_doit+0x206/0x2f0 [ 770.438294][T15749] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 770.438317][T15749] ? genl_get_cmd+0x194/0x580 [ 770.438364][T15749] ? __local_bh_enable_ip+0xa4/0x120 [ 770.438393][T15749] ? __dev_queue_xmit+0x896/0x43e0 [ 770.438417][T15749] ? __radix_tree_lookup+0x21f/0x2c0 [ 770.438453][T15749] genl_rcv_msg+0x55c/0x800 [ 770.438479][T15749] ? __pfx_genl_rcv_msg+0x10/0x10 [ 770.438500][T15749] ? __pfx___dev_queue_xmit+0x10/0x10 [ 770.438526][T15749] ? __pfx_nbd_genl_connect+0x10/0x10 [ 770.438565][T15749] ? __lock_acquire+0xaa4/0x1ba0 [ 770.438604][T15749] netlink_rcv_skb+0x16a/0x440 [ 770.438648][T15749] ? __pfx_genl_rcv_msg+0x10/0x10 [ 770.438672][T15749] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 770.438722][T15749] ? __pfx_down_read+0x10/0x10 [ 770.438745][T15749] ? netlink_deliver_tap+0x1ae/0xd30 [ 770.438782][T15749] genl_rcv+0x28/0x40 [ 770.438818][T15749] netlink_unicast+0x53a/0x7f0 [ 770.438856][T15749] ? __pfx_netlink_unicast+0x10/0x10 [ 770.438889][T15749] ? __lock_acquire+0xaa4/0x1ba0 [ 770.438929][T15749] netlink_sendmsg+0x8d1/0xdd0 [ 770.438969][T15749] ? __pfx_netlink_sendmsg+0x10/0x10 [ 770.439015][T15749] ____sys_sendmsg+0xa95/0xc70 [ 770.439039][T15749] ? copy_msghdr_from_user+0x10a/0x160 [ 770.439070][T15749] ? __pfx_____sys_sendmsg+0x10/0x10 [ 770.439099][T15749] ? try_to_wake_up+0xa2f/0x1680 [ 770.439128][T15749] ___sys_sendmsg+0x134/0x1d0 [ 770.439162][T15749] ? __pfx____sys_sendmsg+0x10/0x10 [ 770.439231][T15749] __sys_sendmsg+0x16d/0x220 [ 770.439264][T15749] ? __pfx___sys_sendmsg+0x10/0x10 [ 770.439294][T15749] ? __x64_sys_futex+0x1e0/0x4c0 [ 770.439330][T15749] ? rcu_is_watching+0x12/0xc0 [ 770.439363][T15749] do_syscall_64+0xcd/0x230 [ 770.439400][T15749] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 770.439424][T15749] RIP: 0033:0x7f32a958e169 [ 770.439444][T15749] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 770.439471][T15749] RSP: 002b:00007f32a73f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 770.439494][T15749] RAX: ffffffffffffffda RBX: 00007f32a97b5fa0 RCX: 00007f32a958e169 [ 770.439511][T15749] RDX: 0000000000008880 RSI: 0000200000001e00 RDI: 0000000000000006 [ 770.439525][T15749] RBP: 00007f32a9610a68 R08: 0000000000000000 R09: 0000000000000000 [ 770.439539][T15749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 770.439554][T15749] R13: 0000000000000000 R14: 00007f32a97b5fa0 R15: 00007ffedfe2ba28 [ 770.439584][T15749] [ 770.844824][ C1] vkms_vblank_simulate: vblank timer overrun [ 770.881033][T15749] block (null): Could not allocate knbd recv work queue. [ 770.888831][T15749] nbd: failed to add new device 1 [ 771.325104][T15767] FAULT_INJECTION: forcing a failure. [ 771.325104][T15767] name failslab, interval 1, probability 0, space 0, times 0 [ 771.490266][T15767] CPU: 1 UID: 0 PID: 15767 Comm: syz.3.3442 Not tainted 6.15.0-rc2-syzkaller-00278-gfc96b232f8e7 #0 PREEMPT(full) [ 771.490301][T15767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 771.490315][T15767] Call Trace: [ 771.490323][T15767] [ 771.490331][T15767] dump_stack_lvl+0x16c/0x1f0 [ 771.490370][T15767] should_fail_ex+0x512/0x640 [ 771.490397][T15767] ? __kmalloc_noprof+0xbf/0x510 [ 771.490426][T15767] ? __register_sysctl_table+0xea2/0x1900 [ 771.490455][T15767] should_failslab+0xc2/0x120 [ 771.490488][T15767] __kmalloc_noprof+0xd2/0x510 [ 771.490528][T15767] ? __register_sysctl_table+0xe8e/0x1900 [ 771.490564][T15767] __register_sysctl_table+0xea2/0x1900 [ 771.490600][T15767] ? __pfx___register_sysctl_table+0x10/0x10 [ 771.490628][T15767] ? is_module_address+0x69/0xf0 [ 771.490661][T15767] ? register_net_sysctl_sz+0x228/0x3e0 [ 771.490705][T15767] __devinet_sysctl_register+0x1b9/0x360 [ 771.490746][T15767] ? __pfx___devinet_sysctl_register+0x10/0x10 [ 771.490779][T15767] ? trace_kmalloc+0x2b/0xd0 [ 771.490814][T15767] ? devinet_init_net+0xeb/0x910 [ 771.490850][T15767] ? __asan_memcpy+0x3c/0x60 [ 771.490876][T15767] devinet_init_net+0x315/0x910 [ 771.490912][T15767] ? __pfx_devinet_init_net+0x10/0x10 [ 771.490947][T15767] ops_init+0x1df/0x5f0 [ 771.490984][T15767] setup_net+0x21e/0x850 [ 771.491020][T15767] ? __pfx_setup_net+0x10/0x10 [ 771.491052][T15767] ? lockdep_init_map_type+0x5c/0x280 [ 771.491087][T15767] ? __pfx_down_read_killable+0x10/0x10 [ 771.491113][T15767] ? debug_mutex_init+0x37/0x70 [ 771.491139][T15767] copy_net_ns+0x2a6/0x5f0 [ 771.491179][T15767] create_new_namespaces+0x3ea/0xad0 [ 771.491215][T15767] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 771.491246][T15767] ksys_unshare+0x45b/0xa40 [ 771.491281][T15767] ? __pfx_ksys_unshare+0x10/0x10 [ 771.491314][T15767] ? xfd_validate_state+0x5d/0x180 [ 771.491340][T15767] ? rcu_is_watching+0x12/0xc0 [ 771.491371][T15767] __x64_sys_unshare+0x31/0x40 [ 771.491405][T15767] do_syscall_64+0xcd/0x230 [ 771.491442][T15767] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 771.491465][T15767] RIP: 0033:0x7fc705f8e169 [ 771.491484][T15767] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 771.491507][T15767] RSP: 002b:00007fc706daa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 771.491534][T15767] RAX: ffffffffffffffda RBX: 00007fc7061b5fa0 RCX: 00007fc705f8e169 [ 771.491551][T15767] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 771.491565][T15767] RBP: 00007fc706010a68 R08: 0000000000000000 R09: 0000000000000000 [ 771.491580][T15767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 771.491594][T15767] R13: 0000000000000000 R14: 00007fc7061b5fa0 R15: 00007ffc325ad7e8 [ 771.491623][T15767] [ 771.491632][T15767] sysctl could not get directory: /net/ipv4 -12 [ 771.875774][T15773] netlink: 330 bytes leftover after parsing attributes in process `syz.5.3446'. [ 772.526578][T15785] FAULT_INJECTION: forcing a failure. [ 772.526578][T15785] name failslab, interval 1, probability 0, space 0, times 0 1 [ 772.597874][T15785] CPU: 1 UID: 0 PID: 15785 Comm: syz.2.3450 Not tainted 6.15.0-rc2-syzkaller-00278-gfc96b232f8e7 #0 PREEMPT(full) [ 772.597909][T15785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 772.597923][T15785] Call Trace: [ 772.597931][T15785] [ 772.597940][T15785] dump_stack_lvl+0x16c/0x1f0 [ 772.597995][T15785] should_fail_ex+0x512/0x640 [ 772.598028][T15785] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 772.598072][T15785] should_failslab+0xc2/0x120 [ 772.598112][T15785] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 772.598142][T15785] ? alloc_unbound_pwq+0x3ff/0xe10 [ 772.598174][T15785] alloc_unbound_pwq+0x3ff/0xe10 [ 772.598210][T15785] apply_wqattrs_prepare+0x3af/0xbd0 [ 772.598249][T15785] apply_workqueue_attrs_locked+0x64/0xe0 [ 772.598278][T15785] __alloc_workqueue+0x1007/0x1810 [ 772.598320][T15785] alloc_workqueue+0xd2/0x200 [ 772.598352][T15785] ? __pfx_alloc_workqueue+0x10/0x10 [ 772.598382][T15785] ? __init_waitqueue_head+0xca/0x150 [ 772.598409][T15785] ? lockdep_init_map_type+0x5c/0x280 [ 772.598443][T15785] ? __alloc_disk_node+0x3fd/0x610 [ 772.598480][T15785] nbd_dev_add+0x526/0xbb0 [ 772.598517][T15785] ? __pfx_nbd_dev_add+0x10/0x10 [ 772.598549][T15785] ? nbd_genl_connect+0x98e/0x1c20 [ 772.598602][T15785] ? bpf_lsm_capable+0x9/0x10 [ 772.598630][T15785] ? __radix_tree_lookup+0x21f/0x2c0 [ 772.598667][T15785] nbd_genl_connect+0x8b0/0x1c20 [ 772.598717][T15785] ? __pfx_nbd_genl_connect+0x10/0x10 [ 772.598755][T15785] ? __nla_parse+0x40/0x60 [ 772.598793][T15785] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 772.598819][T15785] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 772.598851][T15785] genl_family_rcv_msg_doit+0x206/0x2f0 [ 772.598877][T15785] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 772.598900][T15785] ? genl_get_cmd+0x194/0x580 [ 772.598944][T15785] ? __local_bh_enable_ip+0xa4/0x120 [ 772.598972][T15785] ? __dev_queue_xmit+0x896/0x43e0 [ 772.598997][T15785] ? __radix_tree_lookup+0x21f/0x2c0 [ 772.599032][T15785] genl_rcv_msg+0x55c/0x800 [ 772.599058][T15785] ? __pfx_genl_rcv_msg+0x10/0x10 [ 772.599079][T15785] ? __pfx___dev_queue_xmit+0x10/0x10 [ 772.599105][T15785] ? __pfx_nbd_genl_connect+0x10/0x10 [ 772.599144][T15785] ? __lock_acquire+0xaa4/0x1ba0 [ 772.599181][T15785] netlink_rcv_skb+0x16a/0x440 [ 772.599215][T15785] ? __pfx_genl_rcv_msg+0x10/0x10 [ 772.599245][T15785] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 772.599295][T15785] ? __pfx_down_read+0x10/0x10 [ 772.599318][T15785] ? netlink_deliver_tap+0x1ae/0xd30 [ 772.599355][T15785] genl_rcv+0x28/0x40 [ 772.599390][T15785] netlink_unicast+0x53a/0x7f0 [ 772.599429][T15785] ? __pfx_netlink_unicast+0x10/0x10 [ 772.599461][T15785] ? __lock_acquire+0xaa4/0x1ba0 [ 772.599502][T15785] netlink_sendmsg+0x8d1/0xdd0 [ 772.599541][T15785] ? __pfx_netlink_sendmsg+0x10/0x10 [ 772.599587][T15785] ____sys_sendmsg+0xa95/0xc70 [ 772.599611][T15785] ? copy_msghdr_from_user+0x10a/0x160 [ 772.599641][T15785] ? __pfx_____sys_sendmsg+0x10/0x10 [ 772.599678][T15785] ___sys_sendmsg+0x134/0x1d0 [ 772.599716][T15785] ? __pfx____sys_sendmsg+0x10/0x10 [ 772.599786][T15785] __sys_sendmsg+0x16d/0x220 [ 772.599818][T15785] ? __pfx___sys_sendmsg+0x10/0x10 [ 772.599849][T15785] ? __x64_sys_futex+0x1e0/0x4c0 [ 772.599885][T15785] ? rcu_is_watching+0x12/0xc0 [ 772.599918][T15785] do_syscall_64+0xcd/0x230 [ 772.599955][T15785] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 772.599979][T15785] RIP: 0033:0x7f7d9298e169 [ 772.599998][T15785] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 772.600021][T15785] RSP: 002b:00007f7d93803038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 772.600043][T15785] RAX: ffffffffffffffda RBX: 00007f7d92bb5fa0 RCX: 00007f7d9298e169 [ 772.600059][T15785] RDX: 0000000000008880 RSI: 0000200000001e00 RDI: 0000000000000006 [ 772.600073][T15785] RBP: 00007f7d92a10a68 R08: 0000000000000000 R09: 0000000000000000 [ 772.600087][T15785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 772.600101][T15785] R13: 0000000000000000 R14: 00007f7d92bb5fa0 R15: 00007ffe8c118bb8 [ 772.600130][T15785] [ 773.018348][T15785] block (null): Could not allocate knbd recv work queue. [ 773.026229][T15785] nbd: failed to add new device [ 773.408328][ C1] sd 0:0:1:0: [sda] tag#5320 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 773.418923][ C1] sd 0:0:1:0: [sda] tag#5320 CDB: Read(6) 08 00 00 00 09 00 00 00 00 00 00 00 [ 773.429472][ T30] audit: type=1800 audit(4294969996.608:13): pid=15793 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3453" name="SYSVffffffff" dev="tmpfs" ino=0 res=0 errno=0 [ 774.293514][T15814] netlink: 504 bytes leftover after parsing attributes in process `syz.2.3459'. [ 774.369009][T15814] netlink: 504 bytes leftover after parsing attributes in process `syz.2.3459'. [ 774.969779][T15824] FAULT_INJECTION: forcing a failure. [ 774.969779][T15824] name failslab, interval 1, probability 0, space 0, times 0 [ 775.046111][T15824] CPU: 1 UID: 0 PID: 15824 Comm: syz.3.3462 Not tainted 6.15.0-rc2-syzkaller-00278-gfc96b232f8e7 #0 PREEMPT(full) [ 775.046147][T15824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 775.046161][T15824] Call Trace: [ 775.046169][T15824] [ 775.046178][T15824] dump_stack_lvl+0x16c/0x1f0 [ 775.046230][T15824] should_fail_ex+0x512/0x640 [ 775.046259][T15824] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 775.046290][T15824] ? __pfx_rescuer_thread+0x10/0x10 [ 775.046313][T15824] should_failslab+0xc2/0x120 [ 775.046344][T15824] __kmalloc_cache_noprof+0x6a/0x3e0 [ 775.046369][T15824] ? lockdep_init_map_type+0x5c/0x280 [ 775.046403][T15824] ? __kthread_create_on_node+0xce/0x3f0 [ 775.046435][T15824] ? __init_swait_queue_head+0xca/0x150 [ 775.046461][T15824] ? __pfx_rescuer_thread+0x10/0x10 [ 775.046483][T15824] __kthread_create_on_node+0xce/0x3f0 [ 775.046517][T15824] ? __pfx___kthread_create_on_node+0x10/0x10 [ 775.046558][T15824] ? __pfx_vsnprintf+0x10/0x10 [ 775.046595][T15824] ? __pfx_rescuer_thread+0x10/0x10 [ 775.046618][T15824] kthread_create_on_node+0xc7/0x100 [ 775.046651][T15824] ? __pfx_kthread_create_on_node+0x10/0x10 [ 775.046683][T15824] ? __pfx_scnprintf+0x10/0x10 [ 775.046731][T15824] init_rescuer+0x320/0x640 [ 775.046768][T15824] ? __pfx_init_rescuer+0x10/0x10 [ 775.046812][T15824] ? wq_adjust_max_active+0x39d/0x4a0 [ 775.046855][T15824] __alloc_workqueue+0xc37/0x1810 [ 775.046897][T15824] alloc_workqueue+0xd2/0x200 [ 775.046929][T15824] ? __pfx_alloc_workqueue+0x10/0x10 [ 775.046959][T15824] ? __init_waitqueue_head+0xca/0x150 [ 775.046985][T15824] ? lockdep_init_map_type+0x5c/0x280 [ 775.047019][T15824] ? __alloc_disk_node+0x3fd/0x610 [ 775.047056][T15824] nbd_dev_add+0x526/0xbb0 [ 775.047093][T15824] ? __pfx_nbd_dev_add+0x10/0x10 [ 775.047126][T15824] ? nbd_genl_connect+0x98e/0x1c20 [ 775.047179][T15824] ? bpf_lsm_capable+0x9/0x10 [ 775.047213][T15824] ? __radix_tree_lookup+0x21f/0x2c0 [ 775.047250][T15824] nbd_genl_connect+0x8b0/0x1c20 [ 775.047296][T15824] ? __pfx_nbd_genl_connect+0x10/0x10 [ 775.047333][T15824] ? __nla_parse+0x40/0x60 [ 775.047371][T15824] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 775.047397][T15824] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 775.047428][T15824] genl_family_rcv_msg_doit+0x206/0x2f0 [ 775.047453][T15824] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 775.047476][T15824] ? genl_get_cmd+0x194/0x580 [ 775.047520][T15824] ? kmem_cache_alloc_node_noprof+0x1d5/0x3b0 [ 775.047547][T15824] ? kmalloc_reserve+0x18b/0x2c0 [ 775.047567][T15824] ? __radix_tree_lookup+0x21f/0x2c0 [ 775.047602][T15824] genl_rcv_msg+0x55c/0x800 [ 775.047628][T15824] ? __pfx_genl_rcv_msg+0x10/0x10 [ 775.047651][T15824] ? __pfx_nbd_genl_connect+0x10/0x10 [ 775.047690][T15824] ? __lock_acquire+0xaa4/0x1ba0 [ 775.047728][T15824] netlink_rcv_skb+0x16a/0x440 [ 775.047762][T15824] ? __pfx_genl_rcv_msg+0x10/0x10 [ 775.047786][T15824] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 775.047835][T15824] ? __pfx_down_read+0x10/0x10 [ 775.047857][T15824] ? netlink_deliver_tap+0x1ae/0xd30 [ 775.047894][T15824] genl_rcv+0x28/0x40 [ 775.047928][T15824] netlink_unicast+0x53a/0x7f0 [ 775.047965][T15824] ? __pfx_netlink_unicast+0x10/0x10 [ 775.047997][T15824] ? __lock_acquire+0xaa4/0x1ba0 [ 775.048037][T15824] netlink_sendmsg+0x8d1/0xdd0 [ 775.048076][T15824] ? __pfx_netlink_sendmsg+0x10/0x10 [ 775.048122][T15824] ____sys_sendmsg+0xa95/0xc70 [ 775.048146][T15824] ? copy_msghdr_from_user+0x10a/0x160 [ 775.048177][T15824] ? __pfx_____sys_sendmsg+0x10/0x10 [ 775.048214][T15824] ? try_to_wake_up+0xa2f/0x1680 [ 775.048244][T15824] ___sys_sendmsg+0x134/0x1d0 [ 775.048277][T15824] ? __pfx____sys_sendmsg+0x10/0x10 [ 775.048348][T15824] __sys_sendmsg+0x16d/0x220 [ 775.048380][T15824] ? __pfx___sys_sendmsg+0x10/0x10 [ 775.048411][T15824] ? __x64_sys_futex+0x1e0/0x4c0 [ 775.048447][T15824] ? rcu_is_watching+0x12/0xc0 [ 775.048479][T15824] do_syscall_64+0xcd/0x230 [ 775.048517][T15824] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 775.048540][T15824] RIP: 0033:0x7fc705f8e169 [ 775.048559][T15824] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 775.048583][T15824] RSP: 002b:00007fc706daa038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 775.048605][T15824] RAX: ffffffffffffffda RBX: 00007fc7061b5fa0 RCX: 00007fc705f8e169 [ 775.048621][T15824] RDX: 0000000000008880 RSI: 0000200000001e00 RDI: 0000000000000006 [ 775.048636][T15824] RBP: 00007fc706010a68 R08: 0000000000000000 R09: 0000000000000000 [ 775.048650][T15824] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 775.048663][T15824] R13: 0000000000000000 R14: 00007fc7061b5fa0 R15: 00007ffc325ad7e8 [ 775.048693][T15824] [ 776.745624][T15824] workqueue: Failed to create a rescuer kthread for wq "nbd11811-recv": -ENOMEM [ 776.757819][T15824] block (null): Could not allocate knbd recv work queue. [ 776.836999][T15824] nbd: failed to add new device [ 782.604350][T15940] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3507'. [ 784.065755][T15964] input: isc as /devices/virtual/input/input10 [ 784.116576][T15964] FAULT_INJECTION: forcing a failure. [ 784.116576][T15964] name failslab, interval 1, probability 0, space 0, times 0 [ 784.202364][T15964] CPU: 1 UID: 0 PID: 15964 Comm: syz.2.3514 Not tainted 6.15.0-rc2-syzkaller-00278-gfc96b232f8e7 #0 PREEMPT(full) [ 784.202400][T15964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 784.202415][T15964] Call Trace: [ 784.202422][T15964] [ 784.202431][T15964] dump_stack_lvl+0x16c/0x1f0 [ 784.202471][T15964] should_fail_ex+0x512/0x640 [ 784.202504][T15964] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 784.202537][T15964] should_failslab+0xc2/0x120 [ 784.202568][T15964] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 784.202596][T15964] ? __pfx_idr_alloc_u32+0x10/0x10 [ 784.202627][T15964] ? __kernfs_new_node+0xd2/0x8a0 [ 784.202655][T15964] __kernfs_new_node+0xd2/0x8a0 [ 784.202682][T15964] ? __pfx___kernfs_new_node+0x10/0x10 [ 784.202713][T15964] ? find_held_lock+0x2b/0x80 [ 784.202738][T15964] ? kernfs_root+0xee/0x2a0 [ 784.202767][T15964] kernfs_new_node+0x13c/0x1e0 [ 784.202800][T15964] kernfs_create_dir_ns+0x4c/0x1a0 [ 784.202832][T15964] internal_create_group+0x34d/0xf30 [ 784.202862][T15964] ? kernfs_add_one+0x14e/0x840 [ 784.202889][T15964] ? __pfx_internal_create_group+0x10/0x10 [ 784.202918][T15964] ? __pfx_dev_add_physical_location+0x10/0x10 [ 784.202958][T15964] ? bus_to_subsys+0x12d/0x160 [ 784.202991][T15964] dpm_sysfs_add+0x80/0x280 [ 784.203015][T15964] device_add+0x9a6/0x1a70 [ 784.203044][T15964] ? __pfx_device_add+0x10/0x10 [ 784.203068][T15964] ? __pfx_exact_lock+0x10/0x10 [ 784.203099][T15964] ? kobject_get+0xbb/0x150 [ 784.203137][T15964] cdev_device_add+0xc2/0x1e0 [ 784.203166][T15964] evdev_connect+0x3a4/0x4c0 [ 784.203191][T15964] input_attach_handler.isra.0+0x181/0x260 [ 784.203232][T15964] input_register_device+0xa84/0x1130 [ 784.203274][T15964] uinput_ioctl_handler.isra.0+0x1357/0x1df0 [ 784.203309][T15964] ? __pfx_uinput_ioctl_handler.isra.0+0x10/0x10 [ 784.203346][T15964] ? find_held_lock+0x2b/0x80 [ 784.203384][T15964] ? __pfx_uinput_ioctl+0x10/0x10 [ 784.203433][T15964] __x64_sys_ioctl+0x190/0x200 [ 784.203470][T15964] do_syscall_64+0xcd/0x230 [ 784.203512][T15964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 784.203537][T15964] RIP: 0033:0x7f7d9298e169 [ 784.203556][T15964] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 784.203579][T15964] RSP: 002b:00007f7d93803038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 784.203602][T15964] RAX: ffffffffffffffda RBX: 00007f7d92bb5fa0 RCX: 00007f7d9298e169 [ 784.203618][T15964] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000005 [ 784.203632][T15964] RBP: 00007f7d92a10a68 R08: 0000000000000000 R09: 0000000000000000 [ 784.203647][T15964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 784.203661][T15964] R13: 0000000000000000 R14: 00007f7d92bb5fa0 R15: 00007ffe8c118bb8 [ 784.203690][T15964] [ 784.617156][T15970] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x7f91114c5 pfn:0x78000 [ 784.627661][T15970] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 784.634827][T15970] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 784.644037][T15970] raw: 00000007f91114c5 0000000000000000 00000001ffffffff 0000000000000000 [ 784.653139][T15970] page dumped because: unmovable page [ 784.659050][T15970] page_owner tracks the page as allocated [ 784.665337][T15970] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), pid 11861, tgid 11861 (syz-executor), ts 488878476955, free_ts 487774852622 [ 784.685194][T15970] post_alloc_hook+0x181/0x1b0 [ 784.691492][T15970] get_page_from_freelist+0x135c/0x3920 [ 784.697189][T15970] __alloc_frozen_pages_noprof+0x263/0x23a0 [ 784.703334][T15970] alloc_pages_mpol+0x1fb/0x550 [ 784.708297][T15970] alloc_pages_noprof+0x131/0x390 [ 784.713347][T15970] __vmalloc_node_range_noprof+0x732/0x1540 [ 784.719346][T15970] vmalloc_user_noprof+0x6b/0x90 [ 784.724389][T15970] kcov_ioctl+0x4c/0x730 [ 784.728750][T15970] __x64_sys_ioctl+0x190/0x200 [ 784.733540][T15970] do_syscall_64+0xcd/0x230 [ 784.738112][T15970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 784.744021][T15970] page last free pid 5838 tgid 5838 stack trace: [ 784.750717][T15970] __free_frozen_pages+0x69d/0xff0 [ 784.755847][T15970] vfree+0x176/0x960 [ 784.759800][T15970] kcov_close+0x34/0x60 [ 784.763979][T15970] __fput+0x3ff/0xb70 [ 784.768010][T15970] task_work_run+0x14d/0x240 [ 784.772615][T15970] do_exit+0xafb/0x2c30 [ 784.776793][T15970] do_group_exit+0xd3/0x2a0 [ 784.806053][T15970] __x64_sys_exit_group+0x3e/0x50 [ 784.816184][T15970] x64_sys_call+0x1530/0x1730 [ 784.829305][T15970] do_syscall_64+0xcd/0x230 [ 784.837474][T15970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 785.017757][T15974] could not allocate digest TFM handle [ 785.126364][T15964] input: failed to attach handler evdev to device input10, error: -12 [ 785.593858][T15983] netlink: 306 bytes leftover after parsing attributes in process `syz.2.3520'. [ 785.648908][T15983] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3520'. [ 785.729112][T15983] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3520'. [ 790.705316][T16069] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3554'. [ 790.853482][T16071] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3555'. [ 791.011947][T16071] Process accounting paused [ 791.865701][T16083] ovs_: entered promiscuous mode [ 792.472933][T16085] netlink: 186 bytes leftover after parsing attributes in process `syz.5.3559'. [ 792.826149][T16088] FAULT_INJECTION: forcing a failure. [ 792.826149][T16088] name failslab, interval 1, probability 0, space 0, times 0 [ 792.907783][T16088] CPU: 1 UID: 0 PID: 16088 Comm: syz.2.3560 Not tainted 6.15.0-rc2-syzkaller-00278-gfc96b232f8e7 #0 PREEMPT(full) [ 792.907818][T16088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 792.907833][T16088] Call Trace: [ 792.907840][T16088] [ 792.907849][T16088] dump_stack_lvl+0x16c/0x1f0 [ 792.907887][T16088] should_fail_ex+0x512/0x640 [ 792.907914][T16088] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 792.907942][T16088] should_failslab+0xc2/0x120 [ 792.907971][T16088] __kmalloc_cache_noprof+0x6a/0x3e0 [ 792.907996][T16088] ? snd_pcm_oss_change_params_locked+0x247/0x3b40 [ 792.908021][T16088] ? kasan_save_track+0x14/0x30 [ 792.908049][T16088] snd_pcm_oss_change_params_locked+0x247/0x3b40 [ 792.908076][T16088] ? rcu_is_watching+0x12/0xc0 [ 792.908102][T16088] ? __mutex_lock+0x1ca/0xb90 [ 792.908138][T16088] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 792.908164][T16088] ? __pfx___mutex_lock+0x10/0x10 [ 792.908195][T16088] ? __lock_acquire+0xaa4/0x1ba0 [ 792.908244][T16088] snd_pcm_oss_make_ready+0xe6/0x1b0 [ 792.908288][T16088] snd_pcm_oss_set_trigger.isra.0+0x211/0x6b0 [ 792.908313][T16088] ? lockdep_hardirqs_on+0x7c/0x110 [ 792.908348][T16088] snd_pcm_oss_poll+0x549/0xaf0 [ 792.908375][T16088] ? __pfx_snd_pcm_oss_poll+0x10/0x10 [ 792.908397][T16088] ? __fget_files+0x20e/0x3c0 [ 792.908425][T16088] ? __pfx_snd_pcm_oss_poll+0x10/0x10 [ 792.908448][T16088] do_select+0xd67/0x17d0 [ 792.908490][T16088] ? __pfx_do_select+0x10/0x10 [ 792.908526][T16088] ? find_held_lock+0x2b/0x80 [ 792.908550][T16088] ? finish_task_switch.isra.0+0x21c/0xc10 [ 792.908582][T16088] ? __pfx_pollwake+0x10/0x10 [ 792.908621][T16088] ? __pfx_pollwake+0x10/0x10 [ 792.908705][T16088] ? find_held_lock+0x2b/0x80 [ 792.908728][T16088] ? __might_fault+0xe3/0x190 [ 792.908755][T16088] ? __might_fault+0xe3/0x190 [ 792.908781][T16088] ? __might_fault+0x13b/0x190 [ 792.908819][T16088] ? core_sys_select+0x440/0xbe0 [ 792.908839][T16088] core_sys_select+0x440/0xbe0 [ 792.908867][T16088] ? __pfx_core_sys_select+0x10/0x10 [ 792.908920][T16088] ? read_tsc+0x9/0x20 [ 792.908951][T16088] ? ktime_get_ts64+0x256/0x400 [ 792.908988][T16088] kern_select+0x15d/0x1e0 [ 792.909009][T16088] ? __pfx_kern_select+0x10/0x10 [ 792.909031][T16088] ? xfd_validate_state+0x5d/0x180 [ 792.909056][T16088] ? rcu_is_watching+0x12/0xc0 [ 792.909083][T16088] __x64_sys_select+0xbd/0x160 [ 792.909103][T16088] ? do_syscall_64+0x91/0x230 [ 792.909137][T16088] ? lockdep_hardirqs_on+0x7c/0x110 [ 792.909169][T16088] do_syscall_64+0xcd/0x230 [ 792.909206][T16088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 792.909230][T16088] RIP: 0033:0x7f7d9298e169 [ 792.909249][T16088] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 792.909272][T16088] RSP: 002b:00007f7d93803038 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 792.909294][T16088] RAX: ffffffffffffffda RBX: 00007f7d92bb5fa0 RCX: 00007f7d9298e169 [ 792.909310][T16088] RDX: 0000200000000500 RSI: 0000200000000480 RDI: 0000000000000009 [ 792.909324][T16088] RBP: 00007f7d92a10a68 R08: 0000200000000600 R09: 0000000000000000 [ 792.909339][T16088] R10: 0000200000000580 R11: 0000000000000246 R12: 0000000000000000 [ 792.909353][T16088] R13: 0000000000000000 R14: 00007f7d92bb5fa0 R15: 00007ffe8c118bb8 [ 792.909382][T16088] [ 793.988918][T16096] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 794.849403][T16111] netlink: 'syz.2.3567': attribute type 29 has an invalid length. [ 795.517698][T16122] netlink: 186 bytes leftover after parsing attributes in process `syz.2.3573'. [ 795.961541][T16126] netlink: 266 bytes leftover after parsing attributes in process `syz.2.3574'. [ 796.020560][T16126] IPv6: NLM_F_CREATE should be specified when creating new route [ 798.561512][T16150] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x7f91114c5 pfn:0x78000 [ 798.777423][T16150] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 798.914005][T16150] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 799.009845][T16150] raw: 00000007f91114c5 0000000000000000 00000001ffffffff 0000000000000000 [ 799.154985][T16150] page dumped because: unmovable page [ 799.184027][T16151] could not allocate digest TFM handle [ 799.238506][T16150] page_owner tracks the page as allocated [ 799.383999][T16150] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), pid 11861, tgid 11861 (syz-executor), ts 488878476955, free_ts 487774852622 [ 799.661932][T16150] post_alloc_hook+0x181/0x1b0 [ 799.666756][T16150] get_page_from_freelist+0x135c/0x3920 [ 799.801925][T16150] __alloc_frozen_pages_noprof+0x263/0x23a0 [ 799.831908][T16150] alloc_pages_mpol+0x1fb/0x550 [ 799.901726][T16150] alloc_pages_noprof+0x131/0x390 [ 799.934384][T16150] __vmalloc_node_range_noprof+0x732/0x1540 [ 799.961884][T16150] vmalloc_user_noprof+0x6b/0x90 [ 799.990793][T16150] kcov_ioctl+0x4c/0x730 [ 800.019782][T16150] __x64_sys_ioctl+0x190/0x200 [ 800.043446][T16150] do_syscall_64+0xcd/0x230 [ 800.071661][T16150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 800.102101][T16150] page last free pid 5838 tgid 5838 stack trace: [ 800.140357][T16150] __free_frozen_pages+0x69d/0xff0 [ 800.165969][T16150] vfree+0x176/0x960 [ 800.186163][T16150] kcov_close+0x34/0x60 [ 800.209683][T16150] __fput+0x3ff/0xb70 [ 800.234313][T16150] task_work_run+0x14d/0x240 [ 800.261979][T16150] do_exit+0xafb/0x2c30 [ 800.281907][T16150] do_group_exit+0xd3/0x2a0 [ 800.306780][T16150] __x64_sys_exit_group+0x3e/0x50 [ 800.352096][T16150] x64_sys_call+0x1530/0x1730 [ 800.384508][T16150] do_syscall_64+0xcd/0x230 [ 800.405182][T16150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 800.485538][T16173] netlink: 338 bytes leftover after parsing attributes in process `syz.5.3589'. [ 800.577094][T16174] netlink: 338 bytes leftover after parsing attributes in process `syz.5.3589'. [ 800.722708][T16173] netlink: 126 bytes leftover after parsing attributes in process `syz.5.3589'. [ 800.766952][T16176] misc userio: The device must be registered before sending interrupts [ 801.107207][T16184] netlink: 334 bytes leftover after parsing attributes in process `syz.2.3593'. [ 801.576038][T16190] netlink: 342 bytes leftover after parsing attributes in process `syz.2.3595'. [ 801.736314][T16190] netlink: 306 bytes leftover after parsing attributes in process `syz.2.3595'. [ 802.625247][T16202] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x7f91114c5 pfn:0x78000 [ 802.817680][T16202] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 802.857561][T16213] FAULT_INJECTION: forcing a failure. [ 802.857561][T16213] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 802.932074][T16205] could not allocate digest TFM handle [ 803.011099][T16202] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 803.021348][T16213] CPU: 1 UID: 0 PID: 16213 Comm: syz.2.3602 Not tainted 6.15.0-rc2-syzkaller-00278-gfc96b232f8e7 #0 PREEMPT(full) [ 803.021381][T16213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 803.021396][T16213] Call Trace: [ 803.021403][T16213] [ 803.021411][T16213] dump_stack_lvl+0x16c/0x1f0 [ 803.021450][T16213] should_fail_ex+0x512/0x640 [ 803.021483][T16213] core_sys_select+0x4b2/0xbe0 [ 803.021512][T16213] ? __pfx_core_sys_select+0x10/0x10 [ 803.021563][T16213] ? read_tsc+0x9/0x20 [ 803.021594][T16213] ? ktime_get_ts64+0x256/0x400 [ 803.021631][T16213] kern_select+0x15d/0x1e0 [ 803.021652][T16213] ? __pfx_kern_select+0x10/0x10 [ 803.021675][T16213] ? xfd_validate_state+0x5d/0x180 [ 803.021700][T16213] ? rcu_is_watching+0x12/0xc0 [ 803.021728][T16213] __x64_sys_select+0xbd/0x160 [ 803.021748][T16213] ? do_syscall_64+0x91/0x230 [ 803.021782][T16213] ? lockdep_hardirqs_on+0x7c/0x110 [ 803.021826][T16213] do_syscall_64+0xcd/0x230 [ 803.021868][T16213] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 803.021892][T16213] RIP: 0033:0x7f7d9298e169 [ 803.021910][T16213] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 803.021933][T16213] RSP: 002b:00007f7d93803038 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 803.021955][T16213] RAX: ffffffffffffffda RBX: 00007f7d92bb5fa0 RCX: 00007f7d9298e169 [ 803.021970][T16213] RDX: 0000200000000500 RSI: 0000200000000480 RDI: 0000000000000009 [ 803.021985][T16213] RBP: 00007f7d92a10a68 R08: 0000200000000600 R09: 0000000000000000 [ 803.022000][T16213] R10: 0000200000000580 R11: 0000000000000246 R12: 0000000000000000 [ 803.022014][T16213] R13: 0000000000000000 R14: 00007f7d92bb5fa0 R15: 00007ffe8c118bb8 [ 803.022042][T16213] [ 803.544529][T16202] raw: 00000007f91114c5 0000000000000000 00000001ffffffff 0000000000000000 [ 803.645552][T16202] page dumped because: unmovable page [ 803.691875][T16202] page_owner tracks the page as allocated [ 803.735402][T16202] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), pid 11861, tgid 11861 (syz-executor), ts 488878476955, free_ts 487774852622 [ 803.874015][T16202] post_alloc_hook+0x181/0x1b0 [ 803.916858][T16202] get_page_from_freelist+0x135c/0x3920 [ 803.958106][T16202] __alloc_frozen_pages_noprof+0x263/0x23a0 [ 803.977997][T16202] alloc_pages_mpol+0x1fb/0x550 [ 803.997991][T16202] alloc_pages_noprof+0x131/0x390 [ 804.038774][T16202] __vmalloc_node_range_noprof+0x732/0x1540 [ 804.126693][T16202] vmalloc_user_noprof+0x6b/0x90 [ 804.134754][T16202] kcov_ioctl+0x4c/0x730 [ 804.222209][T16202] __x64_sys_ioctl+0x190/0x200 [ 804.227064][T16202] do_syscall_64+0xcd/0x230 [ 804.275315][T16202] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 804.314263][T16202] page last free pid 5838 tgid 5838 stack trace: [ 804.354265][T16202] __free_frozen_pages+0x69d/0xff0 [ 804.400902][T16202] vfree+0x176/0x960 [ 804.440826][T16202] kcov_close+0x34/0x60 [ 804.445058][T16202] __fput+0x3ff/0xb70 [ 804.537715][T16202] task_work_run+0x14d/0x240 [ 804.572816][T16202] do_exit+0xafb/0x2c30 [ 804.599811][T16202] do_group_exit+0xd3/0x2a0 [ 804.627497][T16202] __x64_sys_exit_group+0x3e/0x50 [ 804.643670][T16202] x64_sys_call+0x1530/0x1730 [ 804.671989][T16202] do_syscall_64+0xcd/0x230 [ 804.682097][T16202] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 808.896952][ T5856] Bluetooth: hci0: unexpected event 0x05 length: 440 > 4 [ 809.367786][T16300] netlink: 334 bytes leftover after parsing attributes in process `syz.3.3631'. [ 811.202827][T16334] FAULT_INJECTION: forcing a failure. [ 811.202827][T16334] name failslab, interval 1, probability 0, space 0, times 0 [ 811.407132][T16334] CPU: 1 UID: 0 PID: 16334 Comm: syz.4.3639 Not tainted 6.15.0-rc2-syzkaller-00278-gfc96b232f8e7 #0 PREEMPT(full) [ 811.407175][T16334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 811.407189][T16334] Call Trace: [ 811.407196][T16334] [ 811.407205][T16334] dump_stack_lvl+0x16c/0x1f0 [ 811.407245][T16334] should_fail_ex+0x512/0x640 [ 811.407274][T16334] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 811.407305][T16334] should_failslab+0xc2/0x120 [ 811.407342][T16334] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 811.407370][T16334] ? __proc_create+0xc3/0x8c0 [ 811.407397][T16334] ? __proc_create+0x2ce/0x8c0 [ 811.407429][T16334] __proc_create+0x2ce/0x8c0 [ 811.407458][T16334] ? __pfx___proc_create+0x10/0x10 [ 811.407498][T16334] proc_mkdir+0x81/0x170 [ 811.407526][T16334] ? __pfx_proc_mkdir+0x10/0x10 [ 811.407555][T16334] ? cache_register_net+0x137/0x5e0 [ 811.407590][T16334] cache_register_net+0x18f/0x5e0 [ 811.407623][T16334] gss_svc_init_net+0x98/0x660 [ 811.407646][T16334] ? __pfx_canbcm_pernet_init+0x10/0x10 [ 811.407680][T16334] ? __pfx_rpcsec_gss_init_net+0x10/0x10 [ 811.407706][T16334] ops_init+0x1df/0x5f0 [ 811.407744][T16334] setup_net+0x21e/0x850 [ 811.407780][T16334] ? __pfx_setup_net+0x10/0x10 [ 811.407812][T16334] ? lockdep_init_map_type+0x5c/0x280 [ 811.407847][T16334] ? __pfx_down_read_killable+0x10/0x10 [ 811.407873][T16334] ? debug_mutex_init+0x37/0x70 [ 811.407900][T16334] copy_net_ns+0x2a6/0x5f0 [ 811.407939][T16334] create_new_namespaces+0x3ea/0xad0 [ 811.407975][T16334] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 811.408007][T16334] ksys_unshare+0x45b/0xa40 [ 811.408042][T16334] ? __pfx_ksys_unshare+0x10/0x10 [ 811.408075][T16334] ? xfd_validate_state+0x5d/0x180 [ 811.408101][T16334] ? rcu_is_watching+0x12/0xc0 [ 811.408131][T16334] __x64_sys_unshare+0x31/0x40 [ 811.408170][T16334] do_syscall_64+0xcd/0x230 [ 811.408208][T16334] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 811.408232][T16334] RIP: 0033:0x7f32a958e169 [ 811.408251][T16334] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 811.408274][T16334] RSP: 002b:00007f32a73f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 811.408297][T16334] RAX: ffffffffffffffda RBX: 00007f32a97b5fa0 RCX: 00007f32a958e169 [ 811.408314][T16334] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 811.408328][T16334] RBP: 00007f32a9610a68 R08: 0000000000000000 R09: 0000000000000000 [ 811.408343][T16334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 811.408357][T16334] R13: 0000000000000000 R14: 00007f32a97b5fa0 R15: 00007ffedfe2ba28 [ 811.408386][T16334] [ 811.669863][ C1] vkms_vblank_simulate: vblank timer overrun [ 813.125001][T16361] netlink: 338 bytes leftover after parsing attributes in process `syz.2.3644'. [ 814.012854][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 814.019285][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 815.138753][ T5856] Bluetooth: hci1: unexpected event 0x09 length: 11 > 3 [ 815.161770][T16389] netlink: 'syz.4.3651': attribute type 4 has an invalid length. [ 815.221798][T16389] netlink: 314 bytes leftover after parsing attributes in process `syz.4.3651'. [ 816.463557][T16410] netlink: 338 bytes leftover after parsing attributes in process `syz.2.3661'. [ 816.774259][T16416] netlink: 18 bytes leftover after parsing attributes in process `syz.4.3663'. [ 816.856059][T16419] FAULT_INJECTION: forcing a failure. [ 816.856059][T16419] name failslab, interval 1, probability 0, space 0, times 0 [ 816.941674][T16419] CPU: 1 UID: 0 PID: 16419 Comm: syz.2.3664 Not tainted 6.15.0-rc2-syzkaller-00278-gfc96b232f8e7 #0 PREEMPT(full) [ 816.941711][T16419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 816.941726][T16419] Call Trace: [ 816.941733][T16419] [ 816.941741][T16419] dump_stack_lvl+0x16c/0x1f0 [ 816.941780][T16419] should_fail_ex+0x512/0x640 [ 816.941808][T16419] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 816.941843][T16419] should_failslab+0xc2/0x120 [ 816.941874][T16419] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 816.941906][T16419] ? __request_module+0x2cb/0x690 [ 816.941945][T16419] kstrdup+0x53/0x100 [ 816.941977][T16419] __request_module+0x2cb/0x690 [ 816.942012][T16419] ? __pfx___request_module+0x10/0x10 [ 816.942058][T16419] ? __get_fs_type+0x12c/0x170 [ 816.942087][T16419] ? do_raw_read_unlock+0x44/0xe0 [ 816.942115][T16419] get_fs_type+0xd7/0x190 [ 816.942142][T16419] __x64_sys_fsopen+0xc8/0x240 [ 816.942171][T16419] do_syscall_64+0xcd/0x230 [ 816.942208][T16419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 816.942231][T16419] RIP: 0033:0x7f7d9298e169 [ 816.942249][T16419] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 816.942271][T16419] RSP: 002b:00007f7d93803038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 816.942294][T16419] RAX: ffffffffffffffda RBX: 00007f7d92bb5fa0 RCX: 00007f7d9298e169 [ 816.942309][T16419] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 816.942322][T16419] RBP: 00007f7d92a10a68 R08: 0000000000000000 R09: 0000000000000000 [ 816.942337][T16419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 816.942350][T16419] R13: 0000000000000000 R14: 00007f7d92bb5fa0 R15: 00007ffe8c118bb8 [ 816.942379][T16419] [ 818.641674][T16455] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3671'. [ 818.742601][T16450] netlink: 17 bytes leftover after parsing attributes in process `syz.4.3671'. [ 818.786425][T16456] FAULT_INJECTION: forcing a failure. [ 818.786425][T16456] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 819.047224][T16456] CPU: 1 UID: 0 PID: 16456 Comm: syz.5.3670 Not tainted 6.15.0-rc2-syzkaller-00278-gfc96b232f8e7 #0 PREEMPT(full) [ 819.047261][T16456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 819.047275][T16456] Call Trace: [ 819.047283][T16456] [ 819.047293][T16456] dump_stack_lvl+0x16c/0x1f0 [ 819.047336][T16456] should_fail_ex+0x512/0x640 [ 819.047370][T16456] core_sys_select+0x4b2/0xbe0 [ 819.047399][T16456] ? __pfx_core_sys_select+0x10/0x10 [ 819.047451][T16456] ? read_tsc+0x9/0x20 [ 819.047482][T16456] ? ktime_get_ts64+0x256/0x400 [ 819.047524][T16456] kern_select+0x15d/0x1e0 [ 819.047546][T16456] ? __pfx_kern_select+0x10/0x10 [ 819.047569][T16456] ? xfd_validate_state+0x5d/0x180 [ 819.047594][T16456] ? rcu_is_watching+0x12/0xc0 [ 819.047622][T16456] __x64_sys_select+0xbd/0x160 [ 819.047643][T16456] ? do_syscall_64+0x91/0x230 [ 819.047677][T16456] ? lockdep_hardirqs_on+0x7c/0x110 [ 819.047709][T16456] do_syscall_64+0xcd/0x230 [ 819.047746][T16456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 819.047771][T16456] RIP: 0033:0x7fe51578e169 [ 819.047789][T16456] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 819.047812][T16456] RSP: 002b:00007fe51659d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 819.047834][T16456] RAX: ffffffffffffffda RBX: 00007fe5159b5fa0 RCX: 00007fe51578e169 [ 819.047850][T16456] RDX: 0000200000000500 RSI: 0000200000000480 RDI: 0000000000000009 [ 819.047869][T16456] RBP: 00007fe515810a68 R08: 0000200000000600 R09: 0000000000000000 [ 819.047884][T16456] R10: 0000200000000580 R11: 0000000000000246 R12: 0000000000000000 [ 819.047898][T16456] R13: 0000000000000000 R14: 00007fe5159b5fa0 R15: 00007ffd2db97208 [ 819.047928][T16456] [ 819.223999][ C1] vkms_vblank_simulate: vblank timer overrun [ 819.482510][T16462] netlink: 338 bytes leftover after parsing attributes in process `syz.4.3674'. [ 820.480506][T16475] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3677'. [ 820.555091][T16475] netlink: 354 bytes leftover after parsing attributes in process `syz.4.3677'. [ 821.490338][T16471] Process accounting resumed [ 822.464216][T16500] netlink: 'syz.3.3683': attribute type 4 has an invalid length. [ 822.524195][T16500] netlink: 314 bytes leftover after parsing attributes in process `syz.3.3683'. [ 822.882067][T16506] sp0: Synchronizing with TNC [ 822.934006][T16507] sp0: Found TNC [ 823.171848][T16509] netlink: 186 bytes leftover after parsing attributes in process `syz.2.3686'. [ 823.390934][ T30] audit: type=1806 audit(4294967311.730:14): xattr="0" res=-22 [ 823.546724][T16519] netlink: 22 bytes leftover after parsing attributes in process `syz.3.3690'. [ 824.988001][ T5856] Bluetooth: hci2: Unable to find connection for big 0xd2 [ 827.196209][T16556] netlink: 'syz.4.3702': attribute type 4 has an invalid length. [ 827.221657][T16556] netlink: 314 bytes leftover after parsing attributes in process `syz.4.3702'. [ 827.277975][T16556] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 827.285249][T16556] IPv6: NLM_F_CREATE should be set when creating new route [ 827.952389][T16567] netlink: 504 bytes leftover after parsing attributes in process `syz.3.3706'. [ 828.021211][T16567] netlink: 350 bytes leftover after parsing attributes in process `syz.3.3706'. [ 828.317904][T16570] netlink: 146 bytes leftover after parsing attributes in process `syz.3.3708'. [ 828.977300][T16580] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3711'. [ 830.491739][T16590] Falling back ldisc for ptm0. [ 830.899849][T16606] netlink: 330 bytes leftover after parsing attributes in process `syz.4.3719'. [ 831.443571][T16610] netlink: 244 bytes leftover after parsing attributes in process `syz.2.3722'. [ 832.249431][T16617] netlink: 18 bytes leftover after parsing attributes in process `syz.3.3723'. [ 836.650964][T16679] FAULT_INJECTION: forcing a failure. [ 836.650964][T16679] name failslab, interval 1, probability 0, space 0, times 0 [ 836.741478][T16679] CPU: 1 UID: 0 PID: 16679 Comm: syz.2.3740 Not tainted 6.15.0-rc2-syzkaller-00278-gfc96b232f8e7 #0 PREEMPT(full) [ 836.741513][T16679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 836.741527][T16679] Call Trace: [ 836.741534][T16679] [ 836.741543][T16679] dump_stack_lvl+0x16c/0x1f0 [ 836.741581][T16679] should_fail_ex+0x512/0x640 [ 836.741607][T16679] ? fs_reclaim_acquire+0xae/0x150 [ 836.741645][T16679] ? tomoyo_supervisor+0x45b/0x13b0 [ 836.741664][T16679] should_failslab+0xc2/0x120 [ 836.741694][T16679] __kmalloc_noprof+0xd2/0x510 [ 836.741719][T16679] ? tomoyo_profile+0x47/0x60 [ 836.741761][T16679] tomoyo_supervisor+0x45b/0x13b0 [ 836.741786][T16679] ? __pfx_tomoyo_supervisor+0x10/0x10 [ 836.741821][T16679] ? __pfx_vsnprintf+0x10/0x10 [ 836.741864][T16679] ? tomoyo_encode2+0x329/0x3e0 [ 836.741910][T16679] tomoyo_path_number_perm+0x448/0x580 [ 836.741940][T16679] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 836.742005][T16679] ? find_held_lock+0x2b/0x80 [ 836.742029][T16679] ? hook_file_ioctl_common+0x145/0x410 [ 836.742061][T16679] ? __fget_files+0x20e/0x3c0 [ 836.742087][T16679] security_file_ioctl+0x9b/0x240 [ 836.742119][T16679] __x64_sys_ioctl+0xb7/0x200 [ 836.742154][T16679] do_syscall_64+0xcd/0x230 [ 836.742189][T16679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 836.742211][T16679] RIP: 0033:0x7f7d9298e169 [ 836.742229][T16679] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 836.742251][T16679] RSP: 002b:00007f7d93803038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 836.742271][T16679] RAX: ffffffffffffffda RBX: 00007f7d92bb5fa0 RCX: 00007f7d9298e169 [ 836.742286][T16679] RDX: 0000000000000000 RSI: 00000000c0045005 RDI: 0000000000000004 [ 836.742300][T16679] RBP: 00007f7d92a10a68 R08: 0000000000000000 R09: 0000000000000000 [ 836.742313][T16679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 836.742326][T16679] R13: 0000000000000000 R14: 00007f7d92bb5fa0 R15: 00007ffe8c118bb8 [ 836.742354][T16679] [ 837.443292][T16685] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 837.727012][T16693] netlink: 'syz.2.3746': attribute type 19 has an invalid length. [ 837.777434][T16693] netlink: 334 bytes leftover after parsing attributes in process `syz.2.3746'. [ 838.489815][T16703] netlink: 'syz.5.3750': attribute type 4 has an invalid length. [ 838.540299][T16703] netlink: 314 bytes leftover after parsing attributes in process `syz.5.3750'. [ 838.731558][T16708] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 838.861650][T16714] FAULT_INJECTION: forcing a failure. [ 838.861650][T16714] name fail_futex, interval 1, probability 0, space 0, times 1 [ 838.952626][T16714] CPU: 1 UID: 0 PID: 16714 Comm: syz.5.3754 Not tainted 6.15.0-rc2-syzkaller-00278-gfc96b232f8e7 #0 PREEMPT(full) [ 838.952663][T16714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 838.952677][T16714] Call Trace: [ 838.952685][T16714] [ 838.952693][T16714] dump_stack_lvl+0x16c/0x1f0 [ 838.952732][T16714] should_fail_ex+0x512/0x640 [ 838.952775][T16714] get_futex_key+0x49e/0x1000 [ 838.952814][T16714] ? __pfx_get_futex_key+0x10/0x10 [ 838.952851][T16714] futex_wake+0xe7/0x4e0 [ 838.952885][T16714] ? __pfx_futex_wake+0x10/0x10 [ 838.952921][T16714] ? kmem_cache_free+0x2d4/0x4d0 [ 838.952948][T16714] ? fd_install+0x225/0x750 [ 838.952968][T16714] ? putname+0x154/0x1a0 [ 838.953002][T16714] do_futex+0x1e3/0x350 [ 838.953029][T16714] ? __pfx_do_futex+0x10/0x10 [ 838.953056][T16714] ? __sock_release+0x20b/0x270 [ 838.953097][T16714] __x64_sys_futex+0x1e0/0x4c0 [ 838.953126][T16714] ? __x64_sys_openat+0x174/0x210 [ 838.953161][T16714] ? __pfx___x64_sys_futex+0x10/0x10 [ 838.953191][T16714] ? rcu_is_watching+0x12/0xc0 [ 838.953224][T16714] do_syscall_64+0xcd/0x230 [ 838.953261][T16714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 838.953285][T16714] RIP: 0033:0x7fe51578e169 [ 838.953304][T16714] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 838.953327][T16714] RSP: 002b:00007fe51659d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 838.953350][T16714] RAX: ffffffffffffffda RBX: 00007fe5159b5fa8 RCX: 00007fe51578e169 [ 838.953365][T16714] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fe5159b5fac [ 838.953379][T16714] RBP: 00007fe5159b5fa0 R08: 00007fe51659e000 R09: 0000000000000000 [ 838.953394][T16714] R10: 0000000000000006 R11: 0000000000000246 R12: 00007fe5159b5fac [ 838.953408][T16714] R13: 0000000000000000 R14: 00007ffd2db97120 R15: 00007ffd2db97208 [ 838.953436][T16714] [ 839.828873][T16725] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !PjE r҄y*"l-y– [ 841.029047][T16743] netlink: 338 bytes leftover after parsing attributes in process `syz.5.3766'. [ 841.071976][ T5856] Bluetooth: hci0: Unable to find connection for big 0xd2 [ 841.086376][T16740] netlink: 338 bytes leftover after parsing attributes in process `syz.5.3766'. [ 842.023585][T16763] netlink: 338 bytes leftover after parsing attributes in process `syz.5.3773'. [ 842.093337][T16767] netlink: 342 bytes leftover after parsing attributes in process `syz.5.3773'. [ 842.178072][T16766] netlink: 338 bytes leftover after parsing attributes in process `syz.5.3773'. [ 845.344766][T16798] FAULT_INJECTION: forcing a failure. [ 845.344766][T16798] name failslab, interval 1, probability 0, space 0, times 0 [ 845.465912][T16798] CPU: 1 UID: 0 PID: 16798 Comm: syz.4.3785 Not tainted 6.15.0-rc2-syzkaller-00278-gfc96b232f8e7 #0 PREEMPT(full) [ 845.465947][T16798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 845.465962][T16798] Call Trace: [ 845.465969][T16798] [ 845.465977][T16798] dump_stack_lvl+0x16c/0x1f0 [ 845.466019][T16798] should_fail_ex+0x512/0x640 [ 845.466047][T16798] ? __kmalloc_noprof+0xbf/0x510 [ 845.466078][T16798] ? lsm_blob_alloc+0x68/0x90 [ 845.466114][T16798] should_failslab+0xc2/0x120 [ 845.466146][T16798] __kmalloc_noprof+0xd2/0x510 [ 845.466180][T16798] lsm_blob_alloc+0x68/0x90 [ 845.466218][T16798] security_sk_alloc+0x30/0x270 [ 845.466245][T16798] sk_prot_alloc+0x1c7/0x2a0 [ 845.466295][T16798] sk_alloc+0x36/0xc20 [ 845.466326][T16798] __netlink_create+0x5e/0x2c0 [ 845.466357][T16798] __netlink_kernel_create+0xed/0x750 [ 845.466394][T16798] ? __pfx___netlink_kernel_create+0x10/0x10 [ 845.466439][T16798] fib_net_init+0x26d/0x3f0 [ 845.466470][T16798] ? __pfx___register_sysctl_table+0x10/0x10 [ 845.466500][T16798] ? __pfx_fib_net_init+0x10/0x10 [ 845.466532][T16798] ? lockdep_init_map_type+0x5c/0x280 [ 845.466566][T16798] ? __pfx_nl_fib_input+0x10/0x10 [ 845.466603][T16798] ? devinet_init_net+0x5c2/0x910 [ 845.466641][T16798] ? __pfx_fib_net_init+0x10/0x10 [ 845.466672][T16798] ops_init+0x1df/0x5f0 [ 845.466708][T16798] setup_net+0x21e/0x850 [ 845.466746][T16798] ? __pfx_setup_net+0x10/0x10 [ 845.466779][T16798] ? lockdep_init_map_type+0x5c/0x280 [ 845.466813][T16798] ? __pfx_down_read_killable+0x10/0x10 [ 845.466839][T16798] ? debug_mutex_init+0x37/0x70 [ 845.466866][T16798] copy_net_ns+0x2a6/0x5f0 [ 845.466907][T16798] create_new_namespaces+0x3ea/0xad0 [ 845.466946][T16798] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 845.466979][T16798] ksys_unshare+0x45b/0xa40 [ 845.467014][T16798] ? __pfx_ksys_unshare+0x10/0x10 [ 845.467047][T16798] ? xfd_validate_state+0x5d/0x180 [ 845.467074][T16798] ? rcu_is_watching+0x12/0xc0 [ 845.467105][T16798] __x64_sys_unshare+0x31/0x40 [ 845.467140][T16798] do_syscall_64+0xcd/0x230 [ 845.467177][T16798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 845.467202][T16798] RIP: 0033:0x7f32a958e169 [ 845.467220][T16798] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 845.467244][T16798] RSP: 002b:00007f32a73d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 845.467272][T16798] RAX: ffffffffffffffda RBX: 00007f32a97b6080 RCX: 00007f32a958e169 [ 845.467289][T16798] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 845.467304][T16798] RBP: 00007f32a9610a68 R08: 0000000000000000 R09: 0000000000000000 [ 845.467318][T16798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 845.467333][T16798] R13: 0000000000000000 R14: 00007f32a97b6080 R15: 00007ffedfe2ba28 [ 845.467363][T16798] [ 846.960343][T16811] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3789'. [ 848.460780][T16832] netlink: 326 bytes leftover after parsing attributes in process `syz.2.3795'. [ 849.343519][T16845] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3802'. [ 851.699307][T16861] netlink: 330 bytes leftover after parsing attributes in process `syz.4.3807'. [ 852.093315][T16858] Process accounting paused [ 852.283705][T16865] netlink: 342 bytes leftover after parsing attributes in process `syz.3.3809'. [ 856.338760][T16915] mkiss: ax0: crc mode is auto. [ 859.057488][T16965] sp0: Synchronizing with TNC [ 859.818086][T16978] netlink: 342 bytes leftover after parsing attributes in process `syz.3.3847'. [ 859.866946][T16978] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 859.874407][T16978] IPv6: NLM_F_CREATE should be set when creating new route [ 859.881763][T16978] IPv6: NLM_F_CREATE should be set when creating new route [ 859.980119][T16983] netlink: 342 bytes leftover after parsing attributes in process `syz.3.3847'. [ 860.606895][T16993] netlink: 330 bytes leftover after parsing attributes in process `syz.3.3851'. [ 862.561056][T17021] netlink: 342 bytes leftover after parsing attributes in process `syz.4.3862'. [ 862.602172][T17021] netlink: 342 bytes leftover after parsing attributes in process `syz.4.3862'. [ 862.645046][T17021] netlink: 242 bytes leftover after parsing attributes in process `syz.4.3862'. [ 863.175914][T17027] netlink: 'syz.4.3865': attribute type 64 has an invalid length. [ 863.205875][T17027] netlink: 74 bytes leftover after parsing attributes in process `syz.4.3865'. [ 863.568448][T17032] netlink: 150 bytes leftover after parsing attributes in process `syz.3.3867'. [ 863.620316][T17032] netlink: 50 bytes leftover after parsing attributes in process `syz.3.3867'. [ 865.668533][T17058] sctp: [Deprecated]: syz.4.3876 (pid 17058) Use of int in maxseg socket option. [ 865.668533][T17058] Use struct sctp_assoc_value instead [ 868.360805][T17073] FAULT_INJECTION: forcing a failure. [ 868.360805][T17073] name failslab, interval 1, probability 0, space 0, times 0 [ 868.513322][T17073] CPU: 1 UID: 0 PID: 17073 Comm: syz.4.3881 Not tainted 6.15.0-rc2-syzkaller-00278-gfc96b232f8e7 #0 PREEMPT(full) [ 868.513360][T17073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 868.513376][T17073] Call Trace: [ 868.513384][T17073] [ 868.513393][T17073] dump_stack_lvl+0x16c/0x1f0 [ 868.513433][T17073] should_fail_ex+0x512/0x640 [ 868.513463][T17073] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 868.513491][T17073] should_failslab+0xc2/0x120 [ 868.513523][T17073] __kmalloc_cache_noprof+0x6a/0x3e0 [ 868.513548][T17073] ? apparmor_capable+0x114/0x1d0 [ 868.513573][T17073] ? fsnotify_alloc_group+0x92/0x330 [ 868.513614][T17073] fsnotify_alloc_group+0x92/0x330 [ 868.513652][T17073] __do_sys_fanotify_init+0x21f/0xb80 [ 868.513683][T17073] ? rcu_is_watching+0x12/0xc0 [ 868.513711][T17073] do_syscall_64+0xcd/0x230 [ 868.513748][T17073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 868.513772][T17073] RIP: 0033:0x7f32a958e169 [ 868.513790][T17073] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 868.513813][T17073] RSP: 002b:00007f32a73f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000012c [ 868.513835][T17073] RAX: ffffffffffffffda RBX: 00007f32a97b5fa0 RCX: 00007f32a958e169 [ 868.513852][T17073] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 00000000000006a1 [ 868.513866][T17073] RBP: 00007f32a9610a68 R08: 0000000000000000 R09: 0000000000000000 [ 868.513881][T17073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 868.513895][T17073] R13: 0000000000000000 R14: 00007f32a97b5fa0 R15: 00007ffedfe2ba28 [ 868.513924][T17073] [ 868.681732][ C1] vkms_vblank_simulate: vblank timer overrun [ 869.677958][T17084] ================================================================== [ 869.686077][T17084] BUG: KASAN: slab-use-after-free in dvb_device_open+0x36a/0x3b0 [ 869.693838][T17084] Read of size 8 at addr ffff888141a81818 by task syz.5.3884/17084 [ 869.701733][T17084] [ 869.704065][T17084] CPU: 1 UID: 0 PID: 17084 Comm: syz.5.3884 Not tainted 6.15.0-rc2-syzkaller-00278-gfc96b232f8e7 #0 PREEMPT(full) [ 869.704096][T17084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 869.704111][T17084] Call Trace: [ 869.704120][T17084] [ 869.704129][T17084] dump_stack_lvl+0x116/0x1f0 [ 869.704167][T17084] print_report+0xc3/0x670 [ 869.704198][T17084] ? __virt_addr_valid+0x5e/0x590 [ 869.704231][T17084] ? __phys_addr+0xc6/0x150 [ 869.704265][T17084] ? dvb_device_open+0x36a/0x3b0 [ 869.704292][T17084] kasan_report+0xe0/0x110 [ 869.704325][T17084] ? dvb_device_open+0x36a/0x3b0 [ 869.704352][T17084] ? __pfx_dvb_device_open+0x10/0x10 [ 869.704377][T17084] dvb_device_open+0x36a/0x3b0 [ 869.704402][T17084] ? __pfx_dvb_device_open+0x10/0x10 [ 869.704427][T17084] chrdev_open+0x231/0x6a0 [ 869.704454][T17084] ? __pfx_apparmor_file_open+0x10/0x10 [ 869.704487][T17084] ? __pfx_chrdev_open+0x10/0x10 [ 869.704516][T17084] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 869.704558][T17084] do_dentry_open+0x741/0x1c10 [ 869.704585][T17084] ? __pfx_chrdev_open+0x10/0x10 [ 869.704616][T17084] vfs_open+0x82/0x3f0 [ 869.704650][T17084] path_openat+0x1e5e/0x2d40 [ 869.704679][T17084] ? __pfx_path_openat+0x10/0x10 [ 869.704707][T17084] do_filp_open+0x20b/0x470 [ 869.704731][T17084] ? __pfx_do_filp_open+0x10/0x10 [ 869.704766][T17084] ? alloc_fd+0x471/0x7d0 [ 869.704792][T17084] do_sys_openat2+0x11b/0x1d0 [ 869.704825][T17084] ? __pfx_do_sys_openat2+0x10/0x10 [ 869.704860][T17084] ? putname+0x154/0x1a0 [ 869.704891][T17084] __x64_sys_openat+0x174/0x210 [ 869.704926][T17084] ? __pfx___x64_sys_openat+0x10/0x10 [ 869.704961][T17084] ? rcu_is_watching+0x12/0xc0 [ 869.704990][T17084] do_syscall_64+0xcd/0x230 [ 869.705027][T17084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 869.705051][T17084] RIP: 0033:0x7fe51578e169 [ 869.705071][T17084] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 869.705095][T17084] RSP: 002b:00007fe51659d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 869.705117][T17084] RAX: ffffffffffffffda RBX: 00007fe5159b5fa0 RCX: 00007fe51578e169 [ 869.705134][T17084] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 869.705149][T17084] RBP: 00007fe515810a68 R08: 0000000000000000 R09: 0000000000000000 [ 869.705164][T17084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 869.705179][T17084] R13: 0000000000000000 R14: 00007fe5159b5fa0 R15: 00007ffd2db97208 [ 869.705203][T17084] [ 869.705211][T17084] [ 869.957231][T17084] Allocated by task 1: [ 869.961304][T17084] kasan_save_stack+0x33/0x60 [ 869.965998][T17084] kasan_save_track+0x14/0x30 [ 869.970687][T17084] __kasan_kmalloc+0xaa/0xb0 [ 869.975288][T17084] dvb_register_device+0x1e4/0x2370 [ 869.980496][T17084] dvb_register_frontend+0x5a6/0x880 [ 869.985788][T17084] vidtv_bridge_probe+0x459/0xa90 [ 869.990818][T17084] platform_probe+0xff/0x1f0 [ 869.995423][T17084] really_probe+0x23e/0xa90 [ 869.999945][T17084] __driver_probe_device+0x1de/0x440 [ 870.005279][T17084] driver_probe_device+0x4c/0x1b0 [ 870.010324][T17084] __driver_attach+0x283/0x580 [ 870.015107][T17084] bus_for_each_dev+0x13b/0x1d0 [ 870.019972][T17084] bus_add_driver+0x2e9/0x690 [ 870.024687][T17084] driver_register+0x15c/0x4b0 [ 870.029460][T17084] vidtv_bridge_init+0x45/0x80 [ 870.034248][T17084] do_one_initcall+0x120/0x6e0 [ 870.039031][T17084] kernel_init_freeable+0x5c2/0x900 [ 870.044247][T17084] kernel_init+0x1c/0x2b0 [ 870.048604][T17084] ret_from_fork+0x45/0x80 [ 870.053050][T17084] ret_from_fork_asm+0x1a/0x30 [ 870.057834][T17084] [ 870.060192][T17084] Freed by task 16685: [ 870.064259][T17084] kasan_save_stack+0x33/0x60 [ 870.068944][T17084] kasan_save_track+0x14/0x30 [ 870.073634][T17084] kasan_save_free_info+0x3b/0x60 [ 870.078697][T17084] __kasan_slab_free+0x51/0x70 [ 870.083473][T17084] kfree+0x2b6/0x4d0 [ 870.087377][T17084] dvb_device_put.part.0+0x60/0x90 [ 870.092498][T17084] dvb_device_open+0x2a4/0x3b0 [ 870.097290][T17084] chrdev_open+0x231/0x6a0 [ 870.101715][T17084] do_dentry_open+0x741/0x1c10 [ 870.106488][T17084] vfs_open+0x82/0x3f0 [ 870.110572][T17084] path_openat+0x1e5e/0x2d40 [ 870.115194][T17084] do_filp_open+0x20b/0x470 [ 870.119704][T17084] do_sys_openat2+0x11b/0x1d0 [ 870.124398][T17084] __x64_sys_openat+0x174/0x210 [ 870.129281][T17084] do_syscall_64+0xcd/0x230 [ 870.133803][T17084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 870.139704][T17084] [ 870.142046][T17084] The buggy address belongs to the object at ffff888141a81800 [ 870.142046][T17084] which belongs to the cache kmalloc-256 of size 256 [ 870.156121][T17084] The buggy address is located 24 bytes inside of [ 870.156121][T17084] freed 256-byte region [ffff888141a81800, ffff888141a81900) [ 870.169851][T17084] [ 870.172182][T17084] The buggy address belongs to the physical page: [ 870.178591][T17084] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888141a81800 pfn:0x141a80 [ 870.188759][T17084] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 870.197259][T17084] flags: 0x57ff00000000240(workingset|head|node=1|zone=2|lastcpupid=0x7ff) [ 870.205867][T17084] page_type: f5(slab) [ 870.209941][T17084] raw: 057ff00000000240 ffff88801b441b40 ffff888140400708 ffffea000536d010 [ 870.218528][T17084] raw: ffff888141a81800 000000000010000f 00000000f5000000 0000000000000000 [ 870.227114][T17084] head: 057ff00000000240 ffff88801b441b40 ffff888140400708 ffffea000536d010 [ 870.235787][T17084] head: ffff888141a81800 000000000010000f 00000000f5000000 0000000000000000 [ 870.244465][T17084] head: 057ff00000000001 ffffea000506a001 00000000ffffffff 00000000ffffffff [ 870.253143][T17084] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 870.261819][T17084] page dumped because: kasan: bad access detected [ 870.268227][T17084] page_owner tracks the page as allocated [ 870.273937][T17084] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 24573967245, free_ts 0 [ 870.293657][T17084] post_alloc_hook+0x181/0x1b0 [ 870.298432][T17084] get_page_from_freelist+0x135c/0x3920 [ 870.303987][T17084] __alloc_frozen_pages_noprof+0x263/0x23a0 [ 870.309891][T17084] alloc_pages_mpol+0x1fb/0x550 [ 870.314754][T17084] new_slab+0x244/0x340 [ 870.318916][T17084] ___slab_alloc+0xd9c/0x1940 [ 870.323597][T17084] __slab_alloc.constprop.0+0x56/0xb0 [ 870.328975][T17084] __kmalloc_cache_noprof+0xfb/0x3e0 [ 870.334267][T17084] bus_add_driver+0x92/0x690 [ 870.338872][T17084] driver_register+0x15c/0x4b0 [ 870.343640][T17084] usb_register_driver+0x216/0x4d0 [ 870.348779][T17084] do_one_initcall+0x120/0x6e0 [ 870.353565][T17084] kernel_init_freeable+0x5c2/0x900 [ 870.358780][T17084] kernel_init+0x1c/0x2b0 [ 870.363138][T17084] ret_from_fork+0x45/0x80 [ 870.367566][T17084] ret_from_fork_asm+0x1a/0x30 [ 870.372350][T17084] page_owner free stack trace missing [ 870.377713][T17084] [ 870.380037][T17084] Memory state around the buggy address: [ 870.385666][T17084] ffff888141a81700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 870.393729][T17084] ffff888141a81780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 870.401792][T17084] >ffff888141a81800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 870.409870][T17084] ^ [ 870.414719][T17084] ffff888141a81880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 870.422785][T17084] ffff888141a81900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 870.430844][T17084] ================================================================== [ 870.439350][ C1] vkms_vblank_simulate: vblank timer overrun SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 873.484814][T11707] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 873.834777][T11707] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 874.268991][T11707] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 874.453484][T11707] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 874.879869][T11707] bridge_slave_0: left allmulticast mode [ 874.885581][T11707] bridge_slave_0: left promiscuous mode [ 874.929345][T11707] bridge0: port 1(bridge_slave_0) entered disabled state [ 875.453999][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 875.460635][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 876.546579][T11707] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 876.573291][T11707] bond0 (unregistering): (slave ): Releasing backup interface [ 876.592036][T11707] bond0 (unregistering): Released all slaves [ 876.703973][T11707] ovs_: left promiscuous mode [ 877.128682][T11707] hsr_slave_0: left promiscuous mode [ 877.142533][T11707] hsr_slave_1: left promiscuous mode [ 877.173277][T11707] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 877.202894][T11707] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 877.259534][T11707] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 877.266958][T11707] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 877.343369][T11707] veth1_macvtap: left promiscuous mode [ 877.444931][T17084] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 877.452169][T17084] CPU: 1 UID: 0 PID: 17084 Comm: syz.5.3884 Not tainted 6.15.0-rc2-syzkaller-00278-gfc96b232f8e7 #0 PREEMPT(full) [ 877.464253][T17084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 877.474312][T17084] Call Trace: [ 877.477600][T17084] [ 877.480532][T17084] dump_stack_lvl+0x3d/0x1f0 [ 877.485172][T17084] panic+0x71c/0x800 [ 877.489090][T17084] ? __pfx_panic+0x10/0x10 [ 877.493526][T17084] ? mark_held_locks+0x49/0x80 [ 877.498320][T17084] ? preempt_schedule_thunk+0x16/0x30 [ 877.503715][T17084] ? dvb_device_open+0x36a/0x3b0 [ 877.508662][T17084] ? preempt_schedule_common+0x44/0xc0 [ 877.514140][T17084] ? dvb_device_open+0x36a/0x3b0 [ 877.519088][T17084] check_panic_on_warn+0xab/0xb0 [ 877.524063][T17084] end_report+0x107/0x170 [ 877.528420][T17084] kasan_report+0xee/0x110 [ 877.532865][T17084] ? dvb_device_open+0x36a/0x3b0 [ 877.537814][T17084] ? __pfx_dvb_device_open+0x10/0x10 [ 877.543108][T17084] dvb_device_open+0x36a/0x3b0 [ 877.547880][T17084] ? __pfx_dvb_device_open+0x10/0x10 [ 877.553175][T17084] chrdev_open+0x231/0x6a0 [ 877.557613][T17084] ? __pfx_apparmor_file_open+0x10/0x10 [ 877.563177][T17084] ? __pfx_chrdev_open+0x10/0x10 [ 877.568126][T17084] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 877.574914][T17084] do_dentry_open+0x741/0x1c10 [ 877.579688][T17084] ? __pfx_chrdev_open+0x10/0x10 [ 877.584642][T17084] vfs_open+0x82/0x3f0 [ 877.588732][T17084] path_openat+0x1e5e/0x2d40 [ 877.593337][T17084] ? __pfx_path_openat+0x10/0x10 [ 877.598305][T17084] do_filp_open+0x20b/0x470 [ 877.602820][T17084] ? __pfx_do_filp_open+0x10/0x10 [ 877.607864][T17084] ? alloc_fd+0x471/0x7d0 [ 877.612205][T17084] do_sys_openat2+0x11b/0x1d0 [ 877.616900][T17084] ? __pfx_do_sys_openat2+0x10/0x10 [ 877.622117][T17084] ? putname+0x154/0x1a0 [ 877.626376][T17084] __x64_sys_openat+0x174/0x210 [ 877.631247][T17084] ? __pfx___x64_sys_openat+0x10/0x10 [ 877.636641][T17084] ? rcu_is_watching+0x12/0xc0 [ 877.641422][T17084] do_syscall_64+0xcd/0x230 [ 877.645949][T17084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 877.651850][T17084] RIP: 0033:0x7fe51578e169 [ 877.656271][T17084] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 877.675911][T17084] RSP: 002b:00007fe51659d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 877.684337][T17084] RAX: ffffffffffffffda RBX: 00007fe5159b5fa0 RCX: 00007fe51578e169 [ 877.692314][T17084] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 877.700309][T17084] RBP: 00007fe515810a68 R08: 0000000000000000 R09: 0000000000000000 [ 877.708285][T17084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 877.716279][T17084] R13: 0000000000000000 R14: 00007fe5159b5fa0 R15: 00007ffd2db97208 [ 877.724265][T17084] [ 877.727348][T17084] Kernel Offset: disabled [ 877.731681][T17084] Rebooting in 86400 seconds..