last executing test programs: 1m15.47148439s ago: executing program 3 (id=299): ioctl$auto_SG_SET_RESERVED_SIZE2(0xffffffffffffffff, 0x2275, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0xe8) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001240)='/proc/thread-self/fail-nth\x00', 0xa0302, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) madvise$auto(0x0, 0x100000, 0x17) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) 1m14.651249898s ago: executing program 3 (id=304): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x10, &(0x7f00000000c0)={0x0, 0x1fff8}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) r0 = socket(0x10, 0x3, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}, 0x1, 0x0, 0x0, 0x40040}, 0x40000) recvmmsg$auto(r0, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) r1 = socket(0xa, 0x2, 0x0) setsockopt$auto(r1, 0x0, 0x30, 0x0, 0x568) 1m13.675168937s ago: executing program 3 (id=318): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) open(&(0x7f0000000100)='.\x00', 0x0, 0x418) getdents$auto(0x0, 0x0, 0x18) socket(0x2, 0x80002, 0x73) fcntl$auto(0x8000000000000001, 0x26, 0x8) prctl$auto(0x41555856, 0x6, 0x2008, 0x0, 0x0) fcntl$auto(0x8000000000000001, 0x25, 0x8) 1m13.637246835s ago: executing program 3 (id=319): close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x3, 0x6) lsm_list_modules$auto(0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x401c5820, 0x0) mkdir$auto(0x0, 0x353) 1m13.487131962s ago: executing program 3 (id=321): rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x23, 0x80805, 0x0) epoll_create$auto(0x4) epoll_pwait$auto(r0, 0x0, 0x3, 0x6, 0x0, 0x8) 1m13.012859714s ago: executing program 3 (id=326): openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x2002, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/pci0000:00/waiting_for_supplier\x00', 0x80800, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/vt/parameters/default_blu\x00', 0x183042, 0x0) write$auto(0x3, 0x0, 0xfdef) 1m12.891172932s ago: executing program 32 (id=326): openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x2002, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/pci0000:00/waiting_for_supplier\x00', 0x80800, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/vt/parameters/default_blu\x00', 0x183042, 0x0) write$auto(0x3, 0x0, 0xfdef) 4.232539465s ago: executing program 4 (id=911): mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x640, 0x0) socket(0x2000000000000021, 0x2, 0x10000000000002) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2200, 0x0) socket(0x2, 0x1, 0x106) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0xa901, 0x0) 4.09548407s ago: executing program 2 (id=913): socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0x200007, 0x8) 3.334200274s ago: executing program 4 (id=920): mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual/block/ram12/queue/read_ahead_kb\x00', 0x80000, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r3, &(0x7f0000000580)={0x0, 0x2120, &(0x7f0000000540)={&(0x7f0000000400)={0x14, r2, 0x1, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x68, 0x0, 0x4000000}, 0x0) 3.333542799s ago: executing program 0 (id=922): mmap$auto(0x0, 0x6, 0x4000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) close_range$auto(0x2, 0x8, 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) bind$auto(r0, &(0x7f0000000140)=@tipc=@name={0x1e, 0x2, 0x2, {{0x2, 0x2}}}, 0x8) openat$auto_fops_atomic_t_(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/fail_page_alloc/times\x00', 0x2, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) 3.194239165s ago: executing program 0 (id=925): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x1c9180, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x47, 0x8000) sendmsg$auto_ETHTOOL_MSG_PLCA_GET_STATUS(0xffffffffffffffff, 0x0, 0x40) mincore$auto(0x1000, 0x8001, 0x0) fcntl$auto(0x8000000000000001, 0x7, 0x8) fcntl$auto(0x8000000000000001, 0x26, 0x8) clone$auto(0x21, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6) close_range$auto(0x2, 0x8, 0x0) 2.71118149s ago: executing program 2 (id=926): close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) r1 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = open(&(0x7f0000000100)='.\x00', 0x0, 0x110) getdents64$auto(r2, 0x0, 0x400) ioctl$auto_VHOST_SET_OWNER(r1, 0xaf01, 0x5) ioctl$auto(r1, 0x4008af13, r0) 2.679942089s ago: executing program 1 (id=927): shmctl$auto_IPC_INFO(0x8000, 0x3, 0x0) syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x8000000003, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) io_uring_setup$auto(0x6, 0x0) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x101c82, 0x0) write$auto(r0, &(0x7f0000000080)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) madvise$auto(0x0, 0x2003f2, 0x15) 2.539139672s ago: executing program 2 (id=928): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @loopback}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, 0x0, 0x9, 0x0, 0x1f, 0x9}, 0x800009}, 0x7, 0x20000000) setsockopt$auto(0x3, 0x1, 0x2f, 0x0, 0x9) write$auto(0x3, 0x0, 0xfffffdef) 2.515172727s ago: executing program 1 (id=929): openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/tracing/set_event_notrace_pid\x00', 0x8a581, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x4a402, 0x0) read$auto(r0, 0x0, 0x1f40) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x6}, 0x3) setresuid$auto(0x0, 0xffffffffffffffff, 0x200) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f00000000c0), 0x41, 0x0) 2.501436428s ago: executing program 4 (id=930): mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) pipe2$auto(0x0, 0x80) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) setrlimit$auto(0x1000000007, 0x0) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) 2.006281711s ago: executing program 1 (id=931): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000140), r2) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x14, r3, 0x1, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x44004811}, 0x40000c0) 2.005391993s ago: executing program 0 (id=932): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000100)={{0x0, 0x6, 0x0, 0xa7, 0x0, 0x8000, 0x1}, 0x8}, 0x4, 0x9) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0xff, 0x0, 0x1, 0x3}, 0xed7138c}, 0xb, 0x0) 2.005039328s ago: executing program 4 (id=933): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0xa, 0x0) r0 = socket(0x2, 0x3, 0x6) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x20) close_range$auto(0x2, 0x8, 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x401c5820, 0x0) 1.20744634s ago: executing program 4 (id=934): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0x40, 0x0) r0 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) ioctl$auto(r1, 0x2284, r0) 1.205452767s ago: executing program 0 (id=942): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2b, 0x1, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) statx$auto(0xffffffffffffffff, 0x0, 0x6d7, 0x8, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mlock$auto(0x112, 0x80006) mlockall$auto(0x800000000000005) madvise$auto(0x0, 0x200007, 0x19) 1.204943895s ago: executing program 1 (id=943): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0xa, 0x0) r0 = socket(0x2, 0x3, 0x6) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x20) close_range$auto(0x2, 0x8, 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x401c5820, 0x0) 875.068068ms ago: executing program 4 (id=935): socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0x200007, 0x8) 874.293559ms ago: executing program 1 (id=945): socket(0x10, 0x3, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/block/nbd14/sched/write1_fifo_list\x00', 0x189e42, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="1b0026bd7400fddbdf250300000004000800100003800c000980"], 0x40}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="010600bd7000fbdbdf250a"], 0x1c}, 0x1, 0x0, 0x0, 0x20040004}, 0x20008810) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 873.789035ms ago: executing program 2 (id=936): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x22004840}, 0x4001) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x24, 0x0, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x0, 0x35, 0x6}, @BATADV_ATTR_TT_CRC32={0x8, 0x13, 0x10001}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c894}, 0x4008800) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)={0x14, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20008810) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='!\x00'], 0x1ac}, 0x1, 0x0, 0x0, 0x44}, 0x40090) r0 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r0, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc4}, 0x2, 0x0, 0x0, 0x1}, 0x5}, 0x3, 0x0) 789.142976ms ago: executing program 0 (id=937): close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) fadvise64$auto_POSIX_FADV_SEQUENTIAL(0xffffffffffffffff, 0x86, 0x8, 0x2) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/irq/2/wakeup\x00', 0x80000, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x9) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x0, 0x0) ioctl$auto_SG_GET_RESERVED_SIZE(r0, 0x4c00, 0x0) 603.078954ms ago: executing program 1 (id=938): r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/swradio12\x00', 0x0, 0x0) poll$auto(&(0x7f0000000480)={r0, 0xffff, 0x29}, 0x3, 0x8) unshare$auto(0x40000080) io_uring_setup$auto(0x6, 0x0) fsopen$auto(0x0, 0x1) write$auto(0xca, 0x0, 0x2d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) 439.20705ms ago: executing program 2 (id=939): r0 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) r1 = getpid() process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) ioctl$auto(0x3, 0x400454ca, 0x38) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto_TUNSETCARRIER(r0, 0x400454e2, 0x0) close_range$auto(0x2, 0x8, 0x0) 78.046877ms ago: executing program 0 (id=940): close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x2) landlock_create_ruleset$auto(&(0x7f0000000000)={0x0, 0x401, 0x7}, 0x9, 0x0) landlock_restrict_self$auto(r0, 0x0) mmap$auto(0x0, 0x200009, 0x2, 0x40eb1, 0x602, 0x300000000000) getcwd$auto(0x0, 0xffffffffffffffff) move_mount$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) 0s ago: executing program 2 (id=941): mmap$auto(0x0, 0x4000b, 0x7, 0x9b72, 0x7, 0x28000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) open(0x0, 0x22240, 0x55) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$auto(0x3, 0x40106f52, r0) syslog$auto_SYSLOG_ACTION_CLEAR(0x9, 0x0, 0x6) kernel console output (not intermixed with test programs): 52.697041][ T7447] ? __fget_files+0x204/0x3c0 [ 152.697075][ T7447] ? hook_file_ioctl_common+0x145/0x410 [ 152.697122][ T7447] ? __fget_files+0x20e/0x3c0 [ 152.697158][ T7447] ? __pfx_tty_ioctl+0x10/0x10 [ 152.697203][ T7447] __x64_sys_ioctl+0x18b/0x210 [ 152.697255][ T7447] do_syscall_64+0xcd/0x490 [ 152.697300][ T7447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.697333][ T7447] RIP: 0033:0x7fa8ec78ebe9 [ 152.697359][ T7447] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 152.697391][ T7447] RSP: 002b:00007fa8ed5fe038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 152.697423][ T7447] RAX: ffffffffffffffda RBX: 00007fa8ec9b5fa0 RCX: 00007fa8ec78ebe9 [ 152.697445][ T7447] RDX: 0000000000000000 RSI: 0000000000005423 RDI: 0000000000000005 [ 152.697466][ T7447] RBP: 00007fa8ec811e19 R08: 0000000000000000 R09: 0000000000000000 [ 152.697486][ T7447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 152.697507][ T7447] R13: 00007fa8ec9b6038 R14: 00007fa8ec9b5fa0 R15: 00007ffcb1a95418 [ 152.697540][ T7447] [ 152.871226][ T7450] FAULT_INJECTION: forcing a failure. [ 152.871226][ T7450] name fail_futex, interval 1, probability 0, space 0, times 1 [ 153.117257][ T7450] CPU: 1 UID: 0 PID: 7450 Comm: syz.4.549 Not tainted syzkaller #0 PREEMPT(full) [ 153.117301][ T7450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 153.117320][ T7450] Call Trace: [ 153.117332][ T7450] [ 153.117344][ T7450] dump_stack_lvl+0x16c/0x1f0 [ 153.117390][ T7450] should_fail_ex+0x512/0x640 [ 153.117438][ T7450] get_futex_key+0x1d0/0x1560 [ 153.117477][ T7450] ? sock_recvmsg+0x10c/0x250 [ 153.117526][ T7450] ? __pfx_get_futex_key+0x10/0x10 [ 153.117562][ T7450] ? sock_read_iter+0x257/0x3b0 [ 153.117628][ T7450] ? __pfx_sock_read_iter+0x10/0x10 [ 153.117681][ T7450] futex_wake+0xea/0x530 [ 153.117728][ T7450] ? bpf_lsm_file_permission+0x9/0x10 [ 153.117776][ T7450] ? __pfx_futex_wake+0x10/0x10 [ 153.117825][ T7450] ? vfs_read+0x23b/0xcf0 [ 153.117863][ T7450] do_futex+0x1e3/0x350 [ 153.117900][ T7450] ? __pfx_do_futex+0x10/0x10 [ 153.117936][ T7450] ? lock_release+0x201/0x2f0 [ 153.117983][ T7450] __x64_sys_futex+0x1e0/0x4c0 [ 153.118024][ T7450] ? fput+0x9b/0xd0 [ 153.118066][ T7450] ? __pfx___x64_sys_futex+0x10/0x10 [ 153.118107][ T7450] ? xfd_validate_state+0x61/0x180 [ 153.118154][ T7450] ? __pfx_ksys_read+0x10/0x10 [ 153.118196][ T7450] do_syscall_64+0xcd/0x490 [ 153.118239][ T7450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.118272][ T7450] RIP: 0033:0x7f5016d8ebe9 [ 153.118298][ T7450] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 153.118331][ T7450] RSP: 002b:00007f5017c830e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 153.118361][ T7450] RAX: ffffffffffffffda RBX: 00007f5016fb6098 RCX: 00007f5016d8ebe9 [ 153.118382][ T7450] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f5016fb609c [ 153.118401][ T7450] RBP: 00007f5016fb6090 R08: 00007f5017ca5000 R09: 0000000000000000 [ 153.118422][ T7450] R10: 0000000000000e80 R11: 0000000000000246 R12: 0000000000000000 [ 153.118441][ T7450] R13: 00007f5016fb6128 R14: 00007fffc8ba1ae0 R15: 00007fffc8ba1bc8 [ 153.118472][ T7450] [ 153.728593][ T7469] netlink: 20 bytes leftover after parsing attributes in process `syz.4.550'. [ 154.547171][ T7509] netlink: 302 bytes leftover after parsing attributes in process `syz.1.565'. [ 154.785772][ T7518] netlink: 4 bytes leftover after parsing attributes in process `syz.1.568'. [ 155.643022][ T7550] netlink: 330 bytes leftover after parsing attributes in process `syz.1.580'. [ 155.862984][ T7561] netlink: 146 bytes leftover after parsing attributes in process `syz.4.584'. [ 155.975994][ T7565] netlink: 'syz.0.588': attribute type 21 has an invalid length. [ 156.030703][ T7565] netlink: 334 bytes leftover after parsing attributes in process `syz.0.588'. [ 157.426530][ T7616] netlink: 334 bytes leftover after parsing attributes in process `syz.0.608'. [ 157.524885][ T7618] netlink: 294 bytes leftover after parsing attributes in process `syz.4.609'. [ 157.628470][ T7624] FAULT_INJECTION: forcing a failure. [ 157.628470][ T7624] name fail_page_alloc, interval 1, probability 0, space 0, times 393213 [ 157.644899][ T7624] CPU: 0 UID: 0 PID: 7624 Comm: syz.4.612 Not tainted syzkaller #0 PREEMPT(full) [ 157.644948][ T7624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 157.644968][ T7624] Call Trace: [ 157.644979][ T7624] [ 157.644992][ T7624] dump_stack_lvl+0x16c/0x1f0 [ 157.645039][ T7624] should_fail_ex+0x512/0x640 [ 157.645090][ T7624] should_fail_alloc_page+0xe7/0x130 [ 157.645140][ T7624] prepare_alloc_pages+0x3c2/0x610 [ 157.645191][ T7624] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 157.645232][ T7624] ? copy_splice_read+0x1a8/0xc20 [ 157.645262][ T7624] ? stack_trace_save+0x8e/0xc0 [ 157.645297][ T7624] ? __pfx_stack_trace_save+0x10/0x10 [ 157.645340][ T7624] ? stack_depot_save_flags+0x29/0x9c0 [ 157.645386][ T7624] ? debug_check_no_obj_freed+0x31f/0x600 [ 157.645423][ T7624] ? rcu_is_watching+0x12/0xc0 [ 157.645456][ T7624] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 157.645494][ T7624] ? kasan_save_stack+0x33/0x60 [ 157.645530][ T7624] ? __kasan_kmalloc+0xaa/0xb0 [ 157.645585][ T7624] ? copy_splice_read+0x1a8/0xc20 [ 157.645614][ T7624] ? do_splice_read+0x285/0x370 [ 157.645643][ T7624] ? splice_direct_to_actor+0x2a1/0xa30 [ 157.645675][ T7624] ? do_splice_direct+0x174/0x240 [ 157.645704][ T7624] ? do_sendfile+0xb06/0xe50 [ 157.645736][ T7624] ? __x64_sys_sendfile64+0x1d8/0x220 [ 157.645777][ T7624] ? do_syscall_64+0xcd/0x490 [ 157.645833][ T7624] alloc_pages_bulk_noprof+0x71c/0x1410 [ 157.645878][ T7624] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 157.645922][ T7624] ? trace_kmalloc+0x2b/0xd0 [ 157.645965][ T7624] ? __kmalloc_noprof+0x242/0x510 [ 157.646006][ T7624] copy_splice_read+0x1e1/0xc20 [ 157.646038][ T7624] ? __pfx_pipe_to_null+0x10/0x10 [ 157.646087][ T7624] ? __pfx_copy_splice_read+0x10/0x10 [ 157.646116][ T7624] ? pipe_unlock+0x4a/0x70 [ 157.646152][ T7624] ? __pfx_splice_from_pipe+0x10/0x10 [ 157.646191][ T7624] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 157.646228][ T7624] ? __pfx_copy_splice_read+0x10/0x10 [ 157.646258][ T7624] do_splice_read+0x285/0x370 [ 157.646290][ T7624] splice_direct_to_actor+0x2a1/0xa30 [ 157.646329][ T7624] ? __pfx_direct_splice_actor+0x10/0x10 [ 157.646367][ T7624] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 157.646403][ T7624] ? futex_private_hash_put+0x11c/0x300 [ 157.646443][ T7624] do_splice_direct+0x174/0x240 [ 157.646476][ T7624] ? __pfx_do_splice_direct+0x10/0x10 [ 157.646508][ T7624] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 157.646540][ T7624] ? bpf_lsm_file_permission+0x9/0x10 [ 157.646588][ T7624] ? security_file_permission+0x71/0x210 [ 157.646632][ T7624] ? rw_verify_area+0xcf/0x6c0 [ 157.646665][ T7624] do_sendfile+0xb06/0xe50 [ 157.646702][ T7624] ? __pfx_do_sendfile+0x10/0x10 [ 157.646739][ T7624] ? __x64_sys_futex+0x1e0/0x4c0 [ 157.646778][ T7624] ? __x64_sys_futex+0x1e9/0x4c0 [ 157.646822][ T7624] __x64_sys_sendfile64+0x1d8/0x220 [ 157.646867][ T7624] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 157.646917][ T7624] do_syscall_64+0xcd/0x490 [ 157.646959][ T7624] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.646993][ T7624] RIP: 0033:0x7f5016d8ebe9 [ 157.647019][ T7624] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.647052][ T7624] RSP: 002b:00007f5017ca4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 157.647086][ T7624] RAX: ffffffffffffffda RBX: 00007f5016fb5fa0 RCX: 00007f5016d8ebe9 [ 157.647108][ T7624] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000005 [ 157.647128][ T7624] RBP: 00007f5016e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 157.647148][ T7624] R10: 0010000800000003 R11: 0000000000000246 R12: 0000000000000000 [ 157.647169][ T7624] R13: 00007f5016fb6038 R14: 00007f5016fb5fa0 R15: 00007fffc8ba1bc8 [ 157.647201][ T7624] [ 158.019783][ C0] vkms_vblank_simulate: vblank timer overrun [ 158.043116][ T7628] sp0: Synchronizing with TNC [ 158.236684][ T7634] netlink: 186 bytes leftover after parsing attributes in process `syz.2.615'. [ 158.533186][ T7643] FAULT_INJECTION: forcing a failure. [ 158.533186][ T7643] name failslab, interval 1, probability 0, space 0, times 0 [ 158.546456][ T7643] CPU: 1 UID: 0 PID: 7643 Comm: syz.2.621 Not tainted syzkaller #0 PREEMPT(full) [ 158.546498][ T7643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 158.546518][ T7643] Call Trace: [ 158.546528][ T7643] [ 158.546540][ T7643] dump_stack_lvl+0x16c/0x1f0 [ 158.546591][ T7643] should_fail_ex+0x512/0x640 [ 158.546639][ T7643] should_failslab+0xc2/0x120 [ 158.546681][ T7643] __kmalloc_cache_noprof+0x6a/0x3e0 [ 158.546716][ T7643] ? tipc_nametbl_insert_publ+0x5a/0x1720 [ 158.546765][ T7643] tipc_nametbl_insert_publ+0x5a/0x1720 [ 158.546810][ T7643] ? do_raw_spin_lock+0x12c/0x2b0 [ 158.546862][ T7643] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 158.546919][ T7643] tipc_nametbl_publish+0x137/0x280 [ 158.546966][ T7643] tipc_sk_publish+0x1d8/0x430 [ 158.547010][ T7643] ? __pfx_tipc_sk_publish+0x10/0x10 [ 158.547055][ T7643] ? tipc_sk_bind+0x44/0x380 [ 158.547099][ T7643] ? tipc_sk_bind+0x44/0x380 [ 158.547143][ T7643] ? rcu_is_watching+0x12/0xc0 [ 158.547176][ T7643] ? tipc_sk_bind+0x44/0x380 [ 158.547225][ T7643] tipc_sk_bind+0x16f/0x380 [ 158.547285][ T7643] tipc_bind+0x190/0x2a0 [ 158.547333][ T7643] __sys_bind+0x1a4/0x260 [ 158.547369][ T7643] ? __pfx___sys_bind+0x10/0x10 [ 158.547410][ T7643] ? xfd_validate_state+0x61/0x180 [ 158.547468][ T7643] __x64_sys_bind+0x72/0xb0 [ 158.547502][ T7643] do_syscall_64+0xcd/0x490 [ 158.547548][ T7643] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.547582][ T7643] RIP: 0033:0x7f167bf8ebe9 [ 158.547608][ T7643] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 158.547642][ T7643] RSP: 002b:00007f167cd72038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 158.547675][ T7643] RAX: ffffffffffffffda RBX: 00007f167c1b5fa0 RCX: 00007f167bf8ebe9 [ 158.547697][ T7643] RDX: 0000000000000066 RSI: 0000200000000040 RDI: 0000000000000005 [ 158.547718][ T7643] RBP: 00007f167c011e19 R08: 0000000000000000 R09: 0000000000000000 [ 158.547739][ T7643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 158.547759][ T7643] R13: 00007f167c1b6038 R14: 00007f167c1b5fa0 R15: 00007ffc455e85b8 [ 158.547791][ T7643] [ 158.781624][ T7648] FAULT_INJECTION: forcing a failure. [ 158.781624][ T7648] name fail_futex, interval 1, probability 0, space 0, times 0 [ 158.796827][ T7648] CPU: 0 UID: 0 PID: 7648 Comm: syz.0.623 Not tainted syzkaller #0 PREEMPT(full) [ 158.796872][ T7648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 158.796892][ T7648] Call Trace: [ 158.796901][ T7648] [ 158.796912][ T7648] dump_stack_lvl+0x16c/0x1f0 [ 158.796955][ T7648] should_fail_ex+0x512/0x640 [ 158.797005][ T7648] get_futex_key+0x1d0/0x1560 [ 158.797045][ T7648] ? __pfx_get_futex_key+0x10/0x10 [ 158.797089][ T7648] futex_wake+0xea/0x530 [ 158.797136][ T7648] ? rcu_is_watching+0x12/0xc0 [ 158.797168][ T7648] ? __pfx_futex_wake+0x10/0x10 [ 158.797217][ T7648] ? kmem_cache_free+0x2d1/0x4d0 [ 158.797266][ T7648] ? putname+0x154/0x1a0 [ 158.797314][ T7648] do_futex+0x1e3/0x350 [ 158.797354][ T7648] ? __pfx_do_futex+0x10/0x10 [ 158.797400][ T7648] __x64_sys_futex+0x1e0/0x4c0 [ 158.797443][ T7648] ? __x64_sys_openat+0x174/0x210 [ 158.797496][ T7648] ? __pfx___x64_sys_futex+0x10/0x10 [ 158.797545][ T7648] do_syscall_64+0xcd/0x490 [ 158.797590][ T7648] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.797623][ T7648] RIP: 0033:0x7fa8ec78ebe9 [ 158.797647][ T7648] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 158.797680][ T7648] RSP: 002b:00007fa8ed5fe0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 158.797711][ T7648] RAX: ffffffffffffffda RBX: 00007fa8ec9b5fa8 RCX: 00007fa8ec78ebe9 [ 158.797733][ T7648] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fa8ec9b5fac [ 158.797754][ T7648] RBP: 00007fa8ec9b5fa0 R08: 00007fa8ed5ff000 R09: 0000000000000000 [ 158.797774][ T7648] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 158.797798][ T7648] R13: 00007fa8ec9b6038 R14: 00007ffcb1a95330 R15: 00007ffcb1a95418 [ 158.797829][ T7648] [ 158.980008][ C0] vkms_vblank_simulate: vblank timer overrun [ 159.160256][ T7661] netlink: 'syz.1.627': attribute type 5 has an invalid length. [ 159.169561][ T7661] netlink: 314 bytes leftover after parsing attributes in process `syz.1.627'. [ 159.207238][ T7652] Process accounting resumed [ 159.321872][ T7670] __vm_enough_memory: pid: 7670, comm: syz.1.629, bytes: 4398046511104 not enough memory for the allocation [ 159.347637][ T7672] usb usb23: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 159.684380][ T7684] netlink: 28 bytes leftover after parsing attributes in process `syz.2.636'. [ 159.696140][ T7684] team0: entered promiscuous mode [ 159.702271][ T7684] team_slave_0: entered promiscuous mode [ 159.708312][ T7684] team_slave_1: entered promiscuous mode [ 159.715080][ T7684] team0: entered allmulticast mode [ 159.720852][ T7684] team_slave_0: entered allmulticast mode [ 159.726813][ T7684] team_slave_1: entered allmulticast mode [ 159.790182][ T7689] netlink: 338 bytes leftover after parsing attributes in process `syz.1.637'. [ 159.800731][ T7686] netlink: 342 bytes leftover after parsing attributes in process `syz.0.635'. [ 160.189944][ T7710] netlink: 330 bytes leftover after parsing attributes in process `syz.4.646'. [ 160.210962][ T7713] random: crng reseeded on system resumption [ 160.211171][ T7712] __vm_enough_memory: pid: 7712, comm: syz.2.643, bytes: 4398046511104 not enough memory for the allocation [ 160.278868][ T7713] Restarting kernel threads ... [ 160.307001][ T7713] Done restarting kernel threads. [ 160.874733][ T7730] FAULT_INJECTION: forcing a failure. [ 160.874733][ T7730] name failslab, interval 1, probability 0, space 0, times 0 [ 160.887767][ T7730] CPU: 1 UID: 0 PID: 7730 Comm: syz.1.653 Not tainted syzkaller #0 PREEMPT(full) [ 160.887814][ T7730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 160.887835][ T7730] Call Trace: [ 160.887846][ T7730] [ 160.887858][ T7730] dump_stack_lvl+0x16c/0x1f0 [ 160.887905][ T7730] should_fail_ex+0x512/0x640 [ 160.887954][ T7730] should_failslab+0xc2/0x120 [ 160.887997][ T7730] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 160.888036][ T7730] ? _copy_from_iter+0x15d/0x16f0 [ 160.888093][ T7730] ? __alloc_skb+0x2b2/0x380 [ 160.888134][ T7730] __alloc_skb+0x2b2/0x380 [ 160.888171][ T7730] ? __pfx___alloc_skb+0x10/0x10 [ 160.888210][ T7730] ? rcu_is_watching+0x12/0xc0 [ 160.888246][ T7730] ? rcu_is_watching+0x12/0xc0 [ 160.888280][ T7730] tipc_buf_acquire+0x26/0xe0 [ 160.888310][ T7730] tipc_msg_build+0x112/0x1150 [ 160.888345][ T7730] ? __pfx_tipc_msg_build+0x10/0x10 [ 160.888380][ T7730] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 160.888426][ T7730] __tipc_sendmsg+0xa30/0x19a0 [ 160.888483][ T7730] ? __pfx___tipc_sendmsg+0x10/0x10 [ 160.888532][ T7730] ? finish_task_switch.isra.0+0x21c/0xc10 [ 160.888565][ T7730] ? rcu_is_watching+0x12/0xc0 [ 160.888596][ T7730] ? lock_release+0x201/0x2f0 [ 160.888637][ T7730] ? __pfx___might_resched+0x10/0x10 [ 160.888668][ T7730] ? rcu_is_watching+0x12/0xc0 [ 160.888699][ T7730] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 160.888750][ T7730] ? __pfx_woken_wake_function+0x10/0x10 [ 160.888804][ T7730] ? aa_sk_perm+0x2f4/0xb10 [ 160.888849][ T7730] ? tipc_sendmsg+0x41/0x70 [ 160.888896][ T7730] ? rcu_is_watching+0x12/0xc0 [ 160.888925][ T7730] ? tipc_sendmsg+0x41/0x70 [ 160.888975][ T7730] ? rcu_is_watching+0x12/0xc0 [ 160.889006][ T7730] ? tipc_sendmsg+0x41/0x70 [ 160.889056][ T7730] tipc_sendmsg+0x4f/0x70 [ 160.889111][ T7730] ____sys_sendmsg+0xa95/0xc70 [ 160.889168][ T7730] ? copy_msghdr_from_user+0x10a/0x160 [ 160.889207][ T7730] ? __pfx_____sys_sendmsg+0x10/0x10 [ 160.889263][ T7730] ? kfree+0x24f/0x4d0 [ 160.889289][ T7730] ? futex_unqueue+0x133/0x2c0 [ 160.889327][ T7730] ? rcu_is_watching+0x12/0xc0 [ 160.889358][ T7730] ? lock_release+0x201/0x2f0 [ 160.889400][ T7730] ___sys_sendmsg+0x134/0x1d0 [ 160.889440][ T7730] ? __pfx____sys_sendmsg+0x10/0x10 [ 160.889479][ T7730] ? __pfx___futex_wait+0x10/0x10 [ 160.889529][ T7730] ? rcu_is_watching+0x12/0xc0 [ 160.889572][ T7730] ? __pfx___might_resched+0x10/0x10 [ 160.889610][ T7730] __sys_sendmmsg+0x200/0x420 [ 160.889652][ T7730] ? __pfx___sys_sendmmsg+0x10/0x10 [ 160.889699][ T7730] ? __pfx_do_futex+0x10/0x10 [ 160.889737][ T7730] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 160.889791][ T7730] ? xfd_validate_state+0x61/0x180 [ 160.889839][ T7730] ? __pfx_do_writev+0x10/0x10 [ 160.889878][ T7730] __x64_sys_sendmmsg+0x9c/0x100 [ 160.889919][ T7730] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 160.889971][ T7730] do_syscall_64+0xcd/0x490 [ 160.890015][ T7730] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.890048][ T7730] RIP: 0033:0x7f899658ebe9 [ 160.890082][ T7730] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.890116][ T7730] RSP: 002b:00007f89947f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 160.890148][ T7730] RAX: ffffffffffffffda RBX: 00007f89967b5fa0 RCX: 00007f899658ebe9 [ 160.890171][ T7730] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000003 [ 160.890191][ T7730] RBP: 00007f8996611e19 R08: 0000000000000000 R09: 0000000000000000 [ 160.890210][ T7730] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 160.890230][ T7730] R13: 00007f89967b6038 R14: 00007f89967b5fa0 R15: 00007fff2a644078 [ 160.890262][ T7730] [ 161.775471][ T7744] netlink: 346 bytes leftover after parsing attributes in process `syz.0.658'. [ 162.613348][ T7763] netlink: 'syz.0.672': attribute type 20 has an invalid length. [ 162.622727][ T7763] netlink: 330 bytes leftover after parsing attributes in process `syz.0.672'. [ 162.638356][ T7763] IPv6: NLM_F_CREATE should be specified when creating new route [ 163.016570][ T7780] random: crng reseeded on system resumption [ 163.045595][ T7780] Restarting kernel threads ... [ 163.062632][ T7780] Done restarting kernel threads. [ 164.057536][ T7805] __vm_enough_memory: pid: 7805, comm: syz.0.678, bytes: 4398046511104 not enough memory for the allocation [ 164.088890][ T7806] bond0: mtu greater than device maximum [ 164.615040][ T7826] FAULT_INJECTION: forcing a failure. [ 164.615040][ T7826] name failslab, interval 1, probability 0, space 0, times 0 [ 164.651605][ T7826] CPU: 1 UID: 0 PID: 7826 Comm: syz.1.686 Not tainted syzkaller #0 PREEMPT(full) [ 164.651653][ T7826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 164.651672][ T7826] Call Trace: [ 164.651683][ T7826] [ 164.651695][ T7826] dump_stack_lvl+0x16c/0x1f0 [ 164.651743][ T7826] should_fail_ex+0x512/0x640 [ 164.651798][ T7826] ? __list_lru_init+0xe8/0x4c0 [ 164.651834][ T7826] should_failslab+0xc2/0x120 [ 164.651878][ T7826] __kmalloc_noprof+0xd2/0x510 [ 164.651916][ T7826] ? lockdep_init_map_type+0x5c/0x280 [ 164.651965][ T7826] __list_lru_init+0xe8/0x4c0 [ 164.652001][ T7826] alloc_super+0x8bf/0xbd0 [ 164.652040][ T7826] sget_fc+0x116/0xc20 [ 164.652075][ T7826] ? __pfx_set_anon_super_fc+0x10/0x10 [ 164.652106][ T7826] ? __pfx_mqueue_fill_super+0x10/0x10 [ 164.652141][ T7826] get_tree_nodev+0x28/0x190 [ 164.652178][ T7826] mqueue_get_tree+0xf1/0x130 [ 164.652207][ T7826] vfs_get_tree+0x8e/0x340 [ 164.652234][ T7826] fc_mount_longterm+0x18/0x160 [ 164.652283][ T7826] mq_init_ns+0x426/0x620 [ 164.652317][ T7826] copy_ipcs+0x383/0x610 [ 164.652346][ T7826] ? copy_utsname+0xab/0x470 [ 164.652384][ T7826] create_new_namespaces+0x20a/0xa90 [ 164.652416][ T7826] ? security_capable+0x7e/0x260 [ 164.652444][ T7826] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 164.652479][ T7826] ksys_unshare+0x45b/0xa40 [ 164.652519][ T7826] ? __pfx_ksys_unshare+0x10/0x10 [ 164.652564][ T7826] ? xfd_validate_state+0x61/0x180 [ 164.652615][ T7826] __x64_sys_unshare+0x31/0x40 [ 164.652662][ T7826] do_syscall_64+0xcd/0x490 [ 164.652706][ T7826] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.652738][ T7826] RIP: 0033:0x7f899658ebe9 [ 164.652761][ T7826] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 164.652803][ T7826] RSP: 002b:00007f89947f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 164.652836][ T7826] RAX: ffffffffffffffda RBX: 00007f89967b5fa0 RCX: 00007f899658ebe9 [ 164.652857][ T7826] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000000 [ 164.652877][ T7826] RBP: 00007f8996611e19 R08: 0000000000000000 R09: 0000000000000000 [ 164.652896][ T7826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 164.652916][ T7826] R13: 00007f89967b6038 R14: 00007f89967b5fa0 R15: 00007fff2a644078 [ 164.652946][ T7826] [ 164.656407][ T7828] netlink: 266 bytes leftover after parsing attributes in process `syz.0.683'. [ 165.032347][ T7833] [U]  [ 165.035235][ T7833] [U] [ 165.038014][ T7833] [U] [ 165.040860][ T7833] [U] [ 165.047148][ T7833] [U] [ 165.048879][ T7828] IPv6: NLM_F_CREATE should be specified when creating new route [ 165.050005][ T7833] [U] [ 165.050066][ T7833] [U] [ 165.050126][ T7833] [U] [ 165.050454][ T7833] [U] [ 165.050514][ T7833] [U] [ 165.050580][ T7833] [U] [ 165.074801][ T7833] [U] [ 165.086412][ T7833] [U] [ 165.089236][ T7833] [U] [ 165.091992][ T7833] [U] [ 165.094847][ T7833] [U] [ 165.117088][ T7833] [U] [ 165.119900][ T7833] [U] [ 165.122657][ T7833] [U] [ 165.125421][ T7833] [U] [ 165.128681][ T7833] [U] [ 165.131473][ T7833] [U] [ 165.134250][ T7833] [U] [ 165.137005][ T7833] [U] [ 165.145686][ T7833] [U] [ 165.148481][ T7833] [U] [ 165.151226][ T7833] [U] [ 165.153961][ T7833] [U] [ 165.161741][ T7833] [U] [ 165.164531][ T7833] [U] [ 165.167372][ T7833] [U] [ 165.170180][ T7833] [U] [ 165.182001][ T7833] [U] [ 165.184900][ T7833] [U] [ 165.187665][ T7833] [U] [ 165.190441][ T7833] [U] [ 165.212817][ T7833] [U] [ 165.215618][ T7833] [U] [ 165.218387][ T7833] [U] [ 165.221143][ T7833] [U] [ 165.227702][ T7833] [U] [ 165.230490][ T7833] [U] [ 165.233256][ T7833] [U] [ 165.236092][ T7833] [U] [ 165.242851][ T7833] [U] [ 165.245725][ T7833] [U] [ 165.248600][ T7833] [U] [ 165.251362][ T7833] [U] [ 165.256205][ T7833] [U] [ 165.259030][ T7833] [U] [ 165.261780][ T7833] [U] [ 165.264620][ T7833] [U] [ 165.270903][ T7833] [U] [ 165.273699][ T7833] [U] [ 165.276445][ T7833] [U] [ 165.279194][ T7833] [U] [ 165.283513][ T7833] [U] [ 165.286301][ T7833] [U] [ 165.289054][ T7833] [U] [ 165.291802][ T7833] [U] [ 165.296480][ T7833] [U] [ 165.299258][ T7833] [U] [ 165.302018][ T7833] [U] [ 165.304787][ T7833] [U] [ 165.313032][ T7833] [U] [ 165.315822][ T7833] [U] [ 165.318586][ T7833] [U] [ 165.321377][ T7833] [U] [ 165.327033][ T7833] [U] [ 165.329828][ T7833] [U] [ 165.332589][ T7833] [U] [ 165.335430][ T7833] [U] [ 165.340697][ T7833] [U] [ 165.343483][ T7833] [U] [ 165.346248][ T7833] [U] [ 165.349008][ T7833] [U] [ 165.353498][ T7833] [U] [ 165.356286][ T7833] [U] [ 165.359196][ T7833] [U] [ 165.361985][ T7833] [U] [ 165.367625][ T7833] [U] [ 165.370416][ T7833] [U] [ 165.373263][ T7833] [U] [ 165.376010][ T7833] [U] [ 165.381601][ T7833] [U] [ 165.384379][ T7833] [U] [ 165.387134][ T7833] [U] [ 165.389977][ T7833] [U] [ 165.393518][ T7833] [U] [ 165.396304][ T7833] [U] [ 165.399100][ T7833] [U] [ 165.401848][ T7833] [U] [ 165.409380][ T7833] [U] [ 165.412164][ T7833] [U] [ 165.414953][ T7833] [U] [ 165.417716][ T7833] [U] [ 165.424090][ T7833] [U] [ 165.426967][ T7833] [U] [ 165.429740][ T7833] [U] [ 165.432539][ T7833] [U] [ 165.438359][ T7833] [U] [ 165.441153][ T7833] [U] [ 165.443912][ T7833] [U] [ 165.446720][ T7833] [U] [ 165.452186][ T7833] [U] [ 165.454999][ T7833] [U] [ 165.457757][ T7833] [U] [ 165.460577][ T7833] [U] [ 165.465118][ T7833] [U] [ 165.468077][ T7833] [U] [ 165.470874][ T7833] [U] [ 165.473624][ T7833] [U] [ 165.480140][ T7833] [U] [ 165.483020][ T7833] [U] [ 165.485801][ T7833] [U] [ 165.488570][ T7833] [U] [ 165.493886][ T7833] [U] [ 165.496666][ T7833] [U] [ 165.499603][ T7833] [U] [ 165.502359][ T7833] [U] [ 165.506106][ T7833] [U] [ 165.508882][ T7833] [U] [ 165.511646][ T7833] [U] [ 165.514400][ T7833] [U] [ 165.522005][ T7833] [U] [ 165.524788][ T7833] [U] [ 165.527546][ T7833] [U] [ 165.561779][ T7830] [U] [ 165.644344][ T7854] FAULT_INJECTION: forcing a failure. [ 165.644344][ T7854] name failslab, interval 1, probability 0, space 0, times 0 [ 165.716015][ T7854] CPU: 1 UID: 0 PID: 7854 Comm: syz.1.691 Not tainted syzkaller #0 PREEMPT(full) [ 165.716059][ T7854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 165.716078][ T7854] Call Trace: [ 165.716088][ T7854] [ 165.716101][ T7854] dump_stack_lvl+0x16c/0x1f0 [ 165.716146][ T7854] should_fail_ex+0x512/0x640 [ 165.716195][ T7854] should_failslab+0xc2/0x120 [ 165.716238][ T7854] __kmalloc_cache_noprof+0x6a/0x3e0 [ 165.716272][ T7854] ? __pfx_sctp_get_port_local+0x10/0x10 [ 165.716309][ T7854] ? sctp_add_bind_addr+0xae/0x3f0 [ 165.716343][ T7854] sctp_add_bind_addr+0xae/0x3f0 [ 165.716377][ T7854] sctp_do_bind+0x2d6/0x700 [ 165.716425][ T7854] sctp_connect_new_asoc+0x5e7/0x770 [ 165.716475][ T7854] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 165.716526][ T7854] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 165.716579][ T7854] __sctp_connect+0x3f3/0xc60 [ 165.716627][ T7854] ? do_raw_spin_lock+0x12c/0x2b0 [ 165.716679][ T7854] ? __pfx___sctp_connect+0x10/0x10 [ 165.716726][ T7854] ? sctp_inet_connect+0xac/0x200 [ 165.716782][ T7854] ? sctp_inet_connect+0xac/0x200 [ 165.716828][ T7854] ? rcu_is_watching+0x12/0xc0 [ 165.716861][ T7854] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 165.716910][ T7854] ? __pfx_sctp_inet_connect+0x10/0x10 [ 165.716955][ T7854] sctp_inet_connect+0x15f/0x200 [ 165.717003][ T7854] __sys_connect_file+0x13e/0x1a0 [ 165.717040][ T7854] __sys_connect+0x13b/0x160 [ 165.717072][ T7854] ? __pfx___sys_connect+0x10/0x10 [ 165.717113][ T7854] ? xfd_validate_state+0x61/0x180 [ 165.717164][ T7854] __x64_sys_connect+0x72/0xb0 [ 165.717199][ T7854] do_syscall_64+0xcd/0x490 [ 165.717242][ T7854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.717274][ T7854] RIP: 0033:0x7f899658ebe9 [ 165.717297][ T7854] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 165.717330][ T7854] RSP: 002b:00007f89947f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 165.717360][ T7854] RAX: ffffffffffffffda RBX: 00007f89967b5fa0 RCX: 00007f899658ebe9 [ 165.717381][ T7854] RDX: 0000000000000054 RSI: 0000200000000080 RDI: 0000000000000003 [ 165.717400][ T7854] RBP: 00007f8996611e19 R08: 0000000000000000 R09: 0000000000000000 [ 165.717419][ T7854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 165.717437][ T7854] R13: 00007f89967b6038 R14: 00007f89967b5fa0 R15: 00007fff2a644078 [ 165.717467][ T7854] [ 166.142032][ T7875] netlink: 146 bytes leftover after parsing attributes in process `syz.1.696'. [ 166.647310][ T7893] FAULT_INJECTION: forcing a failure. [ 166.647310][ T7893] name failslab, interval 1, probability 0, space 0, times 0 [ 166.671200][ T7893] CPU: 1 UID: 0 PID: 7893 Comm: syz.1.703 Not tainted syzkaller #0 PREEMPT(full) [ 166.671245][ T7893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 166.671264][ T7893] Call Trace: [ 166.671273][ T7893] [ 166.671284][ T7893] dump_stack_lvl+0x16c/0x1f0 [ 166.671338][ T7893] should_fail_ex+0x512/0x640 [ 166.671386][ T7893] should_failslab+0xc2/0x120 [ 166.671437][ T7893] __kmalloc_cache_noprof+0x6a/0x3e0 [ 166.671472][ T7893] ? rtnl_newlink+0x11b/0x2000 [ 166.671517][ T7893] ? __pfx_rtnl_newlink+0x10/0x10 [ 166.671556][ T7893] rtnl_newlink+0x11b/0x2000 [ 166.671605][ T7893] ? __pfx_rtnl_newlink+0x10/0x10 [ 166.671654][ T7893] ? kmem_cache_free+0x2d1/0x4d0 [ 166.671688][ T7893] ? kfree_skbmem+0x1a4/0x1f0 [ 166.671721][ T7893] ? kfree_skbmem+0x1a4/0x1f0 [ 166.671748][ T7893] ? consume_skb+0xcc/0x100 [ 166.671796][ T7893] ? rcu_is_watching+0x12/0xc0 [ 166.671830][ T7893] ? aa_get_newest_label+0xd2/0x250 [ 166.671865][ T7893] ? apparmor_capable+0x114/0x1d0 [ 166.671899][ T7893] ? rcu_is_watching+0x12/0xc0 [ 166.671931][ T7893] ? __pfx_rtnl_newlink+0x10/0x10 [ 166.671975][ T7893] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 166.672018][ T7893] ? rcu_is_watching+0x12/0xc0 [ 166.672050][ T7893] ? __pfx_rtnl_newlink+0x10/0x10 [ 166.672092][ T7893] ? lock_release+0x201/0x2f0 [ 166.672133][ T7893] ? __pfx_rtnl_newlink+0x10/0x10 [ 166.672176][ T7893] rtnetlink_rcv_msg+0x95b/0xe90 [ 166.672224][ T7893] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 166.672275][ T7893] ? ref_tracker_free+0x37c/0x830 [ 166.672326][ T7893] netlink_rcv_skb+0x155/0x420 [ 166.672372][ T7893] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 166.672419][ T7893] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 166.672471][ T7893] ? rcu_is_watching+0x12/0xc0 [ 166.672517][ T7893] netlink_unicast+0x5aa/0x870 [ 166.672561][ T7893] ? __pfx_netlink_unicast+0x10/0x10 [ 166.672604][ T7893] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 166.672653][ T7893] netlink_sendmsg+0x8d1/0xdd0 [ 166.672699][ T7893] ? __pfx_netlink_sendmsg+0x10/0x10 [ 166.672746][ T7893] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 166.672782][ T7893] __sys_sendto+0x4a3/0x520 [ 166.672818][ T7893] ? __pfx___sys_sendto+0x10/0x10 [ 166.672861][ T7893] ? handle_mm_fault+0x2ab/0xd10 [ 166.672892][ T7893] ? rcu_is_watching+0x12/0xc0 [ 166.672930][ T7893] ? __pfx_rcu_is_watching+0x1/0x10 [ 166.672969][ T7893] __x64_sys_sendto+0xe0/0x1c0 [ 166.673006][ T7893] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 166.673059][ T7893] do_syscall_64+0xcd/0x490 [ 166.673103][ T7893] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.673135][ T7893] RIP: 0033:0x7f8996590a7c [ 166.673160][ T7893] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 166.673192][ T7893] RSP: 002b:00007f89947f4ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 166.673224][ T7893] RAX: ffffffffffffffda RBX: 00007f89947f4fc0 RCX: 00007f8996590a7c [ 166.673244][ T7893] RDX: 000000000000001c RSI: 00007f89947f5010 RDI: 0000000000000003 [ 166.673265][ T7893] RBP: 0000000000000000 R08: 00007f89947f4f14 R09: 000000000000000c [ 166.673285][ T7893] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 166.673306][ T7893] R13: 00007f89947f4f68 R14: 00007f89947f5010 R15: 0000000000000000 [ 166.673336][ T7893] [ 167.391235][ T7895] FAULT_INJECTION: forcing a failure. [ 167.391235][ T7895] name fail_page_alloc, interval 1, probability 0, space 0, times 393212 [ 167.409976][ T7895] CPU: 1 UID: 0 PID: 7895 Comm: syz.0.712 Not tainted syzkaller #0 PREEMPT(full) [ 167.410022][ T7895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 167.410042][ T7895] Call Trace: [ 167.410054][ T7895] [ 167.410065][ T7895] dump_stack_lvl+0x16c/0x1f0 [ 167.410111][ T7895] should_fail_ex+0x512/0x640 [ 167.410161][ T7895] should_fail_alloc_page+0xe7/0x130 [ 167.410206][ T7895] prepare_alloc_pages+0x3c2/0x610 [ 167.410257][ T7895] ? rcu_is_watching+0x12/0xc0 [ 167.410292][ T7895] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 167.410333][ T7895] ? rcu_is_watching+0x12/0xc0 [ 167.410375][ T7895] ? trace_sched_exit_tp+0xd1/0x120 [ 167.410428][ T7895] ? __schedule+0x11a3/0x5de0 [ 167.410461][ T7895] ? __resched_curr+0x316/0x3b0 [ 167.410509][ T7895] ? __pfx___resched_curr+0x10/0x10 [ 167.410559][ T7895] ? css_rstat_updated+0x1c2/0x510 [ 167.410590][ T7895] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 167.410629][ T7895] ? do_raw_spin_lock+0x12c/0x2b0 [ 167.410679][ T7895] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 167.410734][ T7895] ? do_raw_spin_unlock+0x172/0x230 [ 167.410786][ T7895] ? _raw_spin_unlock+0x28/0x50 [ 167.410819][ T7895] ? __dquot_alloc_space+0x520/0xe20 [ 167.410860][ T7895] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 167.410912][ T7895] ? policy_nodemask+0xea/0x4e0 [ 167.410953][ T7895] alloc_pages_mpol+0x1fb/0x550 [ 167.410995][ T7895] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 167.411038][ T7895] ? __folio_batch_add_and_move+0x602/0xc90 [ 167.411082][ T7895] ? rcu_is_watching+0x12/0xc0 [ 167.411115][ T7895] ? lock_release+0x201/0x2f0 [ 167.411156][ T7895] folio_alloc_mpol_noprof+0x36/0x2f0 [ 167.411207][ T7895] shmem_alloc_folio+0x135/0x160 [ 167.411260][ T7895] shmem_alloc_and_add_folio+0x499/0xc20 [ 167.411300][ T7895] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 167.411347][ T7895] ? shmem_allowable_huge_orders+0xcb/0x2f0 [ 167.411404][ T7895] shmem_get_folio_gfp+0x67f/0x1600 [ 167.411445][ T7895] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 167.411481][ T7895] ? shmem_fallocate+0x522/0xf50 [ 167.411518][ T7895] ? __pfx___might_resched+0x10/0x10 [ 167.411553][ T7895] shmem_fallocate+0x795/0xf50 [ 167.411598][ T7895] ? __pfx_shmem_fallocate+0x10/0x10 [ 167.411641][ T7895] ? __pfx_aa_file_perm+0x10/0x10 [ 167.411691][ T7895] ? do_writev+0x218/0x340 [ 167.411723][ T7895] ? rcu_is_watching+0x12/0xc0 [ 167.411755][ T7895] ? lock_release+0x201/0x2f0 [ 167.411799][ T7895] ? rcu_is_watching+0x12/0xc0 [ 167.411831][ T7895] ? lock_acquire+0x2cd/0x350 [ 167.411872][ T7895] ? __pfx___might_resched+0x10/0x10 [ 167.411902][ T7895] ? common_file_perm+0x1a9/0x340 [ 167.411943][ T7895] ? __pfx_shmem_fallocate+0x10/0x10 [ 167.411980][ T7895] vfs_fallocate+0x5b1/0x10e0 [ 167.412021][ T7895] ? __pfx_vfs_fallocate+0x10/0x10 [ 167.412065][ T7895] __x64_sys_fallocate+0xd5/0x150 [ 167.412109][ T7895] do_syscall_64+0xcd/0x490 [ 167.412152][ T7895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.412186][ T7895] RIP: 0033:0x7fa8ec78ebe9 [ 167.412211][ T7895] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 167.412242][ T7895] RSP: 002b:00007fa8ed5fe038 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 167.412274][ T7895] RAX: ffffffffffffffda RBX: 00007fa8ec9b5fa0 RCX: 00007fa8ec78ebe9 [ 167.412295][ T7895] RDX: 0000000000000009 RSI: 0000000000000000 RDI: 8000000000000003 [ 167.412317][ T7895] RBP: 00007fa8ec811e19 R08: 0000000000000000 R09: 0000000000000000 [ 167.412335][ T7895] R10: 00000000004cbd5d R11: 0000000000000246 R12: 0000000000000000 [ 167.412356][ T7895] R13: 00007fa8ec9b6038 R14: 00007fa8ec9b5fa0 R15: 00007ffcb1a95418 [ 167.412396][ T7895] [ 168.154374][ T7917] FAULT_INJECTION: forcing a failure. [ 168.154374][ T7917] name failslab, interval 1, probability 0, space 0, times 0 [ 168.219407][ T7917] CPU: 1 UID: 0 PID: 7917 Comm: syz.1.711 Not tainted syzkaller #0 PREEMPT(full) [ 168.219455][ T7917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 168.219475][ T7917] Call Trace: [ 168.219486][ T7917] [ 168.219498][ T7917] dump_stack_lvl+0x16c/0x1f0 [ 168.219546][ T7917] should_fail_ex+0x512/0x640 [ 168.219597][ T7917] should_failslab+0xc2/0x120 [ 168.219642][ T7917] __kmalloc_cache_noprof+0x6a/0x3e0 [ 168.219675][ T7917] ? ktime_get_coarse_real_ts64_mg+0x240/0x300 [ 168.219722][ T7917] ? hugetlb_vma_lock_alloc+0xbc/0x1f0 [ 168.219761][ T7917] hugetlb_vma_lock_alloc+0xbc/0x1f0 [ 168.219798][ T7917] hugetlb_reserve_pages+0x151/0xf40 [ 168.219851][ T7917] ? __vma_enter_locked+0x163/0x3f0 [ 168.219885][ T7917] ? __pfx_hugetlb_reserve_pages+0x10/0x10 [ 168.219940][ T7917] ? atime_needs_update+0x8b/0x710 [ 168.219996][ T7917] hugetlbfs_file_mmap+0x4a1/0x730 [ 168.220055][ T7917] __mmap_region+0x1314/0x27b0 [ 168.220096][ T7917] ? rcu_is_watching+0x12/0xc0 [ 168.220129][ T7917] ? __pfx___mmap_region+0x10/0x10 [ 168.220166][ T7917] ? is_bpf_text_address+0x8a/0x1a0 [ 168.220207][ T7917] ? rcu_is_watching+0x12/0xc0 [ 168.220253][ T7917] ? is_bpf_text_address+0x94/0x1a0 [ 168.220295][ T7917] ? kernel_text_address+0x8d/0x100 [ 168.220322][ T7917] ? __kernel_text_address+0xd/0x40 [ 168.220351][ T7917] ? unwind_get_return_address+0x59/0xa0 [ 168.220387][ T7917] ? arch_stack_walk+0xa6/0x100 [ 168.220430][ T7917] ? __pfx_stack_trace_save+0x10/0x10 [ 168.220489][ T7917] ? trace_cap_capable+0x18d/0x200 [ 168.220527][ T7917] ? cap_capable+0xb3/0x250 [ 168.220570][ T7917] mmap_region+0x32b/0x3f0 [ 168.220612][ T7917] do_mmap+0xa3e/0x1210 [ 168.220663][ T7917] ? __pfx_do_mmap+0x10/0x10 [ 168.220711][ T7917] ? __pfx_down_write_killable+0x10/0x10 [ 168.220763][ T7917] vm_mmap_pgoff+0x29e/0x470 [ 168.220814][ T7917] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 168.220860][ T7917] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 168.220912][ T7917] ? hugetlbfs_get_inode+0x31f/0x730 [ 168.220952][ T7917] ksys_mmap_pgoff+0x1c8/0x5c0 [ 168.221002][ T7917] __x64_sys_mmap+0x125/0x190 [ 168.221056][ T7917] do_syscall_64+0xcd/0x490 [ 168.221101][ T7917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.221135][ T7917] RIP: 0033:0x7f899658ebe9 [ 168.221160][ T7917] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 168.221194][ T7917] RSP: 002b:00007f89947f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 168.221225][ T7917] RAX: ffffffffffffffda RBX: 00007f89967b5fa0 RCX: 00007f899658ebe9 [ 168.221261][ T7917] RDX: 0000000000400002 RSI: 0000000000a00006 RDI: 0000000000000000 [ 168.221281][ T7917] RBP: 00007f8996611e19 R08: 0000000000000602 R09: 0000300000000000 [ 168.221303][ T7917] R10: 0000000000040eb1 R11: 0000000000000246 R12: 0000000000000000 [ 168.221323][ T7917] R13: 00007f89967b6038 R14: 00007f89967b5fa0 R15: 00007fff2a644078 [ 168.221355][ T7917] [ 168.221369][ T7917] HugeTLB: unable to allocate vma specific lock [ 168.800803][ T7921] netlink: 504 bytes leftover after parsing attributes in process `syz.1.714'. [ 168.835291][ T7921] netlink: 504 bytes leftover after parsing attributes in process `syz.1.714'. [ 168.922292][ T7925] FAULT_INJECTION: forcing a failure. [ 168.922292][ T7925] name failslab, interval 1, probability 0, space 0, times 0 [ 168.949466][ T7925] CPU: 0 UID: 0 PID: 7925 Comm: syz.2.715 Not tainted syzkaller #0 PREEMPT(full) [ 168.949510][ T7925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 168.949530][ T7925] Call Trace: [ 168.949541][ T7925] [ 168.949552][ T7925] dump_stack_lvl+0x16c/0x1f0 [ 168.949600][ T7925] should_fail_ex+0x512/0x640 [ 168.949650][ T7925] should_failslab+0xc2/0x120 [ 168.949695][ T7925] __kmalloc_cache_noprof+0x6a/0x3e0 [ 168.949730][ T7925] ? reg_reload_regdb+0x1d3/0x460 [ 168.949775][ T7925] ? reg_reload_regdb+0x21c/0x460 [ 168.949825][ T7925] reg_reload_regdb+0x21c/0x460 [ 168.949872][ T7925] ? __pfx_reg_reload_regdb+0x10/0x10 [ 168.949919][ T7925] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 168.949953][ T7925] ? nl80211_pre_doit+0x1b0/0xb10 [ 168.949988][ T7925] genl_family_rcv_msg_doit+0x206/0x2f0 [ 168.950044][ T7925] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 168.950096][ T7925] ? rcu_is_watching+0x12/0xc0 [ 168.950136][ T7925] ? bpf_lsm_capable+0x9/0x10 [ 168.950167][ T7925] ? security_capable+0x7e/0x260 [ 168.950203][ T7925] genl_rcv_msg+0x55c/0x800 [ 168.950258][ T7925] ? __pfx_genl_rcv_msg+0x10/0x10 [ 168.950308][ T7925] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 168.950339][ T7925] ? __pfx_nl80211_reload_regdb+0x10/0x10 [ 168.950382][ T7925] ? __pfx_nl80211_post_doit+0x10/0x10 [ 168.950441][ T7925] netlink_rcv_skb+0x155/0x420 [ 168.950484][ T7925] ? __pfx_genl_rcv_msg+0x10/0x10 [ 168.950542][ T7925] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 168.950596][ T7925] ? netlink_deliver_tap+0x1ae/0xd30 [ 168.950639][ T7925] genl_rcv+0x28/0x40 [ 168.950687][ T7925] netlink_unicast+0x5aa/0x870 [ 168.950732][ T7925] ? __pfx_netlink_unicast+0x10/0x10 [ 168.950775][ T7925] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 168.950824][ T7925] netlink_sendmsg+0x8d1/0xdd0 [ 168.950875][ T7925] ? __pfx_netlink_sendmsg+0x10/0x10 [ 168.950921][ T7925] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 168.950956][ T7925] ____sys_sendmsg+0xa95/0xc70 [ 168.951006][ T7925] ? copy_msghdr_from_user+0x10a/0x160 [ 168.951046][ T7925] ? __pfx_____sys_sendmsg+0x10/0x10 [ 168.951098][ T7925] ? __pfx_futex_wake_mark+0x10/0x10 [ 168.951144][ T7925] ___sys_sendmsg+0x134/0x1d0 [ 168.951183][ T7925] ? __pfx____sys_sendmsg+0x10/0x10 [ 168.951224][ T7925] ? futex_private_hash_put+0x11c/0x300 [ 168.951269][ T7925] ? rcu_is_watching+0x12/0xc0 [ 168.951313][ T7925] __sys_sendmsg+0x16d/0x220 [ 168.951354][ T7925] ? __pfx___sys_sendmsg+0x10/0x10 [ 168.951395][ T7925] ? __x64_sys_futex+0x1e0/0x4c0 [ 168.951459][ T7925] do_syscall_64+0xcd/0x490 [ 168.951508][ T7925] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.951554][ T7925] RIP: 0033:0x7f167bf8ebe9 [ 168.951580][ T7925] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 168.951615][ T7925] RSP: 002b:00007f167cd72038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 168.951649][ T7925] RAX: ffffffffffffffda RBX: 00007f167c1b5fa0 RCX: 00007f167bf8ebe9 [ 168.951671][ T7925] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000005 [ 168.951692][ T7925] RBP: 00007f167c011e19 R08: 0000000000000000 R09: 0000000000000000 [ 168.951711][ T7925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 168.951731][ T7925] R13: 00007f167c1b6038 R14: 00007f167c1b5fa0 R15: 00007ffc455e85b8 [ 168.951761][ T7925] [ 170.078670][ T7946] Invalid ELF header magic: != ELF [ 171.380523][ T7977] nvme_fabrics: missing parameter 'transport=%s' [ 171.386982][ T7977] nvme_fabrics: missing parameter 'nqn=%s' [ 171.567407][ T7989] netlink: 342 bytes leftover after parsing attributes in process `syz.0.733'. [ 171.735330][ T7981] FAULT_INJECTION: forcing a failure. [ 171.735330][ T7981] name fail_page_alloc, interval 1, probability 0, space 0, times 393211 [ 171.779296][ T7981] CPU: 0 UID: 0 PID: 7981 Comm: syz.1.740 Not tainted syzkaller #0 PREEMPT(full) [ 171.779352][ T7981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 171.779372][ T7981] Call Trace: [ 171.779383][ T7981] [ 171.779395][ T7981] dump_stack_lvl+0x16c/0x1f0 [ 171.779443][ T7981] should_fail_ex+0x512/0x640 [ 171.779492][ T7981] should_fail_alloc_page+0xe7/0x130 [ 171.779538][ T7981] prepare_alloc_pages+0x3c2/0x610 [ 171.779585][ T7981] ? rcu_is_watching+0x12/0xc0 [ 171.779618][ T7981] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 171.779657][ T7981] ? __pfx_css_rstat_updated+0x10/0x10 [ 171.779690][ T7981] ? trace_sched_set_need_resched_tp+0xf3/0x150 [ 171.779750][ T7981] ? rcu_is_watching+0x12/0xc0 [ 171.779782][ T7981] ? trace_pelt_se_tp+0xf1/0x160 [ 171.779828][ T7981] ? css_rstat_updated+0x1c2/0x510 [ 171.779860][ T7981] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 171.779901][ T7981] ? do_raw_spin_lock+0x12c/0x2b0 [ 171.779952][ T7981] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 171.780009][ T7981] ? do_raw_spin_unlock+0x172/0x230 [ 171.780059][ T7981] ? _raw_spin_unlock+0x28/0x50 [ 171.780093][ T7981] ? __dquot_alloc_space+0x520/0xe20 [ 171.780138][ T7981] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 171.780187][ T7981] ? policy_nodemask+0xea/0x4e0 [ 171.780231][ T7981] alloc_pages_mpol+0x1fb/0x550 [ 171.780274][ T7981] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 171.780325][ T7981] ? __folio_batch_add_and_move+0x602/0xc90 [ 171.780370][ T7981] ? rcu_is_watching+0x12/0xc0 [ 171.780403][ T7981] ? lock_release+0x201/0x2f0 [ 171.780447][ T7981] folio_alloc_mpol_noprof+0x36/0x2f0 [ 171.780497][ T7981] shmem_alloc_folio+0x135/0x160 [ 171.780550][ T7981] shmem_alloc_and_add_folio+0x499/0xc20 [ 171.780591][ T7981] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 171.780630][ T7981] ? shmem_allowable_huge_orders+0xcb/0x2f0 [ 171.780673][ T7981] shmem_get_folio_gfp+0x67f/0x1600 [ 171.780714][ T7981] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 171.780752][ T7981] ? shmem_fallocate+0x522/0xf50 [ 171.780790][ T7981] ? __pfx___might_resched+0x10/0x10 [ 171.780825][ T7981] shmem_fallocate+0x795/0xf50 [ 171.780871][ T7981] ? __pfx_shmem_fallocate+0x10/0x10 [ 171.780915][ T7981] ? __pfx_aa_file_perm+0x10/0x10 [ 171.780960][ T7981] ? do_writev+0x218/0x340 [ 171.780988][ T7981] ? rcu_is_watching+0x12/0xc0 [ 171.781015][ T7981] ? lock_release+0x201/0x2f0 [ 171.781053][ T7981] ? rcu_is_watching+0x12/0xc0 [ 171.781081][ T7981] ? lock_acquire+0x2cd/0x350 [ 171.781116][ T7981] ? __pfx___might_resched+0x10/0x10 [ 171.781143][ T7981] ? common_file_perm+0x1a9/0x340 [ 171.781178][ T7981] ? __pfx_shmem_fallocate+0x10/0x10 [ 171.781211][ T7981] vfs_fallocate+0x5b1/0x10e0 [ 171.781246][ T7981] ? __pfx_vfs_fallocate+0x10/0x10 [ 171.781284][ T7981] __x64_sys_fallocate+0xd5/0x150 [ 171.781329][ T7981] do_syscall_64+0xcd/0x490 [ 171.781370][ T7981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.781399][ T7981] RIP: 0033:0x7f899658ebe9 [ 171.781422][ T7981] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 171.781451][ T7981] RSP: 002b:00007f89947f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 171.781479][ T7981] RAX: ffffffffffffffda RBX: 00007f89967b5fa0 RCX: 00007f899658ebe9 [ 171.781498][ T7981] RDX: 0000000000000009 RSI: 0000000000000000 RDI: 8000000000000003 [ 171.781515][ T7981] RBP: 00007f8996611e19 R08: 0000000000000000 R09: 0000000000000000 [ 171.781533][ T7981] R10: 00000000004cbd5d R11: 0000000000000246 R12: 0000000000000000 [ 171.781549][ T7981] R13: 00007f89967b6038 R14: 00007f89967b5fa0 R15: 00007fff2a644078 [ 171.781576][ T7981] [ 172.705844][ T8002] FAULT_INJECTION: forcing a failure. [ 172.705844][ T8002] name failslab, interval 1, probability 0, space 0, times 0 [ 172.718655][ T8002] CPU: 0 UID: 0 PID: 8002 Comm: syz.2.738 Not tainted syzkaller #0 PREEMPT(full) [ 172.718699][ T8002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 172.718719][ T8002] Call Trace: [ 172.718730][ T8002] [ 172.718741][ T8002] dump_stack_lvl+0x16c/0x1f0 [ 172.718789][ T8002] should_fail_ex+0x512/0x640 [ 172.718839][ T8002] should_failslab+0xc2/0x120 [ 172.718884][ T8002] __kmalloc_cache_noprof+0x6a/0x3e0 [ 172.718919][ T8002] ? hugetlb_vma_lock_alloc+0xbc/0x1f0 [ 172.718958][ T8002] hugetlb_vma_lock_alloc+0xbc/0x1f0 [ 172.719004][ T8002] hugetlb_reserve_pages+0x151/0xf40 [ 172.719055][ T8002] ? __vma_enter_locked+0x163/0x3f0 [ 172.719088][ T8002] ? __pfx_hugetlb_reserve_pages+0x10/0x10 [ 172.719145][ T8002] ? atime_needs_update+0x8b/0x710 [ 172.719200][ T8002] hugetlbfs_file_mmap+0x4a1/0x730 [ 172.719258][ T8002] __mmap_region+0x1314/0x27b0 [ 172.719297][ T8002] ? rcu_is_watching+0x12/0xc0 [ 172.719329][ T8002] ? __pfx___mmap_region+0x10/0x10 [ 172.719365][ T8002] ? is_bpf_text_address+0x8a/0x1a0 [ 172.719407][ T8002] ? rcu_is_watching+0x12/0xc0 [ 172.719443][ T8002] ? is_bpf_text_address+0x94/0x1a0 [ 172.719485][ T8002] ? kernel_text_address+0x8d/0x100 [ 172.719514][ T8002] ? __kernel_text_address+0xd/0x40 [ 172.719543][ T8002] ? unwind_get_return_address+0x59/0xa0 [ 172.719576][ T8002] ? arch_stack_walk+0xa6/0x100 [ 172.719620][ T8002] ? __pfx_stack_trace_save+0x10/0x10 [ 172.719681][ T8002] ? trace_cap_capable+0x18d/0x200 [ 172.719716][ T8002] ? cap_capable+0xb3/0x250 [ 172.719751][ T8002] mmap_region+0x32b/0x3f0 [ 172.719793][ T8002] do_mmap+0xa3e/0x1210 [ 172.719843][ T8002] ? __pfx_do_mmap+0x10/0x10 [ 172.719890][ T8002] ? __pfx_down_write_killable+0x10/0x10 [ 172.719944][ T8002] vm_mmap_pgoff+0x29e/0x470 [ 172.720001][ T8002] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 172.720047][ T8002] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 172.720098][ T8002] ? hugetlbfs_get_inode+0x31f/0x730 [ 172.720138][ T8002] ksys_mmap_pgoff+0x1c8/0x5c0 [ 172.720189][ T8002] __x64_sys_mmap+0x125/0x190 [ 172.720242][ T8002] do_syscall_64+0xcd/0x490 [ 172.720286][ T8002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.720319][ T8002] RIP: 0033:0x7f167bf8ebe9 [ 172.720344][ T8002] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 172.720377][ T8002] RSP: 002b:00007f167cd72038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 172.720409][ T8002] RAX: ffffffffffffffda RBX: 00007f167c1b5fa0 RCX: 00007f167bf8ebe9 [ 172.720431][ T8002] RDX: 0000000000400002 RSI: 0000000000a00006 RDI: 0000000000000000 [ 172.720452][ T8002] RBP: 00007f167c011e19 R08: 0000000000000602 R09: 0000300000000000 [ 172.720473][ T8002] R10: 0000000000040eb1 R11: 0000000000000246 R12: 0000000000000000 [ 172.720493][ T8002] R13: 00007f167c1b6038 R14: 00007f167c1b5fa0 R15: 00007ffc455e85b8 [ 172.720525][ T8002] [ 173.309544][ T8009] netlink: 330 bytes leftover after parsing attributes in process `syz.4.739'. [ 174.779681][ T8023] nvme_fabrics: missing parameter 'transport=%s' [ 174.786273][ T8023] nvme_fabrics: missing parameter 'nqn=%s' [ 174.892702][ T8033] netlink: 342 bytes leftover after parsing attributes in process `syz.2.758'. [ 174.909264][ T8033] IPv6: Can't replace route, no match found [ 175.983722][ T8048] FAULT_INJECTION: forcing a failure. [ 175.983722][ T8048] name failslab, interval 1, probability 0, space 0, times 0 [ 176.030974][ T8048] CPU: 0 UID: 0 PID: 8048 Comm: syz.4.752 Not tainted syzkaller #0 PREEMPT(full) [ 176.031018][ T8048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 176.031038][ T8048] Call Trace: [ 176.031048][ T8048] [ 176.031059][ T8048] dump_stack_lvl+0x16c/0x1f0 [ 176.031104][ T8048] should_fail_ex+0x512/0x640 [ 176.031153][ T8048] should_failslab+0xc2/0x120 [ 176.031195][ T8048] __kmalloc_cache_noprof+0x6a/0x3e0 [ 176.031227][ T8048] ? hugetlb_vma_lock_alloc+0xbc/0x1f0 [ 176.031280][ T8048] hugetlb_vma_lock_alloc+0xbc/0x1f0 [ 176.031315][ T8048] hugetlb_reserve_pages+0x151/0xf40 [ 176.031364][ T8048] ? __vma_enter_locked+0x163/0x3f0 [ 176.031396][ T8048] ? __pfx_hugetlb_reserve_pages+0x10/0x10 [ 176.031445][ T8048] ? atime_needs_update+0x8b/0x710 [ 176.031486][ T8048] hugetlbfs_file_mmap+0x4a1/0x730 [ 176.031529][ T8048] __mmap_region+0x1314/0x27b0 [ 176.031558][ T8048] ? rcu_is_watching+0x12/0xc0 [ 176.031583][ T8048] ? __pfx___mmap_region+0x10/0x10 [ 176.031611][ T8048] ? is_bpf_text_address+0x8a/0x1a0 [ 176.031641][ T8048] ? rcu_is_watching+0x12/0xc0 [ 176.031675][ T8048] ? is_bpf_text_address+0x94/0x1a0 [ 176.031706][ T8048] ? kernel_text_address+0x8d/0x100 [ 176.031728][ T8048] ? __kernel_text_address+0xd/0x40 [ 176.031750][ T8048] ? unwind_get_return_address+0x59/0xa0 [ 176.031775][ T8048] ? arch_stack_walk+0xa6/0x100 [ 176.031815][ T8048] ? __pfx_stack_trace_save+0x10/0x10 [ 176.031860][ T8048] ? trace_cap_capable+0x18d/0x200 [ 176.031887][ T8048] ? cap_capable+0xb3/0x250 [ 176.031923][ T8048] mmap_region+0x32b/0x3f0 [ 176.031954][ T8048] do_mmap+0xa3e/0x1210 [ 176.031992][ T8048] ? __pfx_do_mmap+0x10/0x10 [ 176.032027][ T8048] ? __pfx_down_write_killable+0x10/0x10 [ 176.032066][ T8048] vm_mmap_pgoff+0x29e/0x470 [ 176.032104][ T8048] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 176.032137][ T8048] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 176.032176][ T8048] ? hugetlbfs_get_inode+0x31f/0x730 [ 176.032206][ T8048] ksys_mmap_pgoff+0x1c8/0x5c0 [ 176.032242][ T8048] __x64_sys_mmap+0x125/0x190 [ 176.032290][ T8048] do_syscall_64+0xcd/0x490 [ 176.032324][ T8048] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.032348][ T8048] RIP: 0033:0x7f5016d8ebe9 [ 176.032367][ T8048] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 176.032391][ T8048] RSP: 002b:00007f5017ca4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 176.032414][ T8048] RAX: ffffffffffffffda RBX: 00007f5016fb5fa0 RCX: 00007f5016d8ebe9 [ 176.032431][ T8048] RDX: 0000000000400002 RSI: 0000000000a00006 RDI: 0000000000000000 [ 176.032446][ T8048] RBP: 00007f5016e11e19 R08: 0000000000000602 R09: 0000300000000000 [ 176.032461][ T8048] R10: 0000000000040eb1 R11: 0000000000000246 R12: 0000000000000000 [ 176.032476][ T8048] R13: 00007f5016fb6038 R14: 00007f5016fb5fa0 R15: 00007fffc8ba1bc8 [ 176.032499][ T8048] [ 176.082942][ T8053] nvme_fabrics: missing parameter 'transport=%s' [ 176.368021][ T8053] nvme_fabrics: missing parameter 'nqn=%s' [ 177.354392][ T8091] FAULT_INJECTION: forcing a failure. [ 177.354392][ T8091] name fail_page_alloc, interval 1, probability 0, space 0, times 393210 [ 177.418373][ T8091] CPU: 1 UID: 0 PID: 8091 Comm: syz.4.771 Not tainted syzkaller #0 PREEMPT(full) [ 177.418420][ T8091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 177.418441][ T8091] Call Trace: [ 177.418451][ T8091] [ 177.418463][ T8091] dump_stack_lvl+0x16c/0x1f0 [ 177.418509][ T8091] should_fail_ex+0x512/0x640 [ 177.418558][ T8091] should_fail_alloc_page+0xe7/0x130 [ 177.418614][ T8091] prepare_alloc_pages+0x3c2/0x610 [ 177.418663][ T8091] ? rcu_is_watching+0x12/0xc0 [ 177.418708][ T8091] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 177.418754][ T8091] ? kvm_sched_clock_read+0x11/0x20 [ 177.418790][ T8091] ? sched_clock+0x38/0x60 [ 177.418835][ T8091] ? sched_clock_cpu+0x6c/0x530 [ 177.418870][ T8091] ? sched_clock+0x38/0x60 [ 177.418912][ T8091] ? css_rstat_updated+0x1c2/0x510 [ 177.418944][ T8091] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 177.418983][ T8091] ? do_raw_spin_lock+0x12c/0x2b0 [ 177.419029][ T8091] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 177.419083][ T8091] ? do_raw_spin_unlock+0x172/0x230 [ 177.419135][ T8091] ? _raw_spin_unlock+0x28/0x50 [ 177.419167][ T8091] ? __dquot_alloc_space+0x520/0xe20 [ 177.419208][ T8091] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 177.419257][ T8091] ? policy_nodemask+0xea/0x4e0 [ 177.419300][ T8091] alloc_pages_mpol+0x1fb/0x550 [ 177.419343][ T8091] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 177.419387][ T8091] ? __folio_batch_add_and_move+0x602/0xc90 [ 177.419426][ T8091] ? rcu_is_watching+0x12/0xc0 [ 177.419458][ T8091] ? lock_release+0x201/0x2f0 [ 177.419509][ T8091] folio_alloc_mpol_noprof+0x36/0x2f0 [ 177.419573][ T8091] shmem_alloc_folio+0x135/0x160 [ 177.419625][ T8091] shmem_alloc_and_add_folio+0x499/0xc20 [ 177.419668][ T8091] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 177.419708][ T8091] ? shmem_allowable_huge_orders+0xcb/0x2f0 [ 177.419748][ T8091] shmem_get_folio_gfp+0x67f/0x1600 [ 177.419791][ T8091] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 177.419828][ T8091] ? shmem_fallocate+0x522/0xf50 [ 177.419865][ T8091] ? __pfx___might_resched+0x10/0x10 [ 177.419900][ T8091] shmem_fallocate+0x795/0xf50 [ 177.419946][ T8091] ? __pfx_shmem_fallocate+0x10/0x10 [ 177.419988][ T8091] ? __pfx_aa_file_perm+0x10/0x10 [ 177.420039][ T8091] ? do_writev+0x218/0x340 [ 177.420071][ T8091] ? rcu_is_watching+0x12/0xc0 [ 177.420103][ T8091] ? lock_release+0x201/0x2f0 [ 177.420147][ T8091] ? rcu_is_watching+0x12/0xc0 [ 177.420179][ T8091] ? lock_acquire+0x2cd/0x350 [ 177.420219][ T8091] ? __pfx___might_resched+0x10/0x10 [ 177.420251][ T8091] ? common_file_perm+0x1a9/0x340 [ 177.420291][ T8091] ? __pfx_shmem_fallocate+0x10/0x10 [ 177.420330][ T8091] vfs_fallocate+0x5b1/0x10e0 [ 177.420370][ T8091] ? __pfx_vfs_fallocate+0x10/0x10 [ 177.420414][ T8091] __x64_sys_fallocate+0xd5/0x150 [ 177.420456][ T8091] do_syscall_64+0xcd/0x490 [ 177.420502][ T8091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.420534][ T8091] RIP: 0033:0x7f5016d8ebe9 [ 177.420559][ T8091] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 177.420600][ T8091] RSP: 002b:00007f5017ca4038 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 177.420632][ T8091] RAX: ffffffffffffffda RBX: 00007f5016fb5fa0 RCX: 00007f5016d8ebe9 [ 177.420655][ T8091] RDX: 0000000000000009 RSI: 0000000000000000 RDI: 8000000000000003 [ 177.420676][ T8091] RBP: 00007f5016e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 177.420696][ T8091] R10: 00000000004cbd5d R11: 0000000000000246 R12: 0000000000000000 [ 177.420716][ T8091] R13: 00007f5016fb6038 R14: 00007f5016fb5fa0 R15: 00007fffc8ba1bc8 [ 177.420748][ T8091] [ 177.856136][ T8101] netlink: 318 bytes leftover after parsing attributes in process `syz.0.776'. [ 178.412938][ T8128] netlink: 330 bytes leftover after parsing attributes in process `syz.2.793'. [ 178.807140][ T8135] FAULT_INJECTION: forcing a failure. [ 178.807140][ T8135] name fail_page_alloc, interval 1, probability 0, space 0, times 393209 [ 178.822716][ T8135] CPU: 0 UID: 0 PID: 8135 Comm: syz.2.787 Not tainted syzkaller #0 PREEMPT(full) [ 178.822761][ T8135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 178.822781][ T8135] Call Trace: [ 178.822792][ T8135] [ 178.822802][ T8135] dump_stack_lvl+0x16c/0x1f0 [ 178.822849][ T8135] should_fail_ex+0x512/0x640 [ 178.822899][ T8135] should_fail_alloc_page+0xe7/0x130 [ 178.822945][ T8135] prepare_alloc_pages+0x3c2/0x610 [ 178.822993][ T8135] ? rcu_is_watching+0x12/0xc0 [ 178.823028][ T8135] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 178.823071][ T8135] ? down_write+0x14d/0x200 [ 178.823119][ T8135] ? css_rstat_updated+0x1c2/0x510 [ 178.823152][ T8135] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 178.823191][ T8135] ? do_raw_spin_lock+0x12c/0x2b0 [ 178.823240][ T8135] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 178.823293][ T8135] ? do_raw_spin_unlock+0x172/0x230 [ 178.823343][ T8135] ? _raw_spin_unlock+0x28/0x50 [ 178.823375][ T8135] ? __dquot_alloc_space+0x520/0xe20 [ 178.823418][ T8135] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 178.823468][ T8135] ? policy_nodemask+0xea/0x4e0 [ 178.823509][ T8135] alloc_pages_mpol+0x1fb/0x550 [ 178.823561][ T8135] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 178.823603][ T8135] ? __folio_batch_add_and_move+0x602/0xc90 [ 178.823646][ T8135] ? rcu_is_watching+0x12/0xc0 [ 178.823678][ T8135] ? lock_release+0x201/0x2f0 [ 178.823720][ T8135] folio_alloc_mpol_noprof+0x36/0x2f0 [ 178.823769][ T8135] shmem_alloc_folio+0x135/0x160 [ 178.823823][ T8135] shmem_alloc_and_add_folio+0x499/0xc20 [ 178.823864][ T8135] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 178.823902][ T8135] ? shmem_allowable_huge_orders+0xcb/0x2f0 [ 178.823944][ T8135] shmem_get_folio_gfp+0x67f/0x1600 [ 178.823983][ T8135] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 178.824021][ T8135] ? shmem_fallocate+0x522/0xf50 [ 178.824056][ T8135] ? __pfx___might_resched+0x10/0x10 [ 178.824092][ T8135] shmem_fallocate+0x795/0xf50 [ 178.824137][ T8135] ? __pfx_shmem_fallocate+0x10/0x10 [ 178.824180][ T8135] ? __pfx_aa_file_perm+0x10/0x10 [ 178.824230][ T8135] ? do_writev+0x218/0x340 [ 178.824262][ T8135] ? rcu_is_watching+0x12/0xc0 [ 178.824293][ T8135] ? lock_release+0x201/0x2f0 [ 178.824338][ T8135] ? rcu_is_watching+0x12/0xc0 [ 178.824368][ T8135] ? lock_acquire+0x2cd/0x350 [ 178.824410][ T8135] ? __pfx___might_resched+0x10/0x10 [ 178.824438][ T8135] ? common_file_perm+0x1a9/0x340 [ 178.824478][ T8135] ? __pfx_shmem_fallocate+0x10/0x10 [ 178.824515][ T8135] vfs_fallocate+0x5b1/0x10e0 [ 178.824562][ T8135] ? __pfx_vfs_fallocate+0x10/0x10 [ 178.824605][ T8135] __x64_sys_fallocate+0xd5/0x150 [ 178.824650][ T8135] do_syscall_64+0xcd/0x490 [ 178.824692][ T8135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.824724][ T8135] RIP: 0033:0x7f167bf8ebe9 [ 178.824750][ T8135] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 178.824784][ T8135] RSP: 002b:00007f167cd72038 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 178.824817][ T8135] RAX: ffffffffffffffda RBX: 00007f167c1b5fa0 RCX: 00007f167bf8ebe9 [ 178.824838][ T8135] RDX: 0000000000000009 RSI: 0000000000000000 RDI: 8000000000000003 [ 178.824859][ T8135] RBP: 00007f167c011e19 R08: 0000000000000000 R09: 0000000000000000 [ 178.824878][ T8135] R10: 00000000004cbd5d R11: 0000000000000246 R12: 0000000000000000 [ 178.824898][ T8135] R13: 00007f167c1b6038 R14: 00007f167c1b5fa0 R15: 00007ffc455e85b8 [ 178.824930][ T8135] [ 179.743915][ T8159] FAULT_INJECTION: forcing a failure. [ 179.743915][ T8159] name fail_page_alloc, interval 1, probability 0, space 0, times 393208 [ 179.786053][ T8159] CPU: 1 UID: 0 PID: 8159 Comm: syz.2.802 Not tainted syzkaller #0 PREEMPT(full) [ 179.786100][ T8159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 179.786119][ T8159] Call Trace: [ 179.786129][ T8159] [ 179.786141][ T8159] dump_stack_lvl+0x16c/0x1f0 [ 179.786186][ T8159] should_fail_ex+0x512/0x640 [ 179.786234][ T8159] should_fail_alloc_page+0xe7/0x130 [ 179.786280][ T8159] prepare_alloc_pages+0x3c2/0x610 [ 179.786330][ T8159] ? rcu_is_watching+0x12/0xc0 [ 179.786365][ T8159] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 179.786416][ T8159] ? sched_clock+0x38/0x60 [ 179.786464][ T8159] ? rcu_is_watching+0x12/0xc0 [ 179.786497][ T8159] ? finish_task_switch.isra.0+0x21c/0xc10 [ 179.786529][ T8159] ? rcu_is_watching+0x12/0xc0 [ 179.786561][ T8159] ? css_rstat_updated+0x1c2/0x510 [ 179.786594][ T8159] ? css_rstat_updated+0x1c2/0x510 [ 179.786628][ T8159] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 179.786668][ T8159] ? do_raw_spin_lock+0x12c/0x2b0 [ 179.786720][ T8159] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 179.786775][ T8159] ? do_raw_spin_unlock+0x172/0x230 [ 179.786823][ T8159] ? _raw_spin_unlock+0x28/0x50 [ 179.786855][ T8159] ? __dquot_alloc_space+0x520/0xe20 [ 179.786896][ T8159] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 179.786943][ T8159] ? policy_nodemask+0xea/0x4e0 [ 179.786984][ T8159] alloc_pages_mpol+0x1fb/0x550 [ 179.787026][ T8159] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 179.787067][ T8159] ? __folio_batch_add_and_move+0x602/0xc90 [ 179.787109][ T8159] ? rcu_is_watching+0x12/0xc0 [ 179.787141][ T8159] ? lock_release+0x201/0x2f0 [ 179.787183][ T8159] folio_alloc_mpol_noprof+0x36/0x2f0 [ 179.787227][ T8159] shmem_alloc_folio+0x135/0x160 [ 179.787270][ T8159] shmem_alloc_and_add_folio+0x499/0xc20 [ 179.787305][ T8159] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 179.787337][ T8159] ? shmem_allowable_huge_orders+0xcb/0x2f0 [ 179.787373][ T8159] shmem_get_folio_gfp+0x67f/0x1600 [ 179.787417][ T8159] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 179.787452][ T8159] ? __pfx___might_resched+0x10/0x10 [ 179.787484][ T8159] shmem_fallocate+0x795/0xf50 [ 179.787534][ T8159] ? __pfx_shmem_fallocate+0x10/0x10 [ 179.787573][ T8159] ? __pfx_aa_file_perm+0x10/0x10 [ 179.787618][ T8159] ? do_writev+0x218/0x340 [ 179.787645][ T8159] ? rcu_is_watching+0x12/0xc0 [ 179.787673][ T8159] ? lock_release+0x201/0x2f0 [ 179.787711][ T8159] ? rcu_is_watching+0x12/0xc0 [ 179.787737][ T8159] ? lock_acquire+0x2cd/0x350 [ 179.787772][ T8159] ? __pfx___might_resched+0x10/0x10 [ 179.787797][ T8159] ? common_file_perm+0x1a9/0x340 [ 179.787831][ T8159] ? __pfx_shmem_fallocate+0x10/0x10 [ 179.787863][ T8159] vfs_fallocate+0x5b1/0x10e0 [ 179.787898][ T8159] ? __pfx_vfs_fallocate+0x10/0x10 [ 179.787934][ T8159] __x64_sys_fallocate+0xd5/0x150 [ 179.787971][ T8159] do_syscall_64+0xcd/0x490 [ 179.788008][ T8159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.788036][ T8159] RIP: 0033:0x7f167bf8ebe9 [ 179.788057][ T8159] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 179.788085][ T8159] RSP: 002b:00007f167cd51038 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 179.788112][ T8159] RAX: ffffffffffffffda RBX: 00007f167c1b6090 RCX: 00007f167bf8ebe9 [ 179.788132][ T8159] RDX: 0000000000000009 RSI: 0000000000000000 RDI: 8000000000000003 [ 179.788149][ T8159] RBP: 00007f167c011e19 R08: 0000000000000000 R09: 0000000000000000 [ 179.788167][ T8159] R10: 00000000004cbd5d R11: 0000000000000246 R12: 0000000000000000 [ 179.788184][ T8159] R13: 00007f167c1b6128 R14: 00007f167c1b6090 R15: 00007ffc455e85b8 [ 179.788212][ T8159] [ 180.737792][ T8172] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 182.228752][ T8198] FAULT_INJECTION: forcing a failure. [ 182.228752][ T8198] name failslab, interval 1, probability 0, space 0, times 0 [ 182.246825][ T8198] CPU: 0 UID: 0 PID: 8198 Comm: syz.4.811 Not tainted syzkaller #0 PREEMPT(full) [ 182.246868][ T8198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 182.246886][ T8198] Call Trace: [ 182.246896][ T8198] [ 182.246906][ T8198] dump_stack_lvl+0x16c/0x1f0 [ 182.246949][ T8198] should_fail_ex+0x512/0x640 [ 182.246991][ T8198] ? tracing_log_err+0x4e4/0x6d0 [ 182.247038][ T8198] should_failslab+0xc2/0x120 [ 182.247075][ T8198] __kmalloc_noprof+0xd2/0x510 [ 182.247109][ T8198] tracing_log_err+0x4e4/0x6d0 [ 182.247151][ T8198] append_filter_err+0x380/0x5e0 [ 182.247186][ T8198] apply_subsystem_event_filter+0x75a/0x17e0 [ 182.247231][ T8198] ? __pfx_apply_subsystem_event_filter+0x10/0x10 [ 182.247275][ T8198] ? _copy_from_user+0x59/0xd0 [ 182.247337][ T8198] subsystem_filter_write+0x95/0x120 [ 182.247376][ T8198] ? __pfx_subsystem_filter_write+0x10/0x10 [ 182.247413][ T8198] vfs_write+0x29d/0x11d0 [ 182.247450][ T8198] ? __pfx___mutex_lock+0x10/0x10 [ 182.247490][ T8198] ? __pfx_vfs_write+0x10/0x10 [ 182.247525][ T8198] ? __fget_files+0x204/0x3c0 [ 182.247556][ T8198] ? rcu_is_watching+0x12/0xc0 [ 182.247588][ T8198] ? __fget_files+0x20e/0x3c0 [ 182.247621][ T8198] ksys_write+0x12a/0x250 [ 182.247654][ T8198] ? __pfx_ksys_write+0x10/0x10 [ 182.247692][ T8198] do_syscall_64+0xcd/0x490 [ 182.247727][ T8198] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.247754][ T8198] RIP: 0033:0x7f5016d8ebe9 [ 182.247774][ T8198] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 182.247801][ T8198] RSP: 002b:00007f5017ca4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 182.247827][ T8198] RAX: ffffffffffffffda RBX: 00007f5016fb5fa0 RCX: 00007f5016d8ebe9 [ 182.247845][ T8198] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000005 [ 182.247863][ T8198] RBP: 00007f5016e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 182.247880][ T8198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 182.247897][ T8198] R13: 00007f5016fb6038 R14: 00007f5016fb5fa0 R15: 00007fffc8ba1bc8 [ 182.247928][ T8198] [ 184.103503][ T8226] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 184.348664][ T1150] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.424325][ T1150] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.486071][ T1150] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.526289][ T1150] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.671632][ T1150] bridge_slave_1: left allmulticast mode [ 184.686845][ T1150] bridge_slave_1: left promiscuous mode [ 184.703637][ T1150] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.723253][ T1150] bridge_slave_0: left allmulticast mode [ 184.739385][ T1150] bridge_slave_0: left promiscuous mode [ 184.745624][ T1150] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.981054][ T1150] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 185.005462][ T1150] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 185.043881][ T1150] bond0 (unregistering): Released all slaves [ 185.349038][ T8259] FAULT_INJECTION: forcing a failure. [ 185.349038][ T8259] name failslab, interval 1, probability 0, space 0, times 0 [ 185.381656][ T8259] CPU: 1 UID: 0 PID: 8259 Comm: syz.1.835 Not tainted syzkaller #0 PREEMPT(full) [ 185.381698][ T8259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 185.381717][ T8259] Call Trace: [ 185.381727][ T8259] [ 185.381738][ T8259] dump_stack_lvl+0x16c/0x1f0 [ 185.381783][ T8259] should_fail_ex+0x512/0x640 [ 185.381831][ T8259] ? rsassa_pkcs1_verify+0x27e/0xb60 [ 185.381869][ T8259] should_failslab+0xc2/0x120 [ 185.381911][ T8259] __kmalloc_noprof+0xd2/0x510 [ 185.381950][ T8259] ? mpi_alloc_limb_space+0x39/0x60 [ 185.382019][ T8259] rsassa_pkcs1_verify+0x27e/0xb60 [ 185.382060][ T8259] ? rsa_set_pub_key+0xb4/0x270 [ 185.382094][ T8259] ? __pfx_rsa_set_pub_key+0x10/0x10 [ 185.382130][ T8259] ? __pfx_rsassa_pkcs1_verify+0x10/0x10 [ 185.382180][ T8259] ? rsa_max_size+0xd/0x70 [ 185.382211][ T8259] ? rsassa_pkcs1_set_pub_key+0x17d/0x1f0 [ 185.382253][ T8259] public_key_verify_signature+0x672/0x970 [ 185.382288][ T8259] ? __pfx_public_key_verify_signature+0x10/0x10 [ 185.382348][ T8259] x509_check_for_self_signed+0x31a/0x500 [ 185.382388][ T8259] x509_cert_parse+0x5f8/0x900 [ 185.382418][ T8259] ? kasan_save_stack+0x42/0x60 [ 185.382454][ T8259] ? kasan_save_stack+0x33/0x60 [ 185.382489][ T8259] ? kasan_save_track+0x14/0x30 [ 185.382526][ T8259] pkcs7_extract_cert+0xa4/0x320 [ 185.382566][ T8259] asn1_ber_decoder+0xc5f/0x1df0 [ 185.382623][ T8259] ? __pfx_asn1_ber_decoder+0x10/0x10 [ 185.382685][ T8259] pkcs7_parse_message+0x288/0x720 [ 185.382726][ T8259] verify_pkcs7_signature+0x30/0xa0 [ 185.382775][ T8259] valid_regdb+0x211/0x590 [ 185.382813][ T8259] ? __pfx___mutex_lock+0x10/0x10 [ 185.382857][ T8259] ? __pfx_valid_regdb+0x10/0x10 [ 185.382898][ T8259] reg_reload_regdb+0x11a/0x460 [ 185.382943][ T8259] ? __pfx_reg_reload_regdb+0x10/0x10 [ 185.382988][ T8259] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 185.383020][ T8259] ? nl80211_pre_doit+0x1b0/0xb10 [ 185.383053][ T8259] genl_family_rcv_msg_doit+0x206/0x2f0 [ 185.383108][ T8259] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 185.383156][ T8259] ? rcu_is_watching+0x12/0xc0 [ 185.383199][ T8259] ? bpf_lsm_capable+0x9/0x10 [ 185.383230][ T8259] ? security_capable+0x7e/0x260 [ 185.383264][ T8259] genl_rcv_msg+0x55c/0x800 [ 185.383323][ T8259] ? __pfx_genl_rcv_msg+0x10/0x10 [ 185.383372][ T8259] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 185.383405][ T8259] ? __pfx_nl80211_reload_regdb+0x10/0x10 [ 185.383445][ T8259] ? __pfx_nl80211_post_doit+0x10/0x10 [ 185.383495][ T8259] netlink_rcv_skb+0x155/0x420 [ 185.383537][ T8259] ? __pfx_genl_rcv_msg+0x10/0x10 [ 185.383585][ T8259] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 185.383636][ T8259] ? netlink_deliver_tap+0x1ae/0xd30 [ 185.383677][ T8259] genl_rcv+0x28/0x40 [ 185.383718][ T8259] netlink_unicast+0x5aa/0x870 [ 185.383757][ T8259] ? __pfx_netlink_unicast+0x10/0x10 [ 185.383804][ T8259] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 185.383853][ T8259] netlink_sendmsg+0x8d1/0xdd0 [ 185.383892][ T8259] ? __pfx_netlink_sendmsg+0x10/0x10 [ 185.383931][ T8259] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 185.383963][ T8259] ____sys_sendmsg+0xa95/0xc70 [ 185.384007][ T8259] ? copy_msghdr_from_user+0x10a/0x160 [ 185.384042][ T8259] ? __pfx_____sys_sendmsg+0x10/0x10 [ 185.384092][ T8259] ? __pfx_futex_wake_mark+0x10/0x10 [ 185.384136][ T8259] ___sys_sendmsg+0x134/0x1d0 [ 185.384172][ T8259] ? __pfx____sys_sendmsg+0x10/0x10 [ 185.384206][ T8259] ? futex_private_hash_put+0x11c/0x300 [ 185.384243][ T8259] ? rcu_is_watching+0x12/0xc0 [ 185.384281][ T8259] __sys_sendmsg+0x16d/0x220 [ 185.384326][ T8259] ? __pfx___sys_sendmsg+0x10/0x10 [ 185.384360][ T8259] ? __x64_sys_futex+0x1e0/0x4c0 [ 185.384405][ T8259] do_syscall_64+0xcd/0x490 [ 185.384443][ T8259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.384470][ T8259] RIP: 0033:0x7f899658ebe9 [ 185.384493][ T8259] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 185.384522][ T8259] RSP: 002b:00007f89947f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 185.384550][ T8259] RAX: ffffffffffffffda RBX: 00007f89967b5fa0 RCX: 00007f899658ebe9 [ 185.384569][ T8259] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000005 [ 185.384586][ T8259] RBP: 00007f8996611e19 R08: 0000000000000000 R09: 0000000000000000 [ 185.384603][ T8259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 185.384622][ T8259] R13: 00007f89967b6038 R14: 00007f89967b5fa0 R15: 00007fff2a644078 [ 185.384652][ T8259] [ 185.834801][ T1150] hsr_slave_0: left promiscuous mode [ 185.844484][ T1150] hsr_slave_1: left promiscuous mode [ 185.850763][ T1150] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 185.874428][ T1150] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 185.889082][ T1150] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 185.896705][ T1150] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 185.937715][ T1150] veth1_macvtap: left promiscuous mode [ 185.944048][ T1150] veth0_macvtap: left promiscuous mode [ 185.949871][ T1150] veth1_vlan: left promiscuous mode [ 185.955199][ T1150] veth0_vlan: left promiscuous mode [ 186.278764][ T1150] team0 (unregistering): Port device team_slave_1 removed [ 186.282126][ T8264] FAULT_INJECTION: forcing a failure. [ 186.282126][ T8264] name fail_page_alloc, interval 1, probability 0, space 0, times 393207 [ 186.308106][ T8264] CPU: 1 UID: 0 PID: 8264 Comm: syz.0.828 Not tainted syzkaller #0 PREEMPT(full) [ 186.308149][ T8264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 186.308168][ T8264] Call Trace: [ 186.308178][ T8264] [ 186.308189][ T8264] dump_stack_lvl+0x16c/0x1f0 [ 186.308236][ T8264] should_fail_ex+0x512/0x640 [ 186.308286][ T8264] should_fail_alloc_page+0xe7/0x130 [ 186.308333][ T8264] prepare_alloc_pages+0x3c2/0x610 [ 186.308381][ T8264] ? rcu_is_watching+0x12/0xc0 [ 186.308426][ T8264] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 186.308466][ T8264] ? down_write+0x14d/0x200 [ 186.308517][ T8264] ? css_rstat_updated+0x1c2/0x510 [ 186.308548][ T8264] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 186.308588][ T8264] ? do_raw_spin_lock+0x12c/0x2b0 [ 186.308651][ T8264] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 186.308705][ T8264] ? do_raw_spin_unlock+0x172/0x230 [ 186.308755][ T8264] ? _raw_spin_unlock+0x28/0x50 [ 186.308787][ T8264] ? __dquot_alloc_space+0x520/0xe20 [ 186.308829][ T8264] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 186.308877][ T8264] ? policy_nodemask+0xea/0x4e0 [ 186.308920][ T8264] alloc_pages_mpol+0x1fb/0x550 [ 186.308962][ T8264] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 186.309014][ T8264] ? __folio_batch_add_and_move+0x602/0xc90 [ 186.309057][ T8264] ? rcu_is_watching+0x12/0xc0 [ 186.309090][ T8264] ? lock_release+0x201/0x2f0 [ 186.309136][ T8264] folio_alloc_mpol_noprof+0x36/0x2f0 [ 186.309184][ T8264] shmem_alloc_folio+0x135/0x160 [ 186.309244][ T8264] shmem_alloc_and_add_folio+0x499/0xc20 [ 186.309285][ T8264] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 186.309325][ T8264] ? shmem_allowable_huge_orders+0xcb/0x2f0 [ 186.309366][ T8264] shmem_get_folio_gfp+0x67f/0x1600 [ 186.309407][ T8264] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 186.309447][ T8264] ? __pfx___might_resched+0x10/0x10 [ 186.309484][ T8264] shmem_fallocate+0x795/0xf50 [ 186.309531][ T8264] ? __pfx_shmem_fallocate+0x10/0x10 [ 186.309575][ T8264] ? __pfx_aa_file_perm+0x10/0x10 [ 186.309626][ T8264] ? do_writev+0x218/0x340 [ 186.309659][ T8264] ? rcu_is_watching+0x12/0xc0 [ 186.309692][ T8264] ? lock_release+0x201/0x2f0 [ 186.309738][ T8264] ? rcu_is_watching+0x12/0xc0 [ 186.309770][ T8264] ? lock_acquire+0x2cd/0x350 [ 186.309812][ T8264] ? __pfx___might_resched+0x10/0x10 [ 186.309843][ T8264] ? common_file_perm+0x1a9/0x340 [ 186.309884][ T8264] ? __pfx_shmem_fallocate+0x10/0x10 [ 186.309924][ T8264] vfs_fallocate+0x5b1/0x10e0 [ 186.309964][ T8264] ? __pfx_vfs_fallocate+0x10/0x10 [ 186.310023][ T8264] __x64_sys_fallocate+0xd5/0x150 [ 186.310067][ T8264] do_syscall_64+0xcd/0x490 [ 186.310113][ T8264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.310147][ T8264] RIP: 0033:0x7fa8ec78ebe9 [ 186.310173][ T8264] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 186.310205][ T8264] RSP: 002b:00007fa8ed5fe038 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 186.310237][ T8264] RAX: ffffffffffffffda RBX: 00007fa8ec9b5fa0 RCX: 00007fa8ec78ebe9 [ 186.310271][ T8264] RDX: 0000000000000009 RSI: 0000000000000000 RDI: 8000000000000003 [ 186.310291][ T8264] RBP: 00007fa8ec811e19 R08: 0000000000000000 R09: 0000000000000000 [ 186.310310][ T8264] R10: 00000000004cbd5d R11: 0000000000000246 R12: 0000000000000000 [ 186.310331][ T8264] R13: 00007fa8ec9b6038 R14: 00007fa8ec9b5fa0 R15: 00007ffcb1a95418 [ 186.310362][ T8264] [ 186.721041][ T1150] team0 (unregistering): Port device team_slave_0 removed [ 187.157014][ T8276] netlink: 330 bytes leftover after parsing attributes in process `syz.1.842'. [ 187.313567][ T8282] binder: 8281:8282 ioctl c018620c 0 returned -1 [ 187.767404][ T8302] FAULT_INJECTION: forcing a failure. [ 187.767404][ T8302] name fail_page_alloc, interval 1, probability 0, space 0, times 393206 [ 187.829355][ T8302] CPU: 0 UID: 0 PID: 8302 Comm: syz.1.844 Not tainted syzkaller #0 PREEMPT(full) [ 187.829398][ T8302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 187.829417][ T8302] Call Trace: [ 187.829426][ T8302] [ 187.829438][ T8302] dump_stack_lvl+0x16c/0x1f0 [ 187.829484][ T8302] should_fail_ex+0x512/0x640 [ 187.829534][ T8302] should_fail_alloc_page+0xe7/0x130 [ 187.829582][ T8302] prepare_alloc_pages+0x3c2/0x610 [ 187.829635][ T8302] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 187.829676][ T8302] ? css_rstat_updated+0x1c2/0x510 [ 187.829710][ T8302] ? __pfx_css_rstat_updated+0x10/0x10 [ 187.829746][ T8302] ? lock_release+0x201/0x2f0 [ 187.829789][ T8302] ? down_write+0x14d/0x200 [ 187.829839][ T8302] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 187.829887][ T8302] ? __dequeue_entity+0xa76/0x1830 [ 187.829925][ T8302] ? __mutex_trylock_common+0xe9/0x250 [ 187.829978][ T8302] ? __pfx___mutex_trylock_common+0x10/0x10 [ 187.830024][ T8302] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 187.830074][ T8302] ? policy_nodemask+0xea/0x4e0 [ 187.830125][ T8302] alloc_pages_mpol+0x1fb/0x550 [ 187.830166][ T8302] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 187.830208][ T8302] alloc_pages_noprof+0x131/0x390 [ 187.830245][ T8302] __pmd_alloc+0x3b/0x930 [ 187.830290][ T8302] huge_pte_alloc+0x41d/0x5b0 [ 187.830316][ T8302] hugetlb_fault+0x373/0x2f40 [ 187.830344][ T8302] ? __pfx_hugetlb_fault+0x10/0x10 [ 187.830376][ T8302] ? find_vma+0xbf/0x140 [ 187.830412][ T8302] ? __pfx_find_vma+0x10/0x10 [ 187.830450][ T8302] handle_mm_fault+0xbfa/0xd10 [ 187.830477][ T8302] ? __bpf_trace_exceptions+0x1/0x40 [ 187.830521][ T8302] do_user_addr_fault+0x7a6/0x1370 [ 187.830566][ T8302] ? rcu_is_watching+0x12/0xc0 [ 187.830595][ T8302] exc_page_fault+0x5c/0xb0 [ 187.830628][ T8302] asm_exc_page_fault+0x26/0x30 [ 187.830654][ T8302] RIP: 0010:rep_movs_alternative+0x30/0x90 [ 187.830684][ T8302] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 187.830711][ T8302] RSP: 0018:ffffc9000af87cf8 EFLAGS: 00050246 [ 187.830733][ T8302] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000008 [ 187.830750][ T8302] RDX: ffffed10042d63b1 RSI: 0000000000000000 RDI: ffff8880216b1d80 [ 187.830768][ T8302] RBP: 0000000000000008 R08: 0000000000000001 R09: ffffed10042d63b0 [ 187.830785][ T8302] R10: ffff8880216b1d87 R11: 0000000000000001 R12: 0000000000000000 [ 187.830802][ T8302] R13: ffff8880216b1d80 R14: 0000000000000000 R15: 0000000000000008 [ 187.830828][ T8302] _copy_from_user+0x98/0xd0 [ 187.830874][ T8302] sctp_setsockopt+0x2045/0xb870 [ 187.830915][ T8302] ? rcu_is_watching+0x12/0xc0 [ 187.830945][ T8302] ? __pfx_sctp_setsockopt+0x10/0x10 [ 187.830984][ T8302] ? rcu_is_watching+0x12/0xc0 [ 187.831014][ T8302] ? aa_sock_opt_perm+0xfd/0x1c0 [ 187.831038][ T8302] ? sock_common_setsockopt+0x2e/0xf0 [ 187.831081][ T8302] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 187.831131][ T8302] do_sock_setsockopt+0xf3/0x1d0 [ 187.831175][ T8302] __sys_setsockopt+0x120/0x1a0 [ 187.831211][ T8302] __x64_sys_setsockopt+0xbd/0x160 [ 187.831245][ T8302] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 187.831289][ T8302] do_syscall_64+0xcd/0x490 [ 187.831325][ T8302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.831352][ T8302] RIP: 0033:0x7f899658ebe9 [ 187.831373][ T8302] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 187.831399][ T8302] RSP: 002b:00007f89947f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 187.831424][ T8302] RAX: ffffffffffffffda RBX: 00007f89967b5fa0 RCX: 00007f899658ebe9 [ 187.831442][ T8302] RDX: 0000000000000081 RSI: 0000010000000084 RDI: 0000000000000003 [ 187.831459][ T8302] RBP: 00007f8996611e19 R08: 0000000000000008 R09: 0000000000000000 [ 187.831476][ T8302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 187.831492][ T8302] R13: 00007f89967b6038 R14: 00007f89967b5fa0 R15: 00007fff2a644078 [ 187.831518][ T8302] [ 188.978667][ T8335] FAULT_INJECTION: forcing a failure. [ 188.978667][ T8335] name failslab, interval 1, probability 0, space 0, times 0 [ 188.999631][ T8335] CPU: 1 UID: 0 PID: 8335 Comm: syz.4.840 Not tainted syzkaller #0 PREEMPT(full) [ 188.999674][ T8335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 188.999692][ T8335] Call Trace: [ 188.999703][ T8335] [ 188.999714][ T8335] dump_stack_lvl+0x16c/0x1f0 [ 188.999758][ T8335] should_fail_ex+0x512/0x640 [ 188.999808][ T8335] should_failslab+0xc2/0x120 [ 188.999851][ T8335] __kmalloc_cache_noprof+0x6a/0x3e0 [ 188.999883][ T8335] ? do_syscall_64+0xcd/0x490 [ 188.999922][ T8335] ? preempt_count_add+0x76/0x150 [ 188.999968][ T8335] ? mpi_alloc+0x46/0x230 [ 189.000004][ T8335] mpi_alloc+0x46/0x230 [ 189.000045][ T8335] mpi_read_raw_from_sgl+0x222/0x5b0 [ 189.000079][ T8335] ? __pfx_mpi_read_raw_from_sgl+0x10/0x10 [ 189.000116][ T8335] ? kasan_save_track+0x14/0x30 [ 189.000153][ T8335] ? __kasan_kmalloc+0xaa/0xb0 [ 189.000191][ T8335] rsa_enc+0x15d/0x3b0 [ 189.000226][ T8335] ? __pfx_rsa_enc+0x10/0x10 [ 189.000258][ T8335] ? __virt_addr_valid+0x81/0x610 [ 189.000297][ T8335] ? __phys_addr+0xe8/0x180 [ 189.000334][ T8335] ? sg_init_one+0xf5/0x1b0 [ 189.000377][ T8335] rsassa_pkcs1_verify+0x502/0xb60 [ 189.000425][ T8335] ? __pfx_rsassa_pkcs1_verify+0x10/0x10 [ 189.000476][ T8335] ? rsa_max_size+0xd/0x70 [ 189.000507][ T8335] ? rsassa_pkcs1_set_pub_key+0x17d/0x1f0 [ 189.000550][ T8335] public_key_verify_signature+0x672/0x970 [ 189.000587][ T8335] ? __pfx_public_key_verify_signature+0x10/0x10 [ 189.000636][ T8335] x509_check_for_self_signed+0x31a/0x500 [ 189.000678][ T8335] x509_cert_parse+0x5f8/0x900 [ 189.000710][ T8335] ? kasan_save_stack+0x42/0x60 [ 189.000746][ T8335] ? kasan_save_stack+0x33/0x60 [ 189.000782][ T8335] ? kasan_save_track+0x14/0x30 [ 189.000819][ T8335] pkcs7_extract_cert+0xa4/0x320 [ 189.000862][ T8335] asn1_ber_decoder+0xc5f/0x1df0 [ 189.000920][ T8335] ? __pfx_asn1_ber_decoder+0x10/0x10 [ 189.000982][ T8335] pkcs7_parse_message+0x288/0x720 [ 189.001028][ T8335] verify_pkcs7_signature+0x30/0xa0 [ 189.001077][ T8335] valid_regdb+0x211/0x590 [ 189.001116][ T8335] ? __pfx___mutex_lock+0x10/0x10 [ 189.001160][ T8335] ? __pfx_valid_regdb+0x10/0x10 [ 189.001203][ T8335] reg_reload_regdb+0x11a/0x460 [ 189.001248][ T8335] ? __pfx_reg_reload_regdb+0x10/0x10 [ 189.001293][ T8335] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 189.001324][ T8335] ? nl80211_pre_doit+0x1b0/0xb10 [ 189.001363][ T8335] genl_family_rcv_msg_doit+0x206/0x2f0 [ 189.001417][ T8335] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 189.001465][ T8335] ? rcu_is_watching+0x12/0xc0 [ 189.001504][ T8335] ? bpf_lsm_capable+0x9/0x10 [ 189.001533][ T8335] ? security_capable+0x7e/0x260 [ 189.001568][ T8335] genl_rcv_msg+0x55c/0x800 [ 189.001618][ T8335] ? __pfx_genl_rcv_msg+0x10/0x10 [ 189.001667][ T8335] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 189.001697][ T8335] ? __pfx_nl80211_reload_regdb+0x10/0x10 [ 189.001763][ T8335] ? __pfx_nl80211_post_doit+0x10/0x10 [ 189.001815][ T8335] netlink_rcv_skb+0x155/0x420 [ 189.001858][ T8335] ? __pfx_genl_rcv_msg+0x10/0x10 [ 189.001909][ T8335] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 189.001961][ T8335] ? netlink_deliver_tap+0x1ae/0xd30 [ 189.002004][ T8335] genl_rcv+0x28/0x40 [ 189.002056][ T8335] netlink_unicast+0x5aa/0x870 [ 189.002103][ T8335] ? __pfx_netlink_unicast+0x10/0x10 [ 189.002148][ T8335] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 189.002198][ T8335] netlink_sendmsg+0x8d1/0xdd0 [ 189.002244][ T8335] ? __pfx_netlink_sendmsg+0x10/0x10 [ 189.002290][ T8335] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 189.002327][ T8335] ____sys_sendmsg+0xa95/0xc70 [ 189.002378][ T8335] ? copy_msghdr_from_user+0x10a/0x160 [ 189.002419][ T8335] ? __pfx_____sys_sendmsg+0x10/0x10 [ 189.002475][ T8335] ? __pfx_futex_wake_mark+0x10/0x10 [ 189.002527][ T8335] ___sys_sendmsg+0x134/0x1d0 [ 189.002570][ T8335] ? __pfx____sys_sendmsg+0x10/0x10 [ 189.002613][ T8335] ? futex_private_hash_put+0x11c/0x300 [ 189.002658][ T8335] ? rcu_is_watching+0x12/0xc0 [ 189.002703][ T8335] __sys_sendmsg+0x16d/0x220 [ 189.002744][ T8335] ? __pfx___sys_sendmsg+0x10/0x10 [ 189.002783][ T8335] ? __x64_sys_futex+0x1e0/0x4c0 [ 189.002832][ T8335] do_syscall_64+0xcd/0x490 [ 189.002878][ T8335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.002913][ T8335] RIP: 0033:0x7f5016d8ebe9 [ 189.002938][ T8335] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 189.002971][ T8335] RSP: 002b:00007f5017ca4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 189.003004][ T8335] RAX: ffffffffffffffda RBX: 00007f5016fb5fa0 RCX: 00007f5016d8ebe9 [ 189.003034][ T8335] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000005 [ 189.003055][ T8335] RBP: 00007f5016e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 189.003076][ T8335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 189.003096][ T8335] R13: 00007f5016fb6038 R14: 00007f5016fb5fa0 R15: 00007fffc8ba1bc8 [ 189.003128][ T8335] [ 190.292088][ T8368] netlink: 338 bytes leftover after parsing attributes in process `syz.1.853'. [ 190.320879][ T8370] netlink: 28 bytes leftover after parsing attributes in process `syz.4.854'. [ 190.373211][ T8370] veth0_macvtap: left promiscuous mode [ 190.450233][ T8347] Process accounting paused [ 190.478178][ T8368] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.485866][ T8368] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.567279][ T8374] FAULT_INJECTION: forcing a failure. [ 190.567279][ T8374] name failslab, interval 1, probability 0, space 0, times 0 [ 190.585514][ T8374] CPU: 0 UID: 0 PID: 8374 Comm: syz.2.855 Not tainted syzkaller #0 PREEMPT(full) [ 190.585558][ T8374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 190.585577][ T8374] Call Trace: [ 190.585587][ T8374] [ 190.585599][ T8374] dump_stack_lvl+0x16c/0x1f0 [ 190.585645][ T8374] should_fail_ex+0x512/0x640 [ 190.585693][ T8374] ? landlock_init_hierarchy_log+0x17f/0x810 [ 190.585741][ T8374] should_failslab+0xc2/0x120 [ 190.585784][ T8374] __kmalloc_noprof+0xd2/0x510 [ 190.585825][ T8374] landlock_init_hierarchy_log+0x17f/0x810 [ 190.585879][ T8374] landlock_merge_ruleset+0x6e1/0x870 [ 190.585929][ T8374] ? prepare_creds+0x583/0x7d0 [ 190.585979][ T8374] __do_sys_landlock_restrict_self+0x2a2/0x910 [ 190.586020][ T8374] do_syscall_64+0xcd/0x490 [ 190.586062][ T8374] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.586094][ T8374] RIP: 0033:0x7f167bf8ebe9 [ 190.586119][ T8374] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 190.586150][ T8374] RSP: 002b:00007f167cd72038 EFLAGS: 00000246 ORIG_RAX: 00000000000001be [ 190.586183][ T8374] RAX: ffffffffffffffda RBX: 00007f167c1b5fa0 RCX: 00007f167bf8ebe9 [ 190.586204][ T8374] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000005 [ 190.586224][ T8374] RBP: 00007f167c011e19 R08: 0000000000000000 R09: 0000000000000000 [ 190.586244][ T8374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 190.586265][ T8374] R13: 00007f167c1b6038 R14: 00007f167c1b5fa0 R15: 00007ffc455e85b8 [ 190.586297][ T8374] [ 190.900581][ T8384] FAULT_INJECTION: forcing a failure. [ 190.900581][ T8384] name failslab, interval 1, probability 0, space 0, times 0 [ 190.955713][ T8384] CPU: 1 UID: 0 PID: 8384 Comm: syz.2.859 Not tainted syzkaller #0 PREEMPT(full) [ 190.955761][ T8384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 190.955780][ T8384] Call Trace: [ 190.955791][ T8384] [ 190.955802][ T8384] dump_stack_lvl+0x16c/0x1f0 [ 190.955848][ T8384] should_fail_ex+0x512/0x640 [ 190.955895][ T8384] should_failslab+0xc2/0x120 [ 190.955944][ T8384] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 190.955983][ T8384] ? __kernfs_new_node+0xd2/0x8e0 [ 190.956024][ T8384] ? lock_acquire+0x2cd/0x350 [ 190.956067][ T8384] __kernfs_new_node+0xd2/0x8e0 [ 190.956111][ T8384] ? __pfx___kernfs_new_node+0x10/0x10 [ 190.956155][ T8384] ? up_write+0x1b2/0x520 [ 190.956199][ T8384] ? rcu_is_watching+0x12/0xc0 [ 190.956233][ T8384] ? kernfs_root+0xee/0x2a0 [ 190.956270][ T8384] ? rcu_is_watching+0x12/0xc0 [ 190.956301][ T8384] ? lock_release+0x201/0x2f0 [ 190.956347][ T8384] kernfs_new_node+0x13c/0x1e0 [ 190.956397][ T8384] __kernfs_create_file+0x53/0x350 [ 190.956431][ T8384] sysfs_add_file_mode_ns+0x207/0x3c0 [ 190.956475][ T8384] sysfs_create_file_ns+0x13d/0x1d0 [ 190.956512][ T8384] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 190.956547][ T8384] ? down_read+0x13d/0x480 [ 190.956592][ T8384] ? __pfx___up_read+0x10/0x10 [ 190.956640][ T8384] ? lock_release+0x201/0x2f0 [ 190.956683][ T8384] device_create_file+0xf2/0x1e0 [ 190.956718][ T8384] device_add+0x2bf/0x1aa0 [ 190.956753][ T8384] ? __pfx_device_add+0x10/0x10 [ 190.956781][ T8384] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 190.956831][ T8384] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 190.956872][ T8384] wiphy_register+0x1df4/0x29f0 [ 190.956928][ T8384] ? netdev_run_todo+0x864/0x1320 [ 190.956975][ T8384] ? __dev_printk+0x190/0x270 [ 190.957018][ T8384] ? __pfx_wiphy_register+0x10/0x10 [ 190.957067][ T8384] ? ieee80211_init_rate_ctrl_alg+0x125/0x6b0 [ 190.957112][ T8384] ieee80211_register_hw+0x24a9/0x4060 [ 190.957164][ T8384] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 190.957211][ T8384] ? net_generic+0xea/0x2a0 [ 190.957252][ T8384] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 190.957302][ T8384] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 190.957344][ T8384] ? __hrtimer_setup+0x176/0x280 [ 190.957395][ T8384] mac80211_hwsim_new_radio+0x3034/0x54d0 [ 190.957438][ T8384] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 190.957476][ T8384] hwsim_new_radio_nl+0xb51/0x12c0 [ 190.957509][ T8384] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 190.957545][ T8384] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 190.957601][ T8384] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 190.957658][ T8384] genl_family_rcv_msg_doit+0x206/0x2f0 [ 190.957707][ T8384] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 190.957765][ T8384] ? bpf_lsm_capable+0x9/0x10 [ 190.957795][ T8384] ? security_capable+0x7e/0x260 [ 190.957829][ T8384] ? ns_capable+0xd7/0x110 [ 190.957864][ T8384] genl_rcv_msg+0x55c/0x800 [ 190.957924][ T8384] ? __pfx_genl_rcv_msg+0x10/0x10 [ 190.957973][ T8384] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 190.958010][ T8384] netlink_rcv_skb+0x155/0x420 [ 190.958052][ T8384] ? __pfx_genl_rcv_msg+0x10/0x10 [ 190.958099][ T8384] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 190.958147][ T8384] ? netlink_deliver_tap+0x1ae/0xd30 [ 190.958192][ T8384] genl_rcv+0x28/0x40 [ 190.958236][ T8384] netlink_unicast+0x5aa/0x870 [ 190.958281][ T8384] ? __pfx_netlink_unicast+0x10/0x10 [ 190.958323][ T8384] ? __pfx___might_resched+0x10/0x10 [ 190.958363][ T8384] netlink_sendmsg+0x8d1/0xdd0 [ 190.958410][ T8384] ? __pfx_netlink_sendmsg+0x10/0x10 [ 190.958454][ T8384] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 190.958490][ T8384] ____sys_sendmsg+0xa95/0xc70 [ 190.958541][ T8384] ? copy_msghdr_from_user+0x10a/0x160 [ 190.958581][ T8384] ? __pfx_____sys_sendmsg+0x10/0x10 [ 190.958635][ T8384] ? __pfx_futex_wake_mark+0x10/0x10 [ 190.958686][ T8384] ___sys_sendmsg+0x134/0x1d0 [ 190.958728][ T8384] ? __pfx____sys_sendmsg+0x10/0x10 [ 190.958770][ T8384] ? futex_private_hash_put+0x11c/0x300 [ 190.958814][ T8384] ? rcu_is_watching+0x12/0xc0 [ 190.958861][ T8384] __sys_sendmsg+0x16d/0x220 [ 190.958902][ T8384] ? __pfx___sys_sendmsg+0x10/0x10 [ 190.958950][ T8384] ? __x64_sys_futex+0x1e0/0x4c0 [ 190.959002][ T8384] do_syscall_64+0xcd/0x490 [ 190.959043][ T8384] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.959075][ T8384] RIP: 0033:0x7f167bf8ebe9 [ 190.959100][ T8384] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 190.959132][ T8384] RSP: 002b:00007f167cd72038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 190.959163][ T8384] RAX: ffffffffffffffda RBX: 00007f167c1b5fa0 RCX: 00007f167bf8ebe9 [ 190.959184][ T8384] RDX: 00000000040000c0 RSI: 0000200000000300 RDI: 0000000000000005 [ 190.959203][ T8384] RBP: 00007f167c011e19 R08: 0000000000000000 R09: 0000000000000000 [ 190.959223][ T8384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 190.959243][ T8384] R13: 00007f167c1b6038 R14: 00007f167c1b5fa0 R15: 00007ffc455e85b8 [ 190.959275][ T8384] [ 191.619411][ T8399] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 191.737888][ T8412] netlink: 350 bytes leftover after parsing attributes in process `syz.4.868'. [ 192.993382][ T8454] netlink: 326 bytes leftover after parsing attributes in process `syz.1.889'. [ 193.258019][ T8465] FAULT_INJECTION: forcing a failure. [ 193.258019][ T8465] name failslab, interval 1, probability 0, space 0, times 0 [ 193.274288][ T8465] CPU: 0 UID: 0 PID: 8465 Comm: syz.0.886 Not tainted syzkaller #0 PREEMPT(full) [ 193.274334][ T8465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 193.274354][ T8465] Call Trace: [ 193.274365][ T8465] [ 193.274377][ T8465] dump_stack_lvl+0x16c/0x1f0 [ 193.274424][ T8465] should_fail_ex+0x512/0x640 [ 193.274470][ T8465] ? lsm_blob_alloc+0x68/0x90 [ 193.274496][ T8465] should_failslab+0xc2/0x120 [ 193.274588][ T8465] __kmalloc_noprof+0xd2/0x510 [ 193.274630][ T8465] lsm_blob_alloc+0x68/0x90 [ 193.274657][ T8465] security_sk_alloc+0x30/0x270 [ 193.274691][ T8465] sk_prot_alloc+0xfb/0x2a0 [ 193.274743][ T8465] sk_alloc+0x36/0xc20 [ 193.274780][ T8465] inet_create+0x3a1/0x1040 [ 193.274812][ T8465] ? inet_create+0x93/0x1040 [ 193.274846][ T8465] __sock_create+0x338/0x8d0 [ 193.274877][ T8465] mptcp_subflow_create_socket+0xf5/0xed0 [ 193.274926][ T8465] ? aa_label_sk_perm+0x195/0x600 [ 193.274968][ T8465] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 193.275015][ T8465] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 193.275057][ T8465] ? __futex_wait+0x24c/0x2f0 [ 193.275107][ T8465] __mptcp_nmpc_sk+0x182/0x7d0 [ 193.275136][ T8465] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 193.275168][ T8465] ? __pfx_tomoyo_check_inet_address+0x10/0x10 [ 193.275218][ T8465] mptcp_connect+0x7e/0xae0 [ 193.275249][ T8465] __inet_stream_connect+0x914/0xf60 [ 193.275294][ T8465] ? __pfx___inet_stream_connect+0x10/0x10 [ 193.275325][ T8465] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 193.275376][ T8465] ? __pfx___might_resched+0x10/0x10 [ 193.275410][ T8465] ? inet_stream_connect+0x43/0xa0 [ 193.275439][ T8465] ? rcu_is_watching+0x12/0xc0 [ 193.275471][ T8465] ? inet_stream_connect+0x43/0xa0 [ 193.275500][ T8465] ? rcu_is_watching+0x12/0xc0 [ 193.275538][ T8465] ? inet_stream_connect+0x43/0xa0 [ 193.275570][ T8465] ? __pfx_inet_stream_connect+0x10/0x10 [ 193.275601][ T8465] inet_stream_connect+0x57/0xa0 [ 193.275632][ T8465] __sys_connect_file+0x13e/0x1a0 [ 193.275669][ T8465] __sys_connect+0x13b/0x160 [ 193.275703][ T8465] ? __pfx___sys_connect+0x10/0x10 [ 193.275745][ T8465] ? xfd_validate_state+0x61/0x180 [ 193.275797][ T8465] __x64_sys_connect+0x72/0xb0 [ 193.275832][ T8465] do_syscall_64+0xcd/0x490 [ 193.275873][ T8465] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.275907][ T8465] RIP: 0033:0x7fa8ec78ebe9 [ 193.275933][ T8465] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 193.275967][ T8465] RSP: 002b:00007fa8ed5fe038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 193.275999][ T8465] RAX: ffffffffffffffda RBX: 00007fa8ec9b5fa0 RCX: 00007fa8ec78ebe9 [ 193.276020][ T8465] RDX: 0000000000000054 RSI: 0000000000000000 RDI: 0000000000000003 [ 193.276040][ T8465] RBP: 00007fa8ec811e19 R08: 0000000000000000 R09: 0000000000000000 [ 193.276060][ T8465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 193.276079][ T8465] R13: 00007fa8ec9b6038 R14: 00007fa8ec9b5fa0 R15: 00007ffcb1a95418 [ 193.276110][ T8465] [ 193.343049][ T8469] netlink: 342 bytes leftover after parsing attributes in process `syz.2.888'. [ 193.504616][ T8471] netlink: 342 bytes leftover after parsing attributes in process `syz.2.888'. [ 193.527078][ T8469] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 193.608952][ T8469] IPv6: NLM_F_CREATE should be set when creating new route [ 193.616185][ T8469] IPv6: NLM_F_CREATE should be set when creating new route [ 193.623667][ T8471] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 193.773292][ T8477] FAULT_INJECTION: forcing a failure. [ 193.773292][ T8477] name fail_page_alloc, interval 1, probability 0, space 0, times 393205 [ 193.801861][ T8477] CPU: 1 UID: 0 PID: 8477 Comm: syz.4.891 Not tainted syzkaller #0 PREEMPT(full) [ 193.801906][ T8477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 193.801925][ T8477] Call Trace: [ 193.801936][ T8477] [ 193.801949][ T8477] dump_stack_lvl+0x16c/0x1f0 [ 193.801995][ T8477] should_fail_ex+0x512/0x640 [ 193.802044][ T8477] should_fail_alloc_page+0xe7/0x130 [ 193.802090][ T8477] prepare_alloc_pages+0x3c2/0x610 [ 193.802143][ T8477] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 193.802185][ T8477] ? css_rstat_updated+0x1c2/0x510 [ 193.802217][ T8477] ? __pfx_css_rstat_updated+0x10/0x10 [ 193.802249][ T8477] ? lock_release+0x201/0x2f0 [ 193.802287][ T8477] ? down_write+0x14d/0x200 [ 193.802332][ T8477] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 193.802370][ T8477] ? rcu_is_watching+0x12/0xc0 [ 193.802400][ T8477] ? trace_pelt_se_tp+0xf1/0x160 [ 193.802449][ T8477] ? __mutex_trylock_common+0xe9/0x250 [ 193.802494][ T8477] ? __pfx___mutex_trylock_common+0x10/0x10 [ 193.802537][ T8477] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 193.802587][ T8477] ? policy_nodemask+0xea/0x4e0 [ 193.802630][ T8477] alloc_pages_mpol+0x1fb/0x550 [ 193.802672][ T8477] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 193.802731][ T8477] alloc_pages_noprof+0x131/0x390 [ 193.802775][ T8477] __pmd_alloc+0x3b/0x930 [ 193.802825][ T8477] huge_pte_alloc+0x41d/0x5b0 [ 193.802856][ T8477] hugetlb_fault+0x373/0x2f40 [ 193.802890][ T8477] ? __pfx_hugetlb_fault+0x10/0x10 [ 193.802928][ T8477] ? find_vma+0xbf/0x140 [ 193.802969][ T8477] ? __pfx_find_vma+0x10/0x10 [ 193.803016][ T8477] handle_mm_fault+0xbfa/0xd10 [ 193.803049][ T8477] ? __bpf_trace_exceptions+0x1/0x40 [ 193.803100][ T8477] do_user_addr_fault+0x7a6/0x1370 [ 193.803152][ T8477] ? rcu_is_watching+0x12/0xc0 [ 193.803186][ T8477] exc_page_fault+0x5c/0xb0 [ 193.803224][ T8477] asm_exc_page_fault+0x26/0x30 [ 193.803253][ T8477] RIP: 0010:rep_movs_alternative+0x30/0x90 [ 193.803286][ T8477] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 193.803318][ T8477] RSP: 0018:ffffc9000b747cf8 EFLAGS: 00050246 [ 193.803345][ T8477] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000008 [ 193.803364][ T8477] RDX: ffffed100f0249fd RSI: 0000000000000000 RDI: ffff888078124fe0 [ 193.803385][ T8477] RBP: 0000000000000008 R08: 0000000000000001 R09: ffffed100f0249fc [ 193.803405][ T8477] R10: ffff888078124fe7 R11: 0000000000000001 R12: 0000000000000000 [ 193.803426][ T8477] R13: ffff888078124fe0 R14: 0000000000000000 R15: 0000000000000008 [ 193.803454][ T8477] _copy_from_user+0x98/0xd0 [ 193.803503][ T8477] sctp_setsockopt+0x2045/0xb870 [ 193.803549][ T8477] ? rcu_is_watching+0x12/0xc0 [ 193.803584][ T8477] ? __pfx_sctp_setsockopt+0x10/0x10 [ 193.803630][ T8477] ? rcu_is_watching+0x12/0xc0 [ 193.803666][ T8477] ? aa_sock_opt_perm+0xfd/0x1c0 [ 193.803704][ T8477] ? sock_common_setsockopt+0x2e/0xf0 [ 193.803752][ T8477] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 193.803804][ T8477] do_sock_setsockopt+0xf3/0x1d0 [ 193.803854][ T8477] __sys_setsockopt+0x120/0x1a0 [ 193.803894][ T8477] __x64_sys_setsockopt+0xbd/0x160 [ 193.803932][ T8477] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 193.803983][ T8477] do_syscall_64+0xcd/0x490 [ 193.804025][ T8477] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.804057][ T8477] RIP: 0033:0x7f5016d8ebe9 [ 193.804082][ T8477] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 193.804113][ T8477] RSP: 002b:00007f5017ca4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 193.804144][ T8477] RAX: ffffffffffffffda RBX: 00007f5016fb5fa0 RCX: 00007f5016d8ebe9 [ 193.804165][ T8477] RDX: 0000000000000081 RSI: 0000010000000084 RDI: 0000000000000003 [ 193.804185][ T8477] RBP: 00007f5016e11e19 R08: 0000000000000008 R09: 0000000000000000 [ 193.804205][ T8477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 193.804225][ T8477] R13: 00007f5016fb6038 R14: 00007f5016fb5fa0 R15: 00007fffc8ba1bc8 [ 193.804256][ T8477] [ 194.209079][ C1] vkms_vblank_simulate: vblank timer overrun [ 194.234514][ T8484] FAULT_INJECTION: forcing a failure. [ 194.234514][ T8484] name failslab, interval 1, probability 0, space 0, times 0 [ 194.247946][ T8484] CPU: 1 UID: 0 PID: 8484 Comm: syz.2.893 Not tainted syzkaller #0 PREEMPT(full) [ 194.247992][ T8484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 194.248014][ T8484] Call Trace: [ 194.248024][ T8484] [ 194.248035][ T8484] dump_stack_lvl+0x16c/0x1f0 [ 194.248087][ T8484] should_fail_ex+0x512/0x640 [ 194.248137][ T8484] should_failslab+0xc2/0x120 [ 194.248181][ T8484] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 194.248221][ T8484] ? dup_fd+0x4e/0xb90 [ 194.248254][ T8484] ? do_futex+0x122/0x350 [ 194.248297][ T8484] dup_fd+0x4e/0xb90 [ 194.248328][ T8484] ? _raw_spin_unlock+0x28/0x50 [ 194.248362][ T8484] ? do_set_mempolicy+0x220/0x480 [ 194.248420][ T8484] __do_sys_close_range+0x4ca/0x730 [ 194.248460][ T8484] ? __pfx___do_sys_close_range+0x10/0x10 [ 194.248504][ T8484] do_syscall_64+0xcd/0x490 [ 194.248548][ T8484] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.248580][ T8484] RIP: 0033:0x7f167bf8ebe9 [ 194.248604][ T8484] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 194.248637][ T8484] RSP: 002b:00007f167cd72038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 194.248670][ T8484] RAX: ffffffffffffffda RBX: 00007f167c1b5fa0 RCX: 00007f167bf8ebe9 [ 194.248691][ T8484] RDX: 0000000000000002 RSI: fffffffffffff000 RDI: 0000000000000000 [ 194.248712][ T8484] RBP: 00007f167c011e19 R08: 0000000000000000 R09: 0000000000000000 [ 194.248732][ T8484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 194.248751][ T8484] R13: 00007f167c1b6038 R14: 00007f167c1b5fa0 R15: 00007ffc455e85b8 [ 194.248782][ T8484] [ 194.413213][ C1] vkms_vblank_simulate: vblank timer overrun [ 194.421660][ T8484] FAULT_INJECTION: forcing a failure. [ 194.421660][ T8484] name failslab, interval 1, probability 0, space 0, times 0 [ 194.434461][ T8484] CPU: 1 UID: 0 PID: 8484 Comm: syz.2.893 Not tainted syzkaller #0 PREEMPT(full) [ 194.434508][ T8484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 194.434528][ T8484] Call Trace: [ 194.434539][ T8484] [ 194.434549][ T8484] dump_stack_lvl+0x16c/0x1f0 [ 194.434596][ T8484] should_fail_ex+0x512/0x640 [ 194.434645][ T8484] should_failslab+0xc2/0x120 [ 194.434688][ T8484] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 194.434727][ T8484] ? dup_fd+0x4e/0xb90 [ 194.434764][ T8484] dup_fd+0x4e/0xb90 [ 194.434797][ T8484] ? rcu_is_watching+0x12/0xc0 [ 194.434835][ T8484] ksys_unshare+0x831/0xa40 [ 194.434888][ T8484] ? __pfx_ksys_unshare+0x10/0x10 [ 194.434934][ T8484] ? xfd_validate_state+0x61/0x180 [ 194.434987][ T8484] __x64_sys_unshare+0x31/0x40 [ 194.435032][ T8484] do_syscall_64+0xcd/0x490 [ 194.435077][ T8484] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.435109][ T8484] RIP: 0033:0x7f167bf8ebe9 [ 194.435134][ T8484] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 194.435166][ T8484] RSP: 002b:00007f167cd72038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 194.435197][ T8484] RAX: ffffffffffffffda RBX: 00007f167c1b5fa0 RCX: 00007f167bf8ebe9 [ 194.435218][ T8484] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000400 [ 194.435239][ T8484] RBP: 00007f167c011e19 R08: 0000000000000000 R09: 0000000000000000 [ 194.435260][ T8484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 194.435279][ T8484] R13: 00007f167c1b6038 R14: 00007f167c1b5fa0 R15: 00007ffc455e85b8 [ 194.435311][ T8484] [ 194.602729][ C1] vkms_vblank_simulate: vblank timer overrun [ 194.813922][ T8496] netlink: 8 bytes leftover after parsing attributes in process `syz.1.898'. [ 194.853649][ T8496] netlink: 8 bytes leftover after parsing attributes in process `syz.1.898'. [ 194.897040][ T8498] zswap: compressor 000 not available [ 195.004006][ T8505] netlink: 'syz.0.901': attribute type 27 has an invalid length. [ 195.063104][ T8505] netlink: 334 bytes leftover after parsing attributes in process `syz.0.901'. [ 195.168393][ T8514] 0x000200000001-0xa29656a63616329 : "" [ 195.176084][ T8514] mtd: partition "" is out of reach -- disabled [ 195.201634][ T8514] ftl_cs: FTL header not found. [ 195.799005][ T8520] FAULT_INJECTION: forcing a failure. [ 195.799005][ T8520] name failslab, interval 1, probability 0, space 0, times 0 [ 195.829589][ T8520] CPU: 0 UID: 0 PID: 8520 Comm: syz.1.914 Not tainted syzkaller #0 PREEMPT(full) [ 195.829634][ T8520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 195.829655][ T8520] Call Trace: [ 195.829666][ T8520] [ 195.829677][ T8520] dump_stack_lvl+0x16c/0x1f0 [ 195.829724][ T8520] should_fail_ex+0x512/0x640 [ 195.829773][ T8520] ? mpi_alloc_limb_space+0x31/0x60 [ 195.829807][ T8520] should_failslab+0xc2/0x120 [ 195.829849][ T8520] __kmalloc_noprof+0xd2/0x510 [ 195.829890][ T8520] mpi_alloc_limb_space+0x31/0x60 [ 195.829925][ T8520] mpi_alloc+0x199/0x230 [ 195.829955][ T8520] ? mpi_free+0x14/0x160 [ 195.829986][ T8520] mpi_read_raw_data+0x133/0x4a0 [ 195.830036][ T8520] ? rsa_free_mpi_key+0x15a/0x3a0 [ 195.830072][ T8520] rsa_set_pub_key+0x110/0x270 [ 195.830108][ T8520] ? __pfx_rsa_set_pub_key+0x10/0x10 [ 195.830151][ T8520] ? __asan_memcpy+0x3c/0x60 [ 195.830186][ T8520] rsassa_pkcs1_set_pub_key+0xcb/0x1f0 [ 195.830230][ T8520] public_key_verify_signature+0x779/0x970 [ 195.830275][ T8520] ? __pfx_public_key_verify_signature+0x10/0x10 [ 195.830324][ T8520] x509_check_for_self_signed+0x31a/0x500 [ 195.830365][ T8520] x509_cert_parse+0x5f8/0x900 [ 195.830397][ T8520] ? kasan_save_stack+0x42/0x60 [ 195.830432][ T8520] ? kasan_save_stack+0x33/0x60 [ 195.830468][ T8520] ? kasan_save_track+0x14/0x30 [ 195.830507][ T8520] pkcs7_extract_cert+0xa4/0x320 [ 195.830550][ T8520] asn1_ber_decoder+0xc5f/0x1df0 [ 195.830608][ T8520] ? __pfx_asn1_ber_decoder+0x10/0x10 [ 195.830674][ T8520] pkcs7_parse_message+0x288/0x720 [ 195.830717][ T8520] verify_pkcs7_signature+0x30/0xa0 [ 195.830766][ T8520] valid_regdb+0x211/0x590 [ 195.830804][ T8520] ? __pfx___mutex_lock+0x10/0x10 [ 195.830856][ T8520] ? __pfx_valid_regdb+0x10/0x10 [ 195.830899][ T8520] reg_reload_regdb+0x11a/0x460 [ 195.830944][ T8520] ? __pfx_reg_reload_regdb+0x10/0x10 [ 195.830993][ T8520] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 195.831025][ T8520] ? nl80211_pre_doit+0x1b0/0xb10 [ 195.831060][ T8520] genl_family_rcv_msg_doit+0x206/0x2f0 [ 195.831112][ T8520] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 195.831162][ T8520] ? rcu_is_watching+0x12/0xc0 [ 195.831200][ T8520] ? bpf_lsm_capable+0x9/0x10 [ 195.831230][ T8520] ? security_capable+0x7e/0x260 [ 195.831273][ T8520] genl_rcv_msg+0x55c/0x800 [ 195.831321][ T8520] ? __pfx_genl_rcv_msg+0x10/0x10 [ 195.831382][ T8520] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 195.831412][ T8520] ? __pfx_nl80211_reload_regdb+0x10/0x10 [ 195.831454][ T8520] ? __pfx_nl80211_post_doit+0x10/0x10 [ 195.831507][ T8520] netlink_rcv_skb+0x155/0x420 [ 195.831549][ T8520] ? __pfx_genl_rcv_msg+0x10/0x10 [ 195.831598][ T8520] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 195.831650][ T8520] ? netlink_deliver_tap+0x1ae/0xd30 [ 195.831693][ T8520] genl_rcv+0x28/0x40 [ 195.831736][ T8520] netlink_unicast+0x5aa/0x870 [ 195.831781][ T8520] ? __pfx_netlink_unicast+0x10/0x10 [ 195.831824][ T8520] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 195.831873][ T8520] netlink_sendmsg+0x8d1/0xdd0 [ 195.831919][ T8520] ? __pfx_netlink_sendmsg+0x10/0x10 [ 195.831964][ T8520] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 195.832000][ T8520] ____sys_sendmsg+0xa95/0xc70 [ 195.832052][ T8520] ? copy_msghdr_from_user+0x10a/0x160 [ 195.832094][ T8520] ? __pfx_____sys_sendmsg+0x10/0x10 [ 195.832151][ T8520] ? __pfx_futex_wake_mark+0x10/0x10 [ 195.832201][ T8520] ___sys_sendmsg+0x134/0x1d0 [ 195.832241][ T8520] ? __pfx____sys_sendmsg+0x10/0x10 [ 195.832289][ T8520] ? futex_private_hash_put+0x11c/0x300 [ 195.832332][ T8520] ? rcu_is_watching+0x12/0xc0 [ 195.832376][ T8520] __sys_sendmsg+0x16d/0x220 [ 195.832415][ T8520] ? __pfx___sys_sendmsg+0x10/0x10 [ 195.832454][ T8520] ? __x64_sys_futex+0x1e0/0x4c0 [ 195.832506][ T8520] do_syscall_64+0xcd/0x490 [ 195.832550][ T8520] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.832583][ T8520] RIP: 0033:0x7f899658ebe9 [ 195.832608][ T8520] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 195.832640][ T8520] RSP: 002b:00007f89947f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 195.832673][ T8520] RAX: ffffffffffffffda RBX: 00007f89967b5fa0 RCX: 00007f899658ebe9 [ 195.832694][ T8520] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000005 [ 195.832714][ T8520] RBP: 00007f8996611e19 R08: 0000000000000000 R09: 0000000000000000 [ 195.832733][ T8520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 195.832753][ T8520] R13: 00007f89967b6038 R14: 00007f89967b5fa0 R15: 00007fff2a644078 [ 195.832784][ T8520] [ 197.547839][ T8566] FAULT_INJECTION: forcing a failure. [ 197.547839][ T8566] name failslab, interval 1, probability 0, space 0, times 0 [ 197.581674][ T8566] CPU: 0 UID: 0 PID: 8566 Comm: syz.4.920 Not tainted syzkaller #0 PREEMPT(full) [ 197.581719][ T8566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 197.581737][ T8566] Call Trace: [ 197.581748][ T8566] [ 197.581760][ T8566] dump_stack_lvl+0x16c/0x1f0 [ 197.581807][ T8566] should_fail_ex+0x512/0x640 [ 197.581857][ T8566] ? mpi_alloc_limb_space+0x31/0x60 [ 197.581892][ T8566] should_failslab+0xc2/0x120 [ 197.581932][ T8566] __kmalloc_noprof+0xd2/0x510 [ 197.581972][ T8566] mpi_alloc_limb_space+0x31/0x60 [ 197.582006][ T8566] mpi_alloc+0x199/0x230 [ 197.582036][ T8566] ? mpi_free+0x14/0x160 [ 197.582067][ T8566] mpi_read_raw_data+0x133/0x4a0 [ 197.582119][ T8566] rsa_set_pub_key+0x149/0x270 [ 197.582154][ T8566] ? __pfx_rsa_set_pub_key+0x10/0x10 [ 197.582197][ T8566] ? __asan_memcpy+0x3c/0x60 [ 197.582232][ T8566] rsassa_pkcs1_set_pub_key+0xcb/0x1f0 [ 197.582276][ T8566] public_key_verify_signature+0x779/0x970 [ 197.582313][ T8566] ? __pfx_public_key_verify_signature+0x10/0x10 [ 197.582364][ T8566] x509_check_for_self_signed+0x31a/0x500 [ 197.582414][ T8566] x509_cert_parse+0x5f8/0x900 [ 197.582446][ T8566] ? kasan_save_stack+0x42/0x60 [ 197.582480][ T8566] ? kasan_save_stack+0x33/0x60 [ 197.582515][ T8566] ? kasan_save_track+0x14/0x30 [ 197.582553][ T8566] pkcs7_extract_cert+0xa4/0x320 [ 197.582593][ T8566] asn1_ber_decoder+0xc5f/0x1df0 [ 197.582652][ T8566] ? __pfx_asn1_ber_decoder+0x10/0x10 [ 197.582717][ T8566] pkcs7_parse_message+0x288/0x720 [ 197.582759][ T8566] verify_pkcs7_signature+0x30/0xa0 [ 197.582805][ T8566] valid_regdb+0x211/0x590 [ 197.582843][ T8566] ? __pfx___mutex_lock+0x10/0x10 [ 197.582886][ T8566] ? __pfx_valid_regdb+0x10/0x10 [ 197.582928][ T8566] reg_reload_regdb+0x11a/0x460 [ 197.582974][ T8566] ? __pfx_reg_reload_regdb+0x10/0x10 [ 197.583021][ T8566] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 197.583054][ T8566] ? nl80211_pre_doit+0x1b0/0xb10 [ 197.583089][ T8566] genl_family_rcv_msg_doit+0x206/0x2f0 [ 197.583143][ T8566] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 197.583192][ T8566] ? rcu_is_watching+0x12/0xc0 [ 197.583231][ T8566] ? bpf_lsm_capable+0x9/0x10 [ 197.583261][ T8566] ? security_capable+0x7e/0x260 [ 197.583296][ T8566] genl_rcv_msg+0x55c/0x800 [ 197.583346][ T8566] ? __pfx_genl_rcv_msg+0x10/0x10 [ 197.583405][ T8566] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 197.583438][ T8566] ? __pfx_nl80211_reload_regdb+0x10/0x10 [ 197.583480][ T8566] ? __pfx_nl80211_post_doit+0x10/0x10 [ 197.583533][ T8566] netlink_rcv_skb+0x155/0x420 [ 197.583576][ T8566] ? __pfx_genl_rcv_msg+0x10/0x10 [ 197.583624][ T8566] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 197.583676][ T8566] ? netlink_deliver_tap+0x1ae/0xd30 [ 197.583720][ T8566] genl_rcv+0x28/0x40 [ 197.583763][ T8566] netlink_unicast+0x5aa/0x870 [ 197.583809][ T8566] ? __pfx_netlink_unicast+0x10/0x10 [ 197.583853][ T8566] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 197.583904][ T8566] netlink_sendmsg+0x8d1/0xdd0 [ 197.583951][ T8566] ? __pfx_netlink_sendmsg+0x10/0x10 [ 197.583997][ T8566] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 197.584035][ T8566] ____sys_sendmsg+0xa95/0xc70 [ 197.584086][ T8566] ? copy_msghdr_from_user+0x10a/0x160 [ 197.584127][ T8566] ? __pfx_____sys_sendmsg+0x10/0x10 [ 197.584184][ T8566] ? __pfx_futex_wake_mark+0x10/0x10 [ 197.584236][ T8566] ___sys_sendmsg+0x134/0x1d0 [ 197.584278][ T8566] ? __pfx____sys_sendmsg+0x10/0x10 [ 197.584320][ T8566] ? futex_private_hash_put+0x11c/0x300 [ 197.584365][ T8566] ? rcu_is_watching+0x12/0xc0 [ 197.584422][ T8566] __sys_sendmsg+0x16d/0x220 [ 197.584467][ T8566] ? __pfx___sys_sendmsg+0x10/0x10 [ 197.584507][ T8566] ? __x64_sys_futex+0x1e0/0x4c0 [ 197.584549][ T8566] do_syscall_64+0xcd/0x490 [ 197.584581][ T8566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.584605][ T8566] RIP: 0033:0x7f5016d8ebe9 [ 197.584623][ T8566] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 197.584646][ T8566] RSP: 002b:00007f5017ca4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 197.584668][ T8566] RAX: ffffffffffffffda RBX: 00007f5016fb5fa0 RCX: 00007f5016d8ebe9 [ 197.584684][ T8566] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000005 [ 197.584699][ T8566] RBP: 00007f5016e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 197.584713][ T8566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 197.584727][ T8566] R13: 00007f5016fb6038 R14: 00007f5016fb5fa0 R15: 00007fffc8ba1bc8 [ 197.584750][ T8566] [ 198.338349][ T8579] FAULT_INJECTION: forcing a failure. [ 198.338349][ T8579] name failslab, interval 1, probability 0, space 0, times 0 [ 198.397059][ T8579] CPU: 1 UID: 0 PID: 8579 Comm: syz.1.929 Not tainted syzkaller #0 PREEMPT(full) [ 198.397113][ T8579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 198.397134][ T8579] Call Trace: [ 198.397144][ T8579] [ 198.397156][ T8579] dump_stack_lvl+0x16c/0x1f0 [ 198.397203][ T8579] should_fail_ex+0x512/0x640 [ 198.397254][ T8579] should_failslab+0xc2/0x120 [ 198.397299][ T8579] __kvmalloc_node_noprof+0x137/0x620 [ 198.397336][ T8579] ? lock_release+0x201/0x2f0 [ 198.397379][ T8579] ? tap_open+0x385/0x1170 [ 198.397416][ T8579] ? tap_open+0x385/0x1170 [ 198.397450][ T8579] tap_open+0x385/0x1170 [ 198.397486][ T8579] ? __pfx_tap_open+0x10/0x10 [ 198.397521][ T8579] chrdev_open+0x231/0x6a0 [ 198.397563][ T8579] ? __pfx_apparmor_file_open+0x10/0x10 [ 198.397599][ T8579] ? __pfx_chrdev_open+0x10/0x10 [ 198.397645][ T8579] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 198.397687][ T8579] do_dentry_open+0x97f/0x1530 [ 198.397728][ T8579] ? __pfx_chrdev_open+0x10/0x10 [ 198.397773][ T8579] vfs_open+0x82/0x3f0 [ 198.397825][ T8579] path_openat+0x1de4/0x2cb0 [ 198.397868][ T8579] ? __pfx_path_openat+0x10/0x10 [ 198.397914][ T8579] do_filp_open+0x20b/0x470 [ 198.397953][ T8579] ? __pfx_do_filp_open+0x10/0x10 [ 198.398005][ T8579] ? alloc_fd+0x471/0x7d0 [ 198.398044][ T8579] do_sys_openat2+0x11b/0x1d0 [ 198.398107][ T8579] ? __pfx_do_sys_openat2+0x10/0x10 [ 198.398160][ T8579] ? rcu_is_watching+0x12/0xc0 [ 198.398199][ T8579] __x64_sys_openat+0x174/0x210 [ 198.398250][ T8579] ? __pfx___x64_sys_openat+0x10/0x10 [ 198.398309][ T8579] do_syscall_64+0xcd/0x490 [ 198.398355][ T8579] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.398389][ T8579] RIP: 0033:0x7f899658ebe9 [ 198.398415][ T8579] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 198.398448][ T8579] RSP: 002b:00007f89947f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 198.398480][ T8579] RAX: ffffffffffffffda RBX: 00007f89967b5fa0 RCX: 00007f899658ebe9 [ 198.398502][ T8579] RDX: 0000000000000041 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 198.398523][ T8579] RBP: 00007f8996611e19 R08: 0000000000000000 R09: 0000000000000000 [ 198.398544][ T8579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 198.398563][ T8579] R13: 00007f89967b6038 R14: 00007f89967b5fa0 R15: 00007fff2a644078 [ 198.398596][ T8579] [ 198.877813][ T8589] FAULT_INJECTION: forcing a failure. [ 198.877813][ T8589] name failslab, interval 1, probability 0, space 0, times 0 [ 198.924459][ T8589] CPU: 0 UID: 0 PID: 8589 Comm: syz.1.931 Not tainted syzkaller #0 PREEMPT(full) [ 198.924505][ T8589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 198.924526][ T8589] Call Trace: [ 198.924537][ T8589] [ 198.924549][ T8589] dump_stack_lvl+0x16c/0x1f0 [ 198.924596][ T8589] should_fail_ex+0x512/0x640 [ 198.924645][ T8589] should_failslab+0xc2/0x120 [ 198.924690][ T8589] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 198.924731][ T8589] ? idr_alloc_cyclic+0x174/0x230 [ 198.924770][ T8589] ? kstrdup_const+0x63/0x80 [ 198.924813][ T8589] kstrdup+0x53/0x100 [ 198.924850][ T8589] kstrdup_const+0x63/0x80 [ 198.924891][ T8589] __kernfs_new_node+0x9b/0x8e0 [ 198.924933][ T8589] ? rcu_is_watching+0x12/0xc0 [ 198.924966][ T8589] ? __pfx___kernfs_new_node+0x10/0x10 [ 198.925005][ T8589] ? __pfx___might_resched+0x10/0x10 [ 198.925038][ T8589] ? rcu_is_watching+0x12/0xc0 [ 198.925070][ T8589] ? kernfs_root+0xee/0x2a0 [ 198.925121][ T8589] ? rcu_is_watching+0x12/0xc0 [ 198.925155][ T8589] ? lock_release+0x201/0x2f0 [ 198.925201][ T8589] kernfs_new_node+0x13c/0x1e0 [ 198.925248][ T8589] ? rcu_is_watching+0x12/0xc0 [ 198.925282][ T8589] kernfs_create_link+0xcc/0x240 [ 198.925315][ T8589] sysfs_do_create_link_sd+0x90/0x140 [ 198.925358][ T8589] sysfs_create_link+0x61/0xc0 [ 198.925397][ T8589] device_add+0x62c/0x1aa0 [ 198.925428][ T8589] ? __pfx_device_add+0x10/0x10 [ 198.925459][ T8589] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 198.925508][ T8589] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 198.925550][ T8589] wiphy_register+0x1df4/0x29f0 [ 198.925595][ T8589] ? netdev_run_todo+0x864/0x1320 [ 198.925642][ T8589] ? __dev_printk+0x190/0x270 [ 198.925684][ T8589] ? __pfx_wiphy_register+0x10/0x10 [ 198.925735][ T8589] ? ieee80211_init_rate_ctrl_alg+0x125/0x6b0 [ 198.925783][ T8589] ieee80211_register_hw+0x24a9/0x4060 [ 198.925835][ T8589] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 198.925884][ T8589] ? net_generic+0xea/0x2a0 [ 198.925928][ T8589] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 198.925976][ T8589] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 198.926019][ T8589] ? __hrtimer_setup+0x176/0x280 [ 198.926069][ T8589] mac80211_hwsim_new_radio+0x3034/0x54d0 [ 198.926123][ T8589] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 198.926163][ T8589] hwsim_new_radio_nl+0xb51/0x12c0 [ 198.926197][ T8589] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 198.926236][ T8589] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 198.926299][ T8589] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 198.926358][ T8589] genl_family_rcv_msg_doit+0x206/0x2f0 [ 198.926409][ T8589] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 198.926468][ T8589] ? bpf_lsm_capable+0x9/0x10 [ 198.926498][ T8589] ? security_capable+0x7e/0x260 [ 198.926530][ T8589] ? ns_capable+0xd7/0x110 [ 198.926565][ T8589] genl_rcv_msg+0x55c/0x800 [ 198.926617][ T8589] ? __pfx_genl_rcv_msg+0x10/0x10 [ 198.926667][ T8589] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 198.926706][ T8589] netlink_rcv_skb+0x155/0x420 [ 198.926749][ T8589] ? __pfx_genl_rcv_msg+0x10/0x10 [ 198.926799][ T8589] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 198.926851][ T8589] ? netlink_deliver_tap+0x1ae/0xd30 [ 198.926895][ T8589] genl_rcv+0x28/0x40 [ 198.926939][ T8589] netlink_unicast+0x5aa/0x870 [ 198.926985][ T8589] ? __pfx_netlink_unicast+0x10/0x10 [ 198.927028][ T8589] ? __pfx___might_resched+0x10/0x10 [ 198.927068][ T8589] netlink_sendmsg+0x8d1/0xdd0 [ 198.927125][ T8589] ? __pfx_netlink_sendmsg+0x10/0x10 [ 198.927171][ T8589] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 198.927210][ T8589] ____sys_sendmsg+0xa95/0xc70 [ 198.927263][ T8589] ? copy_msghdr_from_user+0x10a/0x160 [ 198.927305][ T8589] ? __pfx_____sys_sendmsg+0x10/0x10 [ 198.927363][ T8589] ? __pfx_futex_wake_mark+0x10/0x10 [ 198.927415][ T8589] ___sys_sendmsg+0x134/0x1d0 [ 198.927456][ T8589] ? __pfx____sys_sendmsg+0x10/0x10 [ 198.927498][ T8589] ? futex_private_hash_put+0x11c/0x300 [ 198.927543][ T8589] ? rcu_is_watching+0x12/0xc0 [ 198.927590][ T8589] __sys_sendmsg+0x16d/0x220 [ 198.927633][ T8589] ? __pfx___sys_sendmsg+0x10/0x10 [ 198.927674][ T8589] ? __x64_sys_futex+0x1e0/0x4c0 [ 198.927728][ T8589] do_syscall_64+0xcd/0x490 [ 198.927774][ T8589] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.927808][ T8589] RIP: 0033:0x7f899658ebe9 [ 198.927833][ T8589] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 198.927866][ T8589] RSP: 002b:00007f89947f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 198.927907][ T8589] RAX: ffffffffffffffda RBX: 00007f89967b5fa0 RCX: 00007f899658ebe9 [ 198.927929][ T8589] RDX: 00000000040000c0 RSI: 0000200000000300 RDI: 0000000000000005 [ 198.927951][ T8589] RBP: 00007f8996611e19 R08: 0000000000000000 R09: 0000000000000000 [ 198.927972][ T8589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 198.927990][ T8589] R13: 00007f89967b6038 R14: 00007f89967b5fa0 R15: 00007fff2a644078 [ 198.928021][ T8589] [ 200.002840][ T8603] netlink: 'syz.2.936': attribute type 19 has an invalid length. [ 200.011768][ T8607] netlink: 330 bytes leftover after parsing attributes in process `syz.1.945'. [ 200.066048][ T8603] netlink: 334 bytes leftover after parsing attributes in process `syz.2.936'. [ 200.146643][ T8611] loop6: detected capacity change from 0 to 8 [ 200.943807][ T8626] ================================================================== [ 200.951952][ T8626] BUG: KASAN: slab-use-after-free in dvb_device_open+0x36a/0x3b0 [ 200.959756][ T8626] Read of size 8 at addr ffff888140e8e018 by task syz.2.941/8626 [ 200.967611][ T8626] [ 200.969994][ T8626] CPU: 0 UID: 0 PID: 8626 Comm: syz.2.941 Not tainted syzkaller #0 PREEMPT(full) [ 200.970038][ T8626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 200.970058][ T8626] Call Trace: [ 200.970069][ T8626] [ 200.970082][ T8626] dump_stack_lvl+0x116/0x1f0 [ 200.970130][ T8626] print_report+0xcd/0x630 [ 200.970174][ T8626] ? __virt_addr_valid+0x81/0x610 [ 200.970216][ T8626] ? __phys_addr+0xe8/0x180 [ 200.970259][ T8626] ? dvb_device_open+0x36a/0x3b0 [ 200.970304][ T8626] kasan_report+0xe0/0x110 [ 200.970346][ T8626] ? dvb_device_open+0x36a/0x3b0 [ 200.970395][ T8626] ? __pfx_dvb_device_open+0x10/0x10 [ 200.970443][ T8626] dvb_device_open+0x36a/0x3b0 [ 200.970491][ T8626] ? __pfx_dvb_device_open+0x10/0x10 [ 200.970536][ T8626] chrdev_open+0x231/0x6a0 [ 200.970580][ T8626] ? __pfx_apparmor_file_open+0x10/0x10 [ 200.970617][ T8626] ? __pfx_chrdev_open+0x10/0x10 [ 200.970662][ T8626] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 200.970706][ T8626] do_dentry_open+0x97f/0x1530 [ 200.970748][ T8626] ? __pfx_chrdev_open+0x10/0x10 [ 200.970796][ T8626] vfs_open+0x82/0x3f0 [ 200.970843][ T8626] path_openat+0x1de4/0x2cb0 [ 200.970887][ T8626] ? __pfx_path_openat+0x10/0x10 [ 200.970945][ T8626] do_filp_open+0x20b/0x470 [ 200.970987][ T8626] ? __pfx_do_filp_open+0x10/0x10 [ 200.971043][ T8626] ? alloc_fd+0x471/0x7d0 [ 200.971092][ T8626] do_sys_openat2+0x11b/0x1d0 [ 200.971144][ T8626] ? __pfx_do_sys_openat2+0x10/0x10 [ 200.971195][ T8626] ? __pfx_do_sys_openat2+0x10/0x10 [ 200.971249][ T8626] ? __pfx___might_resched+0x10/0x10 [ 200.971288][ T8626] __x64_sys_openat+0x174/0x210 [ 200.971342][ T8626] ? __pfx___x64_sys_openat+0x10/0x10 [ 200.971405][ T8626] do_syscall_64+0xcd/0x490 [ 200.971451][ T8626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.971487][ T8626] RIP: 0033:0x7f167bf8ebe9 [ 200.971514][ T8626] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 200.971548][ T8626] RSP: 002b:00007f167cd72038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 200.971579][ T8626] RAX: ffffffffffffffda RBX: 00007f167c1b5fa0 RCX: 00007f167bf8ebe9 [ 200.971600][ T8626] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 200.971621][ T8626] RBP: 00007f167c011e19 R08: 0000000000000000 R09: 0000000000000000 [ 200.971641][ T8626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 200.971660][ T8626] R13: 00007f167c1b6038 R14: 00007f167c1b5fa0 R15: 00007ffc455e85b8 [ 200.971690][ T8626] [ 200.971702][ T8626] [ 201.222917][ T8626] Allocated by task 1: [ 201.226995][ T8626] kasan_save_stack+0x33/0x60 [ 201.231709][ T8626] kasan_save_track+0x14/0x30 [ 201.236423][ T8626] __kasan_kmalloc+0xaa/0xb0 [ 201.241054][ T8626] dvb_register_device+0x1e4/0x2370 [ 201.246287][ T8626] dvb_register_frontend+0x5a6/0x880 [ 201.251601][ T8626] vidtv_bridge_probe+0x459/0xa90 [ 201.256669][ T8626] platform_probe+0x106/0x1d0 [ 201.261454][ T8626] really_probe+0x23e/0xa90 [ 201.265993][ T8626] __driver_probe_device+0x1de/0x440 [ 201.271309][ T8626] driver_probe_device+0x4c/0x1b0 [ 201.276367][ T8626] __driver_attach+0x283/0x580 [ 201.281175][ T8626] bus_for_each_dev+0x13b/0x1d0 [ 201.286060][ T8626] bus_add_driver+0x2e9/0x690 [ 201.290767][ T8626] driver_register+0x15c/0x4b0 [ 201.295565][ T8626] vidtv_bridge_init+0x45/0x80 [ 201.300361][ T8626] do_one_initcall+0x120/0x6e0 [ 201.305234][ T8626] kernel_init_freeable+0x5c2/0x910 [ 201.310470][ T8626] kernel_init+0x1c/0x2b0 [ 201.314835][ T8626] ret_from_fork+0x5d4/0x6f0 [ 201.319458][ T8626] ret_from_fork_asm+0x1a/0x30 [ 201.324246][ T8626] [ 201.326580][ T8626] Freed by task 8399: [ 201.330577][ T8626] kasan_save_stack+0x33/0x60 [ 201.335294][ T8626] kasan_save_track+0x14/0x30 [ 201.340081][ T8626] kasan_save_free_info+0x3b/0x60 [ 201.345185][ T8626] __kasan_slab_free+0x60/0x70 [ 201.350019][ T8626] kfree+0x2b4/0x4d0 [ 201.353970][ T8626] dvb_device_put.part.0+0x60/0x90 [ 201.359133][ T8626] dvb_device_open+0x2a4/0x3b0 [ 201.363943][ T8626] chrdev_open+0x231/0x6a0 [ 201.368409][ T8626] do_dentry_open+0x97f/0x1530 [ 201.373238][ T8626] vfs_open+0x82/0x3f0 [ 201.377349][ T8626] path_openat+0x1de4/0x2cb0 [ 201.382028][ T8626] do_filp_open+0x20b/0x470 [ 201.386555][ T8626] do_sys_openat2+0x11b/0x1d0 [ 201.391272][ T8626] __x64_sys_openat+0x174/0x210 [ 201.396171][ T8626] do_syscall_64+0xcd/0x490 [ 201.400707][ T8626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.406652][ T8626] [ 201.408987][ T8626] The buggy address belongs to the object at ffff888140e8e000 [ 201.408987][ T8626] which belongs to the cache kmalloc-256 of size 256 [ 201.423158][ T8626] The buggy address is located 24 bytes inside of [ 201.423158][ T8626] freed 256-byte region [ffff888140e8e000, ffff888140e8e100) [ 201.436955][ T8626] [ 201.439291][ T8626] The buggy address belongs to the physical page: [ 201.445727][ T8626] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x140e8e [ 201.454600][ T8626] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 201.463130][ T8626] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff) [ 201.470799][ T8626] page_type: f5(slab) [ 201.474805][ T8626] raw: 057ff00000000040 ffff88801b841b40 dead000000000122 0000000000000000 [ 201.483408][ T8626] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 201.492015][ T8626] head: 057ff00000000040 ffff88801b841b40 dead000000000122 0000000000000000 [ 201.500803][ T8626] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 201.509512][ T8626] head: 057ff00000000001 ffffea000503a381 00000000ffffffff 00000000ffffffff [ 201.518208][ T8626] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 201.526890][ T8626] page dumped because: kasan: bad access detected [ 201.533326][ T8626] page_owner tracks the page as allocated [ 201.539049][ T8626] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 25904957108, free_ts 0 [ 201.558788][ T8626] post_alloc_hook+0x1c0/0x230 [ 201.563586][ T8626] get_page_from_freelist+0x132b/0x38e0 [ 201.569160][ T8626] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 201.575089][ T8626] alloc_pages_mpol+0x1fb/0x550 [ 201.579978][ T8626] new_slab+0x247/0x330 [ 201.584155][ T8626] ___slab_alloc+0xcf2/0x1740 [ 201.588856][ T8626] __slab_alloc.constprop.0+0x56/0xb0 [ 201.594253][ T8626] __kmalloc_cache_noprof+0xfb/0x3e0 [ 201.599561][ T8626] dvb_register_device+0x1e4/0x2370 [ 201.604791][ T8626] dvb_register_frontend+0x5a6/0x880 [ 201.610124][ T8626] vidtv_bridge_probe+0x459/0xa90 [ 201.615183][ T8626] platform_probe+0x106/0x1d0 [ 201.619895][ T8626] really_probe+0x23e/0xa90 [ 201.624514][ T8626] __driver_probe_device+0x1de/0x440 [ 201.629831][ T8626] driver_probe_device+0x4c/0x1b0 [ 201.634884][ T8626] __driver_attach+0x283/0x580 [ 201.639682][ T8626] page_owner free stack trace missing [ 201.645058][ T8626] [ 201.647494][ T8626] Memory state around the buggy address: [ 201.653144][ T8626] ffff888140e8df00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 201.661244][ T8626] ffff888140e8df80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 201.669335][ T8626] >ffff888140e8e000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 201.677423][ T8626] ^ [ 201.682285][ T8626] ffff888140e8e080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 201.690363][ T8626] ffff888140e8e100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 201.698458][ T8626] ================================================================== [ 201.744951][ T8626] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 201.752227][ T8626] CPU: 1 UID: 0 PID: 8626 Comm: syz.2.941 Not tainted syzkaller #0 PREEMPT(full) [ 201.761468][ T8626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 201.771554][ T8626] Call Trace: [ 201.774875][ T8626] [ 201.777846][ T8626] dump_stack_lvl+0x3d/0x1f0 [ 201.782484][ T8626] vpanic+0x6e8/0x7a0 [ 201.786507][ T8626] ? __pfx_vpanic+0x10/0x10 [ 201.791062][ T8626] ? __pfx_vprintk_emit+0x10/0x10 [ 201.796130][ T8626] ? dvb_device_open+0x36a/0x3b0 [ 201.801121][ T8626] panic+0xca/0xd0 [ 201.804881][ T8626] ? __pfx_panic+0x10/0x10 [ 201.809358][ T8626] ? dvb_device_open+0x36a/0x3b0 [ 201.814330][ T8626] ? preempt_schedule_common+0x44/0xc0 [ 201.819819][ T8626] ? preempt_schedule_thunk+0x16/0x30 [ 201.825302][ T8626] check_panic_on_warn+0xab/0xb0 [ 201.830314][ T8626] end_report+0x107/0x170 [ 201.834687][ T8626] kasan_report+0xee/0x110 [ 201.839139][ T8626] ? dvb_device_open+0x36a/0x3b0 [ 201.844130][ T8626] ? __pfx_dvb_device_open+0x10/0x10 [ 201.849552][ T8626] dvb_device_open+0x36a/0x3b0 [ 201.854376][ T8626] ? __pfx_dvb_device_open+0x10/0x10 [ 201.859714][ T8626] chrdev_open+0x231/0x6a0 [ 201.864178][ T8626] ? __pfx_apparmor_file_open+0x10/0x10 [ 201.869761][ T8626] ? __pfx_chrdev_open+0x10/0x10 [ 201.874770][ T8626] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 201.881219][ T8626] do_dentry_open+0x97f/0x1530 [ 201.886103][ T8626] ? __pfx_chrdev_open+0x10/0x10 [ 201.891077][ T8626] vfs_open+0x82/0x3f0 [ 201.895189][ T8626] path_openat+0x1de4/0x2cb0 [ 201.899896][ T8626] ? __pfx_path_openat+0x10/0x10 [ 201.904905][ T8626] do_filp_open+0x20b/0x470 [ 201.909453][ T8626] ? __pfx_do_filp_open+0x10/0x10 [ 201.914541][ T8626] ? alloc_fd+0x471/0x7d0 [ 201.918913][ T8626] do_sys_openat2+0x11b/0x1d0 [ 201.923672][ T8626] ? __pfx_do_sys_openat2+0x10/0x10 [ 201.929048][ T8626] ? __pfx_do_sys_openat2+0x10/0x10 [ 201.934403][ T8626] ? __pfx___might_resched+0x10/0x10 [ 201.939728][ T8626] __x64_sys_openat+0x174/0x210 [ 201.944731][ T8626] ? __pfx___x64_sys_openat+0x10/0x10 [ 201.950156][ T8626] do_syscall_64+0xcd/0x490 [ 201.954699][ T8626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.960627][ T8626] RIP: 0033:0x7f167bf8ebe9 [ 201.965083][ T8626] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 201.984807][ T8626] RSP: 002b:00007f167cd72038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 201.993344][ T8626] RAX: ffffffffffffffda RBX: 00007f167c1b5fa0 RCX: 00007f167bf8ebe9 [ 202.001596][ T8626] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 202.009589][ T8626] RBP: 00007f167c011e19 R08: 0000000000000000 R09: 0000000000000000 [ 202.017575][ T8626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 202.025650][ T8626] R13: 00007f167c1b6038 R14: 00007f167c1b5fa0 R15: 00007ffc455e85b8 [ 202.033653][ T8626] [ 202.037077][ T8626] Kernel Offset: disabled [ 202.041414][ T8626] Rebooting in 86400 seconds..