last executing test programs: 2m38.846292706s ago: executing program 0 (id=1886): mmap$auto(0x0, 0x1e00, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010b27bd7000fcdbdf250500000008000300", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000084) read$auto(0x3, 0x0, 0x80) 2m38.704480682s ago: executing program 0 (id=1890): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, 0x0, 0x10004010) close_range$auto(0x2, 0x8000, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) socket(0x2, 0x1, 0x106) openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000000), 0x109002, 0x0) readv$auto(0x3, &(0x7f0000000040)={0x0, 0x36a}, 0x6) 2m38.482855997s ago: executing program 0 (id=1894): mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) select$auto(0x4, 0x0, &(0x7f0000000100)={[0x5, 0x1, 0x8, 0x8, 0x6, 0x9, 0x0, 0x5, 0xf8, 0xffffffffffff402e, 0x800, 0x60000000, 0x40, 0x4, 0x87, 0x4]}, 0x0, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x6, 0xd, 0xfffffffe, 0x6, 0x7fff, 0x8, 0xffffffffffffffff, [], {0x6, 0x10001, 0xb, 0x2de, 0x504, 0x1, 0x101, 0x6, 0x6}, {0xfff7ffff, 0x2, 0x52, 0x5, 0x10001, 0x40, 0x76c5, 0x8, 0x8000000000000000}}) r0 = getpid() process_vm_readv$auto(r0, &(0x7f0000000000)={0x0, 0xfff}, 0x800000001, &(0x7f0000000280)={&(0x7f0000000080), 0x1ffffffff}, 0x6, 0x0) r1 = socket(0xa, 0x2, 0x0) setsockopt$auto(r1, 0x29, 0x30, 0x0, 0x56b) 2m38.218882541s ago: executing program 0 (id=1900): mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xac}, 0x5, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x2, 0x9) recvmmsg$auto(0x4, 0x0, 0x7, 0xe, 0x0) write$auto(0x3, 0x0, 0x81) 2m37.700318952s ago: executing program 0 (id=1902): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0xffffffd6) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) r0 = socket(0x2, 0x1, 0x0) setsockopt$auto(r0, 0x6, 0x16, 0x0, 0x40) tkill$auto(0x1, 0x7) 2m36.913897554s ago: executing program 0 (id=1907): r0 = socket(0x29, 0x2, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x2, 0x80002, 0x73) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) recvmmsg$auto(r1, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) ioctl$auto(r0, 0x8913, 0x24) 2m36.327302521s ago: executing program 32 (id=1907): r0 = socket(0x29, 0x2, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x2, 0x80002, 0x73) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) recvmmsg$auto(r1, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) ioctl$auto(r0, 0x8913, 0x24) 4.354097508s ago: executing program 1 (id=3021): mmap$auto(0x0, 0x20006, 0x4, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) setsockopt$auto(0x3, 0x10000000084, 0x83, 0x0, 0x8) 2.029855412s ago: executing program 3 (id=3045): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x7) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x5, 0x2000000000002) socket$nl_generic(0x10, 0x3, 0x10) socket(0x26, 0x80805, 0x0) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) pidfd_getfd$auto(0x3, 0x1, 0x100000000) 1.941407806s ago: executing program 3 (id=3046): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0x5, 0x0) socket(0x2, 0x1, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) close_range$auto(0x0, 0x5, 0x0) pipe$auto(0x0) pipe$auto(0x0) tee$auto(0x2000000000000, 0x3, 0x402, 0xd) 1.92785268s ago: executing program 2 (id=3047): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0x2, 0x0, 0x4) close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio1\x00', 0x20b42, 0x0) r0 = socket(0x1d, 0x3, 0x1) setsockopt$auto(r0, 0x65, 0x1, 0x0, 0x800) bind$auto(0x3, &(0x7f0000000140)=@can, 0x6a) 1.6135143s ago: executing program 4 (id=3049): mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./file0\x00', 0xa61c2, 0x84) open(&(0x7f0000000080)='./file0\x00', 0x12bc00, 0x28) socket$nl_generic(0x10, 0x3, 0x10) pipe2$auto(0x0, 0x80) sendfile$auto(0x6, 0x3, 0x0, 0xfdef) 1.612444059s ago: executing program 3 (id=3058): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x4000000eb1, 0x401, 0x8000) socketpair$auto(0x1e, 0x1, 0xffffffff, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) ioctl$auto_TIOCSTI2(r0, 0x5412, 0x0) 1.421397502s ago: executing program 4 (id=3051): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x8000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000f40)={'batadv0\x00', 0x0}) sendmsg$auto_BATADV_CMD_SET_MESH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x54, r0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x4}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x9}, @BATADV_ATTR_HARD_IFNAME={0x14, 0x7, 'wg1\x00'}, @BATADV_ATTR_TPMETER_BYTES={0xc, 0xc, 0x40}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x140080e4) 1.350241833s ago: executing program 1 (id=3052): mmap$auto(0x0, 0x4000a, 0xdf, 0x9b72, 0x7, 0x28000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x0, 0xfffffffffffff001, 0x2) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ram5\x00', 0x680000, 0x0) r0 = socket(0x2, 0x1, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0x4018aebd, r0) 1.233775882s ago: executing program 4 (id=3053): close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) eventfd$auto(0x8c) socket(0x10, 0x2, 0x4) mmap$auto(0x0, 0x2020009, 0xe2, 0xeb1, 0x8, 0x8000) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x4, &(0x7f0000000000), 0x1) close_range$auto(0x0, 0xfffffffffffff000, 0x0) 1.2336919s ago: executing program 2 (id=3054): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_loginuid_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/loginuid\x00', 0x3c8082, 0x0) openat$auto_trace_options_core_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/options/trace_printk_dest\x00', 0x121082, 0x0) read$auto(0x3, 0x0, 0x7) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) write$auto(0x3, 0x0, 0x100082) 1.185687352s ago: executing program 3 (id=3055): mkdir$auto(&(0x7f0000000040)='./file0\x00', 0x2) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x8000, 0x70) mknodat$auto(r0, &(0x7f00000003c0)='./file0\x00', 0xfff, 0xfffffff8) renameat2$auto(r0, &(0x7f0000000200)='./file0\x00', r0, &(0x7f0000000240)='./file1\x00', 0x1) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x8000, 0x70) mkdir$auto(&(0x7f0000000000)='./file0/file0\x00', 0x3) renameat2$auto(r1, &(0x7f0000000200)='./file0\x00', r1, &(0x7f0000000240)='./file1\x00', 0x2) 1.113630884s ago: executing program 1 (id=3056): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_GET_MSRS(r0, 0x4008ae90, &(0x7f0000000300)) 1.049184832s ago: executing program 4 (id=3057): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS2\x00', 0x103e81, 0x0) ioctl$auto_TCSBRKP2(r1, 0x5425, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) write$auto(r0, 0x0, 0x100000a3d9) 1.048967745s ago: executing program 2 (id=3059): open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x2) landlock_create_ruleset$auto(&(0x7f0000000000)={0xdaa0, 0x1, 0x8}, 0x9, 0x0) landlock_restrict_self$auto(r0, 0x0) truncate$auto(&(0x7f00000000c0)='./file0\x00', 0x0) 889.400821ms ago: executing program 2 (id=3060): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socket(0x80000000000000a, 0x1, 0x0) sysfs$auto(0x2, 0x3, 0x0) fsopen$auto(0x0, 0x1) fsconfig$auto_JFFS2_COMPR_MODE_FORCELZO(r0, 0x5, &(0x7f0000001880)='/proc/self/cmdline\x00', 0x0, 0x4) 832.126928ms ago: executing program 1 (id=3061): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x340000000000) close_range$auto(0x2, 0xa, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0) r0 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) read$auto(r0, 0x0, 0xb4d3) write$auto(0x3, 0x0, 0x81) write$auto(0x3, 0x0, 0xffd8) 657.988932ms ago: executing program 4 (id=3062): close_range$auto(0x2, 0x8000, 0x0) r0 = socket(0xa, 0x3, 0x88) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x0, &(0x7f0000000000)=@link_update={0xa, @new_prog_fd=0x77, 0xa, @old_map_fd=r0}, 0x10) bpf$auto(0x2, &(0x7f00000001c0)=@bpf_attr_1={r1, 0x3, @next_key=0x1, 0x7}, 0xc) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0x10c) 657.395072ms ago: executing program 3 (id=3063): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0xd, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xfffffeff, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0xf, 0x29f, 0x2, 0x83, 0x101, 0x17f, 0x2}, {0xff, 0x1, 0x52, 0x5, 0x1, 0x40, 0x4, 0x8, 0x100000004}}) io_uring_setup$auto(0xd364, &(0x7f0000000240)={0x400, 0x10002, 0x7f, 0x7, 0x6, 0x5, r0, [], {0x2, 0x4, 0x6, 0x2, 0x400, 0x4, 0x7, 0x5, 0x80000000}, {0x5000007, 0xd, 0x6e68, 0x8, 0x6b, 0x9, 0x0, 0xfffffffa, 0xb1}}) 503.243385ms ago: executing program 4 (id=3064): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x8402, 0x0) futex_wake$auto(&(0x7f0000000300)="194777f28f0f5235", 0x1, 0x1, 0x200) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB=']'], 0x1ac}}, 0x40000) recvmmsg$auto(r0, &(0x7f0000000140)={{0x0, 0x4, &(0x7f0000000080)={0x0, 0x803}, 0x5, 0x0, 0x2, 0x8}, 0x800}, 0x10a, 0x8, 0x0) setgroups$auto(0xe32, 0x0) 227.4584ms ago: executing program 1 (id=3065): socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x3}, 0x55) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) shutdown$auto(0x200000003, 0x2) 227.37966ms ago: executing program 2 (id=3066): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2c, 0x3, 0x0) openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000000), 0x48501, 0x0) io_uring_setup$auto(0x1, 0x0) r0 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000008040), 0x2, 0x0) pipe$auto(0x0) ioctl$auto_I2C_SMBUS(r0, 0x720, 0x0) 226.384821ms ago: executing program 3 (id=3073): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) semctl$auto(0x7, 0x2, 0x13, 0x1) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) openat$auto_ipsec_dbg_fops_ipsec(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/netdevsim/netdevsim0/ports/3/ipsec\x00', 0xc2040, 0x0) r1 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r0, 0x4b72, r1) 113.408002ms ago: executing program 2 (id=3067): mmap$auto(0x0, 0x10, 0xa, 0x20000000000eb1, 0xffffffffffffffff, 0x40000000000000) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/event0\x00', 0x2, 0x0) io_uring_setup$auto(0xc, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x30}, 0x1) close_range$auto(0x2, 0xa, 0x0) socket(0x11, 0x80003, 0x300) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_fastopen_blackhole_timeout_sec\x00', 0x189302, 0x0) 0s ago: executing program 1 (id=3068): mmap$auto(0x0, 0x4, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/workqueue/nvme-wq/per_cpu\x00', 0x0, 0x0) pipe2$auto(0x0, 0x80) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write$auto(r0, 0x0, 0xe) kernel console output (not intermixed with test programs): 349.922661][T11865] ? down_write+0x14d/0x200 [ 349.922701][T11865] ? up_write+0x1b2/0x520 [ 349.922742][T11865] dup_mmap+0xe88/0x21d0 [ 349.922797][T11865] ? __pfx_dup_mmap+0x10/0x10 [ 349.922866][T11865] copy_process+0x4081/0x7690 [ 349.922899][T11865] ? __pfx___futex_wait+0x10/0x10 [ 349.922954][T11865] ? __pfx_copy_process+0x10/0x10 [ 349.922988][T11865] ? futex_private_hash_put+0x176/0x300 [ 349.923026][T11865] ? futex_private_hash_put+0x18a/0x300 [ 349.923065][T11865] kernel_clone+0xfc/0x930 [ 349.923101][T11865] ? __pfx_kernel_clone+0x10/0x10 [ 349.923159][T11865] __do_sys_clone+0xce/0x120 [ 349.923193][T11865] ? __pfx___do_sys_clone+0x10/0x10 [ 349.923226][T11865] ? ksys_unshare+0x687/0xa40 [ 349.923280][T11865] ? xfd_validate_state+0x61/0x180 [ 349.923332][T11865] do_syscall_64+0xcd/0x490 [ 349.923370][T11865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.923404][T11865] RIP: 0033:0x7f56e758ebe9 [ 349.923428][T11865] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 349.923455][T11865] RSP: 002b:00007f56e84d9fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 349.923483][T11865] RAX: ffffffffffffffda RBX: 00007f56e77b5fa0 RCX: 00007f56e758ebe9 [ 349.923502][T11865] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000002360411 [ 349.923519][T11865] RBP: 00007f56e7611e19 R08: 0000000000000000 R09: 0000000000000000 [ 349.923537][T11865] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 349.923554][T11865] R13: 00007f56e77b6038 R14: 00007f56e77b5fa0 R15: 00007ffc01c57978 [ 349.923595][T11865] [ 350.008052][T11861] netlink: 322 bytes leftover after parsing attributes in process `syz.1.2166'. [ 350.976664][T11889] FAULT_INJECTION: forcing a failure. [ 350.976664][T11889] name failslab, interval 1, probability 0, space 0, times 0 [ 350.994345][T11889] CPU: 0 UID: 0 PID: 11889 Comm: syz.4.2169 Not tainted 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(full) [ 350.994394][T11889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 350.994411][T11889] Call Trace: [ 350.994422][T11889] [ 350.994434][T11889] dump_stack_lvl+0x16c/0x1f0 [ 350.994478][T11889] should_fail_ex+0x512/0x640 [ 350.994521][T11889] ? __kmalloc_noprof+0xbf/0x510 [ 350.994560][T11889] ? handler_new_ref+0x1b0/0xc60 [ 350.994602][T11889] should_failslab+0xc2/0x120 [ 350.994643][T11889] __kmalloc_noprof+0xd2/0x510 [ 350.994684][T11889] ? __asan_memcpy+0x3c/0x60 [ 350.994722][T11889] handler_new_ref+0x1b0/0xc60 [ 350.994778][T11889] v4l2_ctrl_new+0x1963/0x2180 [ 350.994835][T11889] ? __pfx_v4l2_ctrl_new+0x10/0x10 [ 350.994891][T11889] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 350.994942][T11889] v4l2_ctrl_new_std+0x1be/0x290 [ 350.994997][T11889] ? __pfx_v4l2_ctrl_new_std+0x10/0x10 [ 350.995045][T11889] ? rcu_is_watching+0x12/0xc0 [ 350.995076][T11889] ? trace_kmalloc+0x2b/0xd0 [ 350.995117][T11889] ? __kvmalloc_node_noprof+0x298/0x620 [ 350.995153][T11889] ? v4l2_ctrl_handler_init_class+0x1fc/0x340 [ 350.995200][T11889] ? media_request_object_init+0x100/0x180 [ 350.995255][T11889] vicodec_open+0x1d0/0xf90 [ 350.995297][T11889] v4l2_open+0x222/0x490 [ 350.995339][T11889] ? __pfx_v4l2_open+0x10/0x10 [ 350.995375][T11889] chrdev_open+0x231/0x6a0 [ 350.995411][T11889] ? __pfx_apparmor_file_open+0x10/0x10 [ 350.995446][T11889] ? __pfx_chrdev_open+0x10/0x10 [ 350.995489][T11889] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 350.995532][T11889] do_dentry_open+0x97f/0x1530 [ 350.995570][T11889] ? __pfx_chrdev_open+0x10/0x10 [ 350.995613][T11889] vfs_open+0x82/0x3f0 [ 350.995670][T11889] path_openat+0x1de4/0x2cb0 [ 350.995720][T11889] ? __pfx_path_openat+0x10/0x10 [ 350.995765][T11889] do_filp_open+0x20b/0x470 [ 350.995800][T11889] ? __pfx_do_filp_open+0x10/0x10 [ 350.995863][T11889] ? alloc_fd+0x471/0x7d0 [ 350.995905][T11889] do_sys_openat2+0x11b/0x1d0 [ 350.995949][T11889] ? __pfx_do_sys_openat2+0x10/0x10 [ 350.996012][T11889] __x64_sys_openat+0x174/0x210 [ 350.996058][T11889] ? __pfx___x64_sys_openat+0x10/0x10 [ 350.996122][T11889] do_syscall_64+0xcd/0x490 [ 350.996165][T11889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.996194][T11889] RIP: 0033:0x7f2dea98ebe9 [ 350.996220][T11889] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 350.996249][T11889] RSP: 002b:00007f2deb8b9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 350.996279][T11889] RAX: ffffffffffffffda RBX: 00007f2deabb5fa0 RCX: 00007f2dea98ebe9 [ 350.996299][T11889] RDX: 00000000000c0400 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 350.996318][T11889] RBP: 00007f2deaa11e19 R08: 0000000000000000 R09: 0000000000000000 [ 350.996336][T11889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 350.996353][T11889] R13: 00007f2deabb6038 R14: 00007f2deabb5fa0 R15: 00007ffe13d90748 [ 350.996395][T11889] [ 352.291378][T11905] netlink: 334 bytes leftover after parsing attributes in process `syz.3.2176'. [ 352.359937][T11911] FAULT_INJECTION: forcing a failure. [ 352.359937][T11911] name failslab, interval 1, probability 0, space 0, times 0 [ 352.398519][T11909] mkiss: ax0: crc mode is auto. [ 352.404881][T11911] CPU: 0 UID: 0 PID: 11911 Comm: syz.2.2177 Not tainted 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(full) [ 352.404927][T11911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 352.404945][T11911] Call Trace: [ 352.404956][T11911] [ 352.404967][T11911] dump_stack_lvl+0x16c/0x1f0 [ 352.405012][T11911] should_fail_ex+0x512/0x640 [ 352.405055][T11911] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 352.405092][T11911] should_failslab+0xc2/0x120 [ 352.405132][T11911] __kmalloc_cache_noprof+0x6a/0x3e0 [ 352.405163][T11911] ? vmci_ctx_create+0xbb/0x740 [ 352.405218][T11911] vmci_ctx_create+0xbb/0x740 [ 352.405269][T11911] vmci_host_unlocked_ioctl+0x1ad8/0x2040 [ 352.405313][T11911] ? __pfx_vmci_host_unlocked_ioctl+0x10/0x10 [ 352.405355][T11911] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 352.405401][T11911] ? do_vfs_ioctl+0x128/0x14f0 [ 352.405447][T11911] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 352.405503][T11911] ? find_held_lock+0x2b/0x80 [ 352.405532][T11911] ? hook_file_ioctl_common+0x145/0x410 [ 352.405581][T11911] ? __fget_files+0x20e/0x3c0 [ 352.405618][T11911] ? __pfx_vmci_host_unlocked_ioctl+0x10/0x10 [ 352.405680][T11911] __x64_sys_ioctl+0x18e/0x210 [ 352.405730][T11911] do_syscall_64+0xcd/0x490 [ 352.405774][T11911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.405803][T11911] RIP: 0033:0x7f56e758ebe9 [ 352.405827][T11911] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 352.405856][T11911] RSP: 002b:00007f56e84da038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 352.405885][T11911] RAX: ffffffffffffffda RBX: 00007f56e77b5fa0 RCX: 00007f56e758ebe9 [ 352.405904][T11911] RDX: 0000000000000006 RSI: 00000000000007a0 RDI: 0000000000000005 [ 352.405922][T11911] RBP: 00007f56e7611e19 R08: 0000000000000000 R09: 0000000000000000 [ 352.405939][T11911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 352.405956][T11911] R13: 00007f56e77b6038 R14: 00007f56e77b5fa0 R15: 00007ffc01c57978 [ 352.405996][T11911] [ 352.406008][T11911] Failed to allocate memory for VMCI context [ 352.834454][T11919] netlink: 'syz.1.2181': attribute type 27 has an invalid length. [ 352.845470][T11919] netlink: 334 bytes leftover after parsing attributes in process `syz.1.2181'. [ 353.444088][T11931] netlink: 342 bytes leftover after parsing attributes in process `syz.2.2186'. [ 353.661890][T11941] FAULT_INJECTION: forcing a failure. [ 353.661890][T11941] name failslab, interval 1, probability 0, space 0, times 0 [ 353.700507][T11941] CPU: 0 UID: 0 PID: 11941 Comm: syz.4.2190 Not tainted 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(full) [ 353.700558][T11941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 353.700578][T11941] Call Trace: [ 353.700589][T11941] [ 353.700602][T11941] dump_stack_lvl+0x16c/0x1f0 [ 353.700646][T11941] should_fail_ex+0x512/0x640 [ 353.700689][T11941] ? __kmalloc_noprof+0xbf/0x510 [ 353.700729][T11941] ? get_modalias+0xbb/0x380 [ 353.700755][T11941] should_failslab+0xc2/0x120 [ 353.700797][T11941] __kmalloc_noprof+0xd2/0x510 [ 353.700833][T11941] ? get_modalias+0x20f/0x380 [ 353.700868][T11941] get_modalias+0xbb/0x380 [ 353.700904][T11941] ? __pfx_sys_dmi_modalias_show+0x10/0x10 [ 353.700935][T11941] sys_dmi_modalias_show+0x1f/0xb0 [ 353.700967][T11941] dev_attr_show+0x53/0xe0 [ 353.701015][T11941] ? __pfx_dev_attr_show+0x10/0x10 [ 353.701060][T11941] sysfs_kf_seq_show+0x216/0x3e0 [ 353.701104][T11941] seq_read_iter+0x506/0x12c0 [ 353.701136][T11941] ? __mutex_trylock_common+0xe9/0x250 [ 353.701193][T11941] kernfs_fop_read_iter+0x40f/0x5a0 [ 353.701224][T11941] ? rw_verify_area+0xcf/0x6c0 [ 353.701257][T11941] vfs_read+0x8bf/0xcf0 [ 353.701296][T11941] ? __pfx___mutex_lock+0x10/0x10 [ 353.701334][T11941] ? __pfx_vfs_read+0x10/0x10 [ 353.701411][T11941] ksys_read+0x12a/0x250 [ 353.701446][T11941] ? __pfx_ksys_read+0x10/0x10 [ 353.701498][T11941] do_syscall_64+0xcd/0x490 [ 353.701542][T11941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.701572][T11941] RIP: 0033:0x7f2dea98ebe9 [ 353.701598][T11941] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 353.701625][T11941] RSP: 002b:00007f2deb8b9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 353.701654][T11941] RAX: ffffffffffffffda RBX: 00007f2deabb5fa0 RCX: 00007f2dea98ebe9 [ 353.701673][T11941] RDX: 0000000000001016 RSI: 0000200000000000 RDI: 0000000000000003 [ 353.701690][T11941] RBP: 00007f2deaa11e19 R08: 0000000000000000 R09: 0000000000000000 [ 353.701707][T11941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 353.701724][T11941] R13: 00007f2deabb6038 R14: 00007f2deabb5fa0 R15: 00007ffe13d90748 [ 353.701763][T11941] [ 353.993043][T11935] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 354.260945][T11954] netlink: 330 bytes leftover after parsing attributes in process `syz.3.2196'. [ 354.350221][T11957] FAULT_INJECTION: forcing a failure. [ 354.350221][T11957] name failslab, interval 1, probability 0, space 0, times 0 [ 354.374080][T11959] netlink: 342 bytes leftover after parsing attributes in process `syz.4.2197'. [ 354.383719][T11957] CPU: 1 UID: 0 PID: 11957 Comm: syz.2.2206 Not tainted 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(full) [ 354.383762][T11957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 354.383778][T11957] Call Trace: [ 354.383788][T11957] [ 354.383799][T11957] dump_stack_lvl+0x16c/0x1f0 [ 354.383837][T11957] should_fail_ex+0x512/0x640 [ 354.383873][T11957] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 354.383909][T11957] should_failslab+0xc2/0x120 [ 354.383943][T11957] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 354.383978][T11957] ? vm_area_dup+0x27/0x8d0 [ 354.384015][T11957] vm_area_dup+0x27/0x8d0 [ 354.384046][T11957] copy_vma+0x4fa/0xaa0 [ 354.384087][T11957] ? __pfx_copy_vma+0x10/0x10 [ 354.384122][T11957] ? __lock_acquire+0xb97/0x1ce0 [ 354.384165][T11957] ? register_lock_class+0x41/0x4c0 [ 354.384225][T11957] ? rcu_is_watching+0x12/0xc0 [ 354.384251][T11957] ? finish_task_switch.isra.0+0x221/0xc10 [ 354.384286][T11957] copy_vma_and_data+0x1cf/0x790 [ 354.384322][T11957] ? __pfx_copy_vma_and_data+0x10/0x10 [ 354.384364][T11957] ? __vma_enter_locked+0x163/0x3f0 [ 354.384403][T11957] ? find_held_lock+0x2b/0x80 [ 354.384433][T11957] ? move_vma+0x536/0x1780 [ 354.384473][T11957] move_vma+0x548/0x1780 [ 354.384514][T11957] ? __pfx_move_vma+0x10/0x10 [ 354.384544][T11957] ? mm_get_unmapped_area+0x95/0xe0 [ 354.384590][T11957] ? shmem_get_unmapped_area+0x170/0xa00 [ 354.384618][T11957] ? cap_mmap_addr+0x4b/0x120 [ 354.384645][T11957] ? bpf_lsm_mmap_addr+0x9/0x10 [ 354.384681][T11957] ? security_mmap_addr+0x6c/0x1e0 [ 354.384716][T11957] ? __get_unmapped_area+0x267/0x440 [ 354.384756][T11957] ? vrm_set_new_addr+0x208/0x290 [ 354.384790][T11957] mremap_to+0x1b7/0x450 [ 354.384821][T11957] do_mremap+0x1004/0x1f80 [ 354.384869][T11957] ? __pfx_do_mremap+0x10/0x10 [ 354.384908][T11957] ? up_write+0x1b2/0x520 [ 354.384954][T11957] __do_sys_mremap+0x119/0x170 [ 354.384983][T11957] ? __pfx___do_sys_mremap+0x10/0x10 [ 354.385024][T11957] ? __x64_sys_futex+0x1e0/0x4c0 [ 354.385082][T11957] do_syscall_64+0xcd/0x490 [ 354.385119][T11957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.385147][T11957] RIP: 0033:0x7f56e758ebe9 [ 354.385170][T11957] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 354.385196][T11957] RSP: 002b:00007f56e84da038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 354.385223][T11957] RAX: ffffffffffffffda RBX: 00007f56e77b5fa0 RCX: 00007f56e758ebe9 [ 354.385241][T11957] RDX: 0000000000000008 RSI: 0000000000000002 RDI: 0000000000000000 [ 354.385257][T11957] RBP: 00007f56e7611e19 R08: 00007effffffb000 R09: 0000000000000000 [ 354.385274][T11957] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 354.385290][T11957] R13: 00007f56e77b6038 R14: 00007f56e77b5fa0 R15: 00007ffc01c57978 [ 354.385329][T11957] [ 355.050643][T11972] FAULT_INJECTION: forcing a failure. [ 355.050643][T11972] name failslab, interval 1, probability 0, space 0, times 0 [ 355.093547][T11972] CPU: 0 UID: 0 PID: 11972 Comm: syz.3.2203 Not tainted 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(full) [ 355.093604][T11972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 355.093621][T11972] Call Trace: [ 355.093630][T11972] [ 355.093641][T11972] dump_stack_lvl+0x16c/0x1f0 [ 355.093682][T11972] should_fail_ex+0x512/0x640 [ 355.093721][T11972] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 355.093759][T11972] ? __pfx_nst_fop_open+0x10/0x10 [ 355.093800][T11972] should_failslab+0xc2/0x120 [ 355.093841][T11972] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 355.093875][T11972] ? rcu_is_watching+0x12/0xc0 [ 355.093905][T11972] ? seq_open+0x55/0x170 [ 355.093950][T11972] ? __pfx_nst_fop_open+0x10/0x10 [ 355.093989][T11972] seq_open+0x55/0x170 [ 355.094030][T11972] __seq_open_private+0x3e/0xd0 [ 355.094071][T11972] nst_fop_open+0x24/0x120 [ 355.094108][T11972] full_proxy_open_regular+0x1b6/0x360 [ 355.094139][T11972] do_dentry_open+0x97f/0x1530 [ 355.094174][T11972] ? __pfx_full_proxy_open_regular+0x10/0x10 [ 355.094206][T11972] vfs_open+0x82/0x3f0 [ 355.094248][T11972] path_openat+0x1de4/0x2cb0 [ 355.094291][T11972] ? __pfx_path_openat+0x10/0x10 [ 355.094330][T11972] do_filp_open+0x20b/0x470 [ 355.094361][T11972] ? __pfx_do_filp_open+0x10/0x10 [ 355.094417][T11972] ? alloc_fd+0x471/0x7d0 [ 355.094456][T11972] do_sys_openat2+0x11b/0x1d0 [ 355.094497][T11972] ? __pfx_do_sys_openat2+0x10/0x10 [ 355.094565][T11972] __x64_sys_openat+0x174/0x210 [ 355.094611][T11972] ? __pfx___x64_sys_openat+0x10/0x10 [ 355.094672][T11972] do_syscall_64+0xcd/0x490 [ 355.094709][T11972] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.094738][T11972] RIP: 0033:0x7f7ce778ebe9 [ 355.094763][T11972] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 355.094791][T11972] RSP: 002b:00007f7ce8584038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 355.094818][T11972] RAX: ffffffffffffffda RBX: 00007f7ce79b5fa0 RCX: 00007f7ce778ebe9 [ 355.094837][T11972] RDX: 0000000000101080 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 355.094857][T11972] RBP: 00007f7ce7811e19 R08: 0000000000000000 R09: 0000000000000000 [ 355.094873][T11972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 355.094889][T11972] R13: 00007f7ce79b6038 R14: 00007f7ce79b5fa0 R15: 00007ffdc1bb4848 [ 355.094928][T11972] [ 355.663628][T11979] Process accounting resumed [ 356.138178][T12003] [U]  [ 356.141064][T12003] [U] [ 356.143799][T12003] [U] [ 356.146534][T12003] [U] [ 356.153414][T12003] [U] [ 356.156267][T12003] [U] [ 356.159010][T12003] [U] [ 356.161738][T12003] [U] [ 356.166392][T12003] [U] [ 356.169153][T12003] [U] [ 356.171884][T12003] [U] [ 356.174626][T12003] [U] [ 356.177811][T12003] [U] [ 356.180577][T12003] [U] [ 356.183328][T12003] [U] [ 356.186150][T12003] [U] [ 356.189327][T12003] [U] [ 356.192084][T12003] [U] [ 356.195006][T12003] [U] [ 356.197747][T12003] [U] [ 356.206577][T12003] [U] [ 356.209393][T12003] [U] [ 356.212144][T12003] [U] [ 356.215146][T12003] [U] [ 356.249420][T12003] [U] [ 356.252210][T12003] [U] [ 356.254970][T12003] [U] [ 356.257721][T12003] [U] [ 356.285230][T12006] [U] [ 356.752475][T12021] netlink: 'syz.1.2231': attribute type 4 has an invalid length. [ 357.009842][T12033] netlink: 326 bytes leftover after parsing attributes in process `syz.2.2227'. [ 357.779862][T12060] netlink: 342 bytes leftover after parsing attributes in process `syz.4.2239'. [ 358.036107][T12065] FAULT_INJECTION: forcing a failure. [ 358.036107][T12065] name failslab, interval 1, probability 0, space 0, times 0 [ 358.077272][T12065] CPU: 1 UID: 0 PID: 12065 Comm: syz.2.2242 Not tainted 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(full) [ 358.077322][T12065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 358.077341][T12065] Call Trace: [ 358.077352][T12065] [ 358.077377][T12065] dump_stack_lvl+0x16c/0x1f0 [ 358.077423][T12065] should_fail_ex+0x512/0x640 [ 358.077465][T12065] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 358.077507][T12065] should_failslab+0xc2/0x120 [ 358.077548][T12065] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 358.077586][T12065] ? __pmd_alloc+0xbf/0x930 [ 358.077637][T12065] __pmd_alloc+0xbf/0x930 [ 358.077687][T12065] move_page_tables+0x2a86/0x4070 [ 358.077733][T12065] ? __pfx_copy_vma+0x10/0x10 [ 358.077770][T12065] ? __lock_acquire+0xb97/0x1ce0 [ 358.077829][T12065] ? __pfx_move_page_tables+0x10/0x10 [ 358.077888][T12065] ? rcu_is_watching+0x12/0xc0 [ 358.077920][T12065] ? finish_task_switch.isra.0+0x221/0xc10 [ 358.077955][T12065] copy_vma_and_data+0x24e/0x790 [ 358.077995][T12065] ? __pfx_copy_vma_and_data+0x10/0x10 [ 358.078041][T12065] ? __vma_enter_locked+0x163/0x3f0 [ 358.078077][T12065] ? find_held_lock+0x2b/0x80 [ 358.078109][T12065] ? move_vma+0x536/0x1780 [ 358.078140][T12065] ? __vm_enough_memory+0x184/0x3f0 [ 358.078196][T12065] move_vma+0x548/0x1780 [ 358.078239][T12065] ? __pfx_move_vma+0x10/0x10 [ 358.078281][T12065] ? mm_get_unmapped_area_vmflags+0x97/0xe0 [ 358.078328][T12065] ? cap_mmap_addr+0x4b/0x120 [ 358.078420][T12065] ? bpf_lsm_mmap_addr+0x9/0x10 [ 358.078465][T12065] ? security_mmap_addr+0x6c/0x1e0 [ 358.078507][T12065] ? __get_unmapped_area+0x267/0x440 [ 358.078557][T12065] ? vrm_set_new_addr+0x208/0x290 [ 358.078596][T12065] mremap_to+0x1b7/0x450 [ 358.078630][T12065] do_mremap+0x1004/0x1f80 [ 358.078686][T12065] ? __pfx_do_mremap+0x10/0x10 [ 358.078732][T12065] ? do_raw_spin_lock+0x12c/0x2b0 [ 358.078789][T12065] __do_sys_mremap+0x119/0x170 [ 358.078825][T12065] ? __pfx___do_sys_mremap+0x10/0x10 [ 358.078861][T12065] ? find_held_lock+0x2b/0x80 [ 358.078899][T12065] ? __x64_sys_futex+0x1e0/0x4c0 [ 358.078966][T12065] do_syscall_64+0xcd/0x490 [ 358.079011][T12065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.079042][T12065] RIP: 0033:0x7f56e758ebe9 [ 358.079069][T12065] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 358.079100][T12065] RSP: 002b:00007f56e84da038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 358.079129][T12065] RAX: ffffffffffffffda RBX: 00007f56e77b5fa0 RCX: 00007f56e758ebe9 [ 358.079149][T12065] RDX: 0000000000000004 RSI: 0000000000000004 RDI: 0000200000000000 [ 358.079167][T12065] RBP: 00007f56e7611e19 R08: 0000000100000000 R09: 0000000000000000 [ 358.079186][T12065] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 358.079205][T12065] R13: 00007f56e77b6038 R14: 00007f56e77b5fa0 R15: 00007ffc01c57978 [ 358.079247][T12065] [ 358.610886][T12071] netlink: 334 bytes leftover after parsing attributes in process `syz.3.2245'. [ 358.643949][T12071] netlink: 334 bytes leftover after parsing attributes in process `syz.3.2245'. [ 359.354661][T12093] netlink: 342 bytes leftover after parsing attributes in process `syz.4.2251'. [ 360.188469][T12116] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2260'. [ 360.773039][T12128] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2264'. [ 361.802785][T12164] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2278'. [ 362.763309][T12192] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 362.952874][T12200] netlink: 326 bytes leftover after parsing attributes in process `syz.1.2290'. [ 363.774584][T12206] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2291'. [ 366.052964][T12245] netlink: 326 bytes leftover after parsing attributes in process `syz.4.2303'. [ 366.396551][T12248] netlink: 322 bytes leftover after parsing attributes in process `syz.2.2306'. [ 366.625885][T12262] FAULT_INJECTION: forcing a failure. [ 366.625885][T12262] name failslab, interval 1, probability 0, space 0, times 0 [ 366.640244][T12262] CPU: 1 UID: 0 PID: 12262 Comm: syz.4.2311 Not tainted 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(full) [ 366.640292][T12262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 366.640310][T12262] Call Trace: [ 366.640320][T12262] [ 366.640332][T12262] dump_stack_lvl+0x16c/0x1f0 [ 366.640376][T12262] should_fail_ex+0x512/0x640 [ 366.640417][T12262] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 366.640457][T12262] should_failslab+0xc2/0x120 [ 366.640497][T12262] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 366.640534][T12262] ? ptlock_alloc+0x1f/0x70 [ 366.640570][T12262] ptlock_alloc+0x1f/0x70 [ 366.640599][T12262] pte_alloc_one+0x82/0x3a0 [ 366.640634][T12262] __pte_alloc+0x6d/0x3c0 [ 366.640673][T12262] ? __pfx___pte_alloc+0x10/0x10 [ 366.640712][T12262] ? __pfx___might_resched+0x10/0x10 [ 366.640740][T12262] ? copy_page_range+0x1fa8/0x5c80 [ 366.640778][T12262] copy_page_range+0x3b83/0x5c80 [ 366.640857][T12262] ? __pfx_copy_page_range+0x10/0x10 [ 366.640906][T12262] ? __pfx___might_resched+0x10/0x10 [ 366.640934][T12262] ? __pfx_mas_store+0x10/0x10 [ 366.640979][T12262] ? __vma_enter_locked+0x163/0x3f0 [ 366.641012][T12262] ? dup_mmap+0xe38/0x21d0 [ 366.641057][T12262] ? down_write+0x14d/0x200 [ 366.641104][T12262] ? up_write+0x1b2/0x520 [ 366.641154][T12262] dup_mmap+0xe88/0x21d0 [ 366.641215][T12262] ? __pfx_dup_mmap+0x10/0x10 [ 366.641298][T12262] copy_process+0x4081/0x7690 [ 366.641336][T12262] ? __pfx___futex_wait+0x10/0x10 [ 366.641381][T12262] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 366.641430][T12262] ? __pfx_copy_process+0x10/0x10 [ 366.641463][T12262] ? futex_private_hash_put+0x176/0x300 [ 366.641501][T12262] ? futex_private_hash_put+0x18a/0x300 [ 366.641540][T12262] kernel_clone+0xfc/0x930 [ 366.641577][T12262] ? __pfx_kernel_clone+0x10/0x10 [ 366.641638][T12262] __do_sys_clone+0xce/0x120 [ 366.641674][T12262] ? __pfx___do_sys_clone+0x10/0x10 [ 366.641710][T12262] ? ksys_unshare+0x687/0xa40 [ 366.641765][T12262] ? xfd_validate_state+0x61/0x180 [ 366.641822][T12262] do_syscall_64+0xcd/0x490 [ 366.641863][T12262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.641891][T12262] RIP: 0033:0x7f2dea98ebe9 [ 366.641914][T12262] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 366.641943][T12262] RSP: 002b:00007f2deb8b8fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 366.641970][T12262] RAX: ffffffffffffffda RBX: 00007f2deabb5fa0 RCX: 00007f2dea98ebe9 [ 366.641989][T12262] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000002360411 [ 366.642006][T12262] RBP: 00007f2deaa11e19 R08: 0000000000000000 R09: 0000000000000000 [ 366.642022][T12262] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 366.642039][T12262] R13: 00007f2deabb6038 R14: 00007f2deabb5fa0 R15: 00007ffe13d90748 [ 366.642077][T12262] [ 367.310574][T12271] Process accounting resumed [ 367.622077][T12280] Process accounting resumed [ 368.002291][T12298] netlink: 342 bytes leftover after parsing attributes in process `syz.4.2327'. [ 369.245423][T12323] FAULT_INJECTION: forcing a failure. [ 369.245423][T12323] name failslab, interval 1, probability 0, space 0, times 0 [ 369.267461][T12323] CPU: 1 UID: 0 PID: 12323 Comm: syz.4.2339 Not tainted 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(full) [ 369.267511][T12323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 369.267530][T12323] Call Trace: [ 369.267541][T12323] [ 369.267554][T12323] dump_stack_lvl+0x16c/0x1f0 [ 369.267599][T12323] should_fail_ex+0x512/0x640 [ 369.267641][T12323] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 369.267683][T12323] should_failslab+0xc2/0x120 [ 369.267724][T12323] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 369.267763][T12323] ? ptlock_alloc+0x1f/0x70 [ 369.267802][T12323] ptlock_alloc+0x1f/0x70 [ 369.267832][T12323] pte_alloc_one+0x82/0x3a0 [ 369.267867][T12323] __pte_alloc+0x6d/0x3c0 [ 369.267908][T12323] ? __pfx___pte_alloc+0x10/0x10 [ 369.267949][T12323] ? __pfx___might_resched+0x10/0x10 [ 369.267980][T12323] ? copy_page_range+0x1fa8/0x5c80 [ 369.268017][T12323] copy_page_range+0x3b83/0x5c80 [ 369.268099][T12323] ? __pfx_copy_page_range+0x10/0x10 [ 369.268146][T12323] ? __pfx___might_resched+0x10/0x10 [ 369.268175][T12323] ? __pfx_mas_store+0x10/0x10 [ 369.268214][T12323] ? __vma_enter_locked+0x163/0x3f0 [ 369.268249][T12323] ? dup_mmap+0xe38/0x21d0 [ 369.268294][T12323] ? down_write+0x14d/0x200 [ 369.268350][T12323] ? up_write+0x1b2/0x520 [ 369.268399][T12323] dup_mmap+0xe88/0x21d0 [ 369.268463][T12323] ? __pfx_dup_mmap+0x10/0x10 [ 369.268538][T12323] copy_process+0x4081/0x7690 [ 369.268577][T12323] ? __pfx___futex_wait+0x10/0x10 [ 369.268639][T12323] ? __pfx_copy_process+0x10/0x10 [ 369.268678][T12323] ? futex_private_hash_put+0x176/0x300 [ 369.268721][T12323] ? futex_private_hash_put+0x18a/0x300 [ 369.268766][T12323] kernel_clone+0xfc/0x930 [ 369.268809][T12323] ? __pfx_kernel_clone+0x10/0x10 [ 369.268874][T12323] __do_sys_clone+0xce/0x120 [ 369.268913][T12323] ? __pfx___do_sys_clone+0x10/0x10 [ 369.268951][T12323] ? ksys_unshare+0x687/0xa40 [ 369.269011][T12323] ? xfd_validate_state+0x61/0x180 [ 369.269065][T12323] do_syscall_64+0xcd/0x490 [ 369.269105][T12323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.269133][T12323] RIP: 0033:0x7f2dea98ebe9 [ 369.269157][T12323] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 369.269187][T12323] RSP: 002b:00007f2deb8b8fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 369.269216][T12323] RAX: ffffffffffffffda RBX: 00007f2deabb5fa0 RCX: 00007f2dea98ebe9 [ 369.269236][T12323] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000002360411 [ 369.269253][T12323] RBP: 00007f2deaa11e19 R08: 0000000000000000 R09: 0000000000000000 [ 369.269270][T12323] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 369.269287][T12323] R13: 00007f2deabb6038 R14: 00007f2deabb5fa0 R15: 00007ffe13d90748 [ 369.269338][T12323] [ 370.741325][T12331] FAULT_INJECTION: forcing a failure. [ 370.741325][T12331] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 370.770052][T12331] CPU: 0 UID: 0 PID: 12331 Comm: syz.1.2350 Not tainted 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(full) [ 370.770098][T12331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 370.770116][T12331] Call Trace: [ 370.770126][T12331] [ 370.770138][T12331] dump_stack_lvl+0x16c/0x1f0 [ 370.770181][T12331] should_fail_ex+0x512/0x640 [ 370.770231][T12331] should_fail_alloc_page+0xe7/0x130 [ 370.770272][T12331] prepare_alloc_pages+0x3c2/0x610 [ 370.770325][T12331] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 370.770371][T12331] ? lock_acquire+0x179/0x350 [ 370.770413][T12331] ? find_held_lock+0x2b/0x80 [ 370.770451][T12331] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 370.770486][T12331] ? finish_task_switch.isra.0+0x221/0xc10 [ 370.770525][T12331] ? lockdep_hardirqs_on+0x7c/0x110 [ 370.770563][T12331] ? finish_task_switch.isra.0+0x221/0xc10 [ 370.770607][T12331] ? look_up_lock_class+0x6b/0x150 [ 370.770642][T12331] ? register_lock_class+0x41/0x4c0 [ 370.770681][T12331] ? __lock_acquire+0xb97/0x1ce0 [ 370.770714][T12331] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 370.770761][T12331] ? policy_nodemask+0xea/0x4e0 [ 370.770804][T12331] alloc_pages_mpol+0x1fb/0x550 [ 370.770848][T12331] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 370.770887][T12331] ? page_table_check_set+0x627/0x750 [ 370.770938][T12331] alloc_pages_noprof+0x131/0x390 [ 370.770982][T12331] pte_alloc_one+0x1c/0x3a0 [ 370.771016][T12331] __pte_alloc+0x6d/0x3c0 [ 370.771058][T12331] ? __pfx___pte_alloc+0x10/0x10 [ 370.771100][T12331] ? __pfx___might_resched+0x10/0x10 [ 370.771131][T12331] ? copy_page_range+0x1fa8/0x5c80 [ 370.771185][T12331] copy_page_range+0x3b83/0x5c80 [ 370.771267][T12331] ? __pfx_copy_page_range+0x10/0x10 [ 370.771316][T12331] ? __pfx___might_resched+0x10/0x10 [ 370.771346][T12331] ? __pfx_mas_store+0x10/0x10 [ 370.771387][T12331] ? __vma_enter_locked+0x163/0x3f0 [ 370.771422][T12331] ? dup_mmap+0xe38/0x21d0 [ 370.771468][T12331] ? down_write+0x14d/0x200 [ 370.771524][T12331] ? up_write+0x1b2/0x520 [ 370.771575][T12331] dup_mmap+0xe88/0x21d0 [ 370.771639][T12331] ? __pfx_dup_mmap+0x10/0x10 [ 370.771718][T12331] copy_process+0x4081/0x7690 [ 370.771773][T12331] ? __pfx___futex_wait+0x10/0x10 [ 370.771837][T12331] ? __pfx_copy_process+0x10/0x10 [ 370.771877][T12331] ? futex_private_hash_put+0x176/0x300 [ 370.771922][T12331] ? futex_private_hash_put+0x18a/0x300 [ 370.771966][T12331] kernel_clone+0xfc/0x930 [ 370.772010][T12331] ? __pfx_kernel_clone+0x10/0x10 [ 370.772076][T12331] __do_sys_clone+0xce/0x120 [ 370.772116][T12331] ? __pfx___do_sys_clone+0x10/0x10 [ 370.772156][T12331] ? ksys_unshare+0x687/0xa40 [ 370.772216][T12331] ? xfd_validate_state+0x61/0x180 [ 370.772276][T12331] do_syscall_64+0xcd/0x490 [ 370.772339][T12331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.772381][T12331] RIP: 0033:0x7f169058ebe9 [ 370.772417][T12331] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 370.772462][T12331] RSP: 002b:00007f16914d3fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 370.772492][T12331] RAX: ffffffffffffffda RBX: 00007f16907b5fa0 RCX: 00007f169058ebe9 [ 370.772520][T12331] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000002360411 [ 370.772538][T12331] RBP: 00007f1690611e19 R08: 0000000000000000 R09: 0000000000000000 [ 370.772557][T12331] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 370.772585][T12331] R13: 00007f16907b6038 R14: 00007f16907b5fa0 R15: 00007fff7fb9ea18 [ 370.772644][T12331] [ 370.991980][T12335] netlink: 342 bytes leftover after parsing attributes in process `syz.2.2341'. [ 374.522925][T12378] netlink: 322 bytes leftover after parsing attributes in process `syz.4.2352'. [ 374.750223][T12390] netlink: 'syz.4.2356': attribute type 4 has an invalid length. [ 374.764593][T12390] netlink: 'syz.4.2356': attribute type 4 has an invalid length. [ 375.777810][T12413] FAULT_INJECTION: forcing a failure. [ 375.777810][T12413] name failslab, interval 1, probability 0, space 0, times 0 [ 375.826653][T12413] CPU: 1 UID: 0 PID: 12413 Comm: syz.1.2371 Not tainted 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(full) [ 375.826697][T12413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 375.826713][T12413] Call Trace: [ 375.826723][T12413] [ 375.826733][T12413] dump_stack_lvl+0x16c/0x1f0 [ 375.826773][T12413] should_fail_ex+0x512/0x640 [ 375.826824][T12413] ? __kmalloc_noprof+0xbf/0x510 [ 375.826863][T12413] ? handler_new_ref+0x1b0/0xc60 [ 375.826899][T12413] should_failslab+0xc2/0x120 [ 375.826939][T12413] __kmalloc_noprof+0xd2/0x510 [ 375.826973][T12413] ? __asan_memcpy+0x3c/0x60 [ 375.827015][T12413] handler_new_ref+0x1b0/0xc60 [ 375.827070][T12413] v4l2_ctrl_new+0x1963/0x2180 [ 375.827128][T12413] ? __pfx_v4l2_ctrl_new+0x10/0x10 [ 375.827184][T12413] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 375.827235][T12413] v4l2_ctrl_new_std+0x1be/0x290 [ 375.827302][T12413] ? __pfx_v4l2_ctrl_new_std+0x10/0x10 [ 375.827351][T12413] ? rcu_is_watching+0x12/0xc0 [ 375.827384][T12413] ? trace_kmalloc+0x2b/0xd0 [ 375.827426][T12413] ? __kvmalloc_node_noprof+0x298/0x620 [ 375.827463][T12413] ? v4l2_ctrl_handler_init_class+0x1fc/0x340 [ 375.827510][T12413] ? media_request_object_init+0x100/0x180 [ 375.827564][T12413] vicodec_open+0x1d0/0xf90 [ 375.827604][T12413] v4l2_open+0x222/0x490 [ 375.827637][T12413] ? __pfx_v4l2_open+0x10/0x10 [ 375.827669][T12413] chrdev_open+0x231/0x6a0 [ 375.827703][T12413] ? __pfx_apparmor_file_open+0x10/0x10 [ 375.827736][T12413] ? __pfx_chrdev_open+0x10/0x10 [ 375.827775][T12413] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 375.827817][T12413] do_dentry_open+0x97f/0x1530 [ 375.827855][T12413] ? __pfx_chrdev_open+0x10/0x10 [ 375.827900][T12413] vfs_open+0x82/0x3f0 [ 375.827947][T12413] path_openat+0x1de4/0x2cb0 [ 375.827996][T12413] ? __pfx_path_openat+0x10/0x10 [ 375.828042][T12413] do_filp_open+0x20b/0x470 [ 375.828079][T12413] ? __pfx_do_filp_open+0x10/0x10 [ 375.828143][T12413] ? alloc_fd+0x471/0x7d0 [ 375.828187][T12413] do_sys_openat2+0x11b/0x1d0 [ 375.828229][T12413] ? __pfx_do_sys_openat2+0x10/0x10 [ 375.828299][T12413] __x64_sys_openat+0x174/0x210 [ 375.828348][T12413] ? __pfx___x64_sys_openat+0x10/0x10 [ 375.828411][T12413] do_syscall_64+0xcd/0x490 [ 375.828449][T12413] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.828477][T12413] RIP: 0033:0x7f169058ebe9 [ 375.828500][T12413] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 375.828529][T12413] RSP: 002b:00007f16914d4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 375.828558][T12413] RAX: ffffffffffffffda RBX: 00007f16907b5fa0 RCX: 00007f169058ebe9 [ 375.828575][T12413] RDX: 00000000000c0400 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 375.828591][T12413] RBP: 00007f1690611e19 R08: 0000000000000000 R09: 0000000000000000 [ 375.828609][T12413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 375.828624][T12413] R13: 00007f16907b6038 R14: 00007f16907b5fa0 R15: 00007fff7fb9ea18 [ 375.828665][T12413] [ 376.534718][T12425] netlink: 74 bytes leftover after parsing attributes in process `syz.2.2375'. [ 377.428022][T12463] netlink: 334 bytes leftover after parsing attributes in process `syz.4.2392'. [ 377.674817][T12471] netlink: 342 bytes leftover after parsing attributes in process `syz.3.2396'. [ 379.528702][T12507] Process accounting paused [ 379.741801][T12517] netlink: 86 bytes leftover after parsing attributes in process `syz.3.2412'. [ 380.723557][T12528] netlink: 122 bytes leftover after parsing attributes in process `syz.3.2418'. [ 381.325242][T12543] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2424'. [ 381.353796][T12543] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2424'. [ 381.595994][T12558] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2428'. [ 381.613940][T12560] tipc: Trying to set illegal importance in message [ 381.727723][T12566] FAULT_INJECTION: forcing a failure. [ 381.727723][T12566] name failslab, interval 1, probability 0, space 0, times 0 [ 381.740434][T12566] CPU: 1 UID: 0 PID: 12566 Comm: syz.3.2434 Not tainted 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(full) [ 381.740487][T12566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 381.740506][T12566] Call Trace: [ 381.740516][T12566] [ 381.740528][T12566] dump_stack_lvl+0x116/0x1f0 [ 381.740573][T12566] should_fail_ex+0x512/0x640 [ 381.740622][T12566] should_failslab+0xc2/0x120 [ 381.740664][T12566] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 381.740703][T12566] ? __send_signal_locked+0x159/0x12c0 [ 381.740753][T12566] ? sig_get_ucounts+0x1c0/0x5b0 [ 381.740802][T12566] __send_signal_locked+0x159/0x12c0 [ 381.740863][T12566] group_send_sig_info+0x2a4/0x300 [ 381.740900][T12566] ? __pfx_group_send_sig_info+0x10/0x10 [ 381.740952][T12566] ? kill_pid_info_type+0x1a/0x2a0 [ 381.740989][T12566] kill_pid_info_type+0x92/0x2a0 [ 381.741032][T12566] kill_proc_info+0x6f/0x1b0 [ 381.741072][T12566] kill_something_info+0x2a2/0x310 [ 381.741108][T12566] ? __task_pid_nr_ns+0x186/0x500 [ 381.741157][T12566] __x64_sys_kill+0xd7/0x140 [ 381.741198][T12566] ? __pfx___x64_sys_kill+0x10/0x10 [ 381.741251][T12566] ? rcu_is_watching+0x12/0xc0 [ 381.741287][T12566] do_syscall_64+0xcd/0x490 [ 381.741330][T12566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.741360][T12566] RIP: 0033:0x7f7ce778ebe9 [ 381.741386][T12566] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 381.741415][T12566] RSP: 002b:00007f7ce8584038 EFLAGS: 00000246 ORIG_RAX: 000000000000003e [ 381.741453][T12566] RAX: ffffffffffffffda RBX: 00007f7ce79b5fa0 RCX: 00007f7ce778ebe9 [ 381.741482][T12566] RDX: 0000000000000000 RSI: 0000000000000011 RDI: 00000000000005e3 [ 381.741500][T12566] RBP: 00007f7ce7811e19 R08: 0000000000000000 R09: 0000000000000000 [ 381.741518][T12566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 381.741536][T12566] R13: 00007f7ce79b6038 R14: 00007f7ce79b5fa0 R15: 00007ffdc1bb4848 [ 381.741587][T12566] [ 382.820358][T12596] FAULT_INJECTION: forcing a failure. [ 382.820358][T12596] name failslab, interval 1, probability 0, space 0, times 0 [ 382.825067][T12597] netlink: 'syz.2.2448': attribute type 27 has an invalid length. [ 382.833664][T12596] CPU: 1 UID: 0 PID: 12596 Comm: syz.4.2447 Not tainted 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(full) [ 382.833703][T12596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 382.833718][T12596] Call Trace: [ 382.833727][T12596] [ 382.833738][T12596] dump_stack_lvl+0x16c/0x1f0 [ 382.833777][T12596] should_fail_ex+0x512/0x640 [ 382.833811][T12596] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 382.833843][T12596] should_failslab+0xc2/0x120 [ 382.833877][T12596] __kmalloc_cache_noprof+0x6a/0x3e0 [ 382.833904][T12596] ? kfree+0x2b4/0x4d0 [ 382.833926][T12596] ? memtype_get_idx+0x3d/0xc0 [ 382.833964][T12596] memtype_get_idx+0x3d/0xc0 [ 382.833996][T12596] seq_read_iter+0xa0f/0x12c0 [ 382.834039][T12596] seq_read+0x3a3/0x570 [ 382.834065][T12596] ? __pfx_seq_read+0x10/0x10 [ 382.834118][T12596] full_proxy_read+0x131/0x1a0 [ 382.834157][T12596] ? __pfx_full_proxy_read+0x10/0x10 [ 382.834196][T12596] vfs_read+0x1e4/0xcf0 [ 382.834231][T12596] ? __pfx___mutex_lock+0x10/0x10 [ 382.834265][T12596] ? __pfx_vfs_read+0x10/0x10 [ 382.834313][T12596] ? __fget_files+0x20e/0x3c0 [ 382.834352][T12596] ksys_read+0x12a/0x250 [ 382.834381][T12596] ? __pfx_ksys_read+0x10/0x10 [ 382.834421][T12596] do_syscall_64+0xcd/0x490 [ 382.834457][T12596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.834483][T12596] RIP: 0033:0x7f2dea98ebe9 [ 382.834505][T12596] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 382.834530][T12596] RSP: 002b:00007f2deb8b9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 382.834556][T12596] RAX: ffffffffffffffda RBX: 00007f2deabb5fa0 RCX: 00007f2dea98ebe9 [ 382.834579][T12596] RDX: 00000000000000f8 RSI: 0000200000000240 RDI: 0000000000000005 [ 382.834595][T12596] RBP: 00007f2deaa11e19 R08: 0000000000000000 R09: 0000000000000000 [ 382.834610][T12596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 382.834626][T12596] R13: 00007f2deabb6038 R14: 00007f2deabb5fa0 R15: 00007ffe13d90748 [ 382.834662][T12596] [ 382.969827][T12599] netlink: 'syz.4.2449': attribute type 14 has an invalid length. [ 383.012863][T12597] netlink: 334 bytes leftover after parsing attributes in process `syz.2.2448'. [ 383.106049][T12599] netlink: 330 bytes leftover after parsing attributes in process `syz.4.2449'. [ 383.661468][T12616] FAULT_INJECTION: forcing a failure. [ 383.661468][T12616] name failslab, interval 1, probability 0, space 0, times 0 [ 383.696343][T12616] CPU: 0 UID: 0 PID: 12616 Comm: syz.4.2456 Not tainted 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(full) [ 383.696390][T12616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 383.696408][T12616] Call Trace: [ 383.696417][T12616] [ 383.696429][T12616] dump_stack_lvl+0x16c/0x1f0 [ 383.696473][T12616] should_fail_ex+0x512/0x640 [ 383.696524][T12616] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 383.696562][T12616] should_failslab+0xc2/0x120 [ 383.696605][T12616] __kmalloc_cache_noprof+0x6a/0x3e0 [ 383.696635][T12616] ? __lock_acquire+0xb97/0x1ce0 [ 383.696673][T12616] ? snd_timer_instance_new+0x47/0x2e0 [ 383.696722][T12616] snd_timer_instance_new+0x47/0x2e0 [ 383.696807][T12616] snd_seq_timer_open+0x1cc/0x600 [ 383.696848][T12616] ? __pfx_snd_seq_timer_open+0x10/0x10 [ 383.696890][T12616] ? find_held_lock+0x2b/0x80 [ 383.696934][T12616] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 383.696969][T12616] ? lockdep_hardirqs_on+0x7c/0x110 [ 383.697006][T12616] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 383.697046][T12616] queue_use+0xe3/0x250 [ 383.697077][T12616] snd_seq_queue_alloc+0x2e5/0x5a0 [ 383.697115][T12616] snd_seq_ioctl_create_queue+0xa9/0x380 [ 383.697159][T12616] snd_seq_kernel_client_ctl+0x107/0x1c0 [ 383.697210][T12616] alloc_seq_queue+0xda/0x180 [ 383.697254][T12616] ? __pfx_alloc_seq_queue+0x10/0x10 [ 383.697322][T12616] ? mark_held_locks+0x49/0x80 [ 383.697361][T12616] ? _raw_spin_unlock_irq+0x23/0x50 [ 383.697398][T12616] snd_seq_oss_open+0x38c/0xa20 [ 383.697448][T12616] odev_open+0x6f/0x90 [ 383.697488][T12616] ? __pfx_odev_open+0x10/0x10 [ 383.697551][T12616] soundcore_open+0x409/0x580 [ 383.697596][T12616] ? __pfx_soundcore_open+0x10/0x10 [ 383.697636][T12616] chrdev_open+0x231/0x6a0 [ 383.697675][T12616] ? __pfx_apparmor_file_open+0x10/0x10 [ 383.697709][T12616] ? __pfx_chrdev_open+0x10/0x10 [ 383.697750][T12616] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 383.697793][T12616] do_dentry_open+0x97f/0x1530 [ 383.697830][T12616] ? __pfx_chrdev_open+0x10/0x10 [ 383.697878][T12616] vfs_open+0x82/0x3f0 [ 383.697926][T12616] path_openat+0x1de4/0x2cb0 [ 383.697977][T12616] ? __pfx_path_openat+0x10/0x10 [ 383.698024][T12616] do_filp_open+0x20b/0x470 [ 383.698061][T12616] ? __pfx_do_filp_open+0x10/0x10 [ 383.698129][T12616] ? alloc_fd+0x471/0x7d0 [ 383.698173][T12616] do_sys_openat2+0x11b/0x1d0 [ 383.698219][T12616] ? __pfx_do_sys_openat2+0x10/0x10 [ 383.698280][T12616] __x64_sys_openat+0x174/0x210 [ 383.698328][T12616] ? __pfx___x64_sys_openat+0x10/0x10 [ 383.698393][T12616] do_syscall_64+0xcd/0x490 [ 383.698435][T12616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.698468][T12616] RIP: 0033:0x7f2dea98ebe9 [ 383.698494][T12616] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 383.698532][T12616] RSP: 002b:00007f2deb8b9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 383.698562][T12616] RAX: ffffffffffffffda RBX: 00007f2deabb5fa0 RCX: 00007f2dea98ebe9 [ 383.698582][T12616] RDX: 0000000000000042 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 383.698601][T12616] RBP: 00007f2deaa11e19 R08: 0000000000000000 R09: 0000000000000000 [ 383.698619][T12616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 383.698636][T12616] R13: 00007f2deabb6038 R14: 00007f2deabb5fa0 R15: 00007ffe13d90748 [ 383.698677][T12616] [ 384.150905][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.157433][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.403676][T12620] workqueue: max_active 107773132 requested for writeback is out of range, clamping between 1 and 2048 [ 385.767411][T12651] netlink: 342 bytes leftover after parsing attributes in process `syz.2.2470'. [ 386.058656][T12657] FAULT_INJECTION: forcing a failure. [ 386.058656][T12657] name failslab, interval 1, probability 0, space 0, times 0 [ 386.090950][T12657] CPU: 1 UID: 0 PID: 12657 Comm: syz.2.2471 Not tainted 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(full) [ 386.090996][T12657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 386.091014][T12657] Call Trace: [ 386.091024][T12657] [ 386.091036][T12657] dump_stack_lvl+0x16c/0x1f0 [ 386.091080][T12657] should_fail_ex+0x512/0x640 [ 386.091121][T12657] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 386.091157][T12657] should_failslab+0xc2/0x120 [ 386.091198][T12657] __kmalloc_cache_noprof+0x6a/0x3e0 [ 386.091231][T12657] ? snd_seq_prioq_new+0x3f/0x110 [ 386.091274][T12657] snd_seq_prioq_new+0x3f/0x110 [ 386.091308][T12657] snd_seq_queue_alloc+0x12b/0x5a0 [ 386.091347][T12657] snd_seq_ioctl_create_queue+0xa9/0x380 [ 386.091392][T12657] snd_seq_kernel_client_ctl+0x107/0x1c0 [ 386.091444][T12657] alloc_seq_queue+0xda/0x180 [ 386.091496][T12657] ? __pfx_alloc_seq_queue+0x10/0x10 [ 386.091568][T12657] ? mark_held_locks+0x49/0x80 [ 386.091608][T12657] ? _raw_spin_unlock_irq+0x23/0x50 [ 386.091647][T12657] snd_seq_oss_open+0x38c/0xa20 [ 386.091703][T12657] odev_open+0x6f/0x90 [ 386.091743][T12657] ? __pfx_odev_open+0x10/0x10 [ 386.091784][T12657] soundcore_open+0x409/0x580 [ 386.091830][T12657] ? __pfx_soundcore_open+0x10/0x10 [ 386.091871][T12657] chrdev_open+0x231/0x6a0 [ 386.091909][T12657] ? __pfx_apparmor_file_open+0x10/0x10 [ 386.091948][T12657] ? __pfx_chrdev_open+0x10/0x10 [ 386.091989][T12657] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 386.092032][T12657] do_dentry_open+0x97f/0x1530 [ 386.092070][T12657] ? __pfx_chrdev_open+0x10/0x10 [ 386.092118][T12657] vfs_open+0x82/0x3f0 [ 386.092168][T12657] path_openat+0x1de4/0x2cb0 [ 386.092219][T12657] ? __pfx_path_openat+0x10/0x10 [ 386.092264][T12657] do_filp_open+0x20b/0x470 [ 386.092302][T12657] ? __pfx_do_filp_open+0x10/0x10 [ 386.092369][T12657] ? alloc_fd+0x471/0x7d0 [ 386.092415][T12657] do_sys_openat2+0x11b/0x1d0 [ 386.092463][T12657] ? __pfx_do_sys_openat2+0x10/0x10 [ 386.092533][T12657] __x64_sys_openat+0x174/0x210 [ 386.092582][T12657] ? __pfx___x64_sys_openat+0x10/0x10 [ 386.092648][T12657] do_syscall_64+0xcd/0x490 [ 386.092690][T12657] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.092720][T12657] RIP: 0033:0x7f56e758ebe9 [ 386.092744][T12657] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 386.092774][T12657] RSP: 002b:00007f56e84da038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 386.092803][T12657] RAX: ffffffffffffffda RBX: 00007f56e77b5fa0 RCX: 00007f56e758ebe9 [ 386.092823][T12657] RDX: 0000000000143900 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 386.092842][T12657] RBP: 00007f56e7611e19 R08: 0000000000000000 R09: 0000000000000000 [ 386.092860][T12657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 386.092878][T12657] R13: 00007f56e77b6038 R14: 00007f56e77b5fa0 R15: 00007ffc01c57978 [ 386.092918][T12657] [ 387.153678][T12679] aoe: skb alloc failure [ 387.160586][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 387.167565][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 387.280736][T12685] netlink: 334 bytes leftover after parsing attributes in process `syz.3.2481'. [ 387.464618][T12689] netlink: 334 bytes leftover after parsing attributes in process `syz.4.2482'. [ 387.942296][T12701] FAULT_INJECTION: forcing a failure. [ 387.942296][T12701] name failslab, interval 1, probability 0, space 0, times 0 [ 387.956462][T12701] CPU: 1 UID: 0 PID: 12701 Comm: syz.2.2488 Not tainted 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(full) [ 387.956509][T12701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 387.956528][T12701] Call Trace: [ 387.956539][T12701] [ 387.956550][T12701] dump_stack_lvl+0x16c/0x1f0 [ 387.956596][T12701] should_fail_ex+0x512/0x640 [ 387.956639][T12701] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 387.956681][T12701] should_failslab+0xc2/0x120 [ 387.956723][T12701] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 387.956760][T12701] ? __alloc_skb+0x2b2/0x380 [ 387.956796][T12701] ? __pfx_idr_get_next_ul+0x10/0x10 [ 387.956836][T12701] __alloc_skb+0x2b2/0x380 [ 387.956871][T12701] ? __pfx___alloc_skb+0x10/0x10 [ 387.956912][T12701] ? idr_get_next+0xec/0x150 [ 387.956946][T12701] ? __pfx_idr_get_next+0x10/0x10 [ 387.956986][T12701] ctrl_build_family_msg+0x36/0xa0 [ 387.957037][T12701] ctrl_getfamily+0x354/0x540 [ 387.957085][T12701] ? __pfx_ctrl_getfamily+0x10/0x10 [ 387.957136][T12701] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 387.957185][T12701] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 387.957251][T12701] genl_family_rcv_msg_doit+0x209/0x2f0 [ 387.957300][T12701] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 387.957345][T12701] ? genl_get_cmd+0x194/0x580 [ 387.957401][T12701] ? __radix_tree_lookup+0x21f/0x2c0 [ 387.957445][T12701] genl_rcv_msg+0x55c/0x800 [ 387.957494][T12701] ? __pfx_genl_rcv_msg+0x10/0x10 [ 387.957541][T12701] ? __pfx_ctrl_getfamily+0x10/0x10 [ 387.957604][T12701] netlink_rcv_skb+0x158/0x420 [ 387.957644][T12701] ? __pfx_genl_rcv_msg+0x10/0x10 [ 387.957692][T12701] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 387.957751][T12701] ? netlink_deliver_tap+0x1ae/0xd30 [ 387.957797][T12701] genl_rcv+0x28/0x40 [ 387.957837][T12701] netlink_unicast+0x5a7/0x870 [ 387.957884][T12701] ? __pfx_netlink_unicast+0x10/0x10 [ 387.957926][T12701] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 387.957981][T12701] netlink_sendmsg+0x8d1/0xdd0 [ 387.958029][T12701] ? __pfx_netlink_sendmsg+0x10/0x10 [ 387.958076][T12701] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 387.958117][T12701] __sys_sendto+0x4a0/0x520 [ 387.958154][T12701] ? __pfx___sys_sendto+0x10/0x10 [ 387.958202][T12701] ? find_held_lock+0x2b/0x80 [ 387.958273][T12701] __x64_sys_sendto+0xe0/0x1c0 [ 387.958307][T12701] ? do_syscall_64+0x91/0x490 [ 387.958347][T12701] ? lockdep_hardirqs_on+0x7c/0x110 [ 387.958379][T12701] do_syscall_64+0xcd/0x490 [ 387.958417][T12701] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.958447][T12701] RIP: 0033:0x7f56e7590a7c [ 387.958473][T12701] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 387.958500][T12701] RSP: 002b:00007f56e84d8ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 387.958528][T12701] RAX: ffffffffffffffda RBX: 00007f56e84d8fc0 RCX: 00007f56e7590a7c [ 387.958545][T12701] RDX: 0000000000000028 RSI: 00007f56e84d9010 RDI: 0000000000000003 [ 387.958562][T12701] RBP: 0000000000000000 R08: 00007f56e84d8f14 R09: 000000000000000c [ 387.958579][T12701] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 387.958595][T12701] R13: 00007f56e84d8f68 R14: 00007f56e84d9010 R15: 0000000000000000 [ 387.958633][T12701] [ 389.854974][T12739] netlink: 334 bytes leftover after parsing attributes in process `syz.3.2503'. [ 390.217851][T12748] netlink: 342 bytes leftover after parsing attributes in process `syz.3.2507'. [ 390.231566][T12750] netlink: 330 bytes leftover after parsing attributes in process `syz.4.2506'. [ 390.360755][T12757] FAULT_INJECTION: forcing a failure. [ 390.360755][T12757] name failslab, interval 1, probability 0, space 0, times 0 [ 390.374751][T12757] CPU: 1 UID: 0 PID: 12757 Comm: syz.3.2510 Not tainted 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(full) [ 390.374795][T12757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 390.374812][T12757] Call Trace: [ 390.374823][T12757] [ 390.374835][T12757] dump_stack_lvl+0x16c/0x1f0 [ 390.374878][T12757] should_fail_ex+0x512/0x640 [ 390.374920][T12757] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 390.374962][T12757] should_failslab+0xc2/0x120 [ 390.375002][T12757] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 390.375040][T12757] ? alloc_inode+0x61/0x240 [ 390.375089][T12757] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 390.375121][T12757] alloc_inode+0x61/0x240 [ 390.375160][T12757] new_inode+0x22/0x1c0 [ 390.375204][T12757] __debugfs_create_file+0x11c/0x6b0 [ 390.375255][T12757] debugfs_create_file_full+0x41/0x60 [ 390.375297][T12757] ref_tracker_dir_debugfs+0x19d/0x290 [ 390.375338][T12757] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 390.375387][T12757] ? lockdep_init_map_type+0x5c/0x280 [ 390.375415][T12757] preinit_net+0x47f/0x8f0 [ 390.375439][T12757] copy_net_ns+0x1da/0x5f0 [ 390.375477][T12757] create_new_namespaces+0x3ea/0xa90 [ 390.375519][T12757] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 390.375554][T12757] ksys_unshare+0x45b/0xa40 [ 390.375590][T12757] ? __pfx_ksys_unshare+0x10/0x10 [ 390.375627][T12757] ? xfd_validate_state+0x61/0x180 [ 390.375681][T12757] __x64_sys_unshare+0x31/0x40 [ 390.375717][T12757] do_syscall_64+0xcd/0x490 [ 390.375756][T12757] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.375783][T12757] RIP: 0033:0x7f7ce778ebe9 [ 390.375808][T12757] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 390.375837][T12757] RSP: 002b:00007f7ce8584038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 390.375866][T12757] RAX: ffffffffffffffda RBX: 00007f7ce79b5fa0 RCX: 00007f7ce778ebe9 [ 390.375884][T12757] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 390.375901][T12757] RBP: 00007f7ce7811e19 R08: 0000000000000000 R09: 0000000000000000 [ 390.375917][T12757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 390.375935][T12757] R13: 00007f7ce79b6038 R14: 00007f7ce79b5fa0 R15: 00007ffdc1bb4848 [ 390.375977][T12757] [ 390.375989][T12757] debugfs: out of free dentries, can not create file 'net_notrefcnt@ffff88803344a628' [ 390.807680][T12765] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2517'. [ 391.403325][T12778] netlink: 186 bytes leftover after parsing attributes in process `syz.2.2520'. [ 391.433768][T12778] netlink: 186 bytes leftover after parsing attributes in process `syz.2.2520'. [ 391.547824][T12786] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2524'. [ 391.627828][T12788] netlink: 146 bytes leftover after parsing attributes in process `syz.3.2525'. [ 392.025325][T12792] FAULT_INJECTION: forcing a failure. [ 392.025325][T12792] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 392.050962][T12792] CPU: 1 UID: 0 PID: 12792 Comm: syz.2.2534 Not tainted 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(full) [ 392.051016][T12792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 392.051033][T12792] Call Trace: [ 392.051043][T12792] [ 392.051055][T12792] dump_stack_lvl+0x16c/0x1f0 [ 392.051101][T12792] should_fail_ex+0x512/0x640 [ 392.051149][T12792] should_fail_alloc_page+0xe7/0x130 [ 392.051194][T12792] prepare_alloc_pages+0x3c2/0x610 [ 392.051245][T12792] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 392.051297][T12792] ? __lock_acquire+0x62e/0x1ce0 [ 392.051343][T12792] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 392.051381][T12792] ? css_rstat_updated+0x1c2/0x510 [ 392.051428][T12792] ? filemap_get_entry+0x1a7/0x3b0 [ 392.051481][T12792] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 392.051529][T12792] ? policy_nodemask+0xea/0x4e0 [ 392.051573][T12792] alloc_pages_mpol+0x1fb/0x550 [ 392.051614][T12792] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 392.051653][T12792] ? _raw_spin_unlock+0x28/0x50 [ 392.051685][T12792] ? swap_entry_swapped+0x122/0x190 [ 392.051724][T12792] ? __pfx_swap_entry_swapped+0x10/0x10 [ 392.051768][T12792] folio_alloc_mpol_noprof+0x36/0x2f0 [ 392.051816][T12792] __read_swap_cache_async+0x3b6/0x5a0 [ 392.051855][T12792] ? __pfx___read_swap_cache_async+0x10/0x10 [ 392.051888][T12792] ? __pfx_get_swap_device+0x10/0x10 [ 392.051927][T12792] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 392.051980][T12792] read_swap_cache_async+0xdc/0x1e0 [ 392.052013][T12792] ? __pfx_read_swap_cache_async+0x10/0x10 [ 392.052044][T12792] ? find_held_lock+0x2b/0x80 [ 392.052071][T12792] ? find_held_lock+0x2b/0x80 [ 392.052099][T12792] ? swapin_walk_pmd_entry+0x25f/0x5c0 [ 392.052142][T12792] swapin_walk_pmd_entry+0x283/0x5c0 [ 392.052188][T12792] ? __pfx_swapin_walk_pmd_entry+0x10/0x10 [ 392.052230][T12792] ? kasan_save_stack+0x42/0x60 [ 392.052263][T12792] ? kasan_save_stack+0x33/0x60 [ 392.052295][T12792] ? kasan_save_track+0x14/0x30 [ 392.052327][T12792] ? kasan_save_free_info+0x3b/0x60 [ 392.052372][T12792] ? __kasan_slab_free+0x60/0x70 [ 392.052407][T12792] ? kfree+0x2b4/0x4d0 [ 392.052436][T12792] ? __pfx_swapin_walk_pmd_entry+0x10/0x10 [ 392.052491][T12792] walk_pgd_range+0xc02/0x1f50 [ 392.052560][T12792] ? __pfx_walk_pgd_range+0x10/0x10 [ 392.052603][T12792] ? __lock_acquire+0xb97/0x1ce0 [ 392.052646][T12792] __walk_page_range+0x163/0x820 [ 392.052705][T12792] walk_page_range_vma+0x2c7/0xa20 [ 392.052748][T12792] ? __pfx_walk_page_range_vma+0x10/0x10 [ 392.052786][T12792] ? finish_task_switch.isra.0+0x221/0xc10 [ 392.052838][T12792] madvise_vma_behavior+0x19cf/0x2d60 [ 392.052888][T12792] ? mas_prev_setup.constprop.0+0xb6/0x9d0 [ 392.052925][T12792] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 392.052973][T12792] ? __pfx_mas_prev+0x10/0x10 [ 392.053021][T12792] ? find_vma_prev+0xda/0x160 [ 392.053061][T12792] ? find_held_lock+0x2b/0x80 [ 392.053089][T12792] ? __pfx_find_vma_prev+0x10/0x10 [ 392.053132][T12792] ? futex_unqueue+0x133/0x2c0 [ 392.053180][T12792] ? __futex_wait+0x24c/0x2f0 [ 392.053228][T12792] madvise_walk_vmas+0x31f/0x9c0 [ 392.053273][T12792] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 392.053324][T12792] madvise_do_behavior+0x1e2/0x530 [ 392.053363][T12792] ? futex_private_hash_put+0x18a/0x300 [ 392.053400][T12792] ? __pfx_madvise_do_behavior+0x10/0x10 [ 392.053446][T12792] ? down_read+0x13d/0x480 [ 392.053525][T12792] do_madvise+0x176/0x240 [ 392.053569][T12792] ? __pfx_do_madvise+0x10/0x10 [ 392.053611][T12792] ? do_futex+0x122/0x350 [ 392.053682][T12792] ? xfd_validate_state+0x61/0x180 [ 392.053727][T12792] ? __pfx_do_writev+0x10/0x10 [ 392.053769][T12792] __x64_sys_madvise+0xa9/0x110 [ 392.053812][T12792] ? lockdep_hardirqs_on+0x7c/0x110 [ 392.053848][T12792] do_syscall_64+0xcd/0x490 [ 392.053891][T12792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.053922][T12792] RIP: 0033:0x7f56e758ebe9 [ 392.053946][T12792] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 392.053976][T12792] RSP: 002b:00007f56e84da038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 392.054004][T12792] RAX: ffffffffffffffda RBX: 00007f56e77b5fa0 RCX: 00007f56e758ebe9 [ 392.054025][T12792] RDX: 0000000000000003 RSI: 2000000080000001 RDI: 0000000000000000 [ 392.054043][T12792] RBP: 00007f56e7611e19 R08: 0000000000000000 R09: 0000000000000000 [ 392.054061][T12792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 392.054079][T12792] R13: 00007f56e77b6038 R14: 00007f56e77b5fa0 R15: 00007ffc01c57978 [ 392.054118][T12792] [ 392.665890][T12803] usb usb23: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 392.819220][T12808] FAULT_INJECTION: forcing a failure. [ 392.819220][T12808] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 392.855743][T12808] CPU: 0 UID: 0 PID: 12808 Comm: syz.4.2531 Not tainted 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(full) [ 392.855787][T12808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 392.855803][T12808] Call Trace: [ 392.855815][T12808] [ 392.855826][T12808] dump_stack_lvl+0x16c/0x1f0 [ 392.855865][T12808] should_fail_ex+0x512/0x640 [ 392.855911][T12808] should_fail_alloc_page+0xe7/0x130 [ 392.855951][T12808] prepare_alloc_pages+0x3c2/0x610 [ 392.856002][T12808] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 392.856048][T12808] ? finish_fault+0x738/0x1110 [ 392.856099][T12808] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 392.856137][T12808] ? folio_unlock+0x7d/0xd0 [ 392.856164][T12808] ? do_pte_missing+0x56d/0x3ba0 [ 392.856198][T12808] ? __handle_mm_fault+0x14fd/0x2a50 [ 392.856242][T12808] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 392.856287][T12808] ? policy_nodemask+0xea/0x4e0 [ 392.856328][T12808] alloc_pages_mpol+0x1fb/0x550 [ 392.856368][T12808] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 392.856420][T12808] folio_alloc_mpol_noprof+0x36/0x2f0 [ 392.856464][T12808] shmem_alloc_folio+0x135/0x160 [ 392.856511][T12808] shmem_alloc_and_add_folio+0x499/0xc20 [ 392.856553][T12808] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 392.856591][T12808] ? shmem_allowable_huge_orders+0xcb/0x2f0 [ 392.856631][T12808] shmem_get_folio_gfp+0x67f/0x1600 [ 392.856675][T12808] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 392.856722][T12808] shmem_write_begin+0x160/0x300 [ 392.856763][T12808] ? __pfx_shmem_write_begin+0x10/0x10 [ 392.856800][T12808] ? balance_dirty_pages_ratelimited_flags+0x92/0x1260 [ 392.856853][T12808] generic_perform_write+0x3c2/0x900 [ 392.856896][T12808] ? __pfx_generic_perform_write+0x10/0x10 [ 392.856932][T12808] ? generic_update_time+0xcf/0xf0 [ 392.856965][T12808] ? mnt_put_write_access_file+0x45/0xf0 [ 392.856999][T12808] shmem_file_write_iter+0x10e/0x140 [ 392.857039][T12808] do_iter_readv_writev+0x662/0x9e0 [ 392.857073][T12808] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 392.857123][T12808] vfs_writev+0x35f/0xde0 [ 392.857165][T12808] ? __pfx_vfs_writev+0x10/0x10 [ 392.857190][T12808] ? __mutex_lock+0x1c4/0x10b0 [ 392.857249][T12808] ? __pfx___mutex_lock+0x10/0x10 [ 392.857298][T12808] ? __fget_files+0x20e/0x3c0 [ 392.857340][T12808] ? do_writev+0x132/0x340 [ 392.857366][T12808] do_writev+0x132/0x340 [ 392.857394][T12808] ? __pfx_do_writev+0x10/0x10 [ 392.857437][T12808] do_syscall_64+0xcd/0x490 [ 392.857474][T12808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.857502][T12808] RIP: 0033:0x7f2dea98ebe9 [ 392.857525][T12808] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 392.857552][T12808] RSP: 002b:00007f2deb8b9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 392.857581][T12808] RAX: ffffffffffffffda RBX: 00007f2deabb5fa0 RCX: 00007f2dea98ebe9 [ 392.857600][T12808] RDX: 0000000000000008 RSI: 0000200000000100 RDI: 0000000000000003 [ 392.857619][T12808] RBP: 00007f2deaa11e19 R08: 0000000000000000 R09: 0000000000000000 [ 392.857637][T12808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 392.857654][T12808] R13: 00007f2deabb6038 R14: 00007f2deabb5fa0 R15: 00007ffe13d90748 [ 392.857693][T12808] [ 393.675837][T12826] device-mapper: ioctl: Unable to rename non-existent device, to uuid „ [ 394.294248][T12848] netlink: 342 bytes leftover after parsing attributes in process `syz.4.2550'. [ 395.663534][T12882] FAULT_INJECTION: forcing a failure. [ 395.663534][T12882] name failslab, interval 1, probability 0, space 0, times 0 [ 395.712323][T12882] CPU: 0 UID: 0 PID: 12882 Comm: syz.2.2563 Not tainted 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(full) [ 395.712372][T12882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 395.712389][T12882] Call Trace: [ 395.712398][T12882] [ 395.712410][T12882] dump_stack_lvl+0x16c/0x1f0 [ 395.712462][T12882] should_fail_ex+0x512/0x640 [ 395.712504][T12882] ? __kmalloc_noprof+0xbf/0x510 [ 395.712544][T12882] ? lsm_blob_alloc+0x68/0x90 [ 395.712583][T12882] should_failslab+0xc2/0x120 [ 395.712620][T12882] __kmalloc_noprof+0xd2/0x510 [ 395.712664][T12882] lsm_blob_alloc+0x68/0x90 [ 395.712710][T12882] security_sk_alloc+0x30/0x270 [ 395.712747][T12882] sk_prot_alloc+0x1c7/0x2a0 [ 395.712795][T12882] sk_alloc+0x36/0xc20 [ 395.712833][T12882] __netlink_create+0x5e/0x2c0 [ 395.712868][T12882] __netlink_kernel_create+0xed/0x750 [ 395.712911][T12882] ? __pfx___netlink_kernel_create+0x10/0x10 [ 395.712960][T12882] ? __pfx_crypto_netlink_init+0x10/0x10 [ 395.712994][T12882] crypto_netlink_init+0xb7/0x140 [ 395.713021][T12882] ? cpus_read_unlock+0x83/0x150 [ 395.713052][T12882] ? __pfx_crypto_netlink_init+0x10/0x10 [ 395.713080][T12882] ? __nf_register_net_hook+0x371/0x730 [ 395.713116][T12882] ? __pfx_crypto_netlink_rcv+0x10/0x10 [ 395.713149][T12882] ? nf_register_net_hook+0x117/0x160 [ 395.713183][T12882] ? nf_register_net_hooks+0xb1/0xd0 [ 395.713221][T12882] ops_init+0x1e2/0x5f0 [ 395.713262][T12882] setup_net+0x10f/0x380 [ 395.713297][T12882] ? lockdep_init_map_type+0x5c/0x280 [ 395.713340][T12882] ? __pfx_setup_net+0x10/0x10 [ 395.713381][T12882] ? debug_mutex_init+0x37/0x70 [ 395.713418][T12882] copy_net_ns+0x2a6/0x5f0 [ 395.713475][T12882] create_new_namespaces+0x3ea/0xa90 [ 395.713520][T12882] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 395.713560][T12882] ksys_unshare+0x45b/0xa40 [ 395.713603][T12882] ? __pfx_ksys_unshare+0x10/0x10 [ 395.713660][T12882] __x64_sys_unshare+0x31/0x40 [ 395.713701][T12882] do_syscall_64+0xcd/0x490 [ 395.713744][T12882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.713774][T12882] RIP: 0033:0x7f56e758ebe9 [ 395.713801][T12882] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 395.713830][T12882] RSP: 002b:00007f56e84da038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 395.713861][T12882] RAX: ffffffffffffffda RBX: 00007f56e77b5fa0 RCX: 00007f56e758ebe9 [ 395.713880][T12882] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 395.713898][T12882] RBP: 00007f56e7611e19 R08: 0000000000000000 R09: 0000000000000000 [ 395.713917][T12882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 395.713934][T12882] R13: 00007f56e77b6038 R14: 00007f56e77b5fa0 R15: 00007ffc01c57978 [ 395.713973][T12882] [ 397.357299][T12914] netlink: 342 bytes leftover after parsing attributes in process `syz.3.2577'. [ 397.376486][T12912] Process accounting paused [ 397.657050][T12917] Process accounting paused [ 397.904407][ T8823] Bluetooth: hci1: unexpected event 0x3e length: 726 > 260 [ 397.904462][ T8823] Bluetooth: hci1: unexpected subevent 0x0a length: 725 > 30 [ 398.138056][T12926] netlink: 74 bytes leftover after parsing attributes in process `syz.4.2579'. [ 398.699472][T12928] netlink: 342 bytes leftover after parsing attributes in process `syz.3.2592'. [ 399.889547][T12964] netlink: 'syz.4.2595': attribute type 25 has an invalid length. [ 400.101619][T12968] netlink: 330 bytes leftover after parsing attributes in process `syz.4.2596'. [ 400.455592][T12973] misc userio: The device must be registered before sending interrupts [ 400.840598][T12983] netlink: 342 bytes leftover after parsing attributes in process `syz.2.2602'. [ 401.489766][T12992] FAULT_INJECTION: forcing a failure. [ 401.489766][T12992] name failslab, interval 1, probability 0, space 0, times 0 [ 401.515825][T12992] CPU: 1 UID: 0 PID: 12992 Comm: syz.4.2606 Not tainted 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(full) [ 401.515873][T12992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 401.515891][T12992] Call Trace: [ 401.515903][T12992] [ 401.515922][T12992] dump_stack_lvl+0x16c/0x1f0 [ 401.515968][T12992] should_fail_ex+0x512/0x640 [ 401.516010][T12992] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 401.516046][T12992] ? __pfx_tomoyo_gc_thread+0x10/0x10 [ 401.516083][T12992] should_failslab+0xc2/0x120 [ 401.516126][T12992] __kmalloc_cache_noprof+0x6a/0x3e0 [ 401.516157][T12992] ? lockdep_init_map_type+0x5c/0x280 [ 401.516190][T12992] ? __kthread_create_on_node+0xce/0x3f0 [ 401.516226][T12992] ? __init_swait_queue_head+0xca/0x150 [ 401.516275][T12992] ? __pfx_tomoyo_gc_thread+0x10/0x10 [ 401.516312][T12992] __kthread_create_on_node+0xce/0x3f0 [ 401.516355][T12992] ? __pfx___kthread_create_on_node+0x10/0x10 [ 401.516410][T12992] ? __pfx_tomoyo_gc_thread+0x10/0x10 [ 401.516470][T12992] kthread_create_on_node+0xc7/0x100 [ 401.516510][T12992] ? __pfx_kthread_create_on_node+0x10/0x10 [ 401.516546][T12992] ? kasan_quarantine_put+0x10a/0x240 [ 401.516586][T12992] ? find_held_lock+0x2b/0x80 [ 401.516616][T12992] ? tomoyo_notify_gc+0xc6/0x470 [ 401.516661][T12992] tomoyo_notify_gc+0xea/0x470 [ 401.516693][T12992] ? ima_iint_find+0xea/0x130 [ 401.516725][T12992] ? __pfx_tomoyo_release+0x10/0x10 [ 401.516768][T12992] tomoyo_release+0x31/0x40 [ 401.516808][T12992] __fput+0x3ff/0xb70 [ 401.516861][T12992] task_work_run+0x150/0x240 [ 401.516910][T12992] ? __pfx_task_work_run+0x10/0x10 [ 401.516959][T12992] ? __pfx___do_sys_close_range+0x10/0x10 [ 401.517006][T12992] exit_to_user_mode_loop+0xeb/0x110 [ 401.517053][T12992] do_syscall_64+0x3f6/0x490 [ 401.517096][T12992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.517127][T12992] RIP: 0033:0x7f2dea98ebe9 [ 401.517154][T12992] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 401.517184][T12992] RSP: 002b:00007f2deb8b9038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 401.517214][T12992] RAX: 0000000000000000 RBX: 00007f2deabb5fa0 RCX: 00007f2dea98ebe9 [ 401.517234][T12992] RDX: 0000000000000000 RSI: 000000000000000a RDI: 0000000000000002 [ 401.517252][T12992] RBP: 00007f2deaa11e19 R08: 0000000000000000 R09: 0000000000000000 [ 401.517270][T12992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 401.517288][T12992] R13: 00007f2deabb6038 R14: 00007f2deabb5fa0 R15: 00007ffe13d90748 [ 401.517328][T12992] [ 402.082834][T13001] netlink: 'syz.3.2610': attribute type 1 has an invalid length. [ 402.123386][T13001] netlink: 230 bytes leftover after parsing attributes in process `syz.3.2610'. [ 402.267701][T13006] netlink: 330 bytes leftover after parsing attributes in process `syz.2.2612'. [ 403.797746][T13046] netlink: 'syz.2.2631': attribute type 4 has an invalid length. [ 403.814898][T13046] netlink: 314 bytes leftover after parsing attributes in process `syz.2.2631'. [ 405.588947][T13072] netlink: 330 bytes leftover after parsing attributes in process `syz.3.2638'. [ 406.707381][ T8823] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 407.545859][T13120] netlink: 'syz.2.2657': attribute type 21 has an invalid length. [ 407.562728][T13120] netlink: 326 bytes leftover after parsing attributes in process `syz.2.2657'. [ 408.483032][T13140] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2663'. [ 409.338608][T13160] netlink: 330 bytes leftover after parsing attributes in process `syz.3.2671'. [ 410.123505][T13173] Process accounting resumed [ 410.930722][T13193] netlink: 'syz.3.2682': attribute type 21 has an invalid length. [ 410.938933][T13193] netlink: 334 bytes leftover after parsing attributes in process `syz.3.2682'. [ 411.180854][T13199] netlink: 330 bytes leftover after parsing attributes in process `syz.3.2684'. [ 411.805787][T13214] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2690'. [ 411.816693][T13214] netlink: 13 bytes leftover after parsing attributes in process `syz.4.2690'. [ 412.042706][T13219] netlink: 330 bytes leftover after parsing attributes in process `syz.4.2692'. [ 412.797308][T13233] netlink: 'syz.3.2699': attribute type 4 has an invalid length. [ 412.818618][T13233] netlink: 314 bytes leftover after parsing attributes in process `syz.3.2699'. [ 413.034683][T13241] netlink: 338 bytes leftover after parsing attributes in process `syz.3.2701'. [ 413.068367][T13241] bridge0: port 3(macvlan0) entered disabled state [ 413.076289][T13241] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.084343][T13241] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.749241][T13262] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2711'. [ 413.775876][T13262] netlink: 354 bytes leftover after parsing attributes in process `syz.1.2711'. [ 414.216670][T13266] FAULT_INJECTION: forcing a failure. [ 414.216670][T13266] name failslab, interval 1, probability 0, space 0, times 0 [ 414.241686][T13266] CPU: 1 UID: 0 PID: 13266 Comm: syz.4.2712 Not tainted 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(full) [ 414.241732][T13266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 414.241749][T13266] Call Trace: [ 414.241760][T13266] [ 414.241772][T13266] dump_stack_lvl+0x16c/0x1f0 [ 414.241817][T13266] should_fail_ex+0x512/0x640 [ 414.241856][T13266] ? __kmalloc_noprof+0xbf/0x510 [ 414.241922][T13266] ? vb2_core_allocated_buffers_storage+0xc4/0x220 [ 414.241969][T13266] should_failslab+0xc2/0x120 [ 414.242012][T13266] __kmalloc_noprof+0xd2/0x510 [ 414.242058][T13266] vb2_core_allocated_buffers_storage+0xc4/0x220 [ 414.242110][T13266] vb2_core_reqbufs+0x398/0xfe0 [ 414.242169][T13266] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 414.242243][T13266] __vb2_init_fileio+0x3f1/0x1100 [ 414.242271][T13266] ? lockdep_hardirqs_on+0x7c/0x110 [ 414.242307][T13266] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 414.242355][T13266] ? __pollwait+0x271/0x490 [ 414.242392][T13266] vb2_core_poll+0x5ec/0x700 [ 414.242423][T13266] vb2_poll+0x33/0x150 [ 414.242469][T13266] vb2_fop_poll+0x10f/0x2c0 [ 414.242518][T13266] ? __pfx_vb2_fop_poll+0x10/0x10 [ 414.242563][T13266] v4l2_poll+0x160/0x320 [ 414.242600][T13266] ? __pfx_v4l2_poll+0x10/0x10 [ 414.242635][T13266] do_select+0xd3a/0x17e0 [ 414.242701][T13266] ? __pfx_do_select+0x10/0x10 [ 414.242735][T13266] ? finish_task_switch.isra.0+0x21c/0xc10 [ 414.242769][T13266] ? __pfx___pollwait+0x10/0x10 [ 414.242805][T13266] ? __pfx_pollwake+0x10/0x10 [ 414.242905][T13266] ? find_held_lock+0x2b/0x80 [ 414.242935][T13266] ? __might_fault+0xe3/0x190 [ 414.242969][T13266] ? __might_fault+0xe3/0x190 [ 414.242999][T13266] ? __might_fault+0x13b/0x190 [ 414.243048][T13266] ? core_sys_select+0x453/0xc10 [ 414.243075][T13266] core_sys_select+0x453/0xc10 [ 414.243114][T13266] ? __pfx_core_sys_select+0x10/0x10 [ 414.243192][T13266] ? read_tsc+0x9/0x20 [ 414.243227][T13266] ? ktime_get_ts64+0x256/0x400 [ 414.243277][T13266] kern_select+0x15d/0x1e0 [ 414.243310][T13266] ? __pfx_kern_select+0x10/0x10 [ 414.243356][T13266] ? xfd_validate_state+0x61/0x180 [ 414.243399][T13266] ? __pfx_ksys_write+0x10/0x10 [ 414.243442][T13266] __x64_sys_select+0xbd/0x160 [ 414.243473][T13266] ? do_syscall_64+0x91/0x490 [ 414.243512][T13266] ? lockdep_hardirqs_on+0x7c/0x110 [ 414.243548][T13266] do_syscall_64+0xcd/0x490 [ 414.243592][T13266] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.243624][T13266] RIP: 0033:0x7f2dea98ebe9 [ 414.243652][T13266] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 414.243683][T13266] RSP: 002b:00007f2deb8b9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 414.243713][T13266] RAX: ffffffffffffffda RBX: 00007f2deabb5fa0 RCX: 00007f2dea98ebe9 [ 414.243733][T13266] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000005 [ 414.243752][T13266] RBP: 00007f2deaa11e19 R08: 00002000000001c0 R09: 0000000000000000 [ 414.243771][T13266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 414.243790][T13266] R13: 00007f2deabb6038 R14: 00007f2deabb5fa0 R15: 00007ffe13d90748 [ 414.243831][T13266] [ 414.776539][T13270] FAULT_INJECTION: forcing a failure. [ 414.776539][T13270] name failslab, interval 1, probability 0, space 0, times 0 [ 414.791245][T13270] CPU: 1 UID: 0 PID: 13270 Comm: syz.1.2715 Not tainted 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(full) [ 414.791300][T13270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 414.791318][T13270] Call Trace: [ 414.791328][T13270] [ 414.791338][T13270] dump_stack_lvl+0x16c/0x1f0 [ 414.791381][T13270] should_fail_ex+0x512/0x640 [ 414.791420][T13270] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 414.791460][T13270] should_failslab+0xc2/0x120 [ 414.791499][T13270] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 414.791534][T13270] ? __x64_sys_futex+0x1e0/0x4c0 [ 414.791570][T13270] ? __x64_sys_futex+0x1e9/0x4c0 [ 414.791605][T13270] ? prepare_creds+0x2c/0x7d0 [ 414.791652][T13270] prepare_creds+0x2c/0x7d0 [ 414.791697][T13270] keyctl_set_reqkey_keyring+0x8e/0x1c0 [ 414.791738][T13270] __do_sys_keyctl+0x6d/0x590 [ 414.791770][T13270] do_syscall_64+0xcd/0x490 [ 414.791810][T13270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.791839][T13270] RIP: 0033:0x7f169058ebe9 [ 414.791864][T13270] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 414.791892][T13270] RSP: 002b:00007f16914d4038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 414.791920][T13270] RAX: ffffffffffffffda RBX: 00007f16907b5fa0 RCX: 00007f169058ebe9 [ 414.791939][T13270] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000000e [ 414.791957][T13270] RBP: 00007f1690611e19 R08: 0000000000000008 R09: 0000000000000000 [ 414.791974][T13270] R10: 0000000000005eaf R11: 0000000000000246 R12: 0000000000000000 [ 414.791993][T13270] R13: 00007f16907b6038 R14: 00007f16907b5fa0 R15: 00007fff7fb9ea18 [ 414.792031][T13270] [ 417.252253][T13324] FAULT_INJECTION: forcing a failure. [ 417.252253][T13324] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 417.266445][T13324] CPU: 1 UID: 0 PID: 13324 Comm: syz.2.2733 Not tainted 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(full) [ 417.266490][T13324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 417.266508][T13324] Call Trace: [ 417.266518][T13324] [ 417.266531][T13324] dump_stack_lvl+0x16c/0x1f0 [ 417.266574][T13324] should_fail_ex+0x512/0x640 [ 417.266622][T13324] should_fail_alloc_page+0xe7/0x130 [ 417.266666][T13324] prepare_alloc_pages+0x3c2/0x610 [ 417.266719][T13324] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 417.266757][T13324] ? arch_stack_walk+0xa6/0x100 [ 417.266807][T13324] ? stack_trace_save+0x8e/0xc0 [ 417.266840][T13324] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 417.266871][T13324] ? rcu_is_watching+0x12/0xc0 [ 417.266912][T13324] ? kasan_save_track+0x14/0x30 [ 417.266942][T13324] ? __kasan_slab_alloc+0x89/0x90 [ 417.266972][T13324] ? kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 417.267000][T13324] ? __pmd_alloc+0xbf/0x930 [ 417.267034][T13324] ? __handle_mm_fault+0xa06/0x2a50 [ 417.267059][T13324] ? handle_mm_fault+0x589/0xd10 [ 417.267085][T13324] ? __get_user_pages+0x551/0x34a0 [ 417.267207][T13324] ? interleave_nodes+0x16b/0x410 [ 417.267251][T13324] ? policy_nodemask+0xea/0x4e0 [ 417.267291][T13324] alloc_pages_mpol+0x1fb/0x550 [ 417.267334][T13324] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 417.267424][T13324] alloc_pages_noprof+0x131/0x390 [ 417.267475][T13324] pte_alloc_one+0x1c/0x3a0 [ 417.267512][T13324] __pte_alloc+0x6d/0x3c0 [ 417.267552][T13324] ? __pfx___pte_alloc+0x10/0x10 [ 417.267597][T13324] ? do_raw_spin_lock+0x12c/0x2b0 [ 417.267648][T13324] do_pte_missing+0x285a/0x3ba0 [ 417.267679][T13324] ? do_raw_spin_unlock+0x172/0x230 [ 417.267728][T13324] ? _raw_spin_unlock+0x28/0x50 [ 417.267760][T13324] ? __pmd_alloc+0x3fb/0x930 [ 417.267810][T13324] __handle_mm_fault+0x152a/0x2a50 [ 417.267870][T13324] ? __pfx___handle_mm_fault+0x10/0x10 [ 417.267940][T13324] handle_mm_fault+0x589/0xd10 [ 417.267984][T13324] __get_user_pages+0x551/0x34a0 [ 417.268049][T13324] ? __pfx___get_user_pages+0x10/0x10 [ 417.268097][T13324] populate_vma_page_range+0x267/0x3f0 [ 417.268137][T13324] ? __pfx_populate_vma_page_range+0x10/0x10 [ 417.268183][T13324] ? __pfx_find_vma_intersection+0x10/0x10 [ 417.268231][T13324] ? do_mmap+0x69c/0x1210 [ 417.268280][T13324] __mm_populate+0x1d8/0x380 [ 417.268341][T13324] ? __pfx___mm_populate+0x10/0x10 [ 417.268393][T13324] ? up_write+0x1b2/0x520 [ 417.268444][T13324] vm_mmap_pgoff+0x37f/0x470 [ 417.268494][T13324] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 417.268546][T13324] ? __x64_sys_futex+0x1e0/0x4c0 [ 417.268583][T13324] ? __x64_sys_futex+0x1e9/0x4c0 [ 417.268628][T13324] ksys_mmap_pgoff+0x7d/0x5c0 [ 417.268670][T13324] ? xfd_validate_state+0x61/0x180 [ 417.268715][T13324] ? __pfx_ksys_write+0x10/0x10 [ 417.268756][T13324] __x64_sys_mmap+0x125/0x190 [ 417.268809][T13324] do_syscall_64+0xcd/0x490 [ 417.268852][T13324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.268884][T13324] RIP: 0033:0x7f56e758ebe9 [ 417.268910][T13324] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 417.268941][T13324] RSP: 002b:00007f56e84da038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 417.268971][T13324] RAX: ffffffffffffffda RBX: 00007f56e77b5fa0 RCX: 00007f56e758ebe9 [ 417.268991][T13324] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 417.269009][T13324] RBP: 00007f56e7611e19 R08: 0000000000000002 R09: 0000000000008000 [ 417.269027][T13324] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 417.269044][T13324] R13: 00007f56e77b6038 R14: 00007f56e77b5fa0 R15: 00007ffc01c57978 [ 417.269083][T13324] [ 418.772480][T13347] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2741'. [ 418.851509][T13347] veth0_macvtap: left promiscuous mode [ 418.940309][T13351] netlink: 146 bytes leftover after parsing attributes in process `syz.1.2742'. [ 419.956518][T13363] netlink: 330 bytes leftover after parsing attributes in process `syz.1.2749'. [ 420.021216][T13363] veth0_macvtap: left promiscuous mode [ 421.437634][T13394] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2758'. [ 421.455719][T13394] team0: entered promiscuous mode [ 421.472292][T13394] team_slave_0: entered promiscuous mode [ 421.480575][T13394] team_slave_1: entered promiscuous mode [ 421.495437][T13394] team0: entered allmulticast mode [ 421.501653][T13394] team_slave_0: entered allmulticast mode [ 421.510989][T13394] team_slave_1: entered allmulticast mode [ 421.665549][T13398] netlink: 346 bytes leftover after parsing attributes in process `syz.2.2762'. [ 421.914729][T13406] netlink: 146 bytes leftover after parsing attributes in process `syz.3.2773'. [ 422.278763][T13410] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2764'. [ 422.962760][ T30] audit: type=1804 audit(1755169028.366:12): pid=13434 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2774" name="/newroot/719/file0" dev="tmpfs" ino=3711 res=1 errno=0 [ 423.550783][T13443] netlink: 330 bytes leftover after parsing attributes in process `syz.4.2779'. [ 423.751862][T13447] netlink: 330 bytes leftover after parsing attributes in process `syz.3.2782'. [ 423.767602][T13424] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 424.674365][T13470] netlink: 330 bytes leftover after parsing attributes in process `syz.3.2791'. [ 424.713309][T13455] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 426.474595][T13506] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 426.558523][T13514] zswap: compressor not available [ 427.380194][T13528] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 427.601207][T13536] Process accounting resumed [ 428.012330][T13552] Process accounting resumed [ 429.406699][T13569] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 429.458840][T13580] netlink: 'syz.2.2830': attribute type 4 has an invalid length. [ 429.469990][T13580] netlink: 314 bytes leftover after parsing attributes in process `syz.2.2830'. [ 430.595606][T13599] netlink: 'syz.4.2836': attribute type 22 has an invalid length. [ 430.619817][T13599] netlink: 330 bytes leftover after parsing attributes in process `syz.4.2836'. [ 432.190854][T13621] netlink: 294 bytes leftover after parsing attributes in process `syz.4.2845'. [ 432.324838][ T8823] Bluetooth: hci4: command 0x0406 tx timeout [ 440.264845][T13756] Process accounting paused [ 441.052028][ T8823] Bluetooth: hci1: SCO packet too small [ 441.191147][T13771] zswap: compressor not available [ 442.570489][ T8823] Bluetooth: hci2: command 0x0406 tx timeout [ 443.618160][T13814] netlink: 146 bytes leftover after parsing attributes in process `syz.4.2904'. [ 445.147862][T13832] FAULT_INJECTION: forcing a failure. [ 445.147862][T13832] name failslab, interval 1, probability 0, space 0, times 0 [ 445.147982][T13832] CPU: 0 UID: 0 PID: 13832 Comm: syz.2.2920 Not tainted 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(full) [ 445.148022][T13832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 445.148042][T13832] Call Trace: [ 445.148053][T13832] [ 445.148066][T13832] dump_stack_lvl+0x16c/0x1f0 [ 445.148111][T13832] should_fail_ex+0x512/0x640 [ 445.148154][T13832] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 445.148195][T13832] should_failslab+0xc2/0x120 [ 445.148237][T13832] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 445.148277][T13832] ? alloc_inode+0x61/0x240 [ 445.148327][T13832] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 445.148360][T13832] alloc_inode+0x61/0x240 [ 445.148404][T13832] new_inode+0x22/0x1c0 [ 445.148449][T13832] debugfs_create_symlink+0xd3/0x320 [ 445.148485][T13832] ref_tracker_dir_symlink+0x255/0x360 [ 445.148528][T13832] ? __pfx_ref_tracker_dir_symlink+0x10/0x10 [ 445.148637][T13832] net_ns_net_init+0x19a/0x220 [ 445.148683][T13832] ? __pfx_net_ns_net_init+0x10/0x10 [ 445.148721][T13832] ops_init+0x1e2/0x5f0 [ 445.148767][T13832] setup_net+0x10f/0x380 [ 445.148806][T13832] ? lockdep_init_map_type+0x5c/0x280 [ 445.148851][T13832] ? __pfx_setup_net+0x10/0x10 [ 445.148896][T13832] ? debug_mutex_init+0x37/0x70 [ 445.148943][T13832] copy_net_ns+0x2a6/0x5f0 [ 445.148995][T13832] create_new_namespaces+0x3ea/0xa90 [ 445.149042][T13832] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 445.149083][T13832] ksys_unshare+0x45b/0xa40 [ 445.149127][T13832] ? __pfx_ksys_unshare+0x10/0x10 [ 445.149171][T13832] ? xfd_validate_state+0x61/0x180 [ 445.149242][T13832] __x64_sys_unshare+0x31/0x40 [ 445.149293][T13832] do_syscall_64+0xcd/0x490 [ 445.149338][T13832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.149371][T13832] RIP: 0033:0x7f56e758ebe9 [ 445.149398][T13832] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 445.149430][T13832] RSP: 002b:00007f56e84da038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 445.149460][T13832] RAX: ffffffffffffffda RBX: 00007f56e77b5fa0 RCX: 00007f56e758ebe9 [ 445.149482][T13832] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 445.149500][T13832] RBP: 00007f56e7611e19 R08: 0000000000000000 R09: 0000000000000000 [ 445.149520][T13832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 445.149539][T13832] R13: 00007f56e77b6038 R14: 00007f56e77b5fa0 R15: 00007ffc01c57978 [ 445.149579][T13832] [ 445.149591][T13832] debugfs: out of free dentries, can not create symlink 'netns-2c-4026533429-notrefcnt' [ 445.312770][T13833] FAULT_INJECTION: forcing a failure. [ 445.312770][T13833] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 445.312819][T13833] CPU: 1 UID: 0 PID: 13833 Comm: syz.3.2910 Not tainted 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(full) [ 445.312859][T13833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 445.312877][T13833] Call Trace: [ 445.312888][T13833] [ 445.312900][T13833] dump_stack_lvl+0x16c/0x1f0 [ 445.312944][T13833] should_fail_ex+0x512/0x640 [ 445.312995][T13833] should_fail_alloc_page+0xe7/0x130 [ 445.313040][T13833] prepare_alloc_pages+0x3c2/0x610 [ 445.313094][T13833] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 445.313166][T13833] ? __lock_acquire+0x62e/0x1ce0 [ 445.313214][T13833] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 445.313255][T13833] ? css_rstat_updated+0x1c2/0x510 [ 445.313306][T13833] ? filemap_get_entry+0x1a7/0x3b0 [ 445.313352][T13833] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 445.313402][T13833] ? policy_nodemask+0xea/0x4e0 [ 445.313446][T13833] alloc_pages_mpol+0x1fb/0x550 [ 445.313489][T13833] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 445.313529][T13833] ? _raw_spin_unlock+0x28/0x50 [ 445.313557][T13833] ? swap_entry_swapped+0x122/0x190 [ 445.313592][T13833] ? __pfx_swap_entry_swapped+0x10/0x10 [ 445.313632][T13833] folio_alloc_mpol_noprof+0x36/0x2f0 [ 445.313683][T13833] __read_swap_cache_async+0x3b6/0x5a0 [ 445.313723][T13833] ? __pfx___read_swap_cache_async+0x10/0x10 [ 445.313758][T13833] ? __pfx_get_swap_device+0x10/0x10 [ 445.313798][T13833] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 445.313853][T13833] read_swap_cache_async+0xdc/0x1e0 [ 445.313888][T13833] ? __pfx_read_swap_cache_async+0x10/0x10 [ 445.313920][T13833] ? find_held_lock+0x2b/0x80 [ 445.313948][T13833] ? find_held_lock+0x2b/0x80 [ 445.313981][T13833] ? swapin_walk_pmd_entry+0x25f/0x5c0 [ 445.314032][T13833] swapin_walk_pmd_entry+0x283/0x5c0 [ 445.314080][T13833] ? __pfx_swapin_walk_pmd_entry+0x10/0x10 [ 445.314129][T13833] ? kasan_save_stack+0x42/0x60 [ 445.314171][T13833] ? kasan_save_stack+0x33/0x60 [ 445.314204][T13833] ? kasan_save_track+0x14/0x30 [ 445.314237][T13833] ? kasan_save_free_info+0x3b/0x60 [ 445.314281][T13833] ? __kasan_slab_free+0x60/0x70 [ 445.314316][T13833] ? kfree+0x2b4/0x4d0 [ 445.314346][T13833] ? __pfx_swapin_walk_pmd_entry+0x10/0x10 [ 445.314393][T13833] walk_pgd_range+0xc02/0x1f50 [ 445.314462][T13833] ? __pfx_walk_pgd_range+0x10/0x10 [ 445.314511][T13833] __walk_page_range+0x163/0x820 [ 445.314558][T13833] ? rcu_is_watching+0x12/0xc0 [ 445.314601][T13833] walk_page_range_vma+0x2c7/0xa20 [ 445.314646][T13833] ? __pfx_walk_page_range_vma+0x10/0x10 [ 445.314700][T13833] madvise_vma_behavior+0x19cf/0x2d60 [ 445.314746][T13833] ? mas_prev_setup.constprop.0+0xb6/0x9d0 [ 445.314786][T13833] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 445.314835][T13833] ? __pfx_mas_prev+0x10/0x10 [ 445.314882][T13833] ? find_vma_prev+0xda/0x160 [ 445.314923][T13833] ? __pfx_find_vma_prev+0x10/0x10 [ 445.314965][T13833] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 445.315008][T13833] ? __lock_acquire+0x62e/0x1ce0 [ 445.315056][T13833] madvise_walk_vmas+0x31f/0x9c0 [ 445.315119][T13833] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 445.315189][T13833] madvise_do_behavior+0x1e2/0x530 [ 445.315233][T13833] ? futex_private_hash_put+0x18a/0x300 [ 445.315273][T13833] ? __pfx_madvise_do_behavior+0x10/0x10 [ 445.315322][T13833] ? down_read+0x13d/0x480 [ 445.315371][T13833] ? __pfx_vfs_writev+0x10/0x10 [ 445.315416][T13833] do_madvise+0x176/0x240 [ 445.315458][T13833] ? __pfx_do_madvise+0x10/0x10 [ 445.315500][T13833] ? do_futex+0x122/0x350 [ 445.315568][T13833] ? xfd_validate_state+0x61/0x180 [ 445.315614][T13833] ? __pfx_do_writev+0x10/0x10 [ 445.315656][T13833] __x64_sys_madvise+0xa9/0x110 [ 445.315700][T13833] ? lockdep_hardirqs_on+0x7c/0x110 [ 445.315737][T13833] do_syscall_64+0xcd/0x490 [ 445.315779][T13833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.315808][T13833] RIP: 0033:0x7f7ce778ebe9 [ 445.315832][T13833] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 445.315862][T13833] RSP: 002b:00007f7ce8584038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 445.315892][T13833] RAX: ffffffffffffffda RBX: 00007f7ce79b5fa0 RCX: 00007f7ce778ebe9 [ 445.315912][T13833] RDX: 0000000000000003 RSI: 2000000080000001 RDI: 0000000000000000 [ 445.315931][T13833] RBP: 00007f7ce7811e19 R08: 0000000000000000 R09: 0000000000000000 [ 445.315951][T13833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 445.315970][T13833] R13: 00007f7ce79b6038 R14: 00007f7ce79b5fa0 R15: 00007ffdc1bb4848 [ 445.316015][T13833] [ 445.641433][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.641516][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 446.186950][T13839] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2912'. [ 446.499778][T13839] veth1_vlan (unregistering): left allmulticast mode [ 446.524701][T13839] macvlan0 (unregistering): left allmulticast mode [ 446.524739][T13839] macvlan0 (unregistering): left promiscuous mode [ 446.524864][T13839] bridge0: port 3(macvlan0) entered disabled state [ 448.604709][T13870] netlink: 330 bytes leftover after parsing attributes in process `syz.3.2932'. [ 449.471737][T13889] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2926'. [ 449.494840][T13891] FAULT_INJECTION: forcing a failure. [ 449.494840][T13891] name failslab, interval 1, probability 0, space 0, times 0 [ 449.508098][T13891] CPU: 1 UID: 0 PID: 13891 Comm: syz.4.2931 Not tainted 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(full) [ 449.508143][T13891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 449.508162][T13891] Call Trace: [ 449.508173][T13891] [ 449.508185][T13891] dump_stack_lvl+0x16c/0x1f0 [ 449.508227][T13891] should_fail_ex+0x512/0x640 [ 449.508260][T13891] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 449.508293][T13891] should_failslab+0xc2/0x120 [ 449.508324][T13891] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 449.508351][T13891] ? debug_mutex_init+0x37/0x70 [ 449.508373][T13891] ? seq_open+0x55/0x170 [ 449.508410][T13891] seq_open+0x55/0x170 [ 449.508444][T13891] blk_mq_debugfs_open+0x106/0x1b0 [ 449.508473][T13891] ? __pfx_blk_mq_debugfs_open+0x10/0x10 [ 449.508498][T13891] full_proxy_open_regular+0x1b6/0x360 [ 449.508524][T13891] do_dentry_open+0x97f/0x1530 [ 449.508553][T13891] ? __pfx_full_proxy_open_regular+0x10/0x10 [ 449.508583][T13891] vfs_open+0x82/0x3f0 [ 449.508621][T13891] path_openat+0x1de4/0x2cb0 [ 449.508659][T13891] ? __pfx_path_openat+0x10/0x10 [ 449.508695][T13891] do_filp_open+0x20b/0x470 [ 449.508723][T13891] ? __pfx_do_filp_open+0x10/0x10 [ 449.508774][T13891] ? alloc_fd+0x471/0x7d0 [ 449.508809][T13891] do_sys_openat2+0x11b/0x1d0 [ 449.508844][T13891] ? __pfx_do_sys_openat2+0x10/0x10 [ 449.508891][T13891] __x64_sys_openat+0x174/0x210 [ 449.508927][T13891] ? __pfx___x64_sys_openat+0x10/0x10 [ 449.508976][T13891] do_syscall_64+0xcd/0x490 [ 449.509016][T13891] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.509040][T13891] RIP: 0033:0x7f2dea98ebe9 [ 449.509065][T13891] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 449.509092][T13891] RSP: 002b:00007f2deb8b9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 449.509121][T13891] RAX: ffffffffffffffda RBX: 00007f2deabb5fa0 RCX: 00007f2dea98ebe9 [ 449.509141][T13891] RDX: 0000000000000000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 449.509161][T13891] RBP: 00007f2deaa11e19 R08: 0000000000000000 R09: 0000000000000000 [ 449.509178][T13891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 449.509197][T13891] R13: 00007f2deabb6038 R14: 00007f2deabb5fa0 R15: 00007ffe13d90748 [ 449.509236][T13891] [ 449.850153][T13893] FAULT_INJECTION: forcing a failure. [ 449.850153][T13893] name failslab, interval 1, probability 0, space 0, times 0 [ 449.863545][T13893] CPU: 1 UID: 0 PID: 13893 Comm: syz.3.2934 Not tainted 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(full) [ 449.863587][T13893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 449.863605][T13893] Call Trace: [ 449.863616][T13893] [ 449.863628][T13893] dump_stack_lvl+0x16c/0x1f0 [ 449.863671][T13893] should_fail_ex+0x512/0x640 [ 449.863718][T13893] should_failslab+0xc2/0x120 [ 449.863757][T13893] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 449.863791][T13893] ? stack_depot_save_flags+0x29/0x9c0 [ 449.863824][T13893] ? radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 449.863859][T13893] radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 449.863897][T13893] idr_get_free+0x528/0xa30 [ 449.863944][T13893] idr_alloc_u32+0x190/0x2f0 [ 449.863978][T13893] ? __pfx_idr_alloc_u32+0x10/0x10 [ 449.864027][T13893] idr_alloc+0xc0/0x130 [ 449.864060][T13893] ? __pfx_idr_alloc+0x10/0x10 [ 449.864090][T13893] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 449.864141][T13893] tipc_conn_alloc+0x337/0x590 [ 449.864174][T13893] tipc_topsrv_kern_subscr+0x11c/0x3c0 [ 449.864211][T13893] ? __pfx_tipc_topsrv_kern_subscr+0x10/0x10 [ 449.864259][T13893] ? net_generic+0xea/0x2a0 [ 449.864300][T13893] tipc_group_create+0x4ab/0x660 [ 449.864338][T13893] tipc_setsockopt+0x7f0/0xdb0 [ 449.864380][T13893] ? __pfx_tipc_setsockopt+0x10/0x10 [ 449.864437][T13893] ? __pfx_tipc_setsockopt+0x10/0x10 [ 449.864482][T13893] do_sock_setsockopt+0xf3/0x1d0 [ 449.864532][T13893] __sys_setsockopt+0x120/0x1a0 [ 449.864577][T13893] __x64_sys_setsockopt+0xbd/0x160 [ 449.864611][T13893] ? do_syscall_64+0x91/0x490 [ 449.864650][T13893] ? lockdep_hardirqs_on+0x7c/0x110 [ 449.864687][T13893] do_syscall_64+0xcd/0x490 [ 449.864729][T13893] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.864761][T13893] RIP: 0033:0x7f7ce778ebe9 [ 449.864787][T13893] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 449.864819][T13893] RSP: 002b:00007f7ce8584038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 449.864849][T13893] RAX: ffffffffffffffda RBX: 00007f7ce79b5fa0 RCX: 00007f7ce778ebe9 [ 449.864870][T13893] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000004 [ 449.864889][T13893] RBP: 00007f7ce7811e19 R08: 0000000000000014 R09: 0000000000000000 [ 449.864908][T13893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 449.864926][T13893] R13: 00007f7ce79b6038 R14: 00007f7ce79b5fa0 R15: 00007ffdc1bb4848 [ 449.864966][T13893] [ 449.866528][T13895] netlink: 330 bytes leftover after parsing attributes in process `syz.1.2933'. [ 450.951292][T13920] random: crng reseeded on system resumption [ 451.028667][T13920] Unrecognized hibernate image header format! [ 451.035391][T13920] PM: hibernation: Image mismatch: architecture specific data [ 451.347105][T13930] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2950'. [ 451.401421][T13929] ubi0: attaching mtd0 [ 451.411022][T13929] ubi0: scanning is finished [ 451.416821][T13932] FAULT_INJECTION: forcing a failure. [ 451.416821][T13932] name failslab, interval 1, probability 0, space 0, times 0 [ 451.417548][T13929] ubi0 error: ubi_read_volume_table: LEB size too small for a volume record [ 451.500833][T13932] CPU: 1 UID: 0 PID: 13932 Comm: syz.3.2947 Not tainted 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(full) [ 451.500879][T13932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 451.500898][T13932] Call Trace: [ 451.500909][T13932] [ 451.500930][T13932] dump_stack_lvl+0x16c/0x1f0 [ 451.500974][T13932] should_fail_ex+0x512/0x640 [ 451.501017][T13932] ? fs_reclaim_acquire+0xae/0x150 [ 451.501063][T13932] ? security_inode_init_security+0x13f/0x390 [ 451.501112][T13932] should_failslab+0xc2/0x120 [ 451.501154][T13932] __kmalloc_noprof+0xd2/0x510 [ 451.501199][T13932] security_inode_init_security+0x13f/0x390 [ 451.501253][T13932] ? __pfx_shmem_initxattrs+0x10/0x10 [ 451.501299][T13932] ? __pfx_security_inode_init_security+0x10/0x10 [ 451.501362][T13932] shmem_mknod+0x22e/0x450 [ 451.501415][T13932] ? __pfx_shmem_create+0x10/0x10 [ 451.501457][T13932] lookup_open.isra.0+0x11d3/0x1580 [ 451.501499][T13932] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 451.501553][T13932] ? __pfx_down_write+0x10/0x10 [ 451.501594][T13932] ? mnt_get_write_access+0x20c/0x300 [ 451.501647][T13932] path_openat+0x893/0x2cb0 [ 451.501696][T13932] ? __pfx_path_openat+0x10/0x10 [ 451.501758][T13932] do_filp_open+0x20b/0x470 [ 451.501796][T13932] ? __pfx_do_filp_open+0x10/0x10 [ 451.501865][T13932] ? alloc_fd+0x471/0x7d0 [ 451.501910][T13932] do_sys_openat2+0x11b/0x1d0 [ 451.501966][T13932] ? __pfx_do_sys_openat2+0x10/0x10 [ 451.502012][T13932] ? find_held_lock+0x2b/0x80 [ 451.502046][T13932] ? handle_mm_fault+0x2ab/0xd10 [ 451.502089][T13932] __x64_sys_openat+0x174/0x210 [ 451.502134][T13932] ? __pfx___x64_sys_openat+0x10/0x10 [ 451.502199][T13932] do_syscall_64+0xcd/0x490 [ 451.502242][T13932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.502272][T13932] RIP: 0033:0x7f7ce778ebe9 [ 451.502298][T13932] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 451.502328][T13932] RSP: 002b:00007f7ce8563038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 451.502359][T13932] RAX: ffffffffffffffda RBX: 00007f7ce79b6090 RCX: 00007f7ce778ebe9 [ 451.502380][T13932] RDX: 0000000000020342 RSI: 0000000000000000 RDI: ffffffffffffff9c [ 451.502399][T13932] RBP: 00007f7ce7811e19 R08: 0000000000000000 R09: 0000000000000000 [ 451.502418][T13932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 451.502436][T13932] R13: 00007f7ce79b6128 R14: 00007f7ce79b6090 R15: 00007ffdc1bb4848 [ 451.502478][T13932] [ 451.759527][ C1] vkms_vblank_simulate: vblank timer overrun [ 452.282509][T13929] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 452.433325][T13944] netlink: 25 bytes leftover after parsing attributes in process `syz.1.2956'. [ 452.730212][T13958] netlink: 334 bytes leftover after parsing attributes in process `syz.3.2961'. [ 452.844594][T13962] FAULT_INJECTION: forcing a failure. [ 452.844594][T13962] name failslab, interval 1, probability 0, space 0, times 0 [ 452.864905][T13962] CPU: 1 UID: 0 PID: 13962 Comm: syz.1.2963 Not tainted 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(full) [ 452.864955][T13962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 452.864974][T13962] Call Trace: [ 452.864986][T13962] [ 452.864999][T13962] dump_stack_lvl+0x16c/0x1f0 [ 452.865045][T13962] should_fail_ex+0x512/0x640 [ 452.865085][T13962] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 452.865125][T13962] should_failslab+0xc2/0x120 [ 452.865195][T13962] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 452.865232][T13962] ? __d_alloc+0x32/0xae0 [ 452.865273][T13962] __d_alloc+0x32/0xae0 [ 452.865318][T13962] d_alloc_parallel+0x111/0x1480 [ 452.865380][T13962] ? __pfx_d_alloc_parallel+0x10/0x10 [ 452.865429][T13962] ? lockdep_init_map_type+0x5c/0x280 [ 452.865468][T13962] ? lockdep_init_map_type+0x5c/0x280 [ 452.865513][T13962] __lookup_slow+0x193/0x460 [ 452.865558][T13962] ? __pfx___lookup_slow+0x10/0x10 [ 452.865608][T13962] ? perf_trace_mm_compaction_try_to_compact_pages+0x410/0x4b0 [ 452.865663][T13962] ? perf_trace_mm_compaction_try_to_compact_pages+0x410/0x4b0 [ 452.865709][T13962] ? d_lookup+0xe7/0x190 [ 452.865761][T13962] lookup_noperm+0xe1/0x110 [ 452.865811][T13962] simple_start_creating+0xd1/0x1b0 [ 452.865848][T13962] start_creating.part.0+0x82/0x190 [ 452.865886][T13962] __debugfs_create_file+0xa7/0x6b0 [ 452.865927][T13962] debugfs_create_file_full+0x41/0x60 [ 452.865968][T13962] ref_tracker_dir_debugfs+0x19d/0x290 [ 452.866014][T13962] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 452.866099][T13962] ? lockdep_init_map_type+0x5c/0x280 [ 452.866161][T13962] preinit_net+0x47f/0x8f0 [ 452.866204][T13962] copy_net_ns+0x1da/0x5f0 [ 452.866247][T13962] create_new_namespaces+0x3ea/0xa90 [ 452.866291][T13962] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 452.866330][T13962] ksys_unshare+0x45b/0xa40 [ 452.866372][T13962] ? __pfx_ksys_unshare+0x10/0x10 [ 452.866415][T13962] ? xfd_validate_state+0x61/0x180 [ 452.866472][T13962] __x64_sys_unshare+0x31/0x40 [ 452.866513][T13962] do_syscall_64+0xcd/0x490 [ 452.866555][T13962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.866587][T13962] RIP: 0033:0x7f169058ebe9 [ 452.866614][T13962] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 452.866644][T13962] RSP: 002b:00007f16914d4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 452.866688][T13962] RAX: ffffffffffffffda RBX: 00007f16907b5fa0 RCX: 00007f169058ebe9 [ 452.866709][T13962] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 452.866748][T13962] RBP: 00007f1690611e19 R08: 0000000000000000 R09: 0000000000000000 [ 452.866768][T13962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 452.866787][T13962] R13: 00007f16907b6038 R14: 00007f16907b5fa0 R15: 00007fff7fb9ea18 [ 452.866833][T13962] [ 452.873435][T13964] netlink: 302 bytes leftover after parsing attributes in process `syz.4.2964'. [ 453.055644][T13966] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 453.419167][T13978] netlink: 'syz.3.2968': attribute type 19 has an invalid length. [ 453.429000][T13978] netlink: 334 bytes leftover after parsing attributes in process `syz.3.2968'. [ 453.773126][T13995] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2976'. [ 453.944634][T14000] FAULT_INJECTION: forcing a failure. [ 453.944634][T14000] name failslab, interval 1, probability 0, space 0, times 0 [ 453.977480][T14000] CPU: 1 UID: 0 PID: 14000 Comm: syz.4.2977 Not tainted 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(full) [ 453.977528][T14000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 453.977547][T14000] Call Trace: [ 453.977559][T14000] [ 453.977572][T14000] dump_stack_lvl+0x16c/0x1f0 [ 453.977617][T14000] should_fail_ex+0x512/0x640 [ 453.977656][T14000] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 453.977696][T14000] should_failslab+0xc2/0x120 [ 453.977735][T14000] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 453.977774][T14000] ? __d_alloc+0x32/0xae0 [ 453.977820][T14000] __d_alloc+0x32/0xae0 [ 453.977864][T14000] d_alloc_parallel+0x111/0x1480 [ 453.977930][T14000] ? __pfx_d_alloc_parallel+0x10/0x10 [ 453.977994][T14000] ? lockdep_init_map_type+0x5c/0x280 [ 453.978040][T14000] ? lockdep_init_map_type+0x5c/0x280 [ 453.978091][T14000] __lookup_slow+0x193/0x460 [ 453.978141][T14000] ? __pfx___lookup_slow+0x10/0x10 [ 453.978190][T14000] ? perf_trace_mm_compaction_try_to_compact_pages+0x410/0x4b0 [ 453.978247][T14000] ? perf_trace_mm_compaction_try_to_compact_pages+0x410/0x4b0 [ 453.978293][T14000] ? d_lookup+0xe7/0x190 [ 453.978348][T14000] lookup_noperm+0xe1/0x110 [ 453.978396][T14000] simple_start_creating+0xd1/0x1b0 [ 453.978435][T14000] start_creating.part.0+0x82/0x190 [ 453.978479][T14000] __debugfs_create_file+0xa7/0x6b0 [ 453.978521][T14000] debugfs_create_file_full+0x41/0x60 [ 453.978564][T14000] ref_tracker_dir_debugfs+0x19d/0x290 [ 453.978611][T14000] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 453.978696][T14000] ? lockdep_init_map_type+0x5c/0x280 [ 453.978744][T14000] preinit_net+0x47f/0x8f0 [ 453.978781][T14000] copy_net_ns+0x1da/0x5f0 [ 453.978827][T14000] create_new_namespaces+0x3ea/0xa90 [ 453.978872][T14000] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 453.978909][T14000] ksys_unshare+0x45b/0xa40 [ 453.978966][T14000] ? __pfx_ksys_unshare+0x10/0x10 [ 453.979025][T14000] __x64_sys_unshare+0x31/0x40 [ 453.979069][T14000] do_syscall_64+0xcd/0x490 [ 453.979108][T14000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.979141][T14000] RIP: 0033:0x7f2dea98ebe9 [ 453.979166][T14000] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 453.979198][T14000] RSP: 002b:00007f2deb8b9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 453.979229][T14000] RAX: ffffffffffffffda RBX: 00007f2deabb5fa0 RCX: 00007f2dea98ebe9 [ 453.979251][T14000] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 453.979271][T14000] RBP: 00007f2deaa11e19 R08: 0000000000000000 R09: 0000000000000000 [ 453.979291][T14000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 453.979310][T14000] R13: 00007f2deabb6038 R14: 00007f2deabb5fa0 R15: 00007ffe13d90748 [ 453.979353][T14000] [ 454.261359][ C1] vkms_vblank_simulate: vblank timer overrun [ 454.432187][T14007] netlink: 146 bytes leftover after parsing attributes in process `syz.2.2981'. [ 454.588837][T14013] sp0: Synchronizing with TNC [ 454.893996][ T8810] Bluetooth: hci4: unexpected event 0x3e length: 726 > 260 [ 454.894044][ T8810] Bluetooth: hci4: unexpected subevent 0x0a length: 725 > 30 [ 455.955346][T14041] netlink: 146 bytes leftover after parsing attributes in process `syz.2.2991'. [ 456.365538][T14058] FAULT_INJECTION: forcing a failure. [ 456.365538][T14058] name failslab, interval 1, probability 0, space 0, times 0 [ 456.413197][T14058] CPU: 0 UID: 0 PID: 14058 Comm: syz.4.2998 Not tainted 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(full) [ 456.413244][T14058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 456.413263][T14058] Call Trace: [ 456.413273][T14058] [ 456.413286][T14058] dump_stack_lvl+0x16c/0x1f0 [ 456.413328][T14058] should_fail_ex+0x512/0x640 [ 456.413371][T14058] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 456.413406][T14058] should_failslab+0xc2/0x120 [ 456.413445][T14058] __kmalloc_cache_noprof+0x6a/0x3e0 [ 456.413476][T14058] ? mark_held_locks+0x49/0x80 [ 456.413512][T14058] ? ovs_ct_limit_cmd_set+0x30a/0xa90 [ 456.413582][T14058] ovs_ct_limit_cmd_set+0x30a/0xa90 [ 456.413636][T14058] ? __pfx_ovs_ct_limit_cmd_set+0x10/0x10 [ 456.413682][T14058] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 456.413729][T14058] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 456.413784][T14058] genl_family_rcv_msg_doit+0x209/0x2f0 [ 456.413833][T14058] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 456.413894][T14058] ? bpf_lsm_capable+0x9/0x10 [ 456.413935][T14058] ? security_capable+0x7e/0x260 [ 456.413969][T14058] ? ns_capable+0xd7/0x110 [ 456.414008][T14058] genl_rcv_msg+0x55c/0x800 [ 456.414056][T14058] ? __pfx_genl_rcv_msg+0x10/0x10 [ 456.414097][T14058] ? __pfx_ovs_ct_limit_cmd_set+0x10/0x10 [ 456.414152][T14058] netlink_rcv_skb+0x158/0x420 [ 456.414191][T14058] ? __pfx_genl_rcv_msg+0x10/0x10 [ 456.414235][T14058] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 456.414301][T14058] ? netlink_deliver_tap+0x1ae/0xd30 [ 456.414346][T14058] genl_rcv+0x28/0x40 [ 456.414386][T14058] netlink_unicast+0x5a7/0x870 [ 456.414434][T14058] ? __pfx_netlink_unicast+0x10/0x10 [ 456.414473][T14058] ? __asan_memset+0x23/0x50 [ 456.414505][T14058] ? __build_skb_around+0x278/0x3b0 [ 456.414539][T14058] ? is_vmalloc_addr+0x86/0xa0 [ 456.414580][T14058] netlink_sendmsg+0x8d1/0xdd0 [ 456.414627][T14058] ? __pfx_netlink_sendmsg+0x10/0x10 [ 456.414675][T14058] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 456.414716][T14058] ____sys_sendmsg+0xa95/0xc70 [ 456.414765][T14058] ? copy_msghdr_from_user+0x10a/0x160 [ 456.414806][T14058] ? __pfx_____sys_sendmsg+0x10/0x10 [ 456.414863][T14058] ? __pfx_futex_wake_mark+0x10/0x10 [ 456.414923][T14058] ___sys_sendmsg+0x134/0x1d0 [ 456.414964][T14058] ? __pfx____sys_sendmsg+0x10/0x10 [ 456.415057][T14058] __sys_sendmsg+0x16d/0x220 [ 456.415100][T14058] ? __pfx___sys_sendmsg+0x10/0x10 [ 456.415136][T14058] ? __x64_sys_futex+0x1e0/0x4c0 [ 456.415197][T14058] do_syscall_64+0xcd/0x490 [ 456.415241][T14058] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.415271][T14058] RIP: 0033:0x7f2dea98ebe9 [ 456.415297][T14058] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 456.415329][T14058] RSP: 002b:00007f2deb8b9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 456.415359][T14058] RAX: ffffffffffffffda RBX: 00007f2deabb5fa0 RCX: 00007f2dea98ebe9 [ 456.415381][T14058] RDX: 0000000000000004 RSI: 0000200000000100 RDI: 0000000000000005 [ 456.415399][T14058] RBP: 00007f2deaa11e19 R08: 0000000000000000 R09: 0000000000000000 [ 456.415418][T14058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 456.415437][T14058] R13: 00007f2deabb6038 R14: 00007f2deabb5fa0 R15: 00007ffe13d90748 [ 456.415480][T14058] [ 457.237526][T14066] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3001'. [ 457.392087][T14064] FAULT_INJECTION: forcing a failure. [ 457.392087][T14064] name failslab, interval 1, probability 0, space 0, times 0 [ 457.404923][T14064] CPU: 1 UID: 0 PID: 14064 Comm: syz.2.3000 Not tainted 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(full) [ 457.404975][T14064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 457.404993][T14064] Call Trace: [ 457.405004][T14064] [ 457.405016][T14064] dump_stack_lvl+0x16c/0x1f0 [ 457.405059][T14064] should_fail_ex+0x512/0x640 [ 457.405106][T14064] should_failslab+0xc2/0x120 [ 457.405143][T14064] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 457.405178][T14064] ? stack_depot_save_flags+0x29/0x9c0 [ 457.405218][T14064] ? radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 457.405258][T14064] radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 457.405298][T14064] idr_get_free+0x528/0xa30 [ 457.405349][T14064] idr_alloc_u32+0x190/0x2f0 [ 457.405389][T14064] ? __pfx_idr_alloc_u32+0x10/0x10 [ 457.405440][T14064] idr_alloc+0xc0/0x130 [ 457.405474][T14064] ? __pfx_idr_alloc+0x10/0x10 [ 457.405507][T14064] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 457.405567][T14064] tipc_conn_alloc+0x337/0x590 [ 457.405602][T14064] tipc_topsrv_kern_subscr+0x11c/0x3c0 [ 457.405637][T14064] ? __pfx_tipc_topsrv_kern_subscr+0x10/0x10 [ 457.405676][T14064] ? net_generic+0xea/0x2a0 [ 457.405719][T14064] tipc_group_create+0x4ab/0x660 [ 457.405760][T14064] tipc_setsockopt+0x7f0/0xdb0 [ 457.405807][T14064] ? __pfx_tipc_setsockopt+0x10/0x10 [ 457.405866][T14064] ? __pfx_tipc_setsockopt+0x10/0x10 [ 457.405904][T14064] do_sock_setsockopt+0xf3/0x1d0 [ 457.405965][T14064] __sys_setsockopt+0x120/0x1a0 [ 457.406008][T14064] __x64_sys_setsockopt+0xbd/0x160 [ 457.406045][T14064] ? do_syscall_64+0x91/0x490 [ 457.406085][T14064] ? lockdep_hardirqs_on+0x7c/0x110 [ 457.406123][T14064] do_syscall_64+0xcd/0x490 [ 457.406166][T14064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.406196][T14064] RIP: 0033:0x7f56e758ebe9 [ 457.406223][T14064] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 457.406254][T14064] RSP: 002b:00007f56e84da038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 457.406284][T14064] RAX: ffffffffffffffda RBX: 00007f56e77b5fa0 RCX: 00007f56e758ebe9 [ 457.406305][T14064] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000004 [ 457.406324][T14064] RBP: 00007f56e7611e19 R08: 0000000000000014 R09: 0000000000000000 [ 457.406343][T14064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 457.406360][T14064] R13: 00007f56e77b6038 R14: 00007f56e77b5fa0 R15: 00007ffc01c57978 [ 457.406401][T14064] [ 457.411068][T14069] FAULT_INJECTION: forcing a failure. [ 457.411068][T14069] name failslab, interval 1, probability 0, space 0, times 0 [ 457.683851][T14075] 0x000200000001-0xa29656a63616329 : "" [ 457.691330][T14069] CPU: 1 UID: 0 PID: 14069 Comm: syz.1.3002 Not tainted 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(full) [ 457.691371][T14069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 457.691388][T14069] Call Trace: [ 457.691398][T14069] [ 457.691409][T14069] dump_stack_lvl+0x16c/0x1f0 [ 457.691449][T14069] should_fail_ex+0x512/0x640 [ 457.691484][T14069] ? fs_reclaim_acquire+0xae/0x150 [ 457.691526][T14069] should_failslab+0xc2/0x120 [ 457.691569][T14069] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 457.691607][T14069] ? security_inode_alloc+0x3b/0x2b0 [ 457.691651][T14069] security_inode_alloc+0x3b/0x2b0 [ 457.691682][T14069] inode_init_always_gfp+0xce4/0x1030 [ 457.691720][T14069] alloc_inode+0x86/0x240 [ 457.691758][T14069] new_inode+0x22/0x1c0 [ 457.691801][T14069] __debugfs_create_file+0x11c/0x6b0 [ 457.691837][T14069] debugfs_create_file_full+0x41/0x60 [ 457.691873][T14069] ref_tracker_dir_debugfs+0x19d/0x290 [ 457.691912][T14069] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 457.691985][T14069] ? lockdep_init_map_type+0x5c/0x280 [ 457.692027][T14069] preinit_net+0x47f/0x8f0 [ 457.692071][T14069] copy_net_ns+0x1da/0x5f0 [ 457.692114][T14069] create_new_namespaces+0x3ea/0xa90 [ 457.692155][T14069] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 457.692196][T14069] ksys_unshare+0x45b/0xa40 [ 457.692233][T14069] ? __pfx_ksys_unshare+0x10/0x10 [ 457.692270][T14069] ? xfd_validate_state+0x61/0x180 [ 457.692320][T14069] __x64_sys_unshare+0x31/0x40 [ 457.692355][T14069] do_syscall_64+0xcd/0x490 [ 457.692392][T14069] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.692419][T14069] RIP: 0033:0x7f169058ebe9 [ 457.692442][T14069] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 457.692469][T14069] RSP: 002b:00007f16914d4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 457.692495][T14069] RAX: ffffffffffffffda RBX: 00007f16907b5fa0 RCX: 00007f169058ebe9 [ 457.692513][T14069] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 457.692530][T14069] RBP: 00007f1690611e19 R08: 0000000000000000 R09: 0000000000000000 [ 457.692546][T14069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 457.692561][T14069] R13: 00007f16907b6038 R14: 00007f16907b5fa0 R15: 00007fff7fb9ea18 [ 457.692597][T14069] [ 457.692636][T14069] debugfs: out of free dentries, can not create file 'net_notrefcnt@ffff888033a04a68' [ 457.724557][T14075] mtd: partition "" is out of reach -- disabled [ 458.011149][T14075] ftl_cs: FTL header not found. [ 458.238362][T14075] Process accounting paused [ 458.257751][T14083] Process accounting paused [ 458.336266][T14088] FAULT_INJECTION: forcing a failure. [ 458.336266][T14088] name failslab, interval 1, probability 0, space 0, times 0 [ 458.350307][T14088] CPU: 1 UID: 0 PID: 14088 Comm: syz.1.3010 Not tainted 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(full) [ 458.350355][T14088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 458.350374][T14088] Call Trace: [ 458.350386][T14088] [ 458.350398][T14088] dump_stack_lvl+0x16c/0x1f0 [ 458.350443][T14088] should_fail_ex+0x512/0x640 [ 458.350481][T14088] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 458.350514][T14088] ? __pfx_tomoyo_gc_thread+0x10/0x10 [ 458.350552][T14088] should_failslab+0xc2/0x120 [ 458.350594][T14088] __kmalloc_cache_noprof+0x6a/0x3e0 [ 458.350623][T14088] ? lockdep_init_map_type+0x5c/0x280 [ 458.350666][T14088] ? __kthread_create_on_node+0xce/0x3f0 [ 458.350705][T14088] ? __init_swait_queue_head+0xca/0x150 [ 458.350757][T14088] ? __pfx_tomoyo_gc_thread+0x10/0x10 [ 458.350793][T14088] __kthread_create_on_node+0xce/0x3f0 [ 458.350837][T14088] ? __pfx___kthread_create_on_node+0x10/0x10 [ 458.350898][T14088] ? __pfx_tomoyo_gc_thread+0x10/0x10 [ 458.350938][T14088] kthread_create_on_node+0xc7/0x100 [ 458.350977][T14088] ? __pfx_kthread_create_on_node+0x10/0x10 [ 458.351017][T14088] ? kasan_quarantine_put+0x10a/0x240 [ 458.351058][T14088] ? find_held_lock+0x2b/0x80 [ 458.351089][T14088] ? tomoyo_notify_gc+0xc6/0x470 [ 458.351135][T14088] tomoyo_notify_gc+0xea/0x470 [ 458.351170][T14088] ? ima_iint_find+0xea/0x130 [ 458.351214][T14088] ? __pfx_tomoyo_release+0x10/0x10 [ 458.351257][T14088] tomoyo_release+0x31/0x40 [ 458.351300][T14088] __fput+0x3ff/0xb70 [ 458.351355][T14088] task_work_run+0x150/0x240 [ 458.351399][T14088] ? __pfx_task_work_run+0x10/0x10 [ 458.351442][T14088] ? __pfx___do_sys_close_range+0x10/0x10 [ 458.351488][T14088] exit_to_user_mode_loop+0xeb/0x110 [ 458.351533][T14088] do_syscall_64+0x3f6/0x490 [ 458.351572][T14088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.351603][T14088] RIP: 0033:0x7f169058ebe9 [ 458.351628][T14088] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 458.351657][T14088] RSP: 002b:00007f16914d4038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 458.351686][T14088] RAX: 0000000000000000 RBX: 00007f16907b5fa0 RCX: 00007f169058ebe9 [ 458.351705][T14088] RDX: 0000000000000000 RSI: 000000000000000a RDI: 0000000000000002 [ 458.351722][T14088] RBP: 00007f1690611e19 R08: 0000000000000000 R09: 0000000000000000 [ 458.351739][T14088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 458.351757][T14088] R13: 00007f16907b6038 R14: 00007f16907b5fa0 R15: 00007fff7fb9ea18 [ 458.351796][T14088] [ 459.604507][T14116] mkiss: ax0: crc mode is auto. [ 460.360257][T14138] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3039'. [ 460.416090][T14138] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3039'. [ 460.893970][T14155] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3036'. [ 461.578044][T14166] FAULT_INJECTION: forcing a failure. [ 461.578044][T14166] name failslab, interval 1, probability 0, space 0, times 0 [ 461.601293][T14166] CPU: 0 UID: 0 PID: 14166 Comm: syz.3.3043 Not tainted 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(full) [ 461.601340][T14166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 461.601361][T14166] Call Trace: [ 461.601373][T14166] [ 461.601386][T14166] dump_stack_lvl+0x16c/0x1f0 [ 461.601433][T14166] should_fail_ex+0x512/0x640 [ 461.601477][T14166] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 461.601522][T14166] should_failslab+0xc2/0x120 [ 461.601565][T14166] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 461.601602][T14166] ? __kernfs_new_node+0xd2/0x8e0 [ 461.601646][T14166] __kernfs_new_node+0xd2/0x8e0 [ 461.601691][T14166] ? __pfx___kernfs_new_node+0x10/0x10 [ 461.601770][T14166] ? find_held_lock+0x2b/0x80 [ 461.601805][T14166] ? kernfs_root+0xee/0x2a0 [ 461.601863][T14166] kernfs_new_node+0x13c/0x1e0 [ 461.601910][T14166] ? net_ns_get_ownership+0xf8/0x1b0 [ 461.601958][T14166] kernfs_create_dir_ns+0x4c/0x1a0 [ 461.602011][T14166] internal_create_group+0x34d/0xf30 [ 461.602066][T14166] ? __pfx_internal_create_group+0x10/0x10 [ 461.602115][T14166] ? kernfs_create_link+0x1bd/0x240 [ 461.602156][T14166] internal_create_groups+0x9d/0x150 [ 461.602203][T14166] device_add+0xf30/0x1aa0 [ 461.602259][T14166] ? __pfx_device_add+0x10/0x10 [ 461.602309][T14166] ? lockdep_init_map_type+0x5c/0x280 [ 461.602354][T14166] ? __init_waitqueue_head+0xca/0x150 [ 461.602414][T14166] netdev_register_kobject+0x1a9/0x3d0 [ 461.602467][T14166] register_netdevice+0x13dc/0x2270 [ 461.602520][T14166] ? __pfx_register_netdevice+0x10/0x10 [ 461.602578][T14166] slip_open+0xb86/0x1150 [ 461.602632][T14166] ? __pfx_slip_open+0x10/0x10 [ 461.602676][T14166] ? down_write+0x14d/0x200 [ 461.602724][T14166] ? __pfx_slip_open+0x10/0x10 [ 461.602769][T14166] tty_ldisc_open+0x9c/0x120 [ 461.602808][T14166] tty_set_ldisc+0x32b/0x780 [ 461.602864][T14166] tty_ioctl+0xc2e/0x1680 [ 461.602910][T14166] ? __pfx_tty_ioctl+0x10/0x10 [ 461.602977][T14166] ? find_held_lock+0x2b/0x80 [ 461.603008][T14166] ? hook_file_ioctl_common+0x145/0x410 [ 461.603062][T14166] ? __fget_files+0x20e/0x3c0 [ 461.603105][T14166] ? __pfx_tty_ioctl+0x10/0x10 [ 461.603158][T14166] __x64_sys_ioctl+0x18e/0x210 [ 461.603220][T14166] do_syscall_64+0xcd/0x490 [ 461.603266][T14166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.603299][T14166] RIP: 0033:0x7f7ce778ebe9 [ 461.603326][T14166] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 461.603357][T14166] RSP: 002b:00007f7ce8584038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 461.603390][T14166] RAX: ffffffffffffffda RBX: 00007f7ce79b5fa0 RCX: 00007f7ce778ebe9 [ 461.603413][T14166] RDX: 0000000000000000 RSI: 0000000000005423 RDI: 0000000000000005 [ 461.603432][T14166] RBP: 00007f7ce7811e19 R08: 0000000000000000 R09: 0000000000000000 [ 461.603451][T14166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 461.603471][T14166] R13: 00007f7ce79b6038 R14: 00007f7ce79b5fa0 R15: 00007ffdc1bb4848 [ 461.603514][T14166] [ 461.909136][ C0] vkms_vblank_simulate: vblank timer overrun [ 462.635717][T14186] mkiss: ax0: crc mode is auto. [ 464.121519][T14231] ================================================================== [ 464.129746][T14231] BUG: KASAN: slab-use-after-free in force_devcd_write+0x312/0x340 [ 464.137797][T14231] Read of size 8 at addr ffff888029984800 by task syz.1.3068/14231 [ 464.146086][T14231] [ 464.148456][T14231] CPU: 0 UID: 0 PID: 14231 Comm: syz.1.3068 Not tainted 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(full) [ 464.148502][T14231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 464.148522][T14231] Call Trace: [ 464.148534][T14231] [ 464.148547][T14231] dump_stack_lvl+0x116/0x1f0 [ 464.148594][T14231] print_report+0xcd/0x630 [ 464.148635][T14231] ? __virt_addr_valid+0x81/0x610 [ 464.148674][T14231] ? __phys_addr+0xe8/0x180 [ 464.148711][T14231] ? force_devcd_write+0x312/0x340 [ 464.148751][T14231] kasan_report+0xe0/0x110 [ 464.148792][T14231] ? force_devcd_write+0x312/0x340 [ 464.148836][T14231] force_devcd_write+0x312/0x340 [ 464.148876][T14231] ? __pfx_force_devcd_write+0x10/0x10 [ 464.148918][T14231] ? __debugfs_file_get+0x1fe/0x840 [ 464.148961][T14231] ? __pfx___debugfs_file_get+0x10/0x10 [ 464.149012][T14231] full_proxy_write+0x12e/0x1a0 [ 464.149060][T14231] ? __pfx_full_proxy_write+0x10/0x10 [ 464.149107][T14231] vfs_write+0x29d/0x11d0 [ 464.149145][T14231] ? __pfx___mutex_lock+0x10/0x10 [ 464.149193][T14231] ? __pfx_vfs_write+0x10/0x10 [ 464.149233][T14231] ? __fget_files+0x20e/0x3c0 [ 464.149272][T14231] ksys_write+0x12a/0x250 [ 464.149309][T14231] ? __pfx_ksys_write+0x10/0x10 [ 464.149351][T14231] do_syscall_64+0xcd/0x490 [ 464.149394][T14231] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.149427][T14231] RIP: 0033:0x7f169058ebe9 [ 464.149453][T14231] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 464.149485][T14231] RSP: 002b:00007f16914d4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 464.149517][T14231] RAX: ffffffffffffffda RBX: 00007f16907b5fa0 RCX: 00007f169058ebe9 [ 464.149539][T14231] RDX: 000000000000000e RSI: 0000000000000000 RDI: 0000000000000005 [ 464.149558][T14231] RBP: 00007f1690611e19 R08: 0000000000000000 R09: 0000000000000000 [ 464.149577][T14231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 464.149597][T14231] R13: 00007f16907b6038 R14: 00007f16907b5fa0 R15: 00007fff7fb9ea18 [ 464.149627][T14231] [ 464.149639][T14231] [ 464.363475][T14231] Allocated by task 5996: [ 464.368068][T14231] kasan_save_stack+0x33/0x60 [ 464.372765][T14231] kasan_save_track+0x14/0x30 [ 464.377540][T14231] __kasan_kmalloc+0xaa/0xb0 [ 464.382428][T14231] __kmalloc_noprof+0x223/0x510 [ 464.387411][T14231] ieee802_11_parse_elems_full+0x1db/0x3780 [ 464.393457][T14231] ieee80211_inform_bss+0x10b/0x1140 [ 464.399227][T14231] cfg80211_inform_single_bss_data+0x8e7/0x1df0 [ 464.405505][T14231] cfg80211_inform_bss_data+0x224/0x3bd0 [ 464.411340][T14231] cfg80211_inform_bss_frame_data+0x26f/0x750 [ 464.417606][T14231] ieee80211_bss_info_update+0x310/0xab0 [ 464.423273][T14231] ieee80211_ibss_rx_queued_mgmt+0x1905/0x2fd0 [ 464.429491][T14231] ieee80211_iface_work+0xe2e/0x1360 [ 464.434914][T14231] cfg80211_wiphy_work+0x2c4/0x580 [ 464.440139][T14231] process_one_work+0x9cc/0x1b70 [ 464.445121][T14231] worker_thread+0x6c8/0xf10 [ 464.449871][T14231] kthread+0x3c5/0x780 [ 464.453984][T14231] ret_from_fork+0x5d4/0x6f0 [ 464.458695][T14231] ret_from_fork_asm+0x1a/0x30 [ 464.463596][T14231] [ 464.465973][T14231] Freed by task 5996: [ 464.470150][T14231] kasan_save_stack+0x33/0x60 [ 464.475058][T14231] kasan_save_track+0x14/0x30 [ 464.479790][T14231] kasan_save_free_info+0x3b/0x60 [ 464.485248][T14231] __kasan_slab_free+0x60/0x70 [ 464.490396][T14231] kfree+0x2b4/0x4d0 [ 464.494927][T14231] ieee80211_inform_bss+0x77c/0x1140 [ 464.500237][T14231] cfg80211_inform_single_bss_data+0x8e7/0x1df0 [ 464.506492][T14231] cfg80211_inform_bss_data+0x224/0x3bd0 [ 464.512588][T14231] cfg80211_inform_bss_frame_data+0x26f/0x750 [ 464.518786][T14231] ieee80211_bss_info_update+0x310/0xab0 [ 464.524557][T14231] ieee80211_ibss_rx_queued_mgmt+0x1905/0x2fd0 [ 464.530848][T14231] ieee80211_iface_work+0xe2e/0x1360 [ 464.536175][T14231] cfg80211_wiphy_work+0x2c4/0x580 [ 464.541488][T14231] process_one_work+0x9cc/0x1b70 [ 464.546710][T14231] worker_thread+0x6c8/0xf10 [ 464.551955][T14231] kthread+0x3c5/0x780 [ 464.556241][T14231] ret_from_fork+0x5d4/0x6f0 [ 464.560902][T14231] ret_from_fork_asm+0x1a/0x30 [ 464.565788][T14231] [ 464.568190][T14231] The buggy address belongs to the object at ffff888029984800 [ 464.568190][T14231] which belongs to the cache kmalloc-1k of size 1024 [ 464.582685][T14231] The buggy address is located 0 bytes inside of [ 464.582685][T14231] freed 1024-byte region [ffff888029984800, ffff888029984c00) [ 464.596930][T14231] [ 464.599266][T14231] The buggy address belongs to the physical page: [ 464.605808][T14231] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x29980 [ 464.614747][T14231] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 464.623268][T14231] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 464.631371][T14231] page_type: f5(slab) [ 464.635453][T14231] raw: 00fff00000000040 ffff88801b841dc0 0000000000000000 dead000000000001 [ 464.644141][T14231] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 464.652767][T14231] head: 00fff00000000040 ffff88801b841dc0 0000000000000000 dead000000000001 [ 464.661594][T14231] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 464.670289][T14231] head: 00fff00000000003 ffffea0000a66001 00000000ffffffff 00000000ffffffff [ 464.679076][T14231] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 464.687780][T14231] page dumped because: kasan: bad access detected [ 464.694205][T14231] page_owner tracks the page as allocated [ 464.699934][T14231] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x252800(GFP_NOWAIT|__GFP_NORETRY|__GFP_COMP|__GFP_THISNODE), pid 36, tgid 36 (kworker/u8:2), ts 16235466906, free_ts 0 [ 464.718474][T14231] post_alloc_hook+0x1c0/0x230 [ 464.723273][T14231] get_page_from_freelist+0x132b/0x38e0 [ 464.728929][T14231] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 464.734936][T14231] new_slab+0x94/0x330 [ 464.739320][T14231] ___slab_alloc+0xcf2/0x1740 [ 464.744032][T14231] __slab_alloc.constprop.0+0x56/0xb0 [ 464.749441][T14231] __kmalloc_cache_node_noprof+0x100/0x420 [ 464.755528][T14231] blk_mq_alloc_and_init_hctx+0x639/0x11c0 [ 464.761444][T14231] __blk_mq_realloc_hw_ctxs+0x495/0x610 [ 464.767229][T14231] blk_mq_init_allocated_queue+0x3af/0x1240 [ 464.773266][T14231] blk_mq_alloc_queue+0x1bb/0x280 [ 464.778843][T14231] scsi_alloc_sdev+0x888/0xd70 [ 464.784518][T14231] scsi_probe_and_add_lun+0x76b/0xd80 [ 464.790115][T14231] __scsi_scan_target+0x1e8/0x580 [ 464.795258][T14231] scsi_scan_channel+0x149/0x1e0 [ 464.800473][T14231] scsi_scan_host_selected+0x302/0x400 [ 464.806006][T14231] page_owner free stack trace missing [ 464.811410][T14231] [ 464.813789][T14231] Memory state around the buggy address: [ 464.819694][T14231] ffff888029984700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 464.827963][T14231] ffff888029984780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 464.836211][T14231] >ffff888029984800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 464.844482][T14231] ^ [ 464.848644][T14231] ffff888029984880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 464.857081][T14231] ffff888029984900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 464.865179][T14231] ================================================================== SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 464.873422][ C0] vkms_vblank_simulate: vblank timer overrun [ 464.906182][T14231] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 464.913541][T14231] CPU: 0 UID: 0 PID: 14231 Comm: syz.1.3068 Not tainted 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(full) [ 464.925839][T14231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 464.936123][T14231] Call Trace: [ 464.939527][T14231] [ 464.942585][T14231] dump_stack_lvl+0x3d/0x1f0 [ 464.947343][T14231] vpanic+0x6e8/0x7a0 [ 464.951385][T14231] ? __pfx_vpanic+0x10/0x10 [ 464.956230][T14231] ? __pfx_vprintk_emit+0x10/0x10 [ 464.961579][T14231] ? force_devcd_write+0x312/0x340 [ 464.966756][T14231] panic+0xca/0xd0 [ 464.970596][T14231] ? __pfx_panic+0x10/0x10 [ 464.975177][T14231] ? force_devcd_write+0x312/0x340 [ 464.980357][T14231] ? preempt_schedule_common+0x44/0xc0 [ 464.985983][T14231] ? preempt_schedule_thunk+0x16/0x30 [ 464.991414][T14231] check_panic_on_warn+0xab/0xb0 [ 464.996408][T14231] end_report+0x107/0x170 [ 465.000884][T14231] kasan_report+0xee/0x110 [ 465.005498][T14231] ? force_devcd_write+0x312/0x340 [ 465.010686][T14231] force_devcd_write+0x312/0x340 [ 465.015709][T14231] ? __pfx_force_devcd_write+0x10/0x10 [ 465.022048][T14231] ? __debugfs_file_get+0x1fe/0x840 [ 465.027404][T14231] ? __pfx___debugfs_file_get+0x10/0x10 [ 465.033018][T14231] full_proxy_write+0x12e/0x1a0 [ 465.038023][T14231] ? __pfx_full_proxy_write+0x10/0x10 [ 465.043914][T14231] vfs_write+0x29d/0x11d0 [ 465.048293][T14231] ? __pfx___mutex_lock+0x10/0x10 [ 465.053548][T14231] ? __pfx_vfs_write+0x10/0x10 [ 465.058476][T14231] ? __fget_files+0x20e/0x3c0 [ 465.063335][T14231] ksys_write+0x12a/0x250 [ 465.067908][T14231] ? __pfx_ksys_write+0x10/0x10 [ 465.073266][T14231] do_syscall_64+0xcd/0x490 [ 465.078006][T14231] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.084120][T14231] RIP: 0033:0x7f169058ebe9 [ 465.088573][T14231] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 465.108841][T14231] RSP: 002b:00007f16914d4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 465.117392][T14231] RAX: ffffffffffffffda RBX: 00007f16907b5fa0 RCX: 00007f169058ebe9 [ 465.125661][T14231] RDX: 000000000000000e RSI: 0000000000000000 RDI: 0000000000000005 [ 465.133669][T14231] RBP: 00007f1690611e19 R08: 0000000000000000 R09: 0000000000000000 [ 465.141852][T14231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 465.149959][T14231] R13: 00007f16907b6038 R14: 00007f16907b5fa0 R15: 00007fff7fb9ea18 [ 465.158071][T14231] [ 465.161282][T14231] Kernel Offset: disabled [ 465.165609][T14231] Rebooting in 86400 seconds..