last executing test programs: 11m34.866349818s ago: executing program 3 (id=1741): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) pipe$auto(0x0) r1 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000008040), 0x2, 0x0) r2 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x80044943, 0x0) ioctl$auto_I2C_SMBUS(r1, 0x720, 0x0) 11m34.597091263s ago: executing program 3 (id=1743): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8000, 0x0) r0 = socket(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r2, r1, 0x4, 0x1, r0, @relative_id=0x13, 0xe600}, 0xf) bpf$auto(0x4, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xf) 11m33.404047703s ago: executing program 3 (id=1749): mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x6c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [@HSR_A_IFINDEX={0x8}, @HSR_A_IF2_SEQ={0x6, 0x7, 0x8000}, @HSR_A_IFINDEX={0x8}, @HSR_A_NODE_ADDR_B={0xa, 0x5, @remote}, @HSR_A_NODE_ADDR={0xa}, @HSR_A_NODE_ADDR={0xa, 0x1, @multicast}, @HSR_A_IF1_SEQ={0x6, 0x6, 0xf}, @HSR_A_IF2_AGE={0x8, 0x4, 0x88000001}, @HSR_A_NODE_ADDR={0xa, 0x1, @local}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40080}, 0x6004000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 11m32.931466113s ago: executing program 3 (id=1753): close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x3, 0x6) lsm_list_modules$auto(0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x401c5820, 0x0) mkdir$auto(0x0, 0x353) 11m32.033414361s ago: executing program 3 (id=1757): close_range$auto(0x2, 0x8, 0x0) eventfd$auto(0x3) readv$auto(0x3, 0x0, 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) memfd_create$auto(0x0, 0x9) write$auto(0x3, 0x0, 0xfffffdef) fallocate$auto(0x3, 0x0, 0xe, 0x8ec8) 11m29.314853718s ago: executing program 3 (id=1769): socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) setpgid$auto(0x7, 0xffffffdffffffff4) r0 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000002040)='/dev/snd/pcmC1D1c\x00', 0x80, 0x0) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f0000000000), 0xa) ioctl$auto_SNDRV_PCM_IOCTL_PAUSE2(r0, 0x40044145, 0x0) getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0) 11m28.586230906s ago: executing program 32 (id=1769): socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) setpgid$auto(0x7, 0xffffffdffffffff4) r0 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000002040)='/dev/snd/pcmC1D1c\x00', 0x80, 0x0) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f0000000000), 0xa) ioctl$auto_SNDRV_PCM_IOCTL_PAUSE2(r0, 0x40044145, 0x0) getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0) 6.924026601s ago: executing program 0 (id=4513): mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/snd/controlC2\x00', 0x8080, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, 0x0) openat$auto_regulator_summary_fops_(0xffffffffffffff9c, 0x0, 0x40000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) remap_file_pages$auto(0x4, 0x200000000000002, 0x0, 0x58, 0x5) io_uring_setup$auto(0x6, 0x0) mknod$auto(0x0, 0x402, 0x7fffffff) mremap$auto(0x110c231000, 0x4, 0x4, 0x7, 0x100000000) 6.103969344s ago: executing program 2 (id=4506): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8000, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) io_uring_setup$auto(0x9, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8000, 0x0) r2 = socket(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'wg0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r4, r3, 0x4, 0x401, r2, @relative_id=0x13, 0xe600}, 0xf) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r0, 0x0, 0x3}, 0xc) bpf$auto(0x3, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x4}, 0xc) 5.984997061s ago: executing program 0 (id=4508): sendmsg$auto_OVS_FLOW_CMD_SET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000000)={0x1c, 0x0, 0x1, 0x70bd29, 0x25dfdbff, {}, [@OVS_FLOW_ATTR_UFID={0x5, 0x9, 0xb0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x4000) r0 = socket(0xa, 0x806, 0x0) syz_genetlink_get_family_id$auto_nfsd(0x0, r0) connect$auto(0x3, 0x0, 0x55) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000804) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x44, 0x80000000fffffff9, 0xfbc, 0x0, 0x0, 0x0, 0x6, 0x6, 0x7, 0x5, 0x7fffffff, 0x0, 0xffffffff80000000, 0x5, 0x61, 0x9}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto(0x3, 0x89e0, 0x91) close_range$auto(0x2, 0x8000, 0x0) sendmsg$auto_NL802154_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40804}, 0x0) 5.903126732s ago: executing program 2 (id=4509): bpf$auto(0x0, 0x0, 0x6f3) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1d, 0x2, 0x6) socket(0x10, 0x2, 0x4) mmap$auto(0x0, 0x40009, 0xde, 0x9b72, 0x7, 0x28000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r0, 0x0, 0x1f40) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) r2 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000140), 0x102, 0x0) ioctl$auto_USB_RAW_IOCTL_INIT(r2, 0x41015500, 0x0) ioctl$auto_TIOCSETD2(0xffffffffffffffff, 0x5423, 0x0) 5.252229531s ago: executing program 2 (id=4511): fadvise64$auto_POSIX_FADV_NOREUSE(0xffffffffffffffff, 0x4, 0x100000001, 0x5) setsockopt$auto(0xffffffffffffffff, 0x65, 0x8, 0x0, 0x3) timer_create$auto(0xfffffff9, &(0x7f0000000000)={@sival_int=0x3, @inferred, 0x1, @_tid}, 0x0) timer_settime$auto(0x0, 0x101, &(0x7f00000000c0)={{0xf, 0x10007}, {0x9}}, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) mbind$auto(0xf000, 0x1, 0x1, 0x0, 0x7fff, 0x2) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x20000000000006, 0x2) sendmsg$auto_NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x20040045) ioctl$auto_TIOCSETD2(0xffffffffffffffff, 0x5423, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x1e9742, 0x0) madvise$auto(0x0, 0x2003f0, 0x15) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mlock$auto(0x1000, 0x6) 5.038113987s ago: executing program 4 (id=4512): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4000894}, 0x800) bpf$auto(0x0, &(0x7f00000001c0)=@test={0xffffffffffffffff, 0xffff, 0xfffff0b6, 0xffff, 0x84, 0xac1, 0x2, 0x36242398, 0xfffff5b2, 0x3bb, 0x8000007, 0xffff, 0x6, 0x81, 0x68198}, 0x6f3) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff0500060001000000840002803d00488013b37090badc49d6dc93876646d25a4d297d01cd3b7da38d12889cc50d505f353dc42d0a3c0a14c7b46428910708003600", @ANYRES32=0x0, @ANYBLOB="0400b3800000003d003b800400a4800c009a00008000000000000004008680c16ab1b1b39dcaa14b6af7dcc011b43cf706e562811c62b28a702b72e0a87126700294f2350000000c000180080003"], 0xd4}, 0x1, 0x0, 0x0, 0x20000010}, 0x20008000) rt_tgsigqueueinfo$auto(0x3, 0x96, 0x3, &(0x7f0000000180)={@siginfo_0_0={0x80000000, 0x7, 0x8000, @_kill={0xffffffffffffffff}}}) sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="010027bd"], 0x2c}, 0x1, 0x0, 0x0, 0x4801}, 0x0) r0 = socket(0xa, 0x5, 0x84) sendto$auto(r0, 0x0, 0x401, 0x101, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fb8000"}, 0x1c) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="12"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 4.094724115s ago: executing program 4 (id=4514): r0 = socket(0x18, 0x5, 0x1) fdatasync$auto(r0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2002, 0x0) capget$auto(&(0x7f0000000240)={0xff, 0xffffffffffffffff}, &(0x7f0000000280)={0x80, 0xe3c, 0x5}) setsockopt$auto_SO_BSDCOMPAT(r0, 0x2, 0xe, &(0x7f0000000080)='/dev/net/tun\x00', 0xfffffff6) ioctl$auto(r1, 0x400454da, 0x38) unshare$auto(0x40000080) mmap$auto(0x800000, 0x8, 0x0, 0x40eb2, 0x401, 0x300000000000) munmap$auto(0x0, 0xffffffff) ioprio_set$auto(0x1, 0x0, 0x0) ioprio_get$auto(0x2000000002, 0x0) 4.094034392s ago: executing program 0 (id=4522): io_submit$auto(0x0, 0x400000000000007f, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_net_shaper(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$auto_NET_SHAPER_CMD_GET2(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x1c, r1, 0x305, 0x70bd2d, 0x25dfdbfc, {}, [@NET_SHAPER_A_IFINDEX={0x8, 0x8, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x401d0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) ioctl$auto(0xc8, 0x800454df, 0x5c8d) writev$auto(0xc8, 0x0, 0x9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffff7fffff0005, 0x8) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0x200007, 0x8) 4.093617125s ago: executing program 1 (id=4515): mmap$auto(0x0, 0x2020009, 0x7, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/clear_refs\x00', 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB=']'], 0x1ac}}, 0x40000) recvmmsg$auto(r0, &(0x7f0000000140)={{0x0, 0x1, &(0x7f0000000080)={0x0, 0x400}, 0x5, 0x0, 0x200002, 0x10001}, 0x6}, 0xfffffff9, 0x10, 0x0) r1 = gettid() process_vm_writev$auto(r1, 0x0, 0x3, 0x0, 0x4, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0xc) 4.093478995s ago: executing program 2 (id=4516): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socketpair$auto(0x1, 0x6, 0x8000000000000000, 0x0) mincore$auto(0x1000, 0x8001, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x10, 0x2, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) socket(0x2, 0x1, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_CREATE_VM(r0, 0x4008ae90, 0x0) 3.638830411s ago: executing program 2 (id=4517): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x0, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto(0xc8, 0x8927, 0x5c8d) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x400008, 0xb, 0x9b72, 0x2, 0x8000) socket(0xa, 0x3, 0x3a) ioctl$auto_RTC_PARAM_GET(0xffffffffffffffff, 0x40187013, &(0x7f0000000040)={0x3e, @uvalue=0x7, 0x9}) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x7, 0x8000000000000000, 0x0) setsockopt$auto(0x400000000000003, 0x29, 0xca, 0x0, 0x567) 2.823540976s ago: executing program 0 (id=4518): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0xffffffffffffffff, 0x0) io_uring_setup$auto(0x6, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x1ff, 0x7, 0xd, 0x7181, 0x1ffde, 0x7, 0x3, 0x9, 0x9, 0x3, 0x0, 0x1, 0xb4, 0x9, 0x8, 0x10003, 0x80, 0x4, 0x0, 0xa, 0x22000, 0x200, 0x0, 0x84}, 0x1fe, 0xd) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) recvmmsg$auto(r0, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002cbd7000fbdbdf250a000000080003000000000008000c0000000000080001007f"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x20008810) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x24, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x400080}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008010}, 0x400d0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a0027"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 2.771566728s ago: executing program 1 (id=4519): openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x8402, 0x0) openat$auto_tracing_thresh_fops_trace(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/tracing/tracing_thresh\x00', 0x2000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x24c802, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000440), 0x20100, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_CREATE_VM(r0, 0x4004ae99, 0x0) 2.748432552s ago: executing program 4 (id=4520): mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x0) r0 = socket(0x10, 0x2, 0x0) openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) recvmmsg$auto(r0, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) write$auto_proc_mem_operations_base(0xffffffffffffffff, &(0x7f0000000000)="351ff6218163cce8505bf40fca856149f185354f86f6766b73aeb066b2a65290e689cb5a9cd45a63766508ae821ea42a555887244ce3a5676c4a8f62c1dadfd6efc8b8dd0eae0c03292f536b2b5042c923", 0x51) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="180027"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 2.214700051s ago: executing program 1 (id=4521): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/scsi/device_info\x00', 0x48041, 0x0) r0 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/pcmC1D1p\x00', 0x0, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_STATUS_EXT32(r0, 0xc06c4124, &(0x7f00000000c0)={0xfff, 0x7, 0x9, 0x9, 0x2f02, 0x4, 0xd, 0xfffffffb, 0x7, 0x1ff, 0x6, 0xff, 0x7d1, 0x3, 0x3, 0x400, 0x81, 0x1000, "ecb1af8e837d00909346ebc5863d427e813bd779d7f2dcd40ee31565b1cb97bae57c66f7"}) socket(0x2, 0x2, 0x6) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f00000001c0)={{&(0x7f0000000000), 0x1aa, &(0x7f0000000300)={0x0, 0x4a}, 0x5, 0x0, 0x5, 0x5}, 0x5}, 0x2, 0x100) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x800, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0x2003f0, 0x17) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) ioctl$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffffff, 0x3, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) 2.200906391s ago: executing program 4 (id=4523): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x801, 0x0) connect$auto(0x3, 0x0, 0x51) socket(0xf, 0x3, 0x2) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x0, 0x0) select$auto(0x6, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x3, 0xfff, 0x1, 0x948b, 0x3, 0x95f4da2a, 0xffffffffffffffff, 0x3, 0x62, 0x7, 0x7, 0x6d3f, 0x9, 0x4, 0x5]}, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f0000000100)={[0x1ff, 0x6, 0x1, 0xfffffffffffffff7, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000021, 0x7, 0x6d3e, 0x7fff, 0x2, 0x6]}, 0x0) 1.330729074s ago: executing program 2 (id=4524): mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) r0 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a4, 0xffff) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7ffffffe, 0xd, 0x3000, 0x6, 0x8, 0x7fffffff, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c47, 0x29f, 0x100, 0x1, 0x105, 0x800, 0x3}, {0x8, 0x2, 0x52, 0x5, 0x9, 0x100, 0x76c5, 0x8, 0x100000000}}) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/fs/ocfs2/max_locking_protocol\x00', 0xa2500, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x5, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) 1.330220009s ago: executing program 0 (id=4532): prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x787b, 0x7000000) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) openat$auto_proc_projid_map_operations_base(0xffffffffffffff9c, 0x0, 0x101002, 0x0) socket(0x10, 0x2, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/net/udp\x00', 0x240, 0x0) pread64$auto(r0, 0x0, 0x200000000003, 0x2f4a3a23) set_mempolicy$auto(0x2, 0x0, 0x4) 891.79796ms ago: executing program 1 (id=4525): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket(0x10, 0x2, 0xf) close_range$auto(0x0, 0xffffeffe, 0x2) pipe$auto(0x0) socket(0xa, 0x3, 0xff) pipe$auto(0x0) bpf$auto(0x0, &(0x7f0000000080)=@bpf_attr_4={0x1e, r0, 0xffffffff}, 0xd) bpf$auto(0x2, &(0x7f0000000080)=@bpf_attr_3={0x5, 0x0, 0x702955be, 0x40000, 0x4, 0x5, 0x80, 0xe4, 0xfffff800, "0566c8ee7c78a925488276d7697a12bd", 0x0, 0x5, 0xffffffffffffffff, 0x7, 0x9, 0x4, 0x7, 0x10001, 0x0, 0x8001, @attach_prog_fd=r0, 0x7e, 0x4, 0x1, 0x5, 0x3}, 0x5) bpf$auto(0x1, &(0x7f0000000080)=@bpf_attr_3={0x5, 0x0, 0x702955be, 0x5c, 0x4, 0x9, 0x80, 0xe4, 0xfffff800, "0566c8ee7c78a925488276d7697a12bd", 0x0, 0x2, 0xffffffffffffffff, 0x7, 0x9, 0x4, 0x7, 0x10001, 0x0, 0x8001, @attach_prog_fd, 0x7e, 0x4, 0x1, 0x5, 0x3}, 0x5) 645.994828ms ago: executing program 1 (id=4526): socket(0x1d, 0x2, 0x7) r0 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r1, 0xfd}, 0x6a) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x0) memfd_create$auto(0x0, 0xb) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x3, 0x100) socket(0x1d, 0x2, 0x7) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r2, 0xefff}, 0x6a) close_range$auto(0x2, 0x8000, 0x0) 328.081561ms ago: executing program 4 (id=4527): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x106) r0 = socket(0x10, 0x2, 0xf) close_range$auto(0x0, 0xffffeffe, 0x2) pipe$auto(0x0) socket(0xa, 0x3, 0xff) pipe$auto(0x0) bpf$auto(0x0, &(0x7f0000000080)=@bpf_attr_4={0x1e, r0, 0xffffffff}, 0xd) bpf$auto(0x2, &(0x7f0000000080)=@bpf_attr_3={0x5, 0x0, 0x702955be, 0x40000, 0x4, 0x5, 0x80, 0xe4, 0xfffff800, "0566c8ee7c78a925488276d7697a12bd", 0x0, 0x5, 0xffffffffffffffff, 0x7, 0x9, 0x4, 0x7, 0x10001, 0x0, 0x8001, @attach_prog_fd=r0, 0x7e, 0x4, 0x1, 0x5, 0x3}, 0x5) 87.335006ms ago: executing program 0 (id=4528): sigaltstack$auto(0x0, &(0x7f00000003c0)={&(0x7f0000000180)="69cc8d0de6b41511259c289f8eba5cd9efe7b46018e5bfce1b542499858929869392667f4a67831f37b948cef0c793b831f019cb998179b02af53526d479eaa474255b4bad7cce70b58305c3c789dddea82c3a78568db57899f6372003e4f0fe7c68c3e6b59956bfca", 0x9, 0x8}) open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) ppoll$auto(0x0, 0x7f, 0x0, &(0x7f00000001c0)={0x5}, 0x8) mount$auto(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='nfs\x00\x00', 0x200, &(0x7f00000001c0)) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/tty48\x00', 0x800, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2000000000000021, 0x2, 0x10000000000002) socket(0x2a, 0x2, 0x0) r0 = socket(0x2a, 0x2, 0x1) connect$auto(r0, &(0x7f00000000c0)=@qipcrtr={0x2a, 0xffffffff, 0x4001}, 0x55) bind$auto(0x3, &(0x7f0000000080)=@qipcrtr={0x2a, 0x1, 0x8000}, 0x6b) 5.505425ms ago: executing program 1 (id=4529): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x200009, 0x2, 0x40eb1, 0x602, 0x300000000000) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) madvise$auto(0x0, 0x20499d, 0x9) setsockopt$auto(r0, 0x6, 0x3, &(0x7f0000000040)='/dev/ram7\x00', 0x8) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, r0, 0x8000) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0) ioctl$auto(r2, 0x541d, 0xffffffffffffffff) openat$auto_proc_oom_score_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/oom_score_adj\x00', 0x4000, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0x2, 0x2) 0s ago: executing program 4 (id=4530): mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) landlock_create_ruleset$auto(0x0, 0x9, 0x0) openat$auto_cgwb_debug_stats_fops_(0xffffffffffffff9c, 0x0, 0x40, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyzb\x00', 0x800, 0x0) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$auto(0x3, 0x40076f3f, 0x38) socket(0xa, 0x2, 0x73) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x682, 0x0) ioctl$auto_SOUND_MIXER_READ_STEREODEVS2(r1, 0x80044dfb, &(0x7f0000000040)) r2 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x5c, r2, 0x1, 0x70bd2b, 0x25dfdbf9, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x58}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x8}, @L2TP_ATTR_IP6_SADDR={0x14}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @multicast2}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) kernel console output (not intermixed with test programs):                                          [ 814.108135][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 814.114460][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 814.270541][T15880] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3745'. syzkaller syzkaller login: [ 815.894173][T15897] netlink: 18 bytes leftover after parsing attributes in process `syz.0.3751'. [ 816.788155][T15924] bridge0: port 3(team0) entered blocking state [ 816.819169][T15924] bridge0: port 3(team0) entered disabled state [ 816.848241][T15924] team0: entered allmulticast mode [ 816.882352][T15924] team_slave_0: entered allmulticast mode [ 816.923813][T15924] team_slave_1: entered allmulticast mode [ 816.990030][T15924] team0: entered promiscuous mode [ 817.018946][T15924] team_slave_0: entered promiscuous mode [ 817.052387][T15924] team_slave_1: entered promiscuous mode [ 817.100022][T15924] bridge0: port 3(team0) entered blocking state [ 817.106436][T15924] bridge0: port 3(team0) entered forwarding state [ 817.285138][T15931] sp0: Synchronizing with TNC [ 817.593978][T15936] FAULT_INJECTION: forcing a failure. [ 817.593978][T15936] name failslab, interval 1, probability 0, space 0, times 0 [ 817.659174][T15936] CPU: 1 UID: 0 PID: 15936 Comm: syz.0.3766 Tainted: G U 6.15.0-rc4-syzkaller-00051-g7a13c14ee59d #0 PREEMPT(full) [ 817.659229][T15936] Tainted: [U]=USER [ 817.659238][T15936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 817.659252][T15936] Call Trace: [ 817.659260][T15936] [ 817.659269][T15936] dump_stack_lvl+0x16c/0x1f0 [ 817.659307][T15936] should_fail_ex+0x512/0x640 [ 817.659340][T15936] ? __kvmalloc_node_noprof+0x122/0x600 [ 817.659368][T15936] should_failslab+0xc2/0x120 [ 817.659396][T15936] __kvmalloc_node_noprof+0x135/0x600 [ 817.659422][T15936] ? bucket_table_alloc.isra.0+0x83/0x460 [ 817.659458][T15936] ? bucket_table_alloc.isra.0+0x83/0x460 [ 817.659488][T15936] bucket_table_alloc.isra.0+0x83/0x460 [ 817.659560][T15936] rhashtable_init_noprof+0x41a/0x7e0 [ 817.659596][T15936] ipc_init_ids+0x92/0x280 [ 817.659627][T15936] copy_ipcs+0x4e5/0x610 [ 817.659650][T15936] ? copy_utsname+0xab/0x470 [ 817.659681][T15936] create_new_namespaces+0x20a/0xad0 [ 817.659707][T15936] ? security_capable+0x7e/0x260 [ 817.659769][T15936] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 817.659798][T15936] ksys_unshare+0x45b/0xa40 [ 817.659831][T15936] ? __pfx_ksys_unshare+0x10/0x10 [ 817.659862][T15936] ? xfd_validate_state+0x5d/0x180 [ 817.659903][T15936] ? rcu_is_watching+0x12/0xc0 [ 817.659932][T15936] __x64_sys_unshare+0x31/0x40 [ 817.659964][T15936] do_syscall_64+0xcd/0x230 [ 817.659999][T15936] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 817.660024][T15936] RIP: 0033:0x7feed738e969 [ 817.660042][T15936] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 817.660067][T15936] RSP: 002b:00007feed81b5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 817.660089][T15936] RAX: ffffffffffffffda RBX: 00007feed75b5fa0 RCX: 00007feed738e969 [ 817.660106][T15936] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000400 [ 817.660121][T15936] RBP: 00007feed7410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 817.660136][T15936] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 817.660151][T15936] R13: 0000000000000000 R14: 00007feed75b5fa0 R15: 00007fffbda747d8 [ 817.660181][T15936] [ 818.228967][T12526] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 818.236391][T12526] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 819.279598][T15958] netlink: 306 bytes leftover after parsing attributes in process `syz.1.3774'. [ 820.323107][T15977] netlink: 50 bytes leftover after parsing attributes in process `syz.2.3781'. [ 820.590547][T15986] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3785'. [ 821.089056][T15986] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 7 out of range (51000000..2150000000) [ 822.836918][T16009] FAULT_INJECTION: forcing a failure. [ 822.836918][T16009] name failslab, interval 1, probability 0, space 0, times 0 [ 822.916036][T16009] CPU: 1 UID: 0 PID: 16009 Comm: syz.2.3792 Tainted: G U 6.15.0-rc4-syzkaller-00051-g7a13c14ee59d #0 PREEMPT(full) [ 822.916078][T16009] Tainted: [U]=USER [ 822.916086][T16009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 822.916101][T16009] Call Trace: [ 822.916110][T16009] [ 822.916119][T16009] dump_stack_lvl+0x16c/0x1f0 [ 822.916155][T16009] should_fail_ex+0x512/0x640 [ 822.916189][T16009] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 822.916232][T16009] ? __pfx_tomoyo_gc_thread+0x10/0x10 [ 822.916260][T16009] should_failslab+0xc2/0x120 [ 822.916302][T16009] __kmalloc_cache_noprof+0x6a/0x3e0 [ 822.916341][T16009] ? lockdep_init_map_type+0x5c/0x280 [ 822.916374][T16009] ? __kthread_create_on_node+0xce/0x3f0 [ 822.916405][T16009] ? __init_swait_queue_head+0xca/0x150 [ 822.916446][T16009] ? __pfx_tomoyo_gc_thread+0x10/0x10 [ 822.916473][T16009] __kthread_create_on_node+0xce/0x3f0 [ 822.916506][T16009] ? __pfx___kthread_create_on_node+0x10/0x10 [ 822.916548][T16009] ? do_raw_spin_lock+0x12c/0x2b0 [ 822.916583][T16009] ? find_held_lock+0x2b/0x80 [ 822.916605][T16009] ? __pfx_tomoyo_gc_thread+0x10/0x10 [ 822.916634][T16009] kthread_create_on_node+0xc7/0x100 [ 822.916665][T16009] ? __pfx_kthread_create_on_node+0x10/0x10 [ 822.916696][T16009] ? kasan_quarantine_put+0x10a/0x240 [ 822.916723][T16009] ? find_held_lock+0x2b/0x80 [ 822.916746][T16009] ? tomoyo_notify_gc+0xc6/0x470 [ 822.916779][T16009] tomoyo_notify_gc+0xea/0x470 [ 822.916806][T16009] ? ima_iint_find+0xea/0x130 [ 822.916842][T16009] ? __pfx_tomoyo_release+0x10/0x10 [ 822.916874][T16009] tomoyo_release+0x31/0x40 [ 822.916907][T16009] __fput+0x3ff/0xb70 [ 822.916942][T16009] task_work_run+0x14d/0x240 [ 822.916980][T16009] ? __pfx_task_work_run+0x10/0x10 [ 822.917017][T16009] ? __pfx___do_sys_close_range+0x10/0x10 [ 822.917040][T16009] ? rcu_is_watching+0x12/0xc0 [ 822.917067][T16009] syscall_exit_to_user_mode+0x27b/0x2a0 [ 822.917101][T16009] do_syscall_64+0xda/0x230 [ 822.917136][T16009] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 822.917160][T16009] RIP: 0033:0x7f99f718e969 [ 822.917179][T16009] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 822.917203][T16009] RSP: 002b:00007f99f8072038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 822.917226][T16009] RAX: 0000000000000000 RBX: 00007f99f73b5fa0 RCX: 00007f99f718e969 [ 822.917242][T16009] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 822.917257][T16009] RBP: 00007f99f7210ab1 R08: 0000000000000000 R09: 0000000000000000 [ 822.917278][T16009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 822.917293][T16009] R13: 0000000000000000 R14: 00007f99f73b5fa0 R15: 00007ffed9a06a98 [ 822.917322][T16009] [ 823.672571][T12526] Bluetooth: hci0: Unable to find connection for big 0xd2 [ 825.644981][T16049] FAULT_INJECTION: forcing a failure. [ 825.644981][T16049] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 825.720129][T16049] CPU: 1 UID: 0 PID: 16049 Comm: syz.2.3808 Tainted: G U 6.15.0-rc4-syzkaller-00051-g7a13c14ee59d #0 PREEMPT(full) [ 825.720171][T16049] Tainted: [U]=USER [ 825.720179][T16049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 825.720194][T16049] Call Trace: [ 825.720202][T16049] [ 825.720211][T16049] dump_stack_lvl+0x16c/0x1f0 [ 825.720247][T16049] should_fail_ex+0x512/0x640 [ 825.720284][T16049] _copy_from_user+0x2e/0xd0 [ 825.720321][T16049] copy_msghdr_from_user+0x98/0x160 [ 825.720348][T16049] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 825.720377][T16049] ? kfree+0x252/0x4d0 [ 825.720413][T16049] ? schedule+0x2d7/0x3a0 [ 825.720445][T16049] ___sys_sendmsg+0xfe/0x1d0 [ 825.720471][T16049] ? __pfx____sys_sendmsg+0x10/0x10 [ 825.720521][T16049] ? __pfx___might_resched+0x10/0x10 [ 825.720552][T16049] __sys_sendmmsg+0x200/0x420 [ 825.720580][T16049] ? __pfx___sys_sendmmsg+0x10/0x10 [ 825.720613][T16049] ? __pfx_do_futex+0x10/0x10 [ 825.720651][T16049] ? xfd_validate_state+0x5d/0x180 [ 825.720690][T16049] ? rcu_is_watching+0x12/0xc0 [ 825.720716][T16049] __x64_sys_sendmmsg+0x9c/0x100 [ 825.720741][T16049] ? lockdep_hardirqs_on+0x7c/0x110 [ 825.720770][T16049] do_syscall_64+0xcd/0x230 [ 825.720823][T16049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 825.720847][T16049] RIP: 0033:0x7f99f718e969 [ 825.720866][T16049] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 825.720894][T16049] RSP: 002b:00007f99f8072038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 825.720917][T16049] RAX: ffffffffffffffda RBX: 00007f99f73b5fa0 RCX: 00007f99f718e969 [ 825.720934][T16049] RDX: 00000000000009a6 RSI: 0000000000000000 RDI: 0000000000000004 [ 825.720948][T16049] RBP: 00007f99f7210ab1 R08: 0000000000000000 R09: 0000000000000000 [ 825.720964][T16049] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000000 [ 825.720978][T16049] R13: 0000000000000000 R14: 00007f99f73b5fa0 R15: 00007ffed9a06a98 [ 825.721008][T16049] [ 826.013483][T16052] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3809'. [ 826.022890][T16052] veth0_macvtap: entered allmulticast mode [ 827.394505][T16069] netlink: 342 bytes leftover after parsing attributes in process `syz.1.3816'. [ 827.489041][T16069] netlink: 274 bytes leftover after parsing attributes in process `syz.1.3816'. [ 827.942102][T16085] netlink: 342 bytes leftover after parsing attributes in process `syz.0.3822'. [ 828.144487][T16085] netlink: 274 bytes leftover after parsing attributes in process `syz.0.3822'. [ 828.599640][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802271b400: rx timeout, send abort [ 828.676594][T16097] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3826'. [ 828.720506][T16097] netlink: 25 bytes leftover after parsing attributes in process `syz.2.3826'. [ 829.109805][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802271b400: abort rx timeout. Force session deactivation [ 829.886411][T16116] batman_adv: Routing algorithm '0' is not supported [ 831.317128][T16132] netlink: 330 bytes leftover after parsing attributes in process `syz.4.3839'. [ 831.621783][T16142] netlink: 246 bytes leftover after parsing attributes in process `syz.1.3841'. [ 831.911761][T16145] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3844'. [ 832.636396][T16156] netlink: 342 bytes leftover after parsing attributes in process `syz.1.3849'. [ 832.715115][T16156] netlink: 'syz.1.3849': attribute type 1 has an invalid length. [ 832.768432][T16156] netlink: 274 bytes leftover after parsing attributes in process `syz.1.3849'. [ 832.808124][T16158] sctp: [Deprecated]: syz.2.3850 (pid 16158) Use of int in maxseg socket option. [ 832.808124][T16158] Use struct sctp_assoc_value instead [ 833.114549][T16164] FAULT_INJECTION: forcing a failure. [ 833.114549][T16164] name failslab, interval 1, probability 0, space 0, times 0 [ 833.181374][T16166] netlink: 342 bytes leftover after parsing attributes in process `syz.2.3854'. [ 833.230008][T16164] CPU: 1 UID: 0 PID: 16164 Comm: syz.1.3853 Tainted: G U 6.15.0-rc4-syzkaller-00051-g7a13c14ee59d #0 PREEMPT(full) [ 833.230050][T16164] Tainted: [U]=USER [ 833.230059][T16164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 833.230074][T16164] Call Trace: [ 833.230083][T16164] [ 833.230093][T16164] dump_stack_lvl+0x16c/0x1f0 [ 833.230129][T16164] should_fail_ex+0x512/0x640 [ 833.230164][T16164] ? fs_reclaim_acquire+0xae/0x150 [ 833.230203][T16164] should_failslab+0xc2/0x120 [ 833.230234][T16164] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 833.230262][T16164] ? security_inode_alloc+0x3b/0x2b0 [ 833.230293][T16164] security_inode_alloc+0x3b/0x2b0 [ 833.230320][T16164] inode_init_always_gfp+0xce4/0x1030 [ 833.230364][T16164] alloc_inode+0x86/0x240 [ 833.230393][T16164] new_inode+0x22/0x1c0 [ 833.230425][T16164] hugetlbfs_get_inode+0x354/0x730 [ 833.230459][T16164] hugetlb_file_setup+0x15b/0x620 [ 833.230492][T16164] ksys_mmap_pgoff+0x189/0x5c0 [ 833.230528][T16164] ? rcu_is_watching+0x12/0xc0 [ 833.230553][T16164] __x64_sys_mmap+0x125/0x190 [ 833.230588][T16164] do_syscall_64+0xcd/0x230 [ 833.230624][T16164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 833.230649][T16164] RIP: 0033:0x7fd196b8e969 [ 833.230668][T16164] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 833.230692][T16164] RSP: 002b:00007fd19798c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 833.230716][T16164] RAX: ffffffffffffffda RBX: 00007fd196db5fa0 RCX: 00007fd196b8e969 [ 833.230732][T16164] RDX: 00004000000000e3 RSI: 0000000000200004 RDI: 0000000000000000 [ 833.230746][T16164] RBP: 00007fd196c10ab1 R08: 000000000000000d R09: 0000300000000000 [ 833.230762][T16164] R10: 0000000000040eb2 R11: 0000000000000246 R12: 0000000000000000 [ 833.230777][T16164] R13: 0000000000000000 R14: 00007fd196db5fa0 R15: 00007fff3f2238f8 [ 833.230806][T16164] [ 833.429236][ C1] vkms_vblank_simulate: vblank timer overrun [ 833.515806][T16166] netlink: 274 bytes leftover after parsing attributes in process `syz.2.3854'. [ 834.118412][T16182] netlink: 252 bytes leftover after parsing attributes in process `syz.2.3861'. [ 834.172697][T16182] netlink: 252 bytes leftover after parsing attributes in process `syz.2.3861'. [ 834.690654][T16194] FAULT_INJECTION: forcing a failure. [ 834.690654][T16194] name failslab, interval 1, probability 0, space 0, times 0 [ 834.765104][T16194] CPU: 1 UID: 0 PID: 16194 Comm: syz.1.3867 Tainted: G U 6.15.0-rc4-syzkaller-00051-g7a13c14ee59d #0 PREEMPT(full) [ 834.765146][T16194] Tainted: [U]=USER [ 834.765155][T16194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 834.765170][T16194] Call Trace: [ 834.765178][T16194] [ 834.765188][T16194] dump_stack_lvl+0x16c/0x1f0 [ 834.765226][T16194] should_fail_ex+0x512/0x640 [ 834.765259][T16194] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 834.765301][T16194] should_failslab+0xc2/0x120 [ 834.765330][T16194] __kmalloc_cache_noprof+0x6a/0x3e0 [ 834.765368][T16194] ? ptp_open+0xe3/0x520 [ 834.765394][T16194] ptp_open+0xe3/0x520 [ 834.765420][T16194] ? __pfx_ptp_open+0x10/0x10 [ 834.765458][T16194] ? __pfx_ptp_open+0x10/0x10 [ 834.765481][T16194] posix_clock_open+0x178/0x290 [ 834.765506][T16194] ? __pfx_posix_clock_open+0x10/0x10 [ 834.765531][T16194] chrdev_open+0x231/0x6a0 [ 834.765556][T16194] ? __pfx_apparmor_file_open+0x10/0x10 [ 834.765587][T16194] ? __pfx_chrdev_open+0x10/0x10 [ 834.765614][T16194] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 834.765656][T16194] do_dentry_open+0x741/0x1c10 [ 834.765681][T16194] ? __pfx_chrdev_open+0x10/0x10 [ 834.765712][T16194] vfs_open+0x82/0x3f0 [ 834.765746][T16194] path_openat+0x1e5e/0x2d40 [ 834.765780][T16194] ? __pfx_path_openat+0x10/0x10 [ 834.765811][T16194] do_filp_open+0x20b/0x470 [ 834.765833][T16194] ? __pfx_do_filp_open+0x10/0x10 [ 834.765878][T16194] ? alloc_fd+0x471/0x7d0 [ 834.765923][T16194] do_sys_openat2+0x11b/0x1d0 [ 834.765954][T16194] ? __pfx_do_sys_openat2+0x10/0x10 [ 834.765998][T16194] __x64_sys_openat+0x174/0x210 [ 834.766031][T16194] ? __pfx___x64_sys_openat+0x10/0x10 [ 834.766066][T16194] ? rcu_is_watching+0x12/0xc0 [ 834.766096][T16194] do_syscall_64+0xcd/0x230 [ 834.766131][T16194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 834.766156][T16194] RIP: 0033:0x7fd196b8e969 [ 834.766176][T16194] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 834.766201][T16194] RSP: 002b:00007fd19798c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 834.766224][T16194] RAX: ffffffffffffffda RBX: 00007fd196db5fa0 RCX: 00007fd196b8e969 [ 834.766241][T16194] RDX: 0000000000000440 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 834.766257][T16194] RBP: 00007fd196c10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 834.766272][T16194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 834.766286][T16194] R13: 0000000000000000 R14: 00007fd196db5fa0 R15: 00007fff3f2238f8 [ 834.766316][T16194] [ 835.023754][ C1] vkms_vblank_simulate: vblank timer overrun [ 835.081835][T16189] sp0: Synchronizing with TNC [ 837.811203][T16239] netlink: 'syz.2.3884': attribute type 32 has an invalid length. [ 838.156034][T16243] vcan0: tx drop: invalid da for name 0x000000000000003f [ 839.878967][T16273] netlink: 62 bytes leftover after parsing attributes in process `syz.0.3898'. [ 841.479780][T16295] input: isc as /devices/virtual/input/input15 [ 841.546994][T16295] FAULT_INJECTION: forcing a failure. [ 841.546994][T16295] name failslab, interval 1, probability 0, space 0, times 0 [ 841.673820][T16295] CPU: 1 UID: 0 PID: 16295 Comm: syz.4.3905 Tainted: G U 6.15.0-rc4-syzkaller-00051-g7a13c14ee59d #0 PREEMPT(full) [ 841.673861][T16295] Tainted: [U]=USER [ 841.673869][T16295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 841.673885][T16295] Call Trace: [ 841.673892][T16295] [ 841.673902][T16295] dump_stack_lvl+0x16c/0x1f0 [ 841.673939][T16295] should_fail_ex+0x512/0x640 [ 841.673972][T16295] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 841.674006][T16295] should_failslab+0xc2/0x120 [ 841.674041][T16295] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 841.674071][T16295] ? kstrdup_const+0x63/0x80 [ 841.674105][T16295] kstrdup+0x53/0x100 [ 841.674135][T16295] kstrdup_const+0x63/0x80 [ 841.674163][T16295] __kernfs_new_node+0x9b/0x8a0 [ 841.674205][T16295] ? __pfx___kernfs_new_node+0x10/0x10 [ 841.674250][T16295] ? find_held_lock+0x2b/0x80 [ 841.674273][T16295] ? kernfs_root+0xee/0x2a0 [ 841.674300][T16295] kernfs_new_node+0x13c/0x1e0 [ 841.674331][T16295] kernfs_create_link+0xcc/0x240 [ 841.674364][T16295] sysfs_do_create_link_sd+0x90/0x140 [ 841.674405][T16295] sysfs_create_link+0x61/0xc0 [ 841.674441][T16295] device_add+0xb14/0x1a70 [ 841.674475][T16295] ? __pfx_device_add+0x10/0x10 [ 841.674505][T16295] ? __pfx_exact_lock+0x10/0x10 [ 841.674533][T16295] ? kobject_get+0xbb/0x150 [ 841.674569][T16295] cdev_device_add+0xc2/0x1e0 [ 841.674595][T16295] evdev_connect+0x3a4/0x4c0 [ 841.674628][T16295] input_attach_handler.isra.0+0x181/0x260 [ 841.674660][T16295] input_register_device+0xa84/0x1130 [ 841.674692][T16295] uinput_ioctl_handler.isra.0+0x1357/0x1df0 [ 841.674734][T16295] ? __pfx_uinput_ioctl_handler.isra.0+0x10/0x10 [ 841.674778][T16295] ? find_held_lock+0x2b/0x80 [ 841.674814][T16295] ? __pfx_uinput_ioctl+0x10/0x10 [ 841.674855][T16295] __x64_sys_ioctl+0x190/0x200 [ 841.674889][T16295] do_syscall_64+0xcd/0x230 [ 841.674923][T16295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 841.674948][T16295] RIP: 0033:0x7fb7c618e969 [ 841.674966][T16295] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 841.674990][T16295] RSP: 002b:00007fb7c705b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 841.675017][T16295] RAX: ffffffffffffffda RBX: 00007fb7c63b5fa0 RCX: 00007fb7c618e969 [ 841.675033][T16295] RDX: 0000000000000700 RSI: 0000000000005501 RDI: 0000000000000005 [ 841.675048][T16295] RBP: 00007fb7c6210ab1 R08: 0000000000000000 R09: 0000000000000000 [ 841.675063][T16295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 841.675077][T16295] R13: 0000000000000000 R14: 00007fb7c63b5fa0 R15: 00007ffcfbe75508 [ 841.675107][T16295] [ 843.043481][T16302] FAULT_INJECTION: forcing a failure. [ 843.043481][T16302] name failslab, interval 1, probability 0, space 0, times 0 [ 843.164644][T16302] CPU: 1 UID: 0 PID: 16302 Comm: syz.0.3908 Tainted: G U 6.15.0-rc4-syzkaller-00051-g7a13c14ee59d #0 PREEMPT(full) [ 843.164687][T16302] Tainted: [U]=USER [ 843.164696][T16302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 843.164711][T16302] Call Trace: [ 843.164719][T16302] [ 843.164728][T16302] dump_stack_lvl+0x16c/0x1f0 [ 843.164764][T16302] should_fail_ex+0x512/0x640 [ 843.164798][T16302] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 843.164829][T16302] should_failslab+0xc2/0x120 [ 843.164859][T16302] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 843.164886][T16302] ? __kernfs_new_node+0xd2/0x8a0 [ 843.164936][T16302] __kernfs_new_node+0xd2/0x8a0 [ 843.164979][T16302] ? __pfx___kernfs_new_node+0x10/0x10 [ 843.165026][T16302] ? find_held_lock+0x2b/0x80 [ 843.165049][T16302] ? kernfs_root+0xee/0x2a0 [ 843.165077][T16302] kernfs_new_node+0x13c/0x1e0 [ 843.165108][T16302] __kernfs_create_file+0x53/0x350 [ 843.165144][T16302] sysfs_add_file_mode_ns+0x207/0x3c0 [ 843.165189][T16302] sysfs_merge_group+0x1aa/0x340 [ 843.165214][T16302] ? __pfx_sysfs_merge_group+0x10/0x10 [ 843.165241][T16302] ? __pfx_dev_add_physical_location+0x10/0x10 [ 843.165271][T16302] ? bus_to_subsys+0x131/0x160 [ 843.165310][T16302] dpm_sysfs_add+0x237/0x280 [ 843.165341][T16302] device_add+0x9a6/0x1a70 [ 843.165376][T16302] ? __pfx_device_add+0x10/0x10 [ 843.165405][T16302] ? kfree+0x252/0x4d0 [ 843.165453][T16302] device_create_groups_vargs+0x1f8/0x270 [ 843.165491][T16302] device_create+0xed/0x130 [ 843.165524][T16302] ? __pfx_device_create+0x10/0x10 [ 843.165559][T16302] ? do_init_timer+0xc9/0x110 [ 843.165586][T16302] ? ieee80211_roc_setup+0x136/0x270 [ 843.165618][T16302] ? ieee80211_alloc_hw_nm+0x231/0x2260 [ 843.165661][T16302] mac80211_hwsim_new_radio+0x369/0x54d0 [ 843.165717][T16302] ? __asan_memset+0x23/0x50 [ 843.165757][T16302] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 843.165803][T16302] hwsim_new_radio_nl+0xb51/0x12c0 [ 843.165842][T16302] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 843.165887][T16302] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 843.165936][T16302] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 843.165979][T16302] genl_family_rcv_msg_doit+0x206/0x2f0 [ 843.166015][T16302] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 843.166050][T16302] ? trace_cap_capable+0x18d/0x200 [ 843.166081][T16302] ? bpf_lsm_capable+0x9/0x10 [ 843.166105][T16302] ? security_capable+0x7e/0x260 [ 843.166145][T16302] ? ns_capable+0xd7/0x110 [ 843.166173][T16302] genl_rcv_msg+0x55c/0x800 [ 843.166209][T16302] ? __pfx_genl_rcv_msg+0x10/0x10 [ 843.166240][T16302] ? __pfx___dev_queue_xmit+0x10/0x10 [ 843.166278][T16302] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 843.166316][T16302] ? __lock_acquire+0xaa4/0x1ba0 [ 843.166352][T16302] netlink_rcv_skb+0x16a/0x440 [ 843.166381][T16302] ? __pfx_genl_rcv_msg+0x10/0x10 [ 843.166415][T16302] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 843.166459][T16302] ? __pfx_down_read+0x10/0x10 [ 843.166496][T16302] ? netlink_deliver_tap+0x1ae/0xd30 [ 843.166527][T16302] genl_rcv+0x28/0x40 [ 843.166555][T16302] netlink_unicast+0x53a/0x7f0 [ 843.166588][T16302] ? __pfx_netlink_unicast+0x10/0x10 [ 843.166614][T16302] ? __lock_acquire+0xaa4/0x1ba0 [ 843.166653][T16302] netlink_sendmsg+0x8d1/0xdd0 [ 843.166686][T16302] ? __pfx_netlink_sendmsg+0x10/0x10 [ 843.166726][T16302] ____sys_sendmsg+0xa95/0xc70 [ 843.166761][T16302] ? copy_msghdr_from_user+0x10a/0x160 [ 843.166786][T16302] ? __pfx_____sys_sendmsg+0x10/0x10 [ 843.166834][T16302] ___sys_sendmsg+0x134/0x1d0 [ 843.166861][T16302] ? __pfx____sys_sendmsg+0x10/0x10 [ 843.166929][T16302] __sys_sendmsg+0x16d/0x220 [ 843.166956][T16302] ? __pfx___sys_sendmsg+0x10/0x10 [ 843.166981][T16302] ? __x64_sys_futex+0x1e0/0x4c0 [ 843.167015][T16302] ? rcu_is_watching+0x12/0xc0 [ 843.167046][T16302] do_syscall_64+0xcd/0x230 [ 843.167082][T16302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 843.167106][T16302] RIP: 0033:0x7feed738e969 [ 843.167125][T16302] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 843.167150][T16302] RSP: 002b:00007feed81b5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 843.167172][T16302] RAX: ffffffffffffffda RBX: 00007feed75b5fa0 RCX: 00007feed738e969 [ 843.167188][T16302] RDX: 00000000040000c0 RSI: 0000200000000300 RDI: 0000000000000006 [ 843.167205][T16302] RBP: 00007feed7410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 843.167220][T16302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 843.167235][T16302] R13: 0000000000000000 R14: 00007feed75b5fa0 R15: 00007fffbda747d8 [ 843.167266][T16302] [ 844.160949][T16285] Process accounting resumed [ 844.394452][T16295] input: failed to attach handler evdev to device input15, error: -12 [ 844.572031][T16308] netlink: 338 bytes leftover after parsing attributes in process `syz.0.3910'. [ 844.633552][T16309] netlink: 338 bytes leftover after parsing attributes in process `syz.0.3910'. [ 844.721278][T16308] netlink: 210 bytes leftover after parsing attributes in process `syz.0.3910'. [ 845.171961][T16320] netlink: 330 bytes leftover after parsing attributes in process `syz.4.3915'. [ 845.184725][T16318] FAULT_INJECTION: forcing a failure. [ 845.184725][T16318] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 845.246438][T16318] CPU: 1 UID: 0 PID: 16318 Comm: syz.0.3914 Tainted: G U 6.15.0-rc4-syzkaller-00051-g7a13c14ee59d #0 PREEMPT(full) [ 845.246483][T16318] Tainted: [U]=USER [ 845.246491][T16318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 845.246507][T16318] Call Trace: [ 845.246515][T16318] [ 845.246525][T16318] dump_stack_lvl+0x16c/0x1f0 [ 845.246562][T16318] should_fail_ex+0x512/0x640 [ 845.246599][T16318] _copy_from_user+0x2e/0xd0 [ 845.246636][T16318] io_sqe_files_register+0x219/0x960 [ 845.246675][T16318] ? __pfx_io_sqe_files_register+0x10/0x10 [ 845.246717][T16318] ? __mutex_trylock_common+0xe9/0x250 [ 845.246751][T16318] ? __pfx___mutex_trylock_common+0x10/0x10 [ 845.246794][T16318] __io_uring_register+0x12e7/0x2310 [ 845.246835][T16318] ? trace_contention_end+0xdd/0x130 [ 845.246867][T16318] ? __pfx___io_uring_register+0x10/0x10 [ 845.246904][T16318] ? __mutex_lock+0x1ca/0xb90 [ 845.246939][T16318] ? __x64_sys_io_uring_register+0x159/0x280 [ 845.246981][T16318] ? __pfx___mutex_lock+0x10/0x10 [ 845.247021][T16318] ? __fget_files+0x20e/0x3c0 [ 845.247067][T16318] __x64_sys_io_uring_register+0x169/0x280 [ 845.247111][T16318] do_syscall_64+0xcd/0x230 [ 845.247147][T16318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 845.247171][T16318] RIP: 0033:0x7feed738e969 [ 845.247190][T16318] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 845.247214][T16318] RSP: 002b:00007feed81b5038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 845.247237][T16318] RAX: ffffffffffffffda RBX: 00007feed75b5fa0 RCX: 00007feed738e969 [ 845.247254][T16318] RDX: 0000200000000040 RSI: 0000000000000002 RDI: 0000000000000002 [ 845.247269][T16318] RBP: 00007feed7410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 845.247285][T16318] R10: 0000000000000086 R11: 0000000000000246 R12: 0000000000000000 [ 845.247300][T16318] R13: 0000000000000000 R14: 00007feed75b5fa0 R15: 00007fffbda747d8 [ 845.247331][T16318] [ 847.942419][T16332] smc: net device syz_tun applied user defined pnetid ETHTOOL [ 847.987651][T16332] FAULT_INJECTION: forcing a failure. [ 847.987651][T16332] name failslab, interval 1, probability 0, space 0, times 0 [ 848.039344][T16332] CPU: 1 UID: 0 PID: 16332 Comm: syz.0.3919 Tainted: G U 6.15.0-rc4-syzkaller-00051-g7a13c14ee59d #0 PREEMPT(full) [ 848.039387][T16332] Tainted: [U]=USER [ 848.039395][T16332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 848.039411][T16332] Call Trace: [ 848.039419][T16332] [ 848.039429][T16332] dump_stack_lvl+0x16c/0x1f0 [ 848.039466][T16332] should_fail_ex+0x512/0x640 [ 848.039499][T16332] ? __kmalloc_noprof+0xbf/0x510 [ 848.039527][T16332] ? __netlink_kernel_create+0x17f/0x750 [ 848.039553][T16332] should_failslab+0xc2/0x120 [ 848.039582][T16332] __kmalloc_noprof+0xd2/0x510 [ 848.039609][T16332] ? __netlink_create+0x208/0x2c0 [ 848.039660][T16332] __netlink_kernel_create+0x17f/0x750 [ 848.039691][T16332] ? __pfx___netlink_kernel_create+0x10/0x10 [ 848.039727][T16332] ? __pfx_genl_pernet_init+0x10/0x10 [ 848.039760][T16332] genl_pernet_init+0xbd/0x170 [ 848.039792][T16332] ? __pfx_genl_pernet_init+0x10/0x10 [ 848.039823][T16332] ? lockdep_init_map_type+0x5c/0x280 [ 848.039856][T16332] ? __pfx_genl_rcv+0x10/0x10 [ 848.039885][T16332] ? __pfx_genl_bind+0x10/0x10 [ 848.039913][T16332] ? __pfx_genl_unbind+0x10/0x10 [ 848.039942][T16332] ? __pfx_genl_release+0x10/0x10 [ 848.039974][T16332] ? debug_mutex_init+0x37/0x70 [ 848.040017][T16332] ops_init+0x1df/0x5f0 [ 848.040048][T16332] setup_net+0x21e/0x850 [ 848.040079][T16332] ? __pfx_setup_net+0x10/0x10 [ 848.040105][T16332] ? lockdep_init_map_type+0x5c/0x280 [ 848.040138][T16332] ? __pfx_down_read_killable+0x10/0x10 [ 848.040179][T16332] ? debug_mutex_init+0x37/0x70 [ 848.040221][T16332] copy_net_ns+0x2a6/0x5f0 [ 848.040255][T16332] create_new_namespaces+0x3ea/0xad0 [ 848.040290][T16332] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 848.040319][T16332] ksys_unshare+0x45b/0xa40 [ 848.040357][T16332] ? __pfx_ksys_unshare+0x10/0x10 [ 848.040387][T16332] ? xfd_validate_state+0x5d/0x180 [ 848.040429][T16332] ? rcu_is_watching+0x12/0xc0 [ 848.040458][T16332] __x64_sys_unshare+0x31/0x40 [ 848.040490][T16332] do_syscall_64+0xcd/0x230 [ 848.040525][T16332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 848.040550][T16332] RIP: 0033:0x7feed738e969 [ 848.040569][T16332] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 848.040593][T16332] RSP: 002b:00007feed81b5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 848.040616][T16332] RAX: ffffffffffffffda RBX: 00007feed75b5fa0 RCX: 00007feed738e969 [ 848.040641][T16332] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 848.040656][T16332] RBP: 00007feed7410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 848.040671][T16332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 848.040686][T16332] R13: 0000000000000000 R14: 00007feed75b5fa0 R15: 00007fffbda747d8 [ 848.040717][T16332] [ 849.417701][T16336] input: isc as /devices/virtual/input/input16 [ 849.478183][T16336] FAULT_INJECTION: forcing a failure. [ 849.478183][T16336] name failslab, interval 1, probability 0, space 0, times 0 [ 849.558324][T16336] CPU: 1 UID: 0 PID: 16336 Comm: syz.2.3920 Tainted: G U 6.15.0-rc4-syzkaller-00051-g7a13c14ee59d #0 PREEMPT(full) [ 849.558365][T16336] Tainted: [U]=USER [ 849.558373][T16336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 849.558389][T16336] Call Trace: [ 849.558397][T16336] [ 849.558406][T16336] dump_stack_lvl+0x16c/0x1f0 [ 849.558443][T16336] should_fail_ex+0x512/0x640 [ 849.558475][T16336] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 849.558504][T16336] should_failslab+0xc2/0x120 [ 849.558537][T16336] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 849.558564][T16336] ? __alloc_skb+0x2b2/0x380 [ 849.558592][T16336] __alloc_skb+0x2b2/0x380 [ 849.558615][T16336] ? __pfx___alloc_skb+0x10/0x10 [ 849.558642][T16336] ? netlink_has_listeners+0x20f/0x430 [ 849.558672][T16336] alloc_uevent_skb+0x7d/0x210 [ 849.558712][T16336] kobject_uevent_env+0xca4/0x1870 [ 849.558754][T16336] ? kernfs_put+0x35/0x60 [ 849.558775][T16336] ? sysfs_do_create_link_sd+0xbb/0x140 [ 849.558811][T16336] ? bus_to_subsys+0x131/0x160 [ 849.558849][T16336] device_add+0x10dd/0x1a70 [ 849.558883][T16336] ? __pfx_device_add+0x10/0x10 [ 849.558912][T16336] ? __pfx_exact_lock+0x10/0x10 [ 849.558940][T16336] ? kobject_get+0xbb/0x150 [ 849.558975][T16336] cdev_device_add+0xc2/0x1e0 [ 849.559001][T16336] evdev_connect+0x3a4/0x4c0 [ 849.559034][T16336] input_attach_handler.isra.0+0x181/0x260 [ 849.559065][T16336] input_register_device+0xa84/0x1130 [ 849.559098][T16336] uinput_ioctl_handler.isra.0+0x1357/0x1df0 [ 849.559138][T16336] ? __pfx_uinput_ioctl_handler.isra.0+0x10/0x10 [ 849.559182][T16336] ? find_held_lock+0x2b/0x80 [ 849.559220][T16336] ? __pfx_uinput_ioctl+0x10/0x10 [ 849.559256][T16336] __x64_sys_ioctl+0x190/0x200 [ 849.559290][T16336] do_syscall_64+0xcd/0x230 [ 849.559325][T16336] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 849.559354][T16336] RIP: 0033:0x7f99f718e969 [ 849.559374][T16336] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 849.559397][T16336] RSP: 002b:00007f99f8072038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 849.559420][T16336] RAX: ffffffffffffffda RBX: 00007f99f73b5fa0 RCX: 00007f99f718e969 [ 849.559436][T16336] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000005 [ 849.559452][T16336] RBP: 00007f99f7210ab1 R08: 0000000000000000 R09: 0000000000000000 [ 849.559467][T16336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 849.559481][T16336] R13: 0000000000000000 R14: 00007f99f73b5fa0 R15: 00007ffed9a06a98 [ 849.559510][T16336] [ 851.900568][T16365] netlink: 338 bytes leftover after parsing attributes in process `syz.0.3933'. [ 853.414985][T16386] FAULT_INJECTION: forcing a failure. [ 853.414985][T16386] name failslab, interval 1, probability 0, space 0, times 0 [ 853.494035][T16386] CPU: 1 UID: 0 PID: 16386 Comm: syz.2.3941 Tainted: G U 6.15.0-rc4-syzkaller-00051-g7a13c14ee59d #0 PREEMPT(full) [ 853.494079][T16386] Tainted: [U]=USER [ 853.494088][T16386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 853.494104][T16386] Call Trace: [ 853.494112][T16386] [ 853.494122][T16386] dump_stack_lvl+0x16c/0x1f0 [ 853.494158][T16386] should_fail_ex+0x512/0x640 [ 853.494205][T16386] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 853.494235][T16386] should_failslab+0xc2/0x120 [ 853.494271][T16386] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 853.494299][T16386] ? __kernfs_new_node+0xd2/0x8a0 [ 853.494342][T16386] __kernfs_new_node+0xd2/0x8a0 [ 853.494383][T16386] ? __pfx___kernfs_new_node+0x10/0x10 [ 853.494428][T16386] ? find_held_lock+0x2b/0x80 [ 853.494451][T16386] ? kernfs_root+0xee/0x2a0 [ 853.494478][T16386] kernfs_new_node+0x13c/0x1e0 [ 853.494508][T16386] __kernfs_create_file+0x53/0x350 [ 853.494542][T16386] sysfs_add_file_mode_ns+0x207/0x3c0 [ 853.494585][T16386] sysfs_merge_group+0x1aa/0x340 [ 853.494608][T16386] ? __pfx_sysfs_merge_group+0x10/0x10 [ 853.494633][T16386] ? __pfx_dev_add_physical_location+0x10/0x10 [ 853.494660][T16386] ? bus_to_subsys+0x131/0x160 [ 853.494697][T16386] dpm_sysfs_add+0x237/0x280 [ 853.494726][T16386] device_add+0x9a6/0x1a70 [ 853.494759][T16386] ? __pfx_device_add+0x10/0x10 [ 853.494785][T16386] ? __pfx___mutex_lock+0x10/0x10 [ 853.494818][T16386] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 853.494856][T16386] input_register_device+0x7e8/0x1130 [ 853.494888][T16386] uinput_ioctl_handler.isra.0+0x1357/0x1df0 [ 853.494927][T16386] ? __pfx_uinput_ioctl_handler.isra.0+0x10/0x10 [ 853.494969][T16386] ? find_held_lock+0x2b/0x80 [ 853.495009][T16386] ? __pfx_uinput_ioctl+0x10/0x10 [ 853.495044][T16386] __x64_sys_ioctl+0x190/0x200 [ 853.495079][T16386] do_syscall_64+0xcd/0x230 [ 853.495114][T16386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 853.495137][T16386] RIP: 0033:0x7f99f718e969 [ 853.495156][T16386] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 853.495178][T16386] RSP: 002b:00007f99f8072038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 853.495200][T16386] RAX: ffffffffffffffda RBX: 00007f99f73b5fa0 RCX: 00007f99f718e969 [ 853.495217][T16386] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000005 [ 853.495231][T16386] RBP: 00007f99f7210ab1 R08: 0000000000000000 R09: 0000000000000000 [ 853.495245][T16386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 853.495264][T16386] R13: 0000000000000000 R14: 00007f99f73b5fa0 R15: 00007ffed9a06a98 [ 853.495293][T16386] [ 856.154281][T16409] input: isc as /devices/virtual/input/input18 [ 856.183901][T16409] FAULT_INJECTION: forcing a failure. [ 856.183901][T16409] name failslab, interval 1, probability 0, space 0, times 0 [ 856.264783][T16409] CPU: 1 UID: 0 PID: 16409 Comm: syz.0.3947 Tainted: G U 6.15.0-rc4-syzkaller-00051-g7a13c14ee59d #0 PREEMPT(full) [ 856.264824][T16409] Tainted: [U]=USER [ 856.264832][T16409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 856.264847][T16409] Call Trace: [ 856.264855][T16409] [ 856.264864][T16409] dump_stack_lvl+0x16c/0x1f0 [ 856.264900][T16409] should_fail_ex+0x512/0x640 [ 856.264933][T16409] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 856.264962][T16409] should_failslab+0xc2/0x120 [ 856.264991][T16409] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 856.265017][T16409] ? __kernfs_new_node+0xd2/0x8a0 [ 856.265060][T16409] __kernfs_new_node+0xd2/0x8a0 [ 856.265100][T16409] ? __pfx___kernfs_new_node+0x10/0x10 [ 856.265146][T16409] ? find_held_lock+0x2b/0x80 [ 856.265173][T16409] ? kernfs_root+0xee/0x2a0 [ 856.265200][T16409] kernfs_new_node+0x13c/0x1e0 [ 856.265230][T16409] __kernfs_create_file+0x53/0x350 [ 856.265266][T16409] sysfs_add_file_mode_ns+0x207/0x3c0 [ 856.265310][T16409] sysfs_create_file_ns+0x13d/0x1d0 [ 856.265345][T16409] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 856.265405][T16409] ? mark_held_locks+0x49/0x80 [ 856.265441][T16409] device_create_file+0xf2/0x1e0 [ 856.265479][T16409] device_add+0xa2b/0x1a70 [ 856.265513][T16409] ? __pfx_device_add+0x10/0x10 [ 856.265544][T16409] ? __pfx_exact_lock+0x10/0x10 [ 856.265573][T16409] ? kobject_get+0xbb/0x150 [ 856.265610][T16409] cdev_device_add+0xc2/0x1e0 [ 856.265636][T16409] evdev_connect+0x3a4/0x4c0 [ 856.265670][T16409] input_attach_handler.isra.0+0x181/0x260 [ 856.265704][T16409] input_register_device+0xa84/0x1130 [ 856.265737][T16409] uinput_ioctl_handler.isra.0+0x1357/0x1df0 [ 856.265780][T16409] ? __pfx_uinput_ioctl_handler.isra.0+0x10/0x10 [ 856.265829][T16409] ? find_held_lock+0x2b/0x80 [ 856.265867][T16409] ? __pfx_uinput_ioctl+0x10/0x10 [ 856.265904][T16409] __x64_sys_ioctl+0x190/0x200 [ 856.265940][T16409] do_syscall_64+0xcd/0x230 [ 856.265976][T16409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 856.266001][T16409] RIP: 0033:0x7feed738e969 [ 856.266019][T16409] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 856.266043][T16409] RSP: 002b:00007feed81b5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 856.266066][T16409] RAX: ffffffffffffffda RBX: 00007feed75b5fa0 RCX: 00007feed738e969 [ 856.266083][T16409] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000005 [ 856.266098][T16409] RBP: 00007feed7410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 856.266114][T16409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 856.266128][T16409] R13: 0000000000000000 R14: 00007feed75b5fa0 R15: 00007fffbda747d8 [ 856.266159][T16409] [ 857.451795][T16409] input: failed to attach handler evdev to device input18, error: -12 [ 857.940339][T16420] netlink: 194 bytes leftover after parsing attributes in process `syz.4.3951'. [ 859.666001][T16441] FAULT_INJECTION: forcing a failure. [ 859.666001][T16441] name failslab, interval 1, probability 0, space 0, times 0 [ 859.757224][T16441] CPU: 1 UID: 0 PID: 16441 Comm: syz.2.3958 Tainted: G U 6.15.0-rc4-syzkaller-00051-g7a13c14ee59d #0 PREEMPT(full) [ 859.757267][T16441] Tainted: [U]=USER [ 859.757275][T16441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 859.757290][T16441] Call Trace: [ 859.757298][T16441] [ 859.757308][T16441] dump_stack_lvl+0x16c/0x1f0 [ 859.757344][T16441] should_fail_ex+0x512/0x640 [ 859.757378][T16441] ? __kmalloc_cache_node_noprof+0x5a/0x420 [ 859.757407][T16441] should_failslab+0xc2/0x120 [ 859.757437][T16441] __kmalloc_cache_node_noprof+0x6d/0x420 [ 859.757463][T16441] ? __get_vm_area_node+0x101/0x300 [ 859.757504][T16441] __get_vm_area_node+0x101/0x300 [ 859.757545][T16441] vmap+0x159/0x350 [ 859.757579][T16441] ? ringbuf_map_alloc+0x3da/0x7f0 [ 859.757606][T16441] ? __pfx_vmap+0x10/0x10 [ 859.757649][T16441] ringbuf_map_alloc+0x3da/0x7f0 [ 859.757681][T16441] map_create+0x58f/0x1db0 [ 859.757722][T16441] ? __pfx_map_create+0x10/0x10 [ 859.757751][T16441] ? __might_fault+0xe3/0x190 [ 859.757777][T16441] ? __might_fault+0xe3/0x190 [ 859.757802][T16441] ? __might_fault+0x13b/0x190 [ 859.757839][T16441] __sys_bpf+0x47cc/0x4d80 [ 859.757886][T16441] ? __pfx___sys_bpf+0x10/0x10 [ 859.757918][T16441] ? percpu_counter_add_batch+0xb8/0x1f0 [ 859.757948][T16441] ? errseq_sample+0x53/0x70 [ 859.757984][T16441] ? file_init_path+0x4fe/0x760 [ 859.758018][T16441] ? do_futex+0x122/0x350 [ 859.758045][T16441] ? __pfx_do_futex+0x10/0x10 [ 859.758083][T16441] ? xfd_validate_state+0x5d/0x180 [ 859.758124][T16441] ? rcu_is_watching+0x12/0xc0 [ 859.758151][T16441] __x64_sys_bpf+0x78/0xc0 [ 859.758186][T16441] ? lockdep_hardirqs_on+0x7c/0x110 [ 859.758217][T16441] do_syscall_64+0xcd/0x230 [ 859.758252][T16441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 859.758277][T16441] RIP: 0033:0x7f99f718e969 [ 859.758295][T16441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 859.758320][T16441] RSP: 002b:00007f99f8072038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 859.758343][T16441] RAX: ffffffffffffffda RBX: 00007f99f73b5fa0 RCX: 00007f99f718e969 [ 859.758359][T16441] RDX: 0000000000000010 RSI: 00002000000000c0 RDI: 0000000000000000 [ 859.758374][T16441] RBP: 00007f99f7210ab1 R08: 0000000000000000 R09: 0000000000000000 [ 859.758389][T16441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 859.758404][T16441] R13: 0000000000000000 R14: 00007f99f73b5fa0 R15: 00007ffed9a06a98 [ 859.758433][T16441] [ 860.155464][T16445] netlink: 218 bytes leftover after parsing attributes in process `syz.0.3959'. [ 860.165902][T16445] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 861.544553][T16465] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input19 [ 864.955427][T16520] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3982'. [ 865.013350][T16523] netlink: 25 bytes leftover after parsing attributes in process `syz.2.3982'. [ 865.941444][T16544] [U] [ 865.944301][T16544] [U] [ 865.947160][T16544] [U] [ 865.949876][T16544] [U] [ 865.952590][T16544] [U] [ 866.070174][T16542] [U] [ 867.816915][T16570] netlink: 314 bytes leftover after parsing attributes in process `syz.2.3996'. [ 875.215847][T16638] Process accounting paused [ 875.575715][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 875.582255][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 876.670961][T16677] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 876.915148][T16678] Process accounting resumed [ 879.288181][T16708] ima: policy update failed [ 879.347800][ T30] audit: type=1802 audit(4294968573.449:15): pid=16708 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.4033" res=0 errno=0 [ 879.372747][T16708] netlink: 25 bytes leftover after parsing attributes in process `syz.0.4033'. [ 879.582988][T16706] FAULT_INJECTION: forcing a failure. [ 879.582988][T16706] name failslab, interval 1, probability 0, space 0, times 0 [ 879.651727][T16706] CPU: 1 UID: 0 PID: 16706 Comm: syz.2.4034 Tainted: G U 6.15.0-rc4-syzkaller-00051-g7a13c14ee59d #0 PREEMPT(full) [ 879.651768][T16706] Tainted: [U]=USER [ 879.651776][T16706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 879.651791][T16706] Call Trace: [ 879.651799][T16706] [ 879.651809][T16706] dump_stack_lvl+0x16c/0x1f0 [ 879.651846][T16706] should_fail_ex+0x512/0x640 [ 879.651880][T16706] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 879.651923][T16706] should_failslab+0xc2/0x120 [ 879.651953][T16706] __kmalloc_cache_noprof+0x6a/0x3e0 [ 879.651994][T16706] ? fuse_dev_alloc+0x8e/0x280 [ 879.652022][T16706] ? kasan_save_track+0x14/0x30 [ 879.652050][T16706] fuse_dev_alloc+0x8e/0x280 [ 879.652082][T16706] fuse_dev_alloc_install+0x13/0x40 [ 879.652113][T16706] cuse_channel_open+0x100/0x7f0 [ 879.652140][T16706] ? __pfx_cuse_channel_open+0x10/0x10 [ 879.652169][T16706] misc_open+0x35a/0x420 [ 879.652207][T16706] ? __pfx_misc_open+0x10/0x10 [ 879.652243][T16706] chrdev_open+0x231/0x6a0 [ 879.652268][T16706] ? __pfx_apparmor_file_open+0x10/0x10 [ 879.652299][T16706] ? __pfx_chrdev_open+0x10/0x10 [ 879.652326][T16706] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 879.652369][T16706] do_dentry_open+0x741/0x1c10 [ 879.652394][T16706] ? __pfx_chrdev_open+0x10/0x10 [ 879.652425][T16706] vfs_open+0x82/0x3f0 [ 879.652459][T16706] path_openat+0x1e5e/0x2d40 [ 879.652493][T16706] ? __pfx_path_openat+0x10/0x10 [ 879.652523][T16706] do_filp_open+0x20b/0x470 [ 879.652547][T16706] ? __pfx_do_filp_open+0x10/0x10 [ 879.652591][T16706] ? alloc_fd+0x471/0x7d0 [ 879.652636][T16706] do_sys_openat2+0x11b/0x1d0 [ 879.652675][T16706] ? __pfx_do_sys_openat2+0x10/0x10 [ 879.652719][T16706] __x64_sys_openat+0x174/0x210 [ 879.652752][T16706] ? __pfx___x64_sys_openat+0x10/0x10 [ 879.652788][T16706] ? rcu_is_watching+0x12/0xc0 [ 879.652818][T16706] do_syscall_64+0xcd/0x230 [ 879.652854][T16706] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 879.652878][T16706] RIP: 0033:0x7f99f718e969 [ 879.652898][T16706] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 879.652922][T16706] RSP: 002b:00007f99f8072038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 879.652945][T16706] RAX: ffffffffffffffda RBX: 00007f99f73b5fa0 RCX: 00007f99f718e969 [ 879.652962][T16706] RDX: 00000000001c1041 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 879.652978][T16706] RBP: 00007f99f7210ab1 R08: 0000000000000000 R09: 0000000000000000 [ 879.652994][T16706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 879.653010][T16706] R13: 0000000000000000 R14: 00007f99f73b5fa0 R15: 00007ffed9a06a98 [ 879.653040][T16706] [ 885.008918][T16773] bridge0: port 3(team0) entered blocking state [ 885.015484][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805ffc3400: rx timeout, send abort [ 885.182133][T16773] bridge0: port 3(team0) entered disabled state [ 885.223746][T16773] team0: entered allmulticast mode [ 885.258161][T16773] team_slave_0: entered allmulticast mode [ 885.301536][T16773] team_slave_1: entered allmulticast mode [ 885.350122][T16773] team0: entered promiscuous mode [ 885.373376][T16773] team_slave_0: entered promiscuous mode [ 885.415853][T16773] team_slave_1: entered promiscuous mode [ 885.515806][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805ffc3400: abort rx timeout. Force session deactivation [ 888.444363][T16793] FAULT_INJECTION: forcing a failure. [ 888.444363][T16793] name failslab, interval 1, probability 0, space 0, times 0 [ 888.444473][T16793] CPU: 1 UID: 0 PID: 16793 Comm: syz.2.4061 Tainted: G U 6.15.0-rc4-syzkaller-00051-g7a13c14ee59d #0 PREEMPT(full) [ 888.444511][T16793] Tainted: [U]=USER [ 888.444519][T16793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 888.444533][T16793] Call Trace: [ 888.444542][T16793] [ 888.444551][T16793] dump_stack_lvl+0x16c/0x1f0 [ 888.444586][T16793] should_fail_ex+0x512/0x640 [ 888.444624][T16793] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 888.444655][T16793] should_failslab+0xc2/0x120 [ 888.444685][T16793] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 888.444711][T16793] ? __pmd_alloc+0xc3/0x870 [ 888.444750][T16793] __pmd_alloc+0xc3/0x870 [ 888.444786][T16793] __handle_mm_fault+0x948/0x2a40 [ 888.444817][T16793] ? __pfx___handle_mm_fault+0x10/0x10 [ 888.444865][T16793] handle_mm_fault+0x3fe/0xad0 [ 888.444893][T16793] __get_user_pages+0x771/0x36f0 [ 888.444936][T16793] ? __pfx_mt_find+0x10/0x10 [ 888.444971][T16793] ? __pfx___get_user_pages+0x10/0x10 [ 888.445017][T16793] populate_vma_page_range+0x278/0x3a0 [ 888.445041][T16793] ? __pfx_populate_vma_page_range+0x10/0x10 [ 888.445079][T16793] ? __pfx_find_vma_intersection+0x10/0x10 [ 888.445124][T16793] ? do_mmap+0x69c/0x11b0 [ 888.445162][T16793] __mm_populate+0x1d8/0x380 [ 888.445186][T16793] ? __pfx___mm_populate+0x10/0x10 [ 888.445211][T16793] ? up_write+0x1b2/0x520 [ 888.445250][T16793] vm_mmap_pgoff+0x362/0x450 [ 888.445288][T16793] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 888.445330][T16793] ? __x64_sys_futex+0x1e0/0x4c0 [ 888.445354][T16793] ? __x64_sys_futex+0x1e9/0x4c0 [ 888.445384][T16793] ksys_mmap_pgoff+0x7d/0x5c0 [ 888.445419][T16793] ? rcu_is_watching+0x12/0xc0 [ 888.445444][T16793] __x64_sys_mmap+0x125/0x190 [ 888.445471][T16793] do_syscall_64+0xcd/0x230 [ 888.445507][T16793] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 888.445532][T16793] RIP: 0033:0x7f99f718e969 [ 888.445551][T16793] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 888.445576][T16793] RSP: 002b:00007f99f8072038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 888.445598][T16793] RAX: ffffffffffffffda RBX: 00007f99f73b5fa0 RCX: 00007f99f718e969 [ 888.445615][T16793] RDX: 00800000000000df RSI: 0000000000400005 RDI: 0000000000000000 [ 888.445630][T16793] RBP: 00007f99f7210ab1 R08: 0000000000000002 R09: 0000000000008000 [ 888.445646][T16793] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 888.445661][T16793] R13: 0000000000000000 R14: 00007f99f73b5fa0 R15: 00007ffed9a06a98 [ 888.445692][T16793] [ 889.765535][ C1] sd 0:0:1:0: [sda] tag#1480 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 889.765609][ C1] sd 0:0:1:0: [sda] tag#1480 CDB: Write(6) 0a 00 00 00 0b 00 00 00 00 00 00 00 [ 889.932135][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802dc32c00: rx timeout, send abort [ 890.111971][T16814] netlink: 25 bytes leftover after parsing attributes in process `syz.2.4065'. [ 890.433732][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802dc32c00: abort rx timeout. Force session deactivation [ 890.640378][ T30] audit: type=1806 audit(4294968584.733:16): xattr="." res=0 [ 891.314132][T16812] FAULT_INJECTION: forcing a failure. [ 891.314132][T16812] name failslab, interval 1, probability 0, space 0, times 0 [ 891.381200][T16824] netlink: 330 bytes leftover after parsing attributes in process `syz.2.4071'. [ 891.594140][T16812] CPU: 1 UID: 0 PID: 16812 Comm: syz.0.4063 Tainted: G U 6.15.0-rc4-syzkaller-00051-g7a13c14ee59d #0 PREEMPT(full) [ 891.594183][T16812] Tainted: [U]=USER [ 891.594192][T16812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 891.594206][T16812] Call Trace: [ 891.594215][T16812] [ 891.594224][T16812] dump_stack_lvl+0x16c/0x1f0 [ 891.594261][T16812] should_fail_ex+0x512/0x640 [ 891.594295][T16812] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 891.594338][T16812] ? __pfx_tomoyo_gc_thread+0x10/0x10 [ 891.594366][T16812] should_failslab+0xc2/0x120 [ 891.594395][T16812] __kmalloc_cache_noprof+0x6a/0x3e0 [ 891.594434][T16812] ? lockdep_init_map_type+0x5c/0x280 [ 891.594466][T16812] ? __kthread_create_on_node+0xce/0x3f0 [ 891.594498][T16812] ? __init_swait_queue_head+0xca/0x150 [ 891.594538][T16812] ? __pfx_tomoyo_gc_thread+0x10/0x10 [ 891.594566][T16812] __kthread_create_on_node+0xce/0x3f0 [ 891.594599][T16812] ? __pfx___kthread_create_on_node+0x10/0x10 [ 891.594645][T16812] ? __pfx_tomoyo_gc_thread+0x10/0x10 [ 891.594675][T16812] kthread_create_on_node+0xc7/0x100 [ 891.594706][T16812] ? __pfx_kthread_create_on_node+0x10/0x10 [ 891.594736][T16812] ? kasan_quarantine_put+0x10a/0x240 [ 891.594764][T16812] ? find_held_lock+0x2b/0x80 [ 891.594787][T16812] ? tomoyo_notify_gc+0xc6/0x470 [ 891.594820][T16812] tomoyo_notify_gc+0xea/0x470 [ 891.594847][T16812] ? ima_iint_find+0xea/0x130 [ 891.594883][T16812] ? __pfx_tomoyo_release+0x10/0x10 [ 891.594916][T16812] tomoyo_release+0x31/0x40 [ 891.594955][T16812] __fput+0x3ff/0xb70 [ 891.594991][T16812] task_work_run+0x14d/0x240 [ 891.595030][T16812] ? __pfx_task_work_run+0x10/0x10 [ 891.595067][T16812] ? __pfx___do_sys_close_range+0x10/0x10 [ 891.595090][T16812] ? rcu_is_watching+0x12/0xc0 [ 891.595117][T16812] syscall_exit_to_user_mode+0x27b/0x2a0 [ 891.595152][T16812] do_syscall_64+0xda/0x230 [ 891.595192][T16812] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 891.595217][T16812] RIP: 0033:0x7feed738e969 [ 891.595236][T16812] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 891.595261][T16812] RSP: 002b:00007feed81b5038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 891.595283][T16812] RAX: 0000000000000000 RBX: 00007feed75b5fa0 RCX: 00007feed738e969 [ 891.595300][T16812] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 891.595314][T16812] RBP: 00007feed7410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 891.595329][T16812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 891.595344][T16812] R13: 0000000000000000 R14: 00007feed75b5fa0 R15: 00007fffbda747d8 [ 891.595374][T16812] [ 891.859651][ C1] vkms_vblank_simulate: vblank timer overrun [ 893.604633][T16837] sctp: [Deprecated]: syz.1.4083 (pid 16837) Use of int in maxseg socket option. [ 893.604633][T16837] Use struct sctp_assoc_value instead [ 894.480296][T16850] page: refcount:6 mapcount:5 mapping:0000000000000000 index:0xffff88807fe03c00 pfn:0x7fe00 [ 894.574753][T16850] flags: 0xfff18000000214(referenced|dirty|workingset|node=0|zone=1|lastcpupid=0x7ff) [ 894.663123][T16850] raw: 00fff18000000214 0000000000000000 dead000000000122 0000000000000000 [ 894.760808][T16850] raw: ffff88807fe03c00 0000000000000000 0000000600000004 0000000000000000 [ 894.875489][T16850] page dumped because: unmovable page [ 894.945242][T16850] page_owner tracks the page as allocated [ 894.988462][T16850] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), pid 13046, tgid 13046 (syz-executor), ts 584611256203, free_ts 579564034614 [ 895.175952][T16850] post_alloc_hook+0x181/0x1b0 [ 895.234150][T16850] get_page_from_freelist+0x135c/0x3920 [ 895.285842][T16850] __alloc_frozen_pages_noprof+0x263/0x23a0 [ 895.406399][T16850] alloc_pages_mpol+0x1fb/0x550 [ 895.454963][T16850] alloc_pages_noprof+0x131/0x390 [ 895.538516][T16850] __vmalloc_node_range_noprof+0x732/0x1540 [ 895.579840][T16850] vmalloc_user_noprof+0x6b/0x90 [ 895.617604][T16850] kcov_ioctl+0x4c/0x730 [ 895.648683][T16850] __x64_sys_ioctl+0x190/0x200 [ 895.668663][T16850] do_syscall_64+0xcd/0x230 [ 895.758406][T16850] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 895.825124][T16850] page last free pid 5202 tgid 5202 stack trace: [ 895.859683][T16850] __free_frozen_pages+0x69d/0xff0 [ 895.885887][T16850] __put_partials+0x16d/0x1c0 [ 895.902743][T16850] qlist_free_all+0x4e/0x120 [ 895.935183][T16850] kasan_quarantine_reduce+0x195/0x1e0 [ 895.961959][T16850] __kasan_slab_alloc+0x69/0x90 [ 895.985338][T16850] kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 896.011797][T16863] vivid-003: ================= START STATUS ================= [ 896.030850][T16850] getname_flags.part.0+0x4c/0x550 [ 896.036019][T16850] getname_flags+0x93/0xf0 [ 896.055189][T16863] vivid-003: Radio HW Seek Mode: Bounded [ 896.092600][T16850] vfs_fstatat+0xe1/0xf0 [ 896.099452][T16863] vivid-003: Radio Programmable HW Seek: false [ 896.106323][T16850] __do_sys_newfstatat+0xa1/0x130 [ 896.124765][T16863] vivid-003: RDS Rx I/O Mode: Block I/O [ 896.135247][T16850] do_syscall_64+0xcd/0x230 [ 896.151750][T16863] vivid-003: Generate RBDS Instead of RDS: false [ 896.159237][T16850] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 896.178644][T16863] vivid-003: RDS Reception: true [ 896.219374][T16863] vivid-003: RDS Program Type: 0 inactive [ 896.270123][T16863] vivid-003: RDS PS Name: inactive [ 896.292176][T16863] vivid-003: RDS Radio Text: inactive [ 896.347395][T16863] vivid-003: RDS Traffic Announcement: false inactive [ 896.407645][T16863] vivid-003: RDS Traffic Program: false inactive [ 896.441090][T16863] vivid-003: RDS Music: false inactive [ 896.471334][T16863] vivid-003: ================== END STATUS ================== [ 898.399233][T16896] netlink: 'syz.1.4092': attribute type 10 has an invalid length. [ 898.433306][T16896] netlink: 230 bytes leftover after parsing attributes in process `syz.1.4092'. [ 898.524918][T16896] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 900.127907][T16910] netlink: 50 bytes leftover after parsing attributes in process `syz.1.4095'. [ 900.600491][T16916] FAULT_INJECTION: forcing a failure. [ 900.600491][T16916] name failslab, interval 1, probability 0, space 0, times 0 [ 900.674490][T16916] CPU: 1 UID: 0 PID: 16916 Comm: syz.4.4097 Tainted: G U 6.15.0-rc4-syzkaller-00051-g7a13c14ee59d #0 PREEMPT(full) [ 900.674530][T16916] Tainted: [U]=USER [ 900.674539][T16916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 900.674553][T16916] Call Trace: [ 900.674562][T16916] [ 900.674571][T16916] dump_stack_lvl+0x16c/0x1f0 [ 900.674607][T16916] should_fail_ex+0x512/0x640 [ 900.674641][T16916] ? fs_reclaim_acquire+0xae/0x150 [ 900.674679][T16916] should_failslab+0xc2/0x120 [ 900.674708][T16916] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 900.674736][T16916] ? security_inode_alloc+0x3b/0x2b0 [ 900.674766][T16916] security_inode_alloc+0x3b/0x2b0 [ 900.674792][T16916] inode_init_always_gfp+0xce4/0x1030 [ 900.674835][T16916] alloc_inode+0x86/0x240 [ 900.674863][T16916] new_inode+0x22/0x1c0 [ 900.674894][T16916] __rpc_create_common+0x57/0x2f0 [ 900.674929][T16916] rpc_populate.constprop.0+0x153/0x5d0 [ 900.674968][T16916] rpc_fill_super+0x2bc/0x840 [ 900.674999][T16916] ? sget_fc+0x808/0xc20 [ 900.675036][T16916] ? __pfx_set_anon_super_fc+0x10/0x10 [ 900.675072][T16916] ? __pfx_rpc_fill_super+0x10/0x10 [ 900.675102][T16916] get_tree_keyed+0x10b/0x1d0 [ 900.675142][T16916] vfs_get_tree+0x8b/0x340 [ 900.675175][T16916] vfs_cmd_create+0xd7/0x2a0 [ 900.675202][T16916] __do_sys_fsconfig+0x7b8/0xbe0 [ 900.675231][T16916] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 900.675258][T16916] ? xfd_validate_state+0x5d/0x180 [ 900.675306][T16916] ? rcu_is_watching+0x12/0xc0 [ 900.675336][T16916] do_syscall_64+0xcd/0x230 [ 900.675372][T16916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 900.675396][T16916] RIP: 0033:0x7fb7c618e969 [ 900.675414][T16916] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 900.675437][T16916] RSP: 002b:00007fb7c705b038 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 900.675459][T16916] RAX: ffffffffffffffda RBX: 00007fb7c63b5fa0 RCX: 00007fb7c618e969 [ 900.675493][T16916] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000007 [ 900.675508][T16916] RBP: 00007fb7c6210ab1 R08: 0000000000000000 R09: 0000000000000000 [ 900.675523][T16916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 900.675541][T16916] R13: 0000000000000000 R14: 00007fb7c63b5fa0 R15: 00007ffcfbe75508 [ 900.675572][T16916] [ 900.912516][ C1] vkms_vblank_simulate: vblank timer overrun [ 900.922638][T16916] net/sunrpc/rpc_pipe.c: __rpc_create_common failed to allocate inode for dentry gssd [ 900.933904][T16916] net/sunrpc/rpc_pipe.c: rpc_populate failed to populate directory / [ 903.729628][ T30] audit: type=1800 audit(4294968597.817:17): pid=16954 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4107" name="SYSVffffffff" dev="tmpfs" ino=0 res=0 errno=0 [ 903.996749][T16952] Invalid ELF header magic: != ELF [ 905.446416][T16967] Process accounting resumed [ 907.335336][T16985] Process accounting paused [ 907.701224][T16999] snd_aloop snd_aloop.0: control 16781581:65539:6:'x?F/zF˷fC:7 is already present [ 908.100849][T17003] bridge0: port 4(team0) entered blocking state [ 908.128994][T17003] bridge0: port 4(team0) entered disabled state [ 908.144393][T16998] Invalid ELF header magic: != ELF [ 908.159181][T17003] team0: entered allmulticast mode [ 908.169871][T17003] team_slave_0: entered allmulticast mode [ 908.197528][T17003] team_slave_1: entered allmulticast mode [ 908.247688][T17003] team0: entered promiscuous mode [ 908.267550][T17003] team_slave_0: entered promiscuous mode [ 908.289194][T17003] team_slave_1: entered promiscuous mode [ 908.317964][T17003] bridge0: mtu less than device minimum [ 909.601397][T17021] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 909.867427][T17023] netlink: 330 bytes leftover after parsing attributes in process `syz.4.4128'. [ 909.951726][T17023] mac80211_hwsim hwsim11 : renamed from wlan0 (while UP) [ 913.247421][T17065] page: refcount:2 mapcount:1 mapping:0000000000000000 index:0x19b pfn:0x7808a [ 913.306644][T17065] memcg:ffff88805ea1e000 [ 913.397328][T17065] anon flags: 0xfff00000020808(uptodate|owner_2|swapbacked|node=0|zone=1|lastcpupid=0x7ff) [ 913.397458][T17065] raw: 00fff00000020808 ffffea00013bce48 ffffea000128b0c8 ffff888012d15ee1 [ 913.397483][T17065] raw: 000000000000019b 0000000000000000 0000000200000000 ffff88805ea1e000 [ 913.397505][T17065] page dumped because: unmovable page [ 913.397519][T17065] page_owner tracks the page as allocated [ 913.397553][T17065] page last allocated via order 0, migratetype Movable, gfp_mask 0x140dca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO|__GFP_COMP), pid 17062, tgid 17061 (syz.1.4141), ts 913033099012, free_ts 912389166450 [ 913.397596][T17065] post_alloc_hook+0x181/0x1b0 [ 913.397622][T17065] get_page_from_freelist+0x135c/0x3920 [ 913.397648][T17065] __alloc_frozen_pages_noprof+0x263/0x23a0 [ 913.397675][T17065] alloc_pages_mpol+0x1fb/0x550 [ 913.397704][T17065] folio_alloc_mpol_noprof+0x36/0x2f0 [ 913.397737][T17065] vma_alloc_folio_noprof+0xed/0x1e0 [ 913.397771][T17065] do_pte_missing+0x223d/0x3fb0 [ 913.397793][T17065] __handle_mm_fault+0x103d/0x2a40 [ 913.397816][T17065] handle_mm_fault+0x3fe/0xad0 [ 913.397838][T17065] __get_user_pages+0x771/0x36f0 [ 913.397875][T17065] populate_vma_page_range+0x278/0x3a0 [ 913.397897][T17065] __mm_populate+0x1d8/0x380 [ 913.397917][T17065] vm_mmap_pgoff+0x362/0x450 [ 913.397951][T17065] ksys_mmap_pgoff+0x7d/0x5c0 [ 913.397984][T17065] __x64_sys_mmap+0x125/0x190 [ 913.398006][T17065] do_syscall_64+0xcd/0x230 [ 913.398039][T17065] page last free pid 17048 tgid 17047 stack trace: [ 913.398054][T17065] free_unref_folios+0x999/0x1630 [ 913.398105][T17065] folios_put_refs+0x56f/0x740 [ 913.398137][T17065] free_pages_and_swap_cache+0x245/0x4a0 [ 913.398177][T17065] __tlb_batch_free_encoded_pages+0xf9/0x290 [ 913.398202][T17065] tlb_finish_mmu+0x168/0x7b0 [ 913.398224][T17065] vms_clear_ptes+0x55e/0x770 [ 913.398247][T17065] __mmap_region+0x4be/0x27c0 [ 913.398273][T17065] mmap_region+0x1ab/0x3f0 [ 913.398299][T17065] do_mmap+0xd8e/0x11b0 [ 913.398333][T17065] vm_mmap_pgoff+0x281/0x450 [ 913.398365][T17065] ksys_mmap_pgoff+0x7d/0x5c0 [ 913.398399][T17065] __x64_sys_mmap+0x125/0x190 [ 913.398420][T17065] do_syscall_64+0xcd/0x230 [ 913.398452][T17065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 915.099220][T17065] tty tty12: ldisc open failed (-12), clearing slot 11 [ 916.663619][T17106] FAULT_INJECTION: forcing a failure. [ 916.663619][T17106] name failslab, interval 1, probability 0, space 0, times 0 [ 916.663674][T17106] CPU: 1 UID: 0 PID: 17106 Comm: syz.4.4153 Tainted: G U 6.15.0-rc4-syzkaller-00051-g7a13c14ee59d #0 PREEMPT(full) [ 916.663711][T17106] Tainted: [U]=USER [ 916.663719][T17106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 916.663733][T17106] Call Trace: [ 916.663741][T17106] [ 916.663751][T17106] dump_stack_lvl+0x16c/0x1f0 [ 916.663786][T17106] should_fail_ex+0x512/0x640 [ 916.663820][T17106] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 916.663863][T17106] should_failslab+0xc2/0x120 [ 916.663897][T17106] __kmalloc_cache_noprof+0x6a/0x3e0 [ 916.663938][T17106] ? vc_allocate+0x16c/0x880 [ 916.663970][T17106] vc_allocate+0x16c/0x880 [ 916.663997][T17106] ? __pfx_vc_allocate+0x10/0x10 [ 916.664033][T17106] con_install+0xa1/0x600 [ 916.664062][T17106] ? __pfx_con_install+0x10/0x10 [ 916.664094][T17106] ? __pfx_con_install+0x10/0x10 [ 916.664122][T17106] tty_init_dev.part.0+0x99/0x500 [ 916.664156][T17106] tty_open+0xa50/0xf90 [ 916.664191][T17106] ? __pfx_tty_open+0x10/0x10 [ 916.664221][T17106] ? chrdev_open+0x58c/0x6a0 [ 916.664250][T17106] ? __pfx_tty_open+0x10/0x10 [ 916.664298][T17106] chrdev_open+0x231/0x6a0 [ 916.664325][T17106] ? __pfx_chrdev_open+0x10/0x10 [ 916.664353][T17106] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 916.664396][T17106] do_dentry_open+0x741/0x1c10 [ 916.664421][T17106] ? __pfx_chrdev_open+0x10/0x10 [ 916.664452][T17106] vfs_open+0x82/0x3f0 [ 916.664487][T17106] path_openat+0x1e5e/0x2d40 [ 916.664521][T17106] ? __pfx_path_openat+0x10/0x10 [ 916.664552][T17106] do_filp_open+0x20b/0x470 [ 916.664575][T17106] ? __pfx_do_filp_open+0x10/0x10 [ 916.664621][T17106] ? alloc_fd+0x471/0x7d0 [ 916.664666][T17106] do_sys_openat2+0x11b/0x1d0 [ 916.664698][T17106] ? __pfx_do_sys_openat2+0x10/0x10 [ 916.664742][T17106] __x64_sys_openat+0x174/0x210 [ 916.664776][T17106] ? __pfx___x64_sys_openat+0x10/0x10 [ 916.664810][T17106] ? rcu_is_watching+0x12/0xc0 [ 916.664842][T17106] do_syscall_64+0xcd/0x230 [ 916.664877][T17106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 916.664902][T17106] RIP: 0033:0x7fb7c618e969 [ 916.664921][T17106] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 916.664944][T17106] RSP: 002b:00007fb7c705b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 916.664967][T17106] RAX: ffffffffffffffda RBX: 00007fb7c63b5fa0 RCX: 00007fb7c618e969 [ 916.664983][T17106] RDX: 0000000000040002 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 916.664998][T17106] RBP: 00007fb7c6210ab1 R08: 0000000000000000 R09: 0000000000000000 [ 916.665014][T17106] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000 [ 916.665028][T17106] R13: 0000000000000000 R14: 00007fb7c63b5fa0 R15: 00007ffcfbe75508 [ 916.665059][T17106] [ 917.347959][T17116] netlink: 334 bytes leftover after parsing attributes in process `syz.2.4156'. [ 920.244660][ C1] vcan0: j1939_tp_rxtimer: 0xffff888066ea3c00: rx timeout, send abort [ 920.748333][ C1] vcan0: j1939_tp_rxtimer: 0xffff888066ea3c00: abort rx timeout. Force session deactivation [ 922.020136][T17150] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4166'. [ 922.520386][T17155] warning: `syz.2.4167' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 923.243445][T17167] sp0: Synchronizing with TNC [ 924.979743][T17168] FAULT_INJECTION: forcing a failure. [ 924.979743][T17168] name failslab, interval 1, probability 0, space 0, times 0 [ 925.121652][T17168] CPU: 1 UID: 0 PID: 17168 Comm: syz.1.4173 Tainted: G U 6.15.0-rc4-syzkaller-00051-g7a13c14ee59d #0 PREEMPT(full) [ 925.121695][T17168] Tainted: [U]=USER [ 925.121703][T17168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 925.121718][T17168] Call Trace: [ 925.121726][T17168] [ 925.121745][T17168] dump_stack_lvl+0x16c/0x1f0 [ 925.121784][T17168] should_fail_ex+0x512/0x640 [ 925.121817][T17168] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 925.121859][T17168] should_failslab+0xc2/0x120 [ 925.121887][T17168] __kmalloc_cache_noprof+0x6a/0x3e0 [ 925.121926][T17168] ? cgroup_file_open+0x93/0x360 [ 925.121964][T17168] cgroup_file_open+0x93/0x360 [ 925.121996][T17168] ? __pfx_cgroup_file_open+0x10/0x10 [ 925.122032][T17168] kernfs_fop_open+0x8c6/0xda0 [ 925.122063][T17168] ? file_set_fsnotify_mode_from_watchers+0x91/0x640 [ 925.122104][T17168] do_dentry_open+0x741/0x1c10 [ 925.122128][T17168] ? __pfx_kernfs_fop_open+0x10/0x10 [ 925.122163][T17168] vfs_open+0x82/0x3f0 [ 925.122217][T17168] path_openat+0x1e5e/0x2d40 [ 925.122250][T17168] ? __pfx_path_openat+0x10/0x10 [ 925.122274][T17168] ? __lock_acquire+0xaa4/0x1ba0 [ 925.122308][T17168] do_filp_open+0x20b/0x470 [ 925.122330][T17168] ? __pfx_do_filp_open+0x10/0x10 [ 925.122373][T17168] ? _raw_spin_unlock+0x28/0x50 [ 925.122399][T17168] ? alloc_fd+0x471/0x7d0 [ 925.122442][T17168] do_sys_openat2+0x11b/0x1d0 [ 925.122472][T17168] ? __pfx_do_sys_openat2+0x10/0x10 [ 925.122514][T17168] __x64_sys_open+0x153/0x1e0 [ 925.122546][T17168] ? __pfx___x64_sys_open+0x10/0x10 [ 925.122583][T17168] ? rcu_is_watching+0x12/0xc0 [ 925.122607][T17168] do_syscall_64+0xcd/0x230 [ 925.122641][T17168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 925.122664][T17168] RIP: 0033:0x7fd196b8e969 [ 925.122683][T17168] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 925.122706][T17168] RSP: 002b:00007fd19798c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 925.122729][T17168] RAX: ffffffffffffffda RBX: 00007fd196db5fa0 RCX: 00007fd196b8e969 [ 925.122750][T17168] RDX: 0000000000000007 RSI: 0000000000101800 RDI: 0000200000000000 [ 925.122765][T17168] RBP: 00007fd196c10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 925.122780][T17168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 925.122794][T17168] R13: 0000000000000000 R14: 00007fd196db5fa0 R15: 00007fff3f2238f8 [ 925.122823][T17168] [ 926.671885][ T5842] Bluetooth: hci3: unexpected subevent 0x01 length: 4 < 18 [ 926.773977][T17193] netlink: 342 bytes leftover after parsing attributes in process `syz.0.4176'. [ 926.922636][T17188] ima: policy update failed [ 926.943966][ T30] audit: type=1802 audit(4294968629.026:18): pid=17188 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.4176" res=0 errno=0 [ 929.822097][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056528400: rx timeout, send abort [ 929.866463][T17222] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4186'. [ 930.330372][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056528400: abort rx timeout. Force session deactivation [ 930.596553][T17232] netlink: 342 bytes leftover after parsing attributes in process `syz.2.4189'. [ 930.696192][T17230] ima: policy update failed [ 930.774440][ T30] audit: type=1802 audit(4294968632.836:19): pid=17230 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.4189" res=0 errno=0 [ 930.997198][T17234] netlink: 330 bytes leftover after parsing attributes in process `syz.0.4190'. [ 931.415368][ T5842] Bluetooth: hci2: unexpected subevent 0x01 length: 4 < 18 [ 933.320568][T17242] ptrace attach of "./syz-executor exec"[5829] was attempted by "./syz-executor exec"[17242] [ 934.083477][T17275] FAULT_INJECTION: forcing a failure. [ 934.083477][T17275] name failslab, interval 1, probability 0, space 0, times 0 [ 934.117784][T17275] CPU: 1 UID: 0 PID: 17275 Comm: syz.2.4203 Tainted: G U 6.15.0-rc4-syzkaller-00051-g7a13c14ee59d #0 PREEMPT(full) [ 934.117836][T17275] Tainted: [U]=USER [ 934.117845][T17275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 934.117860][T17275] Call Trace: [ 934.117868][T17275] [ 934.117879][T17275] dump_stack_lvl+0x16c/0x1f0 [ 934.117920][T17275] should_fail_ex+0x512/0x640 [ 934.117954][T17275] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 934.117985][T17275] should_failslab+0xc2/0x120 [ 934.118016][T17275] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 934.118044][T17275] ? __kernfs_new_node+0xd2/0x8a0 [ 934.118088][T17275] __kernfs_new_node+0xd2/0x8a0 [ 934.118130][T17275] ? __pfx___kernfs_new_node+0x10/0x10 [ 934.118178][T17275] ? find_held_lock+0x2b/0x80 [ 934.118207][T17275] ? kernfs_root+0xee/0x2a0 [ 934.118235][T17275] kernfs_new_node+0x13c/0x1e0 [ 934.118266][T17275] __kernfs_create_file+0x53/0x350 [ 934.118303][T17275] sysfs_add_file_mode_ns+0x207/0x3c0 [ 934.118349][T17275] internal_create_group+0x578/0xf30 [ 934.118380][T17275] ? __pfx_internal_create_group+0x10/0x10 [ 934.118409][T17275] ? kernfs_create_link+0x1bd/0x240 [ 934.118446][T17275] internal_create_groups+0x9d/0x150 [ 934.118472][T17275] device_add+0xf30/0x1a70 [ 934.118508][T17275] ? __pfx_device_add+0x10/0x10 [ 934.118540][T17275] ? lockdep_init_map_type+0x5c/0x280 [ 934.118573][T17275] ? __init_waitqueue_head+0xca/0x150 [ 934.118618][T17275] netdev_register_kobject+0x182/0x3a0 [ 934.118653][T17275] register_netdevice+0x13dc/0x2270 [ 934.118688][T17275] ? __pfx_register_netdevice+0x10/0x10 [ 934.118727][T17275] register_netdev+0x34/0x50 [ 934.118754][T17275] sixpack_open+0x6e4/0xa40 [ 934.118795][T17275] ? __pfx_sixpack_open+0x10/0x10 [ 934.118833][T17275] ? tty_set_ldisc+0x2b8/0x780 [ 934.118856][T17275] ? down_write+0x14d/0x200 [ 934.118893][T17275] ? __pfx_sixpack_open+0x10/0x10 [ 934.118933][T17275] tty_ldisc_open+0x9c/0x120 [ 934.118957][T17275] tty_set_ldisc+0x32b/0x780 [ 934.118985][T17275] tty_ioctl+0xc42/0x1610 [ 934.119014][T17275] ? __pfx_tty_ioctl+0x10/0x10 [ 934.119051][T17275] ? do_raw_spin_unlock+0x172/0x230 [ 934.119087][T17275] ? hook_file_ioctl_common+0x145/0x410 [ 934.119122][T17275] ? xfd_validate_state+0x5d/0x180 [ 934.119164][T17275] ? __pfx_tty_ioctl+0x10/0x10 [ 934.119193][T17275] __x64_sys_ioctl+0x190/0x200 [ 934.119236][T17275] do_syscall_64+0xcd/0x230 [ 934.119272][T17275] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 934.119297][T17275] RIP: 0033:0x7f99f718e969 [ 934.119316][T17275] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 934.119340][T17275] RSP: 002b:00007f99f8072038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 934.119363][T17275] RAX: ffffffffffffffda RBX: 00007f99f73b5fa0 RCX: 00007f99f718e969 [ 934.119379][T17275] RDX: 0000000000000000 RSI: 0000000000005423 RDI: 0000000000000007 [ 934.119395][T17275] RBP: 00007f99f7210ab1 R08: 0000000000000000 R09: 0000000000000000 [ 934.119409][T17275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 934.119424][T17275] R13: 0000000000000000 R14: 00007f99f73b5fa0 R15: 00007ffed9a06a98 [ 934.119456][T17275] [ 934.437026][ C1] vkms_vblank_simulate: vblank timer overrun [ 934.833051][ T5842] Bluetooth: hci1: unexpected subevent 0x01 length: 4 < 18 [ 937.057690][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 937.075173][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 937.512114][T17303] Process accounting resumed [ 938.626054][T17289] Process accounting paused [ 939.272882][T17343] random: crng reseeded on system resumption [ 941.583549][T17373] zswap: compressor not available [ 946.067522][T17415] ptrace attach of "./syz-executor exec"[5829] was attempted by "./syz-executor exec"[17415] [ 947.960614][T17434] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input22 [ 948.163484][T17436] FAULT_INJECTION: forcing a failure. [ 948.163484][T17436] name failslab, interval 1, probability 0, space 0, times 0 [ 948.295738][T17436] CPU: 1 UID: 0 PID: 17436 Comm: syz.0.4238 Tainted: G U 6.15.0-rc4-syzkaller-00051-g7a13c14ee59d #0 PREEMPT(full) [ 948.295781][T17436] Tainted: [U]=USER [ 948.295790][T17436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 948.295805][T17436] Call Trace: [ 948.295814][T17436] [ 948.295824][T17436] dump_stack_lvl+0x16c/0x1f0 [ 948.295861][T17436] should_fail_ex+0x512/0x640 [ 948.295895][T17436] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 948.295930][T17436] should_failslab+0xc2/0x120 [ 948.295960][T17436] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 948.295991][T17436] ? sysctl_core_net_init+0x42/0x280 [ 948.296033][T17436] kmemdup_noprof+0x29/0x60 [ 948.296064][T17436] sysctl_core_net_init+0x42/0x280 [ 948.296102][T17436] ? __pfx_sysctl_core_net_init+0x10/0x10 [ 948.296139][T17436] ops_init+0x1df/0x5f0 [ 948.296169][T17436] setup_net+0x21e/0x850 [ 948.296199][T17436] ? __pfx_setup_net+0x10/0x10 [ 948.296226][T17436] ? lockdep_init_map_type+0x5c/0x280 [ 948.296259][T17436] ? __pfx_down_read_killable+0x10/0x10 [ 948.296300][T17436] ? debug_mutex_init+0x37/0x70 [ 948.296350][T17436] copy_net_ns+0x2a6/0x5f0 [ 948.296384][T17436] create_new_namespaces+0x3ea/0xad0 [ 948.296419][T17436] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 948.296450][T17436] ksys_unshare+0x45b/0xa40 [ 948.296483][T17436] ? __pfx_ksys_unshare+0x10/0x10 [ 948.296515][T17436] ? xfd_validate_state+0x5d/0x180 [ 948.296556][T17436] ? rcu_is_watching+0x12/0xc0 [ 948.296584][T17436] __x64_sys_unshare+0x31/0x40 [ 948.296616][T17436] do_syscall_64+0xcd/0x230 [ 948.296651][T17436] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 948.296676][T17436] RIP: 0033:0x7feed738e969 [ 948.296694][T17436] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 948.296719][T17436] RSP: 002b:00007feed81b5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 948.296741][T17436] RAX: ffffffffffffffda RBX: 00007feed75b5fa0 RCX: 00007feed738e969 [ 948.296762][T17436] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 948.296778][T17436] RBP: 00007feed7410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 948.296793][T17436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 948.296808][T17436] R13: 0000000000000000 R14: 00007feed75b5fa0 R15: 00007fffbda747d8 [ 948.296838][T17436] [ 954.759993][T17486] netlink: 18 bytes leftover after parsing attributes in process `syz.2.4254'. [ 954.837954][T17465] kexec: Could not allocate control_code_buffer [ 956.214069][T17500] FAULT_INJECTION: forcing a failure. [ 956.214069][T17500] name failslab, interval 1, probability 0, space 0, times 0 [ 956.277564][T17500] CPU: 1 UID: 0 PID: 17500 Comm: syz.4.4260 Tainted: G U 6.15.0-rc4-syzkaller-00051-g7a13c14ee59d #0 PREEMPT(full) [ 956.277606][T17500] Tainted: [U]=USER [ 956.277614][T17500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 956.277628][T17500] Call Trace: [ 956.277637][T17500] [ 956.277645][T17500] dump_stack_lvl+0x16c/0x1f0 [ 956.277681][T17500] should_fail_ex+0x512/0x640 [ 956.277718][T17500] should_failslab+0xc2/0x120 [ 956.277747][T17500] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 956.277773][T17500] ? skb_clone+0x190/0x3f0 [ 956.277802][T17500] skb_clone+0x190/0x3f0 [ 956.277828][T17500] netlink_deliver_tap+0xabd/0xd30 [ 956.277875][T17500] netlink_dump+0x638/0xd00 [ 956.277904][T17500] ? __pfx_netlink_dump+0x10/0x10 [ 956.277965][T17500] ? __asan_memset+0x23/0x50 [ 956.278004][T17500] ? genl_start+0x67f/0x980 [ 956.278039][T17500] __netlink_dump_start+0x6d6/0x990 [ 956.278071][T17500] genl_family_rcv_msg_dumpit+0x1e2/0x2e0 [ 956.278108][T17500] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 956.278142][T17500] ? genl_rcv_msg+0x577/0x800 [ 956.278179][T17500] ? __pfx_genl_get_cmd+0x10/0x10 [ 956.278208][T17500] ? __pfx_genl_start+0x10/0x10 [ 956.278237][T17500] ? __pfx_genl_dumpit+0x10/0x10 [ 956.278267][T17500] ? __pfx_genl_done+0x10/0x10 [ 956.278302][T17500] ? __local_bh_enable_ip+0xa4/0x120 [ 956.278329][T17500] ? __dev_queue_xmit+0x896/0x43e0 [ 956.278364][T17500] ? __radix_tree_lookup+0x21f/0x2c0 [ 956.278399][T17500] genl_rcv_msg+0x46e/0x800 [ 956.278435][T17500] ? __pfx_genl_rcv_msg+0x10/0x10 [ 956.278467][T17500] ? __pfx___dev_queue_xmit+0x10/0x10 [ 956.278505][T17500] ? __pfx_smc_nl_dump_seid+0x10/0x10 [ 956.278545][T17500] ? __lock_acquire+0xaa4/0x1ba0 [ 956.278582][T17500] netlink_rcv_skb+0x16a/0x440 [ 956.278614][T17500] ? __pfx_genl_rcv_msg+0x10/0x10 [ 956.278648][T17500] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 956.278692][T17500] ? __pfx_down_read+0x10/0x10 [ 956.278729][T17500] ? netlink_deliver_tap+0x1ae/0xd30 [ 956.278760][T17500] genl_rcv+0x28/0x40 [ 956.278789][T17500] netlink_unicast+0x53a/0x7f0 [ 956.278821][T17500] ? __pfx_netlink_unicast+0x10/0x10 [ 956.278854][T17500] ? __lock_acquire+0xaa4/0x1ba0 [ 956.278892][T17500] netlink_sendmsg+0x8d1/0xdd0 [ 956.278927][T17500] ? __pfx_netlink_sendmsg+0x10/0x10 [ 956.278967][T17500] ____sys_sendmsg+0xa95/0xc70 [ 956.279003][T17500] ? copy_msghdr_from_user+0x10a/0x160 [ 956.279049][T17500] ? __pfx_____sys_sendmsg+0x10/0x10 [ 956.279087][T17500] ? try_to_wake_up+0xa2f/0x1680 [ 956.279113][T17500] ___sys_sendmsg+0x134/0x1d0 [ 956.279140][T17500] ? __pfx____sys_sendmsg+0x10/0x10 [ 956.279200][T17500] __sys_sendmsg+0x16d/0x220 [ 956.279225][T17500] ? __pfx___sys_sendmsg+0x10/0x10 [ 956.279249][T17500] ? __x64_sys_futex+0x1e0/0x4c0 [ 956.279282][T17500] ? rcu_is_watching+0x12/0xc0 [ 956.279311][T17500] do_syscall_64+0xcd/0x230 [ 956.279345][T17500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 956.279369][T17500] RIP: 0033:0x7fb7c618e969 [ 956.279388][T17500] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 956.279412][T17500] RSP: 002b:00007fb7c705b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 956.279434][T17500] RAX: ffffffffffffffda RBX: 00007fb7c63b5fa0 RCX: 00007fb7c618e969 [ 956.279450][T17500] RDX: 0000000000000810 RSI: 0000200000000140 RDI: 0000000000000005 [ 956.279465][T17500] RBP: 00007fb7c6210ab1 R08: 0000000000000000 R09: 0000000000000000 [ 956.279479][T17500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 956.279494][T17500] R13: 0000000000000000 R14: 00007fb7c63b5fa0 R15: 00007ffcfbe75508 [ 956.279523][T17500] [ 956.641316][ C1] vkms_vblank_simulate: vblank timer overrun [ 958.376479][T17514] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4261'. [ 958.457832][T17516] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4264'. [ 958.569990][T17514] hsr_slave_0: left promiscuous mode [ 958.600000][T17514] hsr_slave_1: left promiscuous mode [ 958.823255][T17516] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 959.031678][T17516] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 959.329713][T17523] netlink: 'syz.1.4266': attribute type 29 has an invalid length. [ 959.413271][T17523] netlink: 'syz.1.4266': attribute type 30 has an invalid length. [ 959.598377][T17523] netlink: 'syz.1.4266': attribute type 31 has an invalid length. [ 959.675751][T17523] netlink: 'syz.1.4266': attribute type 32 has an invalid length. [ 959.779680][T17523] netlink: 'syz.1.4266': attribute type 33 has an invalid length. [ 959.859865][T17523] netlink: 'syz.1.4266': attribute type 35 has an invalid length. [ 959.969172][T17523] netlink: 'syz.1.4266': attribute type 37 has an invalid length. [ 960.074910][T17523] netlink: 18 bytes leftover after parsing attributes in process `syz.1.4266'. [ 960.740243][T17535] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4271'. [ 961.856954][T17550] netlink: 342 bytes leftover after parsing attributes in process `syz.4.4277'. [ 964.583143][T17577] block2mtd: too many arguments [ 965.089805][T17585] netlink: 266 bytes leftover after parsing attributes in process `syz.1.4287'. [ 965.967709][T17592] FAULT_INJECTION: forcing a failure. [ 965.967709][T17592] name failslab, interval 1, probability 0, space 0, times 0 [ 966.030394][T17592] CPU: 1 UID: 0 PID: 17592 Comm: syz.4.4291 Tainted: G U 6.15.0-rc4-syzkaller-00051-g7a13c14ee59d #0 PREEMPT(full) [ 966.030434][T17592] Tainted: [U]=USER [ 966.030462][T17592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 966.030477][T17592] Call Trace: [ 966.030486][T17592] [ 966.030495][T17592] dump_stack_lvl+0x16c/0x1f0 [ 966.030531][T17592] should_fail_ex+0x512/0x640 [ 966.030565][T17592] ? fs_reclaim_acquire+0xae/0x150 [ 966.030604][T17592] should_failslab+0xc2/0x120 [ 966.030634][T17592] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 966.030662][T17592] ? security_inode_alloc+0x3b/0x2b0 [ 966.030693][T17592] security_inode_alloc+0x3b/0x2b0 [ 966.030720][T17592] inode_init_always_gfp+0xce4/0x1030 [ 966.030763][T17592] alloc_inode+0x86/0x240 [ 966.030792][T17592] path_from_stashed+0x2be/0xb00 [ 966.030815][T17592] ? do_raw_spin_lock+0x12c/0x2b0 [ 966.030854][T17592] ? __pfx_path_from_stashed+0x10/0x10 [ 966.030879][T17592] ? do_raw_spin_unlock+0x172/0x230 [ 966.030921][T17592] ns_get_path+0x5f/0x80 [ 966.030962][T17592] proc_ns_get_link+0x121/0x260 [ 966.031001][T17592] ? __pfx_proc_ns_get_link+0x10/0x10 [ 966.031040][T17592] ? __pfx___might_resched+0x10/0x10 [ 966.031072][T17592] ? __pfx_proc_ns_get_link+0x10/0x10 [ 966.031110][T17592] step_into+0x1b22/0x2270 [ 966.031152][T17592] ? __pfx_step_into+0x10/0x10 [ 966.031186][T17592] ? find_held_lock+0x2b/0x80 [ 966.031218][T17592] path_openat+0x749/0x2d40 [ 966.031257][T17592] ? __pfx_path_openat+0x10/0x10 [ 966.031288][T17592] do_filp_open+0x20b/0x470 [ 966.031311][T17592] ? __pfx_do_filp_open+0x10/0x10 [ 966.031355][T17592] ? alloc_fd+0x471/0x7d0 [ 966.031403][T17592] do_sys_openat2+0x11b/0x1d0 [ 966.031435][T17592] ? __pfx_do_sys_openat2+0x10/0x10 [ 966.031479][T17592] __x64_sys_openat+0x174/0x210 [ 966.031512][T17592] ? __pfx___x64_sys_openat+0x10/0x10 [ 966.031547][T17592] ? rcu_is_watching+0x12/0xc0 [ 966.031577][T17592] do_syscall_64+0xcd/0x230 [ 966.031612][T17592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 966.031636][T17592] RIP: 0033:0x7fb7c618d2d0 [ 966.031655][T17592] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 966.031680][T17592] RSP: 002b:00007fb7c705af10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 966.031703][T17592] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fb7c618d2d0 [ 966.031719][T17592] RDX: 0000000000000002 RSI: 00007fb7c705afa0 RDI: 00000000ffffff9c [ 966.031735][T17592] RBP: 00007fb7c705afa0 R08: 0000000000000000 R09: 0000000000000000 [ 966.031750][T17592] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 966.031765][T17592] R13: 0000000000000000 R14: 00007fb7c63b5fa0 R15: 00007ffcfbe75508 [ 966.031795][T17592] [ 966.304930][ C1] vkms_vblank_simulate: vblank timer overrun [ 968.610752][T17594] Process accounting paused [ 968.997981][T17568] Process accounting resumed [ 970.827780][T17635] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 971.487191][T17642] netlink: 330 bytes leftover after parsing attributes in process `syz.4.4312'. [ 971.803899][T17642] : renamed from lo (while UP) [ 972.991183][T17654] FAULT_INJECTION: forcing a failure. [ 972.991183][T17654] name fail_futex, interval 1, probability 0, space 0, times 0 [ 973.170738][T17654] CPU: 1 UID: 0 PID: 17654 Comm: syz.4.4307 Tainted: G U 6.15.0-rc4-syzkaller-00051-g7a13c14ee59d #0 PREEMPT(full) [ 973.170780][T17654] Tainted: [U]=USER [ 973.170788][T17654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 973.170809][T17654] Call Trace: [ 973.170817][T17654] [ 973.170826][T17654] dump_stack_lvl+0x16c/0x1f0 [ 973.170865][T17654] should_fail_ex+0x512/0x640 [ 973.170904][T17654] get_futex_key+0x49e/0x1000 [ 973.170932][T17654] ? __pfx_get_futex_key+0x10/0x10 [ 973.170970][T17654] futex_wake+0xe7/0x4e0 [ 973.171004][T17654] ? __pfx_futex_wake+0x10/0x10 [ 973.171037][T17654] ? rcu_is_watching+0x12/0xc0 [ 973.171060][T17654] ? lockdep_init_map_type+0x5c/0x280 [ 973.171094][T17654] ? lockdep_init_map_type+0x5c/0x280 [ 973.171130][T17654] do_futex+0x1e3/0x350 [ 973.171156][T17654] ? __pfx_do_futex+0x10/0x10 [ 973.171190][T17654] __x64_sys_futex+0x1e0/0x4c0 [ 973.171219][T17654] ? __pfx___x64_sys_futex+0x10/0x10 [ 973.171257][T17654] do_syscall_64+0xcd/0x230 [ 973.171292][T17654] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 973.171317][T17654] RIP: 0033:0x7fb7c618e969 [ 973.171336][T17654] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 973.171360][T17654] RSP: 002b:00007fb7c705b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 973.171382][T17654] RAX: ffffffffffffffda RBX: 00007fb7c63b5fa8 RCX: 00007fb7c618e969 [ 973.171399][T17654] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fb7c63b5fac [ 973.171414][T17654] RBP: 00007fb7c63b5fa0 R08: 00007fb7c705c000 R09: 0000000000000000 [ 973.171430][T17654] R10: 0000000000000006 R11: 0000000000000246 R12: 00007fb7c63b5fac [ 973.171445][T17654] R13: 0000000000000000 R14: 00007ffcfbe75420 R15: 00007ffcfbe75508 [ 973.171475][T17654] [ 973.918951][T17649] kexec: Could not allocate control_code_buffer [ 977.715368][T17705] netlink: 'syz.2.4323': attribute type 29 has an invalid length. [ 977.806755][T17705] netlink: 'syz.2.4323': attribute type 29 has an invalid length. [ 983.408810][T17758] sctp: [Deprecated]: syz.4.4340 (pid 17758) Use of int in maxseg socket option. [ 983.408810][T17758] Use struct sctp_assoc_value instead [ 983.988722][T17764] netlink: 'syz.2.4342': attribute type 10 has an invalid length. [ 984.007078][T17759] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input23 [ 984.077393][T17764] netlink: 230 bytes leftover after parsing attributes in process `syz.2.4342'. [ 984.306617][T17768] netlink: 186 bytes leftover after parsing attributes in process `syz.4.4343'. [ 986.768587][T17784] FAULT_INJECTION: forcing a failure. [ 986.768587][T17784] name failslab, interval 1, probability 0, space 0, times 0 [ 986.939132][T17784] CPU: 1 UID: 0 PID: 17784 Comm: syz.2.4348 Tainted: G U 6.15.0-rc4-syzkaller-00051-g7a13c14ee59d #0 PREEMPT(full) [ 986.939176][T17784] Tainted: [U]=USER [ 986.939185][T17784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 986.939200][T17784] Call Trace: [ 986.939208][T17784] [ 986.939217][T17784] dump_stack_lvl+0x16c/0x1f0 [ 986.939254][T17784] should_fail_ex+0x512/0x640 [ 986.939289][T17784] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 986.939332][T17784] should_failslab+0xc2/0x120 [ 986.939362][T17784] __kmalloc_cache_noprof+0x6a/0x3e0 [ 986.939402][T17784] ? netdev_create_hash+0x3c/0xc0 [ 986.939434][T17784] ? kasan_save_track+0x14/0x30 [ 986.939459][T17784] ? __pfx_netdev_init+0x10/0x10 [ 986.939491][T17784] netdev_create_hash+0x3c/0xc0 [ 986.939523][T17784] ? __pfx_netdev_init+0x10/0x10 [ 986.939553][T17784] netdev_init+0xa5/0x230 [ 986.939583][T17784] ops_init+0x1df/0x5f0 [ 986.939614][T17784] setup_net+0x21e/0x850 [ 986.939645][T17784] ? __pfx_setup_net+0x10/0x10 [ 986.939671][T17784] ? lockdep_init_map_type+0x5c/0x280 [ 986.939704][T17784] ? __pfx_down_read_killable+0x10/0x10 [ 986.939745][T17784] ? debug_mutex_init+0x37/0x70 [ 986.939788][T17784] copy_net_ns+0x2a6/0x5f0 [ 986.939822][T17784] create_new_namespaces+0x3ea/0xad0 [ 986.939873][T17784] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 986.939904][T17784] ksys_unshare+0x45b/0xa40 [ 986.939945][T17784] ? __pfx_ksys_unshare+0x10/0x10 [ 986.939977][T17784] ? xfd_validate_state+0x5d/0x180 [ 986.940019][T17784] ? rcu_is_watching+0x12/0xc0 [ 986.940049][T17784] __x64_sys_unshare+0x31/0x40 [ 986.940081][T17784] do_syscall_64+0xcd/0x230 [ 986.940116][T17784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 986.940141][T17784] RIP: 0033:0x7f99f718e969 [ 986.940163][T17784] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 986.940188][T17784] RSP: 002b:00007f99f8072038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 986.940212][T17784] RAX: ffffffffffffffda RBX: 00007f99f73b5fa0 RCX: 00007f99f718e969 [ 986.940229][T17784] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 986.940244][T17784] RBP: 00007f99f7210ab1 R08: 0000000000000000 R09: 0000000000000000 [ 986.940258][T17784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 986.940273][T17784] R13: 0000000000000000 R14: 00007f99f73b5fa0 R15: 00007ffed9a06a98 [ 986.940304][T17784] [ 988.966993][T17796] netlink: 338 bytes leftover after parsing attributes in process `syz.4.4353'. [ 989.116593][T17799] netlink: 338 bytes leftover after parsing attributes in process `syz.4.4353'. [ 989.246447][T17796] netlink: 290 bytes leftover after parsing attributes in process `syz.4.4353'. [ 989.336944][T17796] veth0_macvtap: left promiscuous mode [ 989.928512][T17810] netlink: 226 bytes leftover after parsing attributes in process `syz.4.4358'. [ 990.059133][T17810] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4358'. [ 990.170776][T17810] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 991.465092][T17825] could not allocate digest TFM handle binfmt_misc [ 993.483589][T17857] netlink: 226 bytes leftover after parsing attributes in process `syz.2.4373'. [ 993.549201][T17857] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4373'. [ 993.595250][T17857] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 996.561754][T17889] FAULT_INJECTION: forcing a failure. [ 996.561754][T17889] name failslab, interval 1, probability 0, space 0, times 0 [ 996.729912][T17889] CPU: 1 UID: 0 PID: 17889 Comm: syz.1.4383 Tainted: G U 6.15.0-rc4-syzkaller-00051-g7a13c14ee59d #0 PREEMPT(full) [ 996.729953][T17889] Tainted: [U]=USER [ 996.729961][T17889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 996.729977][T17889] Call Trace: [ 996.729985][T17889] [ 996.729995][T17889] dump_stack_lvl+0x16c/0x1f0 [ 996.730033][T17889] should_fail_ex+0x512/0x640 [ 996.730065][T17889] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 996.730108][T17889] should_failslab+0xc2/0x120 [ 996.730137][T17889] __kmalloc_cache_noprof+0x6a/0x3e0 [ 996.730177][T17889] ? drm_atomic_helper_connector_duplicate_state+0x70/0xd0 [ 996.730214][T17889] drm_atomic_helper_connector_duplicate_state+0x70/0xd0 [ 996.730246][T17889] drm_atomic_get_connector_state+0x388/0x740 [ 996.730294][T17889] drm_atomic_add_affected_connectors+0x2e0/0x3f0 [ 996.730332][T17889] ? __pfx_drm_atomic_add_affected_connectors+0x10/0x10 [ 996.730365][T17889] ? ww_mutex_lock+0x37/0x160 [ 996.730400][T17889] ? modeset_lock+0x114/0x6e0 [ 996.730428][T17889] __drm_atomic_helper_set_config+0x5ef/0xea0 [ 996.730466][T17889] ? __pfx___drm_atomic_helper_set_config+0x10/0x10 [ 996.730506][T17889] ? drm_client_rotation+0x4d9/0x6a0 [ 996.730540][T17889] drm_client_modeset_commit_atomic+0x53d/0x7e0 [ 996.730581][T17889] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 996.730645][T17889] drm_client_modeset_commit_locked+0x14d/0x580 [ 996.730681][T17889] drm_client_modeset_commit+0x4f/0x80 [ 996.730713][T17889] __drm_fb_helper_restore_fbdev_mode_unlocked+0x19f/0x200 [ 996.730741][T17889] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 996.730779][T17889] drm_fbdev_client_restore+0x2c/0x40 [ 996.730815][T17889] drm_client_dev_restore+0x1f3/0x2a0 [ 996.730850][T17889] drm_release+0x2c4/0x360 [ 996.730879][T17889] ? __pfx_drm_release+0x10/0x10 [ 996.730905][T17889] __fput+0x3ff/0xb70 [ 996.730941][T17889] task_work_run+0x14d/0x240 [ 996.730986][T17889] ? __pfx_task_work_run+0x10/0x10 [ 996.731025][T17889] ? __pfx___do_sys_close_range+0x10/0x10 [ 996.731048][T17889] ? rcu_is_watching+0x12/0xc0 [ 996.731077][T17889] syscall_exit_to_user_mode+0x27b/0x2a0 [ 996.731112][T17889] do_syscall_64+0xda/0x230 [ 996.731148][T17889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 996.731173][T17889] RIP: 0033:0x7fd196b8e969 [ 996.731192][T17889] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 996.731217][T17889] RSP: 002b:00007fd19798c038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 996.731240][T17889] RAX: 0000000000000000 RBX: 00007fd196db5fa0 RCX: 00007fd196b8e969 [ 996.731256][T17889] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 996.731276][T17889] RBP: 00007fd196c10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 996.731291][T17889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 996.731305][T17889] R13: 0000000000000000 R14: 00007fd196db5fa0 R15: 00007fff3f2238f8 [ 996.731337][T17889] [ 997.696399][T17899] FAULT_INJECTION: forcing a failure. [ 997.696399][T17899] name failslab, interval 1, probability 0, space 0, times 0 [ 997.723851][T17899] CPU: 1 UID: 0 PID: 17899 Comm: syz.0.4386 Tainted: G U 6.15.0-rc4-syzkaller-00051-g7a13c14ee59d #0 PREEMPT(full) [ 997.723894][T17899] Tainted: [U]=USER [ 997.723902][T17899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 997.723918][T17899] Call Trace: [ 997.723926][T17899] [ 997.723936][T17899] dump_stack_lvl+0x16c/0x1f0 [ 997.723972][T17899] should_fail_ex+0x512/0x640 [ 997.724005][T17899] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 997.724048][T17899] should_failslab+0xc2/0x120 [ 997.724077][T17899] __kmalloc_cache_noprof+0x6a/0x3e0 [ 997.724115][T17899] ? snd_card_file_add+0x52/0x330 [ 997.724148][T17899] ? __pfx_snd_ctl_open+0x10/0x10 [ 997.724172][T17899] snd_card_file_add+0x52/0x330 [ 997.724208][T17899] ? __pfx_snd_ctl_open+0x10/0x10 [ 997.724233][T17899] ? __pfx_snd_ctl_open+0x10/0x10 [ 997.724256][T17899] snd_ctl_open+0x9d/0x5e0 [ 997.724281][T17899] ? __pfx_snd_ctl_open+0x10/0x10 [ 997.724305][T17899] snd_open+0x1fe/0x450 [ 997.724335][T17899] ? __pfx_snd_open+0x10/0x10 [ 997.724363][T17899] chrdev_open+0x231/0x6a0 [ 997.724388][T17899] ? __pfx_apparmor_file_open+0x10/0x10 [ 997.724419][T17899] ? __pfx_chrdev_open+0x10/0x10 [ 997.724447][T17899] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 997.724489][T17899] do_dentry_open+0x741/0x1c10 [ 997.724514][T17899] ? __pfx_chrdev_open+0x10/0x10 [ 997.724545][T17899] vfs_open+0x82/0x3f0 [ 997.724579][T17899] path_openat+0x1e5e/0x2d40 [ 997.724613][T17899] ? __pfx_path_openat+0x10/0x10 [ 997.724636][T17899] ? stack_trace_save+0x8e/0xc0 [ 997.724661][T17899] ? __pfx_stack_trace_save+0x10/0x10 [ 997.724688][T17899] do_filp_open+0x20b/0x470 [ 997.724712][T17899] ? __pfx_do_filp_open+0x10/0x10 [ 997.724733][T17899] ? kasan_save_stack+0x42/0x60 [ 997.724756][T17899] ? kasan_save_stack+0x33/0x60 [ 997.724812][T17899] file_open_name+0x2a3/0x450 [ 997.724846][T17899] ? __pfx_file_open_name+0x10/0x10 [ 997.724890][T17899] acct_on+0x77/0x870 [ 997.724921][T17899] __x64_sys_acct+0xaf/0x230 [ 997.724950][T17899] ? lockdep_hardirqs_on+0x7c/0x110 [ 997.724981][T17899] do_syscall_64+0xcd/0x230 [ 997.725016][T17899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 997.725041][T17899] RIP: 0033:0x7feed738e969 [ 997.725061][T17899] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 997.725085][T17899] RSP: 002b:00007feed81b5038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a3 [ 997.725107][T17899] RAX: ffffffffffffffda RBX: 00007feed75b5fa0 RCX: 00007feed738e969 [ 997.725124][T17899] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 997.725139][T17899] RBP: 00007feed7410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 997.725154][T17899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 997.725169][T17899] R13: 0000000000000000 R14: 00007feed75b5fa0 R15: 00007fffbda747d8 [ 997.725206][T17899] [ 998.528789][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 998.540654][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 999.065489][T17898] Process accounting resumed [ 999.348807][T17905] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4388'. [ 999.389263][T17905] netlink: 'syz.0.4388': attribute type 1 has an invalid length. [ 999.425594][T17905] netlink: 13 bytes leftover after parsing attributes in process `syz.0.4388'. [ 1000.012651][T17894] Process accounting paused [ 1000.437061][T17917] sp0: Synchronizing with TNC [ 1001.787214][ T30] audit: type=1800 audit(4294967361.801:20): pid=17934 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4396" name="SYSV00000400" dev="tmpfs" ino=0 res=0 errno=0 [ 1003.470921][T17954] could not allocate digest TFM handle [ 1007.514204][T18004] netlink: 306 bytes leftover after parsing attributes in process `syz.2.4413'. [ 1007.556508][T18006] netlink: 252 bytes leftover after parsing attributes in process `syz.0.4415'. [ 1007.615678][T18006] netlink: 252 bytes leftover after parsing attributes in process `syz.0.4415'. [ 1007.942016][T17997] ptrace attach of "./syz-executor exec"[5829] was attempted by "./syz-executor exec"[17997] [ 1011.719321][T18053] FAULT_INJECTION: forcing a failure. [ 1011.719321][T18053] name failslab, interval 1, probability 0, space 0, times 0 [ 1011.813960][T18053] CPU: 1 UID: 0 PID: 18053 Comm: syz.0.4430 Tainted: G U 6.15.0-rc4-syzkaller-00051-g7a13c14ee59d #0 PREEMPT(full) [ 1011.814004][T18053] Tainted: [U]=USER [ 1011.814013][T18053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1011.814028][T18053] Call Trace: [ 1011.814037][T18053] [ 1011.814046][T18053] dump_stack_lvl+0x16c/0x1f0 [ 1011.814083][T18053] should_fail_ex+0x512/0x640 [ 1011.814118][T18053] ? __kmalloc_noprof+0xbf/0x510 [ 1011.814146][T18053] ? lsm_blob_alloc+0x68/0x90 [ 1011.814181][T18053] should_failslab+0xc2/0x120 [ 1011.814211][T18053] __kmalloc_noprof+0xd2/0x510 [ 1011.814242][T18053] lsm_blob_alloc+0x68/0x90 [ 1011.814302][T18053] security_sk_alloc+0x30/0x270 [ 1011.814330][T18053] sk_prot_alloc+0xfb/0x2a0 [ 1011.814365][T18053] sk_alloc+0x36/0xc20 [ 1011.814396][T18053] kcm_create+0xfc/0x690 [ 1011.814427][T18053] __sock_create+0x335/0x8d0 [ 1011.814467][T18053] __sys_socket+0x14d/0x260 [ 1011.814502][T18053] ? __pfx___sys_socket+0x10/0x10 [ 1011.814538][T18053] ? rcu_is_watching+0x12/0xc0 [ 1011.814565][T18053] __x64_sys_socket+0x72/0xb0 [ 1011.814599][T18053] ? lockdep_hardirqs_on+0x7c/0x110 [ 1011.814630][T18053] do_syscall_64+0xcd/0x230 [ 1011.814668][T18053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1011.814693][T18053] RIP: 0033:0x7feed738e969 [ 1011.814713][T18053] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1011.814736][T18053] RSP: 002b:00007feed81b5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1011.814759][T18053] RAX: ffffffffffffffda RBX: 00007feed75b5fa0 RCX: 00007feed738e969 [ 1011.814775][T18053] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000029 [ 1011.814790][T18053] RBP: 00007feed7410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1011.814805][T18053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1011.814820][T18053] R13: 0000000000000000 R14: 00007feed75b5fa0 R15: 00007fffbda747d8 [ 1011.814849][T18053] [ 1012.626178][T18052] kmem.tcp.limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 1016.357668][T18097] FAULT_INJECTION: forcing a failure. [ 1016.357668][T18097] name failslab, interval 1, probability 0, space 0, times 0 [ 1016.463870][T18097] CPU: 1 UID: 0 PID: 18097 Comm: syz.1.4443 Tainted: G U 6.15.0-rc4-syzkaller-00051-g7a13c14ee59d #0 PREEMPT(full) [ 1016.463913][T18097] Tainted: [U]=USER [ 1016.463921][T18097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1016.463936][T18097] Call Trace: [ 1016.463944][T18097] [ 1016.463953][T18097] dump_stack_lvl+0x16c/0x1f0 [ 1016.463990][T18097] should_fail_ex+0x512/0x640 [ 1016.464024][T18097] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 1016.464076][T18097] should_failslab+0xc2/0x120 [ 1016.464106][T18097] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1016.464147][T18097] ? alloc_tty_struct+0x96/0x8c0 [ 1016.464183][T18097] alloc_tty_struct+0x96/0x8c0 [ 1016.464214][T18097] ? __pfx_alloc_tty_struct+0x10/0x10 [ 1016.464253][T18097] pty_common_install+0x1c7/0xb30 [ 1016.464280][T18097] ? __pfx_pty_install+0x10/0x10 [ 1016.464303][T18097] tty_init_dev.part.0+0x99/0x500 [ 1016.464335][T18097] tty_open+0xa50/0xf90 [ 1016.464370][T18097] ? __pfx_tty_open+0x10/0x10 [ 1016.464400][T18097] ? chrdev_open+0x10b/0x6a0 [ 1016.464429][T18097] ? __pfx_tty_open+0x10/0x10 [ 1016.464458][T18097] chrdev_open+0x231/0x6a0 [ 1016.464482][T18097] ? __pfx_apparmor_file_open+0x10/0x10 [ 1016.464512][T18097] ? __pfx_chrdev_open+0x10/0x10 [ 1016.464540][T18097] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 1016.464582][T18097] do_dentry_open+0x741/0x1c10 [ 1016.464607][T18097] ? __pfx_chrdev_open+0x10/0x10 [ 1016.464638][T18097] vfs_open+0x82/0x3f0 [ 1016.464673][T18097] path_openat+0x1e5e/0x2d40 [ 1016.464711][T18097] ? __pfx_path_openat+0x10/0x10 [ 1016.464742][T18097] do_filp_open+0x20b/0x470 [ 1016.464765][T18097] ? __pfx_do_filp_open+0x10/0x10 [ 1016.464810][T18097] ? alloc_fd+0x471/0x7d0 [ 1016.464855][T18097] do_sys_openat2+0x11b/0x1d0 [ 1016.464887][T18097] ? __pfx_do_sys_openat2+0x10/0x10 [ 1016.464931][T18097] __x64_sys_openat+0x174/0x210 [ 1016.464964][T18097] ? __pfx___x64_sys_openat+0x10/0x10 [ 1016.464999][T18097] ? rcu_is_watching+0x12/0xc0 [ 1016.465030][T18097] do_syscall_64+0xcd/0x230 [ 1016.465072][T18097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1016.465096][T18097] RIP: 0033:0x7fd196b8e969 [ 1016.465116][T18097] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1016.465141][T18097] RSP: 002b:00007fd19798c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1016.465163][T18097] RAX: ffffffffffffffda RBX: 00007fd196db5fa0 RCX: 00007fd196b8e969 [ 1016.465179][T18097] RDX: 0000000000028341 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1016.465195][T18097] RBP: 00007fd196c10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1016.465210][T18097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1016.465225][T18097] R13: 0000000000000000 R14: 00007fd196db5fa0 R15: 00007fff3f2238f8 [ 1016.465256][T18097] [ 1018.350866][T18117] sp0: Synchronizing with TNC [ 1019.457073][T18136] netlink: 504 bytes leftover after parsing attributes in process `syz.4.4455'. [ 1019.510215][T18136] netlink: 504 bytes leftover after parsing attributes in process `syz.4.4455'. [ 1020.133582][T18141] FAULT_INJECTION: forcing a failure. [ 1020.133582][T18141] name failslab, interval 1, probability 0, space 0, times 0 [ 1020.240316][T18141] CPU: 1 UID: 0 PID: 18141 Comm: syz.0.4457 Tainted: G U 6.15.0-rc4-syzkaller-00051-g7a13c14ee59d #0 PREEMPT(full) [ 1020.240358][T18141] Tainted: [U]=USER [ 1020.240367][T18141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1020.240382][T18141] Call Trace: [ 1020.240390][T18141] [ 1020.240401][T18141] dump_stack_lvl+0x16c/0x1f0 [ 1020.240438][T18141] should_fail_ex+0x512/0x640 [ 1020.240471][T18141] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1020.240501][T18141] should_failslab+0xc2/0x120 [ 1020.240529][T18141] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1020.240556][T18141] ? vm_area_dup+0x25/0x760 [ 1020.240587][T18141] vm_area_dup+0x25/0x760 [ 1020.240615][T18141] __split_vma+0x17f/0x1030 [ 1020.240643][T18141] ? __pfx___split_vma+0x10/0x10 [ 1020.240681][T18141] vma_modify+0x2b5/0x510 [ 1020.240707][T18141] vma_modify_flags+0x212/0x2d0 [ 1020.240733][T18141] ? __pfx_vma_modify_flags+0x10/0x10 [ 1020.240757][T18141] ? mtree_range_walk+0x718/0xc00 [ 1020.240797][T18141] ? mas_walk+0x6a6/0x910 [ 1020.240834][T18141] mlock_fixup+0x27c/0xe50 [ 1020.240866][T18141] apply_vma_lock_flags+0x261/0x390 [ 1020.240897][T18141] ? __pfx_apply_vma_lock_flags+0x10/0x10 [ 1020.240924][T18141] ? __pfx___might_resched+0x10/0x10 [ 1020.240959][T18141] ? __pfx_down_write_killable+0x10/0x10 [ 1020.241000][T18141] ? do_futex+0x122/0x350 [ 1020.241030][T18141] do_mlock+0x2ac/0x810 [ 1020.241054][T18141] ? __pfx___might_resched+0x10/0x10 [ 1020.241083][T18141] ? __pfx_do_mlock+0x10/0x10 [ 1020.241107][T18141] ? __x64_sys_futex+0x1e0/0x4c0 [ 1020.241131][T18141] ? __x64_sys_futex+0x1e9/0x4c0 [ 1020.241160][T18141] ? xfd_validate_state+0x5d/0x180 [ 1020.241201][T18141] ? rcu_is_watching+0x12/0xc0 [ 1020.241229][T18141] __x64_sys_mlock+0x59/0x80 [ 1020.241256][T18141] do_syscall_64+0xcd/0x230 [ 1020.241291][T18141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1020.241316][T18141] RIP: 0033:0x7feed738e969 [ 1020.241335][T18141] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1020.241359][T18141] RSP: 002b:00007feed81b5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 1020.241381][T18141] RAX: ffffffffffffffda RBX: 00007feed75b5fa0 RCX: 00007feed738e969 [ 1020.241398][T18141] RDX: 0000000000000000 RSI: 0000000000007fff RDI: 0000000000007c88 [ 1020.241412][T18141] RBP: 00007feed7410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1020.241427][T18141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1020.241442][T18141] R13: 0000000000000000 R14: 00007feed75b5fa0 R15: 00007fffbda747d8 [ 1020.241473][T18141] [ 1020.605958][T18149] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 1025.636749][T18227] netlink: 504 bytes leftover after parsing attributes in process `syz.2.4483'. [ 1025.733315][T18227] netlink: 504 bytes leftover after parsing attributes in process `syz.2.4483'. [ 1025.841058][T18223] FAULT_INJECTION: forcing a failure. [ 1025.841058][T18223] name failslab, interval 1, probability 0, space 0, times 0 [ 1025.931147][T18223] CPU: 1 UID: 0 PID: 18223 Comm: syz.4.4481 Tainted: G U 6.15.0-rc4-syzkaller-00051-g7a13c14ee59d #0 PREEMPT(full) [ 1025.931189][T18223] Tainted: [U]=USER [ 1025.931198][T18223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1025.931213][T18223] Call Trace: [ 1025.931221][T18223] [ 1025.931231][T18223] dump_stack_lvl+0x16c/0x1f0 [ 1025.931267][T18223] should_fail_ex+0x512/0x640 [ 1025.931301][T18223] ? __kmalloc_noprof+0xbf/0x510 [ 1025.931330][T18223] ? __register_sysctl_table+0xb3/0x1900 [ 1025.931357][T18223] should_failslab+0xc2/0x120 [ 1025.931386][T18223] __kmalloc_noprof+0xd2/0x510 [ 1025.931418][T18223] __register_sysctl_table+0xb3/0x1900 [ 1025.931461][T18223] ? __pfx___register_sysctl_table+0x10/0x10 [ 1025.931490][T18223] ? setup_ipc_sysctls+0x5e/0x300 [ 1025.931529][T18223] ? __asan_memcpy+0x3c/0x60 [ 1025.931553][T18223] setup_ipc_sysctls+0x1aa/0x300 [ 1025.931595][T18223] copy_ipcs+0x49b/0x610 [ 1025.931619][T18223] ? copy_utsname+0xab/0x470 [ 1025.931651][T18223] create_new_namespaces+0x20a/0xad0 [ 1025.931678][T18223] ? security_capable+0x7e/0x260 [ 1025.931721][T18223] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1025.931751][T18223] ksys_unshare+0x45b/0xa40 [ 1025.931784][T18223] ? __pfx_ksys_unshare+0x10/0x10 [ 1025.931816][T18223] ? xfd_validate_state+0x5d/0x180 [ 1025.931857][T18223] ? rcu_is_watching+0x12/0xc0 [ 1025.931885][T18223] __x64_sys_unshare+0x31/0x40 [ 1025.931917][T18223] do_syscall_64+0xcd/0x230 [ 1025.931953][T18223] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1025.931978][T18223] RIP: 0033:0x7fb7c618e969 [ 1025.931997][T18223] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1025.932021][T18223] RSP: 002b:00007fb7c705b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1025.932045][T18223] RAX: ffffffffffffffda RBX: 00007fb7c63b5fa0 RCX: 00007fb7c618e969 [ 1025.932062][T18223] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000400 [ 1025.932077][T18223] RBP: 00007fb7c6210ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1025.932092][T18223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1025.932107][T18223] R13: 0000000000000000 R14: 00007fb7c63b5fa0 R15: 00007ffcfbe75508 [ 1025.932137][T18223] [ 1026.724693][T18245] FAULT_INJECTION: forcing a failure. [ 1026.724693][T18245] name failslab, interval 1, probability 0, space 0, times 0 [ 1026.853889][T18245] CPU: 1 UID: 0 PID: 18245 Comm: syz.4.4488 Tainted: G U 6.15.0-rc4-syzkaller-00051-g7a13c14ee59d #0 PREEMPT(full) [ 1026.853931][T18245] Tainted: [U]=USER [ 1026.853940][T18245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1026.853955][T18245] Call Trace: [ 1026.853964][T18245] [ 1026.853973][T18245] dump_stack_lvl+0x16c/0x1f0 [ 1026.854011][T18245] should_fail_ex+0x512/0x640 [ 1026.854045][T18245] ? __kmalloc_noprof+0xbf/0x510 [ 1026.854074][T18245] ? __register_sysctl_table+0xb3/0x1900 [ 1026.854100][T18245] should_failslab+0xc2/0x120 [ 1026.854130][T18245] __kmalloc_noprof+0xd2/0x510 [ 1026.854163][T18245] __register_sysctl_table+0xb3/0x1900 [ 1026.854191][T18245] ? is_module_address+0x5f/0xf0 [ 1026.854227][T18245] ? __pfx___register_sysctl_table+0x10/0x10 [ 1026.854254][T18245] ? is_module_address+0x69/0xf0 [ 1026.854285][T18245] ? register_net_sysctl_sz+0x228/0x3e0 [ 1026.854322][T18245] ? __asan_memcpy+0x3c/0x60 [ 1026.854346][T18245] nf_log_net_init+0x109/0x450 [ 1026.854373][T18245] ? __pfx_nf_log_net_init+0x10/0x10 [ 1026.854397][T18245] ops_init+0x1df/0x5f0 [ 1026.854440][T18245] setup_net+0x21e/0x850 [ 1026.854472][T18245] ? __pfx_setup_net+0x10/0x10 [ 1026.854500][T18245] ? lockdep_init_map_type+0x5c/0x280 [ 1026.854533][T18245] ? __pfx_down_read_killable+0x10/0x10 [ 1026.854574][T18245] ? debug_mutex_init+0x37/0x70 [ 1026.854616][T18245] copy_net_ns+0x2a6/0x5f0 [ 1026.854650][T18245] create_new_namespaces+0x3ea/0xad0 [ 1026.854684][T18245] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1026.854714][T18245] ksys_unshare+0x45b/0xa40 [ 1026.854747][T18245] ? __pfx_ksys_unshare+0x10/0x10 [ 1026.854778][T18245] ? xfd_validate_state+0x5d/0x180 [ 1026.854818][T18245] ? rcu_is_watching+0x12/0xc0 [ 1026.854847][T18245] __x64_sys_unshare+0x31/0x40 [ 1026.854879][T18245] do_syscall_64+0xcd/0x230 [ 1026.854917][T18245] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1026.854942][T18245] RIP: 0033:0x7fb7c618e969 [ 1026.854961][T18245] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1026.854985][T18245] RSP: 002b:00007fb7c705b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1026.855007][T18245] RAX: ffffffffffffffda RBX: 00007fb7c63b5fa0 RCX: 00007fb7c618e969 [ 1026.855023][T18245] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1026.855039][T18245] RBP: 00007fb7c6210ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1026.855054][T18245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1026.855069][T18245] R13: 0000000000000000 R14: 00007fb7c63b5fa0 R15: 00007ffcfbe75508 [ 1026.855100][T18245] [ 1027.469956][T18248] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4489'. [ 1027.506828][T18248] netlink: 13 bytes leftover after parsing attributes in process `syz.0.4489'. [ 1029.135401][T18263] FAULT_INJECTION: forcing a failure. [ 1029.135401][T18263] name failslab, interval 1, probability 0, space 0, times 0 [ 1029.327410][T18263] CPU: 1 UID: 0 PID: 18263 Comm: syz.4.4494 Tainted: G U 6.15.0-rc4-syzkaller-00051-g7a13c14ee59d #0 PREEMPT(full) [ 1029.327453][T18263] Tainted: [U]=USER [ 1029.327461][T18263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1029.327476][T18263] Call Trace: [ 1029.327484][T18263] [ 1029.327494][T18263] dump_stack_lvl+0x16c/0x1f0 [ 1029.327530][T18263] should_fail_ex+0x512/0x640 [ 1029.327563][T18263] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1029.327593][T18263] should_failslab+0xc2/0x120 [ 1029.327623][T18263] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1029.327652][T18263] ? security_file_alloc+0x34/0x2b0 [ 1029.327688][T18263] security_file_alloc+0x34/0x2b0 [ 1029.327719][T18263] init_file+0x93/0x4c0 [ 1029.327748][T18263] alloc_empty_file+0x73/0x1e0 [ 1029.327779][T18263] alloc_file_pseudo+0x13a/0x230 [ 1029.327812][T18263] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1029.327841][T18263] ? bpf_lsm_socket_post_create+0x9/0x10 [ 1029.327885][T18263] sock_alloc_file+0x50/0x210 [ 1029.327915][T18263] __sys_socketpair+0x34e/0x5a0 [ 1029.327952][T18263] ? __pfx___sys_socketpair+0x10/0x10 [ 1029.327988][T18263] ? xfd_validate_state+0x5d/0x180 [ 1029.328030][T18263] ? rcu_is_watching+0x12/0xc0 [ 1029.328057][T18263] __x64_sys_socketpair+0x96/0x100 [ 1029.328092][T18263] ? lockdep_hardirqs_on+0x7c/0x110 [ 1029.328123][T18263] do_syscall_64+0xcd/0x230 [ 1029.328158][T18263] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1029.328183][T18263] RIP: 0033:0x7fb7c618e969 [ 1029.328201][T18263] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1029.328232][T18263] RSP: 002b:00007fb7c705b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 1029.328256][T18263] RAX: ffffffffffffffda RBX: 00007fb7c63b5fa0 RCX: 00007fb7c618e969 [ 1029.328273][T18263] RDX: 8000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 1029.328289][T18263] RBP: 00007fb7c6210ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1029.328304][T18263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1029.328319][T18263] R13: 0000000000000000 R14: 00007fb7c63b5fa0 R15: 00007ffcfbe75508 [ 1029.328348][T18263] [ 1029.555218][T18266] Process accounting paused [ 1030.747215][T18279] Process accounting resumed [ 1031.986621][T18302] FAULT_INJECTION: forcing a failure. [ 1031.986621][T18302] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1032.054937][T18302] CPU: 1 UID: 0 PID: 18302 Comm: syz.0.4513 Tainted: G U 6.15.0-rc4-syzkaller-00051-g7a13c14ee59d #0 PREEMPT(full) [ 1032.054979][T18302] Tainted: [U]=USER [ 1032.054988][T18302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1032.055003][T18302] Call Trace: [ 1032.055011][T18302] [ 1032.055020][T18302] dump_stack_lvl+0x16c/0x1f0 [ 1032.055066][T18302] should_fail_ex+0x512/0x640 [ 1032.055105][T18302] get_futex_key+0x49e/0x1000 [ 1032.055127][T18302] ? __kernel_text_address+0xd/0x40 [ 1032.055166][T18302] ? unwind_get_return_address+0x59/0xa0 [ 1032.055194][T18302] ? arch_stack_walk+0xa6/0x100 [ 1032.055221][T18302] ? __pfx_get_futex_key+0x10/0x10 [ 1032.055255][T18302] futex_wait_setup+0x78/0x290 [ 1032.055286][T18302] ? stack_depot_save_flags+0x28/0xa50 [ 1032.055327][T18302] __futex_wait+0x266/0x3c0 [ 1032.055360][T18302] ? __pfx___futex_wait+0x10/0x10 [ 1032.055398][T18302] ? __pfx_futex_wake_mark+0x10/0x10 [ 1032.055441][T18302] futex_wait+0xe8/0x380 [ 1032.055475][T18302] ? __pfx_futex_wait+0x10/0x10 [ 1032.055514][T18302] ? rcu_is_watching+0x12/0xc0 [ 1032.055536][T18302] ? kasan_quarantine_put+0x10a/0x240 [ 1032.055560][T18302] ? lockdep_hardirqs_on+0x7c/0x110 [ 1032.055594][T18302] do_futex+0x229/0x350 [ 1032.055620][T18302] ? __pfx_do_futex+0x10/0x10 [ 1032.055653][T18302] __x64_sys_futex+0x1e0/0x4c0 [ 1032.055683][T18302] ? __pfx___x64_sys_futex+0x10/0x10 [ 1032.055710][T18302] ? getname_flags.part.0+0x1c5/0x550 [ 1032.055741][T18302] ? rcu_is_watching+0x12/0xc0 [ 1032.055771][T18302] do_syscall_64+0xcd/0x230 [ 1032.055806][T18302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1032.055831][T18302] RIP: 0033:0x7feed738e969 [ 1032.055849][T18302] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1032.055874][T18302] RSP: 002b:00007feed81b50e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1032.055897][T18302] RAX: ffffffffffffffda RBX: 00007feed75b5fa8 RCX: 00007feed738e969 [ 1032.055914][T18302] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007feed75b5fa8 [ 1032.055930][T18302] RBP: 00007feed75b5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1032.055945][T18302] R10: 0000000000000000 R11: 0000000000000246 R12: 00007feed75b5fac [ 1032.055961][T18302] R13: 0000000000000000 R14: 00007fffbda746f0 R15: 00007fffbda747d8 [ 1032.055990][T18302] [ 1032.966341][T18312] FAULT_INJECTION: forcing a failure. [ 1032.966341][T18312] name failslab, interval 1, probability 0, space 0, times 0 [ 1033.035070][T18307] delete_channel: no stack [ 1033.059748][T18312] CPU: 1 UID: 0 PID: 18312 Comm: syz.2.4509 Tainted: G U 6.15.0-rc4-syzkaller-00051-g7a13c14ee59d #0 PREEMPT(full) [ 1033.059789][T18312] Tainted: [U]=USER [ 1033.059797][T18312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1033.059812][T18312] Call Trace: [ 1033.059820][T18312] [ 1033.059830][T18312] dump_stack_lvl+0x16c/0x1f0 [ 1033.059867][T18312] should_fail_ex+0x512/0x640 [ 1033.059902][T18312] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 1033.059944][T18312] should_failslab+0xc2/0x120 [ 1033.059983][T18312] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1033.060024][T18312] ? raw_ioctl_init+0x162/0x860 [ 1033.060052][T18312] raw_ioctl_init+0x162/0x860 [ 1033.060076][T18312] ? __pfx_raw_ioctl_init+0x10/0x10 [ 1033.060098][T18312] ? tomoyo_path_number_perm+0x18d/0x580 [ 1033.060161][T18312] raw_ioctl+0xa3c/0x2c30 [ 1033.060190][T18312] ? __pfx_raw_ioctl+0x10/0x10 [ 1033.060218][T18312] ? __pfx_raw_ioctl+0x10/0x10 [ 1033.060243][T18312] __x64_sys_ioctl+0x190/0x200 [ 1033.060279][T18312] do_syscall_64+0xcd/0x230 [ 1033.060314][T18312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1033.060338][T18312] RIP: 0033:0x7f99f718e969 [ 1033.060357][T18312] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1033.060382][T18312] RSP: 002b:00007f99f8072038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1033.060405][T18312] RAX: ffffffffffffffda RBX: 00007f99f73b5fa0 RCX: 00007f99f718e969 [ 1033.060421][T18312] RDX: 0000000000000000 RSI: 0000000041015500 RDI: 0000000000000008 [ 1033.060436][T18312] RBP: 00007f99f7210ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1033.060451][T18312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1033.060465][T18312] R13: 0000000000000000 R14: 00007f99f73b5fa0 R15: 00007ffed9a06a98 [ 1033.060495][T18312] [ 1034.000253][T18313] bridge0: port 4(netdevsim1) entered blocking state [ 1034.103007][T18313] bridge0: port 4(netdevsim1) entered disabled state [ 1034.153374][T18313] netdevsim netdevsim0 netdevsim1: entered allmulticast mode [ 1034.228973][T18313] netdevsim netdevsim0 netdevsim1: entered promiscuous mode [ 1034.298788][T18313] bridge0: port 4(netdevsim1) entered blocking state [ 1034.305673][T18313] bridge0: port 4(netdevsim1) entered forwarding state [ 1036.313172][T18353] netlink: 342 bytes leftover after parsing attributes in process `syz.4.4520'. [ 1036.407054][T18347] ima: policy update failed [ 1036.472811][ T30] audit: type=1802 audit(4294967396.471:21): pid=18347 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.4520" res=0 errno=0 [ 1036.640977][T18348] netlink: 338 bytes leftover after parsing attributes in process `syz.0.4518'. [ 1036.706648][T18348] netlink: 338 bytes leftover after parsing attributes in process `syz.0.4518'. [ 1036.751884][T18354] netlink: 'syz.0.4518': attribute type 2 has an invalid length. [ 1036.798311][T18354] netlink: 298 bytes leftover after parsing attributes in process `syz.0.4518'. [ 1037.009727][T18341] ip_vti0: entered allmulticast mode [ 1037.398377][ T36] ip_vti0 (unregistering): left allmulticast mode [ 1038.989612][T18391] ================================================================== [ 1038.997722][T18391] BUG: KASAN: slab-use-after-free in dvb_device_open+0x36a/0x3b0 [ 1039.005469][T18391] Read of size 8 at addr ffff8881426a6818 by task syz.4.4530/18391 [ 1039.013370][T18391] [ 1039.015705][T18391] CPU: 1 UID: 0 PID: 18391 Comm: syz.4.4530 Tainted: G U 6.15.0-rc4-syzkaller-00051-g7a13c14ee59d #0 PREEMPT(full) [ 1039.015743][T18391] Tainted: [U]=USER [ 1039.015752][T18391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1039.015768][T18391] Call Trace: [ 1039.015778][T18391] [ 1039.015788][T18391] dump_stack_lvl+0x116/0x1f0 [ 1039.015822][T18391] print_report+0xc3/0x670 [ 1039.015851][T18391] ? __virt_addr_valid+0x5e/0x590 [ 1039.015882][T18391] ? __phys_addr+0xc6/0x150 [ 1039.015913][T18391] ? dvb_device_open+0x36a/0x3b0 [ 1039.015945][T18391] kasan_report+0xe0/0x110 [ 1039.015974][T18391] ? dvb_device_open+0x36a/0x3b0 [ 1039.016009][T18391] ? __pfx_dvb_device_open+0x10/0x10 [ 1039.016041][T18391] dvb_device_open+0x36a/0x3b0 [ 1039.016074][T18391] ? __pfx_dvb_device_open+0x10/0x10 [ 1039.016107][T18391] chrdev_open+0x231/0x6a0 [ 1039.016131][T18391] ? __pfx_apparmor_file_open+0x10/0x10 [ 1039.016162][T18391] ? __pfx_chrdev_open+0x10/0x10 [ 1039.016188][T18391] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 1039.016228][T18391] do_dentry_open+0x741/0x1c10 [ 1039.016252][T18391] ? __pfx_chrdev_open+0x10/0x10 [ 1039.016280][T18391] vfs_open+0x82/0x3f0 [ 1039.016312][T18391] path_openat+0x1e5e/0x2d40 [ 1039.016339][T18391] ? __pfx_path_openat+0x10/0x10 [ 1039.016365][T18391] do_filp_open+0x20b/0x470 [ 1039.016386][T18391] ? __pfx_do_filp_open+0x10/0x10 [ 1039.016420][T18391] ? alloc_fd+0x471/0x7d0 [ 1039.016460][T18391] do_sys_openat2+0x11b/0x1d0 [ 1039.016491][T18391] ? __pfx_do_sys_openat2+0x10/0x10 [ 1039.016528][T18391] __x64_sys_openat+0x174/0x210 [ 1039.016561][T18391] ? __pfx___x64_sys_openat+0x10/0x10 [ 1039.016608][T18391] ? rcu_is_watching+0x12/0xc0 [ 1039.016639][T18391] do_syscall_64+0xcd/0x230 [ 1039.016673][T18391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1039.016698][T18391] RIP: 0033:0x7fb7c618e969 [ 1039.016718][T18391] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1039.016743][T18391] RSP: 002b:00007fb7c705b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1039.016766][T18391] RAX: ffffffffffffffda RBX: 00007fb7c63b5fa0 RCX: 00007fb7c618e969 [ 1039.016784][T18391] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1039.016800][T18391] RBP: 00007fb7c6210ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1039.016816][T18391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1039.016831][T18391] R13: 0000000000000000 R14: 00007fb7c63b5fa0 R15: 00007ffcfbe75508 [ 1039.016855][T18391] [ 1039.016863][T18391] [ 1039.271264][T18391] Allocated by task 18341: [ 1039.275698][T18391] kasan_save_stack+0x33/0x60 [ 1039.280391][T18391] kasan_save_track+0x14/0x30 [ 1039.285087][T18391] __kasan_kmalloc+0xaa/0xb0 [ 1039.289688][T18391] __kmalloc_noprof+0x223/0x510 [ 1039.294547][T18391] __register_sysctl_table+0xea2/0x1900 [ 1039.300111][T18391] neigh_sysctl_register+0x31f/0x670 [ 1039.305410][T18391] devinet_sysctl_register+0xb6/0x200 [ 1039.310854][T18391] inetdev_init+0x2b8/0x5a0 [ 1039.315367][T18391] inetdev_event+0xc5f/0x18a0 [ 1039.320058][T18391] notifier_call_chain+0xb9/0x410 [ 1039.325114][T18391] call_netdevice_notifiers_info+0xbe/0x140 [ 1039.331023][T18391] register_netdevice+0x182e/0x2270 [ 1039.336233][T18391] register_netdev+0x34/0x50 [ 1039.340844][T18391] vti6_init_net+0x28f/0x490 [ 1039.345446][T18391] ops_init+0x1df/0x5f0 [ 1039.349615][T18391] setup_net+0x21e/0x850 [ 1039.353880][T18391] copy_net_ns+0x2a6/0x5f0 [ 1039.358320][T18391] create_new_namespaces+0x3ea/0xad0 [ 1039.363614][T18391] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1039.369272][T18391] ksys_unshare+0x45b/0xa40 [ 1039.373810][T18391] __x64_sys_unshare+0x31/0x40 [ 1039.378610][T18391] do_syscall_64+0xcd/0x230 [ 1039.383161][T18391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1039.389064][T18391] [ 1039.391390][T18391] Freed by task 798: [ 1039.395283][T18391] kasan_save_stack+0x33/0x60 [ 1039.399975][T18391] kasan_save_track+0x14/0x30 [ 1039.404681][T18391] kasan_save_free_info+0x3b/0x60 [ 1039.409726][T18391] __kasan_slab_free+0x51/0x70 [ 1039.414497][T18391] kmem_cache_free_bulk.part.0+0x38d/0x7f0 [ 1039.420342][T18391] kvfree_rcu_bulk+0x1bb/0x1f0 [ 1039.425140][T18391] kfree_rcu_work+0x124/0x1a0 [ 1039.429836][T18391] process_one_work+0x9cc/0x1b70 [ 1039.434799][T18391] worker_thread+0x6c8/0xf10 [ 1039.439430][T18391] kthread+0x3c2/0x780 [ 1039.443524][T18391] ret_from_fork+0x45/0x80 [ 1039.447965][T18391] ret_from_fork_asm+0x1a/0x30 [ 1039.452773][T18391] [ 1039.455100][T18391] Last potentially related work creation: [ 1039.460847][T18391] kasan_save_stack+0x33/0x60 [ 1039.465621][T18391] kasan_record_aux_stack+0xb8/0xd0 [ 1039.470837][T18391] kvfree_call_rcu+0x76/0x470 [ 1039.475519][T18391] drop_sysctl_table+0x355/0x5f0 [ 1039.480469][T18391] unregister_sysctl_table+0x41/0x60 [ 1039.485875][T18391] neigh_sysctl_unregister+0x5f/0x80 [ 1039.491171][T18391] inetdev_event+0xefc/0x18a0 [ 1039.495881][T18391] notifier_call_chain+0xb9/0x410 [ 1039.500917][T18391] call_netdevice_notifiers_info+0xbe/0x140 [ 1039.506852][T18391] unregister_netdevice_many_notify+0xf9a/0x26f0 [ 1039.513198][T18391] cleanup_net+0x596/0xb30 [ 1039.517630][T18391] process_one_work+0x9cc/0x1b70 [ 1039.522591][T18391] worker_thread+0x6c8/0xf10 [ 1039.527203][T18391] kthread+0x3c2/0x780 [ 1039.531290][T18391] ret_from_fork+0x45/0x80 [ 1039.535728][T18391] ret_from_fork_asm+0x1a/0x30 [ 1039.540511][T18391] [ 1039.542838][T18391] The buggy address belongs to the object at ffff8881426a6800 [ 1039.542838][T18391] which belongs to the cache kmalloc-256 of size 256 [ 1039.556986][T18391] The buggy address is located 24 bytes inside of [ 1039.556986][T18391] freed 256-byte region [ffff8881426a6800, ffff8881426a6900) [ 1039.570705][T18391] [ 1039.573032][T18391] The buggy address belongs to the physical page: [ 1039.579537][T18391] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1426a6 [ 1039.588396][T18391] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1039.596904][T18391] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff) [ 1039.604541][T18391] page_type: f5(slab) [ 1039.608537][T18391] raw: 057ff00000000040 ffff88801b441b40 ffffea0001775200 0000000000000004 [ 1039.617137][T18391] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 1039.625827][T18391] head: 057ff00000000040 ffff88801b441b40 ffffea0001775200 0000000000000004 [ 1039.634530][T18391] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 1039.643241][T18391] head: 057ff00000000001 ffffea000509a981 00000000ffffffff 00000000ffffffff [ 1039.651939][T18391] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 1039.660828][T18391] page dumped because: kasan: bad access detected [ 1039.667258][T18391] page_owner tracks the page as allocated [ 1039.673047][T18391] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 25111348123, free_ts 0 [ 1039.692792][T18391] post_alloc_hook+0x181/0x1b0 [ 1039.697573][T18391] get_page_from_freelist+0x135c/0x3920 [ 1039.703128][T18391] __alloc_frozen_pages_noprof+0x263/0x23a0 [ 1039.709036][T18391] alloc_pages_mpol+0x1fb/0x550 [ 1039.713900][T18391] new_slab+0x244/0x340 [ 1039.718079][T18391] ___slab_alloc+0xd9c/0x1940 [ 1039.722811][T18391] __slab_alloc.constprop.0+0x56/0xb0 [ 1039.728214][T18391] __kmalloc_cache_noprof+0xfb/0x3e0 [ 1039.733522][T18391] bus_add_driver+0x92/0x690 [ 1039.738127][T18391] driver_register+0x15c/0x4b0 [ 1039.742900][T18391] usb_register_driver+0x216/0x4d0 [ 1039.748025][T18391] do_one_initcall+0x120/0x6e0 [ 1039.752808][T18391] kernel_init_freeable+0x5c2/0x900 [ 1039.758022][T18391] kernel_init+0x1c/0x2b0 [ 1039.762358][T18391] ret_from_fork+0x45/0x80 [ 1039.766803][T18391] ret_from_fork_asm+0x1a/0x30 [ 1039.771591][T18391] page_owner free stack trace missing [ 1039.776957][T18391] [ 1039.779279][T18391] Memory state around the buggy address: [ 1039.784913][T18391] ffff8881426a6700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1039.792979][T18391] ffff8881426a6780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1039.801048][T18391] >ffff8881426a6800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1039.809202][T18391] ^ [ 1039.814052][T18391] ffff8881426a6880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1039.822120][T18391] ffff8881426a6900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1039.830189][T18391] ================================================================== SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1041.258627][T18391] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1041.265874][T18391] CPU: 1 UID: 0 PID: 18391 Comm: syz.4.4530 Tainted: G U 6.15.0-rc4-syzkaller-00051-g7a13c14ee59d #0 PREEMPT(full) [ 1041.279629][T18391] Tainted: [U]=USER [ 1041.283431][T18391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1041.293586][T18391] Call Trace: [ 1041.296869][T18391] [ 1041.299804][T18391] dump_stack_lvl+0x3d/0x1f0 [ 1041.304414][T18391] panic+0x71c/0x800 [ 1041.308339][T18391] ? __pfx_panic+0x10/0x10 [ 1041.312776][T18391] ? mark_held_locks+0x49/0x80 [ 1041.317565][T18391] ? preempt_schedule_thunk+0x16/0x30 [ 1041.322978][T18391] ? dvb_device_open+0x36a/0x3b0 [ 1041.327935][T18391] ? preempt_schedule_common+0x44/0xc0 [ 1041.333423][T18391] ? dvb_device_open+0x36a/0x3b0 [ 1041.338405][T18391] check_panic_on_warn+0xab/0xb0 [ 1041.343365][T18391] end_report+0x107/0x170 [ 1041.347755][T18391] kasan_report+0xee/0x110 [ 1041.352192][T18391] ? dvb_device_open+0x36a/0x3b0 [ 1041.357168][T18391] ? __pfx_dvb_device_open+0x10/0x10 [ 1041.362561][T18391] dvb_device_open+0x36a/0x3b0 [ 1041.367349][T18391] ? __pfx_dvb_device_open+0x10/0x10 [ 1041.372674][T18391] chrdev_open+0x231/0x6a0 [ 1041.377103][T18391] ? __pfx_apparmor_file_open+0x10/0x10 [ 1041.382667][T18391] ? __pfx_chrdev_open+0x10/0x10 [ 1041.387648][T18391] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 1041.394435][T18391] do_dentry_open+0x741/0x1c10 [ 1041.399211][T18391] ? __pfx_chrdev_open+0x10/0x10 [ 1041.404186][T18391] vfs_open+0x82/0x3f0 [ 1041.408273][T18391] path_openat+0x1e5e/0x2d40 [ 1041.412877][T18391] ? __pfx_path_openat+0x10/0x10 [ 1041.417826][T18391] do_filp_open+0x20b/0x470 [ 1041.422443][T18391] ? __pfx_do_filp_open+0x10/0x10 [ 1041.427490][T18391] ? alloc_fd+0x471/0x7d0 [ 1041.431849][T18391] do_sys_openat2+0x11b/0x1d0 [ 1041.436563][T18391] ? __pfx_do_sys_openat2+0x10/0x10 [ 1041.441803][T18391] __x64_sys_openat+0x174/0x210 [ 1041.446685][T18391] ? __pfx___x64_sys_openat+0x10/0x10 [ 1041.452122][T18391] ? rcu_is_watching+0x12/0xc0 [ 1041.456900][T18391] do_syscall_64+0xcd/0x230 [ 1041.461423][T18391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1041.467335][T18391] RIP: 0033:0x7fb7c618e969 [ 1041.471760][T18391] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1041.491466][T18391] RSP: 002b:00007fb7c705b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1041.499896][T18391] RAX: ffffffffffffffda RBX: 00007fb7c63b5fa0 RCX: 00007fb7c618e969 [ 1041.507986][T18391] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1041.516050][T18391] RBP: 00007fb7c6210ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1041.524029][T18391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1041.532005][T18391] R13: 0000000000000000 R14: 00007fb7c63b5fa0 R15: 00007ffcfbe75508 [ 1041.539989][T18391] [ 1041.543073][T18391] Kernel Offset: disabled [ 1041.547401][T18391] Rebooting in 86400 seconds..