last executing test programs: 7.55288608s ago: executing program 1 (id=3836): r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) prctl$auto(0x23, 0x5, 0x2009, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x40001, 0x0) ioctl$auto_TCFLSH2(r2, 0x80045439, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) ioctl$auto(r2, 0x8926, r2) read$auto_proc_sessionid_operations_base(0xffffffffffffffff, &(0x7f00000000c0)=""/4096, 0x1000) madvise$auto(0xfffffffffffffffd, 0x2003f0, 0xffffff04) sendmsg$auto_HWSIM_CMD_TX_INFO_FRAME(0xffffffffffffffff, &(0x7f0000006940)={0x0, 0x0, &(0x7f0000006900)={&(0x7f0000006980)=ANY=[@ANYRES16, @ANYBLOB="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"], 0x124c}, 0x1, 0x0, 0x0, 0x20000041}, 0x800) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_open_procfs$namespace(0x0, 0x0) ioperm$auto(0x7, 0x5ad2, 0xc) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/can/rcvlist_sff\x00', 0x400, 0x0) pread64$auto(r3, 0x0, 0x101fb, 0x8800000005) (fail_nth: 1) 6.301584034s ago: executing program 1 (id=3839): socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb5, 0x401, 0x300000000000) prctl$auto(0x16, 0x2, 0x2, 0x4000000d, 0x100) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0030e5", @ANYRES16=r1], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x48080) mmap$auto(0x1, 0x3, 0x1, 0xe31, 0xffffffffffffffff, 0xe0) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0) socket(0x2, 0x5, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dmmidi2\x00', 0x101, 0x0) socket(0x10, 0x2, 0x0) close_range$auto(0x2, 0xa, 0x1f000000) mmap$auto(0x3, 0xa00006, 0x4, 0x40eb1, 0x602, 0x300000000000) ioprio_set$auto(0x2, 0x0, 0x208) 6.296311792s ago: executing program 0 (id=3840): r0 = socket(0x28, 0x5, 0x0) connect$auto(r0, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2710, @hyper=0x1000000}, 0x56) 6.178437731s ago: executing program 0 (id=3841): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x2b, 0x1, 0x1) openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, &(0x7f0000001240), 0x8000, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000001280)='/sys/kernel/debug/tracing/events/vmalloc/purge_vmap_area_lazy/filter\x00', 0x200000, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyt5\x00', 0x40000, 0x0) ioctl$auto(r1, 0x540a, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000180)={[0x1ff, 0xd5b, 0x8, 0x1, 0x948a, 0x2, 0x15f4da0a, 0x1, 0x3, 0x300000000000600, 0x40080000001, 0x7, 0x6d3c, 0x5, 0x9]}, 0x0) 5.880134139s ago: executing program 0 (id=3843): socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r0, 0x0, 0x48080) mmap$auto(0x1, 0x3, 0x1, 0xe31, 0xffffffffffffffff, 0xe0) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0) socket(0x1d, 0x5, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x119000, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dmmidi2\x00', 0x101, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) getsockopt$auto(0x3, 0x200000000001, 0x26, 0x0, 0x0) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x163340, 0x16e) socket(0x2, 0x80802, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x4, @multicast2}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) 5.185411891s ago: executing program 3 (id=3845): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/bus/pci/drivers/i915/unbind\x00', 0x752502, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0xffffffffffffffff, 0xa, 0x0) madvise$auto(0x0, 0x2, 0x4) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) pipe$auto(0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x1, 0x106) socket(0x2, 0x1, 0x0) listen$auto(0x3, 0x3) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c001900", @ANYRESOCT=r0, @ANYBLOB="1b0026bd7400fddbdf2503000000040008000c000380080019800400018012000100898771480000", @ANYRESHEX], 0x3c}, 0x1, 0x0, 0x0, 0x4004044}, 0x2000c880) 5.078925383s ago: executing program 1 (id=3847): bind$auto(0x3, 0x0, 0x6a) (async) mmap$auto(0x0, 0x4020009, 0xe2, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x4000000000eb1, 0x6, 0x8000) (async) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) (async) mmap$auto(0x8, 0x3a02, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) (async) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000180)={{0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffffffffff8, 0x100}, 0x800}, 0x19c9, 0x4008) (async) r0 = socket(0x1f, 0x3, 0x400001) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[], 0x1ac}}, 0x4c041) (async, rerun: 32) r1 = socket(0xf, 0x5, 0xf) (rerun: 32) setsockopt$auto(r1, 0x6, 0xc, 0x0, 0x7fffffff) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xebf, 0x401, 0x5) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/mountinfo\x00', 0x42100, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) (async) sendmsg$auto_NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10010}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4081}, 0xc000) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) (async) open(0x0, 0x2a4c0, 0x40) (async, rerun: 64) execve$auto(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) (rerun: 64) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) (async, rerun: 64) pidfd_open$auto(0xffffffffffffffff, 0x5) (rerun: 64) execve$auto(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)=&(0x7f0000000300)='#\xdc\xfe\xd8E\xc8\x8bu4\xd9n\xcb\xca\xc7zw \x96\x9ejh\xad\x9eEc\xae\x1e\x89\x92\x9a\xbbP[B\xae\x9cf)\x15\xac\x90)l\x06\xf0\t\x12\x05zz\xa6\xb3\xce=\x00\x00\x00\xf20/\xc4T\x1f\xe5P\xff\xb4\xb7s0\x02\xc5\x81\x93\xc6\xc8\xb6Sp\x1a{8\xfc\xe0,X\xc7BU\xd0\x97\x7f1\x16\x99\x04\xabu/a0\x02\x7f\xbb\xbd\x906\xa8\xce\xee\xcd\xd7\t\x00\xfb\x83\xc8\x8aO\xe9\xbe=\xf7\xf4\x84,\x06\xd3j\x99b\xe6\xf6Y3A\xbb\xa4\xb2\f\x1b\xc3\x8a,g\xc6\xe8[\xdf\x88\x01\x9f7\xb5\x19m\xd8\xc0\f-6\xfe\xa8\xed/u\x81_G\xfeR\xbb\x12|\x97\xabB4J\xed+-\xf8u0/n\xcf\x8b\x95\x9d\xab\xa8\xc47\xa6\x0e\xdeOq\\\xc3\'{\b\xd3m\x94\xc2\xdd{\xeaO\x0e\xe4\xe0\xb9N:\xd60\x17,\x06\xc7B#Y0\x99\xeb\x02\xfe\xd3k\xd5\xdcZ\xdcP\x8e+\xd8\xc7C\xcb\x15\x13c\xbf\xe8\xbd\"\x8f3\"\x14\xf8(\xda\x19\xcd\xec\x03.\xd9^\xc3A\xda\r[\x1a\xda\\#/\xd4\xaf\xd0\xe8\xa2\xdd\xc5{\xfa\xe0\x90\x8f\x99lQ\xec\x84h^\x11+\x93\b\xe0c\xe6\xd22\xf9\xa5\x94\xd0\xf5\xe7\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00') (async, rerun: 32) openat$auto_trace_clock_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/trace_clock\x00', 0x0, 0x0) (async, rerun: 32) set_mempolicy$auto(0x6, &(0x7f0000000080)=0x3, 0x21) (async, rerun: 32) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/mm/hugepages/hugepages-2048kB/nr_hugepages_mempolicy\x00', 0xa001, 0x0) (rerun: 32) write$auto(r4, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) (async, rerun: 64) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x2) (rerun: 64) mount$auto(0x0, &(0x7f0000000540)='}[,&*}\x00', &(0x7f0000000040)='nfsd\x00', 0x3, 0x0) (async) r5 = openat$auto_proc_mounts_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/mounts\x00', 0x2002, 0x0) pread64$auto(r5, 0x0, 0x3c02, 0x100007) 4.580262945s ago: executing program 1 (id=3848): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) capset$auto(0x0, &(0x7f0000000000)={0x3, 0x7, 0x8}) r0 = open(0x0, 0x14927f, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x40086602, 0x0) r1 = openat$auto_clear_warn_once_fops_(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x0) readv$auto(r1, &(0x7f0000000300)={0x0, 0x2}, 0x101) close_range$auto(0x2, 0x8, 0x0) r2 = prctl$auto_PR_SET_MM_ARG_START(0x1, 0x8, 0xffffffffffffffff, 0x6, 0xa) r3 = prctl$auto_SECCOMP_MODE_STRICT(0x1, 0x1, 0xffffffffffffffff, 0x7, 0x2) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000000)={0x7135, "8a44d760b65e93ef3c70b10aced61011d477dc5c088dd6a20c253d7e2d201804", @inferred=r3}) sendfile$auto(0xffffffffffffffff, 0x3, 0x0, 0x100000000000009) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/kallsyms\x00', 0x20100, 0x0) pread64$auto(r4, 0x0, 0x8, 0x8000) readv$auto(r4, 0x0, 0x200) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/system/memory/memory0/phys_device\x00', 0x80000, 0x0) read$auto(r5, 0x0, 0x20) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) clone$auto(0x81000005, 0x6, 0xfffffffffffffffd, 0xffffffffffffffff, 0x80000001) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x2c, 0x3, 0x0) r6 = epoll_create$auto(0x3e) epoll_ctl$auto(r6, 0x1, 0x8000000000000000, 0x0) 4.578893155s ago: executing program 3 (id=3849): prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) openat$auto_userio_fops_userio(0xffffffffffffff9c, &(0x7f0000000340), 0x2000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) io_uring_setup$auto(0x6, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) close_range$auto(0x2, 0x8, 0x0) socket(0x3, 0x3, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf2503000000080003178102"], 0x68}, 0x1, 0x0, 0x0, 0x4044080}, 0xc4494) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0) write$auto(r1, &(0x7f0000000200)='/de\xef\xe7audio1\x00', 0xa3d9) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/usb/usbmon/9t\x00', 0xa00, 0x0) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x400, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x630001, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000004400)='/dev/dsp1\x00', 0x1, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x10000000) socket(0x10, 0x2, 0xc) socket(0x28, 0x1, 0x0) connect$auto(0x3, &(0x7f0000000180)=@generic={0x28, "606f30396a0000f00000000200"}, 0x54) setsockopt$auto(0x400000000000003, 0x28, 0x0, 0x0, 0x56b) 4.183915337s ago: executing program 2 (id=3851): openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0\x00'}) close_range$auto(0x0, 0xffffffffffffffff, 0x2) socket(0xa, 0x2, 0x0) set_mempolicy$auto(0x2, &(0x7f0000000080)=0x7e, 0x4) mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000) set_mempolicy$auto(0x4, &(0x7f00000000c0)=0x9, 0x5) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x6, 0x8) r0 = socket(0x18, 0x5, 0x1) connect$auto(r0, &(0x7f0000000000)=@in={0x2, 0x100, @remote}, 0x3e) mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) write$auto(0x3, 0x0, 0xb4d3) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ila(&(0x7f0000000440), r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00'}) sendmsg$auto_ILA_CMD_ADD(r2, 0x0, 0x38) sendmsg$auto_ILA_CMD_ADD(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x14, r3, 0x1, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x48884}, 0x4) r5 = openat$auto_proc_uid_map_operations_base(0xffffffffffffff9c, &(0x7f0000002a40)='/proc/self/uid_map\x00', 0x28400, 0x0) read$auto_proc_uid_map_operations_base(r5, &(0x7f0000002a80)=""/38, 0x26) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/bdi/43:96/stable_pages_required\x00', 0x0, 0x0) readv$auto(r6, &(0x7f0000000080)={&(0x7f0000000500), 0x4}, 0x7) 3.619734252s ago: executing program 0 (id=3852): mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r0 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x100, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_CHANNEL_INFO2(r0, 0x80184132, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/security/tomoyo/manager\x00', 0x200, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D3\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r3 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snd/pcmC1D0p\x00', 0x0, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ram4\x00', 0xdd01, 0x0) read$auto_gpiolib_fops_(r2, &(0x7f0000000240)=""/66, 0x42) ioctl$auto_BLKRRPART(r4, 0x125f, 0x700000000000000) msync$auto(0x1ffff000, 0x1800000ff010000, 0x400000004) open(0x0, 0xeee00, 0x31) mmap$auto(0x1, 0x2020006, 0x3, 0xeb1, r3, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f0000000340)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cec23\x00', 0x4700, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0xffffffffffffc318, 0x948b, 0x3, 0x15f4da06, 0x3, 0x40000003, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) socket(0x1, 0x1, 0x6) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0xae41, 0x38) ioctl$auto(0x3, 0x4020aea5, 0x38) 3.618580313s ago: executing program 2 (id=3853): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ila(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$auto_ILA_CMD_ADD(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x14, r1, 0x1, 0x70bd26, 0x25dfdbfe, {0x1, 0x0, 0xf000}}, 0x14}, 0x1, 0x0, 0x0, 0x48884}, 0x4) 3.415777897s ago: executing program 3 (id=3854): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/ubifs/uevent\x00', 0x1, 0x0) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000001040)='/dev/usbmon7\x00', 0x20e140, 0x0) openat$auto_dfs_dom_ops_debugfs(0xffffffffffffff9c, &(0x7f0000001400), 0x8000, 0x0) syz_clone(0x80f400, 0x0, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000100)='.\x00', 0x591002, 0x408) r0 = socket(0x18, 0x2, 0x20) sendmmsg$auto(r0, &(0x7f0000000080)={{0x0, 0x7, &(0x7f00000002c0)={0x0, 0xc5}, 0x1, 0x0, 0x0, 0x9}, 0x107}, 0x3, 0x0) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) socket$nl_generic(0x11, 0x3, 0x10) mmap$auto(0x0, 0x9, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/net/ip_vs_conn\x00', 0xf00, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dri/card1\x00', 0x6082, 0x0) r1 = socket(0xa, 0x5, 0x0) r2 = openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000180), 0x80080, 0x0) ioctl$auto_LOOP_CTL_ADD(r2, 0x4c80, 0x0) setsockopt$auto(r1, 0x8, 0x5, 0x0, 0x566) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu1/online\x00', 0x62, 0x0) write$auto(r3, &(0x7f0000000440)='Y\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r4 = socket(0x2, 0x800, 0x0) setsockopt$auto(r4, 0x6, 0x1f, 0x0, 0x3d) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x100000c) socket$nl_generic(0x10, 0x3, 0x10) setreuid$auto(0x4, 0x0) keyctl$auto(0x2000000000000016, 0xff000000000000, 0xfffffffffffffffc, 0x1, 0xc) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x115043, 0x0) 3.224901668s ago: executing program 2 (id=3855): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mtdblock0\x00', 0x4ea06, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, r0, 0x8000) lsm_list_modules$auto(0x0, 0x0, 0x1f) 3.092277463s ago: executing program 1 (id=3856): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) select$auto(0x3, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x10001, 0x80003, 0x12, 0xffffffffffffffff, 0x8000) write$auto(0xca, &(0x7f0000000040)='\x04>2\x0f\x00\x00\x96\x18am\xea\xf4\x1b\xf8', 0x7e) shmget$auto(0x400, 0x10563, 0x568c12f2) sendmsg$auto_NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x24048800) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0xfffffffffffffffd, 0x400008, 0xe0, 0x410, 0xffffffffffffffff, 0x1) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2000040080000004, 0xe) r0 = openat$auto_usbfs_devices_fops_usb(0xffffffffffffff9c, &(0x7f0000000180), 0x48402, 0x0) read$auto(r0, 0x0, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2000000000000021, 0x2, 0x10000000000002) socket(0x2a, 0x2, 0x0) socket(0x2a, 0x2, 0x1) bind$auto(0x3, &(0x7f0000000080)=@qipcrtr={0x2a, 0x0, 0x8000}, 0x6b) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) shmdt$auto(0x0) socket(0x7, 0x3, 0x2) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x20) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) unshare$auto(0x8000000) syz_clone(0x2360411, 0x0, 0x0, 0x0, 0x0, 0x0) 2.958081695s ago: executing program 2 (id=3857): socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) r0 = socket(0x2, 0x1, 0x106) sendmsg$auto_OVS_VPORT_CMD_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4100}, 0x20000000) setsockopt$auto(r0, 0x6, 0x5, &(0x7f0000000080)='*\x00', 0xe6) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/1-0:1.0/usb1-port1/quirks\x00', 0x103a42, 0x0) writev$auto(r1, &(0x7f0000000080)={&(0x7f0000000240), 0x1}, 0x3) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0x20499d, 0x9) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44b, 0x7, 0x5, 0x1007181, 0xd1, 0x7, 0x7, 0x7ff, 0x9, 0x80000001, 0x4, 0x200000000001, 0x384, 0xfffffffffffffffb, 0x8, 0x0, 0x2, 0x0, 0x864, 0xe, 0x22000, 0x200, 0x0, 0x84, 0x9}, 0xa, 0xd) r2 = socket(0xa, 0x1, 0x84) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0x6, 0x2}, 0x8000, 0x0, 0x6) open(&(0x7f0000000040)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x0f\x18\xc5\x82-s\x83\xe6\xaeR\x81\r_\x0e\x19\x12\x85\bvf(e\xday)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbHL9aD\xb4\x80\xed\xba>\"\xb6\x7f\xa3f\x1d\a\xa1\x87\x84uA\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e\x00', 0x12ba7e, 0x81) acct$auto(&(0x7f0000000380)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x0f\x18\xc5\x82-s\x83\xe6\xaeR\x81\r_\x0e\x19\x12\x85\bvf(e\xday)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbHL9aD\xb4\x80\xed\xba>\"\xb6\x7f\xa3f\x1d\a\xa1\x87\x84uA\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e') acct$auto(0x0) getsockopt$auto(r2, 0x84, 0x81, 0x0, 0x0) pkey_free$auto(0xfffffffd) 2.624740335s ago: executing program 3 (id=3858): mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) get_robust_list$auto(0x0, 0x0, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) r0 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000003900), 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x801, 0x84) socket(0x10, 0x3, 0x4) r1 = socket(0x2b, 0x1, 0x0) listen$auto(r1, 0x7) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/tcp\x00', 0x181800, 0x0) pread64$auto(r2, &(0x7f0000000000)='/proc/thread-self/net/tcp6\x00\xd2)\x8e\x892\x82\x19\xfd\x03\xc3\x8d\xd7D\bz\xde5u4\xddS\xe6\x1a\x8a`\xad0\x98|\xbc\x00\x98\b\x0ey\xcb`\x9b\x91r\xd5\x13\x9e\xdd4\xe7\xb7\x94P\x8fBlm\x04eAW\xbc0\x9b\xbd\x8f\xf5];\x94\x18\xf0\v\xd7\xf4P\xd3\x9e,Q\xd8\x16\x989l\x03\a\xcc\x1e\xb9\xe9{\xeeS\xa9\xc60\x00\xb5&\x9e\xdbk{F\x18\xa8\xba*G\xd3\x80\xb1G.\xec1\x96uP\x97\x8co\xf1\xa6\xd5\xea\xc8L3|a\xb3\xaa\x90~Y\xb19\xad\xdc\x05o\x98g\xd4\x10]5\x95\xd0\xabJC\x06\xd0c\xd1Ra\xf7\xc4n\xdf\xe4\xc7\x03\x19x\xbb\v\x00\t\xde\xf5\x93\xfb\xfb#\xbd\xc0S\f57\x83\xdd\xaa\xf0\x9c\xd3G\xe1\x00'/232, 0x3ef, 0x9) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000003980)={&(0x7f00000000c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01032bbd7000fddbdf250a", @ANYRES64], 0x54}, 0x1, 0x0, 0x0, 0x2004c005}, 0xc4) mmap$auto(0x0, 0x400009, 0xfffffffffffffffa, 0x9b72, 0xffffffffffffffff, 0x0) r3 = signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) signalfd$auto(r3, 0x0, 0x8) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x6c, 0x697c}, 0xed71390}, 0x9a6, 0x0) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/smaps_rollup\x00', 0x2400, 0x0) 2.052958489s ago: executing program 0 (id=3859): bpf$auto(0x0, 0x0, 0x92) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000100), 0xffffffffffffffff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001500)='/sys/kernel/irq/5/actions\x00', 0x22040, 0x0) r0 = socket(0x10, 0x2, 0x0) openat$auto_proc_coredump_filter_operations_base(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dri/card1\x00', 0x0, 0x0) socket(0x28, 0x1, 0x0) r1 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000180), 0xa303, 0x0) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000001240)='/dev/snd/controlC0\x00', 0xc00200, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_CARD_INFO(r2, 0x81785501, &(0x7f0000001280)={0xc, 0x0, "ba0a579a91cf2e824b529146ea64e185", "51f62cbf3b8abb16bc9f010a65739e42", "52e7068aaa1ab0ad287925ebb1122ab7b20c60ff6faa9bc8ad638b15bfdc2c8c", "7fc15eb7d0452e55d8ae478eebe2d7dbd3989489cb905004c3d07070df50e6a7899d93bf6ba64281991b06e953ac70f43aa545cffb5bbef7416b5ceb49ad75d4154a244c204e4c9394421e6917119634", "07031fd31ea6db6f191f22faa88f3ddb", "2641359a47cc2c77672cedcba52c36ca35674cfc8f504dc8d9e34a4cdd36713a43e6f8e4586d1a1d6bcab9d596837317fa84afdf0483aa920a86b0b5949aa91c8cd8922b61919f22f1a276b2510f5725", "7bdbe77b5f533ebaaf9c120625d444076cbcd78eeaceeef20464e187be52d54ce14db760784211a263e91659ccffe24d5854698cb055e7f69f3fbfab228cf7a8ba4aabb5a573ce2623dd2c7eadb319997a8c5d0057e0f3fc4af48d6aee83856d50943d9eb5611c2f7b5757d6ea54a68b768e5996f484d7a6e6eb9bcd9e5d71e7"}) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) socket(0x15, 0x5, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x10000000001013, 0x2, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/bond0/queues/tx-9/xps_rxqs\x00', 0x1a1842, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x82, 0x0) sendfile$auto(r0, r1, 0x0, 0x5) openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x102, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x1008000) io_uring_setup$auto(0x6, 0x0) gettid() readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) unshare$auto(0x40000080) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) capset$auto(0x0, 0xfffffffffffffffe) 2.048928551s ago: executing program 3 (id=3860): r0 = socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) io_uring_setup$auto(0x3, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) syz_open_procfs$namespace(0x0, &(0x7f0000000080)) r1 = io_uring_setup$auto(0x86, 0x0) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000001280)='/dev/v4l-subdev0\x00', 0x101000, 0x0) ioctl$auto(r2, 0xc0205647, r1) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) connect$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x0, @rand_addr=0x2}, 0x52) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000080), r0) r3 = socket(0x2, 0x2, 0x0) getsockopt$auto(r3, 0x0, 0x1, 0xfffffffffffffffc, 0x0) mmap$auto(0x0, 0x2020007, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x900, 0x0) mmap$auto(0x0, 0x580f, 0x1, 0x8000000008011, 0x3, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x60742, 0x0) mmap$auto(0x0, 0x40009, 0xe3, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0x9, 0x72, 0x8b72, 0x2, 0x8000) kill$auto(0x0, 0x15) madvise$auto(0x0, 0xffffffffffff0001, 0x15) ioctl$auto(0x1, 0x5421, 0xa) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000002f80), 0xffffffffffffffff) sendmsg$auto_GTP_CMD_NEWPDP(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000003040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000003fc8b61b1e3d82f5545a2d894d9d3e9d85c42f1cd5ea34875fd369b8", @ANYRES16=0x0, @ANYBLOB="05002bbd7000ffdbdf25000000000800020001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4c000}, 0x80) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000000040), 0xffffffffffffffff) socket(0x15, 0x5, 0x0) 1.384829973s ago: executing program 2 (id=3861): r0 = socket(0x2, 0x3, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x5, 0x0, 0x9) sendto$auto(r0, 0x0, 0x8, 0xe, &(0x7f0000000000), 0x1c) (fail_nth: 3) 682.174937ms ago: executing program 2 (id=3862): mmap$auto(0x2, 0x20009, 0x100000000000df, 0xeb1, 0x401, 0xffffffff) get_robust_list$auto(0x0, 0x0, 0x0) r0 = bpf$auto_BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=@task_fd_query={0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffff, 0xffffffffffff0001, 0x80, 0xffffffffffffffff, 0x100, 0x1}, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, r1, 0x40000008000) rt_sigtimedwait$auto(0x0, 0x0, 0x0, 0x8) mmap$auto(0x0, 0x2000d, 0x4000000000df, 0xeb1, 0x404, 0x8000) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x8000, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r2, 0xc0045002, 0x0) read$auto(r2, 0x0, 0xcefbce6) read$auto_nsim_dev_trap_fa_cookie_fops_dev(r0, &(0x7f0000000000)=""/156, 0x9c) shmat$auto(0x0, &(0x7f0000000580)='(\x00', 0xfffffffa) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x6, 0xd, 0xfffffffe, 0x6, 0x7fff, 0x8, 0xffffffffffffffff, [], {0x6, 0x10001, 0xb, 0x2de, 0x504, 0x1, 0x101, 0x6, 0x6}, {0xfff7ffff, 0x2, 0x52, 0x5, 0x10001, 0x40, 0x76c5, 0x8, 0x8000000000000000}}) r3 = getpid() process_vm_readv$auto(r3, &(0x7f0000000000)={0x0, 0xfff}, 0x800000001, &(0x7f0000000280)={&(0x7f0000000080), 0x1ffffffff}, 0x6, 0x0) r4 = socket(0xa, 0x2, 0x0) setsockopt$auto(r4, 0x29, 0x30, 0x0, 0x56b) kill$auto(0x0, 0x11) syz_clone3(&(0x7f0000000500)={0x400, 0x0, 0x0, 0x0, {0x2c}, 0x0, 0x0, 0x0, 0x0}, 0x58) socket(0x2b, 0x1, 0x1) select$auto(0x5, &(0x7f0000000200)={[0xffffffffffffffff, 0x7, 0x80000001, 0x2, 0x7fffffffffffffff, 0x68a74cb8, 0x7, 0x1, 0x4, 0x6, 0x9, 0x1, 0x8, 0xffffffffffff3f13, 0xfffffffffffffffd, 0x2]}, &(0x7f0000000280)={[0x5bcc, 0x6, 0x2, 0x1ff, 0x58dc, 0x7, 0x8, 0x8, 0x80000000, 0x0, 0x10, 0x800000000000ff, 0x81d, 0x70, 0x80000001, 0x9]}, &(0x7f0000000300)={[0x7fffffff, 0x72e, 0x54, 0x5, 0x2, 0x3, 0x3, 0xfffffffffffffffb, 0x3, 0x4f5e, 0x45c, 0x9, 0x2, 0x2, 0xee4d, 0x5]}, &(0x7f00000000c0)={0x7, 0x8001}) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) mmap$auto(0x0, 0x40000a, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x2, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x18dd01, 0x0) ioctl$auto_SG_GET_RESERVED_SIZE(r5, 0x4c0a, 0x0) r6 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write$auto(r6, 0x0, 0xe) 649.339322ms ago: executing program 0 (id=3863): mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r0 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x100, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_CHANNEL_INFO2(r0, 0x80184132, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/security/tomoyo/manager\x00', 0x200, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D3\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r3 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snd/pcmC1D0p\x00', 0x0, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ram4\x00', 0xdd01, 0x0) read$auto_gpiolib_fops_(r2, &(0x7f0000000240)=""/66, 0x42) ioctl$auto_BLKRRPART(r4, 0x125f, 0x700000000000000) msync$auto(0x1ffff000, 0x1800000ff010000, 0x400000004) open(0x0, 0xeee00, 0x31) mmap$auto(0x1, 0x2020006, 0x3, 0xeb1, r3, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f0000000340)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cec23\x00', 0x4700, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0xffffffffffffc318, 0x948b, 0x3, 0x15f4da06, 0x3, 0x40000003, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) socket(0x1, 0x1, 0x6) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0xae41, 0x38) ioctl$auto(0x3, 0x4020aea5, 0x38) 472.917055ms ago: executing program 3 (id=3864): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x8d, 0x20009, 0x4000000000df, 0x11, r0, 0x3) r1 = prctl$auto(0x23, 0x7, 0x7fffffffefff, 0x0, 0x0) brk$auto(0x7fffffffafff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) getsockopt$auto_SO_WIFI_STATUS(r1, 0x1, 0x29, &(0x7f00000000c0)='(/)\xa1\x94**])\x00', &(0x7f00000001c0)=0x2) mknod$auto(&(0x7f00000003c0)=':,\x00\xbd\x80\xd6\x002\xb37\xff\x1a\x9e99\xda\xd1v\'\xc6\xd2Fw;\x00v\xdce\xad\xf4\xdb\xc7\x946\xe4\f\x9el]L+\x06\x130V\x1b,d\x8f\xa0\xabDUdk\xac\x82\\tyQ\xd8j\a\x1a[\xdb\x96\x1f{2\x04\xc5Y\xc1@\x0e\xeeWZ\x94N\xd4\xc8q=\x9b\xd1\x7fR3\xb6`\x00\xb3\xe5|1\xba\r\x85\x89\xfe\xed\xe1\xad`\x92\xc7\x9c\xd7\xd8\x15\t&\xb7\xfc\x82\xc4\xd3J\xae\x810\x19\x14\t\xc2\xa5V\xaa\x8d\x04\xf5\xf3\xd6\xd1\xe9k\xaf\x1a\xc6u\x96\xf7\xaa\x84\x92\x995m\xf9O\xc0\x1e\xa05\xdb\xa5\xae\r\x06\xe6\xc3\xd0\xf8:\xf7\xc5u\x91\xf8\x91\xee\xd8y\xb8\xc1)\xad\x05\xeb\xe9\xab\r\x9a@\aa(\x1a\xa4\xc1\xcf\\\xf0\xc3~\xbbd\x94\x9c\x02\xd4\xfc\xd2`\xd9\x83{-\x81zY\\\xac!#\xea\xba\x86)\xe9\xbc\x82\xf6\xd2\x7f\xdb\xa1\xd5\x89|\xa0O\xfcqZ\x85@A\x90\"\x11L\xdd\xa5\x9f\xf5', 0x20e9, 0x103) open(&(0x7f0000000280)=':,\x00\xbd\x80\xd6\x002\xb37\xff\x1a\x9e99\xda\xd1v\'\xc6\xd2Fw;\x00v\xdce\xad\xf4\xdb\xc7\x946\xe4\f\x9el]L+\x06\x130V\x1b,d\x8f\xa0\xabDUdk\xac\x82\\tyQ\xd8j\a\x1a[\xdb\x96\x1f{2\x04\xc5Y\xc1@\x0e\xeeWZ\x94N\xd4\xc8q=\x9b\xd1\x7fR3\xb6`\x00\xb3\xe5|1\xba\r\x85\x89\xfe\xed\xe1\xad`\x92\xc7\x9c\xd7\xd8\x15\t&\xb7\xfc\x82\xc4\xd3J\xae\x810\x19\x14\t\xc2\xa5V\xaa\x8d\x04\xf5\xf3\xd6\xd1\xe9k\xaf\x1a\xc6u\x96\xf7\xaa\x84\x92\x995m\xf9O\xc0\x1e\xa05\xdb\xa5\xae\r\x06\xe6\xc3\xd0\xf8:\xf7\xc5u\x91\xf8\x91\xee\xd8y\xb8\xc1)\xad\x05\xeb\xe9\xab\r\x9a@\aa(\x1a\xa4\xc1\xcf\\\xf0\xc3~\xbbd\x94\x9c\x02\xd4\xfc\xd2`\xd9\x83{-\x81zY\\\xac!#\xea\xba\x86)\xe9\xbc\x82\xf6\xd2\x7f\xdb\xa1\xd5\x89|\xa0O\xfcqZ\x85@A\x90\"\x11L\xdd\xa5\x9f\xf5\x00', 0x20102, 0x100) read$auto_stat_fops_per_vm_kvm_main(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x4, 0x9, 0x10, 0x80000010, 0xffffffffffffffff, 0x10000) r2 = openat$auto_null_fops_mem(0xffffffffffffff9c, &(0x7f0000000000), 0x12000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) fsconfig$auto(r3, 0x1, &(0x7f00000001c0)='+\x00', &(0x7f0000000280), 0x0) close_range$auto(r2, r3, 0x6) socket(0x2000000000000021, 0x2, 0x10000000000002) r4 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/ieee80211/phy1/netdev:wlan1/smps\x00', 0x22001, 0x0) write$auto_debugfs_full_proxy_file_operations_internal(r4, 0x0, 0x0) socket(0x15, 0x5, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) r5 = clone3$auto(&(0x7f00000002c0)={0x4, 0x9, 0x1, 0x2, 0x8000, 0xffffffffffffffff, 0x7, 0x3, 0xffffffffffffffea, 0x8, 0x200}, 0x7) ptrace$auto_PTRACE_GETSIGMASK(0x420a, r5, 0x6e3, 0x1) ioctl$auto_IOCTL_VMCI_DATAGRAM_SEND(0xffffffffffffffff, 0x7ab, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x2200, 0x0) r6 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r6, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) io_setup$auto(0x7ffe, &(0x7f0000000000)) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 0s ago: executing program 1 (id=3865): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000000), r0) sendmsg$auto_IOAM6_CMD_ADD_SCHEMA(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000480)={0x20, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {0x4, 0x0, 0x900}, [@IOAM6_ATTR_SC_DATA={0x4}, @IOAM6_ATTR_SC_ID={0x8, 0x4, 0x9}]}, 0x20}, 0x1, 0x3000700, 0x0, 0x1}, 0x8010) kernel console output (not intermixed with test programs): utes in process `syz.3.3049'. [ 901.235325][T21349] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3060'. [ 901.279286][T21349] HfR: left promiscuous mode [ 901.322238][T21352] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3059'. [ 903.193611][T21389] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3070'. [ 903.252638][T21389] HfR: left promiscuous mode [ 903.865963][T21403] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3071'. [ 904.093886][T21408] ptrace attach of "./syz-executor exec"[21411] was attempted by "./syz-executor exec"[21408] [ 905.699118][T21438] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3085'. [ 906.570150][T21459] FAULT_INJECTION: forcing a failure. [ 906.570150][T21459] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 907.029858][T21459] CPU: 0 UID: 0 PID: 21459 Comm: syz.3.3093 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) [ 907.029903][T21459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 907.029924][T21459] Call Trace: [ 907.029935][T21459] [ 907.029948][T21459] dump_stack_lvl+0x16c/0x1f0 [ 907.030004][T21459] should_fail_ex+0x512/0x640 [ 907.030054][T21459] should_fail_alloc_page+0xe7/0x130 [ 907.030086][T21459] prepare_alloc_pages+0x3c2/0x610 [ 907.030128][T21459] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 907.030177][T21459] ? kasan_save_stack+0x42/0x60 [ 907.030222][T21459] ? const_folio_flags+0x5b/0x100 [ 907.030281][T21459] ? lru_gen_add_folio+0x1a4/0xef0 [ 907.030328][T21459] ? __handle_mm_fault+0x2340/0x5490 [ 907.030369][T21459] ? handle_mm_fault+0x589/0xd10 [ 907.030408][T21459] ? __get_user_pages+0x530/0x3b80 [ 907.030447][T21459] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 907.030497][T21459] ? __pfx_folios_put_refs+0x10/0x10 [ 907.030547][T21459] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 907.030599][T21459] ? __mem_cgroup_threshold+0x191/0x430 [ 907.030641][T21459] ? rcu_is_watching+0x12/0xc0 [ 907.030672][T21459] ? lock_release+0x201/0x2f0 [ 907.030715][T21459] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 907.030764][T21459] ? policy_nodemask+0xea/0x4e0 [ 907.030816][T21459] alloc_pages_mpol+0x1fb/0x550 [ 907.030846][T21459] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 907.030877][T21459] ? blk_cgroup_congested+0x140/0x270 [ 907.030919][T21459] alloc_pages_noprof+0x131/0x390 [ 907.030950][T21459] pte_alloc_one+0x1c/0x3a0 [ 907.031000][T21459] do_huge_pmd_anonymous_page+0x2bb/0x2080 [ 907.031048][T21459] __handle_mm_fault+0x23d2/0x5490 [ 907.031094][T21459] ? __pfx___handle_mm_fault+0x10/0x10 [ 907.031135][T21459] ? mtree_load+0x309/0xa40 [ 907.031179][T21459] ? rcu_is_watching+0x12/0xc0 [ 907.031210][T21459] ? lock_release+0x201/0x2f0 [ 907.031267][T21459] ? handle_mm_fault+0x2ab/0xd10 [ 907.031304][T21459] ? rcu_is_watching+0x12/0xc0 [ 907.031337][T21459] handle_mm_fault+0x589/0xd10 [ 907.031384][T21459] __get_user_pages+0x589/0x3b80 [ 907.031428][T21459] ? __pfx___get_user_pages+0x10/0x10 [ 907.031468][T21459] ? rcu_is_watching+0x12/0xc0 [ 907.031502][T21459] faultin_page_range+0x249/0x980 [ 907.031545][T21459] madvise_do_behavior+0x268/0x3f0 [ 907.031581][T21459] ? __pfx_madvise_do_behavior+0x10/0x10 [ 907.031624][T21459] ? lock_release+0x201/0x2f0 [ 907.031669][T21459] do_madvise+0x161/0x230 [ 907.031699][T21459] ? __pfx_do_madvise+0x10/0x10 [ 907.031738][T21459] ? ksys_write+0x1ac/0x250 [ 907.031779][T21459] ? __pfx_ksys_write+0x10/0x10 [ 907.031823][T21459] __x64_sys_madvise+0xa9/0x110 [ 907.031855][T21459] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 907.031902][T21459] do_syscall_64+0xcd/0x490 [ 907.031950][T21459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 907.031983][T21459] RIP: 0033:0x7fd174f8e929 [ 907.032007][T21459] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 907.032038][T21459] RSP: 002b:00007fd172df6038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 907.032069][T21459] RAX: ffffffffffffffda RBX: 00007fd1751b5fa0 RCX: 00007fd174f8e929 [ 907.032091][T21459] RDX: 0000000000000017 RSI: ffffffffffff0005 RDI: 0000000000000000 [ 907.032112][T21459] RBP: 00007fd172df6090 R08: 0000000000000000 R09: 0000000000000000 [ 907.032132][T21459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 907.032151][T21459] R13: 0000000000000000 R14: 00007fd1751b5fa0 R15: 00007ffe637bcd88 [ 907.032181][T21459] [ 908.818034][T21479] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3098'. [ 910.438782][T21515] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3108'. [ 910.449311][T21515] HfR: left promiscuous mode [ 912.608999][T21572] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3120'. [ 912.658275][T21572] HfR: left promiscuous mode [ 914.858316][T21628] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3131'. [ 917.385641][T21666] FAULT_INJECTION: forcing a failure. [ 917.385641][T21666] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 917.401637][T21666] CPU: 1 UID: 0 PID: 21666 Comm: syz.2.3140 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) [ 917.401682][T21666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 917.401724][T21666] Call Trace: [ 917.401735][T21666] [ 917.401747][T21666] dump_stack_lvl+0x16c/0x1f0 [ 917.401802][T21666] should_fail_ex+0x512/0x640 [ 917.401849][T21666] ? page_copy_sane+0xcd/0x2d0 [ 917.401896][T21666] copy_folio_from_iter_atomic+0x375/0x1aa0 [ 917.401957][T21666] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 917.402010][T21666] ? shmem_write_begin+0x176/0x300 [ 917.402060][T21666] ? __pfx_shmem_write_begin+0x10/0x10 [ 917.402108][T21666] ? balance_dirty_pages_ratelimited_flags+0x92/0x1260 [ 917.402152][T21666] generic_perform_write+0x22c/0x930 [ 917.402197][T21666] ? __pfx_generic_perform_write+0x10/0x10 [ 917.402273][T21666] ? generic_update_time+0xcf/0xf0 [ 917.402326][T21666] ? mnt_put_write_access_file+0x45/0xf0 [ 917.402371][T21666] shmem_file_write_iter+0x10e/0x140 [ 917.402404][T21666] vfs_write+0x6c4/0x1150 [ 917.402449][T21666] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 917.402482][T21666] ? __pfx___mutex_lock+0x10/0x10 [ 917.402532][T21666] ? __pfx_vfs_write+0x10/0x10 [ 917.402589][T21666] ksys_write+0x12a/0x250 [ 917.402634][T21666] ? __pfx_ksys_write+0x10/0x10 [ 917.402694][T21666] do_syscall_64+0xcd/0x490 [ 917.402748][T21666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 917.402783][T21666] RIP: 0033:0x7fd0c0f8e929 [ 917.402809][T21666] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 917.402842][T21666] RSP: 002b:00007fd0c1e51038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 917.402874][T21666] RAX: ffffffffffffffda RBX: 00007fd0c11b5fa0 RCX: 00007fd0c0f8e929 [ 917.402896][T21666] RDX: 000000000000fdf3 RSI: 0000000000000000 RDI: 0000000000000003 [ 917.402915][T21666] RBP: 00007fd0c1010b39 R08: 0000000000000000 R09: 0000000000000000 [ 917.402934][T21666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 917.402953][T21666] R13: 0000000000000000 R14: 00007fd0c11b5fa0 R15: 00007ffdfe31bb18 [ 917.402983][T21666] [ 917.626908][ C1] vkms_vblank_simulate: vblank timer overrun [ 918.068414][T21672] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3142'. [ 919.189409][T21699] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3147'. [ 919.453021][T21703] FAULT_INJECTION: forcing a failure. [ 919.453021][T21703] name fail_futex, interval 1, probability 0, space 0, times 0 [ 919.503521][T21703] CPU: 1 UID: 0 PID: 21703 Comm: syz.1.3149 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) [ 919.503571][T21703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 919.503594][T21703] Call Trace: [ 919.503605][T21703] [ 919.503618][T21703] dump_stack_lvl+0x16c/0x1f0 [ 919.503675][T21703] should_fail_ex+0x512/0x640 [ 919.503728][T21703] get_futex_key+0x1d0/0x1540 [ 919.503768][T21703] ? __pfx_get_futex_key+0x10/0x10 [ 919.503803][T21703] ? do_raw_spin_lock+0x12c/0x2b0 [ 919.503861][T21703] futex_wait_setup+0x9d/0x550 [ 919.503916][T21703] __futex_wait+0x194/0x2f0 [ 919.503964][T21703] ? __pfx___futex_wait+0x10/0x10 [ 919.504016][T21703] ? __pfx_futex_wake_mark+0x10/0x10 [ 919.504067][T21703] ? rcu_is_watching+0x12/0xc0 [ 919.504100][T21703] ? lock_release+0x201/0x2f0 [ 919.504147][T21703] futex_wait+0xe8/0x380 [ 919.504194][T21703] ? __pfx_futex_wait+0x10/0x10 [ 919.504247][T21703] ? vfs_write+0x15d/0x1150 [ 919.504298][T21703] do_futex+0x229/0x350 [ 919.504337][T21703] ? __pfx_do_futex+0x10/0x10 [ 919.504375][T21703] ? lock_release+0x201/0x2f0 [ 919.504422][T21703] __x64_sys_futex+0x1e0/0x4c0 [ 919.504480][T21703] ? fput+0x70/0xf0 [ 919.504509][T21703] ? __pfx___x64_sys_futex+0x10/0x10 [ 919.504549][T21703] ? ksys_write+0x1ac/0x250 [ 919.504596][T21703] ? __pfx_ksys_write+0x10/0x10 [ 919.504650][T21703] do_syscall_64+0xcd/0x490 [ 919.504704][T21703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 919.504746][T21703] RIP: 0033:0x7f286338e929 [ 919.504777][T21703] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 919.504819][T21703] RSP: 002b:00007f28641ed0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 919.504858][T21703] RAX: ffffffffffffffda RBX: 00007f28635b5fa8 RCX: 00007f286338e929 [ 919.504881][T21703] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f28635b5fa8 [ 919.504903][T21703] RBP: 00007f28635b5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 919.504926][T21703] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f28635b5fac [ 919.504948][T21703] R13: 0000000000000000 R14: 00007ffcfbf58850 R15: 00007ffcfbf58938 [ 919.504981][T21703] [ 920.583254][T21730] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3158'. [ 921.921759][T21761] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3169'. [ 923.433839][T21803] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3180'. [ 923.944559][T21814] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3183'. [ 924.065227][ T43] Process accounting resumed [ 924.532573][T21826] FAULT_INJECTION: forcing a failure. [ 924.532573][T21826] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 924.643784][T21826] CPU: 1 UID: 0 PID: 21826 Comm: syz.2.3184 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) [ 924.643829][T21826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 924.643848][T21826] Call Trace: [ 924.643859][T21826] [ 924.643871][T21826] dump_stack_lvl+0x16c/0x1f0 [ 924.643925][T21826] should_fail_ex+0x512/0x640 [ 924.643975][T21826] _copy_from_user+0x2e/0xd0 [ 924.644024][T21826] kstrtouint_from_user+0xd6/0x1d0 [ 924.644064][T21826] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 924.644109][T21826] ? rcu_is_watching+0x12/0xc0 [ 924.644143][T21826] ? 0xffffffff81000000 [ 924.644166][T21826] ? lock_release+0x201/0x2f0 [ 924.644212][T21826] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 924.644251][T21826] proc_fail_nth_write+0x83/0x250 [ 924.644289][T21826] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 924.644329][T21826] ? __pfx___might_resched+0x10/0x10 [ 924.644363][T21826] ? iov_iter_advance+0x1e3/0x6c0 [ 924.644415][T21826] vfs_writev+0x5dc/0xde0 [ 924.644457][T21826] ? __pfx___mutex_trylock_common+0x10/0x10 [ 924.644508][T21826] ? __pfx_vfs_writev+0x10/0x10 [ 924.644551][T21826] ? __mutex_lock+0x1ca/0xb90 [ 924.644602][T21826] ? rcu_is_watching+0x12/0xc0 [ 924.644637][T21826] ? __pfx___mutex_lock+0x10/0x10 [ 924.644699][T21826] ? __fget_files+0x20e/0x3c0 [ 924.644742][T21826] ? __fget_files+0x140/0x3c0 [ 924.644790][T21826] ? do_writev+0x132/0x340 [ 924.644832][T21826] do_writev+0x132/0x340 [ 924.644875][T21826] ? __pfx_do_writev+0x10/0x10 [ 924.644923][T21826] do_syscall_64+0xcd/0x490 [ 924.644976][T21826] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 924.645010][T21826] RIP: 0033:0x7fd0c0f8e929 [ 924.645034][T21826] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 924.645066][T21826] RSP: 002b:00007fd0c1e51038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 924.645104][T21826] RAX: ffffffffffffffda RBX: 00007fd0c11b5fa0 RCX: 00007fd0c0f8e929 [ 924.645125][T21826] RDX: 0000000000000003 RSI: 0000200000000200 RDI: 0000000000000004 [ 924.645144][T21826] RBP: 00007fd0c1e51090 R08: 0000000000000000 R09: 0000000000000000 [ 924.645162][T21826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 924.645180][T21826] R13: 0000000000000000 R14: 00007fd0c11b5fa0 R15: 00007ffdfe31bb18 [ 924.645209][T21826] [ 927.221880][T21877] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3190'. [ 927.912035][T21893] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3194'. [ 927.967568][T21896] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3204'. [ 931.729973][T21941] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3207'. [ 932.691453][T21949] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3210'. [ 933.127887][T21959] netlink: 338 bytes leftover after parsing attributes in process `syz.3.3213'. [ 934.330856][T21975] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input41 [ 934.521300][T21984] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3219'. [ 934.536722][T21979] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input42 [ 936.179184][ T5892] Process accounting resumed [ 936.844649][T22024] netlink: 'syz.0.3230': attribute type 16 has an invalid length. [ 936.876061][T22024] netlink: 'syz.0.3230': attribute type 17 has an invalid length. [ 936.890676][T22024] netlink: 'syz.0.3230': attribute type 19 has an invalid length. [ 936.901869][T22024] netlink: 'syz.0.3230': attribute type 27 has an invalid length. [ 936.910296][T22024] netlink: 'syz.0.3230': attribute type 28 has an invalid length. [ 936.921229][T22024] netlink: 'syz.0.3230': attribute type 29 has an invalid length. [ 936.930219][T22029] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3232'. [ 936.942037][T22024] netlink: 'syz.0.3230': attribute type 30 has an invalid length. [ 936.950508][T22024] netlink: 'syz.0.3230': attribute type 31 has an invalid length. [ 936.982891][T22024] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3230'. [ 937.114211][T22027] [U] [ 937.117229][T22027] [U] [ 937.120003][T22027] [U] [ 937.122787][T22027] [U] [ 937.151753][T22027] [U] [ 937.154768][T22027] [U] [ 937.157574][T22027] [U] [ 937.160440][T22027] [U] [ 937.171938][T22027] [U] [ 937.174781][T22027] [U] [ 937.177814][T22027] [U] [ 937.180617][T22027] [U] [ 937.200745][T22027] [U] [ 937.203569][T22027] [U] [ 937.206348][T22027] [U] [ 937.209583][T22027] [U] [ 937.232701][T22027] [U] [ 937.235532][T22027] [U] [ 937.238322][T22027] [U] [ 937.241444][T22027] [U] [ 937.244623][T22027] [U] [ 937.247425][T22027] [U] [ 937.250202][T22027] [U] [ 937.252985][T22027] [U] [ 937.256431][T22027] [U] [ 937.259227][T22027] [U] [ 937.262008][T22027] [U] [ 937.265050][T22027] [U] [ 937.269256][T22027] [U] [ 937.272053][T22027] [U] [ 937.274832][T22027] [U] [ 937.277783][T22027] [U] [ 937.281455][T22027] [U] [ 937.284237][T22027] [U] [ 937.287031][T22027] [U] [ 937.289790][T22027] [U] [ 937.293803][T22027] [U] [ 937.296868][T22027] [U] [ 937.299727][T22027] [U] [ 937.302509][T22027] [U] [ 937.306255][T22027] [U] [ 937.309155][T22027] [U] [ 937.312021][T22027] [U] [ 937.314811][T22027] [U] [ 937.384996][T22027] [U] [ 937.387824][T22027] [U] [ 937.390596][T22027] [U] [ 937.393371][T22027] [U] [ 937.467274][T22027] [U] [ 937.470051][T22027] [U] [ 937.472783][T22027] [U] [ 937.475511][T22027] [U] [ 937.521853][T22027] [U] [ 937.524768][T22027] [U] [ 937.527552][T22027] [U] [ 937.530329][T22027] [U] [ 937.534117][T22027] [U] [ 937.536918][T22027] [U] [ 937.539711][T22027] [U] [ 937.542474][T22027] [U] [ 937.547417][T22027] [U] [ 937.550226][T22027] [U] [ 937.553005][T22027] [U] [ 937.555782][T22027] [U] [ 937.559646][T22027] [U] [ 937.562456][T22027] [U] [ 937.565231][T22027] [U] [ 937.568014][T22027] [U] [ 937.577321][T22027] [U] [ 937.580219][T22027] [U] [ 937.582996][T22027] [U] [ 937.585766][T22027] [U] [ 937.612900][T22027] [U] [ 937.615674][T22027] [U] [ 937.618415][T22027] [U] [ 937.621605][T22027] [U] [ 937.671838][T22027] [U] [ 937.674650][T22027] [U] [ 937.677420][T22027] [U] [ 937.680591][T22027] [U] [ 937.833154][T22027] [U] [ 937.835929][T22027] [U] [ 937.839454][T22027] [U] [ 937.842372][T22027] [U] [ 938.016532][T22027] [U] [ 938.019384][T22027] [U] [ 938.022109][T22027] [U] [ 938.024826][T22027] [U] [ 938.062899][T22027] [U] [ 938.065748][T22027] [U] [ 938.068602][T22027] [U] [ 938.071374][T22027] [U] [ 938.077386][T22027] [U] [ 938.080202][T22027] [U] [ 938.083144][T22027] [U] [ 938.085921][T22027] [U] [ 938.119700][T22027] [U] [ 938.122492][T22027] [U] [ 938.125214][T22027] [U] [ 938.127934][T22027] [U] [ 938.132992][T22052] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3239'. [ 938.140333][T22027] [U] [ 938.144939][T22027] [U] [ 938.147712][T22027] [U] [ 938.150494][T22027] [U] [ 938.192747][T22027] [U] [ 938.195573][T22027] [U] [ 938.198324][T22027] [U] [ 938.201059][T22027] [U] [ 938.230571][T22027] [U] [ 938.233470][T22027] [U] [ 938.236222][T22027] [U] [ 938.239085][T22027] [U] [ 938.262962][T22027] [U] [ 938.501812][T22061] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3242'. [ 938.644702][T22066] netlink: 206 bytes leftover after parsing attributes in process `syz.3.3243'. [ 939.394737][T22085] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3252'. [ 939.498244][T22083] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3250'. [ 940.479824][T22116] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3262'. [ 940.786135][T22124] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3265'. [ 941.476005][T22152] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3273'. [ 942.146190][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 942.155648][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 942.652340][T22164] FAULT_INJECTION: forcing a failure. [ 942.652340][T22164] name failslab, interval 1, probability 0, space 0, times 0 [ 942.694998][T22164] CPU: 0 UID: 0 PID: 22164 Comm: syz.2.3277 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) [ 942.695047][T22164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 942.695070][T22164] Call Trace: [ 942.695083][T22164] [ 942.695096][T22164] dump_stack_lvl+0x16c/0x1f0 [ 942.695160][T22164] should_fail_ex+0x512/0x640 [ 942.695212][T22164] ? __register_sysctl_table+0xea2/0x1900 [ 942.695266][T22164] should_failslab+0xc2/0x120 [ 942.695297][T22164] __kmalloc_noprof+0xd2/0x510 [ 942.695347][T22164] ? lock_release+0x201/0x2f0 [ 942.695394][T22164] __register_sysctl_table+0xea2/0x1900 [ 942.695463][T22164] ? __pfx___register_sysctl_table+0x10/0x10 [ 942.695532][T22164] ? is_module_address+0x69/0xf0 [ 942.695580][T22164] ? register_net_sysctl_sz+0x228/0x3e0 [ 942.695620][T22164] __devinet_sysctl_register+0x1b9/0x360 [ 942.695666][T22164] ? __pfx___devinet_sysctl_register+0x10/0x10 [ 942.695711][T22164] ? devinet_init_net+0xeb/0x910 [ 942.695752][T22164] ? __asan_memcpy+0x3c/0x60 [ 942.695797][T22164] devinet_init_net+0x315/0x910 [ 942.695839][T22164] ? __pfx_devinet_init_net+0x10/0x10 [ 942.695880][T22164] ops_init+0x1df/0x5f0 [ 942.695911][T22164] setup_net+0x1ff/0x510 [ 942.695941][T22164] ? lockdep_init_map_type+0x5c/0x280 [ 942.695987][T22164] ? __pfx_setup_net+0x10/0x10 [ 942.696016][T22164] ? __raw_spin_lock_init+0x3a/0x110 [ 942.696086][T22164] ? debug_mutex_init+0x37/0x70 [ 942.696120][T22164] copy_net_ns+0x2a6/0x5f0 [ 942.696158][T22164] create_new_namespaces+0x3ea/0xa90 [ 942.696200][T22164] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 942.696239][T22164] ksys_unshare+0x45b/0xa40 [ 942.696283][T22164] ? __pfx_ksys_unshare+0x10/0x10 [ 942.696326][T22164] ? xfd_validate_state+0x61/0x180 [ 942.696383][T22164] __x64_sys_unshare+0x31/0x40 [ 942.696426][T22164] do_syscall_64+0xcd/0x490 [ 942.696479][T22164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 942.696521][T22164] RIP: 0033:0x7fd0c0f8e929 [ 942.696548][T22164] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 942.696582][T22164] RSP: 002b:00007fd0c1e51038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 942.696616][T22164] RAX: ffffffffffffffda RBX: 00007fd0c11b5fa0 RCX: 00007fd0c0f8e929 [ 942.696640][T22164] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 942.696661][T22164] RBP: 00007fd0c1010b39 R08: 0000000000000000 R09: 0000000000000000 [ 942.696683][T22164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 942.696705][T22164] R13: 0000000000000000 R14: 00007fd0c11b5fa0 R15: 00007ffdfe31bb18 [ 942.696737][T22164] [ 942.767306][T22164] sysctl could not get directory: /net/ipv4/conf -12 [ 944.686030][T22191] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3284'. [ 945.792401][T22227] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3296'. [ 946.973789][T22253] blktrace: Concurrent blktraces are not allowed on ram7 [ 947.501438][T22260] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3306'. [ 949.160854][T22287] FAULT_INJECTION: forcing a failure. [ 949.160854][T22287] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 949.276472][T22287] CPU: 1 UID: 0 PID: 22287 Comm: syz.1.3308 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) [ 949.276518][T22287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 949.276538][T22287] Call Trace: [ 949.276549][T22287] [ 949.276561][T22287] dump_stack_lvl+0x16c/0x1f0 [ 949.276620][T22287] should_fail_ex+0x512/0x640 [ 949.276674][T22287] _copy_from_user+0x2e/0xd0 [ 949.276728][T22287] __do_sys_landlock_create_ruleset+0x1c7/0x4e0 [ 949.276785][T22287] ? __pfx___do_sys_landlock_create_ruleset+0x10/0x10 [ 949.276848][T22287] do_syscall_64+0xcd/0x490 [ 949.276891][T22287] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 949.276920][T22287] RIP: 0033:0x7f286338e929 [ 949.276938][T22287] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 949.276962][T22287] RSP: 002b:00007f28641cc038 EFLAGS: 00000246 ORIG_RAX: 00000000000001bc [ 949.276985][T22287] RAX: ffffffffffffffda RBX: 00007f28635b6080 RCX: 00007f286338e929 [ 949.277001][T22287] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 0000200000000000 [ 949.277024][T22287] RBP: 00007f2863410b39 R08: 0000000000000000 R09: 0000000000000000 [ 949.277040][T22287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 949.277055][T22287] R13: 0000000000000000 R14: 00007f28635b6080 R15: 00007ffcfbf58938 [ 949.277078][T22287] [ 949.770736][T22319] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3314'. [ 950.288719][ T31] audit: type=1804 audit(4294967550.075:46): pid=22316 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.3313" name="/newroot/224/file0" dev="tmpfs" ino=1203 res=1 errno=0 [ 951.251110][T22370] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3326'. [ 951.468809][T22381] FAULT_INJECTION: forcing a failure. [ 951.468809][T22381] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 951.485371][T22381] CPU: 1 UID: 0 PID: 22381 Comm: syz.2.3332 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) [ 951.485414][T22381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 951.485434][T22381] Call Trace: [ 951.485446][T22381] [ 951.485458][T22381] dump_stack_lvl+0x16c/0x1f0 [ 951.485514][T22381] should_fail_ex+0x512/0x640 [ 951.485568][T22381] _copy_from_iter+0x29f/0x16f0 [ 951.485625][T22381] ? __pfx__copy_from_iter+0x10/0x10 [ 951.485675][T22381] ? kernel_text_address+0x8d/0x100 [ 951.485728][T22381] ? rcu_is_watching+0x12/0xc0 [ 951.485772][T22381] ? raw_sendmsg+0x77a/0x3820 [ 951.485821][T22381] ? rcu_is_watching+0x12/0xc0 [ 951.485853][T22381] ? lock_release+0x201/0x2f0 [ 951.485896][T22381] raw_sendmsg+0x1834/0x3820 [ 951.485946][T22381] ? __pfx_raw_sendmsg+0x10/0x10 [ 951.485993][T22381] ? lock_release+0x201/0x2f0 [ 951.486038][T22381] ? tomoyo_check_inet_address+0xe0/0x6c0 [ 951.486086][T22381] ? __pfx_tomoyo_check_inet_address+0x10/0x10 [ 951.486142][T22381] ? __pfx___might_resched+0x10/0x10 [ 951.486181][T22381] ? aa_sk_perm+0x2f4/0xb10 [ 951.486230][T22381] ? __pfx_raw_sendmsg+0x10/0x10 [ 951.486278][T22381] inet_sendmsg+0x11c/0x140 [ 951.486326][T22381] __sys_sendto+0x43c/0x520 [ 951.486373][T22381] ? __pfx___sys_sendto+0x10/0x10 [ 951.486436][T22381] ? ksys_write+0x1ac/0x250 [ 951.486483][T22381] ? __pfx_ksys_write+0x10/0x10 [ 951.486533][T22381] __x64_sys_sendto+0xe0/0x1c0 [ 951.486580][T22381] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 951.486633][T22381] do_syscall_64+0xcd/0x490 [ 951.486689][T22381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 951.486725][T22381] RIP: 0033:0x7fd0c0f8e929 [ 951.486751][T22381] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 951.486797][T22381] RSP: 002b:00007fd0c1e51038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 951.486828][T22381] RAX: ffffffffffffffda RBX: 00007fd0c11b5fa0 RCX: 00007fd0c0f8e929 [ 951.486853][T22381] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000000003 [ 951.486872][T22381] RBP: 00007fd0c1e51090 R08: 0000200000000000 R09: 000000000000001c [ 951.486896][T22381] R10: 000000000000000e R11: 0000000000000246 R12: 0000000000000001 [ 951.486917][T22381] R13: 0000000000000000 R14: 00007fd0c11b5fa0 R15: 00007ffdfe31bb18 [ 951.486949][T22381] [ 952.300251][T22400] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3337'. [ 952.875263][T22420] FAULT_INJECTION: forcing a failure. [ 952.875263][T22420] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 952.950107][T22420] CPU: 1 UID: 0 PID: 22420 Comm: syz.0.3345 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) [ 952.950153][T22420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 952.950172][T22420] Call Trace: [ 952.950182][T22420] [ 952.950194][T22420] dump_stack_lvl+0x16c/0x1f0 [ 952.950247][T22420] should_fail_ex+0x512/0x640 [ 952.950297][T22420] should_fail_alloc_page+0xe7/0x130 [ 952.950329][T22420] prepare_alloc_pages+0x3c2/0x610 [ 952.950368][T22420] ? rcu_is_watching+0x12/0xc0 [ 952.950401][T22420] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 952.950448][T22420] ? is_bpf_text_address+0x8a/0x1a0 [ 952.950494][T22420] ? lock_release+0x201/0x2f0 [ 952.950534][T22420] ? bpf_ksym_find+0x124/0x1c0 [ 952.950567][T22420] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 952.950604][T22420] ? is_bpf_text_address+0x94/0x1a0 [ 952.950656][T22420] ? kernel_text_address+0x8d/0x100 [ 952.950706][T22420] ? __kernel_text_address+0xd/0x40 [ 952.950756][T22420] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 952.950805][T22420] ? rcu_is_watching+0x12/0xc0 [ 952.950836][T22420] ? __might_fault+0xe3/0x190 [ 952.950881][T22420] ? __might_fault+0x13b/0x190 [ 952.950925][T22420] ? rcu_is_watching+0x12/0xc0 [ 952.950956][T22420] ? __might_fault+0xe3/0x190 [ 952.950995][T22420] ? lock_release+0x201/0x2f0 [ 952.951040][T22420] ? _copy_from_iter+0x15d/0x16f0 [ 952.951090][T22420] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 952.951139][T22420] ? policy_nodemask+0xea/0x4e0 [ 952.951192][T22420] alloc_pages_mpol+0x1fb/0x550 [ 952.951222][T22420] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 952.951261][T22420] alloc_pages_noprof+0x131/0x390 [ 952.951289][T22420] anon_pipe_write+0xbc2/0x1a70 [ 952.951339][T22420] ? get_pid_task+0xf1/0x250 [ 952.951384][T22420] ? __pfx_anon_pipe_write+0x10/0x10 [ 952.951434][T22420] ? apparmor_file_permission+0x251/0x400 [ 952.951469][T22420] ? bpf_lsm_file_permission+0x9/0x10 [ 952.951503][T22420] ? security_file_permission+0x71/0x210 [ 952.951546][T22420] ? rw_verify_area+0xcf/0x680 [ 952.951587][T22420] vfs_write+0x6c4/0x1150 [ 952.951641][T22420] ? __pfx_anon_pipe_write+0x10/0x10 [ 952.951690][T22420] ? __pfx_vfs_write+0x10/0x10 [ 952.951736][T22420] ? lock_release+0x201/0x2f0 [ 952.951787][T22420] ksys_write+0x1f8/0x250 [ 952.951831][T22420] ? __pfx_ksys_write+0x10/0x10 [ 952.951883][T22420] do_syscall_64+0xcd/0x490 [ 952.951935][T22420] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 952.951968][T22420] RIP: 0033:0x7f335738e929 [ 952.951993][T22420] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 952.952025][T22420] RSP: 002b:00007f33551d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 952.952056][T22420] RAX: ffffffffffffffda RBX: 00007f33575b6080 RCX: 00007f335738e929 [ 952.952078][T22420] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 952.952098][T22420] RBP: 00007f33551d5090 R08: 0000000000000000 R09: 0000000000000000 [ 952.952119][T22420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 952.952139][T22420] R13: 0000000000000000 R14: 00007f33575b6080 R15: 00007ffc02456a28 [ 952.952171][T22420] [ 953.362431][T22430] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3347'. [ 954.347124][T22463] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3360'. [ 954.366186][T22460] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3359'. [ 955.304413][T22493] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3371'. [ 955.705085][T22502] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3374'. [ 956.042515][T22521] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3381'. [ 957.066628][T22554] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3392'. [ 957.117425][T22551] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3389'. [ 958.266779][T22586] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3401'. [ 958.361076][T22591] FAULT_INJECTION: forcing a failure. [ 958.361076][T22591] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 958.404251][T22591] CPU: 0 UID: 0 PID: 22591 Comm: syz.1.3402 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) [ 958.404302][T22591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 958.404324][T22591] Call Trace: [ 958.404335][T22591] [ 958.404347][T22591] dump_stack_lvl+0x16c/0x1f0 [ 958.404405][T22591] should_fail_ex+0x512/0x640 [ 958.404458][T22591] _copy_from_user+0x2e/0xd0 [ 958.404511][T22591] kstrtouint_from_user+0xd6/0x1d0 [ 958.404551][T22591] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 958.404591][T22591] ? rcu_is_watching+0x12/0xc0 [ 958.404627][T22591] ? 0xffffffff81000000 [ 958.404651][T22591] ? lock_release+0x201/0x2f0 [ 958.404698][T22591] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 958.404739][T22591] proc_fail_nth_write+0x83/0x250 [ 958.404778][T22591] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 958.404819][T22591] ? __pfx___might_resched+0x10/0x10 [ 958.404853][T22591] ? iov_iter_advance+0x1e3/0x6c0 [ 958.404908][T22591] vfs_writev+0x5dc/0xde0 [ 958.404961][T22591] ? __pfx___mutex_trylock_common+0x10/0x10 [ 958.405016][T22591] ? __pfx_vfs_writev+0x10/0x10 [ 958.405061][T22591] ? __mutex_lock+0x1ca/0xb90 [ 958.405112][T22591] ? kmem_cache_free+0x2d1/0x4d0 [ 958.405164][T22591] ? __pfx___mutex_lock+0x10/0x10 [ 958.405229][T22591] ? __fget_files+0x20e/0x3c0 [ 958.405281][T22591] ? do_writev+0x132/0x340 [ 958.405324][T22591] do_writev+0x132/0x340 [ 958.405368][T22591] ? __pfx_do_writev+0x10/0x10 [ 958.405418][T22591] do_syscall_64+0xcd/0x490 [ 958.405473][T22591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 958.405508][T22591] RIP: 0033:0x7f286338e929 [ 958.405534][T22591] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 958.405570][T22591] RSP: 002b:00007f28641ed038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 958.405603][T22591] RAX: ffffffffffffffda RBX: 00007f28635b5fa0 RCX: 00007f286338e929 [ 958.405627][T22591] RDX: 0000000000000003 RSI: 0000200000000200 RDI: 0000000000000005 [ 958.405649][T22591] RBP: 00007f2863410b39 R08: 0000000000000000 R09: 0000000000000000 [ 958.405670][T22591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 958.405691][T22591] R13: 0000000000000000 R14: 00007f28635b5fa0 R15: 00007ffcfbf58938 [ 958.405723][T22591] [ 958.825258][T22597] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3403'. [ 959.802688][T22612] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3408'. [ 959.896956][T22622] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3410'. [ 960.375914][T22630] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3415'. [ 961.183949][T22656] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3421'. [ 961.501411][T22659] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3423'. [ 961.920695][T22676] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3426'. [ 962.370233][T22680] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3428'. [ 962.384220][T22680] veth0_macvtap: left promiscuous mode [ 962.526202][T22687] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3432'. [ 962.846379][T22696] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3434'. [ 963.176397][T22707] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3437'. [ 963.739632][T22721] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3442'. [ 963.821072][T22719] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input43 [ 964.850168][T22739] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3447'. [ 966.771549][T22781] __nla_validate_parse: 2 callbacks suppressed [ 966.771574][T22781] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3459'. [ 967.015945][T22793] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3461'. [ 967.604819][T22820] netlink: 13832 bytes leftover after parsing attributes in process `syz.0.3470'. [ 968.334389][T22828] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3471'. [ 968.348949][T22836] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3472'. [ 970.170335][T22876] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3485'. [ 971.712704][T22923] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3499'. [ 972.497727][T22948] mkiss: ax0: crc mode is auto. [ 972.731656][T22961] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3510'. [ 976.124012][T23030] FAULT_INJECTION: forcing a failure. [ 976.124012][T23030] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 976.151346][T23030] CPU: 1 UID: 0 PID: 23030 Comm: syz.1.3526 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) [ 976.151389][T23030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 976.151408][T23030] Call Trace: [ 976.151418][T23030] [ 976.151431][T23030] dump_stack_lvl+0x16c/0x1f0 [ 976.151486][T23030] should_fail_ex+0x512/0x640 [ 976.151534][T23030] _copy_to_user+0x32/0xd0 [ 976.151586][T23030] pagemap_read+0x52c/0x890 [ 976.151630][T23030] ? __pfx_pagemap_read+0x10/0x10 [ 976.151671][T23030] ? bpf_lsm_file_permission+0x9/0x10 [ 976.151716][T23030] ? security_file_permission+0x71/0x210 [ 976.151759][T23030] ? iov_iter_advance+0x1e3/0x6c0 [ 976.151811][T23030] ? rw_verify_area+0xcf/0x680 [ 976.151851][T23030] ? __pfx_pagemap_read+0x10/0x10 [ 976.151891][T23030] vfs_readv+0x5c1/0x8b0 [ 976.151937][T23030] ? __pfx_vfs_readv+0x10/0x10 [ 976.151977][T23030] ? __mutex_lock+0x1ca/0xb90 [ 976.152027][T23030] ? rcu_is_watching+0x12/0xc0 [ 976.152062][T23030] ? __pfx___mutex_lock+0x10/0x10 [ 976.152119][T23030] ? __fget_files+0x20e/0x3c0 [ 976.152160][T23030] ? __fget_files+0x140/0x3c0 [ 976.152208][T23030] ? do_readv+0x132/0x340 [ 976.152247][T23030] do_readv+0x132/0x340 [ 976.152288][T23030] ? __pfx_do_readv+0x10/0x10 [ 976.152335][T23030] do_syscall_64+0xcd/0x490 [ 976.152386][T23030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 976.152419][T23030] RIP: 0033:0x7f286338e929 [ 976.152443][T23030] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 976.152476][T23030] RSP: 002b:00007f28641cc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 976.152508][T23030] RAX: ffffffffffffffda RBX: 00007f28635b6080 RCX: 00007f286338e929 [ 976.152530][T23030] RDX: 0000000000000006 RSI: 0000200000000400 RDI: 0000000000000003 [ 976.152551][T23030] RBP: 00007f28641cc090 R08: 0000000000000000 R09: 0000000000000000 [ 976.152573][T23030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 976.152593][T23030] R13: 0000000000000000 R14: 00007f28635b6080 R15: 00007ffcfbf58938 [ 976.152625][T23030] [ 976.371526][ C1] vkms_vblank_simulate: vblank timer overrun [ 976.745092][T23051] FAULT_INJECTION: forcing a failure. [ 976.745092][T23051] name failslab, interval 1, probability 0, space 0, times 0 [ 976.827637][T23051] CPU: 0 UID: 0 PID: 23051 Comm: syz.0.3531 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) [ 976.827684][T23051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 976.827704][T23051] Call Trace: [ 976.827714][T23051] [ 976.827726][T23051] dump_stack_lvl+0x16c/0x1f0 [ 976.827778][T23051] should_fail_ex+0x512/0x640 [ 976.827823][T23051] should_failslab+0xc2/0x120 [ 976.827852][T23051] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 976.827899][T23051] ? xas_split_alloc+0x11c/0x490 [ 976.827948][T23051] ? stack_trace_save+0x8e/0xc0 [ 976.827984][T23051] xas_split_alloc+0x11c/0x490 [ 976.828038][T23051] __folio_split+0xca8/0x48d0 [ 976.828079][T23051] ? rcu_is_watching+0x11/0xc0 [ 976.828114][T23051] ? rcu_is_watching+0x12/0xc0 [ 976.828145][T23051] ? lock_release+0x201/0x2f0 [ 976.828186][T23051] ? filemap_get_entry+0x1b1/0x3b0 [ 976.828214][T23051] ? __pfx_filemap_get_entry+0x10/0x10 [ 976.828243][T23051] ? __pfx___folio_split+0x10/0x10 [ 976.828287][T23051] ? __asan_memset+0x23/0x50 [ 976.828327][T23051] ? zero_user_segments.constprop.0+0x278/0x340 [ 976.828367][T23051] truncate_inode_partial_folio+0x7ab/0xdb0 [ 976.828416][T23051] shmem_undo_range+0x6eb/0x1150 [ 976.828469][T23051] ? __pfx_shmem_undo_range+0x10/0x10 [ 976.828528][T23051] ? zap_page_range_single+0xc7/0x120 [ 976.828563][T23051] ? __pfx_zap_page_range_single+0x10/0x10 [ 976.828596][T23051] ? timestamp_truncate+0x21e/0x2d0 [ 976.828661][T23051] ? __pfx_unmap_mapping_range+0x10/0x10 [ 976.828694][T23051] ? shmem_fallocate+0x9a7/0xf50 [ 976.828739][T23051] ? lock_release+0x201/0x2f0 [ 976.828781][T23051] shmem_fallocate+0x9e7/0xf50 [ 976.828827][T23051] ? rcu_is_watching+0x12/0xc0 [ 976.828859][T23051] ? aa_file_perm+0x4c7/0xfb0 [ 976.828902][T23051] ? rcu_is_watching+0x12/0xc0 [ 976.828936][T23051] ? __pfx_shmem_fallocate+0x10/0x10 [ 976.828982][T23051] ? aa_file_perm+0x4d6/0xfb0 [ 976.829030][T23051] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 976.829072][T23051] ? __pfx_aa_file_perm+0x10/0x10 [ 976.829121][T23051] ? unwind_next_frame+0x3f4/0x20a0 [ 976.829169][T23051] ? rcu_is_watching+0x12/0xc0 [ 976.829206][T23051] ? lock_acquire+0x2cd/0x350 [ 976.829246][T23051] ? __pfx___might_resched+0x10/0x10 [ 976.829281][T23051] ? apparmor_file_permission+0x251/0x400 [ 976.829317][T23051] ? __pfx_shmem_fallocate+0x10/0x10 [ 976.829363][T23051] vfs_fallocate+0x608/0x10c0 [ 976.829418][T23051] ? __pfx_vfs_fallocate+0x10/0x10 [ 976.829463][T23051] ? madvise_vma_behavior+0x222c/0x2420 [ 976.829499][T23051] ? lock_release+0x201/0x2f0 [ 976.829538][T23051] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 976.829587][T23051] madvise_vma_behavior+0x21ca/0x2420 [ 976.829620][T23051] ? mt_find+0x3ef/0xa30 [ 976.829650][T23051] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 976.829685][T23051] ? __pfx_mt_find+0x10/0x10 [ 976.829716][T23051] ? find_vma_prev+0xda/0x160 [ 976.829751][T23051] ? __pfx_find_vma_prev+0x10/0x10 [ 976.829789][T23051] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 976.829823][T23051] ? find_vma+0xbf/0x140 [ 976.829850][T23051] ? __pfx_find_vma+0x10/0x10 [ 976.829887][T23051] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 976.829921][T23051] madvise_walk_vmas+0x1d1/0x2c0 [ 976.829953][T23051] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 976.829980][T23051] ? rcu_is_watching+0x12/0xc0 [ 976.830009][T23051] ? lock_release+0x201/0x2f0 [ 976.830050][T23051] madvise_do_behavior+0x15d/0x3f0 [ 976.830087][T23051] ? __pfx_madvise_do_behavior+0x10/0x10 [ 976.830126][T23051] ? lock_release+0x201/0x2f0 [ 976.830172][T23051] do_madvise+0x161/0x230 [ 976.830204][T23051] ? __pfx_do_madvise+0x10/0x10 [ 976.830246][T23051] ? ksys_write+0x1ac/0x250 [ 976.830289][T23051] ? __pfx_ksys_write+0x10/0x10 [ 976.830338][T23051] __x64_sys_madvise+0xa9/0x110 [ 976.830371][T23051] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 976.830429][T23051] do_syscall_64+0xcd/0x490 [ 976.830481][T23051] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 976.830513][T23051] RIP: 0033:0x7f335738e929 [ 976.830537][T23051] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 976.830568][T23051] RSP: 002b:00007f33551b4038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 976.830598][T23051] RAX: ffffffffffffffda RBX: 00007f33575b6160 RCX: 00007f335738e929 [ 976.830620][T23051] RDX: 0000000000000009 RSI: 000000000020499d RDI: 0000000000000000 [ 976.830639][T23051] RBP: 00007f33551b4090 R08: 0000000000000000 R09: 0000000000000000 [ 976.830659][T23051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 976.830678][T23051] R13: 0000000000000000 R14: 00007f33575b6160 R15: 00007ffc02456a28 [ 976.830707][T23051] [ 978.401801][T23061] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 978.431688][T23061] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 978.446624][T23061] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 978.453370][T23061] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 978.500667][T23061] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 978.514645][T23061] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 978.580477][T23061] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 978.591453][T23061] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 979.583332][ T5832] Bluetooth: hci0: command 0x0406 tx timeout [ 980.462048][ T5832] Bluetooth: hci4: command 0x0406 tx timeout [ 980.544373][ T5832] Bluetooth: hci1: command 0x0406 tx timeout [ 980.624617][ T5832] Bluetooth: hci2: command 0x0406 tx timeout [ 981.667787][ T5832] Bluetooth: hci0: command 0x0406 tx timeout [ 982.541680][ T5832] Bluetooth: hci4: command 0x0406 tx timeout [ 982.624330][ T5832] Bluetooth: hci1: command 0x0406 tx timeout [ 982.703181][ T5832] Bluetooth: hci2: command 0x0406 tx timeout [ 984.006225][T23232] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input44 [ 984.233759][T23233] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input45 [ 986.500263][T23286] FAULT_INJECTION: forcing a failure. [ 986.500263][T23286] name failslab, interval 1, probability 0, space 0, times 0 [ 986.525886][T23286] CPU: 0 UID: 0 PID: 23286 Comm: syz.0.3585 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) [ 986.525932][T23286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 986.525953][T23286] Call Trace: [ 986.525963][T23286] [ 986.525976][T23286] dump_stack_lvl+0x16c/0x1f0 [ 986.526036][T23286] should_fail_ex+0x512/0x640 [ 986.526093][T23286] should_failslab+0xc2/0x120 [ 986.526125][T23286] __kvmalloc_node_noprof+0x137/0x620 [ 986.526172][T23286] ? aa_get_newest_label+0x375/0x680 [ 986.526206][T23286] ? vmemdup_user+0x25/0xe0 [ 986.526260][T23286] ? vmemdup_user+0x25/0xe0 [ 986.526307][T23286] ? __might_fault+0x13b/0x190 [ 986.526354][T23286] vmemdup_user+0x25/0xe0 [ 986.526404][T23286] con_set_unimap+0x4b/0x640 [ 986.526445][T23286] vt_ioctl+0x1117/0x30a0 [ 986.526486][T23286] ? __pfx_vt_ioctl+0x10/0x10 [ 986.526523][T23286] ? tomoyo_path_number_perm+0x295/0x580 [ 986.526568][T23286] ? rcu_is_watching+0x12/0xc0 [ 986.526601][T23286] ? lock_release+0x201/0x2f0 [ 986.526645][T23286] ? tomoyo_path_number_perm+0x18d/0x580 [ 986.526686][T23286] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 986.526725][T23286] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 986.526776][T23286] ? do_vfs_ioctl+0x523/0x1a60 [ 986.526812][T23286] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 986.526863][T23286] ? tty_jobctrl_ioctl+0x152/0xe00 [ 986.526909][T23286] ? __pfx_vt_ioctl+0x10/0x10 [ 986.526946][T23286] tty_ioctl+0x65e/0x1640 [ 986.526997][T23286] ? __pfx_tty_ioctl+0x10/0x10 [ 986.527052][T23286] ? rcu_is_watching+0x12/0xc0 [ 986.527086][T23286] ? __fget_files+0x204/0x3c0 [ 986.527127][T23286] ? hook_file_ioctl_common+0x145/0x410 [ 986.527167][T23286] ? __fget_files+0x20e/0x3c0 [ 986.527215][T23286] ? __pfx_tty_ioctl+0x10/0x10 [ 986.527264][T23286] __x64_sys_ioctl+0x18b/0x210 [ 986.527304][T23286] do_syscall_64+0xcd/0x490 [ 986.527357][T23286] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 986.527391][T23286] RIP: 0033:0x7f335738e929 [ 986.527417][T23286] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 986.527451][T23286] RSP: 002b:00007f33551f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 986.527483][T23286] RAX: ffffffffffffffda RBX: 00007f33575b5fa0 RCX: 00007f335738e929 [ 986.527506][T23286] RDX: 0000000000000000 RSI: 0000000000004b67 RDI: 0000000000000006 [ 986.527526][T23286] RBP: 00007f33551f6090 R08: 0000000000000000 R09: 0000000000000000 [ 986.527546][T23286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 986.527629][T23286] R13: 0000000000000000 R14: 00007f33575b5fa0 R15: 00007ffc02456a28 [ 986.527662][T23286] [ 987.347187][T23295] FAULT_INJECTION: forcing a failure. [ 987.347187][T23295] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 987.375390][T23295] CPU: 0 UID: 0 PID: 23295 Comm: syz.0.3588 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) [ 987.375430][T23295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 987.375447][T23295] Call Trace: [ 987.375455][T23295] [ 987.375466][T23295] dump_stack_lvl+0x16c/0x1f0 [ 987.375520][T23295] should_fail_ex+0x512/0x640 [ 987.375560][T23295] _copy_to_user+0x32/0xd0 [ 987.375601][T23295] simple_read_from_buffer+0xcb/0x170 [ 987.375636][T23295] proc_fail_nth_read+0x197/0x270 [ 987.375667][T23295] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 987.375699][T23295] ? security_file_permission+0x71/0x210 [ 987.375742][T23295] ? rw_verify_area+0xcf/0x680 [ 987.375781][T23295] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 987.375817][T23295] vfs_read+0x1e4/0xc60 [ 987.375861][T23295] ? __pfx___mutex_lock+0x10/0x10 [ 987.375910][T23295] ? __pfx_vfs_read+0x10/0x10 [ 987.375952][T23295] ? __fget_files+0x204/0x3c0 [ 987.375992][T23295] ? rcu_is_watching+0x12/0xc0 [ 987.376033][T23295] ? __fget_files+0x20e/0x3c0 [ 987.376081][T23295] ksys_read+0x12a/0x250 [ 987.376125][T23295] ? __pfx_ksys_read+0x10/0x10 [ 987.376175][T23295] do_syscall_64+0xcd/0x490 [ 987.376226][T23295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 987.376259][T23295] RIP: 0033:0x7f335738d33c [ 987.376284][T23295] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 987.376315][T23295] RSP: 002b:00007f33551f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 987.376373][T23295] RAX: ffffffffffffffda RBX: 00007f33575b5fa0 RCX: 00007f335738d33c [ 987.376395][T23295] RDX: 000000000000000f RSI: 00007f33551f60a0 RDI: 0000000000000004 [ 987.376416][T23295] RBP: 00007f33551f6090 R08: 0000000000000000 R09: 0000000000000000 [ 987.376435][T23295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 987.376455][T23295] R13: 0000000000000000 R14: 00007f33575b5fa0 R15: 00007ffc02456a28 [ 987.376491][T23295] [ 988.549702][T23303] FAULT_INJECTION: forcing a failure. [ 988.549702][T23303] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 988.609396][T23303] CPU: 1 UID: 0 PID: 23303 Comm: syz.0.3590 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) [ 988.609448][T23303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 988.609463][T23303] Call Trace: [ 988.609471][T23303] [ 988.609479][T23303] dump_stack_lvl+0x16c/0x1f0 [ 988.609518][T23303] should_fail_ex+0x512/0x640 [ 988.609554][T23303] core_sys_select+0x4c5/0xc10 [ 988.609588][T23303] ? __pfx_core_sys_select+0x10/0x10 [ 988.609621][T23303] ? proc_fail_nth_write+0x9f/0x250 [ 988.609658][T23303] ? __fget_files+0x204/0x3c0 [ 988.609689][T23303] ? rcu_is_watching+0x12/0xc0 [ 988.609713][T23303] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 988.609754][T23303] kern_select+0x15d/0x1e0 [ 988.609783][T23303] ? __pfx_kern_select+0x10/0x10 [ 988.609815][T23303] ? __pfx_ksys_write+0x10/0x10 [ 988.609850][T23303] __x64_sys_select+0xbd/0x160 [ 988.609881][T23303] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 988.609918][T23303] do_syscall_64+0xcd/0x490 [ 988.609955][T23303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 988.609979][T23303] RIP: 0033:0x7f335738e929 [ 988.609997][T23303] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 988.610020][T23303] RSP: 002b:00007f33551d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 988.610043][T23303] RAX: ffffffffffffffda RBX: 00007f33575b6080 RCX: 00007f335738e929 [ 988.610058][T23303] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000e [ 988.610073][T23303] RBP: 00007f33551d5090 R08: 0000000000000000 R09: 0000000000000000 [ 988.610088][T23303] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 988.610102][T23303] R13: 0000000000000000 R14: 00007f33575b6080 R15: 00007ffc02456a28 [ 988.610124][T23303] [ 988.791037][ C1] vkms_vblank_simulate: vblank timer overrun [ 990.798179][T23343] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3600'. [ 990.820147][T23343] team0: Port device team_slave_1 removed [ 990.852762][T23349] cifs: Unknown parameter 'no+ 1`rsFn)aHāh`9kA}1\D@.ZCg^' [ 990.871575][T23349] FAULT_INJECTION: forcing a failure. [ 990.871575][T23349] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 990.911396][T23349] CPU: 1 UID: 0 PID: 23349 Comm: syz.0.3602 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) [ 990.911440][T23349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 990.911461][T23349] Call Trace: [ 990.911471][T23349] [ 990.911483][T23349] dump_stack_lvl+0x16c/0x1f0 [ 990.911538][T23349] should_fail_ex+0x512/0x640 [ 990.911587][T23349] _copy_to_user+0x32/0xd0 [ 990.911637][T23349] simple_read_from_buffer+0xcb/0x170 [ 990.911676][T23349] proc_fail_nth_read+0x197/0x270 [ 990.911712][T23349] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 990.911748][T23349] ? security_file_permission+0x71/0x210 [ 990.911790][T23349] ? rw_verify_area+0xcf/0x680 [ 990.911828][T23349] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 990.911863][T23349] vfs_read+0x1e4/0xc60 [ 990.911908][T23349] ? __pfx___mutex_lock+0x10/0x10 [ 990.911957][T23349] ? __pfx_vfs_read+0x10/0x10 [ 990.911999][T23349] ? __fget_files+0x204/0x3c0 [ 990.912040][T23349] ? rcu_is_watching+0x12/0xc0 [ 990.912077][T23349] ? __fget_files+0x20e/0x3c0 [ 990.912127][T23349] ksys_read+0x12a/0x250 [ 990.912171][T23349] ? __pfx_ksys_read+0x10/0x10 [ 990.912232][T23349] do_syscall_64+0xcd/0x490 [ 990.912284][T23349] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 990.912315][T23349] RIP: 0033:0x7f335738d33c [ 990.912337][T23349] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 990.912366][T23349] RSP: 002b:00007f33551f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 990.912397][T23349] RAX: ffffffffffffffda RBX: 00007f33575b5fa0 RCX: 00007f335738d33c [ 990.912423][T23349] RDX: 000000000000000f RSI: 00007f33551f60a0 RDI: 0000000000000004 [ 990.912443][T23349] RBP: 00007f33551f6090 R08: 0000000000000000 R09: 0000000000000000 [ 990.912463][T23349] R10: 0000000000008002 R11: 0000000000000246 R12: 0000000000000002 [ 990.912482][T23349] R13: 0000000000000000 R14: 00007f33575b5fa0 R15: 00007ffc02456a28 [ 990.912511][T23349] [ 991.121300][ C1] vkms_vblank_simulate: vblank timer overrun [ 992.536138][T23401] FAULT_INJECTION: forcing a failure. [ 992.536138][T23401] name failslab, interval 1, probability 0, space 0, times 0 [ 992.571957][ T31] audit: type=1804 audit(4294967305.590:47): pid=23404 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.3615" name="/newroot/265/file0" dev="tmpfs" ino=1411 res=1 errno=0 [ 992.594738][ T31] audit: type=1800 audit(4294967305.590:48): pid=23404 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3615" name="file0" dev="tmpfs" ino=1411 res=0 errno=0 [ 992.615597][T23401] CPU: 0 UID: 0 PID: 23401 Comm: syz.3.3612 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) [ 992.615637][T23401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 992.615657][T23401] Call Trace: [ 992.615668][T23401] [ 992.615680][T23401] dump_stack_lvl+0x16c/0x1f0 [ 992.615732][T23401] should_fail_ex+0x512/0x640 [ 992.615778][T23401] should_failslab+0xc2/0x120 [ 992.615805][T23401] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 992.615843][T23401] ? __alloc_skb+0x2b2/0x380 [ 992.615877][T23401] __alloc_skb+0x2b2/0x380 [ 992.615933][T23401] ? __pfx___alloc_skb+0x10/0x10 [ 992.615967][T23401] ? aa_file_perm+0x4c7/0xfb0 [ 992.616000][T23401] new_skb+0x21/0x230 [ 992.616038][T23401] aoecmd_cfg+0x21c/0x7d0 [ 992.616062][T23401] ? __pfx_aoecmd_cfg+0x10/0x10 [ 992.616088][T23401] ? apparmor_file_permission+0x251/0x400 [ 992.616115][T23401] ? __pfx_aoechr_write+0x10/0x10 [ 992.616149][T23401] ? aoechr_write+0x120/0x160 [ 992.616183][T23401] aoechr_write+0x120/0x160 [ 992.616218][T23401] vfs_writev+0x5dc/0xde0 [ 992.616251][T23401] ? __pfx_vfs_writev+0x10/0x10 [ 992.616281][T23401] ? preempt_count_add+0x76/0x150 [ 992.616324][T23401] ? ksys_write+0x190/0x250 [ 992.616354][T23401] ? rcu_is_watching+0x12/0xc0 [ 992.616378][T23401] ? rcu_is_watching+0x12/0xc0 [ 992.616405][T23401] ? __fget_files+0x20e/0x3c0 [ 992.616435][T23401] ? __fget_files+0x140/0x3c0 [ 992.616468][T23401] ? do_writev+0x132/0x340 [ 992.616496][T23401] do_writev+0x132/0x340 [ 992.616525][T23401] ? __pfx_do_writev+0x10/0x10 [ 992.616559][T23401] do_syscall_64+0xcd/0x490 [ 992.616596][T23401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 992.616620][T23401] RIP: 0033:0x7fd174f8e929 [ 992.616638][T23401] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 992.616661][T23401] RSP: 002b:00007fd172db4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 992.616684][T23401] RAX: ffffffffffffffda RBX: 00007fd1751b6160 RCX: 00007fd174f8e929 [ 992.616700][T23401] RDX: 0000000000000004 RSI: 0000200000000140 RDI: 000000000000000a [ 992.616715][T23401] RBP: 00007fd172db4090 R08: 0000000000000000 R09: 0000000000000000 [ 992.616729][T23401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 992.616744][T23401] R13: 0000000000000000 R14: 00007fd1751b6160 R15: 00007ffe637bcd88 [ 992.616766][T23401] [ 992.616860][T23401] aoe: skb alloc failure [ 992.867599][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.876853][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 992.895825][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.902277][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 992.924774][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.932776][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 992.945426][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.956779][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.837947][T23425] cifs: Unknown parameter 'no+ 1`rsFn)aHāh`9kA}1\D@.ZCg^' [ 994.972271][T23451] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input46 [ 995.327470][T23461] openvswitch: netlink: Key type 97 is out of range max 32 [ 995.536268][T23457] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input47 [ 995.658667][T23464] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3630'. [ 995.696294][T23464] HfR: entered promiscuous mode [ 995.893356][T23476] FAULT_INJECTION: forcing a failure. [ 995.893356][T23476] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 995.937839][T23476] CPU: 1 UID: 0 PID: 23476 Comm: syz.2.3633 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) [ 995.937879][T23476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 995.937897][T23476] Call Trace: [ 995.937906][T23476] [ 995.937917][T23476] dump_stack_lvl+0x16c/0x1f0 [ 995.937967][T23476] should_fail_ex+0x512/0x640 [ 995.938013][T23476] _copy_to_user+0x32/0xd0 [ 995.938058][T23476] simple_read_from_buffer+0xcb/0x170 [ 995.938093][T23476] proc_fail_nth_read+0x197/0x270 [ 995.938131][T23476] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 995.938161][T23476] ? security_file_permission+0x71/0x210 [ 995.938198][T23476] ? rw_verify_area+0xcf/0x680 [ 995.938231][T23476] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 995.938261][T23476] vfs_read+0x1e4/0xc60 [ 995.938298][T23476] ? __pfx___mutex_lock+0x10/0x10 [ 995.938339][T23476] ? __pfx_vfs_read+0x10/0x10 [ 995.938374][T23476] ? __fget_files+0x204/0x3c0 [ 995.938409][T23476] ? rcu_is_watching+0x12/0xc0 [ 995.938439][T23476] ? __fget_files+0x20e/0x3c0 [ 995.938478][T23476] ksys_read+0x12a/0x250 [ 995.938514][T23476] ? __pfx_ksys_read+0x10/0x10 [ 995.938556][T23476] do_syscall_64+0xcd/0x490 [ 995.938597][T23476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 995.938630][T23476] RIP: 0033:0x7fd0c0f8d33c [ 995.938651][T23476] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 995.938678][T23476] RSP: 002b:00007fd0c1e51030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 995.938705][T23476] RAX: ffffffffffffffda RBX: 00007fd0c11b5fa0 RCX: 00007fd0c0f8d33c [ 995.938724][T23476] RDX: 000000000000000f RSI: 00007fd0c1e510a0 RDI: 0000000000000004 [ 995.938740][T23476] RBP: 00007fd0c1e51090 R08: 0000000000000000 R09: 0000000000000000 [ 995.938757][T23476] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 995.938774][T23476] R13: 0000000000000000 R14: 00007fd0c11b5fa0 R15: 00007ffdfe31bb18 [ 995.938800][T23476] [ 996.138780][ C1] vkms_vblank_simulate: vblank timer overrun [ 996.338714][T23491] FAULT_INJECTION: forcing a failure. [ 996.338714][T23491] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 996.355832][T23491] CPU: 1 UID: 0 PID: 23491 Comm: syz.2.3637 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) [ 996.355877][T23491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 996.355895][T23491] Call Trace: [ 996.355905][T23491] [ 996.355917][T23491] dump_stack_lvl+0x16c/0x1f0 [ 996.355969][T23491] should_fail_ex+0x512/0x640 [ 996.356023][T23491] _copy_from_user+0x2e/0xd0 [ 996.356074][T23491] copy_msghdr_from_user+0x98/0x160 [ 996.356123][T23491] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 996.356170][T23491] ? __pfx_kstrtouint+0x10/0x10 [ 996.356209][T23491] ? kstrtouint_from_user+0x13c/0x1d0 [ 996.356249][T23491] ___sys_sendmsg+0xfe/0x1d0 [ 996.356294][T23491] ? __pfx____sys_sendmsg+0x10/0x10 [ 996.356346][T23491] ? rcu_is_watching+0x12/0xc0 [ 996.356391][T23491] __sys_sendmsg+0x16d/0x220 [ 996.356438][T23491] ? __pfx___sys_sendmsg+0x10/0x10 [ 996.356498][T23491] do_syscall_64+0xcd/0x490 [ 996.356547][T23491] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 996.356580][T23491] RIP: 0033:0x7fd0c0f8e929 [ 996.356605][T23491] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 996.356637][T23491] RSP: 002b:00007fd0c1e51038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 996.356669][T23491] RAX: ffffffffffffffda RBX: 00007fd0c11b5fa0 RCX: 00007fd0c0f8e929 [ 996.356691][T23491] RDX: 0000000000008000 RSI: 0000200000001b80 RDI: 0000000000000003 [ 996.356712][T23491] RBP: 00007fd0c1e51090 R08: 0000000000000000 R09: 0000000000000000 [ 996.356742][T23491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 996.356761][T23491] R13: 0000000000000000 R14: 00007fd0c11b5fa0 R15: 00007ffdfe31bb18 [ 996.356793][T23491] [ 996.534438][ C1] vkms_vblank_simulate: vblank timer overrun [ 996.833867][T23486] FAULT_INJECTION: forcing a failure. [ 996.833867][T23486] name fail_futex, interval 1, probability 0, space 0, times 0 [ 996.859100][T23486] CPU: 1 UID: 0 PID: 23486 Comm: syz.3.3636 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) [ 996.859146][T23486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 996.859166][T23486] Call Trace: [ 996.859176][T23486] [ 996.859189][T23486] dump_stack_lvl+0x16c/0x1f0 [ 996.859244][T23486] should_fail_ex+0x512/0x640 [ 996.859291][T23486] get_futex_key+0x1d0/0x1540 [ 996.859327][T23486] ? rcu_is_watching+0x12/0xc0 [ 996.859360][T23486] ? __pfx_get_futex_key+0x10/0x10 [ 996.859398][T23486] ? pick_eevdf+0x3be/0x5b0 [ 996.859433][T23486] ? psi_group_change+0x6dc/0xd20 [ 996.859477][T23486] futex_wait_setup+0x9d/0x550 [ 996.859526][T23486] __futex_wait+0x194/0x2f0 [ 996.859571][T23486] ? __pfx___futex_wait+0x10/0x10 [ 996.859615][T23486] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 996.859666][T23486] ? __pfx_futex_wake_mark+0x10/0x10 [ 996.859714][T23486] ? futex_wake+0x456/0x530 [ 996.859760][T23486] futex_wait+0xe8/0x380 [ 996.859804][T23486] ? __pfx_futex_wait+0x10/0x10 [ 996.859857][T23486] ? vfs_read+0x23b/0xc60 [ 996.859903][T23486] do_futex+0x229/0x350 [ 996.859939][T23486] ? __pfx_do_futex+0x10/0x10 [ 996.860009][T23486] ? lock_release+0x201/0x2f0 [ 996.860052][T23486] __x64_sys_futex+0x1e0/0x4c0 [ 996.860090][T23486] ? fput+0x70/0xf0 [ 996.860116][T23486] ? __pfx___x64_sys_futex+0x10/0x10 [ 996.860220][T23486] ? ksys_read+0x1ac/0x250 [ 996.860263][T23486] ? __pfx_ksys_read+0x10/0x10 [ 996.860328][T23486] do_syscall_64+0xcd/0x490 [ 996.860375][T23486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 996.860406][T23486] RIP: 0033:0x7fd174f8e929 [ 996.860431][T23486] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 996.860464][T23486] RSP: 002b:00007fd172df60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 996.860495][T23486] RAX: ffffffffffffffda RBX: 00007fd1751b5fa8 RCX: 00007fd174f8e929 [ 996.860517][T23486] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fd1751b5fa8 [ 996.860539][T23486] RBP: 00007fd1751b5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 996.860559][T23486] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd1751b5fac [ 996.860578][T23486] R13: 0000000000000000 R14: 00007ffe637bcca0 R15: 00007ffe637bcd88 [ 996.860606][T23486] [ 997.088691][ C1] vkms_vblank_simulate: vblank timer overrun [ 997.112674][T23503] PM: Image not found (code -6) [ 997.466944][T23486] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 997.473680][T23486] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 997.479900][T23486] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 997.491603][T23486] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 997.665073][T23516] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3643'. [ 997.690595][T23516] HfR: entered promiscuous mode [ 997.748734][T23503] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 997.755330][T23503] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 997.770049][T23522] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3646'. [ 997.783730][T23503] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 997.811488][T23503] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 997.959333][T23530] ieee80211 !PjE r҄y*"l-y–L̓]: Selected rate control algorithm 'minstrel_ht' [ 998.178452][T23539] ieee80211 !PjE r҄y*"l-y–L̓]: Selected rate control algorithm 'minstrel_ht' [ 998.246490][T23542] FAULT_INJECTION: forcing a failure. [ 998.246490][T23542] name failslab, interval 1, probability 0, space 0, times 0 [ 998.259252][T23542] CPU: 1 UID: 0 PID: 23542 Comm: syz.3.3650 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) [ 998.259294][T23542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 998.259314][T23542] Call Trace: [ 998.259325][T23542] [ 998.259337][T23542] dump_stack_lvl+0x16c/0x1f0 [ 998.259390][T23542] should_fail_ex+0x512/0x640 [ 998.259440][T23542] ? tomoyo_encode2+0x100/0x3e0 [ 998.259485][T23542] should_failslab+0xc2/0x120 [ 998.259516][T23542] __kmalloc_noprof+0xd2/0x510 [ 998.259565][T23542] ? d_absolute_path+0x136/0x1a0 [ 998.259601][T23542] tomoyo_encode2+0x100/0x3e0 [ 998.259647][T23542] tomoyo_encode+0x29/0x50 [ 998.259690][T23542] tomoyo_realpath_from_path+0x18f/0x6e0 [ 998.259744][T23542] tomoyo_path_number_perm+0x245/0x580 [ 998.259783][T23542] ? tomoyo_path_number_perm+0x237/0x580 [ 998.259835][T23542] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 998.259881][T23542] ? preempt_count_add+0x76/0x150 [ 998.259942][T23542] ? rcu_is_watching+0x12/0xc0 [ 998.259975][T23542] ? __fget_files+0x204/0x3c0 [ 998.260018][T23542] ? hook_file_ioctl_common+0x145/0x410 [ 998.260053][T23542] ? lock_release+0x201/0x2f0 [ 998.260098][T23542] ? __fget_files+0x20e/0x3c0 [ 998.260146][T23542] security_file_ioctl+0x9b/0x240 [ 998.260188][T23542] __x64_sys_ioctl+0xb7/0x210 [ 998.260227][T23542] do_syscall_64+0xcd/0x490 [ 998.260279][T23542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 998.260313][T23542] RIP: 0033:0x7fd174f8e929 [ 998.260339][T23542] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 998.260371][T23542] RSP: 002b:00007fd172d93038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 998.260402][T23542] RAX: ffffffffffffffda RBX: 00007fd1751b6240 RCX: 00007fd174f8e929 [ 998.260423][T23542] RDX: 00002000000001c0 RSI: fffffff7effffd01 RDI: 0000000000000006 [ 998.260444][T23542] RBP: 00007fd172d93090 R08: 0000000000000000 R09: 0000000000000000 [ 998.260463][T23542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 998.260482][T23542] R13: 0000000000000000 R14: 00007fd1751b6240 R15: 00007ffe637bcd88 [ 998.260513][T23542] [ 998.260543][T23542] ERROR: Out of memory at tomoyo_realpath_from_path. [ 998.271760][T23539] debugfs: Directory '!PjE r҄y*"l-y–L̓]' with parent 'ieee80211' already present! [ 998.599081][T23545] PM: Image not found (code -6) [ 998.608644][T23547] random: crng reseeded on system resumption [ 998.654396][T23547] PM: hibernation: Marking nosave pages: [mem 0x00000000-0x00000fff] [ 998.673065][T23547] PM: hibernation: Marking nosave pages: [mem 0x0009f000-0x000fffff] [ 998.686465][T23547] PM: hibernation: Marking nosave pages: [mem 0xbfffd000-0xffffffff] [ 998.696752][T23547] PM: hibernation: Basic memory bitmaps created [ 998.708252][T23540] PM: hibernation: Basic memory bitmaps freed [ 998.902486][T23561] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3656'. [ 998.914033][T23561] openvswitch: HfR: Dropping previously announced user features [ 999.259640][T23569] netlink: 186 bytes leftover after parsing attributes in process `syz.1.3659'. [ 999.741479][ T5829] Bluetooth: hci0: command 0x0406 tx timeout [ 999.821469][ T5829] Bluetooth: hci2: command 0x0406 tx timeout [ 999.827582][ T5829] Bluetooth: hci1: command 0x0406 tx timeout [ 999.834011][ T5832] Bluetooth: hci4: command 0x0406 tx timeout [ 1001.101843][T23606] FAULT_INJECTION: forcing a failure. [ 1001.101843][T23606] name failslab, interval 1, probability 0, space 0, times 0 [ 1001.173355][T23606] CPU: 0 UID: 0 PID: 23606 Comm: syz.2.3667 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) [ 1001.173399][T23606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1001.173419][T23606] Call Trace: [ 1001.173429][T23606] [ 1001.173441][T23606] dump_stack_lvl+0x16c/0x1f0 [ 1001.173495][T23606] should_fail_ex+0x512/0x640 [ 1001.173545][T23606] should_failslab+0xc2/0x120 [ 1001.173576][T23606] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 1001.173636][T23606] ? __dentry_kill+0x521/0x600 [ 1001.173665][T23606] ? __d_alloc+0x31/0xaa0 [ 1001.173718][T23606] __d_alloc+0x31/0xaa0 [ 1001.173763][T23606] ? _raw_spin_unlock+0x28/0x50 [ 1001.173808][T23606] d_alloc+0x4a/0x1e0 [ 1001.173858][T23606] lookup_one_qstr_excl_raw.part.0+0x96/0x160 [ 1001.173895][T23606] ? lookup_dcache+0x66/0x170 [ 1001.173930][T23606] lookup_one_qstr_excl+0x3e/0x120 [ 1001.173967][T23606] filename_create+0x1e7/0x4a0 [ 1001.174007][T23606] ? __pfx_filename_create+0x10/0x10 [ 1001.174049][T23606] ? rcu_is_watching+0x12/0xc0 [ 1001.174082][T23606] ? __might_fault+0x13b/0x190 [ 1001.174127][T23606] ? rcu_is_watching+0x12/0xc0 [ 1001.174158][T23606] ? __might_fault+0xe3/0x190 [ 1001.174202][T23606] ? lock_release+0x201/0x2f0 [ 1001.174247][T23606] do_mkdirat+0xaa/0x3e0 [ 1001.174294][T23606] ? __pfx_do_mkdirat+0x10/0x10 [ 1001.174343][T23606] ? getname_flags.part.0+0x1c5/0x550 [ 1001.174381][T23606] __x64_sys_mkdir+0xef/0x140 [ 1001.174430][T23606] do_syscall_64+0xcd/0x490 [ 1001.174481][T23606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1001.174516][T23606] RIP: 0033:0x7fd0c0f8e929 [ 1001.174541][T23606] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1001.174574][T23606] RSP: 002b:00007fd0c1e51038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 1001.174611][T23606] RAX: ffffffffffffffda RBX: 00007fd0c11b5fa0 RCX: 00007fd0c0f8e929 [ 1001.174633][T23606] RDX: 0000000000000000 RSI: 00000000000008cd RDI: 0000200000000000 [ 1001.174655][T23606] RBP: 00007fd0c1e51090 R08: 0000000000000000 R09: 0000000000000000 [ 1001.174676][T23606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1001.174697][T23606] R13: 0000000000000001 R14: 00007fd0c11b5fa0 R15: 00007ffdfe31bb18 [ 1001.174728][T23606] [ 1001.927329][T23613] FAULT_INJECTION: forcing a failure. [ 1001.927329][T23613] name failslab, interval 1, probability 0, space 0, times 0 [ 1001.972985][T23613] CPU: 0 UID: 0 PID: 23613 Comm: syz.0.3672 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) [ 1001.973028][T23613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1001.973046][T23613] Call Trace: [ 1001.973057][T23613] [ 1001.973069][T23613] dump_stack_lvl+0x16c/0x1f0 [ 1001.973121][T23613] should_fail_ex+0x512/0x640 [ 1001.973171][T23613] should_failslab+0xc2/0x120 [ 1001.973202][T23613] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1001.973251][T23613] ? skb_clone+0x190/0x3f0 [ 1001.973311][T23613] skb_clone+0x190/0x3f0 [ 1001.973361][T23613] netlink_deliver_tap+0xabd/0xd30 [ 1001.973398][T23613] netlink_unicast+0x5df/0x7f0 [ 1001.973435][T23613] ? __pfx_netlink_unicast+0x10/0x10 [ 1001.973476][T23613] netlink_sendmsg+0x8d1/0xdd0 [ 1001.973512][T23613] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1001.973556][T23613] ____sys_sendmsg+0xa98/0xc70 [ 1001.973594][T23613] ? copy_msghdr_from_user+0x10a/0x160 [ 1001.973643][T23613] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1001.973679][T23613] ? __pfx_kstrtouint+0x10/0x10 [ 1001.973721][T23613] ? kstrtouint_from_user+0x13c/0x1d0 [ 1001.973762][T23613] ___sys_sendmsg+0x134/0x1d0 [ 1001.973812][T23613] ? __pfx____sys_sendmsg+0x10/0x10 [ 1001.973869][T23613] ? rcu_is_watching+0x12/0xc0 [ 1001.973916][T23613] __sys_sendmsg+0x16d/0x220 [ 1001.973965][T23613] ? __pfx___sys_sendmsg+0x10/0x10 [ 1001.974028][T23613] do_syscall_64+0xcd/0x490 [ 1001.974080][T23613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1001.974114][T23613] RIP: 0033:0x7f335738e929 [ 1001.974139][T23613] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1001.974172][T23613] RSP: 002b:00007f33551f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1001.974203][T23613] RAX: ffffffffffffffda RBX: 00007f33575b5fa0 RCX: 00007f335738e929 [ 1001.974224][T23613] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1001.974245][T23613] RBP: 00007f33551f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1001.974271][T23613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1001.974291][T23613] R13: 0000000000000000 R14: 00007f33575b5fa0 R15: 00007ffc02456a28 [ 1001.974322][T23613] [ 1003.069156][T23634] netlink: 39 bytes leftover after parsing attributes in process `syz.3.3677'. [ 1003.593205][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1003.603247][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1004.803753][T23668] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3685'. [ 1004.863677][T23668] FAULT_INJECTION: forcing a failure. [ 1004.863677][T23668] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1004.882263][T23668] CPU: 1 UID: 0 PID: 23668 Comm: syz.0.3685 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) [ 1004.882315][T23668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1004.882336][T23668] Call Trace: [ 1004.882347][T23668] [ 1004.882359][T23668] dump_stack_lvl+0x16c/0x1f0 [ 1004.882413][T23668] should_fail_ex+0x512/0x640 [ 1004.882461][T23668] _copy_to_user+0x32/0xd0 [ 1004.882509][T23668] simple_read_from_buffer+0xcb/0x170 [ 1004.882549][T23668] proc_fail_nth_read+0x197/0x270 [ 1004.882584][T23668] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1004.882618][T23668] ? security_file_permission+0x71/0x210 [ 1004.882657][T23668] ? rw_verify_area+0xcf/0x680 [ 1004.882695][T23668] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1004.882728][T23668] vfs_read+0x1e4/0xc60 [ 1004.882773][T23668] ? __pfx___mutex_lock+0x10/0x10 [ 1004.882823][T23668] ? __pfx_vfs_read+0x10/0x10 [ 1004.882863][T23668] ? __fget_files+0x204/0x3c0 [ 1004.882906][T23668] ? rcu_is_watching+0x12/0xc0 [ 1004.882939][T23668] ? __fget_files+0x20e/0x3c0 [ 1004.882985][T23668] ksys_read+0x12a/0x250 [ 1004.883026][T23668] ? __pfx_ksys_read+0x10/0x10 [ 1004.883072][T23668] do_syscall_64+0xcd/0x490 [ 1004.883120][T23668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1004.883154][T23668] RIP: 0033:0x7f335738d33c [ 1004.883184][T23668] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1004.883213][T23668] RSP: 002b:00007f33551d5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1004.883244][T23668] RAX: ffffffffffffffda RBX: 00007f33575b6080 RCX: 00007f335738d33c [ 1004.883267][T23668] RDX: 000000000000000f RSI: 00007f33551d50a0 RDI: 0000000000000005 [ 1004.883294][T23668] RBP: 00007f33551d5090 R08: 0000000000000000 R09: 0000000000000000 [ 1004.883314][T23668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1004.883333][T23668] R13: 0000000000000001 R14: 00007f33575b6080 R15: 00007ffc02456a28 [ 1004.883364][T23668] [ 1005.360067][T23682] FAULT_INJECTION: forcing a failure. [ 1005.360067][T23682] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1005.391989][T23682] CPU: 0 UID: 0 PID: 23682 Comm: syz.3.3686 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) [ 1005.392033][T23682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1005.392070][T23682] Call Trace: [ 1005.392080][T23682] [ 1005.392092][T23682] dump_stack_lvl+0x16c/0x1f0 [ 1005.392147][T23682] should_fail_ex+0x512/0x640 [ 1005.392195][T23682] _copy_to_user+0x32/0xd0 [ 1005.392245][T23682] simple_read_from_buffer+0xcb/0x170 [ 1005.392288][T23682] proc_fail_nth_read+0x197/0x270 [ 1005.392321][T23682] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1005.392358][T23682] ? security_file_permission+0x71/0x210 [ 1005.392401][T23682] ? rw_verify_area+0xcf/0x680 [ 1005.392440][T23682] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1005.392477][T23682] vfs_read+0x1e4/0xc60 [ 1005.392523][T23682] ? __pfx___mutex_lock+0x10/0x10 [ 1005.392575][T23682] ? __pfx_vfs_read+0x10/0x10 [ 1005.392619][T23682] ? __fget_files+0x204/0x3c0 [ 1005.392661][T23682] ? rcu_is_watching+0x12/0xc0 [ 1005.392697][T23682] ? __fget_files+0x20e/0x3c0 [ 1005.392746][T23682] ksys_read+0x12a/0x250 [ 1005.392789][T23682] ? __pfx_ksys_read+0x10/0x10 [ 1005.392840][T23682] do_syscall_64+0xcd/0x490 [ 1005.392891][T23682] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1005.392925][T23682] RIP: 0033:0x7fd174f8d33c [ 1005.392949][T23682] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1005.392982][T23682] RSP: 002b:00007fd172dd5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1005.393013][T23682] RAX: ffffffffffffffda RBX: 00007fd1751b6080 RCX: 00007fd174f8d33c [ 1005.393036][T23682] RDX: 000000000000000f RSI: 00007fd172dd50a0 RDI: 0000000000000004 [ 1005.393063][T23682] RBP: 00007fd172dd5090 R08: 0000000000000000 R09: 0000000000000000 [ 1005.393083][T23682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1005.393102][T23682] R13: 0000000000000000 R14: 00007fd1751b6080 R15: 00007ffe637bcd88 [ 1005.393133][T23682] [ 1005.599092][ C0] vkms_vblank_simulate: vblank timer overrun [ 1005.774723][T23686] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3690'. [ 1005.803753][T23683] FAULT_INJECTION: forcing a failure. [ 1005.803753][T23683] name failslab, interval 1, probability 0, space 0, times 0 [ 1005.846211][T23683] CPU: 1 UID: 0 PID: 23683 Comm: syz.0.3689 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) [ 1005.846267][T23683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1005.846292][T23683] Call Trace: [ 1005.846304][T23683] [ 1005.846319][T23683] dump_stack_lvl+0x16c/0x1f0 [ 1005.846383][T23683] should_fail_ex+0x512/0x640 [ 1005.846438][T23683] ? tracing_open+0x2ba/0xf90 [ 1005.846477][T23683] should_failslab+0xc2/0x120 [ 1005.846512][T23683] __kmalloc_noprof+0xd2/0x510 [ 1005.846572][T23683] tracing_open+0x2ba/0xf90 [ 1005.846612][T23683] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 1005.846668][T23683] do_dentry_open+0x744/0x1c10 [ 1005.846724][T23683] ? __pfx_tracing_open+0x10/0x10 [ 1005.846769][T23683] vfs_open+0x82/0x3f0 [ 1005.846809][T23683] path_openat+0x1de4/0x2cb0 [ 1005.846870][T23683] ? __pfx_path_openat+0x10/0x10 [ 1005.846929][T23683] do_filp_open+0x20b/0x470 [ 1005.846996][T23683] ? __pfx_do_filp_open+0x10/0x10 [ 1005.847068][T23683] ? alloc_fd+0x471/0x7d0 [ 1005.847123][T23683] do_sys_openat2+0x11b/0x1d0 [ 1005.847164][T23683] ? __pfx_do_sys_openat2+0x10/0x10 [ 1005.847205][T23683] ? __sock_release+0x20b/0x270 [ 1005.847247][T23683] __x64_sys_openat+0x174/0x210 [ 1005.847291][T23683] ? __pfx___x64_sys_openat+0x10/0x10 [ 1005.847345][T23683] do_syscall_64+0xcd/0x490 [ 1005.847404][T23683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1005.847444][T23683] RIP: 0033:0x7f335738e929 [ 1005.847473][T23683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1005.847512][T23683] RSP: 002b:00007f33551d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1005.847548][T23683] RAX: ffffffffffffffda RBX: 00007f33575b6080 RCX: 00007f335738e929 [ 1005.847573][T23683] RDX: 0000000000000640 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 1005.847598][T23683] RBP: 00007f3357410b39 R08: 0000000000000000 R09: 0000000000000000 [ 1005.847623][T23683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1005.847646][T23683] R13: 0000000000000000 R14: 00007f33575b6080 R15: 00007ffc02456a28 [ 1005.847681][T23683] [ 1006.103830][T23686] HfR: entered promiscuous mode [ 1006.325036][T23696] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input48 [ 1006.648244][T23701] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3695'. [ 1009.623901][T23765] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3710'. [ 1009.697864][T23766] hub 8-0:1.0: Interface 0 is not authorized for usage [ 1009.723136][T23766] usbtest 8-0:1.0: Interface 0 is not authorized for usage [ 1009.749194][T23765] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3710'. [ 1010.180984][T23776] FAULT_INJECTION: forcing a failure. [ 1010.180984][T23776] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1010.198342][T23776] CPU: 1 UID: 0 PID: 23776 Comm: syz.2.3714 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) [ 1010.198389][T23776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1010.198409][T23776] Call Trace: [ 1010.198421][T23776] [ 1010.198435][T23776] dump_stack_lvl+0x16c/0x1f0 [ 1010.198490][T23776] should_fail_ex+0x512/0x640 [ 1010.198541][T23776] get_futex_key+0x1d0/0x1540 [ 1010.198593][T23776] ? __pfx_get_futex_key+0x10/0x10 [ 1010.198632][T23776] ? lock_release+0x201/0x2f0 [ 1010.198683][T23776] futex_wake+0xea/0x530 [ 1010.198727][T23776] ? futex_wait+0x120/0x380 [ 1010.198774][T23776] ? __pfx_futex_wait+0x10/0x10 [ 1010.198823][T23776] ? __pfx_futex_wake+0x10/0x10 [ 1010.198870][T23776] ? alloc_fd+0x471/0x7d0 [ 1010.198912][T23776] ? rcu_is_watching+0x12/0xc0 [ 1010.198945][T23776] ? lock_release+0x201/0x2f0 [ 1010.198989][T23776] do_futex+0x1e3/0x350 [ 1010.199030][T23776] ? __pfx_do_futex+0x10/0x10 [ 1010.199069][T23776] ? lock_release+0x201/0x2f0 [ 1010.199113][T23776] ? do_raw_spin_unlock+0x172/0x230 [ 1010.199167][T23776] __x64_sys_futex+0x1e0/0x4c0 [ 1010.199210][T23776] ? __pfx___x64_sys_futex+0x10/0x10 [ 1010.199252][T23776] ? xfd_validate_state+0x61/0x180 [ 1010.199298][T23776] ? __pfx_ksys_write+0x10/0x10 [ 1010.199353][T23776] do_syscall_64+0xcd/0x490 [ 1010.199407][T23776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1010.199442][T23776] RIP: 0033:0x7fd0c0f8e929 [ 1010.199467][T23776] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1010.199501][T23776] RSP: 002b:00007fd0c1e510e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1010.199535][T23776] RAX: ffffffffffffffda RBX: 00007fd0c11b5fa8 RCX: 00007fd0c0f8e929 [ 1010.199557][T23776] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fd0c11b5fac [ 1010.199580][T23776] RBP: 00007fd0c11b5fa0 R08: 00007fd0c1e52000 R09: 0000000000000000 [ 1010.199617][T23776] R10: ffffffffffffffff R11: 0000000000000246 R12: 00007fd0c11b5fac [ 1010.199639][T23776] R13: 0000000000000000 R14: 00007ffdfe31ba30 R15: 00007ffdfe31bb18 [ 1010.199671][T23776] [ 1010.973525][T23794] FAULT_INJECTION: forcing a failure. [ 1010.973525][T23794] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1011.307342][T23794] CPU: 0 UID: 0 PID: 23794 Comm: syz.2.3718 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) [ 1011.307386][T23794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1011.307409][T23794] Call Trace: [ 1011.307421][T23794] [ 1011.307433][T23794] dump_stack_lvl+0x16c/0x1f0 [ 1011.307491][T23794] should_fail_ex+0x512/0x640 [ 1011.307541][T23794] should_fail_alloc_page+0xe7/0x130 [ 1011.307574][T23794] prepare_alloc_pages+0x3c2/0x610 [ 1011.307615][T23794] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 1011.307664][T23794] ? copy_splice_read+0x1a8/0xba0 [ 1011.307700][T23794] ? stack_trace_save+0x8e/0xc0 [ 1011.307735][T23794] ? __pfx_stack_trace_save+0x10/0x10 [ 1011.307769][T23794] ? stack_depot_save_flags+0x28/0xa40 [ 1011.307816][T23794] ? lock_release+0x201/0x2f0 [ 1011.307855][T23794] ? bpf_ksym_find+0x124/0x1c0 [ 1011.307890][T23794] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1011.307936][T23794] ? kasan_save_stack+0x33/0x60 [ 1011.307981][T23794] ? __kasan_kmalloc+0xaa/0xb0 [ 1011.308025][T23794] ? copy_splice_read+0x1a8/0xba0 [ 1011.308062][T23794] ? do_splice_read+0x285/0x370 [ 1011.308098][T23794] ? splice_direct_to_actor+0x2a1/0xa30 [ 1011.308137][T23794] ? do_splice_direct+0x174/0x240 [ 1011.308174][T23794] ? do_sendfile+0xb06/0xe50 [ 1011.308214][T23794] ? __x64_sys_sendfile64+0x1d8/0x220 [ 1011.308243][T23794] ? do_syscall_64+0xcd/0x490 [ 1011.308305][T23794] alloc_pages_bulk_noprof+0x71c/0x1410 [ 1011.308360][T23794] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 1011.308412][T23794] ? trace_kmalloc+0x2b/0xd0 [ 1011.308443][T23794] ? __kmalloc_noprof+0x242/0x510 [ 1011.308503][T23794] copy_splice_read+0x1e1/0xba0 [ 1011.308545][T23794] ? __pfx_copy_splice_read+0x10/0x10 [ 1011.308587][T23794] ? look_up_lock_class+0x59/0x150 [ 1011.308635][T23794] ? lockdep_init_map_type+0x5c/0x280 [ 1011.308679][T23794] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 1011.308725][T23794] ? __pfx_copy_splice_read+0x10/0x10 [ 1011.308764][T23794] do_splice_read+0x285/0x370 [ 1011.308805][T23794] splice_direct_to_actor+0x2a1/0xa30 [ 1011.308849][T23794] ? __pfx_direct_splice_actor+0x10/0x10 [ 1011.308894][T23794] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1011.308942][T23794] do_splice_direct+0x174/0x240 [ 1011.308982][T23794] ? __pfx_do_splice_direct+0x10/0x10 [ 1011.309024][T23794] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1011.309064][T23794] ? bpf_lsm_file_permission+0x9/0x10 [ 1011.309097][T23794] ? security_file_permission+0x71/0x210 [ 1011.309140][T23794] ? rw_verify_area+0xcf/0x680 [ 1011.309180][T23794] do_sendfile+0xb06/0xe50 [ 1011.309226][T23794] ? __pfx_do_sendfile+0x10/0x10 [ 1011.309268][T23794] ? __fget_files+0x20e/0x3c0 [ 1011.309315][T23794] __x64_sys_sendfile64+0x1d8/0x220 [ 1011.309344][T23794] ? ksys_write+0x1ac/0x250 [ 1011.309388][T23794] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1011.309424][T23794] do_syscall_64+0xcd/0x490 [ 1011.309474][T23794] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1011.309513][T23794] RIP: 0033:0x7fd0c0f8e929 [ 1011.309537][T23794] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1011.309568][T23794] RSP: 002b:00007fd0c1e51038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1011.309599][T23794] RAX: ffffffffffffffda RBX: 00007fd0c11b5fa0 RCX: 00007fd0c0f8e929 [ 1011.309621][T23794] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 1011.309640][T23794] RBP: 00007fd0c1e51090 R08: 0000000000000000 R09: 0000000000000000 [ 1011.309660][T23794] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 1011.309679][T23794] R13: 0000000000000000 R14: 00007fd0c11b5fa0 R15: 00007ffdfe31bb18 [ 1011.309708][T23794] [ 1011.923313][T23804] hub 8-0:1.0: Interface 0 is not authorized for usage [ 1011.954467][T23804] usbtest 8-0:1.0: Interface 0 is not authorized for usage [ 1013.068999][T23818] FAULT_INJECTION: forcing a failure. [ 1013.068999][T23818] name failslab, interval 1, probability 0, space 0, times 0 [ 1013.111317][T23818] CPU: 0 UID: 0 PID: 23818 Comm: syz.0.3725 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) [ 1013.111366][T23818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1013.111385][T23818] Call Trace: [ 1013.111395][T23818] [ 1013.111407][T23818] dump_stack_lvl+0x16c/0x1f0 [ 1013.111460][T23818] should_fail_ex+0x512/0x640 [ 1013.111508][T23818] should_failslab+0xc2/0x120 [ 1013.111539][T23818] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1013.111588][T23818] ? security_inode_alloc+0x3b/0x2b0 [ 1013.111626][T23818] security_inode_alloc+0x3b/0x2b0 [ 1013.111660][T23818] inode_init_always_gfp+0xce4/0x1030 [ 1013.111710][T23818] alloc_inode+0x86/0x240 [ 1013.111741][T23818] sock_alloc+0x40/0x280 [ 1013.111773][T23818] sock_create_lite+0x82/0x120 [ 1013.111806][T23818] __netlink_kernel_create+0xbd/0x750 [ 1013.111842][T23818] ? __pfx___netlink_kernel_create+0x10/0x10 [ 1013.111881][T23818] rtnetlink_net_init+0xb9/0x140 [ 1013.111926][T23818] ? __pfx_rtnetlink_net_init+0x10/0x10 [ 1013.111971][T23818] ? lockdep_init_map_type+0x5c/0x280 [ 1013.112015][T23818] ? __pfx_rtnetlink_rcv+0x10/0x10 [ 1013.112057][T23818] ? __pfx_rtnetlink_bind+0x10/0x10 [ 1013.112099][T23818] ? lockdep_init_map_type+0x5c/0x280 [ 1013.112142][T23818] ? debug_mutex_init+0x37/0x70 [ 1013.112169][T23818] ? __pfx_rtnetlink_net_init+0x10/0x10 [ 1013.112206][T23818] ops_init+0x1df/0x5f0 [ 1013.112231][T23818] setup_net+0x1ff/0x510 [ 1013.112253][T23818] ? lockdep_init_map_type+0x5c/0x280 [ 1013.112290][T23818] ? __pfx_setup_net+0x10/0x10 [ 1013.112312][T23818] ? __raw_spin_lock_init+0x3a/0x110 [ 1013.112360][T23818] ? debug_mutex_init+0x37/0x70 [ 1013.112386][T23818] copy_net_ns+0x2a6/0x5f0 [ 1013.112414][T23818] create_new_namespaces+0x3ea/0xa90 [ 1013.112447][T23818] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1013.112478][T23818] ksys_unshare+0x45b/0xa40 [ 1013.112513][T23818] ? __pfx_ksys_unshare+0x10/0x10 [ 1013.112547][T23818] ? ksys_write+0x1ac/0x250 [ 1013.112591][T23818] __x64_sys_unshare+0x31/0x40 [ 1013.112625][T23818] do_syscall_64+0xcd/0x490 [ 1013.112668][T23818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1013.112695][T23818] RIP: 0033:0x7f335738e929 [ 1013.112716][T23818] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1013.112742][T23818] RSP: 002b:00007f33551f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1013.112768][T23818] RAX: ffffffffffffffda RBX: 00007f33575b5fa0 RCX: 00007f335738e929 [ 1013.112787][T23818] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1013.112803][T23818] RBP: 00007f33551f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1013.112820][T23818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1013.112837][T23818] R13: 0000000000000000 R14: 00007f33575b5fa0 R15: 00007ffc02456a28 [ 1013.112863][T23818] [ 1017.865329][T23890] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3742'. [ 1017.941454][T23890] netlink: 120 bytes leftover after parsing attributes in process `syz.1.3742'. [ 1018.339566][T23913] overlayfs: "check_copy_up" module option is obsolete [ 1019.148077][T23922] IPVS: length: 256 != 24 [ 1019.849349][T23943] FAULT_INJECTION: forcing a failure. [ 1019.849349][T23943] name failslab, interval 1, probability 0, space 0, times 0 [ 1019.866118][T23943] CPU: 0 UID: 0 PID: 23943 Comm: syz.3.3754 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) [ 1019.866154][T23943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1019.866169][T23943] Call Trace: [ 1019.866178][T23943] [ 1019.866187][T23943] dump_stack_lvl+0x16c/0x1f0 [ 1019.866229][T23943] should_fail_ex+0x512/0x640 [ 1019.866267][T23943] should_failslab+0xc2/0x120 [ 1019.866290][T23943] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1019.866323][T23943] ? __debugfs_file_get+0x2ad/0x840 [ 1019.866347][T23943] __debugfs_file_get+0x2ad/0x840 [ 1019.866369][T23943] ? __pfx___debugfs_file_get+0x10/0x10 [ 1019.866391][T23943] ? __pfx_apparmor_file_open+0x10/0x10 [ 1019.866421][T23943] ? lock_release+0x201/0x2f0 [ 1019.866452][T23943] ? rcu_is_watching+0x12/0xc0 [ 1019.866477][T23943] full_proxy_open_regular+0x4f/0x360 [ 1019.866503][T23943] do_dentry_open+0x744/0x1c10 [ 1019.866539][T23943] ? __pfx_full_proxy_open_regular+0x10/0x10 [ 1019.866567][T23943] vfs_open+0x82/0x3f0 [ 1019.866593][T23943] path_openat+0x1de4/0x2cb0 [ 1019.866631][T23943] ? __pfx_path_openat+0x10/0x10 [ 1019.866669][T23943] do_filp_open+0x20b/0x470 [ 1019.866703][T23943] ? __pfx_do_filp_open+0x10/0x10 [ 1019.866747][T23943] ? alloc_fd+0x471/0x7d0 [ 1019.866788][T23943] do_sys_openat2+0x11b/0x1d0 [ 1019.866814][T23943] ? __pfx_do_sys_openat2+0x10/0x10 [ 1019.866846][T23943] __x64_sys_openat+0x174/0x210 [ 1019.866873][T23943] ? __pfx___x64_sys_openat+0x10/0x10 [ 1019.866906][T23943] do_syscall_64+0xcd/0x490 [ 1019.866944][T23943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1019.866969][T23943] RIP: 0033:0x7fd174f8e929 [ 1019.866987][T23943] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1019.867019][T23943] RSP: 002b:00007fd172df6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1019.867043][T23943] RAX: ffffffffffffffda RBX: 00007fd1751b5fa0 RCX: 00007fd174f8e929 [ 1019.867059][T23943] RDX: 0000000000101001 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 1019.867075][T23943] RBP: 00007fd175010b39 R08: 0000000000000000 R09: 0000000000000000 [ 1019.867091][T23943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1019.867106][T23943] R13: 0000000000000000 R14: 00007fd1751b5fa0 R15: 00007ffe637bcd88 [ 1019.867128][T23943] [ 1020.102846][ C0] vkms_vblank_simulate: vblank timer overrun [ 1020.181796][T23929] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 1020.215089][T23927] netlink: zone id is out of range [ 1021.313453][T23963] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3758'. [ 1021.357339][T23963] openvswitch: HfR: Dropping previously announced user features [ 1021.602106][T23971] ======================================================= [ 1021.602106][T23971] WARNING: The mand mount option has been deprecated and [ 1021.602106][T23971] and is ignored by this kernel. Remove the mand [ 1021.602106][T23971] option from the mount to silence this warning. [ 1021.602106][T23971] ======================================================= [ 1021.818334][T23982] FAULT_INJECTION: forcing a failure. [ 1021.818334][T23982] name failslab, interval 1, probability 0, space 0, times 0 [ 1021.847296][T23982] CPU: 1 UID: 0 PID: 23982 Comm: syz.3.3764 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) [ 1021.847337][T23982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1021.847357][T23982] Call Trace: [ 1021.847365][T23982] [ 1021.847373][T23982] dump_stack_lvl+0x16c/0x1f0 [ 1021.847412][T23982] should_fail_ex+0x512/0x640 [ 1021.847446][T23982] ? kernfs_fop_write_iter+0x237/0x510 [ 1021.847470][T23982] should_failslab+0xc2/0x120 [ 1021.847491][T23982] __kmalloc_noprof+0xd2/0x510 [ 1021.847528][T23982] kernfs_fop_write_iter+0x237/0x510 [ 1021.847552][T23982] iter_file_splice_write+0x91c/0x1150 [ 1021.847591][T23982] ? copy_splice_read+0x89c/0xba0 [ 1021.847621][T23982] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1021.847655][T23982] ? __pfx_copy_splice_read+0x10/0x10 [ 1021.847684][T23982] ? look_up_lock_class+0x59/0x150 [ 1021.847721][T23982] ? __pfx___might_resched+0x10/0x10 [ 1021.847745][T23982] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 1021.847778][T23982] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1021.847810][T23982] direct_splice_actor+0x18f/0x6c0 [ 1021.847848][T23982] splice_direct_to_actor+0x345/0xa30 [ 1021.847878][T23982] ? __pfx_direct_splice_actor+0x10/0x10 [ 1021.847911][T23982] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1021.847944][T23982] do_splice_direct+0x174/0x240 [ 1021.847973][T23982] ? __pfx_do_splice_direct+0x10/0x10 [ 1021.848003][T23982] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1021.848032][T23982] ? bpf_lsm_file_permission+0x9/0x10 [ 1021.848057][T23982] ? security_file_permission+0x71/0x210 [ 1021.848088][T23982] ? rw_verify_area+0xcf/0x680 [ 1021.848118][T23982] do_sendfile+0xb06/0xe50 [ 1021.848150][T23982] ? __pfx_do_sendfile+0x10/0x10 [ 1021.848181][T23982] ? __fget_files+0x20e/0x3c0 [ 1021.848215][T23982] __x64_sys_sendfile64+0x1d8/0x220 [ 1021.848236][T23982] ? ksys_write+0x1ac/0x250 [ 1021.848268][T23982] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1021.848294][T23982] do_syscall_64+0xcd/0x490 [ 1021.848331][T23982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1021.848356][T23982] RIP: 0033:0x7fd174f8e929 [ 1021.848374][T23982] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1021.848398][T23982] RSP: 002b:00007fd172df6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1021.848420][T23982] RAX: ffffffffffffffda RBX: 00007fd1751b5fa0 RCX: 00007fd174f8e929 [ 1021.848436][T23982] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 1021.848451][T23982] RBP: 00007fd172df6090 R08: 0000000000000000 R09: 0000000000000000 [ 1021.848465][T23982] R10: 0000000100000000 R11: 0000000000000246 R12: 0000000000000001 [ 1021.848480][T23982] R13: 0000000000000000 R14: 00007fd1751b5fa0 R15: 00007ffe637bcd88 [ 1021.848502][T23982] [ 1022.307278][T23990] device-mapper: ioctl: only supply one of name or uuid, cmd(11) [ 1024.703680][T24015] kexec: Could not allocate control_code_buffer [ 1025.111364][ T31] audit: type=1326 audit(4294967332.470:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24046 comm="syz.2.3777" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd0c0f8e929 code=0x0 [ 1025.317228][T24057] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3778'. [ 1025.441350][T24057] HfR: entered allmulticast mode [ 1025.540159][T24057] futex_wake_op: syz.1.3778 tries to shift op by -9; fix this program [ 1028.055324][T24111] FAULT_INJECTION: forcing a failure. [ 1028.055324][T24111] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1028.117505][T24111] CPU: 1 UID: 0 PID: 24111 Comm: syz.3.3783 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) [ 1028.117554][T24111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1028.117576][T24111] Call Trace: [ 1028.117587][T24111] [ 1028.117600][T24111] dump_stack_lvl+0x16c/0x1f0 [ 1028.117660][T24111] should_fail_ex+0x512/0x640 [ 1028.117713][T24111] should_fail_alloc_page+0xe7/0x130 [ 1028.117747][T24111] prepare_alloc_pages+0x3c2/0x610 [ 1028.117789][T24111] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 1028.117847][T24111] ? rcu_is_watching+0x12/0xc0 [ 1028.117881][T24111] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 1028.117937][T24111] ? kmem_cache_free+0x2d1/0x4d0 [ 1028.117985][T24111] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1028.118041][T24111] ? mt_destroy_walk+0x1af/0xff0 [ 1028.118094][T24111] ? __pfx_mt_destroy_walk+0x10/0x10 [ 1028.118153][T24111] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1028.118206][T24111] ? policy_nodemask+0xea/0x4e0 [ 1028.118262][T24111] alloc_pages_mpol+0x1fb/0x550 [ 1028.118294][T24111] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1028.118323][T24111] ? mas_next_node+0x7e0/0xf50 [ 1028.118378][T24111] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1028.118432][T24111] alloc_pages_noprof+0x131/0x390 [ 1028.118464][T24111] __pmd_alloc+0x3b/0x930 [ 1028.118502][T24111] __handle_mm_fault+0xaac/0x5490 [ 1028.118556][T24111] ? __pfx___handle_mm_fault+0x10/0x10 [ 1028.118611][T24111] ? find_vma+0xbf/0x140 [ 1028.118642][T24111] ? __pfx_find_vma+0x10/0x10 [ 1028.118678][T24111] handle_mm_fault+0x589/0xd10 [ 1028.118725][T24111] __get_user_pages+0x589/0x3b80 [ 1028.118768][T24111] ? __pfx_mt_find+0x10/0x10 [ 1028.118799][T24111] ? __pfx___get_user_pages+0x10/0x10 [ 1028.118838][T24111] ? __pfx___might_resched+0x10/0x10 [ 1028.118872][T24111] ? cap_capable+0xb3/0x250 [ 1028.118905][T24111] populate_vma_page_range+0x278/0x3a0 [ 1028.118947][T24111] ? __pfx_populate_vma_page_range+0x10/0x10 [ 1028.118988][T24111] ? __pfx_find_vma_intersection+0x10/0x10 [ 1028.119027][T24111] ? do_mmap+0x69c/0x1210 [ 1028.119065][T24111] __mm_populate+0x1d8/0x380 [ 1028.119105][T24111] ? __pfx___mm_populate+0x10/0x10 [ 1028.119151][T24111] ? up_write+0x1b2/0x520 [ 1028.119201][T24111] vm_mmap_pgoff+0x362/0x450 [ 1028.119236][T24111] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1028.119273][T24111] ? __x64_sys_futex+0x1e0/0x4c0 [ 1028.119313][T24111] ? __x64_sys_futex+0x1e9/0x4c0 [ 1028.119357][T24111] ksys_mmap_pgoff+0x7d/0x5c0 [ 1028.119398][T24111] ? xfd_validate_state+0x61/0x180 [ 1028.119448][T24111] ? __pfx___x64_sys_pwrite64+0x10/0x10 [ 1028.119501][T24111] __x64_sys_mmap+0x125/0x190 [ 1028.119549][T24111] do_syscall_64+0xcd/0x490 [ 1028.119601][T24111] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1028.119636][T24111] RIP: 0033:0x7fd174f8e929 [ 1028.119662][T24111] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1028.119697][T24111] RSP: 002b:00007fd172dd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1028.119729][T24111] RAX: ffffffffffffffda RBX: 00007fd1751b6080 RCX: 00007fd174f8e929 [ 1028.119753][T24111] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 1028.119775][T24111] RBP: 00007fd175010b39 R08: 0000000000000002 R09: 0000000000008000 [ 1028.119797][T24111] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 1028.119818][T24111] R13: 0000000000000000 R14: 00007fd1751b6080 R15: 00007ffe637bcd88 [ 1028.119850][T24111] [ 1028.577349][T24123] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3788'. [ 1029.000042][T24131] FAULT_INJECTION: forcing a failure. [ 1029.000042][T24131] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1029.031430][T24131] CPU: 0 UID: 0 PID: 24131 Comm: syz.3.3789 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) [ 1029.031476][T24131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1029.031496][T24131] Call Trace: [ 1029.031507][T24131] [ 1029.031520][T24131] dump_stack_lvl+0x16c/0x1f0 [ 1029.031575][T24131] should_fail_ex+0x512/0x640 [ 1029.031626][T24131] strncpy_from_user+0x3b/0x2e0 [ 1029.031672][T24131] getname_flags.part.0+0x8f/0x550 [ 1029.031712][T24131] getname_flags+0x93/0xf0 [ 1029.031755][T24131] do_sys_openat2+0xb8/0x1d0 [ 1029.031792][T24131] ? __pfx_do_sys_openat2+0x10/0x10 [ 1029.031827][T24131] ? lock_release+0x201/0x2f0 [ 1029.031878][T24131] __do_sys_openat2+0x1c0/0x2d0 [ 1029.031914][T24131] ? __pfx___do_sys_openat2+0x10/0x10 [ 1029.031949][T24131] ? ksys_write+0x1ac/0x250 [ 1029.032003][T24131] do_syscall_64+0xcd/0x490 [ 1029.032055][T24131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1029.032090][T24131] RIP: 0033:0x7fd174f8e929 [ 1029.032115][T24131] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1029.032145][T24131] RSP: 002b:00007fd172df6038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b5 [ 1029.032176][T24131] RAX: ffffffffffffffda RBX: 00007fd1751b5fa0 RCX: 00007fd174f8e929 [ 1029.032198][T24131] RDX: 0000200000000380 RSI: 0000200000000340 RDI: ffffffffffffff9c [ 1029.032218][T24131] RBP: 00007fd172df6090 R08: 0000000000000000 R09: 0000000000000000 [ 1029.032237][T24131] R10: 0000000000000018 R11: 0000000000000246 R12: 0000000000000001 [ 1029.032255][T24131] R13: 0000000000000000 R14: 00007fd1751b5fa0 R15: 00007ffe637bcd88 [ 1029.032292][T24131] [ 1030.257335][T24149] zswap: compressor not available [ 1030.598612][T24168] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3797'. [ 1030.625365][T24168] netlink: 'syz.2.3797': attribute type 1 has an invalid length. [ 1030.679362][T24170] FAULT_INJECTION: forcing a failure. [ 1030.679362][T24170] name failslab, interval 1, probability 0, space 0, times 0 [ 1030.693049][T24168] netlink: 'syz.2.3797': attribute type 6 has an invalid length. [ 1030.781468][T24170] CPU: 0 UID: 0 PID: 24170 Comm: syz.0.3798 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) [ 1030.781513][T24170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1030.781534][T24170] Call Trace: [ 1030.781544][T24170] [ 1030.781556][T24170] dump_stack_lvl+0x16c/0x1f0 [ 1030.781610][T24170] should_fail_ex+0x512/0x640 [ 1030.781659][T24170] should_failslab+0xc2/0x120 [ 1030.781688][T24170] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1030.781739][T24170] ? skb_clone+0x190/0x3f0 [ 1030.781789][T24170] skb_clone+0x190/0x3f0 [ 1030.781849][T24170] netlink_deliver_tap+0xabd/0xd30 [ 1030.781885][T24170] netlink_unicast+0x5df/0x7f0 [ 1030.781922][T24170] ? __pfx_netlink_unicast+0x10/0x10 [ 1030.781955][T24170] ? __build_skb_around+0x278/0x3b0 [ 1030.781999][T24170] ? is_vmalloc_addr+0x86/0xa0 [ 1030.782048][T24170] netlink_sendmsg+0x8d1/0xdd0 [ 1030.782085][T24170] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1030.782126][T24170] sock_write_iter+0x4fc/0x5b0 [ 1030.782164][T24170] ? __pfx_sock_write_iter+0x10/0x10 [ 1030.782198][T24170] ? lock_release+0x201/0x2f0 [ 1030.782246][T24170] ? bpf_lsm_file_permission+0x9/0x10 [ 1030.782282][T24170] ? security_file_permission+0x71/0x210 [ 1030.782324][T24170] ? rw_verify_area+0xcf/0x680 [ 1030.782367][T24170] vfs_write+0x6c4/0x1150 [ 1030.782412][T24170] ? __pfx_sock_write_iter+0x10/0x10 [ 1030.782450][T24170] ? __pfx_vfs_write+0x10/0x10 [ 1030.782496][T24170] ? lock_release+0x201/0x2f0 [ 1030.782547][T24170] ksys_write+0x1f8/0x250 [ 1030.782588][T24170] ? __pfx_ksys_write+0x10/0x10 [ 1030.782637][T24170] do_syscall_64+0xcd/0x490 [ 1030.782686][T24170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1030.782721][T24170] RIP: 0033:0x7f335738e929 [ 1030.782744][T24170] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1030.782774][T24170] RSP: 002b:00007f33551f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1030.782805][T24170] RAX: ffffffffffffffda RBX: 00007f33575b5fa0 RCX: 00007f335738e929 [ 1030.782826][T24170] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 0000000000000002 [ 1030.782854][T24170] RBP: 00007f33551f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1030.782874][T24170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1030.782893][T24170] R13: 0000000000000000 R14: 00007f33575b5fa0 R15: 00007ffc02456a28 [ 1030.782924][T24170] [ 1030.783086][T24170] netlink: 25 bytes leftover after parsing attributes in process `syz.0.3798'. [ 1031.135611][T24177] FAULT_INJECTION: forcing a failure. [ 1031.135611][T24177] name failslab, interval 1, probability 0, space 0, times 0 [ 1031.175094][T24177] CPU: 0 UID: 0 PID: 24177 Comm: syz.2.3801 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) [ 1031.175138][T24177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1031.175158][T24177] Call Trace: [ 1031.175168][T24177] [ 1031.175180][T24177] dump_stack_lvl+0x16c/0x1f0 [ 1031.175232][T24177] should_fail_ex+0x512/0x640 [ 1031.175277][T24177] should_failslab+0xc2/0x120 [ 1031.175305][T24177] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 1031.175351][T24177] ? __d_alloc+0x31/0xaa0 [ 1031.175396][T24177] __d_alloc+0x31/0xaa0 [ 1031.175444][T24177] d_alloc_pseudo+0x1c/0xc0 [ 1031.175477][T24177] alloc_file_pseudo+0xcf/0x230 [ 1031.175511][T24177] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1031.175545][T24177] ? do_raw_spin_unlock+0x172/0x230 [ 1031.175595][T24177] __anon_inode_getfile+0xf7/0x3a0 [ 1031.175641][T24177] anon_inode_getfd+0x52/0xb0 [ 1031.175683][T24177] __x64_sys_fsopen+0x18b/0x240 [ 1031.175715][T24177] do_syscall_64+0xcd/0x490 [ 1031.175773][T24177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1031.175817][T24177] RIP: 0033:0x7fd0c0f8e929 [ 1031.175840][T24177] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1031.175871][T24177] RSP: 002b:00007fd0c1e51038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 1031.175901][T24177] RAX: ffffffffffffffda RBX: 00007fd0c11b5fa0 RCX: 00007fd0c0f8e929 [ 1031.175922][T24177] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1031.175939][T24177] RBP: 00007fd0c1e51090 R08: 0000000000000000 R09: 0000000000000000 [ 1031.175959][T24177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1031.175977][T24177] R13: 0000000000000000 R14: 00007fd0c11b5fa0 R15: 00007ffdfe31bb18 [ 1031.176006][T24177] [ 1031.193812][T24180] vhci_hcd: invalid port number 16 [ 1031.201854][T24174] can: request_module (can-proto-0) failed. [ 1031.205344][T24180] vhci_hcd: invalid port number 16 [ 1034.454517][T24244] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3816'. [ 1034.484886][T24244] bridge_slave_1: left allmulticast mode [ 1034.515721][T24244] bridge_slave_1: left promiscuous mode [ 1034.587595][T24244] bridge0: port 2(bridge_slave_1) entered disabled state [ 1034.665685][T24244] bridge_slave_0: left allmulticast mode [ 1034.717535][T24244] bridge_slave_0: left promiscuous mode [ 1034.738256][T24244] bridge0: port 1(bridge_slave_0) entered disabled state [ 1037.385439][T24305] FAULT_INJECTION: forcing a failure. [ 1037.385439][T24305] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1037.413962][T24305] CPU: 0 UID: 0 PID: 24305 Comm: syz.3.3828 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) [ 1037.414010][T24305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1037.414029][T24305] Call Trace: [ 1037.414036][T24305] [ 1037.414045][T24305] dump_stack_lvl+0x16c/0x1f0 [ 1037.414085][T24305] should_fail_ex+0x512/0x640 [ 1037.414120][T24305] _copy_from_user+0x2e/0xd0 [ 1037.414155][T24305] get_timespec64+0x8b/0x1b0 [ 1037.414183][T24305] ? __pfx_get_timespec64+0x10/0x10 [ 1037.414214][T24305] __x64_sys_clock_settime+0x17d/0x2a0 [ 1037.414248][T24305] ? __pfx___x64_sys_clock_settime+0x10/0x10 [ 1037.414288][T24305] do_syscall_64+0xcd/0x490 [ 1037.414326][T24305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1037.414350][T24305] RIP: 0033:0x7fd174f8e929 [ 1037.414372][T24305] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1037.414406][T24305] RSP: 002b:00007fd172df6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e3 [ 1037.414428][T24305] RAX: ffffffffffffffda RBX: 00007fd1751b5fa0 RCX: 00007fd174f8e929 [ 1037.414444][T24305] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 00000000fffffffe [ 1037.414459][T24305] RBP: 00007fd172df6090 R08: 0000000000000000 R09: 0000000000000000 [ 1037.414473][T24305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1037.414487][T24305] R13: 0000000000000001 R14: 00007fd1751b5fa0 R15: 00007ffe637bcd88 [ 1037.414510][T24305] [ 1037.576169][ C0] vkms_vblank_simulate: vblank timer overrun [ 1037.755737][T24307] bridge0: port 3(netdevsim1) entered blocking state [ 1037.776669][T24307] bridge0: port 3(netdevsim1) entered disabled state [ 1037.795412][T24307] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 1037.809251][T24307] netdevsim netdevsim1 netdevsim1: entered promiscuous mode [ 1037.821802][T24307] bridge0: port 3(netdevsim1) entered blocking state [ 1037.829259][T24307] bridge0: port 3(netdevsim1) entered forwarding state [ 1037.841620][T24313] FAULT_INJECTION: forcing a failure. [ 1037.841620][T24313] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1037.885964][T24313] CPU: 1 UID: 0 PID: 24313 Comm: syz.2.3831 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) [ 1037.885998][T24313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1037.886012][T24313] Call Trace: [ 1037.886020][T24313] [ 1037.886028][T24313] dump_stack_lvl+0x16c/0x1f0 [ 1037.886069][T24313] should_fail_ex+0x512/0x640 [ 1037.886103][T24313] _copy_from_user+0x2e/0xd0 [ 1037.886138][T24313] copy_msghdr_from_user+0x98/0x160 [ 1037.886174][T24313] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1037.886211][T24313] ? __pfx__kstrtoull+0x10/0x10 [ 1037.886236][T24313] ? aa_file_perm+0x4c7/0xfb0 [ 1037.886271][T24313] ___sys_sendmsg+0xfe/0x1d0 [ 1037.886305][T24313] ? __pfx____sys_sendmsg+0x10/0x10 [ 1037.886346][T24313] ? rcu_is_watching+0x12/0xc0 [ 1037.886379][T24313] __sys_sendmmsg+0x200/0x420 [ 1037.886416][T24313] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1037.886450][T24313] ? lock_release+0x201/0x2f0 [ 1037.886484][T24313] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1037.886534][T24313] ? fput+0x70/0xf0 [ 1037.886555][T24313] ? ksys_write+0x1ac/0x250 [ 1037.886586][T24313] ? __pfx_ksys_write+0x10/0x10 [ 1037.886621][T24313] __x64_sys_sendmmsg+0x9c/0x100 [ 1037.886655][T24313] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 1037.886692][T24313] do_syscall_64+0xcd/0x490 [ 1037.886728][T24313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1037.886752][T24313] RIP: 0033:0x7fd0c0f8e929 [ 1037.886771][T24313] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1037.886803][T24313] RSP: 002b:00007fd0c1e30038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1037.886832][T24313] RAX: ffffffffffffffda RBX: 00007fd0c11b6080 RCX: 00007fd0c0f8e929 [ 1037.886854][T24313] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 1037.886873][T24313] RBP: 00007fd0c1e30090 R08: 0000000000000000 R09: 0000000000000000 [ 1037.886893][T24313] R10: 0000000004000000 R11: 0000000000000246 R12: 0000000000000001 [ 1037.886913][T24313] R13: 0000000000000000 R14: 00007fd0c11b6080 R15: 00007ffdfe31bb18 [ 1037.886943][T24313] [ 1038.615971][T24330] FAULT_INJECTION: forcing a failure. [ 1038.615971][T24330] name failslab, interval 1, probability 0, space 0, times 0 [ 1038.633552][T24330] CPU: 1 UID: 0 PID: 24330 Comm: syz.1.3836 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) [ 1038.633596][T24330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1038.633615][T24330] Call Trace: [ 1038.633626][T24330] [ 1038.633639][T24330] dump_stack_lvl+0x16c/0x1f0 [ 1038.633693][T24330] should_fail_ex+0x512/0x640 [ 1038.633745][T24330] should_failslab+0xc2/0x120 [ 1038.633776][T24330] __kvmalloc_node_noprof+0x137/0x620 [ 1038.633824][T24330] ? __pfx___mutex_lock+0x10/0x10 [ 1038.633874][T24330] ? traverse.part.0.constprop.0+0x392/0x640 [ 1038.633923][T24330] ? traverse.part.0.constprop.0+0x392/0x640 [ 1038.633964][T24330] traverse.part.0.constprop.0+0x392/0x640 [ 1038.634008][T24330] ? rcu_is_watching+0x12/0xc0 [ 1038.634045][T24330] seq_read_iter+0x932/0x12c0 [ 1038.634087][T24330] ? aa_file_perm+0x4d6/0xfb0 [ 1038.634132][T24330] ? __pfx_kstrtouint+0x10/0x10 [ 1038.634172][T24330] seq_read+0x39e/0x4e0 [ 1038.634228][T24330] ? __pfx_seq_read+0x10/0x10 [ 1038.634266][T24330] ? rcu_is_watching+0x12/0xc0 [ 1038.634299][T24330] ? rcu_is_watching+0x12/0xc0 [ 1038.634329][T24330] ? lock_release+0x201/0x2f0 [ 1038.634374][T24330] ? apparmor_file_permission+0x251/0x400 [ 1038.634410][T24330] ? __pfx_seq_read+0x10/0x10 [ 1038.634533][T24330] proc_reg_read+0x23d/0x330 [ 1038.634583][T24330] ? __pfx_proc_reg_read+0x10/0x10 [ 1038.634628][T24330] vfs_read+0x1e4/0xc60 [ 1038.634671][T24330] ? lock_release+0x201/0x2f0 [ 1038.634713][T24330] ? __pfx_vfs_read+0x10/0x10 [ 1038.634754][T24330] ? __fget_files+0x204/0x3c0 [ 1038.634797][T24330] ? rcu_is_watching+0x12/0xc0 [ 1038.634830][T24330] ? lock_release+0x201/0x2f0 [ 1038.634873][T24330] ? __fget_files+0x20e/0x3c0 [ 1038.634918][T24330] ? __fget_files+0x140/0x3c0 [ 1038.634967][T24330] __x64_sys_pread64+0x1eb/0x250 [ 1038.635018][T24330] ? __pfx___x64_sys_pread64+0x10/0x10 [ 1038.635076][T24330] do_syscall_64+0xcd/0x490 [ 1038.635132][T24330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1038.635166][T24330] RIP: 0033:0x7f286338e929 [ 1038.635210][T24330] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1038.635244][T24330] RSP: 002b:00007f28641cc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 1038.635277][T24330] RAX: ffffffffffffffda RBX: 00007f28635b6080 RCX: 00007f286338e929 [ 1038.635301][T24330] RDX: 00000000000101fb RSI: 0000000000000000 RDI: 0000000000000007 [ 1038.635322][T24330] RBP: 00007f28641cc090 R08: 0000000000000000 R09: 0000000000000000 [ 1038.635343][T24330] R10: 0000008800000005 R11: 0000000000000246 R12: 0000000000000001 [ 1038.635363][T24330] R13: 0000000000000000 R14: 00007f28635b6080 R15: 00007ffcfbf58938 [ 1038.635393][T24330] [ 1039.869865][T24363] FAULT_INJECTION: forcing a failure. [ 1039.869865][T24363] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1039.973749][T24363] CPU: 0 UID: 0 PID: 24363 Comm: syz.3.3842 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) [ 1039.973793][T24363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1039.973813][T24363] Call Trace: [ 1039.973823][T24363] [ 1039.973835][T24363] dump_stack_lvl+0x16c/0x1f0 [ 1039.973891][T24363] should_fail_ex+0x512/0x640 [ 1039.973941][T24363] _copy_from_user+0x2e/0xd0 [ 1039.973992][T24363] move_addr_to_kernel+0x65/0x170 [ 1039.974035][T24363] __sys_connect+0xb1/0x160 [ 1039.974076][T24363] ? __pfx___sys_connect+0x10/0x10 [ 1039.974134][T24363] ? __pfx_ksys_write+0x10/0x10 [ 1039.974186][T24363] __x64_sys_connect+0x72/0xb0 [ 1039.974230][T24363] do_syscall_64+0xcd/0x490 [ 1039.974283][T24363] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1039.974317][T24363] RIP: 0033:0x7fd174f8e929 [ 1039.974341][T24363] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1039.974373][T24363] RSP: 002b:00007fd172df6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1039.974404][T24363] RAX: ffffffffffffffda RBX: 00007fd1751b5fa0 RCX: 00007fd174f8e929 [ 1039.974425][T24363] RDX: 0000000000000056 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1039.974449][T24363] RBP: 00007fd172df6090 R08: 0000000000000000 R09: 0000000000000000 [ 1039.974470][T24363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1039.974489][T24363] R13: 0000000000000000 R14: 00007fd1751b5fa0 R15: 00007ffe637bcd88 [ 1039.974520][T24363] [ 1040.137753][ C0] vkms_vblank_simulate: vblank timer overrun [ 1040.763272][T24369] can: request_module (can-proto-0) failed. [ 1043.384394][ T43] Process accounting resumed [ 1044.464005][T24460] FAULT_INJECTION: forcing a failure. [ 1044.464005][T24460] name failslab, interval 1, probability 0, space 0, times 0 [ 1044.532053][T24468] FAULT_INJECTION: forcing a failure. [ 1044.532053][T24468] name failslab, interval 1, probability 0, space 0, times 0 [ 1044.555019][T24460] CPU: 1 UID: 0 PID: 24460 Comm: syz.1.3856 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) [ 1044.555065][T24460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1044.555086][T24460] Call Trace: [ 1044.555098][T24460] [ 1044.555110][T24460] dump_stack_lvl+0x16c/0x1f0 [ 1044.555165][T24460] should_fail_ex+0x512/0x640 [ 1044.555217][T24460] should_failslab+0xc2/0x120 [ 1044.555266][T24460] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1044.555315][T24460] ? rcu_is_watching+0x12/0xc0 [ 1044.555347][T24460] ? alloc_vfsmnt+0x23/0x730 [ 1044.555382][T24460] alloc_vfsmnt+0x23/0x730 [ 1044.555414][T24460] clone_mnt+0x6d/0xff0 [ 1044.555454][T24460] ? is_subdir+0x1a8/0x3e0 [ 1044.555487][T24460] copy_tree+0x38d/0xa20 [ 1044.555540][T24460] copy_mnt_ns+0x1ac/0xac0 [ 1044.555590][T24460] ? trace_kmem_cache_alloc+0x28/0xc0 [ 1044.555626][T24460] ? trace_cap_capable+0x18d/0x200 [ 1044.555655][T24460] ? create_new_namespaces+0x30/0xa90 [ 1044.555693][T24460] create_new_namespaces+0xd3/0xa90 [ 1044.555728][T24460] ? bpf_lsm_capable+0x9/0x10 [ 1044.555774][T24460] ? security_capable+0x7e/0x260 [ 1044.555830][T24460] copy_namespaces+0x468/0x560 [ 1044.555864][T24460] copy_process+0x2822/0x76a0 [ 1044.555902][T24460] ? preempt_schedule_thunk+0x16/0x30 [ 1044.555959][T24460] ? __pfx_copy_process+0x10/0x10 [ 1044.556001][T24460] ? plist_check_head+0xa3/0x150 [ 1044.556042][T24460] ? futex_wake+0x456/0x530 [ 1044.556092][T24460] ? futex_private_hash_put+0xc7/0x240 [ 1044.556132][T24460] kernel_clone+0xfc/0x960 [ 1044.556172][T24460] ? __pfx_futex_wake+0x10/0x10 [ 1044.556218][T24460] ? __pfx_kernel_clone+0x10/0x10 [ 1044.556268][T24460] __do_sys_clone+0xce/0x120 [ 1044.556308][T24460] ? __pfx___do_sys_clone+0x10/0x10 [ 1044.556350][T24460] ? lock_release+0x201/0x2f0 [ 1044.556400][T24460] ? xfd_validate_state+0x61/0x180 [ 1044.556451][T24460] do_syscall_64+0xcd/0x490 [ 1044.556504][T24460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1044.556538][T24460] RIP: 0033:0x7f286338e929 [ 1044.556565][T24460] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1044.556599][T24460] RSP: 002b:00007f28641aafe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1044.556631][T24460] RAX: ffffffffffffffda RBX: 00007f28635b6160 RCX: 00007f286338e929 [ 1044.556656][T24460] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000002360411 [ 1044.556677][T24460] RBP: 00007f2863410b39 R08: 0000000000000000 R09: 0000000000000000 [ 1044.556698][T24460] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1044.556718][T24460] R13: 0000000000000000 R14: 00007f28635b6160 R15: 00007ffcfbf58938 [ 1044.556750][T24460] [ 1044.563660][T24468] CPU: 0 UID: 0 PID: 24468 Comm: syz.2.3861 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) [ 1044.563715][T24468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1044.563734][T24468] Call Trace: [ 1044.563745][T24468] [ 1044.563758][T24468] dump_stack_lvl+0x16c/0x1f0 [ 1044.563811][T24468] should_fail_ex+0x512/0x640 [ 1044.563862][T24468] should_failslab+0xc2/0x120 [ 1044.563894][T24468] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1044.563944][T24468] ? dst_alloc+0x99/0x1a0 [ 1044.563990][T24468] dst_alloc+0x99/0x1a0 [ 1044.564031][T24468] ? rcu_is_watching+0x12/0xc0 [ 1044.564065][T24468] rt_dst_alloc+0x35/0x3a0 [ 1044.564103][T24468] ip_route_output_key_hash_rcu+0x87a/0x28f0 [ 1044.564159][T24468] ip_route_output_key_hash+0x137/0x2e0 [ 1044.564207][T24468] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 1044.564261][T24468] ? rcu_is_watching+0x12/0xc0 [ 1044.564297][T24468] ip_route_output_flow+0x27/0x150 [ 1044.564348][T24468] raw_sendmsg+0xd70/0x3820 [ 1044.564401][T24468] ? __pfx_raw_sendmsg+0x10/0x10 [ 1044.564441][T24468] ? lock_release+0x201/0x2f0 [ 1044.564485][T24468] ? tomoyo_check_inet_address+0xe0/0x6c0 [ 1044.564539][T24468] ? __pfx_tomoyo_check_inet_address+0x10/0x10 [ 1044.564595][T24468] ? __pfx___might_resched+0x10/0x10 [ 1044.564637][T24468] ? aa_sk_perm+0x2f4/0xb10 [ 1044.564694][T24468] ? __pfx_raw_sendmsg+0x10/0x10 [ 1044.564747][T24468] inet_sendmsg+0x11c/0x140 [ 1044.564797][T24468] __sys_sendto+0x43c/0x520 [ 1044.564849][T24468] ? __pfx___sys_sendto+0x10/0x10 [ 1044.564915][T24468] ? ksys_write+0x1ac/0x250 [ 1044.564964][T24468] ? __pfx_ksys_write+0x10/0x10 [ 1044.565017][T24468] __x64_sys_sendto+0xe0/0x1c0 [ 1044.565065][T24468] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 1044.565122][T24468] do_syscall_64+0xcd/0x490 [ 1044.565180][T24468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1044.565217][T24468] RIP: 0033:0x7fd0c0f8e929 [ 1044.565244][T24468] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1044.565281][T24468] RSP: 002b:00007fd0c1e51038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1044.565315][T24468] RAX: ffffffffffffffda RBX: 00007fd0c11b5fa0 RCX: 00007fd0c0f8e929 [ 1044.565340][T24468] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000000003 [ 1044.565363][T24468] RBP: 00007fd0c1e51090 R08: 0000200000000000 R09: 000000000000001c [ 1044.565386][T24468] R10: 000000000000000e R11: 0000000000000246 R12: 0000000000000001 [ 1044.565407][T24468] R13: 0000000000000000 R14: 00007fd0c11b5fa0 R15: 00007ffdfe31bb18 [ 1044.565443][T24468] [ 1045.081232][ C1] vkms_vblank_simulate: vblank timer overrun [ 1046.158767][T23586] ================================================================== [ 1046.166908][T23586] BUG: KASAN: vmalloc-out-of-bounds in hci_devcd_dump+0x142/0x240 [ 1046.174787][T23586] Read of size 140 at addr ffffc90004791000 by task kworker/u9:0/23586 [ 1046.183056][T23586] [ 1046.185404][T23586] CPU: 0 UID: 0 PID: 23586 Comm: kworker/u9:0 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) [ 1046.185435][T23586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1046.185452][T23586] Workqueue: hci0 hci_devcd_rx [ 1046.185485][T23586] Call Trace: [ 1046.185494][T23586] [ 1046.185504][T23586] dump_stack_lvl+0x116/0x1f0 [ 1046.185541][T23586] print_report+0xcd/0x680 [ 1046.185585][T23586] ? __virt_addr_valid+0x81/0x610 [ 1046.185623][T23586] ? hci_devcd_dump+0x142/0x240 [ 1046.185664][T23586] kasan_report+0xe0/0x110 [ 1046.185685][T23586] ? hci_devcd_dump+0x142/0x240 [ 1046.185719][T23586] kasan_check_range+0x100/0x1b0 [ 1046.185746][T23586] __asan_memcpy+0x23/0x60 [ 1046.185777][T23586] hci_devcd_dump+0x142/0x240 [ 1046.185808][T23586] hci_devcd_rx+0xa25/0x1780 [ 1046.185842][T23586] ? lock_release+0x201/0x2f0 [ 1046.185872][T23586] ? __pfx_hci_devcd_rx+0x10/0x10 [ 1046.185903][T23586] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1046.185937][T23586] ? debug_object_deactivate+0x1ec/0x3a0 [ 1046.185961][T23586] ? finish_task_switch.isra.0+0x221/0xc10 [ 1046.185985][T23586] ? __pfx_debug_object_deactivate+0x10/0x10 [ 1046.186009][T23586] ? trace_sched_exit_tp+0xde/0x130 [ 1046.186036][T23586] ? rcu_is_watching+0x12/0xc0 [ 1046.186060][T23586] ? lock_acquire+0x2cd/0x350 [ 1046.186089][T23586] ? rcu_is_watching+0x12/0xc0 [ 1046.186112][T23586] ? rcu_is_watching+0x12/0xc0 [ 1046.186136][T23586] process_one_work+0x9cf/0x1b70 [ 1046.186175][T23586] ? __pfx_hci_devcd_rx+0x10/0x10 [ 1046.186206][T23586] ? __pfx_process_one_work+0x10/0x10 [ 1046.186246][T23586] ? assign_work+0x1a0/0x250 [ 1046.186278][T23586] worker_thread+0x6c8/0xf10 [ 1046.186318][T23586] ? __kthread_parkme+0x19e/0x250 [ 1046.186345][T23586] ? __pfx_worker_thread+0x10/0x10 [ 1046.186381][T23586] kthread+0x3c5/0x780 [ 1046.186413][T23586] ? __pfx_kthread+0x10/0x10 [ 1046.186443][T23586] ? ret_from_fork+0x25/0x6f0 [ 1046.186474][T23586] ? rcu_is_watching+0x12/0xc0 [ 1046.186497][T23586] ? rcu_is_watching+0x12/0xc0 [ 1046.186519][T23586] ? __pfx_kthread+0x10/0x10 [ 1046.186552][T23586] ret_from_fork+0x5d4/0x6f0 [ 1046.186590][T23586] ? __pfx_kthread+0x10/0x10 [ 1046.186622][T23586] ret_from_fork_asm+0x1a/0x30 [ 1046.186654][T23586] [ 1046.186662][T23586] [ 1046.404906][T23586] The buggy address ffffc90004791000 belongs to a vmalloc virtual mapping [ 1046.413550][T23586] Memory state around the buggy address: [ 1046.420260][T23586] ffffc90004790f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1046.428537][T23586] ffffc90004790f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1046.436631][T23586] >ffffc90004791000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1046.444721][T23586] ^ [ 1046.448814][T23586] ffffc90004791080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1046.456954][T23586] ffffc90004791100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1046.465043][T23586] ================================================================== [ 1046.485617][T23586] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1046.493002][T23586] CPU: 0 UID: 0 PID: 23586 Comm: kworker/u9:0 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) [ 1046.503577][T23586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1046.513700][T23586] Workqueue: hci0 hci_devcd_rx [ 1046.518564][T23586] Call Trace: [ 1046.521919][T23586] [ 1046.524988][T23586] dump_stack_lvl+0x3d/0x1f0 [ 1046.529660][T23586] panic+0x71c/0x800 [ 1046.533638][T23586] ? __pfx_panic+0x10/0x10 [ 1046.538138][T23586] ? rcu_is_watching+0x12/0xc0 [ 1046.542983][T23586] ? preempt_schedule_thunk+0x16/0x30 [ 1046.548937][T23586] ? hci_devcd_dump+0x142/0x240 [ 1046.554047][T23586] ? preempt_schedule_common+0x44/0xc0 [ 1046.559595][T23586] ? check_panic_on_warn+0x1f/0xb0 [ 1046.564807][T23586] ? hci_devcd_dump+0x142/0x240 [ 1046.569731][T23586] check_panic_on_warn+0xab/0xb0 [ 1046.574726][T23586] end_report+0x107/0x170 [ 1046.579106][T23586] kasan_report+0xee/0x110 [ 1046.583555][T23586] ? hci_devcd_dump+0x142/0x240 [ 1046.588448][T23586] kasan_check_range+0x100/0x1b0 [ 1046.593413][T23586] __asan_memcpy+0x23/0x60 [ 1046.598346][T23586] hci_devcd_dump+0x142/0x240 [ 1046.603060][T23586] hci_devcd_rx+0xa25/0x1780 [ 1046.607688][T23586] ? lock_release+0x201/0x2f0 [ 1046.612397][T23586] ? __pfx_hci_devcd_rx+0x10/0x10 [ 1046.617462][T23586] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1046.623304][T23586] ? debug_object_deactivate+0x1ec/0x3a0 [ 1046.628968][T23586] ? finish_task_switch.isra.0+0x221/0xc10 [ 1046.634809][T23586] ? __pfx_debug_object_deactivate+0x10/0x10 [ 1046.640840][T23586] ? trace_sched_exit_tp+0xde/0x130 [ 1046.646093][T23586] ? rcu_is_watching+0x12/0xc0 [ 1046.650895][T23586] ? lock_acquire+0x2cd/0x350 [ 1046.655602][T23586] ? rcu_is_watching+0x12/0xc0 [ 1046.660476][T23586] ? rcu_is_watching+0x12/0xc0 [ 1046.665279][T23586] process_one_work+0x9cf/0x1b70 [ 1046.670267][T23586] ? __pfx_hci_devcd_rx+0x10/0x10 [ 1046.675352][T23586] ? __pfx_process_one_work+0x10/0x10 [ 1046.680849][T23586] ? assign_work+0x1a0/0x250 [ 1046.685512][T23586] worker_thread+0x6c8/0xf10 [ 1046.690152][T23586] ? __kthread_parkme+0x19e/0x250 [ 1046.695206][T23586] ? __pfx_worker_thread+0x10/0x10 [ 1046.700447][T23586] kthread+0x3c5/0x780 [ 1046.704559][T23586] ? __pfx_kthread+0x10/0x10 [ 1046.709181][T23586] ? ret_from_fork+0x25/0x6f0 [ 1046.713888][T23586] ? rcu_is_watching+0x12/0xc0 [ 1046.718681][T23586] ? rcu_is_watching+0x12/0xc0 [ 1046.723468][T23586] ? __pfx_kthread+0x10/0x10 [ 1046.728097][T23586] ret_from_fork+0x5d4/0x6f0 [ 1046.732821][T23586] ? __pfx_kthread+0x10/0x10 [ 1046.737460][T23586] ret_from_fork_asm+0x1a/0x30 [ 1046.742312][T23586] [ 1046.745721][T23586] Kernel Offset: disabled [ 1046.750098][T23586] Rebooting in 86400 seconds..