last executing test programs: 9.922838012s ago: executing program 1 (id=3044): close_range$auto(0x2, 0x8, 0x0) memfd_secret$auto(0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x0, 0x8, 0xfffffffffffffffa, 0x13, 0x3, 0x0) r0 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x0, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r0, 0x80503d0a, 0x0) 2.98726352s ago: executing program 2 (id=3098): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f0, 0x15) madvise$auto(0x0, 0x200007, 0x19) pkey_mprotect$auto(0x0, 0x7, 0x6, 0xfffffffb) 2.590303762s ago: executing program 0 (id=3093): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) creat$auto(0x0, 0x7f) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0x200007, 0x19) r0 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/smaps_rollup\x00', 0x40840, 0x0) read$auto_proc_pid_maps_operations_internal(r0, &(0x7f00000010c0)=""/4082, 0xff2) 2.146086895s ago: executing program 2 (id=3094): mmap$auto(0x0, 0x4020006, 0xdf, 0xeb1, 0x401, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) capset$auto(0x0, &(0x7f0000000000)={0x3, 0x7, 0x8}) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/scsi/sg/device_strs\x00', 0x0, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/kernel/seccomp/actions_logged\x00', 0x8202, 0x0) write$auto(0x3, 0x0, 0xfdef) 1.992441059s ago: executing program 2 (id=3095): openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_GET_MSRS(r0, 0x4090ae82, 0x0) 1.555126328s ago: executing program 2 (id=3097): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0x2, 0x5, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x2, 0x0, 0x8) 1.386751913s ago: executing program 3 (id=3101): socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400408, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r0 = socket(0x2, 0x2, 0x0) socket(0x2, 0x1, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS0\x00', 0x1, 0x0) ioctl$auto(r1, 0x541b, r0) 1.128307218s ago: executing program 3 (id=3102): openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_GET_MSRS(r0, 0x4008ae89, &(0x7f00000001c0)={0x3, 0x0, [{0x560, 0xe3}]}) 1.128216331s ago: executing program 0 (id=3103): socket(0x15, 0x5, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x106) 1.127238873s ago: executing program 1 (id=3104): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0xa, 0x2, 0x88) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r1, @new_prog_fd=0x4, 0x4, @old_prog_fd=r0}, 0xa3) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) r2 = open(0x0, 0x261c2, 0x84) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r2, 0x0, 0x3}, 0xc) 1.039116504s ago: executing program 2 (id=3105): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f0, 0x15) madvise$auto(0x0, 0x200007, 0x19) timer_create$auto(0x9, 0x0, 0x0) 994.692176ms ago: executing program 1 (id=3106): sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x28, 0x0, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT={0x8, 0x1a, 0x800}, @BATADV_ATTR_NEIGH_ADDRESS={0xa, 0x18, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x4c894}, 0x24008010) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004c18}, 0x810) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)={0x14, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20008810) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' '], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 928.016426ms ago: executing program 0 (id=3107): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) get_robust_list$auto(0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$auto(r0, 0x10f, 0x87, 0x0, 0x14) bind$auto(0x3, &(0x7f0000000040)=@tipc=@name={0x1e, 0x2, 0x3, {{0x40}, 0x4}}, 0x6a) 767.723319ms ago: executing program 0 (id=3108): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x40008000) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x3, 0x2) socketpair$auto(0x3, 0x5, 0x6, 0x0) setsockopt$auto(0x3, 0x0, 0xf, 0x0, 0xb) bind$auto(0x3, 0x0, 0x6b) 746.858895ms ago: executing program 3 (id=3109): mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/bonding/all_slaves_active\x00', 0xb02, 0x0) read$auto(0x3, 0x0, 0xf34) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/ati_remote2/parameters/mode_mask\x00', 0x80401, 0x0) write$auto(r0, 0x0, 0x800f) 628.662016ms ago: executing program 0 (id=3110): close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) mmap$auto(0x0, 0x4, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) unshare$auto(0x40000080) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0x4070aea0, 0x38) 627.60936ms ago: executing program 1 (id=3111): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff6a, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4000009}, 0x24004880) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="010600bd7000fbdbdf250a"], 0x1c}}, 0x20008810) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=':'], 0x1ac}}, 0x40000) sendmmsg$auto(r0, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc4}, 0x2, 0x0, 0x0, 0x1}, 0x5}, 0x3, 0x0) read$auto(0x3, 0x0, 0xf34) 483.087215ms ago: executing program 3 (id=3112): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xb, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/cpu/cpu1/hotplug/fail\x00', 0x100, 0x0) fstat$auto(0x2, 0x0) r0 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r0, 0x107, 0x1, 0x0, 0x8004) close_range$auto(0x2, 0x8, 0x0) 358.011204ms ago: executing program 3 (id=3113): r0 = socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x11, 0x80003, 0x300) socket$nl_generic(0x10, 0x3, 0x10) r1 = fanotify_init$auto(0x5, 0x0) fanotify_mark$auto(r1, 0x205, 0xa, 0x4, 0x0) fchown$auto(r0, 0x0, 0xee00) 277.471597ms ago: executing program 1 (id=3114): r0 = socket(0x10, 0x2, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x1020, 0x202, 0x10007, 0x8, 0xffffffffffffffff, [], {0x26, 0x6, 0x8c48, 0x4, 0x100, 0x7f, 0x101, 0x6, 0x2}, {0x100, 0x10000008, 0x7, 0x1, 0x1, 0x3f, 0x76c4, 0x80008, 0x5}}) close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x2, 0x0) r1 = socket(0xa, 0x3, 0xff) connect$auto(r1, &(0x7f00000018c0)=@generic={0xa}, 0x55) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x8) 236.895643ms ago: executing program 2 (id=3115): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x109481, 0x0) mmap$auto(0x0, 0x400005, 0x800000000000df, 0x9b72, 0x2, 0x8000) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv6/conf/default/ioam6_id_wide\x00', 0x40100, 0x0) read$auto(r0, 0x0, 0x1ff) write$auto(0x3, 0x0, 0xfdef) 47.934759ms ago: executing program 1 (id=3116): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) fcntl$auto(0x3, 0x4, 0xa553) shutdown$auto(0x200000003, 0x2) 557.805µs ago: executing program 0 (id=3117): openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_GET_MSRS(r0, 0xc028ae92, &(0x7f0000000040)={0x2}) 0s ago: executing program 3 (id=3118): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) eventfd$auto(0x3) socketpair$auto(0x9, 0x2, 0x10000, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptyd9\x00', 0x0, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) kernel console output (not intermixed with test programs): 0000246 R12: 0000000000000000 [ 264.180852][T10486] R13: 0000000000000000 R14: 00007fd60f1b5fa0 R15: 00007ffc052fa738 [ 264.180890][T10486] [ 265.624678][T10520] FAULT_INJECTION: forcing a failure. [ 265.624678][T10520] name failslab, interval 1, probability 0, space 0, times 0 [ 265.659503][T10520] CPU: 1 UID: 0 PID: 10520 Comm: syz.0.1759 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 265.659538][T10520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 265.659552][T10520] Call Trace: [ 265.659560][T10520] [ 265.659569][T10520] dump_stack_lvl+0x16c/0x1f0 [ 265.659610][T10520] should_fail_ex+0x512/0x640 [ 265.659643][T10520] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 265.659683][T10520] should_failslab+0xc2/0x120 [ 265.659706][T10520] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 265.659742][T10520] ? __proc_create+0xc3/0x8c0 [ 265.659775][T10520] ? __proc_create+0x2ce/0x8c0 [ 265.659815][T10520] __proc_create+0x2ce/0x8c0 [ 265.659854][T10520] ? __pfx___proc_create+0x10/0x10 [ 265.659886][T10520] ? pcpu_chunk_relocate+0x126/0x190 [ 265.659927][T10520] proc_create_reg+0x7d/0x180 [ 265.659951][T10520] ? __pfx_xfrm_statistics_seq_show+0x10/0x10 [ 265.659977][T10520] proc_create_net_single+0x86/0x170 [ 265.660000][T10520] ? __pfx_proc_create_net_single+0x10/0x10 [ 265.660031][T10520] ? __pfx_xfrm_net_init+0x10/0x10 [ 265.660062][T10520] xfrm_proc_init+0x4d/0x70 [ 265.660083][T10520] xfrm_net_init+0x1f0/0xcc0 [ 265.660121][T10520] ? __pfx_xfrm_net_init+0x10/0x10 [ 265.660152][T10520] ops_init+0x1df/0x5f0 [ 265.660192][T10520] setup_net+0x1ff/0x510 [ 265.660213][T10520] ? lockdep_init_map_type+0x5c/0x280 [ 265.660246][T10520] ? __pfx_setup_net+0x10/0x10 [ 265.660271][T10520] ? debug_mutex_init+0x37/0x70 [ 265.660299][T10520] copy_net_ns+0x2a6/0x5f0 [ 265.660327][T10520] create_new_namespaces+0x3ea/0xa90 [ 265.660362][T10520] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 265.660392][T10520] ksys_unshare+0x45b/0xa40 [ 265.660434][T10520] ? __pfx_ksys_unshare+0x10/0x10 [ 265.660467][T10520] ? xfd_validate_state+0x61/0x180 [ 265.660509][T10520] __x64_sys_unshare+0x31/0x40 [ 265.660544][T10520] do_syscall_64+0xcd/0x490 [ 265.660582][T10520] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.660607][T10520] RIP: 0033:0x7fd60ef8e929 [ 265.660627][T10520] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 265.660650][T10520] RSP: 002b:00007fd60fd1a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 265.660674][T10520] RAX: ffffffffffffffda RBX: 00007fd60f1b5fa0 RCX: 00007fd60ef8e929 [ 265.660691][T10520] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 265.660706][T10520] RBP: 00007fd60f010b39 R08: 0000000000000000 R09: 0000000000000000 [ 265.660720][T10520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 265.660735][T10520] R13: 0000000000000000 R14: 00007fd60f1b5fa0 R15: 00007ffc052fa738 [ 265.660768][T10520] [ 266.312085][T10530] netlink: 'syz.0.1765': attribute type 2 has an invalid length. [ 266.338675][T10530] netlink: 'syz.0.1765': attribute type 2 has an invalid length. [ 266.561211][T10544] FAULT_INJECTION: forcing a failure. [ 266.561211][T10544] name failslab, interval 1, probability 0, space 0, times 0 [ 266.598573][T10544] CPU: 0 UID: 0 PID: 10544 Comm: syz.2.1771 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 266.598611][T10544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 266.598625][T10544] Call Trace: [ 266.598634][T10544] [ 266.598644][T10544] dump_stack_lvl+0x16c/0x1f0 [ 266.598684][T10544] should_fail_ex+0x512/0x640 [ 266.598715][T10544] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 266.598748][T10544] should_failslab+0xc2/0x120 [ 266.598771][T10544] __kmalloc_cache_noprof+0x6a/0x3e0 [ 266.598799][T10544] ? _raw_spin_unlock+0x28/0x50 [ 266.598826][T10544] ? snd_ctl_open+0x174/0x5e0 [ 266.598861][T10544] snd_ctl_open+0x174/0x5e0 [ 266.598895][T10544] ? __pfx_snd_ctl_open+0x10/0x10 [ 266.598925][T10544] snd_open+0x1fe/0x450 [ 266.598946][T10544] ? __pfx_snd_open+0x10/0x10 [ 266.598967][T10544] chrdev_open+0x231/0x6a0 [ 266.598999][T10544] ? __pfx_apparmor_file_open+0x10/0x10 [ 266.599029][T10544] ? __pfx_chrdev_open+0x10/0x10 [ 266.599076][T10544] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 266.599114][T10544] do_dentry_open+0x744/0x1c10 [ 266.599148][T10544] ? __pfx_chrdev_open+0x10/0x10 [ 266.599189][T10544] vfs_open+0x82/0x3f0 [ 266.599219][T10544] path_openat+0x1de4/0x2cb0 [ 266.599264][T10544] ? __pfx_path_openat+0x10/0x10 [ 266.599339][T10544] ? __lock_acquire+0xb8a/0x1c90 [ 266.599378][T10544] do_filp_open+0x20b/0x470 [ 266.599413][T10544] ? __pfx_do_filp_open+0x10/0x10 [ 266.599466][T10544] ? alloc_fd+0x471/0x7d0 [ 266.599506][T10544] do_sys_openat2+0x11b/0x1d0 [ 266.599531][T10544] ? __pfx_do_sys_openat2+0x10/0x10 [ 266.599571][T10544] __x64_sys_openat+0x174/0x210 [ 266.599598][T10544] ? __pfx___x64_sys_openat+0x10/0x10 [ 266.599640][T10544] do_syscall_64+0xcd/0x490 [ 266.599678][T10544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.599704][T10544] RIP: 0033:0x7ffa6f38e929 [ 266.599725][T10544] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 266.599748][T10544] RSP: 002b:00007ffa701c8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 266.599772][T10544] RAX: ffffffffffffffda RBX: 00007ffa6f5b5fa0 RCX: 00007ffa6f38e929 [ 266.599789][T10544] RDX: 0000000000000080 RSI: 0000200000000280 RDI: ffffffffffffff9c [ 266.599804][T10544] RBP: 00007ffa6f410b39 R08: 0000000000000000 R09: 0000000000000000 [ 266.599819][T10544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 266.599834][T10544] R13: 0000000000000000 R14: 00007ffa6f5b5fa0 R15: 00007ffc78f1dd18 [ 266.599866][T10544] [ 267.193322][T10556] netlink: 330 bytes leftover after parsing attributes in process `syz.3.1774'. [ 267.697996][ T30] audit: type=1800 audit(4294967405.638:8): pid=10571 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1781" name="file0" dev="tmpfs" ino=2100 res=0 errno=0 [ 269.154990][T10619] FAULT_INJECTION: forcing a failure. [ 269.154990][T10619] name failslab, interval 1, probability 0, space 0, times 0 [ 269.172185][T10620] netlink: 330 bytes leftover after parsing attributes in process `syz.1.1801'. [ 269.185319][T10619] CPU: 1 UID: 0 PID: 10619 Comm: syz.3.1800 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 269.185355][T10619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 269.185370][T10619] Call Trace: [ 269.185378][T10619] [ 269.185388][T10619] dump_stack_lvl+0x16c/0x1f0 [ 269.185429][T10619] should_fail_ex+0x512/0x640 [ 269.185462][T10619] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 269.185497][T10619] should_failslab+0xc2/0x120 [ 269.185520][T10619] __kmalloc_cache_noprof+0x6a/0x3e0 [ 269.185551][T10619] ? _raw_spin_unlock+0x28/0x50 [ 269.185580][T10619] ? snd_ctl_open+0x174/0x5e0 [ 269.185617][T10619] snd_ctl_open+0x174/0x5e0 [ 269.185650][T10619] ? __pfx_snd_ctl_open+0x10/0x10 [ 269.185681][T10619] snd_open+0x1fe/0x450 [ 269.185704][T10619] ? __pfx_snd_open+0x10/0x10 [ 269.185724][T10619] chrdev_open+0x231/0x6a0 [ 269.185767][T10619] ? __pfx_apparmor_file_open+0x10/0x10 [ 269.185799][T10619] ? __pfx_chrdev_open+0x10/0x10 [ 269.185837][T10619] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 269.185872][T10619] do_dentry_open+0x744/0x1c10 [ 269.185907][T10619] ? __pfx_chrdev_open+0x10/0x10 [ 269.185948][T10619] vfs_open+0x82/0x3f0 [ 269.185977][T10619] path_openat+0x1de4/0x2cb0 [ 269.186017][T10619] ? __pfx_path_openat+0x10/0x10 [ 269.186053][T10619] ? __lock_acquire+0xb8a/0x1c90 [ 269.186087][T10619] do_filp_open+0x20b/0x470 [ 269.186124][T10619] ? __pfx_do_filp_open+0x10/0x10 [ 269.186182][T10619] ? alloc_fd+0x471/0x7d0 [ 269.186223][T10619] do_sys_openat2+0x11b/0x1d0 [ 269.186249][T10619] ? __pfx_do_sys_openat2+0x10/0x10 [ 269.186286][T10619] __x64_sys_openat+0x174/0x210 [ 269.186313][T10619] ? __pfx___x64_sys_openat+0x10/0x10 [ 269.186355][T10619] do_syscall_64+0xcd/0x490 [ 269.186393][T10619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.186417][T10619] RIP: 0033:0x7f2531d8e929 [ 269.186438][T10619] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 269.186461][T10619] RSP: 002b:00007f2532c7a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 269.186485][T10619] RAX: ffffffffffffffda RBX: 00007f2531fb5fa0 RCX: 00007f2531d8e929 [ 269.186502][T10619] RDX: 0000000000000080 RSI: 0000200000000280 RDI: ffffffffffffff9c [ 269.186517][T10619] RBP: 00007f2531e10b39 R08: 0000000000000000 R09: 0000000000000000 [ 269.186532][T10619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 269.186546][T10619] R13: 0000000000000000 R14: 00007f2531fb5fa0 R15: 00007ffda9ed68b8 [ 269.186579][T10619] [ 270.885415][T10654] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1816'. [ 270.928931][T10654] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1816'. [ 271.688256][T10674] netlink: 346 bytes leftover after parsing attributes in process `syz.1.1823'. [ 272.069186][T10681] FAULT_INJECTION: forcing a failure. [ 272.069186][T10681] name failslab, interval 1, probability 0, space 0, times 0 [ 272.123465][T10681] CPU: 0 UID: 0 PID: 10681 Comm: syz.3.1826 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 272.123502][T10681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 272.123527][T10681] Call Trace: [ 272.123536][T10681] [ 272.123546][T10681] dump_stack_lvl+0x16c/0x1f0 [ 272.123587][T10681] should_fail_ex+0x512/0x640 [ 272.123620][T10681] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 272.123662][T10681] should_failslab+0xc2/0x120 [ 272.123688][T10681] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 272.123725][T10681] ? __pfx_proc_create_net_data+0x10/0x10 [ 272.123760][T10681] ? nf_log_net_init+0x9f/0x450 [ 272.123783][T10681] ? __pfx_nf_log_net_init+0x10/0x10 [ 272.123806][T10681] kmemdup_noprof+0x29/0x60 [ 272.123839][T10681] nf_log_net_init+0x9f/0x450 [ 272.123867][T10681] ? __pfx_nf_log_net_init+0x10/0x10 [ 272.123890][T10681] ops_init+0x1df/0x5f0 [ 272.123929][T10681] setup_net+0x1ff/0x510 [ 272.123948][T10681] ? lockdep_init_map_type+0x5c/0x280 [ 272.123979][T10681] ? __pfx_setup_net+0x10/0x10 [ 272.124002][T10681] ? debug_mutex_init+0x37/0x70 [ 272.124028][T10681] copy_net_ns+0x2a6/0x5f0 [ 272.124057][T10681] create_new_namespaces+0x3ea/0xa90 [ 272.124090][T10681] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 272.124118][T10681] ksys_unshare+0x45b/0xa40 [ 272.124150][T10681] ? __pfx_ksys_unshare+0x10/0x10 [ 272.124181][T10681] ? xfd_validate_state+0x61/0x180 [ 272.124220][T10681] __x64_sys_unshare+0x31/0x40 [ 272.124249][T10681] do_syscall_64+0xcd/0x490 [ 272.124287][T10681] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.124311][T10681] RIP: 0033:0x7f2531d8e929 [ 272.124330][T10681] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 272.124352][T10681] RSP: 002b:00007f2532c7a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 272.124375][T10681] RAX: ffffffffffffffda RBX: 00007f2531fb5fa0 RCX: 00007f2531d8e929 [ 272.124390][T10681] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 272.124404][T10681] RBP: 00007f2531e10b39 R08: 0000000000000000 R09: 0000000000000000 [ 272.124417][T10681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 272.124430][T10681] R13: 0000000000000000 R14: 00007f2531fb5fa0 R15: 00007ffda9ed68b8 [ 272.124483][T10681] [ 274.949722][T10749] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1851'. [ 274.968106][T10749] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 274.985986][T10749] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 275.004205][T10749] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 275.011959][T10749] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 275.043286][T10753] FAULT_INJECTION: forcing a failure. [ 275.043286][T10753] name failslab, interval 1, probability 0, space 0, times 0 [ 275.062386][T10753] CPU: 1 UID: 0 PID: 10753 Comm: syz.2.1852 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 275.062421][T10753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 275.062435][T10753] Call Trace: [ 275.062443][T10753] [ 275.062452][T10753] dump_stack_lvl+0x16c/0x1f0 [ 275.062493][T10753] should_fail_ex+0x512/0x640 [ 275.062527][T10753] ? __kvmalloc_node_noprof+0x124/0x620 [ 275.062566][T10753] should_failslab+0xc2/0x120 [ 275.062589][T10753] __kvmalloc_node_noprof+0x137/0x620 [ 275.062621][T10753] ? lockdep_init_map_type+0x5c/0x280 [ 275.062654][T10753] ? open_substream+0x30c/0x9b0 [ 275.062687][T10753] ? open_substream+0x30c/0x9b0 [ 275.062711][T10753] ? open_substream+0x19a/0x9b0 [ 275.062734][T10753] open_substream+0x30c/0x9b0 [ 275.062767][T10753] rawmidi_open_priv+0x543/0x6e0 [ 275.062808][T10753] snd_rawmidi_open+0x4cc/0xbf0 [ 275.062847][T10753] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 275.062882][T10753] ? __pfx_default_wake_function+0x10/0x10 [ 275.062913][T10753] ? kobject_get_unless_zero+0x156/0x1e0 [ 275.062958][T10753] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 275.062988][T10753] snd_open+0x1fe/0x450 [ 275.063012][T10753] ? __pfx_snd_open+0x10/0x10 [ 275.063033][T10753] chrdev_open+0x231/0x6a0 [ 275.063068][T10753] ? __pfx_apparmor_file_open+0x10/0x10 [ 275.063098][T10753] ? __pfx_chrdev_open+0x10/0x10 [ 275.063136][T10753] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 275.063175][T10753] do_dentry_open+0x744/0x1c10 [ 275.063220][T10753] ? __pfx_chrdev_open+0x10/0x10 [ 275.063264][T10753] vfs_open+0x82/0x3f0 [ 275.063296][T10753] path_openat+0x1de4/0x2cb0 [ 275.063350][T10753] ? __pfx_path_openat+0x10/0x10 [ 275.063385][T10753] ? __lock_acquire+0xb8a/0x1c90 [ 275.063418][T10753] do_filp_open+0x20b/0x470 [ 275.063452][T10753] ? __pfx_do_filp_open+0x10/0x10 [ 275.063512][T10753] ? alloc_fd+0x471/0x7d0 [ 275.063554][T10753] do_sys_openat2+0x11b/0x1d0 [ 275.063580][T10753] ? __pfx_do_sys_openat2+0x10/0x10 [ 275.063622][T10753] __x64_sys_openat+0x174/0x210 [ 275.063650][T10753] ? __pfx___x64_sys_openat+0x10/0x10 [ 275.063692][T10753] do_syscall_64+0xcd/0x490 [ 275.063731][T10753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.063757][T10753] RIP: 0033:0x7ffa6f38e929 [ 275.063778][T10753] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 275.063802][T10753] RSP: 002b:00007ffa701c8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 275.063827][T10753] RAX: ffffffffffffffda RBX: 00007ffa6f5b5fa0 RCX: 00007ffa6f38e929 [ 275.063845][T10753] RDX: 0000000000080102 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 275.063862][T10753] RBP: 00007ffa6f410b39 R08: 0000000000000000 R09: 0000000000000000 [ 275.063878][T10753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 275.063893][T10753] R13: 0000000000000000 R14: 00007ffa6f5b5fa0 R15: 00007ffc78f1dd18 [ 275.063928][T10753] [ 276.004643][ T5839] Bluetooth: hci0: ISO packet too small [ 276.222460][T10780] FAULT_INJECTION: forcing a failure. [ 276.222460][T10780] name failslab, interval 1, probability 0, space 0, times 0 [ 276.239122][T10780] CPU: 1 UID: 0 PID: 10780 Comm: syz.1.1863 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 276.239161][T10780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 276.239177][T10780] Call Trace: [ 276.239186][T10780] [ 276.239196][T10780] dump_stack_lvl+0x16c/0x1f0 [ 276.239239][T10780] should_fail_ex+0x512/0x640 [ 276.239274][T10780] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 276.239325][T10780] should_failslab+0xc2/0x120 [ 276.239351][T10780] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 276.239389][T10780] ? __pfx_proc_create_net_data+0x10/0x10 [ 276.239428][T10780] ? nf_log_net_init+0x9f/0x450 [ 276.239454][T10780] ? __pfx_nf_log_net_init+0x10/0x10 [ 276.239477][T10780] kmemdup_noprof+0x29/0x60 [ 276.239514][T10780] nf_log_net_init+0x9f/0x450 [ 276.239541][T10780] ? __pfx_nf_log_net_init+0x10/0x10 [ 276.239563][T10780] ops_init+0x1df/0x5f0 [ 276.239604][T10780] setup_net+0x1ff/0x510 [ 276.239627][T10780] ? lockdep_init_map_type+0x5c/0x280 [ 276.239661][T10780] ? __pfx_setup_net+0x10/0x10 [ 276.239687][T10780] ? debug_mutex_init+0x37/0x70 [ 276.239716][T10780] copy_net_ns+0x2a6/0x5f0 [ 276.239747][T10780] create_new_namespaces+0x3ea/0xa90 [ 276.239784][T10780] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 276.239814][T10780] ksys_unshare+0x45b/0xa40 [ 276.239846][T10780] ? __pfx_ksys_unshare+0x10/0x10 [ 276.239878][T10780] ? xfd_validate_state+0x61/0x180 [ 276.239920][T10780] __x64_sys_unshare+0x31/0x40 [ 276.239948][T10780] do_syscall_64+0xcd/0x490 [ 276.239983][T10780] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.240005][T10780] RIP: 0033:0x7fd0bf98e929 [ 276.240025][T10780] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 276.240048][T10780] RSP: 002b:00007fd0c080e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 276.240071][T10780] RAX: ffffffffffffffda RBX: 00007fd0bfbb5fa0 RCX: 00007fd0bf98e929 [ 276.240088][T10780] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 276.240103][T10780] RBP: 00007fd0bfa10b39 R08: 0000000000000000 R09: 0000000000000000 [ 276.240119][T10780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 276.240134][T10780] R13: 0000000000000000 R14: 00007fd0bfbb5fa0 R15: 00007ffe94c4a538 [ 276.240169][T10780] [ 278.011857][T10824] sctp: [Deprecated]: syz.2.1880 (pid 10824) Use of int in max_burst socket option deprecated. [ 278.011857][T10824] Use struct sctp_assoc_value instead [ 279.247623][T10872] netlink: 334 bytes leftover after parsing attributes in process `syz.0.1900'. [ 279.359442][T10876] FAULT_INJECTION: forcing a failure. [ 279.359442][T10876] name failslab, interval 1, probability 0, space 0, times 0 [ 279.377560][T10876] CPU: 0 UID: 0 PID: 10876 Comm: syz.0.1902 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 279.377599][T10876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 279.377615][T10876] Call Trace: [ 279.377624][T10876] [ 279.377633][T10876] dump_stack_lvl+0x16c/0x1f0 [ 279.377677][T10876] should_fail_ex+0x512/0x640 [ 279.377710][T10876] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 279.377746][T10876] should_failslab+0xc2/0x120 [ 279.377771][T10876] __kmalloc_cache_noprof+0x6a/0x3e0 [ 279.377815][T10876] ? open_substream+0xec/0x9b0 [ 279.377844][T10876] ? _raw_spin_unlock_irq+0x23/0x50 [ 279.377882][T10876] open_substream+0xec/0x9b0 [ 279.377914][T10876] rawmidi_open_priv+0x543/0x6e0 [ 279.377951][T10876] snd_rawmidi_open+0x4cc/0xbf0 [ 279.377988][T10876] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 279.378021][T10876] ? __pfx_default_wake_function+0x10/0x10 [ 279.378050][T10876] ? kobject_get_unless_zero+0x156/0x1e0 [ 279.378092][T10876] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 279.378122][T10876] snd_open+0x1fe/0x450 [ 279.378146][T10876] ? __pfx_snd_open+0x10/0x10 [ 279.378168][T10876] chrdev_open+0x231/0x6a0 [ 279.378202][T10876] ? __pfx_apparmor_file_open+0x10/0x10 [ 279.378233][T10876] ? __pfx_chrdev_open+0x10/0x10 [ 279.378272][T10876] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 279.378310][T10876] do_dentry_open+0x744/0x1c10 [ 279.378346][T10876] ? __pfx_chrdev_open+0x10/0x10 [ 279.378390][T10876] vfs_open+0x82/0x3f0 [ 279.378421][T10876] path_openat+0x1de4/0x2cb0 [ 279.378466][T10876] ? __pfx_path_openat+0x10/0x10 [ 279.378501][T10876] ? __lock_acquire+0xb8a/0x1c90 [ 279.378537][T10876] do_filp_open+0x20b/0x470 [ 279.378571][T10876] ? __pfx_do_filp_open+0x10/0x10 [ 279.378631][T10876] ? alloc_fd+0x471/0x7d0 [ 279.378674][T10876] do_sys_openat2+0x11b/0x1d0 [ 279.378700][T10876] ? __pfx_do_sys_openat2+0x10/0x10 [ 279.378742][T10876] __x64_sys_openat+0x174/0x210 [ 279.378770][T10876] ? __pfx___x64_sys_openat+0x10/0x10 [ 279.378821][T10876] do_syscall_64+0xcd/0x490 [ 279.378861][T10876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.378887][T10876] RIP: 0033:0x7fd60ef8e929 [ 279.378908][T10876] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 279.378932][T10876] RSP: 002b:00007fd60fd1a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 279.378956][T10876] RAX: ffffffffffffffda RBX: 00007fd60f1b5fa0 RCX: 00007fd60ef8e929 [ 279.378975][T10876] RDX: 0000000000080102 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 279.378991][T10876] RBP: 00007fd60f010b39 R08: 0000000000000000 R09: 0000000000000000 [ 279.379007][T10876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 279.379021][T10876] R13: 0000000000000000 R14: 00007fd60f1b5fa0 R15: 00007ffc052fa738 [ 279.379055][T10876] [ 280.081233][T10891] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1909'. [ 280.118076][T10891] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 280.125542][T10891] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 280.170900][T10891] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 280.225680][T10891] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 280.583816][T10914] netlink: 334 bytes leftover after parsing attributes in process `syz.3.1917'. [ 280.970784][T10928] netlink: 334 bytes leftover after parsing attributes in process `syz.2.1929'. [ 281.943480][T10954] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1930'. [ 284.230086][T11028] netlink: 334 bytes leftover after parsing attributes in process `syz.1.1956'. [ 284.339365][T11034] netlink: 330 bytes leftover after parsing attributes in process `syz.0.1959'. [ 284.451841][T11038] netlink: 350 bytes leftover after parsing attributes in process `syz.0.1961'. [ 284.910660][T11053] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1969'. [ 285.669490][T11077] sctp: [Deprecated]: syz.1.1976 (pid 11077) Use of int in max_burst socket option deprecated. [ 285.669490][T11077] Use struct sctp_assoc_value instead [ 285.837899][T11082] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1978'. [ 287.233219][T11115] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1990'. [ 287.616037][T11120] zswap: compressor not available [ 289.286654][T11171] netlink: 334 bytes leftover after parsing attributes in process `syz.0.2013'. [ 289.458541][T11179] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2016'. [ 290.401453][T11208] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2026'. [ 290.912921][T11222] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 291.436696][T11238] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2040'. [ 291.712779][T11242] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2051'. [ 291.757195][T11242] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2051'. [ 291.934135][T11249] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2044'. [ 291.954776][T11249] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2044'. [ 292.239016][T11258] FAULT_INJECTION: forcing a failure. [ 292.239016][T11258] name failslab, interval 1, probability 0, space 0, times 0 [ 292.387371][T11258] CPU: 1 UID: 0 PID: 11258 Comm: syz.1.2047 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 292.387411][T11258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 292.387427][T11258] Call Trace: [ 292.387437][T11258] [ 292.387447][T11258] dump_stack_lvl+0x16c/0x1f0 [ 292.387489][T11258] should_fail_ex+0x512/0x640 [ 292.387521][T11258] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 292.387565][T11258] should_failslab+0xc2/0x120 [ 292.387589][T11258] __kmalloc_cache_noprof+0x6a/0x3e0 [ 292.387620][T11258] ? mark_held_locks+0x49/0x80 [ 292.387649][T11258] ? rfkill_fop_open+0x1b6/0x750 [ 292.387683][T11258] rfkill_fop_open+0x1b6/0x750 [ 292.387716][T11258] ? __pfx_rfkill_fop_open+0x10/0x10 [ 292.387751][T11258] misc_open+0x35d/0x420 [ 292.387781][T11258] ? __pfx_misc_open+0x10/0x10 [ 292.387809][T11258] chrdev_open+0x231/0x6a0 [ 292.387843][T11258] ? __pfx_apparmor_file_open+0x10/0x10 [ 292.387874][T11258] ? __pfx_chrdev_open+0x10/0x10 [ 292.387911][T11258] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 292.387949][T11258] do_dentry_open+0x744/0x1c10 [ 292.387984][T11258] ? __pfx_chrdev_open+0x10/0x10 [ 292.388026][T11258] vfs_open+0x82/0x3f0 [ 292.388057][T11258] path_openat+0x1de4/0x2cb0 [ 292.388102][T11258] ? __pfx_path_openat+0x10/0x10 [ 292.388138][T11258] ? __lock_acquire+0xb8a/0x1c90 [ 292.388173][T11258] do_filp_open+0x20b/0x470 [ 292.388207][T11258] ? __pfx_do_filp_open+0x10/0x10 [ 292.388267][T11258] ? alloc_fd+0x471/0x7d0 [ 292.388309][T11258] do_sys_openat2+0x11b/0x1d0 [ 292.388335][T11258] ? __pfx_do_sys_openat2+0x10/0x10 [ 292.388376][T11258] __x64_sys_openat+0x174/0x210 [ 292.388402][T11258] ? __pfx___x64_sys_openat+0x10/0x10 [ 292.388441][T11258] do_syscall_64+0xcd/0x490 [ 292.388483][T11258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.388509][T11258] RIP: 0033:0x7fd0bf98e929 [ 292.388538][T11258] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 292.388563][T11258] RSP: 002b:00007fd0c080e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 292.388587][T11258] RAX: ffffffffffffffda RBX: 00007fd0bfbb5fa0 RCX: 00007fd0bf98e929 [ 292.388605][T11258] RDX: 0000000000080480 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 292.388621][T11258] RBP: 00007fd0bfa10b39 R08: 0000000000000000 R09: 0000000000000000 [ 292.388636][T11258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 292.388651][T11258] R13: 0000000000000000 R14: 00007fd0bfbb5fa0 R15: 00007ffe94c4a538 [ 292.388687][T11258] [ 293.075672][T11270] ERROR: Out of memory at tomoyo_memory_ok. [ 293.090818][T11270] ERROR: Domain ' /sbin/init /etc/init.d/rcS /etc/init.d/S50sshd /sbin/start-stop-daemon /usr/sbin/sshd /usr/libexec/sshd-session /bin/sh /root/syz-executor /root/syz-executor /newroot/470/file0' not defined. [ 293.500909][T11282] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2057'. [ 293.883900][T11298] nbd: must specify at least one socket [ 295.900796][T11368] HfR: entered promiscuous mode [ 295.921451][T11368] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2095'. [ 295.956248][T11368] HfR: left promiscuous mode [ 296.409786][T11383] ERROR: Out of memory at tomoyo_memory_ok. [ 296.643583][T11390] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2105'. [ 296.765364][T11393] ALSA: mixer_oss: invalid OSS volume '0' [ 296.771231][T11393] ALSA: mixer_oss: invalid OSS volume '' [ 296.875436][ T5839] Bluetooth: hci0: unexpected event 0x3e length: 726 > 260 [ 296.875474][ T5839] Bluetooth: hci0: unexpected subevent 0x0d length: 725 > 260 [ 296.894476][ T5839] Bluetooth: hci0: Unknown advertising packet type: 0x7f [ 296.894511][ T5839] Bluetooth: hci0: adv larger than maximum supported [ 296.901996][ T5839] Bluetooth: hci0: Malformed LE Event: 0x0d [ 297.432850][T11414] ERROR: Out of memory at tomoyo_memory_ok. [ 297.782946][T11426] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2117'. [ 298.544701][T11454] ALSA: mixer_oss: invalid OSS volume '0' [ 298.554859][T11454] ALSA: mixer_oss: invalid OSS volume '' [ 298.727204][T11460] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2132'. [ 299.047567][T11467] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2137'. [ 300.023867][T11494] netlink: 342 bytes leftover after parsing attributes in process `syz.3.2147'. [ 300.287527][ T5839] Bluetooth: hci3: Malformed LE Event: 0x1b [ 300.824706][T11522] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2159'. [ 301.165651][T11529] FAULT_INJECTION: forcing a failure. [ 301.165651][T11529] name failslab, interval 1, probability 0, space 0, times 0 [ 301.189355][T11529] CPU: 1 UID: 0 PID: 11529 Comm: syz.1.2162 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 301.189389][T11529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 301.189404][T11529] Call Trace: [ 301.189413][T11529] [ 301.189422][T11529] dump_stack_lvl+0x16c/0x1f0 [ 301.189465][T11529] should_fail_ex+0x512/0x640 [ 301.189497][T11529] ? __kmalloc_noprof+0xbf/0x510 [ 301.189532][T11529] ? lsm_blob_alloc+0x68/0x90 [ 301.189564][T11529] should_failslab+0xc2/0x120 [ 301.189586][T11529] __kmalloc_noprof+0xd2/0x510 [ 301.189622][T11529] lsm_blob_alloc+0x68/0x90 [ 301.189672][T11529] security_sk_alloc+0x30/0x270 [ 301.189699][T11529] sk_prot_alloc+0xfb/0x2a0 [ 301.189726][T11529] sk_alloc+0x36/0xc20 [ 301.189758][T11529] tipc_sk_create+0xcf/0x21a0 [ 301.189797][T11529] ? find_held_lock+0x2b/0x80 [ 301.189823][T11529] ? __sock_create+0x2f2/0x8d0 [ 301.189856][T11529] __sock_create+0x338/0x8d0 [ 301.189889][T11529] __sys_socketpair+0x25c/0x5a0 [ 301.189921][T11529] ? __pfx___sys_socketpair+0x10/0x10 [ 301.189947][T11529] ? fput+0x70/0xf0 [ 301.189970][T11529] ? xfd_validate_state+0x61/0x180 [ 301.189998][T11529] ? __pfx_do_writev+0x10/0x10 [ 301.190036][T11529] __x64_sys_socketpair+0x96/0x100 [ 301.190065][T11529] ? lockdep_hardirqs_on+0x7c/0x110 [ 301.190098][T11529] do_syscall_64+0xcd/0x490 [ 301.190132][T11529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.190158][T11529] RIP: 0033:0x7fd0bf98e929 [ 301.190178][T11529] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 301.190202][T11529] RSP: 002b:00007fd0c080e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 301.190226][T11529] RAX: ffffffffffffffda RBX: 00007fd0bfbb5fa0 RCX: 00007fd0bf98e929 [ 301.190244][T11529] RDX: 8000000000000000 RSI: 0000000000000004 RDI: 000000000000001e [ 301.190259][T11529] RBP: 00007fd0bfa10b39 R08: 0000000000000000 R09: 0000000000000000 [ 301.190275][T11529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 301.190290][T11529] R13: 0000000000000000 R14: 00007fd0bfbb5fa0 R15: 00007ffe94c4a538 [ 301.190324][T11529] [ 301.540073][T11536] HfR: entered promiscuous mode [ 301.590100][T11536] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2165'. [ 301.619331][T11536] HfR: left promiscuous mode [ 301.942603][T11544] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2169'. [ 302.258970][T11558] netlink: 206 bytes leftover after parsing attributes in process `syz.3.2175'. [ 302.467796][T11568] HfR: entered promiscuous mode [ 302.497446][T11568] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2178'. [ 302.527900][T11568] HfR: left promiscuous mode [ 302.795946][T11583] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2184'. [ 302.904501][ T5839] Bluetooth: hci1: Malformed LE Event: 0x1b [ 303.164188][T11597] netlink: 206 bytes leftover after parsing attributes in process `syz.2.2191'. [ 303.328902][T11603] syz.0.2193 (11603): /proc/11602/oom_adj is deprecated, please use /proc/11602/oom_score_adj instead. [ 304.009615][T11621] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2198'. [ 304.328301][T11632] netlink: 334 bytes leftover after parsing attributes in process `syz.2.2206'. [ 305.114649][T11661] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2216'. [ 305.566360][T11671] ERROR: Out of memory at tomoyo_memory_ok. [ 306.021920][T11687] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2227'. [ 306.163673][T11693] netlink: 334 bytes leftover after parsing attributes in process `syz.1.2228'. [ 306.266799][T11698] netlink: 'syz.1.2232': attribute type 35 has an invalid length. [ 306.603819][T11711] FAULT_INJECTION: forcing a failure. [ 306.603819][T11711] name failslab, interval 1, probability 0, space 0, times 0 [ 306.618782][T11711] CPU: 1 UID: 0 PID: 11711 Comm: syz.3.2238 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 306.618820][T11711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 306.618837][T11711] Call Trace: [ 306.618845][T11711] [ 306.618868][T11711] dump_stack_lvl+0x16c/0x1f0 [ 306.618910][T11711] should_fail_ex+0x512/0x640 [ 306.618945][T11711] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 306.618980][T11711] should_failslab+0xc2/0x120 [ 306.619005][T11711] __kmalloc_cache_noprof+0x6a/0x3e0 [ 306.619036][T11711] ? do_eventfd+0x67/0x2c0 [ 306.619062][T11711] do_eventfd+0x67/0x2c0 [ 306.619090][T11711] ? rcu_is_watching+0x12/0xc0 [ 306.619118][T11711] __x64_sys_eventfd+0x32/0x50 [ 306.619142][T11711] do_syscall_64+0xcd/0x490 [ 306.619180][T11711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.619206][T11711] RIP: 0033:0x7f2531d8e929 [ 306.619225][T11711] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 306.619250][T11711] RSP: 002b:00007f2532c7a038 EFLAGS: 00000246 ORIG_RAX: 000000000000011c [ 306.619274][T11711] RAX: ffffffffffffffda RBX: 00007f2531fb5fa0 RCX: 00007f2531d8e929 [ 306.619290][T11711] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 306.619305][T11711] RBP: 00007f2531e10b39 R08: 0000000000000000 R09: 0000000000000000 [ 306.619320][T11711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 306.619332][T11711] R13: 0000000000000000 R14: 00007f2531fb5fa0 R15: 00007ffda9ed68b8 [ 306.619365][T11711] [ 307.111859][T11718] netlink: 'syz.3.2243': attribute type 35 has an invalid length. [ 307.143516][T11721] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2241'. [ 307.407402][T11727] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2246'. [ 307.857804][T11738] Device name cannot be null; rc = [-22] [ 307.989620][T11748] netlink: 342 bytes leftover after parsing attributes in process `syz.0.2255'. [ 308.429073][T11766] ERROR: Out of memory at tomoyo_memory_ok. [ 308.661941][T11771] Device name cannot be null; rc = [-22] [ 308.880973][T11786] FAULT_INJECTION: forcing a failure. [ 308.880973][T11786] name failslab, interval 1, probability 0, space 0, times 0 [ 308.894434][T11786] CPU: 0 UID: 0 PID: 11786 Comm: syz.2.2269 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 308.894471][T11786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 308.894486][T11786] Call Trace: [ 308.894494][T11786] [ 308.894504][T11786] dump_stack_lvl+0x16c/0x1f0 [ 308.894545][T11786] should_fail_ex+0x512/0x640 [ 308.894579][T11786] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 308.894615][T11786] should_failslab+0xc2/0x120 [ 308.894639][T11786] __kmalloc_cache_noprof+0x6a/0x3e0 [ 308.894671][T11786] ? do_eventfd+0x67/0x2c0 [ 308.894698][T11786] do_eventfd+0x67/0x2c0 [ 308.894719][T11786] ? rcu_is_watching+0x12/0xc0 [ 308.894746][T11786] __x64_sys_eventfd+0x32/0x50 [ 308.894770][T11786] do_syscall_64+0xcd/0x490 [ 308.894807][T11786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.894833][T11786] RIP: 0033:0x7ffa6f38e929 [ 308.894854][T11786] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 308.894878][T11786] RSP: 002b:00007ffa701c8038 EFLAGS: 00000246 ORIG_RAX: 000000000000011c [ 308.894903][T11786] RAX: ffffffffffffffda RBX: 00007ffa6f5b5fa0 RCX: 00007ffa6f38e929 [ 308.894921][T11786] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 308.894944][T11786] RBP: 00007ffa6f410b39 R08: 0000000000000000 R09: 0000000000000000 [ 308.894960][T11786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 308.894976][T11786] R13: 0000000000000000 R14: 00007ffa6f5b5fa0 R15: 00007ffc78f1dd18 [ 308.895011][T11786] [ 309.858545][T11815] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2281'. [ 309.931322][T11812] zswap: compressor 000 not available [ 309.957954][T11817] netlink: 342 bytes leftover after parsing attributes in process `syz.0.2282'. [ 310.634497][T11846] netlink: 342 bytes leftover after parsing attributes in process `syz.2.2291'. [ 310.955235][T11855] zswap: compressor 000 not available [ 311.013869][T11864] openvswitch: netlink: IP tunnel dst address not specified [ 311.037078][T11864] openvswitch: netlink: IP tunnel dst address not specified [ 311.394463][T11881] netlink: 342 bytes leftover after parsing attributes in process `syz.3.2305'. [ 311.843928][T11895] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2309'. [ 311.872736][T11895] vcan0: entered promiscuous mode [ 312.079348][T11897] FAULT_INJECTION: forcing a failure. [ 312.079348][T11897] name failslab, interval 1, probability 0, space 0, times 0 [ 312.121986][T11897] CPU: 0 UID: 0 PID: 11897 Comm: syz.0.2310 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 312.122022][T11897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 312.122041][T11897] Call Trace: [ 312.122050][T11897] [ 312.122060][T11897] dump_stack_lvl+0x16c/0x1f0 [ 312.122104][T11897] should_fail_ex+0x512/0x640 [ 312.122136][T11897] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 312.122172][T11897] should_failslab+0xc2/0x120 [ 312.122198][T11897] __kmalloc_cache_noprof+0x6a/0x3e0 [ 312.122230][T11897] ? open_substream+0xec/0x9b0 [ 312.122263][T11897] open_substream+0xec/0x9b0 [ 312.122289][T11897] ? lockdep_hardirqs_on+0x7c/0x110 [ 312.122326][T11897] rawmidi_open_priv+0x543/0x6e0 [ 312.122363][T11897] snd_rawmidi_open+0x4cc/0xbf0 [ 312.122400][T11897] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 312.122433][T11897] ? __pfx_default_wake_function+0x10/0x10 [ 312.122461][T11897] ? kobject_get_unless_zero+0x156/0x1e0 [ 312.122503][T11897] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 312.122532][T11897] snd_open+0x1fe/0x450 [ 312.122556][T11897] ? __pfx_snd_open+0x10/0x10 [ 312.122578][T11897] chrdev_open+0x231/0x6a0 [ 312.122612][T11897] ? __pfx_apparmor_file_open+0x10/0x10 [ 312.122652][T11897] ? __pfx_chrdev_open+0x10/0x10 [ 312.122692][T11897] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 312.122732][T11897] do_dentry_open+0x744/0x1c10 [ 312.122767][T11897] ? __pfx_chrdev_open+0x10/0x10 [ 312.122809][T11897] vfs_open+0x82/0x3f0 [ 312.122839][T11897] path_openat+0x1de4/0x2cb0 [ 312.122883][T11897] ? __pfx_path_openat+0x10/0x10 [ 312.122919][T11897] ? __lock_acquire+0xb8a/0x1c90 [ 312.122954][T11897] do_filp_open+0x20b/0x470 [ 312.122988][T11897] ? __pfx_do_filp_open+0x10/0x10 [ 312.123048][T11897] ? alloc_fd+0x471/0x7d0 [ 312.123090][T11897] do_sys_openat2+0x11b/0x1d0 [ 312.123116][T11897] ? __pfx_do_sys_openat2+0x10/0x10 [ 312.123157][T11897] __x64_sys_openat+0x174/0x210 [ 312.123185][T11897] ? __pfx___x64_sys_openat+0x10/0x10 [ 312.123227][T11897] do_syscall_64+0xcd/0x490 [ 312.123265][T11897] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.123291][T11897] RIP: 0033:0x7fd60ef8e929 [ 312.123312][T11897] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 312.123336][T11897] RSP: 002b:00007fd60fd1a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 312.123359][T11897] RAX: ffffffffffffffda RBX: 00007fd60f1b5fa0 RCX: 00007fd60ef8e929 [ 312.123375][T11897] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 312.123391][T11897] RBP: 00007fd60f010b39 R08: 0000000000000000 R09: 0000000000000000 [ 312.123405][T11897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 312.123420][T11897] R13: 0000000000000000 R14: 00007fd60f1b5fa0 R15: 00007ffc052fa738 [ 312.123455][T11897] [ 312.757003][T11912] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2315'. [ 313.458268][T11927] netlink: 342 bytes leftover after parsing attributes in process `syz.3.2322'. [ 313.969509][T11936] openvswitch: netlink: IP tunnel dst address not specified [ 314.009186][T11936] openvswitch: netlink: IP tunnel dst address not specified [ 314.471428][T11949] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2330'. [ 314.507369][T11949] vcan0: entered promiscuous mode [ 314.759509][T11957] netlink: 342 bytes leftover after parsing attributes in process `syz.0.2334'. [ 315.691133][T11985] netlink: 334 bytes leftover after parsing attributes in process `syz.0.2344'. [ 315.990380][T11987] zswap: compressor 000 not available [ 317.180711][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.187420][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.755676][T12038] netlink: 334 bytes leftover after parsing attributes in process `syz.3.2364'. [ 318.384023][T12052] FAULT_INJECTION: forcing a failure. [ 318.384023][T12052] name failslab, interval 1, probability 0, space 0, times 0 [ 318.417285][T12052] CPU: 1 UID: 0 PID: 12052 Comm: syz.2.2370 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 318.417323][T12052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 318.417338][T12052] Call Trace: [ 318.417347][T12052] [ 318.417357][T12052] dump_stack_lvl+0x16c/0x1f0 [ 318.417400][T12052] should_fail_ex+0x512/0x640 [ 318.417433][T12052] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 318.417470][T12052] should_failslab+0xc2/0x120 [ 318.417495][T12052] __kmalloc_cache_noprof+0x6a/0x3e0 [ 318.417528][T12052] ? open_substream+0xec/0x9b0 [ 318.417560][T12052] open_substream+0xec/0x9b0 [ 318.417586][T12052] ? lockdep_hardirqs_on+0x7c/0x110 [ 318.417624][T12052] rawmidi_open_priv+0x543/0x6e0 [ 318.417660][T12052] snd_rawmidi_open+0x4cc/0xbf0 [ 318.417699][T12052] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 318.417731][T12052] ? __pfx_default_wake_function+0x10/0x10 [ 318.417761][T12052] ? kobject_get_unless_zero+0x156/0x1e0 [ 318.417803][T12052] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 318.417833][T12052] snd_open+0x1fe/0x450 [ 318.417858][T12052] ? __pfx_snd_open+0x10/0x10 [ 318.417879][T12052] chrdev_open+0x231/0x6a0 [ 318.417914][T12052] ? __pfx_apparmor_file_open+0x10/0x10 [ 318.417944][T12052] ? __pfx_chrdev_open+0x10/0x10 [ 318.417984][T12052] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 318.418022][T12052] do_dentry_open+0x744/0x1c10 [ 318.418056][T12052] ? __pfx_chrdev_open+0x10/0x10 [ 318.418097][T12052] vfs_open+0x82/0x3f0 [ 318.418127][T12052] path_openat+0x1de4/0x2cb0 [ 318.418172][T12052] ? __pfx_path_openat+0x10/0x10 [ 318.418215][T12052] ? __lock_acquire+0xb8a/0x1c90 [ 318.418254][T12052] do_filp_open+0x20b/0x470 [ 318.418291][T12052] ? __pfx_do_filp_open+0x10/0x10 [ 318.418356][T12052] ? alloc_fd+0x471/0x7d0 [ 318.418400][T12052] do_sys_openat2+0x11b/0x1d0 [ 318.418428][T12052] ? __pfx_do_sys_openat2+0x10/0x10 [ 318.418471][T12052] __x64_sys_openat+0x174/0x210 [ 318.418500][T12052] ? __pfx___x64_sys_openat+0x10/0x10 [ 318.418544][T12052] do_syscall_64+0xcd/0x490 [ 318.418583][T12052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.418609][T12052] RIP: 0033:0x7ffa6f38e929 [ 318.418629][T12052] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 318.418655][T12052] RSP: 002b:00007ffa701c8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 318.418679][T12052] RAX: ffffffffffffffda RBX: 00007ffa6f5b5fa0 RCX: 00007ffa6f38e929 [ 318.418696][T12052] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 318.418713][T12052] RBP: 00007ffa6f410b39 R08: 0000000000000000 R09: 0000000000000000 [ 318.418730][T12052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 318.418745][T12052] R13: 0000000000000000 R14: 00007ffa6f5b5fa0 R15: 00007ffc78f1dd18 [ 318.418780][T12052] [ 320.320339][T12099] netlink: 334 bytes leftover after parsing attributes in process `syz.3.2379'. [ 320.695758][T12112] netlink: 342 bytes leftover after parsing attributes in process `syz.2.2383'. [ 321.081614][T12118] FAULT_INJECTION: forcing a failure. [ 321.081614][T12118] name failslab, interval 1, probability 0, space 0, times 0 [ 321.112481][T12118] CPU: 0 UID: 0 PID: 12118 Comm: syz.0.2385 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 321.112521][T12118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 321.112536][T12118] Call Trace: [ 321.112543][T12118] [ 321.112552][T12118] dump_stack_lvl+0x16c/0x1f0 [ 321.112593][T12118] should_fail_ex+0x512/0x640 [ 321.112623][T12118] ? fs_reclaim_acquire+0xae/0x150 [ 321.112652][T12118] ? tomoyo_init_log+0x1385/0x2140 [ 321.112681][T12118] should_failslab+0xc2/0x120 [ 321.112704][T12118] __kmalloc_noprof+0xd2/0x510 [ 321.112745][T12118] tomoyo_init_log+0x1385/0x2140 [ 321.112792][T12118] ? __pfx_tomoyo_init_log+0x10/0x10 [ 321.112831][T12118] tomoyo_write_log2+0x2f7/0xc10 [ 321.112866][T12118] tomoyo_supervisor+0x15e/0x13b0 [ 321.112904][T12118] ? __pfx_tomoyo_supervisor+0x10/0x10 [ 321.112952][T12118] ? lockdep_hardirqs_on+0x7c/0x110 [ 321.113001][T12118] ? tomoyo_check_path_acl+0xad/0x210 [ 321.113033][T12118] ? tomoyo_check_acl+0x1f7/0x410 [ 321.113063][T12118] tomoyo_path_permission+0x270/0x3b0 [ 321.113093][T12118] tomoyo_check_open_permission+0x349/0x3c0 [ 321.113124][T12118] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 321.113185][T12118] ? find_held_lock+0x2b/0x80 [ 321.113218][T12118] tomoyo_file_open+0x6b/0x90 [ 321.113255][T12118] security_file_open+0x84/0x1e0 [ 321.113286][T12118] do_dentry_open+0x596/0x1c10 [ 321.113331][T12118] vfs_open+0x82/0x3f0 [ 321.113361][T12118] path_openat+0x1de4/0x2cb0 [ 321.113406][T12118] ? __pfx_path_openat+0x10/0x10 [ 321.113439][T12118] ? __lock_acquire+0xb8a/0x1c90 [ 321.113473][T12118] do_filp_open+0x20b/0x470 [ 321.113506][T12118] ? __pfx_do_filp_open+0x10/0x10 [ 321.113559][T12118] ? alloc_fd+0x471/0x7d0 [ 321.113597][T12118] do_sys_openat2+0x11b/0x1d0 [ 321.113621][T12118] ? __pfx_do_sys_openat2+0x10/0x10 [ 321.113659][T12118] __x64_sys_openat+0x174/0x210 [ 321.113686][T12118] ? __pfx___x64_sys_openat+0x10/0x10 [ 321.113723][T12118] do_syscall_64+0xcd/0x490 [ 321.113764][T12118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.113791][T12118] RIP: 0033:0x7fd60ef8e929 [ 321.113812][T12118] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 321.113836][T12118] RSP: 002b:00007fd60fd1a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 321.113860][T12118] RAX: ffffffffffffffda RBX: 00007fd60f1b5fa0 RCX: 00007fd60ef8e929 [ 321.113878][T12118] RDX: 0000000000000001 RSI: 0000200000000280 RDI: ffffffffffffff9c [ 321.113892][T12118] RBP: 00007fd60f010b39 R08: 0000000000000000 R09: 0000000000000000 [ 321.113906][T12118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 321.113919][T12118] R13: 0000000000000000 R14: 00007fd60f1b5fa0 R15: 00007ffc052fa738 [ 321.113950][T12118] [ 321.389181][ C0] vkms_vblank_simulate: vblank timer overrun [ 322.561487][T12165] FAULT_INJECTION: forcing a failure. [ 322.561487][T12165] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 322.636173][T12165] CPU: 1 UID: 0 PID: 12165 Comm: syz.2.2398 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 322.636210][T12165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 322.636225][T12165] Call Trace: [ 322.636233][T12165] [ 322.636243][T12165] dump_stack_lvl+0x16c/0x1f0 [ 322.636284][T12165] should_fail_ex+0x512/0x640 [ 322.636320][T12165] _copy_from_iter+0x29f/0x16f0 [ 322.636358][T12165] ? __alloc_skb+0x200/0x380 [ 322.636391][T12165] ? __pfx__copy_from_iter+0x10/0x10 [ 322.636430][T12165] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 322.636466][T12165] netlink_sendmsg+0x829/0xdd0 [ 322.636497][T12165] ? __pfx_netlink_sendmsg+0x10/0x10 [ 322.636538][T12165] ____sys_sendmsg+0xa98/0xc70 [ 322.636567][T12165] ? copy_msghdr_from_user+0x10a/0x160 [ 322.636604][T12165] ? __pfx_____sys_sendmsg+0x10/0x10 [ 322.636642][T12165] ? __pfx_futex_wake_mark+0x10/0x10 [ 322.636681][T12165] ___sys_sendmsg+0x134/0x1d0 [ 322.636719][T12165] ? __pfx____sys_sendmsg+0x10/0x10 [ 322.636753][T12165] ? __lock_acquire+0x622/0x1c90 [ 322.636839][T12165] __sys_sendmsg+0x16d/0x220 [ 322.636878][T12165] ? __pfx___sys_sendmsg+0x10/0x10 [ 322.636915][T12165] ? __x64_sys_futex+0x1e0/0x4c0 [ 322.636966][T12165] do_syscall_64+0xcd/0x490 [ 322.637006][T12165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.637032][T12165] RIP: 0033:0x7ffa6f38e929 [ 322.637054][T12165] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 322.637078][T12165] RSP: 002b:00007ffa701a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 322.637103][T12165] RAX: ffffffffffffffda RBX: 00007ffa6f5b6080 RCX: 00007ffa6f38e929 [ 322.637118][T12165] RDX: 0000000000000000 RSI: 0000200000003f40 RDI: 0000000000000003 [ 322.637132][T12165] RBP: 00007ffa6f410b39 R08: 0000000000000000 R09: 0000000000000000 [ 322.637145][T12165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 322.637158][T12165] R13: 0000000000000000 R14: 00007ffa6f5b6080 R15: 00007ffc78f1dd18 [ 322.637190][T12165] [ 323.417727][T12177] lo: entered allmulticast mode [ 323.490679][T12181] lo: left allmulticast mode [ 323.586630][T12186] netlink: 342 bytes leftover after parsing attributes in process `syz.3.2405'. [ 324.024578][T12200] netlink: 'syz.3.2410': attribute type 21 has an invalid length. [ 324.032684][T12200] netlink: 334 bytes leftover after parsing attributes in process `syz.3.2410'. [ 325.093193][T12237] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2423'. [ 325.135080][T12236] netlink: 'syz.0.2421': attribute type 21 has an invalid length. [ 325.153874][T12236] netlink: 334 bytes leftover after parsing attributes in process `syz.0.2421'. [ 326.221778][T12262] netlink: 342 bytes leftover after parsing attributes in process `syz.3.2433'. [ 326.633959][T12274] zswap: compressor 000 not available [ 326.937422][T12292] FAULT_INJECTION: forcing a failure. [ 326.937422][T12292] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 326.982661][T12292] CPU: 1 UID: 0 PID: 12292 Comm: syz.0.2443 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 326.982701][T12292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 326.982719][T12292] Call Trace: [ 326.982728][T12292] [ 326.982739][T12292] dump_stack_lvl+0x16c/0x1f0 [ 326.982781][T12292] should_fail_ex+0x512/0x640 [ 326.982820][T12292] _copy_from_iter+0x29f/0x16f0 [ 326.982860][T12292] ? __alloc_skb+0x200/0x380 [ 326.982893][T12292] ? __pfx__copy_from_iter+0x10/0x10 [ 326.982934][T12292] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 326.982971][T12292] netlink_sendmsg+0x829/0xdd0 [ 326.983005][T12292] ? __pfx_netlink_sendmsg+0x10/0x10 [ 326.983042][T12292] ____sys_sendmsg+0xa98/0xc70 [ 326.983079][T12292] ? copy_msghdr_from_user+0x10a/0x160 [ 326.983117][T12292] ? __pfx_____sys_sendmsg+0x10/0x10 [ 326.983153][T12292] ? __pfx_futex_wake_mark+0x10/0x10 [ 326.983194][T12292] ___sys_sendmsg+0x134/0x1d0 [ 326.983233][T12292] ? __pfx____sys_sendmsg+0x10/0x10 [ 326.983267][T12292] ? __lock_acquire+0x622/0x1c90 [ 326.983338][T12292] __sys_sendmsg+0x16d/0x220 [ 326.983373][T12292] ? __pfx___sys_sendmsg+0x10/0x10 [ 326.983407][T12292] ? __x64_sys_futex+0x1e0/0x4c0 [ 326.983455][T12292] do_syscall_64+0xcd/0x490 [ 326.983491][T12292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.983514][T12292] RIP: 0033:0x7fd60ef8e929 [ 326.983534][T12292] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 326.983558][T12292] RSP: 002b:00007fd60cdf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 326.983582][T12292] RAX: ffffffffffffffda RBX: 00007fd60f1b6080 RCX: 00007fd60ef8e929 [ 326.983599][T12292] RDX: 0000000000000000 RSI: 0000200000003f40 RDI: 0000000000000003 [ 326.983613][T12292] RBP: 00007fd60f010b39 R08: 0000000000000000 R09: 0000000000000000 [ 326.983628][T12292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 326.983641][T12292] R13: 0000000000000000 R14: 00007fd60f1b6080 R15: 00007ffc052fa738 [ 326.983671][T12292] [ 327.778440][T12312] zswap: compressor 000 not available [ 328.876412][T12349] zswap: compressor 000 not available [ 329.138939][T12361] FAULT_INJECTION: forcing a failure. [ 329.138939][T12361] name failslab, interval 1, probability 0, space 0, times 0 [ 329.166354][T12361] CPU: 0 UID: 0 PID: 12361 Comm: syz.3.2470 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 329.166392][T12361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 329.166408][T12361] Call Trace: [ 329.166416][T12361] [ 329.166426][T12361] dump_stack_lvl+0x16c/0x1f0 [ 329.166468][T12361] should_fail_ex+0x512/0x640 [ 329.166502][T12361] ? fs_reclaim_acquire+0xae/0x150 [ 329.166533][T12361] should_failslab+0xc2/0x120 [ 329.166558][T12361] __kmalloc_cache_noprof+0x6a/0x3e0 [ 329.166590][T12361] ? tomoyo_write_log2+0x33d/0xc10 [ 329.166627][T12361] tomoyo_write_log2+0x33d/0xc10 [ 329.166666][T12361] tomoyo_supervisor+0x15e/0x13b0 [ 329.166710][T12361] ? __pfx_tomoyo_supervisor+0x10/0x10 [ 329.166743][T12361] ? __pfx_vsnprintf+0x10/0x10 [ 329.166793][T12361] ? tomoyo_encode2+0x329/0x3e0 [ 329.166830][T12361] ? tomoyo_check_path_number_acl+0xa6/0x2f0 [ 329.166881][T12361] tomoyo_path_number_perm+0x448/0x580 [ 329.166914][T12361] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 329.166985][T12361] ? find_held_lock+0x2b/0x80 [ 329.167009][T12361] ? hook_file_ioctl_common+0x145/0x410 [ 329.167043][T12361] ? __fget_files+0x20e/0x3c0 [ 329.167082][T12361] security_file_ioctl+0x9b/0x240 [ 329.167114][T12361] __x64_sys_ioctl+0xb7/0x210 [ 329.167145][T12361] do_syscall_64+0xcd/0x490 [ 329.167182][T12361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.167205][T12361] RIP: 0033:0x7f2531d8e929 [ 329.167225][T12361] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 329.167248][T12361] RSP: 002b:00007f2532c7a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 329.167272][T12361] RAX: ffffffffffffffda RBX: 00007f2531fb5fa0 RCX: 00007f2531d8e929 [ 329.167287][T12361] RDX: 0000000000000000 RSI: 00000000c0045005 RDI: 0000000000000004 [ 329.167301][T12361] RBP: 00007f2531e10b39 R08: 0000000000000000 R09: 0000000000000000 [ 329.167314][T12361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 329.167327][T12361] R13: 0000000000000000 R14: 00007f2531fb5fa0 R15: 00007ffda9ed68b8 [ 329.167357][T12361] [ 331.875970][T12425] FAULT_INJECTION: forcing a failure. [ 331.875970][T12425] name failslab, interval 1, probability 0, space 0, times 0 [ 331.876020][T12425] CPU: 0 UID: 0 PID: 12425 Comm: syz.0.2497 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 331.876052][T12425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 331.876071][T12425] Call Trace: [ 331.876079][T12425] [ 331.876087][T12425] dump_stack_lvl+0x16c/0x1f0 [ 331.876126][T12425] should_fail_ex+0x512/0x640 [ 331.876160][T12425] ? fs_reclaim_acquire+0xae/0x150 [ 331.876193][T12425] should_failslab+0xc2/0x120 [ 331.876218][T12425] __kmalloc_cache_noprof+0x6a/0x3e0 [ 331.876251][T12425] ? tomoyo_init_log+0x197/0x2140 [ 331.876286][T12425] tomoyo_init_log+0x197/0x2140 [ 331.876316][T12425] ? format_decode+0x1ad/0xd40 [ 331.876347][T12425] ? __pfx_format_decode+0x10/0x10 [ 331.876389][T12425] ? __pfx_tomoyo_init_log+0x10/0x10 [ 331.876432][T12425] tomoyo_write_log2+0x2f7/0xc10 [ 331.876463][T12425] ? tomoyo_domain_quota_is_ok+0x270/0x5a0 [ 331.876497][T12425] tomoyo_supervisor+0x15e/0x13b0 [ 331.876541][T12425] ? __pfx_tomoyo_supervisor+0x10/0x10 [ 331.876594][T12425] ? lockdep_hardirqs_on+0x7c/0x110 [ 331.876647][T12425] ? tomoyo_check_path_acl+0xad/0x210 [ 331.876678][T12425] ? tomoyo_check_acl+0x1f7/0x410 [ 331.876710][T12425] tomoyo_path_permission+0x270/0x3b0 [ 331.876743][T12425] tomoyo_check_open_permission+0x349/0x3c0 [ 331.876775][T12425] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 331.876842][T12425] ? do_raw_spin_lock+0x12c/0x2b0 [ 331.876888][T12425] tomoyo_file_open+0x6b/0x90 [ 331.876926][T12425] security_file_open+0x84/0x1e0 [ 331.876959][T12425] do_dentry_open+0x596/0x1c10 [ 331.877006][T12425] vfs_open+0x82/0x3f0 [ 331.877037][T12425] path_openat+0x1de4/0x2cb0 [ 331.877083][T12425] ? __pfx_path_openat+0x10/0x10 [ 331.877120][T12425] ? __lock_acquire+0xb8a/0x1c90 [ 331.877156][T12425] do_filp_open+0x20b/0x470 [ 331.877191][T12425] ? __pfx_do_filp_open+0x10/0x10 [ 331.877252][T12425] ? alloc_fd+0x471/0x7d0 [ 331.877295][T12425] do_sys_openat2+0x11b/0x1d0 [ 331.877321][T12425] ? __pfx_do_sys_openat2+0x10/0x10 [ 331.877358][T12425] __x64_sys_openat+0x174/0x210 [ 331.877386][T12425] ? __pfx___x64_sys_openat+0x10/0x10 [ 331.877429][T12425] do_syscall_64+0xcd/0x490 [ 331.877468][T12425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.877493][T12425] RIP: 0033:0x7fd60ef8e929 [ 331.877515][T12425] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 331.877539][T12425] RSP: 002b:00007fd60fd1a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 331.877563][T12425] RAX: ffffffffffffffda RBX: 00007fd60f1b5fa0 RCX: 00007fd60ef8e929 [ 331.877581][T12425] RDX: 0000000000040002 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 331.877609][T12425] RBP: 00007fd60f010b39 R08: 0000000000000000 R09: 0000000000000000 [ 331.877625][T12425] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000 [ 331.877641][T12425] R13: 0000000000000000 R14: 00007fd60f1b5fa0 R15: 00007ffc052fa738 [ 331.877677][T12425] [ 332.500806][T12433] lo: entered allmulticast mode [ 332.603234][T12436] lo: left allmulticast mode [ 333.199502][T12449] ERROR: Out of memory at tomoyo_memory_ok. [ 333.720660][T12460] FAULT_INJECTION: forcing a failure. [ 333.720660][T12460] name failslab, interval 1, probability 0, space 0, times 0 [ 333.750760][T12460] CPU: 0 UID: 0 PID: 12460 Comm: syz.1.2511 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 333.750799][T12460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 333.750815][T12460] Call Trace: [ 333.750823][T12460] [ 333.750833][T12460] dump_stack_lvl+0x16c/0x1f0 [ 333.750877][T12460] should_fail_ex+0x512/0x640 [ 333.750910][T12460] ? fs_reclaim_acquire+0xae/0x150 [ 333.750943][T12460] should_failslab+0xc2/0x120 [ 333.750968][T12460] __kmalloc_cache_noprof+0x6a/0x3e0 [ 333.751002][T12460] ? tomoyo_write_log2+0x33d/0xc10 [ 333.751039][T12460] tomoyo_write_log2+0x33d/0xc10 [ 333.751077][T12460] tomoyo_supervisor+0x15e/0x13b0 [ 333.751120][T12460] ? __pfx_tomoyo_supervisor+0x10/0x10 [ 333.751172][T12460] ? lockdep_hardirqs_on+0x7c/0x110 [ 333.751212][T12460] ? tomoyo_check_path_acl+0xad/0x210 [ 333.751242][T12460] ? tomoyo_check_acl+0x1f7/0x410 [ 333.751274][T12460] tomoyo_path_permission+0x270/0x3b0 [ 333.751306][T12460] tomoyo_check_open_permission+0x37b/0x3c0 [ 333.751337][T12460] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 333.751402][T12460] ? do_raw_spin_lock+0x12c/0x2b0 [ 333.751448][T12460] tomoyo_file_open+0x6b/0x90 [ 333.751486][T12460] security_file_open+0x84/0x1e0 [ 333.751518][T12460] do_dentry_open+0x596/0x1c10 [ 333.751561][T12460] vfs_open+0x82/0x3f0 [ 333.751590][T12460] path_openat+0x1de4/0x2cb0 [ 333.751636][T12460] ? __pfx_path_openat+0x10/0x10 [ 333.751672][T12460] ? __lock_acquire+0xb8a/0x1c90 [ 333.751707][T12460] do_filp_open+0x20b/0x470 [ 333.751751][T12460] ? __pfx_do_filp_open+0x10/0x10 [ 333.751814][T12460] ? alloc_fd+0x471/0x7d0 [ 333.751858][T12460] do_sys_openat2+0x11b/0x1d0 [ 333.751885][T12460] ? __pfx_do_sys_openat2+0x10/0x10 [ 333.751927][T12460] __x64_sys_openat+0x174/0x210 [ 333.751954][T12460] ? __pfx___x64_sys_openat+0x10/0x10 [ 333.751998][T12460] do_syscall_64+0xcd/0x490 [ 333.752036][T12460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.752062][T12460] RIP: 0033:0x7fd0bf98e929 [ 333.752083][T12460] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 333.752107][T12460] RSP: 002b:00007fd0c080e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 333.752132][T12460] RAX: ffffffffffffffda RBX: 00007fd0bfbb5fa0 RCX: 00007fd0bf98e929 [ 333.752151][T12460] RDX: 0000000000040002 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 333.752168][T12460] RBP: 00007fd0bfa10b39 R08: 0000000000000000 R09: 0000000000000000 [ 333.752185][T12460] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000 [ 333.752201][T12460] R13: 0000000000000000 R14: 00007fd0bfbb5fa0 R15: 00007ffe94c4a538 [ 333.752237][T12460] [ 334.206210][T12472] lo: entered allmulticast mode [ 334.283843][T12475] lo: left allmulticast mode [ 334.514695][T12487] netlink: 342 bytes leftover after parsing attributes in process `syz.3.2522'. [ 335.179899][T12508] FAULT_INJECTION: forcing a failure. [ 335.179899][T12508] name failslab, interval 1, probability 0, space 0, times 0 [ 335.192778][T12508] CPU: 1 UID: 0 PID: 12508 Comm: syz.3.2529 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 335.192815][T12508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 335.192831][T12508] Call Trace: [ 335.192839][T12508] [ 335.192850][T12508] dump_stack_lvl+0x16c/0x1f0 [ 335.192892][T12508] should_fail_ex+0x512/0x640 [ 335.192924][T12508] ? fs_reclaim_acquire+0xae/0x150 [ 335.192955][T12508] should_failslab+0xc2/0x120 [ 335.192981][T12508] __kmalloc_cache_noprof+0x6a/0x3e0 [ 335.193011][T12508] ? tomoyo_init_log+0x197/0x2140 [ 335.193047][T12508] tomoyo_init_log+0x197/0x2140 [ 335.193076][T12508] ? format_decode+0x1ad/0xd40 [ 335.193107][T12508] ? __pfx_format_decode+0x10/0x10 [ 335.193149][T12508] ? __pfx_tomoyo_init_log+0x10/0x10 [ 335.193191][T12508] tomoyo_write_log2+0x2f7/0xc10 [ 335.193223][T12508] ? tomoyo_domain_quota_is_ok+0x270/0x5a0 [ 335.193256][T12508] tomoyo_supervisor+0x15e/0x13b0 [ 335.193296][T12508] ? __pfx_tomoyo_supervisor+0x10/0x10 [ 335.193347][T12508] ? lockdep_hardirqs_on+0x7c/0x110 [ 335.193386][T12508] ? tomoyo_check_path_acl+0xad/0x210 [ 335.193413][T12508] ? tomoyo_check_acl+0x1f7/0x410 [ 335.193442][T12508] tomoyo_path_permission+0x270/0x3b0 [ 335.193472][T12508] tomoyo_check_open_permission+0x349/0x3c0 [ 335.193502][T12508] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 335.193570][T12508] ? do_raw_spin_lock+0x12c/0x2b0 [ 335.193618][T12508] tomoyo_file_open+0x6b/0x90 [ 335.193655][T12508] security_file_open+0x84/0x1e0 [ 335.193687][T12508] do_dentry_open+0x596/0x1c10 [ 335.193734][T12508] vfs_open+0x82/0x3f0 [ 335.193764][T12508] path_openat+0x1de4/0x2cb0 [ 335.193808][T12508] ? __pfx_path_openat+0x10/0x10 [ 335.193842][T12508] ? __lock_acquire+0xb8a/0x1c90 [ 335.193875][T12508] do_filp_open+0x20b/0x470 [ 335.193909][T12508] ? __pfx_do_filp_open+0x10/0x10 [ 335.193966][T12508] ? alloc_fd+0x471/0x7d0 [ 335.194009][T12508] do_sys_openat2+0x11b/0x1d0 [ 335.194037][T12508] ? __pfx_do_sys_openat2+0x10/0x10 [ 335.194079][T12508] __x64_sys_openat+0x174/0x210 [ 335.194108][T12508] ? __pfx___x64_sys_openat+0x10/0x10 [ 335.194150][T12508] do_syscall_64+0xcd/0x490 [ 335.194188][T12508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.194214][T12508] RIP: 0033:0x7f2531d8e929 [ 335.194235][T12508] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 335.194260][T12508] RSP: 002b:00007f2532c7a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 335.194284][T12508] RAX: ffffffffffffffda RBX: 00007f2531fb5fa0 RCX: 00007f2531d8e929 [ 335.194301][T12508] RDX: 0000000000040002 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 335.194317][T12508] RBP: 00007f2531e10b39 R08: 0000000000000000 R09: 0000000000000000 [ 335.194333][T12508] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000 [ 335.194348][T12508] R13: 0000000000000000 R14: 00007f2531fb5fa0 R15: 00007ffda9ed68b8 [ 335.194383][T12508] [ 335.263609][T12483] ERROR: Out of memory at tomoyo_memory_ok. [ 335.534156][T12516] netlink: 342 bytes leftover after parsing attributes in process `syz.2.2534'. [ 336.728938][ T5839] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 337.128519][T12565] FAULT_INJECTION: forcing a failure. [ 337.128519][T12565] name failslab, interval 1, probability 0, space 0, times 0 [ 337.210168][T12565] CPU: 1 UID: 0 PID: 12565 Comm: syz.0.2559 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 337.210207][T12565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 337.210222][T12565] Call Trace: [ 337.210231][T12565] [ 337.210242][T12565] dump_stack_lvl+0x16c/0x1f0 [ 337.210283][T12565] should_fail_ex+0x512/0x640 [ 337.210315][T12565] ? fs_reclaim_acquire+0xae/0x150 [ 337.210400][T12565] should_failslab+0xc2/0x120 [ 337.210430][T12565] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 337.210469][T12565] ? security_inode_alloc+0x3b/0x2b0 [ 337.210501][T12565] security_inode_alloc+0x3b/0x2b0 [ 337.210529][T12565] inode_init_always_gfp+0xce4/0x1030 [ 337.210563][T12565] alloc_inode+0x86/0x240 [ 337.210587][T12565] path_from_stashed+0x2be/0xb00 [ 337.210625][T12565] ? do_raw_spin_lock+0x12c/0x2b0 [ 337.210665][T12565] ? __pfx_path_from_stashed+0x10/0x10 [ 337.210703][T12565] ? do_raw_spin_unlock+0x172/0x230 [ 337.210744][T12565] ns_get_path+0x5f/0x80 [ 337.210772][T12565] proc_ns_get_link+0x121/0x260 [ 337.210802][T12565] ? __pfx_proc_ns_get_link+0x10/0x10 [ 337.210836][T12565] ? atime_needs_update+0x8b/0x710 [ 337.210861][T12565] ? __pfx_proc_ns_get_link+0x10/0x10 [ 337.210899][T12565] step_into+0x1a2c/0x2270 [ 337.210944][T12565] ? __pfx_step_into+0x10/0x10 [ 337.210973][T12565] ? find_held_lock+0x2b/0x80 [ 337.211018][T12565] path_openat+0x6db/0x2cb0 [ 337.211067][T12565] ? __pfx_path_openat+0x10/0x10 [ 337.211098][T12565] ? __lock_acquire+0xb8a/0x1c90 [ 337.211131][T12565] do_filp_open+0x20b/0x470 [ 337.211165][T12565] ? __pfx_do_filp_open+0x10/0x10 [ 337.211229][T12565] ? alloc_fd+0x471/0x7d0 [ 337.211267][T12565] do_sys_openat2+0x11b/0x1d0 [ 337.211293][T12565] ? __pfx_do_sys_openat2+0x10/0x10 [ 337.211342][T12565] __x64_sys_openat+0x174/0x210 [ 337.211370][T12565] ? __pfx___x64_sys_openat+0x10/0x10 [ 337.211414][T12565] do_syscall_64+0xcd/0x490 [ 337.211454][T12565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.211490][T12565] RIP: 0033:0x7fd60ef8d290 [ 337.211512][T12565] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 337.211538][T12565] RSP: 002b:00007fd60fd19f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 337.211562][T12565] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fd60ef8d290 [ 337.211579][T12565] RDX: 0000000000000002 RSI: 00007fd60fd19fa0 RDI: 00000000ffffff9c [ 337.211597][T12565] RBP: 00007fd60fd19fa0 R08: 0000000000000000 R09: 0000000000000000 [ 337.211612][T12565] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 337.211625][T12565] R13: 0000000000000000 R14: 00007fd60f1b5fa0 R15: 00007ffc052fa738 [ 337.211657][T12565] [ 337.987447][T12578] openvswitch: netlink: Unknown nsh attribute 0 [ 339.094297][T12612] netlink: 326 bytes leftover after parsing attributes in process `syz.1.2572'. [ 340.080489][T12650] FAULT_INJECTION: forcing a failure. [ 340.080489][T12650] name failslab, interval 1, probability 0, space 0, times 0 [ 340.130473][T12650] CPU: 1 UID: 0 PID: 12650 Comm: syz.2.2587 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 340.130515][T12650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 340.130531][T12650] Call Trace: [ 340.130540][T12650] [ 340.130551][T12650] dump_stack_lvl+0x16c/0x1f0 [ 340.130595][T12650] should_fail_ex+0x512/0x640 [ 340.130629][T12650] ? fs_reclaim_acquire+0xae/0x150 [ 340.130662][T12650] should_failslab+0xc2/0x120 [ 340.130687][T12650] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 340.130724][T12650] ? security_inode_alloc+0x3b/0x2b0 [ 340.130757][T12650] security_inode_alloc+0x3b/0x2b0 [ 340.130784][T12650] inode_init_always_gfp+0xce4/0x1030 [ 340.130833][T12650] alloc_inode+0x86/0x240 [ 340.130860][T12650] path_from_stashed+0x2be/0xb00 [ 340.130897][T12650] ? do_raw_spin_lock+0x12c/0x2b0 [ 340.130936][T12650] ? __pfx_path_from_stashed+0x10/0x10 [ 340.130974][T12650] ? do_raw_spin_unlock+0x172/0x230 [ 340.131017][T12650] ns_get_path+0x5f/0x80 [ 340.131049][T12650] proc_ns_get_link+0x121/0x260 [ 340.131080][T12650] ? __pfx_proc_ns_get_link+0x10/0x10 [ 340.131115][T12650] ? atime_needs_update+0x8b/0x710 [ 340.131145][T12650] ? __pfx_proc_ns_get_link+0x10/0x10 [ 340.131177][T12650] step_into+0x1a2c/0x2270 [ 340.131216][T12650] ? __pfx_step_into+0x10/0x10 [ 340.131245][T12650] ? find_held_lock+0x2b/0x80 [ 340.131282][T12650] path_openat+0x6db/0x2cb0 [ 340.131327][T12650] ? __pfx_path_openat+0x10/0x10 [ 340.131363][T12650] ? __lock_acquire+0xb8a/0x1c90 [ 340.131399][T12650] do_filp_open+0x20b/0x470 [ 340.131434][T12650] ? __pfx_do_filp_open+0x10/0x10 [ 340.131493][T12650] ? alloc_fd+0x471/0x7d0 [ 340.131535][T12650] do_sys_openat2+0x11b/0x1d0 [ 340.131563][T12650] ? __pfx_do_sys_openat2+0x10/0x10 [ 340.131603][T12650] __x64_sys_openat+0x174/0x210 [ 340.131630][T12650] ? __pfx___x64_sys_openat+0x10/0x10 [ 340.131671][T12650] do_syscall_64+0xcd/0x490 [ 340.131709][T12650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.131734][T12650] RIP: 0033:0x7ffa6f38d290 [ 340.131757][T12650] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 340.131782][T12650] RSP: 002b:00007ffa701c7f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 340.131807][T12650] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007ffa6f38d290 [ 340.131832][T12650] RDX: 0000000000000002 RSI: 00007ffa701c7fa0 RDI: 00000000ffffff9c [ 340.131849][T12650] RBP: 00007ffa701c7fa0 R08: 0000000000000000 R09: 0000000000000000 [ 340.131864][T12650] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 340.131879][T12650] R13: 0000000000000000 R14: 00007ffa6f5b5fa0 R15: 00007ffc78f1dd18 [ 340.131913][T12650] [ 341.465870][T12684] FAULT_INJECTION: forcing a failure. [ 341.465870][T12684] name failslab, interval 1, probability 0, space 0, times 0 [ 341.481088][T12684] CPU: 0 UID: 0 PID: 12684 Comm: syz.1.2601 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 341.481129][T12684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 341.481144][T12684] Call Trace: [ 341.481154][T12684] [ 341.481164][T12684] dump_stack_lvl+0x16c/0x1f0 [ 341.481209][T12684] should_fail_ex+0x512/0x640 [ 341.481242][T12684] ? fs_reclaim_acquire+0xae/0x150 [ 341.481276][T12684] should_failslab+0xc2/0x120 [ 341.481302][T12684] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 341.481339][T12684] ? security_inode_alloc+0x3b/0x2b0 [ 341.481369][T12684] security_inode_alloc+0x3b/0x2b0 [ 341.481394][T12684] inode_init_always_gfp+0xce4/0x1030 [ 341.481434][T12684] alloc_inode+0x86/0x240 [ 341.481460][T12684] new_inode+0x22/0x1c0 [ 341.481490][T12684] proc_pid_make_inode+0x22/0x160 [ 341.481525][T12684] proc_ns_instantiate+0x57/0x100 [ 341.481562][T12684] proc_ns_dir_lookup+0x1af/0x2f0 [ 341.481599][T12684] ? __pfx_proc_ns_dir_lookup+0x10/0x10 [ 341.481631][T12684] lookup_open.isra.0+0x4d7/0x1580 [ 341.481670][T12684] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 341.481720][T12684] ? mnt_get_write_access+0x20c/0x300 [ 341.481754][T12684] path_openat+0x893/0x2cb0 [ 341.481800][T12684] ? __pfx_path_openat+0x10/0x10 [ 341.481836][T12684] ? __lock_acquire+0xb8a/0x1c90 [ 341.481873][T12684] do_filp_open+0x20b/0x470 [ 341.481918][T12684] ? __pfx_do_filp_open+0x10/0x10 [ 341.481967][T12684] ? __pfx_kfree_link+0x10/0x10 [ 341.482006][T12684] ? alloc_fd+0x471/0x7d0 [ 341.482049][T12684] do_sys_openat2+0x11b/0x1d0 [ 341.482077][T12684] ? __pfx_do_sys_openat2+0x10/0x10 [ 341.482119][T12684] __x64_sys_openat+0x174/0x210 [ 341.482148][T12684] ? __pfx___x64_sys_openat+0x10/0x10 [ 341.482190][T12684] do_syscall_64+0xcd/0x490 [ 341.482230][T12684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.482257][T12684] RIP: 0033:0x7fd0bf98d290 [ 341.482279][T12684] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 341.482305][T12684] RSP: 002b:00007fd0c080df10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 341.482332][T12684] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fd0bf98d290 [ 341.482350][T12684] RDX: 0000000000000002 RSI: 00007fd0c080dfa0 RDI: 00000000ffffff9c [ 341.482367][T12684] RBP: 00007fd0c080dfa0 R08: 0000000000000000 R09: 0000000000000000 [ 341.482383][T12684] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 341.482400][T12684] R13: 0000000000000000 R14: 00007fd0bfbb5fa0 R15: 00007ffe94c4a538 [ 341.482435][T12684] [ 341.937540][T12690] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2604'. [ 342.241692][T12703] cifs: Unknown parameter 'no+ 1`rsFn)aHāh`9kA}1\D@.ZCg^' [ 342.661064][T12718] netlink: 342 bytes leftover after parsing attributes in process `syz.2.2615'. [ 342.756327][T12723] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2618'. [ 343.283589][T12743] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2632'. [ 343.668595][T12753] cifs: Unknown parameter 'no+ 1`rsFn)aHāh`9kA}1\D@.ZCg^' [ 343.917418][T12758] FAULT_INJECTION: forcing a failure. [ 343.917418][T12758] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 343.931119][T12758] CPU: 1 UID: 0 PID: 12758 Comm: syz.1.2628 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 343.931155][T12758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 343.931171][T12758] Call Trace: [ 343.931180][T12758] [ 343.931189][T12758] dump_stack_lvl+0x16c/0x1f0 [ 343.931232][T12758] should_fail_ex+0x512/0x640 [ 343.931272][T12758] should_fail_alloc_page+0xe7/0x130 [ 343.931300][T12758] prepare_alloc_pages+0x3c2/0x610 [ 343.931329][T12758] ? rcu_is_watching+0x12/0xc0 [ 343.931359][T12758] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 343.931403][T12758] ? __lock_acquire+0x622/0x1c90 [ 343.931438][T12758] ? xas_create+0x1d7/0x1460 [ 343.931474][T12758] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 343.931516][T12758] ? lock_acquire+0x179/0x350 [ 343.931549][T12758] ? rcu_is_watching+0x12/0xc0 [ 343.931585][T12758] ? __lock_acquire+0x622/0x1c90 [ 343.931615][T12758] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 343.931653][T12758] ? policy_nodemask+0xea/0x4e0 [ 343.931680][T12758] alloc_pages_mpol+0x1fb/0x550 [ 343.931706][T12758] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 343.931732][T12758] ? filemap_get_entry+0x1a7/0x3b0 [ 343.931761][T12758] folio_alloc_noprof+0x20/0x2d0 [ 343.931790][T12758] filemap_alloc_folio_noprof+0x3a1/0x470 [ 343.931825][T12758] ? __pfx_filemap_alloc_folio_noprof+0x10/0x10 [ 343.931866][T12758] __filemap_get_folio+0x5e1/0xc30 [ 343.931899][T12758] ioctx_alloc+0x761/0x2120 [ 343.931947][T12758] ? __pfx_ioctx_alloc+0x10/0x10 [ 343.931976][T12758] ? __might_fault+0x13b/0x190 [ 343.932020][T12758] __x64_sys_io_setup+0xc9/0x210 [ 343.932054][T12758] do_syscall_64+0xcd/0x490 [ 343.932093][T12758] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.932119][T12758] RIP: 0033:0x7fd0bf98e929 [ 343.932140][T12758] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 343.932165][T12758] RSP: 002b:00007fd0c080e038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 343.932189][T12758] RAX: ffffffffffffffda RBX: 00007fd0bfbb5fa0 RCX: 00007fd0bf98e929 [ 343.932207][T12758] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000007ffe [ 343.932223][T12758] RBP: 00007fd0bfa10b39 R08: 0000000000000000 R09: 0000000000000000 [ 343.932238][T12758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 343.932253][T12758] R13: 0000000000000000 R14: 00007fd0bfbb5fa0 R15: 00007ffe94c4a538 [ 343.932290][T12758] [ 344.483561][T12773] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2635'. [ 344.516222][T12773] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2635'. [ 345.096956][T12793] input: = as /devices/virtual/input/input6 [ 345.190491][T12788] ERROR: Out of memory at tomoyo_memory_ok. [ 346.172744][T12815] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2650'. [ 346.564834][T12828] FAULT_INJECTION: forcing a failure. [ 346.564834][T12828] name failslab, interval 1, probability 0, space 0, times 0 [ 346.579162][T12825] input: = as /devices/virtual/input/input7 [ 346.580886][T12828] CPU: 0 UID: 0 PID: 12828 Comm: syz.1.2657 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 346.580922][T12828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 346.580938][T12828] Call Trace: [ 346.580947][T12828] [ 346.580957][T12828] dump_stack_lvl+0x16c/0x1f0 [ 346.581000][T12828] should_fail_ex+0x512/0x640 [ 346.581035][T12828] ? fs_reclaim_acquire+0xae/0x150 [ 346.581066][T12828] ? tomoyo_init_log+0x1385/0x2140 [ 346.581096][T12828] should_failslab+0xc2/0x120 [ 346.581120][T12828] __kmalloc_noprof+0xd2/0x510 [ 346.581172][T12828] tomoyo_init_log+0x1385/0x2140 [ 346.581224][T12828] ? __pfx_tomoyo_init_log+0x10/0x10 [ 346.581266][T12828] tomoyo_write_log2+0x2f7/0xc10 [ 346.581305][T12828] tomoyo_supervisor+0x15e/0x13b0 [ 346.581347][T12828] ? __pfx_tomoyo_supervisor+0x10/0x10 [ 346.581398][T12828] ? lockdep_hardirqs_on+0x7c/0x110 [ 346.581436][T12828] ? tomoyo_check_path_acl+0xad/0x210 [ 346.581465][T12828] ? tomoyo_check_acl+0x1f7/0x410 [ 346.581495][T12828] tomoyo_path_permission+0x270/0x3b0 [ 346.581526][T12828] tomoyo_check_open_permission+0x37b/0x3c0 [ 346.581556][T12828] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 346.581621][T12828] ? do_raw_spin_lock+0x12c/0x2b0 [ 346.581666][T12828] tomoyo_file_open+0x6b/0x90 [ 346.581704][T12828] security_file_open+0x84/0x1e0 [ 346.581736][T12828] do_dentry_open+0x596/0x1c10 [ 346.581781][T12828] vfs_open+0x82/0x3f0 [ 346.581812][T12828] path_openat+0x1de4/0x2cb0 [ 346.581860][T12828] ? __pfx_path_openat+0x10/0x10 [ 346.581896][T12828] ? __lock_acquire+0xb8a/0x1c90 [ 346.581930][T12828] do_filp_open+0x20b/0x470 [ 346.581964][T12828] ? __pfx_do_filp_open+0x10/0x10 [ 346.582026][T12828] ? alloc_fd+0x471/0x7d0 [ 346.582068][T12828] do_sys_openat2+0x11b/0x1d0 [ 346.582095][T12828] ? __pfx_do_sys_openat2+0x10/0x10 [ 346.582135][T12828] __x64_sys_openat+0x174/0x210 [ 346.582168][T12828] ? __pfx___x64_sys_openat+0x10/0x10 [ 346.582209][T12828] do_syscall_64+0xcd/0x490 [ 346.582250][T12828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.582275][T12828] RIP: 0033:0x7fd0bf98e929 [ 346.582296][T12828] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 346.582319][T12828] RSP: 002b:00007fd0c080e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 346.582342][T12828] RAX: ffffffffffffffda RBX: 00007fd0bfbb5fa0 RCX: 00007fd0bf98e929 [ 346.582359][T12828] RDX: 0000000000002200 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 346.582375][T12828] RBP: 00007fd0bfa10b39 R08: 0000000000000000 R09: 0000000000000000 [ 346.582390][T12828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 346.582404][T12828] R13: 0000000000000000 R14: 00007fd0bfbb5fa0 R15: 00007ffe94c4a538 [ 346.582437][T12828] [ 348.308653][T12868] netlink: 'syz.3.2675': attribute type 19 has an invalid length. [ 348.316652][T12868] netlink: 334 bytes leftover after parsing attributes in process `syz.3.2675'. [ 348.898832][T12886] FAULT_INJECTION: forcing a failure. [ 348.898832][T12886] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 348.912354][T12886] CPU: 0 UID: 0 PID: 12886 Comm: syz.0.2682 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 348.912392][T12886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 348.912408][T12886] Call Trace: [ 348.912418][T12886] [ 348.912428][T12886] dump_stack_lvl+0x16c/0x1f0 [ 348.912470][T12886] should_fail_ex+0x512/0x640 [ 348.912510][T12886] should_fail_alloc_page+0xe7/0x130 [ 348.912538][T12886] prepare_alloc_pages+0x3c2/0x610 [ 348.912568][T12886] ? rcu_is_watching+0x12/0xc0 [ 348.912596][T12886] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 348.912640][T12886] ? __lock_acquire+0x622/0x1c90 [ 348.912675][T12886] ? xas_create+0x1d7/0x1460 [ 348.912700][T12886] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 348.912740][T12886] ? lock_acquire+0x179/0x350 [ 348.912776][T12886] ? rcu_is_watching+0x12/0xc0 [ 348.912813][T12886] ? __lock_acquire+0x622/0x1c90 [ 348.912844][T12886] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 348.912881][T12886] ? policy_nodemask+0xea/0x4e0 [ 348.912908][T12886] alloc_pages_mpol+0x1fb/0x550 [ 348.912935][T12886] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 348.912962][T12886] ? filemap_get_entry+0x1a7/0x3b0 [ 348.912991][T12886] folio_alloc_noprof+0x20/0x2d0 [ 348.913026][T12886] filemap_alloc_folio_noprof+0x3a1/0x470 [ 348.913063][T12886] ? __pfx_filemap_alloc_folio_noprof+0x10/0x10 [ 348.913107][T12886] __filemap_get_folio+0x5e1/0xc30 [ 348.913140][T12886] ioctx_alloc+0x761/0x2120 [ 348.913188][T12886] ? __pfx_ioctx_alloc+0x10/0x10 [ 348.913216][T12886] ? __might_fault+0x13b/0x190 [ 348.913260][T12886] __x64_sys_io_setup+0xc9/0x210 [ 348.913294][T12886] do_syscall_64+0xcd/0x490 [ 348.913332][T12886] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.913362][T12886] RIP: 0033:0x7fd60ef8e929 [ 348.913383][T12886] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 348.913411][T12886] RSP: 002b:00007fd60fd1a038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 348.913436][T12886] RAX: ffffffffffffffda RBX: 00007fd60f1b5fa0 RCX: 00007fd60ef8e929 [ 348.913454][T12886] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000007ffe [ 348.913470][T12886] RBP: 00007fd60f010b39 R08: 0000000000000000 R09: 0000000000000000 [ 348.913486][T12886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 348.913501][T12886] R13: 0000000000000000 R14: 00007fd60f1b5fa0 R15: 00007ffc052fa738 [ 348.913536][T12886] [ 349.712294][T12906] FAULT_INJECTION: forcing a failure. [ 349.712294][T12906] name failslab, interval 1, probability 0, space 0, times 0 [ 349.746313][T12906] CPU: 0 UID: 0 PID: 12906 Comm: syz.2.2691 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 349.746353][T12906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 349.746369][T12906] Call Trace: [ 349.746377][T12906] [ 349.746387][T12906] dump_stack_lvl+0x16c/0x1f0 [ 349.746429][T12906] should_fail_ex+0x512/0x640 [ 349.746463][T12906] ? fs_reclaim_acquire+0xae/0x150 [ 349.746494][T12906] ? tomoyo_init_log+0x1385/0x2140 [ 349.746527][T12906] should_failslab+0xc2/0x120 [ 349.746552][T12906] __kmalloc_noprof+0xd2/0x510 [ 349.746589][T12906] tomoyo_init_log+0x1385/0x2140 [ 349.746631][T12906] ? __pfx_tomoyo_init_log+0x10/0x10 [ 349.746666][T12906] tomoyo_write_log2+0x2f7/0xc10 [ 349.746697][T12906] tomoyo_supervisor+0x15e/0x13b0 [ 349.746733][T12906] ? __pfx_tomoyo_supervisor+0x10/0x10 [ 349.746775][T12906] ? lockdep_hardirqs_on+0x7c/0x110 [ 349.746812][T12906] ? tomoyo_check_path_acl+0xad/0x210 [ 349.746853][T12906] ? tomoyo_check_acl+0x1f7/0x410 [ 349.746885][T12906] tomoyo_path_permission+0x270/0x3b0 [ 349.746919][T12906] tomoyo_check_open_permission+0x37b/0x3c0 [ 349.746950][T12906] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 349.747017][T12906] ? find_held_lock+0x2b/0x80 [ 349.747052][T12906] tomoyo_file_open+0x6b/0x90 [ 349.747093][T12906] security_file_open+0x84/0x1e0 [ 349.747127][T12906] do_dentry_open+0x596/0x1c10 [ 349.747176][T12906] vfs_open+0x82/0x3f0 [ 349.747208][T12906] path_openat+0x1de4/0x2cb0 [ 349.747255][T12906] ? __pfx_path_openat+0x10/0x10 [ 349.747291][T12906] ? __lock_acquire+0xb8a/0x1c90 [ 349.747327][T12906] do_filp_open+0x20b/0x470 [ 349.747362][T12906] ? __pfx_do_filp_open+0x10/0x10 [ 349.747423][T12906] ? alloc_fd+0x471/0x7d0 [ 349.747466][T12906] do_sys_openat2+0x11b/0x1d0 [ 349.747494][T12906] ? __pfx_do_sys_openat2+0x10/0x10 [ 349.747530][T12906] __x64_sys_openat+0x174/0x210 [ 349.747557][T12906] ? __pfx___x64_sys_openat+0x10/0x10 [ 349.747601][T12906] do_syscall_64+0xcd/0x490 [ 349.747646][T12906] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.747673][T12906] RIP: 0033:0x7ffa6f38e929 [ 349.747696][T12906] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 349.747719][T12906] RSP: 002b:00007ffa701c8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 349.747744][T12906] RAX: ffffffffffffffda RBX: 00007ffa6f5b5fa0 RCX: 00007ffa6f38e929 [ 349.747762][T12906] RDX: 0000000000000242 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 349.747779][T12906] RBP: 00007ffa6f410b39 R08: 0000000000000000 R09: 0000000000000000 [ 349.747795][T12906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 349.747810][T12906] R13: 0000000000000000 R14: 00007ffa6f5b5fa0 R15: 00007ffc78f1dd18 [ 349.747854][T12906] [ 349.768514][T12908] input: = as /devices/virtual/input/input8 [ 350.622512][T12937] FAULT_INJECTION: forcing a failure. [ 350.622512][T12937] name failslab, interval 1, probability 0, space 0, times 0 [ 350.639312][T12937] CPU: 1 UID: 0 PID: 12937 Comm: syz.3.2703 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 350.639351][T12937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 350.639366][T12937] Call Trace: [ 350.639375][T12937] [ 350.639386][T12937] dump_stack_lvl+0x16c/0x1f0 [ 350.639429][T12937] should_fail_ex+0x512/0x640 [ 350.639461][T12937] ? fs_reclaim_acquire+0xae/0x150 [ 350.639493][T12937] ? tomoyo_init_log+0x1385/0x2140 [ 350.639522][T12937] should_failslab+0xc2/0x120 [ 350.639547][T12937] __kmalloc_noprof+0xd2/0x510 [ 350.639589][T12937] tomoyo_init_log+0x1385/0x2140 [ 350.639640][T12937] ? __pfx_tomoyo_init_log+0x10/0x10 [ 350.639684][T12937] tomoyo_write_log2+0x2f7/0xc10 [ 350.639722][T12937] tomoyo_supervisor+0x15e/0x13b0 [ 350.639774][T12937] ? __pfx_tomoyo_supervisor+0x10/0x10 [ 350.639825][T12937] ? irqentry_exit+0x3b/0x90 [ 350.639858][T12937] ? lockdep_hardirqs_on+0x7c/0x110 [ 350.639911][T12937] ? __kasan_check_read+0xc/0x20 [ 350.639945][T12937] ? tomoyo_check_acl+0x1f7/0x410 [ 350.639978][T12937] tomoyo_path_permission+0x270/0x3b0 [ 350.640010][T12937] tomoyo_check_open_permission+0x37b/0x3c0 [ 350.640041][T12937] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 350.640109][T12937] ? find_held_lock+0x2b/0x80 [ 350.640144][T12937] tomoyo_file_open+0x6b/0x90 [ 350.640181][T12937] security_file_open+0x84/0x1e0 [ 350.640213][T12937] do_dentry_open+0x596/0x1c10 [ 350.640259][T12937] vfs_open+0x82/0x3f0 [ 350.640288][T12937] path_openat+0x1de4/0x2cb0 [ 350.640334][T12937] ? __pfx_path_openat+0x10/0x10 [ 350.640371][T12937] ? __lock_acquire+0xb8a/0x1c90 [ 350.640406][T12937] do_filp_open+0x20b/0x470 [ 350.640440][T12937] ? __pfx_do_filp_open+0x10/0x10 [ 350.640502][T12937] ? alloc_fd+0x471/0x7d0 [ 350.640545][T12937] do_sys_openat2+0x11b/0x1d0 [ 350.640572][T12937] ? __pfx_do_sys_openat2+0x10/0x10 [ 350.640614][T12937] __x64_sys_openat+0x174/0x210 [ 350.640642][T12937] ? __pfx___x64_sys_openat+0x10/0x10 [ 350.640687][T12937] do_syscall_64+0xcd/0x490 [ 350.640724][T12937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.640757][T12937] RIP: 0033:0x7f2531d8e929 [ 350.640780][T12937] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 350.640804][T12937] RSP: 002b:00007f2532c7a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 350.640829][T12937] RAX: ffffffffffffffda RBX: 00007f2531fb5fa0 RCX: 00007f2531d8e929 [ 350.640847][T12937] RDX: 0000000000000242 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 350.640865][T12937] RBP: 00007f2531e10b39 R08: 0000000000000000 R09: 0000000000000000 [ 350.640880][T12937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 350.640896][T12937] R13: 0000000000000000 R14: 00007f2531fb5fa0 R15: 00007ffda9ed68b8 [ 350.640932][T12937] [ 351.258260][T12958] netlink: 326 bytes leftover after parsing attributes in process `syz.0.2715'. [ 351.354368][T12962] netlink: 334 bytes leftover after parsing attributes in process `syz.2.2716'. [ 351.452262][T12966] netlink: 330 bytes leftover after parsing attributes in process `syz.0.2719'. [ 351.489576][T12968] netlink: 26 bytes leftover after parsing attributes in process `syz.3.2718'. [ 351.514946][T12968] openvswitch: netlink: IP tunnel dst address not specified [ 351.690769][T12978] netlink: 334 bytes leftover after parsing attributes in process `syz.2.2724'. [ 351.761923][T12981] netlink: 342 bytes leftover after parsing attributes in process `syz.3.2725'. [ 353.584258][T13041] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2751'. [ 353.728578][T13044] netlink: 25 bytes leftover after parsing attributes in process `syz.2.2751'. [ 354.592227][T13059] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2759'. [ 354.920796][T13070] netlink: 330 bytes leftover after parsing attributes in process `syz.2.2763'. [ 357.851154][T13123] netlink: 326 bytes leftover after parsing attributes in process `syz.1.2785'. [ 359.297248][T13167] netlink: 326 bytes leftover after parsing attributes in process `syz.1.2804'. [ 359.848284][T13156] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 359.854676][T13156] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 359.903635][T13156] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 359.922351][T13156] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 360.001979][T13156] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 360.028441][T13156] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 360.090294][T13156] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 360.108725][T13156] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 360.180354][T13191] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2813'. [ 360.216426][T13191] netlink: 25 bytes leftover after parsing attributes in process `syz.1.2813'. [ 360.867599][ T979] Process accounting resumed [ 361.087363][T13215] netlink: 342 bytes leftover after parsing attributes in process `syz.3.2824'. [ 361.262553][T13221] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2826'. [ 361.290255][T13221] netlink: 25 bytes leftover after parsing attributes in process `syz.3.2826'. [ 361.496163][ T5839] Bluetooth: hci0: command 0x0406 tx timeout [ 361.872203][T13230] FAULT_INJECTION: forcing a failure. [ 361.872203][T13230] name failslab, interval 1, probability 0, space 0, times 0 [ 361.940944][T13230] CPU: 1 UID: 0 PID: 13230 Comm: syz.0.2829 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 361.940984][T13230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 361.941000][T13230] Call Trace: [ 361.941009][T13230] [ 361.941023][T13230] dump_stack_lvl+0x16c/0x1f0 [ 361.941066][T13230] should_fail_ex+0x512/0x640 [ 361.941100][T13230] ? fs_reclaim_acquire+0xae/0x150 [ 361.941131][T13230] ? tomoyo_init_log+0x1385/0x2140 [ 361.941162][T13230] should_failslab+0xc2/0x120 [ 361.941188][T13230] __kmalloc_noprof+0xd2/0x510 [ 361.941230][T13230] tomoyo_init_log+0x1385/0x2140 [ 361.941282][T13230] ? __pfx_tomoyo_init_log+0x10/0x10 [ 361.941325][T13230] tomoyo_write_log2+0x2f7/0xc10 [ 361.941364][T13230] tomoyo_supervisor+0x15e/0x13b0 [ 361.941406][T13230] ? __pfx_tomoyo_supervisor+0x10/0x10 [ 361.941458][T13230] ? lockdep_hardirqs_on+0x7c/0x110 [ 361.941499][T13230] ? tomoyo_check_path_acl+0xad/0x210 [ 361.941527][T13230] ? tomoyo_check_acl+0x1f7/0x410 [ 361.941556][T13230] tomoyo_path_permission+0x270/0x3b0 [ 361.941590][T13230] tomoyo_check_open_permission+0x37b/0x3c0 [ 361.941621][T13230] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 361.941696][T13230] ? do_raw_spin_lock+0x12c/0x2b0 [ 361.941745][T13230] tomoyo_file_open+0x6b/0x90 [ 361.941784][T13230] security_file_open+0x84/0x1e0 [ 361.941816][T13230] do_dentry_open+0x596/0x1c10 [ 361.941862][T13230] vfs_open+0x82/0x3f0 [ 361.941893][T13230] path_openat+0x1de4/0x2cb0 [ 361.941940][T13230] ? __pfx_path_openat+0x10/0x10 [ 361.941976][T13230] ? __lock_acquire+0xb8a/0x1c90 [ 361.942012][T13230] do_filp_open+0x20b/0x470 [ 361.942046][T13230] ? __pfx_do_filp_open+0x10/0x10 [ 361.942108][T13230] ? alloc_fd+0x471/0x7d0 [ 361.942151][T13230] do_sys_openat2+0x11b/0x1d0 [ 361.942178][T13230] ? __pfx_do_sys_openat2+0x10/0x10 [ 361.942221][T13230] __x64_sys_openat+0x174/0x210 [ 361.942249][T13230] ? __pfx___x64_sys_openat+0x10/0x10 [ 361.942293][T13230] do_syscall_64+0xcd/0x490 [ 361.942330][T13230] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.942356][T13230] RIP: 0033:0x7fd60ef8e929 [ 361.942378][T13230] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 361.942404][T13230] RSP: 002b:00007fd60cdf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 361.942430][T13230] RAX: ffffffffffffffda RBX: 00007fd60f1b6080 RCX: 00007fd60ef8e929 [ 361.942448][T13230] RDX: 0000000000020000 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 361.942464][T13230] RBP: 00007fd60f010b39 R08: 0000000000000000 R09: 0000000000000000 [ 361.942480][T13230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 361.942495][T13230] R13: 0000000000000000 R14: 00007fd60f1b6080 R15: 00007ffc052fa738 [ 361.942532][T13230] [ 362.006323][ T5839] Bluetooth: hci2: command 0x0406 tx timeout [ 362.107878][ T5837] Bluetooth: hci3: command 0x0406 tx timeout [ 362.149362][ T5839] Bluetooth: hci1: command 0x0406 tx timeout [ 362.325174][T13237] FAULT_INJECTION: forcing a failure. [ 362.325174][T13237] name failslab, interval 1, probability 0, space 0, times 0 [ 362.340466][T13237] CPU: 0 UID: 0 PID: 13237 Comm: syz.1.2833 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 362.340504][T13237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 362.340520][T13237] Call Trace: [ 362.340533][T13237] [ 362.340543][T13237] dump_stack_lvl+0x16c/0x1f0 [ 362.340586][T13237] should_fail_ex+0x512/0x640 [ 362.340620][T13237] ? __kmalloc_noprof+0xbf/0x510 [ 362.340659][T13237] ? lsm_blob_alloc+0x68/0x90 [ 362.340691][T13237] should_failslab+0xc2/0x120 [ 362.340716][T13237] __kmalloc_noprof+0xd2/0x510 [ 362.340759][T13237] lsm_blob_alloc+0x68/0x90 [ 362.340795][T13237] security_sk_alloc+0x30/0x270 [ 362.340822][T13237] sk_prot_alloc+0xfb/0x2a0 [ 362.340853][T13237] sk_alloc+0x36/0xc20 [ 362.340887][T13237] inet_create+0x3a1/0x1090 [ 362.340928][T13237] ? inet_create+0x93/0x1090 [ 362.340966][T13237] __sock_create+0x338/0x8d0 [ 362.341002][T13237] smc_create_clcsk+0x37/0xd0 [ 362.341032][T13237] ? __pfx_smc_inet_init_sock+0x10/0x10 [ 362.341057][T13237] inet_create+0x936/0x1090 [ 362.341088][T13237] ? inet_create+0x93/0x1090 [ 362.341126][T13237] __sock_create+0x338/0x8d0 [ 362.341160][T13237] __sys_socket+0x14d/0x260 [ 362.341189][T13237] ? __pfx___sys_socket+0x10/0x10 [ 362.341218][T13237] ? xfd_validate_state+0x61/0x180 [ 362.341247][T13237] ? __pfx_do_writev+0x10/0x10 [ 362.341286][T13237] __x64_sys_socket+0x72/0xb0 [ 362.341313][T13237] ? lockdep_hardirqs_on+0x7c/0x110 [ 362.341347][T13237] do_syscall_64+0xcd/0x490 [ 362.341385][T13237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.341411][T13237] RIP: 0033:0x7fd0bf98e929 [ 362.341431][T13237] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 362.341456][T13237] RSP: 002b:00007fd0c080e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 362.341480][T13237] RAX: ffffffffffffffda RBX: 00007fd0bfbb5fa0 RCX: 00007fd0bf98e929 [ 362.341497][T13237] RDX: 0000000000000100 RSI: 0000000000000801 RDI: 0000000000000002 [ 362.341513][T13237] RBP: 00007fd0bfa10b39 R08: 0000000000000000 R09: 0000000000000000 [ 362.341529][T13237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 362.341545][T13237] R13: 0000000000000000 R14: 00007fd0bfbb5fa0 R15: 00007ffe94c4a538 [ 362.341577][T13237] [ 363.231725][T13254] netlink: 334 bytes leftover after parsing attributes in process `syz.1.2841'. [ 363.577448][ T5839] Bluetooth: hci0: command 0x0406 tx timeout [ 363.621046][T13266] netlink: 334 bytes leftover after parsing attributes in process `syz.2.2846'. [ 363.834519][T13272] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2848'. [ 363.878539][T13272] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2848'. [ 364.136574][ T5839] Bluetooth: hci2: command 0x0406 tx timeout [ 364.222617][ T5839] Bluetooth: hci3: command 0x0406 tx timeout [ 364.296186][ T5839] Bluetooth: hci1: command 0x0406 tx timeout [ 364.437239][T13290] __nla_validate_parse: 1 callbacks suppressed [ 364.437263][T13290] netlink: 342 bytes leftover after parsing attributes in process `syz.2.2856'. [ 364.552031][T13295] FAULT_INJECTION: forcing a failure. [ 364.552031][T13295] name failslab, interval 1, probability 0, space 0, times 0 [ 364.595636][T13295] CPU: 1 UID: 0 PID: 13295 Comm: syz.0.2860 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 364.595674][T13295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 364.595689][T13295] Call Trace: [ 364.595698][T13295] [ 364.595708][T13295] dump_stack_lvl+0x16c/0x1f0 [ 364.595750][T13295] should_fail_ex+0x512/0x640 [ 364.595784][T13295] ? __kmalloc_noprof+0xbf/0x510 [ 364.595823][T13295] ? lsm_blob_alloc+0x68/0x90 [ 364.595858][T13295] should_failslab+0xc2/0x120 [ 364.595883][T13295] __kmalloc_noprof+0xd2/0x510 [ 364.595926][T13295] lsm_blob_alloc+0x68/0x90 [ 364.595960][T13295] security_sk_alloc+0x30/0x270 [ 364.595990][T13295] sk_prot_alloc+0xfb/0x2a0 [ 364.596019][T13295] sk_alloc+0x36/0xc20 [ 364.596059][T13295] inet_create+0x3a1/0x1090 [ 364.596090][T13295] ? inet_create+0x93/0x1090 [ 364.596125][T13295] __sock_create+0x338/0x8d0 [ 364.596161][T13295] smc_create_clcsk+0x37/0xd0 [ 364.596190][T13295] ? __pfx_smc_inet_init_sock+0x10/0x10 [ 364.596216][T13295] inet_create+0x936/0x1090 [ 364.596248][T13295] ? inet_create+0x93/0x1090 [ 364.596284][T13295] __sock_create+0x338/0x8d0 [ 364.596320][T13295] __sys_socket+0x14d/0x260 [ 364.596349][T13295] ? __pfx___sys_socket+0x10/0x10 [ 364.596385][T13295] ? xfd_validate_state+0x61/0x180 [ 364.596418][T13295] ? __pfx_do_writev+0x10/0x10 [ 364.596459][T13295] __x64_sys_socket+0x72/0xb0 [ 364.596487][T13295] ? lockdep_hardirqs_on+0x7c/0x110 [ 364.596520][T13295] do_syscall_64+0xcd/0x490 [ 364.596558][T13295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.596584][T13295] RIP: 0033:0x7fd60ef8e929 [ 364.596605][T13295] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 364.596629][T13295] RSP: 002b:00007fd60fd1a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 364.596655][T13295] RAX: ffffffffffffffda RBX: 00007fd60f1b5fa0 RCX: 00007fd60ef8e929 [ 364.596673][T13295] RDX: 0000000000000100 RSI: 0000000000000801 RDI: 0000000000000002 [ 364.596688][T13295] RBP: 00007fd60f010b39 R08: 0000000000000000 R09: 0000000000000000 [ 364.596703][T13295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 364.596718][T13295] R13: 0000000000000000 R14: 00007fd60f1b5fa0 R15: 00007ffc052fa738 [ 364.596751][T13295] [ 367.925324][T13316] netlink: 334 bytes leftover after parsing attributes in process `syz.1.2868'. [ 369.005784][T13348] netlink: 'syz.0.2881': attribute type 29 has an invalid length. [ 369.026018][T13348] netlink: 334 bytes leftover after parsing attributes in process `syz.0.2881'. [ 369.412795][T13357] netlink: 'syz.3.2885': attribute type 16 has an invalid length. [ 369.422517][T13357] netlink: 330 bytes leftover after parsing attributes in process `syz.3.2885'. [ 369.794577][T13370] netlink: 'syz.3.2891': attribute type 29 has an invalid length. [ 369.851468][T13370] netlink: 334 bytes leftover after parsing attributes in process `syz.3.2891'. [ 369.914472][T13374] netlink: 338 bytes leftover after parsing attributes in process `syz.1.2893'. [ 369.935297][T13374] bridge0: entered promiscuous mode [ 370.315324][T13387] FAULT_INJECTION: forcing a failure. [ 370.315324][T13387] name failslab, interval 1, probability 0, space 0, times 0 [ 370.331167][T13387] CPU: 0 UID: 0 PID: 13387 Comm: syz.3.2896 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 370.331205][T13387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 370.331220][T13387] Call Trace: [ 370.331227][T13387] [ 370.331236][T13387] dump_stack_lvl+0x16c/0x1f0 [ 370.331278][T13387] should_fail_ex+0x512/0x640 [ 370.331312][T13387] ? fs_reclaim_acquire+0xae/0x150 [ 370.331343][T13387] ? tomoyo_init_log+0x1385/0x2140 [ 370.331374][T13387] should_failslab+0xc2/0x120 [ 370.331399][T13387] __kmalloc_noprof+0xd2/0x510 [ 370.331442][T13387] tomoyo_init_log+0x1385/0x2140 [ 370.331483][T13387] ? trace_sched_exit_tp+0xde/0x130 [ 370.331518][T13387] ? __pfx_tomoyo_init_log+0x10/0x10 [ 370.331560][T13387] tomoyo_write_log2+0x2f7/0xc10 [ 370.331598][T13387] tomoyo_supervisor+0x15e/0x13b0 [ 370.331641][T13387] ? __pfx_tomoyo_supervisor+0x10/0x10 [ 370.331683][T13387] ? irqentry_exit+0x3b/0x90 [ 370.331715][T13387] ? lockdep_hardirqs_on+0x7c/0x110 [ 370.331763][T13387] ? tomoyo_check_path_acl+0xad/0x210 [ 370.331792][T13387] ? tomoyo_check_acl+0x1f7/0x410 [ 370.331822][T13387] tomoyo_path_permission+0x270/0x3b0 [ 370.331851][T13387] tomoyo_check_open_permission+0x37b/0x3c0 [ 370.331881][T13387] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 370.331949][T13387] ? do_raw_spin_lock+0x12c/0x2b0 [ 370.331995][T13387] tomoyo_file_open+0x6b/0x90 [ 370.332033][T13387] security_file_open+0x84/0x1e0 [ 370.332065][T13387] do_dentry_open+0x596/0x1c10 [ 370.332121][T13387] vfs_open+0x82/0x3f0 [ 370.332154][T13387] path_openat+0x1de4/0x2cb0 [ 370.332202][T13387] ? __pfx_path_openat+0x10/0x10 [ 370.332243][T13387] ? __lock_acquire+0xb8a/0x1c90 [ 370.332279][T13387] do_filp_open+0x20b/0x470 [ 370.332314][T13387] ? __pfx_do_filp_open+0x10/0x10 [ 370.332376][T13387] ? alloc_fd+0x471/0x7d0 [ 370.332419][T13387] do_sys_openat2+0x11b/0x1d0 [ 370.332446][T13387] ? __pfx_do_sys_openat2+0x10/0x10 [ 370.332488][T13387] __x64_sys_openat+0x174/0x210 [ 370.332516][T13387] ? __pfx___x64_sys_openat+0x10/0x10 [ 370.332557][T13387] do_syscall_64+0xcd/0x490 [ 370.332594][T13387] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.332619][T13387] RIP: 0033:0x7f2531d8e929 [ 370.332641][T13387] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 370.332666][T13387] RSP: 002b:00007f2532c59038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 370.332689][T13387] RAX: ffffffffffffffda RBX: 00007f2531fb6080 RCX: 00007f2531d8e929 [ 370.332704][T13387] RDX: 0000000000020000 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 370.332720][T13387] RBP: 00007f2531e10b39 R08: 0000000000000000 R09: 0000000000000000 [ 370.332734][T13387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 370.332747][T13387] R13: 0000000000000000 R14: 00007f2531fb6080 R15: 00007ffda9ed68b8 [ 370.332778][T13387] [ 371.149812][T13410] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2907'. [ 371.160733][T13410] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2907'. [ 371.170245][T13410] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2907'. [ 371.510705][T13422] netlink: 338 bytes leftover after parsing attributes in process `syz.2.2913'. [ 371.522245][T13422] bridge0: entered promiscuous mode [ 371.684343][T13430] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2917'. [ 371.699783][T13430] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2917'. [ 371.709224][T13430] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2917'. [ 373.321604][T13494] netlink: 'syz.1.2942': attribute type 4 has an invalid length. [ 373.366402][T13494] netlink: 314 bytes leftover after parsing attributes in process `syz.1.2942'. [ 374.301966][T13526] FAULT_INJECTION: forcing a failure. [ 374.301966][T13526] name failslab, interval 1, probability 0, space 0, times 0 [ 374.315441][T13526] CPU: 0 UID: 0 PID: 13526 Comm: syz.3.2955 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 374.315476][T13526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 374.315491][T13526] Call Trace: [ 374.315499][T13526] [ 374.315509][T13526] dump_stack_lvl+0x16c/0x1f0 [ 374.315551][T13526] should_fail_ex+0x512/0x640 [ 374.315583][T13526] ? fs_reclaim_acquire+0xae/0x150 [ 374.315614][T13526] should_failslab+0xc2/0x120 [ 374.315640][T13526] __kmalloc_cache_noprof+0x6a/0x3e0 [ 374.315692][T13526] ? tomoyo_init_log+0x197/0x2140 [ 374.315727][T13526] tomoyo_init_log+0x197/0x2140 [ 374.315747][T13526] ? format_decode+0x1ad/0xd40 [ 374.315766][T13526] ? __pfx_format_decode+0x10/0x10 [ 374.315788][T13526] ? __pfx_tomoyo_init_log+0x10/0x10 [ 374.315812][T13526] tomoyo_write_log2+0x2f7/0xc10 [ 374.315834][T13526] tomoyo_supervisor+0x15e/0x13b0 [ 374.315859][T13526] ? __pfx_tomoyo_supervisor+0x10/0x10 [ 374.315888][T13526] ? lockdep_hardirqs_on+0x7c/0x110 [ 374.315911][T13526] ? tomoyo_check_path_acl+0xad/0x210 [ 374.315928][T13526] ? tomoyo_check_acl+0x1f7/0x410 [ 374.315955][T13526] tomoyo_path_permission+0x270/0x3b0 [ 374.315985][T13526] tomoyo_check_open_permission+0x349/0x3c0 [ 374.316013][T13526] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 374.316074][T13526] ? do_raw_spin_lock+0x12c/0x2b0 [ 374.316123][T13526] tomoyo_file_open+0x6b/0x90 [ 374.316162][T13526] security_file_open+0x84/0x1e0 [ 374.316191][T13526] do_dentry_open+0x596/0x1c10 [ 374.316236][T13526] vfs_open+0x82/0x3f0 [ 374.316269][T13526] path_openat+0x1de4/0x2cb0 [ 374.316318][T13526] ? __pfx_path_openat+0x10/0x10 [ 374.316356][T13526] ? __lock_acquire+0xb8a/0x1c90 [ 374.316393][T13526] do_filp_open+0x20b/0x470 [ 374.316427][T13526] ? __pfx_do_filp_open+0x10/0x10 [ 374.316490][T13526] ? alloc_fd+0x471/0x7d0 [ 374.316532][T13526] do_sys_openat2+0x11b/0x1d0 [ 374.316559][T13526] ? __pfx_do_sys_openat2+0x10/0x10 [ 374.316602][T13526] __x64_sys_openat+0x174/0x210 [ 374.316630][T13526] ? __pfx___x64_sys_openat+0x10/0x10 [ 374.316680][T13526] do_syscall_64+0xcd/0x490 [ 374.316720][T13526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.316747][T13526] RIP: 0033:0x7f2531d8e929 [ 374.316768][T13526] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 374.316794][T13526] RSP: 002b:00007f2532c7a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 374.316819][T13526] RAX: ffffffffffffffda RBX: 00007f2531fb5fa0 RCX: 00007f2531d8e929 [ 374.316836][T13526] RDX: 0000000000101901 RSI: 0000200000002c00 RDI: ffffffffffffff9c [ 374.316853][T13526] RBP: 00007f2531e10b39 R08: 0000000000000000 R09: 0000000000000000 [ 374.316870][T13526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 374.316886][T13526] R13: 0000000000000000 R14: 00007f2531fb5fa0 R15: 00007ffda9ed68b8 [ 374.316920][T13526] [ 375.320302][T13551] __nla_validate_parse: 1 callbacks suppressed [ 375.320331][T13551] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2963'. [ 376.559789][T13600] sctp: [Deprecated]: syz.3.2985 (pid 13600) Use of struct sctp_assoc_value in delayed_ack socket option. [ 376.559789][T13600] Use struct sctp_sack_info instead [ 377.552132][T13636] FAULT_INJECTION: forcing a failure. [ 377.552132][T13636] name failslab, interval 1, probability 0, space 0, times 0 [ 377.608295][T13636] CPU: 0 UID: 0 PID: 13636 Comm: syz.2.2999 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 377.608334][T13636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 377.608350][T13636] Call Trace: [ 377.608359][T13636] [ 377.608368][T13636] dump_stack_lvl+0x16c/0x1f0 [ 377.608412][T13636] should_fail_ex+0x512/0x640 [ 377.608446][T13636] ? fs_reclaim_acquire+0xae/0x150 [ 377.608480][T13636] ? tomoyo_init_log+0x1385/0x2140 [ 377.608510][T13636] should_failslab+0xc2/0x120 [ 377.608536][T13636] __kmalloc_noprof+0xd2/0x510 [ 377.608579][T13636] tomoyo_init_log+0x1385/0x2140 [ 377.608630][T13636] ? __pfx_tomoyo_init_log+0x10/0x10 [ 377.608672][T13636] tomoyo_write_log2+0x2f7/0xc10 [ 377.608711][T13636] tomoyo_supervisor+0x15e/0x13b0 [ 377.608753][T13636] ? __pfx_tomoyo_supervisor+0x10/0x10 [ 377.608806][T13636] ? lockdep_hardirqs_on+0x7c/0x110 [ 377.608846][T13636] ? tomoyo_check_path_acl+0xad/0x210 [ 377.608875][T13636] ? tomoyo_check_acl+0x1f7/0x410 [ 377.608906][T13636] tomoyo_path_permission+0x270/0x3b0 [ 377.608939][T13636] tomoyo_check_open_permission+0x37b/0x3c0 [ 377.608968][T13636] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 377.608997][T13636] ? do_raw_spin_unlock+0x172/0x230 [ 377.609071][T13636] ? find_held_lock+0x2b/0x80 [ 377.609112][T13636] tomoyo_file_open+0x6b/0x90 [ 377.609151][T13636] security_file_open+0x84/0x1e0 [ 377.609183][T13636] do_dentry_open+0x596/0x1c10 [ 377.609230][T13636] vfs_open+0x82/0x3f0 [ 377.609261][T13636] path_openat+0x1de4/0x2cb0 [ 377.609311][T13636] ? __pfx_path_openat+0x10/0x10 [ 377.609346][T13636] ? __lock_acquire+0xb8a/0x1c90 [ 377.609382][T13636] do_filp_open+0x20b/0x470 [ 377.609416][T13636] ? __pfx_do_filp_open+0x10/0x10 [ 377.609462][T13636] ? __pfx_kfree_link+0x10/0x10 [ 377.609501][T13636] ? alloc_fd+0x471/0x7d0 [ 377.609543][T13636] do_sys_openat2+0x11b/0x1d0 [ 377.609570][T13636] ? __pfx_do_sys_openat2+0x10/0x10 [ 377.609612][T13636] __x64_sys_openat+0x174/0x210 [ 377.609640][T13636] ? __pfx___x64_sys_openat+0x10/0x10 [ 377.609684][T13636] do_syscall_64+0xcd/0x490 [ 377.609722][T13636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.609748][T13636] RIP: 0033:0x7ffa6f38e929 [ 377.609769][T13636] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 377.609794][T13636] RSP: 002b:00007ffa701c8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 377.609819][T13636] RAX: ffffffffffffffda RBX: 00007ffa6f5b5fa0 RCX: 00007ffa6f38e929 [ 377.609837][T13636] RDX: 0000000000040302 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 377.609853][T13636] RBP: 00007ffa6f410b39 R08: 0000000000000000 R09: 0000000000000000 [ 377.609869][T13636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 377.609884][T13636] R13: 0000000000000000 R14: 00007ffa6f5b5fa0 R15: 00007ffc78f1dd18 [ 377.609919][T13636] [ 378.635030][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.646169][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.698451][T13665] [U]  [ 378.701310][T13665] [U] [ 378.704036][T13665] [U] [ 378.706760][T13665] [U] [ 378.738797][T13665] [U] [ 378.741560][T13665] [U] [ 378.744287][T13665] [U] [ 378.747014][T13665] [U] [ 378.827022][T13665] [U] [ 378.829796][T13665] [U] [ 378.832522][T13665] [U] [ 378.835244][T13665] [U] [ 378.897027][T13665] [U] [ 378.899800][T13665] [U] [ 378.902531][T13665] [U] [ 378.905252][T13665] [U] [ 378.926482][T13665] [U] [ 378.929260][T13665] [U] [ 378.931982][T13665] [U] [ 378.934699][T13665] [U] [ 379.006308][T13674] [U] [ 379.945776][T13695] netlink: 122 bytes leftover after parsing attributes in process `syz.3.3021'. [ 380.579339][T13716] netlink: 342 bytes leftover after parsing attributes in process `syz.3.3029'. [ 380.788910][T13721] FAULT_INJECTION: forcing a failure. [ 380.788910][T13721] name failslab, interval 1, probability 0, space 0, times 0 [ 380.833103][T13721] CPU: 1 UID: 0 PID: 13721 Comm: syz.3.3031 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 380.833143][T13721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 380.833159][T13721] Call Trace: [ 380.833169][T13721] [ 380.833179][T13721] dump_stack_lvl+0x16c/0x1f0 [ 380.833224][T13721] should_fail_ex+0x512/0x640 [ 380.833258][T13721] ? __kmalloc_noprof+0xbf/0x510 [ 380.833297][T13721] ? vkms_crtc_atomic_check+0x3c5/0x880 [ 380.833325][T13721] should_failslab+0xc2/0x120 [ 380.833351][T13721] __kmalloc_noprof+0xd2/0x510 [ 380.833386][T13721] ? drm_atomic_add_affected_planes+0x32b/0x3f0 [ 380.833423][T13721] vkms_crtc_atomic_check+0x3c5/0x880 [ 380.833462][T13721] ? __pfx_vkms_crtc_atomic_check+0x10/0x10 [ 380.833491][T13721] drm_atomic_helper_check_planes+0x4dd/0x900 [ 380.833539][T13721] drm_atomic_helper_check+0xae/0x190 [ 380.833578][T13721] vkms_atomic_check+0x1d9/0x250 [ 380.833604][T13721] ? __pfx_vkms_atomic_check+0x10/0x10 [ 380.833632][T13721] drm_atomic_check_only+0x19ca/0x3130 [ 380.833680][T13721] drm_atomic_commit+0x136/0x300 [ 380.833708][T13721] ? __pfx_drm_atomic_commit+0x10/0x10 [ 380.833735][T13721] ? __pfx___drm_printfn_info+0x10/0x10 [ 380.833793][T13721] ? drm_client_rotation+0x4da/0x6a0 [ 380.833827][T13721] drm_client_modeset_commit_atomic+0x69d/0x7e0 [ 380.833869][T13721] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 380.833938][T13721] drm_client_modeset_commit_locked+0x14d/0x580 [ 380.833974][T13721] drm_client_modeset_commit+0x4f/0x80 [ 380.834003][T13721] __drm_fb_helper_restore_fbdev_mode_unlocked+0x19f/0x200 [ 380.834044][T13721] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 380.834087][T13721] drm_fbdev_client_restore+0x2c/0x40 [ 380.834120][T13721] drm_client_dev_restore+0x1f3/0x2a0 [ 380.834155][T13721] drm_release+0x2c4/0x360 [ 380.834184][T13721] ? __pfx_drm_release+0x10/0x10 [ 380.834207][T13721] __fput+0x402/0xb70 [ 380.834242][T13721] task_work_run+0x14d/0x240 [ 380.834303][T13721] ? __pfx_task_work_run+0x10/0x10 [ 380.834341][T13721] ? __pfx___do_sys_close_range+0x10/0x10 [ 380.834384][T13721] exit_to_user_mode_loop+0xeb/0x110 [ 380.834422][T13721] do_syscall_64+0x3f6/0x490 [ 380.834461][T13721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.834486][T13721] RIP: 0033:0x7f2531d8e929 [ 380.834507][T13721] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 380.834532][T13721] RSP: 002b:00007f2532c7a038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 380.834557][T13721] RAX: 0000000000000000 RBX: 00007f2531fb5fa0 RCX: 00007f2531d8e929 [ 380.834574][T13721] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 380.834590][T13721] RBP: 00007f2531e10b39 R08: 0000000000000000 R09: 0000000000000000 [ 380.834605][T13721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 380.834621][T13721] R13: 0000000000000000 R14: 00007f2531fb5fa0 R15: 00007ffda9ed68b8 [ 380.834658][T13721] [ 381.601110][T13732] netlink: 342 bytes leftover after parsing attributes in process `syz.0.3035'. [ 382.491154][T13751] misc userio: The device must be registered before sending interrupts [ 383.241886][T13774] netlink: 342 bytes leftover after parsing attributes in process `syz.2.3047'. [ 384.454318][T13798] netlink: 334 bytes leftover after parsing attributes in process `syz.0.3058'. [ 384.645424][T13800] netlink: 326 bytes leftover after parsing attributes in process `syz.2.3059'. [ 385.019205][T13805] netlink: 'syz.3.3063': attribute type 28 has an invalid length. [ 385.033530][T13805] netlink: 326 bytes leftover after parsing attributes in process `syz.3.3063'. [ 385.057519][T13805] netlink: 'syz.3.3063': attribute type 28 has an invalid length. [ 385.085860][T13805] netlink: 326 bytes leftover after parsing attributes in process `syz.3.3063'. [ 385.391703][T13812] netlink: 334 bytes leftover after parsing attributes in process `syz.3.3066'. [ 385.426849][T13812] netlink: 334 bytes leftover after parsing attributes in process `syz.3.3066'. [ 385.638805][T13820] FAULT_INJECTION: forcing a failure. [ 385.638805][T13820] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 385.711960][T13820] CPU: 0 UID: 0 PID: 13820 Comm: syz.0.3069 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 385.711997][T13820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 385.712013][T13820] Call Trace: [ 385.712022][T13820] [ 385.712031][T13820] dump_stack_lvl+0x16c/0x1f0 [ 385.712076][T13820] should_fail_ex+0x512/0x640 [ 385.712116][T13820] should_fail_alloc_page+0xe7/0x130 [ 385.712150][T13820] prepare_alloc_pages+0x3c2/0x610 [ 385.712186][T13820] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 385.712228][T13820] ? __lock_acquire+0x622/0x1c90 [ 385.712267][T13820] ? __lock_acquire+0x622/0x1c90 [ 385.712301][T13820] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 385.712338][T13820] ? __lock_acquire+0x622/0x1c90 [ 385.712376][T13820] ? __lock_acquire+0xb8a/0x1c90 [ 385.712414][T13820] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 385.712453][T13820] ? policy_nodemask+0xea/0x4e0 [ 385.712481][T13820] alloc_pages_mpol+0x1fb/0x550 [ 385.712507][T13820] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 385.712533][T13820] ? __anon_vma_prepare+0x2db/0x5e0 [ 385.712578][T13820] folio_alloc_mpol_noprof+0x36/0x2f0 [ 385.712608][T13820] vma_alloc_folio_noprof+0xed/0x1e0 [ 385.712637][T13820] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 385.712661][T13820] ? __anon_vma_prepare+0x2e2/0x5e0 [ 385.712704][T13820] __handle_mm_fault+0x2f21/0x5490 [ 385.712743][T13820] ? __pfx___handle_mm_fault+0x10/0x10 [ 385.712806][T13820] handle_mm_fault+0x589/0xd10 [ 385.712846][T13820] __get_user_pages+0x589/0x3b80 [ 385.712885][T13820] ? __pfx_mt_find+0x10/0x10 [ 385.712910][T13820] ? __pfx___get_user_pages+0x10/0x10 [ 385.712953][T13820] populate_vma_page_range+0x278/0x3a0 [ 385.712984][T13820] ? __pfx_populate_vma_page_range+0x10/0x10 [ 385.713012][T13820] ? __pfx_find_vma_intersection+0x10/0x10 [ 385.713043][T13820] ? do_mmap+0x69c/0x1210 [ 385.713073][T13820] __mm_populate+0x1d8/0x380 [ 385.713105][T13820] ? __pfx___mm_populate+0x10/0x10 [ 385.713137][T13820] ? up_write+0x1b2/0x520 [ 385.713175][T13820] vm_mmap_pgoff+0x362/0x450 [ 385.713206][T13820] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 385.713239][T13820] ? __x64_sys_futex+0x1e0/0x4c0 [ 385.713266][T13820] ? __x64_sys_futex+0x1e9/0x4c0 [ 385.713320][T13820] ksys_mmap_pgoff+0x7d/0x5c0 [ 385.713347][T13820] ? xfd_validate_state+0x61/0x180 [ 385.713377][T13820] ? __pfx___x64_sys_pwrite64+0x10/0x10 [ 385.713418][T13820] __x64_sys_mmap+0x125/0x190 [ 385.713454][T13820] do_syscall_64+0xcd/0x490 [ 385.713493][T13820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.713519][T13820] RIP: 0033:0x7fd60ef8e929 [ 385.713540][T13820] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 385.713571][T13820] RSP: 002b:00007fd60fd1a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 385.713595][T13820] RAX: ffffffffffffffda RBX: 00007fd60f1b5fa0 RCX: 00007fd60ef8e929 [ 385.713612][T13820] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 385.713628][T13820] RBP: 00007fd60f010b39 R08: 0000000000000002 R09: 0000000000008000 [ 385.713643][T13820] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 385.713656][T13820] R13: 0000000000000000 R14: 00007fd60f1b5fa0 R15: 00007ffc052fa738 [ 385.713690][T13820] [ 388.715282][T13862] FAULT_INJECTION: forcing a failure. [ 388.715282][T13862] name failslab, interval 1, probability 0, space 0, times 0 [ 388.735386][T13862] CPU: 0 UID: 0 PID: 13862 Comm: syz.0.3085 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 388.735427][T13862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 388.735443][T13862] Call Trace: [ 388.735452][T13862] [ 388.735463][T13862] dump_stack_lvl+0x16c/0x1f0 [ 388.735507][T13862] should_fail_ex+0x512/0x640 [ 388.735540][T13862] ? __kmalloc_noprof+0xbf/0x510 [ 388.735579][T13862] ? vkms_crtc_atomic_check+0x3c5/0x880 [ 388.735609][T13862] should_failslab+0xc2/0x120 [ 388.735634][T13862] __kmalloc_noprof+0xd2/0x510 [ 388.735669][T13862] ? drm_atomic_add_affected_planes+0x32b/0x3f0 [ 388.735707][T13862] vkms_crtc_atomic_check+0x3c5/0x880 [ 388.735746][T13862] ? __pfx_vkms_crtc_atomic_check+0x10/0x10 [ 388.735775][T13862] drm_atomic_helper_check_planes+0x4dd/0x900 [ 388.735822][T13862] drm_atomic_helper_check+0xae/0x190 [ 388.735861][T13862] vkms_atomic_check+0x1d9/0x250 [ 388.735887][T13862] ? __pfx_vkms_atomic_check+0x10/0x10 [ 388.735915][T13862] drm_atomic_check_only+0x19ca/0x3130 [ 388.735962][T13862] drm_atomic_commit+0x136/0x300 [ 388.735989][T13862] ? __pfx_drm_atomic_commit+0x10/0x10 [ 388.736025][T13862] ? __pfx___drm_printfn_info+0x10/0x10 [ 388.736067][T13862] ? drm_client_rotation+0x4da/0x6a0 [ 388.736096][T13862] drm_client_modeset_commit_atomic+0x69d/0x7e0 [ 388.736134][T13862] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 388.736202][T13862] drm_client_modeset_commit_locked+0x14d/0x580 [ 388.736234][T13862] drm_client_modeset_commit+0x4f/0x80 [ 388.736260][T13862] __drm_fb_helper_restore_fbdev_mode_unlocked+0x19f/0x200 [ 388.736300][T13862] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 388.736333][T13862] drm_fbdev_client_restore+0x2c/0x40 [ 388.736365][T13862] drm_client_dev_restore+0x1f3/0x2a0 [ 388.736399][T13862] drm_release+0x2c4/0x360 [ 388.736426][T13862] ? __pfx_drm_release+0x10/0x10 [ 388.736448][T13862] __fput+0x402/0xb70 [ 388.736483][T13862] task_work_run+0x14d/0x240 [ 388.736519][T13862] ? __pfx_task_work_run+0x10/0x10 [ 388.736552][T13862] ? __pfx___do_sys_close_range+0x10/0x10 [ 388.736592][T13862] exit_to_user_mode_loop+0xeb/0x110 [ 388.736628][T13862] do_syscall_64+0x3f6/0x490 [ 388.736664][T13862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.736691][T13862] RIP: 0033:0x7fd60ef8e929 [ 388.736712][T13862] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 388.736736][T13862] RSP: 002b:00007fd60fd1a038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 388.736762][T13862] RAX: 0000000000000000 RBX: 00007fd60f1b5fa0 RCX: 00007fd60ef8e929 [ 388.736778][T13862] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 388.736792][T13862] RBP: 00007fd60f010b39 R08: 0000000000000000 R09: 0000000000000000 [ 388.736807][T13862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 388.736822][T13862] R13: 0000000000000000 R14: 00007fd60f1b5fa0 R15: 00007ffc052fa738 [ 388.736857][T13862] [ 391.679719][T13914] netlink: 330 bytes leftover after parsing attributes in process `syz.1.3106'. [ 392.448834][T13933] Console: switching to colour VGA+ 80x25 [ 392.558316][T13933] ================================================================== [ 392.558334][T13933] BUG: KASAN: slab-out-of-bounds in fbcon_prepare_logo+0xa03/0xc70 [ 392.558379][T13933] Read of size 256 at addr ffff888028989860 by task syz.2.3115/13933 [ 392.558401][T13933] [ 392.558415][T13933] CPU: 1 UID: 0 PID: 13933 Comm: syz.2.3115 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 392.558447][T13933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 392.558464][T13933] Call Trace: [ 392.558472][T13933] [ 392.558483][T13933] dump_stack_lvl+0x116/0x1f0 [ 392.558519][T13933] print_report+0xcd/0x680 [ 392.558542][T13933] ? __virt_addr_valid+0x81/0x610 [ 392.558567][T13933] ? __phys_addr+0xe8/0x180 [ 392.558594][T13933] ? fbcon_prepare_logo+0xa03/0xc70 [ 392.558629][T13933] kasan_report+0xe0/0x110 [ 392.558652][T13933] ? fbcon_prepare_logo+0xa03/0xc70 [ 392.558699][T13933] kasan_check_range+0x100/0x1b0 [ 392.558728][T13933] __asan_memcpy+0x23/0x60 [ 392.558762][T13933] fbcon_prepare_logo+0xa03/0xc70 [ 392.558805][T13933] fbcon_init+0xd77/0x1900 [ 392.558839][T13933] ? __pfx_drm_fb_helper_set_par+0x10/0x10 [ 392.558879][T13933] visual_init+0x320/0x620 [ 392.558910][T13933] do_bind_con_driver.isra.0+0x57a/0xbf0 [ 392.558949][T13933] store_bind+0x61d/0x760 [ 392.558983][T13933] ? sysfs_file_kobj+0xe4/0x290 [ 392.559012][T13933] ? __pfx_store_bind+0x10/0x10 [ 392.559044][T13933] dev_attr_store+0x55/0x80 [ 392.559067][T13933] ? __pfx_dev_attr_store+0x10/0x10 [ 392.559090][T13933] sysfs_kf_write+0xef/0x150 [ 392.559119][T13933] kernfs_fop_write_iter+0x351/0x510 [ 392.559145][T13933] ? __pfx_sysfs_kf_write+0x10/0x10 [ 392.559175][T13933] vfs_write+0x6c4/0x1150 [ 392.559208][T13933] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 392.559236][T13933] ? __pfx___mutex_lock+0x10/0x10 [ 392.559272][T13933] ? __pfx_vfs_write+0x10/0x10 [ 392.559315][T13933] ksys_write+0x12a/0x250 [ 392.559348][T13933] ? __pfx_ksys_write+0x10/0x10 [ 392.559386][T13933] do_syscall_64+0xcd/0x490 [ 392.559422][T13933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.559449][T13933] RIP: 0033:0x7ffa6f38e929 [ 392.559469][T13933] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 392.559494][T13933] RSP: 002b:00007ffa701c8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 392.559519][T13933] RAX: ffffffffffffffda RBX: 00007ffa6f5b5fa0 RCX: 00007ffa6f38e929 [ 392.559537][T13933] RDX: 000000000000fdef RSI: 0000000000000000 RDI: 0000000000000003 [ 392.559553][T13933] RBP: 00007ffa6f410b39 R08: 0000000000000000 R09: 0000000000000000 [ 392.559570][T13933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 392.559585][T13933] R13: 0000000000000000 R14: 00007ffa6f5b5fa0 R15: 00007ffc78f1dd18 [ 392.559610][T13933] [ 392.559619][T13933] [ 392.559626][T13933] Allocated by task 13: [ 392.559637][T13933] kasan_save_stack+0x33/0x60 [ 392.559671][T13933] kasan_save_track+0x14/0x30 [ 392.559714][T13933] __kasan_kmalloc+0xaa/0xb0 [ 392.559745][T13933] __kmalloc_node_track_caller_noprof+0x221/0x510 [ 392.559784][T13933] kmalloc_reserve+0xef/0x2c0 [ 392.559809][T13933] __alloc_skb+0x166/0x380 [ 392.559838][T13933] rtmsg_ifinfo_build_skb+0x81/0x280 [ 392.559862][T13933] unregister_netdevice_many_notify+0x1047/0x2700 [ 392.559888][T13933] ops_undo_list+0x8fc/0xab0 [ 392.559907][T13933] cleanup_net+0x408/0x890 [ 392.559929][T13933] process_one_work+0x9cc/0x1b70 [ 392.559962][T13933] worker_thread+0x6c8/0xf10 [ 392.559993][T13933] kthread+0x3c5/0x780 [ 392.560022][T13933] ret_from_fork+0x5d4/0x6f0 [ 392.560051][T13933] ret_from_fork_asm+0x1a/0x30 [ 392.560076][T13933] [ 392.560081][T13933] Freed by task 13: [ 392.560092][T13933] kasan_save_stack+0x33/0x60 [ 392.560124][T13933] kasan_save_track+0x14/0x30 [ 392.560155][T13933] kasan_save_free_info+0x3b/0x60 [ 392.560182][T13933] __kasan_slab_free+0x51/0x70 [ 392.560215][T13933] kfree+0x2b4/0x4d0 [ 392.560240][T13933] skb_free_head+0x114/0x210 [ 392.560268][T13933] skb_release_data+0x776/0x9c0 [ 392.560301][T13933] consume_skb+0xbf/0x100 [ 392.560321][T13933] netlink_broadcast_filtered+0x3d5/0xf10 [ 392.560345][T13933] nlmsg_notify+0x9e/0x220 [ 392.560367][T13933] unregister_netdevice_many_notify+0x1882/0x2700 [ 392.560391][T13933] ops_undo_list+0x8fc/0xab0 [ 392.560411][T13933] cleanup_net+0x408/0x890 [ 392.560432][T13933] process_one_work+0x9cc/0x1b70 [ 392.560464][T13933] worker_thread+0x6c8/0xf10 [ 392.560495][T13933] kthread+0x3c5/0x780 [ 392.560524][T13933] ret_from_fork+0x5d4/0x6f0 [ 392.560552][T13933] ret_from_fork_asm+0x1a/0x30 [ 392.560575][T13933] [ 392.560581][T13933] The buggy address belongs to the object at ffff888028989000 [ 392.560581][T13933] which belongs to the cache kmalloc-2k of size 2048 [ 392.560602][T13933] The buggy address is located 96 bytes to the right of [ 392.560602][T13933] allocated 2048-byte region [ffff888028989000, ffff888028989800) [ 392.560629][T13933] [ 392.560635][T13933] The buggy address belongs to the physical page: [ 392.560653][T13933] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x28988 [ 392.560676][T13933] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 392.560704][T13933] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 392.560728][T13933] page_type: f5(slab) [ 392.560755][T13933] raw: 00fff00000000040 ffff88801b842000 dead000000000100 dead000000000122 [ 392.560779][T13933] raw: 0000000000000000 0000000080080008 00000000f5000000 0000000000000000 [ 392.560804][T13933] head: 00fff00000000040 ffff88801b842000 dead000000000100 dead000000000122 [ 392.560828][T13933] head: 0000000000000000 0000000080080008 00000000f5000000 0000000000000000 [ 392.560851][T13933] head: 00fff00000000003 ffffea0000a26201 00000000ffffffff 00000000ffffffff [ 392.560875][T13933] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 392.560889][T13933] page dumped because: kasan: bad access detected [ 392.560906][T13933] page_owner tracks the page as allocated [ 392.560914][T13933] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 7025, tgid 7025 (syz-executor), ts 135850693681, free_ts 135783078909 [ 392.560959][T13933] post_alloc_hook+0x1c0/0x230 [ 392.560990][T13933] get_page_from_freelist+0x1321/0x3890 [ 392.561023][T13933] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 392.561056][T13933] alloc_pages_mpol+0x1fb/0x550 [ 392.561077][T13933] new_slab+0x23b/0x330 [ 392.561102][T13933] ___slab_alloc+0xd9c/0x1940 [ 392.561130][T13933] __slab_alloc.constprop.0+0x56/0xb0 [ 392.561158][T13933] __kmalloc_node_track_caller_noprof+0x2ee/0x510 [ 392.561194][T13933] kmalloc_reserve+0xef/0x2c0 [ 392.561218][T13933] __alloc_skb+0x166/0x380 [ 392.561247][T13933] inet6_ifinfo_notify+0x77/0x150 [ 392.561275][T13933] addrconf_notify+0x81a/0x19e0 [ 392.561301][T13933] notifier_call_chain+0xb9/0x410 [ 392.561327][T13933] call_netdevice_notifiers_info+0xbe/0x140 [ 392.561353][T13933] __dev_notify_flags+0x12c/0x2e0 [ 392.561384][T13933] netif_change_flags+0x108/0x160 [ 392.561417][T13933] page last free pid 7025 tgid 7025 stack trace: [ 392.561430][T13933] __free_frozen_pages+0x7fe/0x1180 [ 392.561458][T13933] __put_partials+0x16d/0x1c0 [ 392.561486][T13933] qlist_free_all+0x4d/0x120 [ 392.561516][T13933] kasan_quarantine_reduce+0x195/0x1e0 [ 392.561548][T13933] __kasan_slab_alloc+0x69/0x90 [ 392.561580][T13933] __kmalloc_cache_noprof+0x1f1/0x3e0 [ 392.561610][T13933] __devlink_health_reporter_create+0x91/0x270 [ 392.561637][T13933] devl_health_reporter_create+0x145/0x2b0 [ 392.561663][T13933] nsim_dev_health_init+0x36/0x3a0 [ 392.561696][T13933] nsim_drv_probe+0xcc6/0x1490 [ 392.561725][T13933] really_probe+0x23e/0xa90 [ 392.561758][T13933] __driver_probe_device+0x1de/0x440 [ 392.561792][T13933] driver_probe_device+0x4c/0x1b0 [ 392.561826][T13933] __device_attach_driver+0x1df/0x310 [ 392.561858][T13933] bus_for_each_drv+0x156/0x1e0 [ 392.561884][T13933] __device_attach+0x1e4/0x4b0 [ 392.561916][T13933] [ 392.561922][T13933] Memory state around the buggy address: [ 392.561935][T13933] ffff888028989700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 392.561954][T13933] ffff888028989780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 392.561971][T13933] >ffff888028989800: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 392.561985][T13933] ^ [ 392.562000][T13933] ffff888028989880: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 392.562018][T13933] ffff888028989900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 392.562032][T13933] ================================================================== [ 392.562047][T13933] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 392.562063][T13933] CPU: 1 UID: 0 PID: 13933 Comm: syz.2.3115 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 392.562097][T13933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 392.562113][T13933] Call Trace: [ 392.562123][T13933] [ 392.562133][T13933] dump_stack_lvl+0x3d/0x1f0 [ 392.562170][T13933] panic+0x71c/0x800 [ 392.562204][T13933] ? __pfx_panic+0x10/0x10 [ 392.562240][T13933] ? __pfx__printk+0x10/0x10 [ 392.562279][T13933] ? fbcon_prepare_logo+0xa03/0xc70 [ 392.562314][T13933] check_panic_on_warn+0xab/0xb0 [ 392.562348][T13933] end_report+0x107/0x170 [ 392.562384][T13933] kasan_report+0xee/0x110 [ 392.562408][T13933] ? fbcon_prepare_logo+0xa03/0xc70 [ 392.562447][T13933] kasan_check_range+0x100/0x1b0 [ 392.562476][T13933] __asan_memcpy+0x23/0x60 [ 392.562507][T13933] fbcon_prepare_logo+0xa03/0xc70 [ 392.562549][T13933] fbcon_init+0xd77/0x1900 [ 392.562585][T13933] ? __pfx_drm_fb_helper_set_par+0x10/0x10 [ 392.562625][T13933] visual_init+0x320/0x620 [ 392.562657][T13933] do_bind_con_driver.isra.0+0x57a/0xbf0 [ 392.562705][T13933] store_bind+0x61d/0x760 [ 392.562743][T13933] ? sysfs_file_kobj+0xe4/0x290 [ 392.562774][T13933] ? __pfx_store_bind+0x10/0x10 [ 392.562808][T13933] dev_attr_store+0x55/0x80 [ 392.562832][T13933] ? __pfx_dev_attr_store+0x10/0x10 [ 392.562855][T13933] sysfs_kf_write+0xef/0x150 [ 392.562885][T13933] kernfs_fop_write_iter+0x351/0x510 [ 392.562911][T13933] ? __pfx_sysfs_kf_write+0x10/0x10 [ 392.562940][T13933] vfs_write+0x6c4/0x1150 [ 392.562974][T13933] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 392.563001][T13933] ? __pfx___mutex_lock+0x10/0x10 [ 392.563037][T13933] ? __pfx_vfs_write+0x10/0x10 [ 392.563080][T13933] ksys_write+0x12a/0x250 [ 392.563113][T13933] ? __pfx_ksys_write+0x10/0x10 [ 392.563151][T13933] do_syscall_64+0xcd/0x490 [ 392.563189][T13933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.563216][T13933] RIP: 0033:0x7ffa6f38e929 [ 392.563236][T13933] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 392.563261][T13933] RSP: 002b:00007ffa701c8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 392.563287][T13933] RAX: ffffffffffffffda RBX: 00007ffa6f5b5fa0 RCX: 00007ffa6f38e929 [ 392.563306][T13933] RDX: 000000000000fdef RSI: 0000000000000000 RDI: 0000000000000003 [ 392.563322][T13933] RBP: 00007ffa6f410b39 R08: 0000000000000000 R09: 0000000000000000 [ 392.563339][T13933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 392.563355][T13933] R13: 0000000000000000 R14: 00007ffa6f5b5fa0 R15: 00007ffc78f1dd18 [ 392.563381][T13933] [ 392.563647][T13933] Kernel Offset: disabled