last executing test programs: 13.405457641s ago: executing program 1 (id=647): openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82040, 0x0) ioperm$auto(0x7, 0x800, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) socket(0x2, 0x1, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x7, 0x0, 0x0, 0x0, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0xc, 0x20009, 0x5, 0x14, 0xffffffffffffffff, 0x0) unshare$auto(0x40000080) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x50b41, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/block/ram1/queue/read_ahead_kb\x00', 0x181482, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) write$auto(0x3, 0x0, 0xfdef) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) madvise$auto(0x0, 0x2003f0, 0x18) close_range$auto(0x0, 0xfffffffffffff000, 0x0) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/sync_on_suspend\x00', 0x1a1942, 0x0) r2 = socket(0xa, 0x3, 0x3a) close$auto(r2) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(r2, 0x8, &(0x7f0000000040), 0x0) ioctl$auto_FUSE_DEV_IOC_BACKING_OPEN(r1, 0x4010e501, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0xa, 0xb8, 0x10, 0x4, 0x4, 0xffffffffffffffff, 0xa, "2af051b26b658a20d8dc6b36c83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0x7, 0x6}, 0xf) bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@map_fd, @target_ifindex=r3, 0x3, 0x81, @uprobe_multi={0x81, 0x1ff, 0x3d7e, 0x0, 0x1, 0x4}}, 0x92) 11.855533913s ago: executing program 3 (id=652): r0 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f00000110c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010026bd7000fedbdf2514000000100007800c0003001d906b2807a58f65"], 0x24}, 0x1, 0x0, 0x0, 0x104}, 0x40) socketpair$auto(0xffff7fff, 0x4, 0x80000001, 0x0) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000a14af"], 0x14}, 0x1, 0x0, 0x0, 0x80c3}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYRES8], 0x1ac}}, 0x20008041) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x20000, 0x0) read$auto(r2, 0x0, 0x20) writev$auto(r1, &(0x7f0000000200)={0x0, 0x3}, 0x3) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/stat\x00', 0xc0802, 0x0) 11.561418543s ago: executing program 3 (id=653): r0 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x96141, 0x0) r1 = socket(0x1b, 0x3, 0x76) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x1d, 0x2, 0x7) read$auto(0x3, 0x0, 0x80) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) futex$auto(0x0, 0x6, 0x47, 0x0, 0x0, 0x0) setsockopt$auto(0x3, 0x1, 0x1d, 0x0, 0x8) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r3}, 0x6a) sendto$auto(r2, 0x0, 0xc, 0xfffffff8, &(0x7f0000000440)=@can={0x1d, r4}, 0x36) madvise$auto(0x90000000000007, 0x2000040080000003, 0xa405) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r5, &(0x7f0000000040)='//\xf2\x00', 0x80000000) getsockopt$auto_SO_RCVPRIORITY(r0, 0x7, 0x52, 0x0, &(0x7f0000000240)=0x7) r6 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x2, 0x0, 0x1, 0x20000) write$auto(r6, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x8000) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_clone(0x4040400, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x801, 0x106) syz_clone(0x100491, 0x0, 0x0, 0x0, 0x0, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000001c0), r1) socket(0x10, 0x2, 0x0) pread64$auto(0xffffffffffffffff, &(0x7f0000000040)='\x00\x00\x00\x88\xde\x90\a\'\x9bM\xa0\x848\xbbz(\xe9\x05<\x82\xfe\xe2\xf6 \x0f8\xfb\xa7\xb4\xa0\x9e\xcb\xec\x9e{o2?\x0f\x11\x90^\xdf/\x84\x99!*\xe3\x99}x\xd4\xa5D\xfa\xe5\xf9od^\xa6', 0x7ff, 0x5) 10.251553877s ago: executing program 1 (id=656): timer_create$auto(0xffffffff, 0x0, &(0x7f0000001980)=0x80000000) socket(0xa, 0x3, 0x3a) prctl$auto(0x39, 0x1, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0x9, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) close_range$auto(0x2, 0xa, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1, 0x0, 0x0, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0xc7f16bff2a10ba01, 0x0) socketpair$auto(0x20004, 0x1, 0x1, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) ioctl$auto_TIOCVHANGUP2(r0, 0x5437, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, 0x0, 0x109001, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) connect$auto(0x3, 0x0, 0x10) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) r3 = mq_open$auto(&(0x7f0000000000)='.\xf1e4\xdf\x16\x95kxE\xd9x\x15\xb0\xf6V\x93\xb4E\x06\xc5}l', 0x400056a, 0x9, 0x0) close_range$auto(0x2, 0xa, 0x0) bind$auto(r3, &(0x7f0000000080)=@nl=@kern={0x10, 0x0, 0x0, 0x10}, 0x3) r4 = socket(0xa, 0x2, 0x73) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000100), r4) 8.517813233s ago: executing program 0 (id=660): shutdown$auto(0x200000003, 0x2) 8.053453971s ago: executing program 0 (id=662): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) mmap$auto(0x0, 0x7ffffffff000, 0x8004, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0xe983, 0x7f, 0xeb1, 0x401, 0x8000) socketpair$auto(0xa, 0x2, 0x8000000000000000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x103040, 0x0) r2 = ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2200, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x4, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x400000000001ff, 0x7, 0xa, 0x1, 0x4, 0x3, 0x9, 0x5, 0x3, 0x48, 0x8002001f, 0x79d, 0x6d3e, 0x4, 0x6, 0x8]}, 0x0) prctl$auto(0x3e, 0x8, 0x0, 0x1, 0x40) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) get_robust_list$auto(0x0, 0x0, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) open(0x0, 0x22240, 0x45) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$auto(0x3, 0x80a86f3d, 0xffffffffffffffff) write$auto(r2, 0x0, 0x100000a3d9) r4 = socket(0x10, 0x2, 0xc) sendmsg$auto_CTRL_CMD_GETPOLICY(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24050803}, 0x10004010) close_range$auto(r0, 0x8, 0x4) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv6/conf/dummy0/accept_ra_pinfo\x00', 0x795900, 0x0) timer_settime$auto(0x3, 0x268, &(0x7f00000003c0)={{0xfffffffffffffffd, 0xfffffffffffffffe}, {0x9, 0x97}}, 0x0) mmap$auto(0x0, 0x5, 0xfff, 0x44eb2, 0xffffffffffffffff, 0x300000000000) 7.101770484s ago: executing program 3 (id=664): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x8000003, 0x7) madvise$auto(0x0, 0xffffffffffff0001, 0x15) io_uring_enter$auto(0xffffffffffffffff, 0x6, 0xfffffffe, 0x6b80, 0x0, 0x5) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r1 = getpid() r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000001c0), r0) sendmsg$auto_NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000006c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="64040000", @ANYRES16=r2, @ANYBLOB="08002dbd7000fddbdf256b00000008009a00000000007c00228008003c00", @ANYRES32=r1, @ANYBLOB="14003a00fe8800000000000000000000000001015900c2800800d200", @ANYRES32, @ANYBLOB="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"], 0x464}, 0x1, 0x0, 0x0, 0x10}, 0x40) sendmsg$auto_NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f00000014c0)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001480)={&(0x7f0000001400)=ANY=[@ANYBLOB="336b94bb", @ANYRES16=r2, @ANYBLOB="01002dbd7000fedbdf255d0000000f0002013330d3c88b7fb6debc139a000500a200000000000800420009000000040087000500d200090000002d005b00ef6cda0fd2611142270fac3db1f79a48db92d2708db81809f475c4cd7fc689ab5963c8e96b01a372da000000"], 0x70}, 0x1, 0x0, 0x0, 0x4040005}, 0x40804) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_VHOST_SET_VRING_CALL2(0xffffffffffffffff, 0x4008af21, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}) r4 = prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x9) ioctl$auto_VHOST_SET_LOG_FD2(r4, 0x4004af07, &(0x7f00000001c0)=r4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, r5, 0x8000) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) ioctl$auto_PAGEMAP_SCAN(r8, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x0, 0x0, 0x50b301a, 0x2c, 0x2c, 0x0, 0x2}) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)={0x120, r6, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x78, 0xbe, "2851deffd25c1ad8570b3ccab61efec8b5287da5740b3f69513508f66478fa0a946f3a3d7266145466ac77c9ad2c8c402858f8ff080284b3fc289fccf971e084e9b8aec596b715aec67311f3932a1379544aff4f5b730bb2779cc29c75729120f7b386758524dc5054da379991cb65bc7a3a84c6"}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0xfffffffc}, @NL80211_ATTR_SAE_PASSWORD={0x84, 0x115, "c3991eff9f839e066026e213626609000000b805414f5b112a44d6875b15c45625a1d8502d7cc067902bf55ce2c5c11d4225f128db3dec1907e02bcf361e22fa649e8610ccef1ef63d274d664ea74441c76891de999e8c4f69131d6669b8c097cab0cf92a7d0c3663de237820b905caf4c1063fc543b92853be961d81dc490ea"}, @NL80211_ATTR_MAX_HW_TIMESTAMP_PEERS={0x6, 0x143, 0x5}]}, 0x120}, 0x1, 0x68, 0x0, 0x24000000}, 0xd0) sendmsg$auto_NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, r6, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@NL80211_ATTR_ASSOC_SPP_AMSDU={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000080}, 0x8002) sendmsg$auto_NL80211_CMD_GET_KEY(r5, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r6, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_ASSOC_SPP_AMSDU={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x21}, 0x51) sendmsg$auto_NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x28, r6, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_DYN_ACK={0x4}, @NL80211_ATTR_VLAN_ID={0x5c, 0x11a, 0x9}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0xff}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000800}, 0x50) sendmsg$auto_NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x11a0, r6, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x6}, @NL80211_ATTR_EHT_CAPABILITY={0x81, 0x136, "2e11e640cbd31ccc0acbdc939d39b32a93a6d188769e312499db33b6ceb5e0e02f95c1ed405bad3c6391c26eb7dbe228d9c2b967a0cbfdcb162dfb3e6a274eff0082c542cbe42686d8ed780e075f07db4813420dc2d718bd371212d9de86fbb770a77cd7857e93c9b001c00a7d394a0b10273b52941e18e2f7da5ff167"}, @NL80211_ATTR_SAE_PASSWORD={0x81, 0x115, "262730d2e2f8202659ef638a9ac1f01f1ceedb6135391ee7e0df93a9281f18ffc600c9e19cfa7d8a4fcf4e75137afb6e784dc9731b18d2c5915d872f14ad3f262de28c49eb44e552b401441567ec5dbbfabf7f7255594fa5c29cc945484d3e247913e488e04bf052ac44e5328061b0915e02f8ff4fa2884228ef0f5612"}, @NL80211_ATTR_HT_CAPABILITY={0x1004, 0x1f, "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"}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x5}, @NL80211_HE_OBSS_PD_ATTR_SR_CTRL={0x5, 0x6, 0xa}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0xff}]}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x49, 0xac, "93ce7429a5789724e25f08d77d1e76f80394b38aad3465ba09d6943ad567bd32c83c256a9d226159767e0ed53ba8f29630cf397e434f09a16c663f64b8f14673500b389fb1"}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0xf5cc}, @NL80211_ATTR_DISABLE_VHT={0x4}]}, 0x11a0}, 0x1, 0x0, 0x0, 0x4008040}, 0x40000) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/nvmet_rdma/parameters/srq_size\x00', 0x183841, 0x0) close_range$auto(0x2, 0x8, 0x0) r9 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/kallsyms\x00', 0x20100, 0x0) pread64$auto(r9, 0x0, 0x8, 0x8000) openat$auto_proc_loginuid_operations_base(0xffffffffffffff9c, &(0x7f0000001500)='/proc/self/loginuid\x00', 0x3c8082, 0x0) 6.821623047s ago: executing program 0 (id=665): openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty51\x00', 0x40001, 0x0) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(0x3, 0x0, 0x7fffffff) preadv$auto(0x40000000000003, 0x0, 0x6, 0x8, 0x5) splice$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xfffffffffffffffe, 0x5, 0x1) process_vm_readv$auto(0x0, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) ioctl$auto(0x3, 0x80000541b, 0x38) 5.478651635s ago: executing program 0 (id=666): openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/all/disable_ipv6\x00', 0x1401, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xd4, 0x8000) pipe$auto(0x0) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8000, 0x0) socket(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101080, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_CREATE_VM(r0, 0x4048aecb, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48004}, 0x4050) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x9, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) r2 = socket(0xa, 0x1, 0x84) getsockopt$auto(r2, 0x84, 0x8, 0x0, &(0x7f0000000000)=0x9b) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) clone$auto(0x8, 0x2, 0x0, 0x0, 0x6dd9cd17) 5.328590899s ago: executing program 2 (id=667): mmap$auto(0x0, 0x5, 0xdf, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x3fd, 0x8000) getsockopt$auto(0xffffffffffffffff, 0x10002, 0x2, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x1, 0x0) socket(0xa, 0x5, 0x0) r0 = socket(0x2, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3d}}, 0x6a) listen$auto(0x3, 0x81) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x128}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1e, 0x5, 0x200000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x88002, 0x1d7) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20b42, 0x0) write$auto_snd_pcm_oss_f_reg_pcm_oss(r1, &(0x7f0000000080)="c2", 0x1) ioctl$auto_SNDCTL_DSP_SYNC(r1, 0x5001, 0xfffffffffffffffc) ioctl$auto_SNDCTL_DSP_GETODELAY(r1, 0x80045017, &(0x7f0000000480)) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8) recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000100)={{0x0, 0xbb, 0x0, 0x8, &(0x7f0000000040), 0x81, 0x9}, 0xfffffffb}, 0x5, 0x6586, 0x0) sendmsg$auto_NL802154_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040), 0xc, 0x0, 0x1, 0x0, 0x0, 0x20050001}, 0x80) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/uvcvideo/parameters/nodrop\x00', 0xa3182, 0x0) sendfile$auto(r2, r2, 0x0, 0x100000000) 4.902899214s ago: executing program 1 (id=668): syz_genetlink_get_family_id$auto_ila(0x0, 0xffffffffffffffff) mremap$auto(0x200000000000, 0x40000000004, 0x4, 0x3, 0x100000000) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb5, 0x401, 0x300000000000) prctl$auto(0x16, 0x2, 0x2, 0x4000000d, 0x100) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x48080) socket(0xa, 0x1, 0x84) ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0) socket(0x2, 0x5, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dmmidi2\x00', 0x101, 0x0) socket(0x10, 0x2, 0x0) close_range$auto(0x2, 0xa, 0x0) mmap$auto(0x3, 0xa00006, 0x4, 0x40eb1, 0x602, 0x300000000000) ioprio_set$auto(0x2, 0x0, 0x208) close_range$auto(0x2, 0x8, 0x0) clock_nanosleep$auto(0x8, 0x0, &(0x7f00000000c0)={0x3, 0x2}, 0x0) adjtimex$auto(&(0x7f0000000100)={0x101, 0x0, 0x60b5, 0x3, 0x7, 0x8000000003, 0x60, 0x0, 0x1, 0x45079941, 0x0, {0x3, 0x7}, 0x4, 0x3, 0x9, 0x9000000, 0x0, 0x8, 0x46fa, 0x1, 0xb4, 0x800, 0xf9}) r1 = openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2a801, 0x0) pwrite64$auto(r1, &(0x7f0000000340)='/dev/vcsa\x00\x84\xbd\xe3\xa8\xaf\xd0E>0Q!\x8dIY\x1cPw+\x85\xdf\xa2\xfd\xf1\x80\xc6\xde>KC\x931\xf7vvjlm\xae\xf8\xc3\xa8\xbe\xdc9|\xfe}\xaf\x9e\'\xef\x84\xa8\xd3eX\x8f\xf8\x82\xe9\x8d\x86\x15\xa4B\xd3\x1e\xbd\x81\x00q\xca\xfe\xa8<\'~\xec\x0f\xc9\x91\x86\x19\x97}\xba\x1f\x1a\xf8\x15\x8a?\xe0\xeb\xfaOS\x11\x964\xd58\xf9q\xdc\xce\t\f\xa3\xc7\x84j\x15\x81\x16\xbb\x8d\xa9\x04\xc4\x03W(\xbc\x03N\x95\xb8\x1b&,\xeb\x94\xc2p}u#\xd22[\xfe@\xfap\x8c\xa8&\xb3\xbe\x12R\xd1V\xd0\xd4\xb1\x8b\xf3\x86\xd2\xba\r\x8a~]\\wg=\raRc\xb8\xf0\x9e\xc7D\xde\xa6;\x7f\x90\xf8\xf3\xc8f\xa1\n\x8b\xd6\xd5\xc6-\xf6X\x8cS\x10\x98)xo\xa3\x92\xa0=?\xde@\xb1\b8\xe1D\xb7\xf2\b\xfa\xad\xa43\x9dI9d\x152\x96\xd7\x9f\x9e\t^\x827\xfe\xb1!Z\x12\xf9\x1e\x9b\xef\xd5\xb7\x17\x8f\xc8]\x9f\x1b\xfaD\xa7\x1f\x8a\xaf\x919\x8ee\xb4\x13\x05\xf1\x04>\r\x80*j&\x99e\v\xfd\x9b\xd0\xb8y\xa2\xa7\x85\x87*\x00\xea\xe1c\xda\x11\xbcF\xc5\xe0T\x9c\xe9\xd2\xc9\xea\f\x9bt\x18\xc5\xa0o\xae\x91X\t\x8a\x91', 0x7b05, 0x3) 4.62161852s ago: executing program 0 (id=669): socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) sendmsg$auto_ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4000840}, 0x2000c840) sendmmsg$auto(0x3, &(0x7f00000000c0)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0x34000}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x3f3) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x6) socket(0x10, 0x4, 0xffffffc0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x203, 0x7, 0xd, 0x8fd6, 0x948b, 0x6, 0x6, 0x3, 0x3, 0x0, 0x80000001, 0x800, 0x1, 0x9, 0x200000000001, 0xfffffffffffffffe]}, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0xf1, 0x2, 0x8000) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/hugetlb_optimize_vmemmap\x00', 0xa0202, 0x0) sendfile$auto(r1, r1, 0x0, 0x7fffe000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001140)='/sys/devices/virtual/block/zram0/comp_algorithm\x00', 0x20b42, 0x0) sendfile$auto(r2, r1, 0x0, 0x7) mmap$auto(0x0, 0x13c, 0xdf, 0x9b72, 0x2, 0x8) sendfile$auto(0x3, 0xffffffffffffffff, 0x0, 0x400000000006) open(0x0, 0x1e1401, 0xe5) tkill$auto(0x0, 0x7) write$auto(0x3, 0x0, 0x100082) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) move_mount$auto(0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x77) setsockopt$auto(0x3, 0x114, 0xa, 0x0, 0x4) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) 4.156155112s ago: executing program 2 (id=670): shutdown$auto(0x200000003, 0x2) 4.149871849s ago: executing program 3 (id=671): socket(0x2, 0x5, 0x0) bpf$auto(0x0, 0x0, 0xa3) socket(0x2, 0x801, 0x100) socket(0x25, 0x1, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) setreuid$auto(0xffffffffffffffff, 0x8) r1 = pidfd_open$auto(0x1, 0x0) setns(r1, 0x20000) getpid() prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(0xffffffffffffffff, 0x2, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0xe4, 0x95f4da0a, 0xfffffffffff7ffff, 0x3, 0x62, 0x80000001, 0xa, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948d, 0x3, 0x15f4da0a, 0x4, 0xffffffffffffff3f, 0x100, 0x8000001f, 0x29, 0x6d3e, 0x6, 0x2, 0x6]}, 0x0) r2 = openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/dri/vkms/gem_names\x00', 0x2100, 0x0) lseek$auto(r2, 0x9, 0x0) r3 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec18\x00', 0x900, 0x0) ioctl$auto_CEC_S_MODE(r3, 0x40046109, &(0x7f0000002c40)=0xf0) close_range$auto(0x2, 0xa, 0x0) 3.669834709s ago: executing program 2 (id=672): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = syz_genetlink_get_family_id$auto_tipcv2(0x0, 0xffffffffffffffff) sendmsg$auto_TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f00000110c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010026bd7000fedbdf2514000000100007800c0003001d906b2807a58f65"], 0x24}, 0x1, 0x0, 0x0, 0x104}, 0x40) socketpair$auto(0xffff7fff, 0x4, 0x80000001, 0x0) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000a14af"], 0x14}, 0x1, 0x0, 0x0, 0x80c3}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYRES8], 0x1ac}}, 0x20008041) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x20000, 0x0) read$auto(r2, 0x0, 0x20) writev$auto(r1, &(0x7f0000000200)={0x0, 0x3}, 0x3) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/stat\x00', 0xc0802, 0x0) 2.602151684s ago: executing program 1 (id=673): mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) io_uring_setup$auto(0x6, 0x0) r0 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r0, 0x7a7, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, 0x6) pread64$auto(0xffffffffffffffff, 0x0, 0x800003, 0x270) socket(0xf, 0x3, 0x2) madvise$auto_MADV_PAGEOUT(0xd, 0x8000, 0x15) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = openat$auto_lowpan_enable_fops_(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) getdents$auto(r2, 0x0, 0x5de9) r3 = open(&(0x7f0000000000)='./cgroup\x00', 0x400, 0x64) fchdir$auto(r3) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f00000001c0)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x5, 0x0) umount2$auto(0x0, 0x4) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f0000000100)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xf, 0x1, 0x948b, 0x4, 0x15f4da0a, 0x3, 0x3, 0x80d, 0x8000001f, 0x2, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) symlinkat$auto(0x0, r4, 0x0) r5 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, 0x0, 0x125200, 0x0) close_range$auto(r0, r5, 0x0) bpf$auto(0x0, 0x0, 0xf) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) eventfd$auto(0x1) r6 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(r6, r6, 0x0) r7 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video24\x00', 0xa240, 0x0) ioctl$auto(r7, 0xc0585611, r7) 2.601445602s ago: executing program 3 (id=674): openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty51\x00', 0x40001, 0x0) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(0x3, 0x0, 0x7fffffff) preadv$auto(0x40000000000003, 0x0, 0x6, 0x8, 0x5) splice$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xfffffffffffffffe, 0x5, 0x1) process_vm_readv$auto(0x0, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) ioctl$auto(0x3, 0x80000541b, 0x38) 1.695837475s ago: executing program 2 (id=675): r0 = socket(0x11, 0x3, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x7, 0x4a}) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) futex$auto(0x0, 0x6, 0x47, 0x0, 0x0, 0x0) setsockopt$auto(0x3, 0x1, 0x2b, 0x0, 0x28) sendmmsg$auto(r0, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5aa, 0x0, 0x9, 0x0, 0x5, 0x1000}, 0x80000005}, 0x2, 0x100) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_ILA_CMD_ADD(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000080)={0x1c, 0x0, 0x201, 0x70bd28, 0x25dfdbff, {}, [@ILA_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x38) r1 = socket(0x11, 0x3, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) sendmmsg$auto(r1, &(0x7f00000006c0)={{&(0x7f0000000000), 0x5ac, &(0x7f00000000c0)={&(0x7f0000000080)="4c06000002000000000000007f00000000ffffff861b", 0x4b}, 0x2, 0x0, 0x5, 0x3ff}, 0x5}, 0x2, 0x100) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000100), r1) 1.436370304s ago: executing program 3 (id=676): timer_create$auto(0xffffffff, 0x0, &(0x7f0000001980)=0x80000000) socket(0xa, 0x3, 0x3a) prctl$auto(0x39, 0x1, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0x9, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) close_range$auto(0x2, 0xa, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1, 0x0, 0x0, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0xc7f16bff2a10ba01, 0x0) socketpair$auto(0x20004, 0x1, 0x1, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) ioctl$auto_TIOCVHANGUP2(r0, 0x5437, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, 0x0, 0x109001, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) connect$auto(0x3, 0x0, 0x10) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) r3 = mq_open$auto(&(0x7f0000000000)='.\xf1e4\xdf\x16\x95kxE\xd9x\x15\xb0\xf6V\x93\xb4E\x06\xc5}l', 0x400056a, 0x9, 0x0) close_range$auto(0x2, 0xa, 0x0) bind$auto(r3, &(0x7f0000000080)=@nl=@kern={0x10, 0x0, 0x0, 0x10}, 0x3) r4 = socket(0xa, 0x2, 0x73) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000100), r4) 1.301491334s ago: executing program 1 (id=677): openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/all/disable_ipv6\x00', 0x1401, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xd4, 0x8000) pipe$auto(0x0) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8000, 0x0) socket(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101080, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_CREATE_VM(r0, 0x4048aecb, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48004}, 0x4050) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x9, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) r2 = socket(0xa, 0x1, 0x84) getsockopt$auto(r2, 0x84, 0x8, 0x0, &(0x7f0000000000)=0x9b) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) clone$auto(0x8, 0x2, 0x0, 0x0, 0x6dd9cd17) 993.806116ms ago: executing program 2 (id=678): mmap$auto(0x0, 0x5, 0xdf, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x3fd, 0x8000) getsockopt$auto(0xffffffffffffffff, 0x10002, 0x2, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x1, 0x0) socket(0xa, 0x5, 0x0) r0 = socket(0x2, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3d}}, 0x6a) listen$auto(0x3, 0x81) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x128}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1e, 0x5, 0x200000, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x1, 0xa) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20b42, 0x0) write$auto_snd_pcm_oss_f_reg_pcm_oss(r1, &(0x7f0000000080)="c2", 0x1) ioctl$auto_SNDCTL_DSP_SYNC(r1, 0x5001, 0xfffffffffffffffc) ioctl$auto_SNDCTL_DSP_GETODELAY(r1, 0x80045017, &(0x7f0000000480)) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8) recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000100)={{0x0, 0xbb, 0x0, 0x8, &(0x7f0000000040), 0x81, 0x9}, 0xfffffffb}, 0x5, 0x6586, 0x0) sendmsg$auto_NL802154_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040), 0xc, 0x0, 0x1, 0x0, 0x0, 0x20050001}, 0x80) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/uvcvideo/parameters/nodrop\x00', 0xa3182, 0x0) sendfile$auto(r2, r2, 0x0, 0x100000000) 909.135699ms ago: executing program 0 (id=679): close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x3, 0x3b) unshare$auto(0x40000080) mmap$auto(0x0, 0x40000b, 0x80de, 0x9b72, 0xffffffffffffffff, 0x800008000) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/pcmC1D1p\x00', 0x800, 0x0) r0 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/security/tomoyo/audit\x00', 0x0, 0x0) read$auto_tomoyo_operations_securityfs_if(r0, 0x0, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x340, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual/block/ram12/queue/read_ahead_kb\x00', 0x80000, 0x0) read$auto(r2, 0x0, 0x20) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) r3 = socket(0x2, 0x80802, 0x0) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x55) setsockopt$auto(r3, 0x11, 0x65, 0x0, 0x8) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) msgctl$auto_IPC_RMID(0x1, 0x0, &(0x7f0000000480)={{0x1, 0x0, 0x0, 0x10001, 0xfffffff7, 0x5, 0x6}, &(0x7f0000000380), &(0x7f00000003c0)=0x2, 0x0, 0x5, 0x9, 0x3, 0x7fff, 0x1, 0xf72, 0x8, @inferred, @raw=0x3}) listen$auto(0x3, 0x81) unshare$auto(0x40000080) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000000), 0xffffffffffffffff) ioctl$auto(0xffffffffffffffff, 0x5521, 0xffffffffffffffff) sendmsg$auto_MACSEC_CMD_UPD_RXSA(r4, &(0x7f0000006200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="230027bd7000fedb8525090000000c00038005000180030000000400028008000100", @ANYRES32=0x0, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x4008008}, 0x0) socket(0xa, 0x1, 0x86) 507.751254ms ago: executing program 1 (id=680): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) fstat$auto(r0, 0x0) r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x4610, 0x0) socket(0x2, 0x801, 0x100) accept$auto(0x3, 0xffffffffffffffff, 0xffffffffffffffff) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000000), r2) sendmsg$auto_ETHTOOL_MSG_TUNNEL_INFO_GET(r2, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000f00)={0x14, r3, 0x705, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x880) mmap$auto(0x2, 0x20009, 0x4000000000df, 0xeb1, r2, 0x8) prctl$auto_PR_SYS_DISPATCH_OFF(0x7, 0x0, 0xffffffffffffffff, 0x7, 0x960f) madvise$auto(0x0, 0x20499d, 0x9) 0s ago: executing program 2 (id=681): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) mmap$auto(0x0, 0x7ffffffff000, 0x8004, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0xe983, 0x7f, 0xeb1, 0x401, 0x8000) socketpair$auto(0xa, 0x2, 0x8000000000000000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x103040, 0x0) r2 = ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2200, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x4, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x400000000001ff, 0x7, 0xa, 0x1, 0x4, 0x3, 0x9, 0x5, 0x3, 0x48, 0x8002001f, 0x79d, 0x6d3e, 0x4, 0x6, 0x8]}, 0x0) prctl$auto(0x3e, 0x8, 0x0, 0x1, 0x40) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) get_robust_list$auto(0x0, 0x0, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) open(0x0, 0x22240, 0x45) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$auto(0x3, 0x80a86f3d, 0xffffffffffffffff) write$auto(r2, 0x0, 0x100000a3d9) r4 = socket(0x10, 0x2, 0xc) sendmsg$auto_CTRL_CMD_GETPOLICY(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24050803}, 0x10004010) close_range$auto(r0, 0x8, 0x4) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv6/conf/dummy0/accept_ra_pinfo\x00', 0x795900, 0x0) timer_settime$auto(0x3, 0x268, &(0x7f00000003c0)={{0xfffffffffffffffd, 0xfffffffffffffffe}, {0x9, 0x97}}, 0x0) mmap$auto(0x0, 0x5, 0xfff, 0x44eb2, 0xffffffffffffffff, 0x300000000000) kernel console output (not intermixed with test programs): Setting the MTU to 1560 would solve the problem. [ 104.452111][ T5863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.466374][ T5859] team0: Port device team_slave_0 added [ 104.528450][ T5859] team0: Port device team_slave_1 added [ 104.535127][ T5861] Bluetooth: hci0: command tx timeout [ 104.543115][ T5867] team0: Port device team_slave_0 added [ 104.550269][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.558919][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.585207][ T5865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.598195][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.605479][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.632357][ T5861] Bluetooth: hci1: command tx timeout [ 104.638674][ T5865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.693092][ T5867] team0: Port device team_slave_1 added [ 104.732452][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.740305][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.771351][ T5859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.782087][ T5861] Bluetooth: hci2: command tx timeout [ 104.784066][ T5183] Bluetooth: hci3: command tx timeout [ 104.821922][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.829030][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.855100][ T5867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.882700][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.890165][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.916266][ T5859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.935736][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.942826][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.969451][ T5867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.987520][ T5863] hsr_slave_0: entered promiscuous mode [ 104.994407][ T5863] hsr_slave_1: entered promiscuous mode [ 105.066712][ T5865] hsr_slave_0: entered promiscuous mode [ 105.073494][ T5865] hsr_slave_1: entered promiscuous mode [ 105.081174][ T5865] debugfs: 'hsr0' already exists in 'hsr' [ 105.087088][ T5865] Cannot create hsr debugfs directory [ 105.142586][ T5867] hsr_slave_0: entered promiscuous mode [ 105.150055][ T5867] hsr_slave_1: entered promiscuous mode [ 105.156529][ T5867] debugfs: 'hsr0' already exists in 'hsr' [ 105.162292][ T5867] Cannot create hsr debugfs directory [ 105.251361][ T5859] hsr_slave_0: entered promiscuous mode [ 105.258344][ T5859] hsr_slave_1: entered promiscuous mode [ 105.265622][ T5859] debugfs: 'hsr0' already exists in 'hsr' [ 105.271395][ T5859] Cannot create hsr debugfs directory [ 105.792055][ T5863] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 105.809065][ T5863] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 105.831800][ T5863] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 105.851644][ T5863] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 105.902795][ T5859] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 105.923137][ T5859] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 105.940931][ T5859] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 105.952460][ T5859] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 106.058220][ T5865] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 106.103292][ T5865] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 106.116722][ T5865] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 106.130700][ T5865] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 106.239042][ T5867] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 106.251239][ T5867] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 106.265935][ T5867] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 106.278514][ T5867] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 106.373452][ T5863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.415520][ T5859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.458614][ T5863] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.508024][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.515458][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.529522][ T5859] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.555899][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.563107][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.576605][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.583787][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.613733][ T3516] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.621030][ T3516] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.629374][ T5861] Bluetooth: hci0: command tx timeout [ 106.690988][ T5865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.696299][ T5861] Bluetooth: hci1: command tx timeout [ 106.812739][ T5867] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.831638][ T5865] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.856571][ T5861] Bluetooth: hci2: command tx timeout [ 106.856609][ T5183] Bluetooth: hci3: command tx timeout [ 106.869299][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.876577][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.932402][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.939690][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.014885][ T5867] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.080644][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.088278][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.127312][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.134565][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.310676][ T5863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.335341][ T5867] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 107.477722][ T5859] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.529040][ T5863] veth0_vlan: entered promiscuous mode [ 107.589225][ T5863] veth1_vlan: entered promiscuous mode [ 107.688556][ T5859] veth0_vlan: entered promiscuous mode [ 107.745071][ T5859] veth1_vlan: entered promiscuous mode [ 107.798388][ T5863] veth0_macvtap: entered promiscuous mode [ 107.831972][ T5863] veth1_macvtap: entered promiscuous mode [ 107.867218][ T5865] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.891950][ T5859] veth0_macvtap: entered promiscuous mode [ 107.927945][ T5859] veth1_macvtap: entered promiscuous mode [ 107.962438][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.977589][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.991648][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.003425][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.027998][ T5867] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.079929][ T59] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.090114][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.113202][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.122894][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.150322][ T5865] veth0_vlan: entered promiscuous mode [ 108.158799][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.168958][ T59] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.190848][ T59] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.199796][ T59] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.223785][ T5865] veth1_vlan: entered promiscuous mode [ 108.363048][ T5867] veth0_vlan: entered promiscuous mode [ 108.386003][ T5865] veth0_macvtap: entered promiscuous mode [ 108.404542][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.412560][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.457487][ T5865] veth1_macvtap: entered promiscuous mode [ 108.478006][ T5867] veth1_vlan: entered promiscuous mode [ 108.488014][ T133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.506251][ T133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.531164][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.573671][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.582343][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.601124][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.643582][ T133] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.677464][ T133] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.686649][ T133] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.695831][ T5183] Bluetooth: hci0: command tx timeout [ 108.716797][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.727849][ T133] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.730413][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.762724][ T5863] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 108.785058][ T5183] Bluetooth: hci1: command tx timeout [ 108.818287][ T5867] veth0_macvtap: entered promiscuous mode [ 108.859511][ T5867] veth1_macvtap: entered promiscuous mode [ 108.936622][ T5183] Bluetooth: hci2: command tx timeout [ 108.942200][ T5183] Bluetooth: hci3: command tx timeout [ 109.033754][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.077048][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.092870][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.102823][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.264973][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 109.284339][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 109.327447][ T59] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.353605][ T59] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.397766][ T5957] mkiss: ax0: crc mode is auto. [ 109.406558][ T59] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.427429][ T59] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.484978][ T133] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.532864][ T133] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.574810][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 109.978419][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.026299][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.352568][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.373141][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.452158][ T5967] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input5 [ 110.664313][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 110.757292][ T5962] Zero length message leads to an empty skb [ 110.782018][ T5861] Bluetooth: hci0: command tx timeout [ 110.854929][ T5861] Bluetooth: hci1: command tx timeout [ 111.014708][ T5861] Bluetooth: hci3: command tx timeout [ 111.020291][ T5183] Bluetooth: hci2: command tx timeout [ 111.078034][ T5968] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input6 [ 111.184840][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 111.214267][ T0] NOHZ tick-stop error: local softirq work is pending, handler #3c2!!! [ 111.254335][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 111.262810][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 111.424357][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 111.544319][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 112.526888][ T5991] zswap: compressor not available [ 115.616719][ T6032] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 115.632308][ T6032] netlink: 20 bytes leftover after parsing attributes in process `syz.1.15'. [ 117.804319][ T5183] Bluetooth: hci1: Unable to find connection for big 0xd2 [ 117.850822][ T6057] netlink: 12 bytes leftover after parsing attributes in process `syz.0.21'. [ 117.860362][ T6057] nbd: must specify a size in bytes for the device [ 119.652908][ T6084] batman_adv: batadv0: adding TT local entry 00:00:03:00:00:00 to non-existent VLAN 6 [ 119.736633][ T30] audit: type=1800 audit(1754691402.454:2): pid=6084 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="" name="lu_gp_id" dev="configfs" ino=8238 res=0 errno=0 [ 120.553319][ T6092] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 121.814012][ T5183] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 121.998383][ T6112] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 124.145944][ T6136] ubi0: attaching mtd0 [ 124.165356][ T6136] ubi0: scanning is finished [ 124.189832][ T6136] ubi0: empty MTD device detected [ 124.606053][ T6136] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 124.613775][ T6136] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 124.709348][ T6136] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 124.734144][ T6136] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 124.743569][ T6136] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 124.753493][ T6136] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 124.761816][ T6136] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1834952070 [ 124.775191][ T6136] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 124.801290][ T6140] ubi0: background thread "ubi_bgt0d" started, PID 6140 [ 126.315816][ T6160] netlink: 'syz.1.41': attribute type 1 has an invalid length. [ 126.517240][ T30] audit: type=1800 audit(1754691409.244:3): pid=6164 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.41" name="dummy_udc" dev="gadgetfs" ino=6128 res=0 errno=0 [ 127.471630][ T6162] random: crng reseeded on system resumption [ 127.688146][ T6170] process 'syz.2.43' launched './file0' with NULL argv: empty string added [ 130.693999][ T5183] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 133.694466][ T6246] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 133.998660][ T6235] netlink: set zone limit has 8 unknown bytes [ 137.055567][ T6285] __vm_enough_memory: pid: 6285, comm: syz.3.66, bytes: 4398046511104 not enough memory for the allocation [ 143.424743][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 143.434009][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 146.901996][ T6414] netlink: 8 bytes leftover after parsing attributes in process `syz.0.91'. [ 152.224625][ T6480] netlink: 354 bytes leftover after parsing attributes in process `syz.2.106'. [ 152.237511][ T6480] capability: warning: `syz.2.106' uses 32-bit capabilities (legacy support in use) [ 153.451034][ T6506] uvcvideo: [Deprecated]: nodrop parameter will be eventually removed. [ 154.411549][ T6520] input: jJǸ-¶š9ã%vø“ûJ86Ö‘ as /devices/virtual/input/input8 [ 155.104853][ T6528] netlink: 354 bytes leftover after parsing attributes in process `syz.0.116'. [ 155.776961][ T6539] FAULT_INJECTION: forcing a failure. [ 155.776961][ T6539] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 155.790265][ T6539] CPU: 1 UID: 0 PID: 6539 Comm: syz.0.119 Not tainted 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(full) [ 155.790297][ T6539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 155.790315][ T6539] Call Trace: [ 155.790323][ T6539] [ 155.790331][ T6539] dump_stack_lvl+0x16c/0x1f0 [ 155.790367][ T6539] should_fail_ex+0x512/0x640 [ 155.790412][ T6539] _copy_from_user+0x2e/0xd0 [ 155.790446][ T6539] copy_msghdr_from_user+0x98/0x160 [ 155.790474][ T6539] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 155.790508][ T6539] ? __pfx_futex_wake_mark+0x10/0x10 [ 155.790549][ T6539] ___sys_sendmsg+0xfe/0x1d0 [ 155.790576][ T6539] ? __pfx____sys_sendmsg+0x10/0x10 [ 155.790636][ T6539] __sys_sendmsg+0x16d/0x220 [ 155.790662][ T6539] ? __pfx___sys_sendmsg+0x10/0x10 [ 155.790688][ T6539] ? __x64_sys_futex+0x1e0/0x4c0 [ 155.790735][ T6539] do_syscall_64+0xcd/0x490 [ 155.790764][ T6539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.790788][ T6539] RIP: 0033:0x7f3b4058ebe9 [ 155.790811][ T6539] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 155.790834][ T6539] RSP: 002b:00007f3b3e7b4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 155.790859][ T6539] RAX: ffffffffffffffda RBX: 00007f3b407b6180 RCX: 00007f3b4058ebe9 [ 155.790874][ T6539] RDX: 0000000020000000 RSI: 0000200000000440 RDI: 0000000000000007 [ 155.790888][ T6539] RBP: 00007f3b40611e19 R08: 0000000000000000 R09: 0000000000000000 [ 155.790902][ T6539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 155.790915][ T6539] R13: 00007f3b407b6218 R14: 00007f3b407b6180 R15: 00007ffda89ed5a8 [ 155.790943][ T6539] [ 156.340725][ T6552] netlink: 8 bytes leftover after parsing attributes in process `syz.2.123'. [ 157.177484][ T6566] __vm_enough_memory: pid: 6566, comm: syz.2.126, bytes: 4398046511104 not enough memory for the allocation [ 157.445997][ T6573] __vm_enough_memory: pid: 6573, comm: syz.1.136, bytes: 4398046511104 not enough memory for the allocation [ 157.525409][ T5183] Bluetooth: hci2: Malformed LE Event: 0x1d [ 160.791554][ T6618] __vm_enough_memory: pid: 6618, comm: syz.1.139, bytes: 4398046511104 not enough memory for the allocation [ 161.996521][ T6633] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input9 [ 162.763477][ T6638] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input10 [ 162.803601][ T6652] netlink: 28 bytes leftover after parsing attributes in process `syz.3.147'. [ 162.856773][ T6652] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.898028][ T6652] bridge_slave_1 (unregistering): left allmulticast mode [ 162.983246][ T6652] bridge_slave_1 (unregistering): left promiscuous mode [ 162.990699][ T6652] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.172167][ T6664] __vm_enough_memory: pid: 6664, comm: syz.0.149, bytes: 4398046511104 not enough memory for the allocation [ 164.342100][ T6667] netlink: 4 bytes leftover after parsing attributes in process `syz.2.150'. [ 164.611211][ T6675] netlink: 36 bytes leftover after parsing attributes in process `syz.2.150'. [ 164.716271][ T6674] __vm_enough_memory: pid: 6674, comm: syz.0.160, bytes: 4398046511104 not enough memory for the allocation [ 166.268018][ T6700] netlink: 28 bytes leftover after parsing attributes in process `syz.1.157'. [ 166.397296][ T6700] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.469553][ T6700] bridge_slave_1 (unregistering): left allmulticast mode [ 166.498252][ T6700] bridge_slave_1 (unregistering): left promiscuous mode [ 166.522455][ T6700] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.790282][ T6722] __vm_enough_memory: pid: 6722, comm: syz.0.163, bytes: 4398046511104 not enough memory for the allocation [ 169.847896][ T6780] kAFS: No cell specified [ 170.202697][ T6788] FAULT_INJECTION: forcing a failure. [ 170.202697][ T6788] name failslab, interval 1, probability 0, space 0, times 0 [ 170.263964][ T6788] CPU: 1 UID: 0 PID: 6788 Comm: syz.2.171 Not tainted 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(full) [ 170.264010][ T6788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 170.264028][ T6788] Call Trace: [ 170.264038][ T6788] [ 170.264052][ T6788] dump_stack_lvl+0x16c/0x1f0 [ 170.264095][ T6788] should_fail_ex+0x512/0x640 [ 170.264134][ T6788] ? __kmalloc_noprof+0xbf/0x510 [ 170.264178][ T6788] ? ops_init+0x77/0x5f0 [ 170.264211][ T6788] should_failslab+0xc2/0x120 [ 170.264264][ T6788] __kmalloc_noprof+0xd2/0x510 [ 170.264302][ T6788] ? lockdep_init_map_type+0x5c/0x280 [ 170.264361][ T6788] ops_init+0x77/0x5f0 [ 170.264402][ T6788] setup_net+0x10f/0x380 [ 170.264436][ T6788] ? lockdep_init_map_type+0x5c/0x280 [ 170.264481][ T6788] ? __pfx_setup_net+0x10/0x10 [ 170.264522][ T6788] ? debug_mutex_init+0x37/0x70 [ 170.264559][ T6788] copy_net_ns+0x2a6/0x5f0 [ 170.264605][ T6788] create_new_namespaces+0x3ea/0xa90 [ 170.264655][ T6788] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 170.264697][ T6788] ksys_unshare+0x45b/0xa40 [ 170.264743][ T6788] ? __pfx_ksys_unshare+0x10/0x10 [ 170.264790][ T6788] ? xfd_validate_state+0x61/0x180 [ 170.264871][ T6788] __x64_sys_unshare+0x31/0x40 [ 170.264916][ T6788] do_syscall_64+0xcd/0x490 [ 170.264974][ T6788] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.265007][ T6788] RIP: 0033:0x7fc3f958ebe9 [ 170.265033][ T6788] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 170.265065][ T6788] RSP: 002b:00007fc3fa323038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 170.265096][ T6788] RAX: ffffffffffffffda RBX: 00007fc3f97b5fa0 RCX: 00007fc3f958ebe9 [ 170.265117][ T6788] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 170.265136][ T6788] RBP: 00007fc3f9611e19 R08: 0000000000000000 R09: 0000000000000000 [ 170.265155][ T6788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 170.265174][ T6788] R13: 00007fc3f97b6038 R14: 00007fc3f97b5fa0 R15: 00007fff7188be48 [ 170.265217][ T6788] [ 170.480071][ C1] vkms_vblank_simulate: vblank timer overrun [ 171.162721][ T6804] __vm_enough_memory: pid: 6804, comm: syz.2.174, bytes: 4398046511104 not enough memory for the allocation [ 171.804301][ T6811] ICMPv6: process `syz.2.175' is using deprecated sysctl (syscall) net.ipv6.neigh.ipvlan1.retrans_time - use net.ipv6.neigh.ipvlan1.retrans_time_ms instead [ 171.876206][ T6811] FAULT_INJECTION: forcing a failure. [ 171.876206][ T6811] name failslab, interval 1, probability 0, space 0, times 0 [ 171.929386][ T6811] CPU: 1 UID: 0 PID: 6811 Comm: syz.2.175 Not tainted 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(full) [ 171.929420][ T6811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 171.929434][ T6811] Call Trace: [ 171.929441][ T6811] [ 171.929450][ T6811] dump_stack_lvl+0x16c/0x1f0 [ 171.929480][ T6811] should_fail_ex+0x512/0x640 [ 171.929508][ T6811] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 171.929541][ T6811] should_failslab+0xc2/0x120 [ 171.929572][ T6811] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 171.929602][ T6811] ? proc_alloc_inode+0x25/0x200 [ 171.929637][ T6811] ? __pfx_proc_alloc_inode+0x10/0x10 [ 171.929666][ T6811] proc_alloc_inode+0x25/0x200 [ 171.929695][ T6811] alloc_inode+0x61/0x240 [ 171.929730][ T6811] new_inode+0x22/0x1c0 [ 171.929761][ T6811] ? proc_lookup_de+0x201/0x360 [ 171.929798][ T6811] proc_get_inode+0x1d/0x780 [ 171.929831][ T6811] proc_lookup_de+0x236/0x360 [ 171.929879][ T6811] proc_tgid_net_lookup+0x75/0x120 [ 171.929919][ T6811] __lookup_slow+0x251/0x460 [ 171.929957][ T6811] ? __pfx___lookup_slow+0x10/0x10 [ 171.930012][ T6811] ? lookup_fast+0x156/0x610 [ 171.930039][ T6811] walk_component+0x353/0x5b0 [ 171.930066][ T6811] link_path_walk+0x627/0xe20 [ 171.930100][ T6811] path_openat+0x1b0/0x2cb0 [ 171.930126][ T6811] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.930160][ T6811] ? __pfx_path_openat+0x10/0x10 [ 171.930196][ T6811] do_filp_open+0x20b/0x470 [ 171.930224][ T6811] ? __pfx_do_filp_open+0x10/0x10 [ 171.930262][ T6811] ? __pfx_kfree_link+0x10/0x10 [ 171.930307][ T6811] ? alloc_fd+0x471/0x7d0 [ 171.930340][ T6811] do_sys_openat2+0x11b/0x1d0 [ 171.930376][ T6811] ? __pfx_do_sys_openat2+0x10/0x10 [ 171.930424][ T6811] __x64_sys_openat+0x174/0x210 [ 171.930461][ T6811] ? __pfx___x64_sys_openat+0x10/0x10 [ 171.930510][ T6811] do_syscall_64+0xcd/0x490 [ 171.930540][ T6811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.930563][ T6811] RIP: 0033:0x7fc3f958ebe9 [ 171.930582][ T6811] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 171.930604][ T6811] RSP: 002b:00007fc3fa323038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 171.930625][ T6811] RAX: ffffffffffffffda RBX: 00007fc3f97b5fa0 RCX: 00007fc3f958ebe9 [ 171.930640][ T6811] RDX: 0000000000101002 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 171.930654][ T6811] RBP: 00007fc3f9611e19 R08: 0000000000000000 R09: 0000000000000000 [ 171.930668][ T6811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 171.930682][ T6811] R13: 00007fc3f97b6038 R14: 00007fc3f97b5fa0 R15: 00007fff7188be48 [ 171.930711][ T6811] [ 172.195356][ C1] vkms_vblank_simulate: vblank timer overrun [ 172.201451][ C1] hrtimer: interrupt took 267654783 ns [ 172.301470][ C1] vkms_vblank_simulate: vblank timer overrun [ 175.057564][ T6850] __vm_enough_memory: pid: 6850, comm: syz.1.183, bytes: 4398046511104 not enough memory for the allocation [ 176.100390][ T6863] Invalid ELF header magic: != ELF [ 177.902684][ T6886] netlink: 354 bytes leftover after parsing attributes in process `syz.1.192'. [ 178.123465][ T6890] __vm_enough_memory: pid: 6890, comm: syz.1.193, bytes: 4398046511104 not enough memory for the allocation [ 180.885808][ T6928] netlink: 354 bytes leftover after parsing attributes in process `syz.0.201'. [ 180.896888][ T6930] ima: policy update failed [ 180.908915][ T30] audit: type=1802 audit(1754691463.624:4): pid=6930 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.202" res=0 errno=0 [ 181.177645][ T6939] random: crng reseeded on system resumption [ 183.102526][ T6973] netlink: 354 bytes leftover after parsing attributes in process `syz.1.212'. [ 183.191087][ T6973] FAULT_INJECTION: forcing a failure. [ 183.191087][ T6973] name failslab, interval 1, probability 0, space 0, times 0 [ 183.242119][ T6973] CPU: 1 UID: 0 PID: 6973 Comm: syz.1.212 Not tainted 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(full) [ 183.242166][ T6973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 183.242186][ T6973] Call Trace: [ 183.242197][ T6973] [ 183.242216][ T6973] dump_stack_lvl+0x16c/0x1f0 [ 183.242259][ T6973] should_fail_ex+0x512/0x640 [ 183.242301][ T6973] ? fs_reclaim_acquire+0xae/0x150 [ 183.242356][ T6973] should_failslab+0xc2/0x120 [ 183.242401][ T6973] __kmalloc_cache_noprof+0x6a/0x3e0 [ 183.242437][ T6973] ? tomoyo_open_control+0x415/0xa30 [ 183.242493][ T6973] tomoyo_open_control+0x415/0xa30 [ 183.242547][ T6973] do_dentry_open+0x97f/0x1530 [ 183.242589][ T6973] ? __pfx_tomoyo_open+0x10/0x10 [ 183.242639][ T6973] vfs_open+0x82/0x3f0 [ 183.242690][ T6973] path_openat+0x1de4/0x2cb0 [ 183.242740][ T6973] ? __pfx_path_openat+0x10/0x10 [ 183.242789][ T6973] do_filp_open+0x20b/0x470 [ 183.242829][ T6973] ? __pfx_do_filp_open+0x10/0x10 [ 183.242898][ T6973] ? alloc_fd+0x471/0x7d0 [ 183.242946][ T6973] do_sys_openat2+0x11b/0x1d0 [ 183.242999][ T6973] ? __pfx_do_sys_openat2+0x10/0x10 [ 183.243069][ T6973] __x64_sys_openat+0x174/0x210 [ 183.243119][ T6973] ? __pfx___x64_sys_openat+0x10/0x10 [ 183.243186][ T6973] do_syscall_64+0xcd/0x490 [ 183.243235][ T6973] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.243268][ T6973] RIP: 0033:0x7fcd1858ebe9 [ 183.243294][ T6973] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 183.243326][ T6973] RSP: 002b:00007fcd167f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 183.243357][ T6973] RAX: ffffffffffffffda RBX: 00007fcd187b5fa0 RCX: 00007fcd1858ebe9 [ 183.243378][ T6973] RDX: 00000000000c0802 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 183.243399][ T6973] RBP: 00007fcd18611e19 R08: 0000000000000000 R09: 0000000000000000 [ 183.243418][ T6973] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 183.243437][ T6973] R13: 00007fcd187b6038 R14: 00007fcd187b5fa0 R15: 00007fffe4fd33d8 [ 183.243478][ T6973] [ 183.678673][ T6980] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 183.725881][ T6979] ima: policy update failed [ 183.730743][ T30] audit: type=1802 audit(1754691466.454:5): pid=6979 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.213" res=0 errno=0 [ 184.058276][ T6985] __vm_enough_memory: pid: 6985, comm: syz.1.215, bytes: 4398046511104 not enough memory for the allocation [ 184.451040][ T6989] mmap: syz.1.216 (6989) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 184.922640][ T7001] random: crng reseeded on system resumption [ 186.123193][ T7017] netlink: 8 bytes leftover after parsing attributes in process `syz.1.224'. [ 186.230919][ T7021] __vm_enough_memory: pid: 7021, comm: syz.3.225, bytes: 4398046511104 not enough memory for the allocation [ 186.635073][ T7031] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 188.397510][ T7054] netlink: 354 bytes leftover after parsing attributes in process `syz.3.233'. [ 188.429948][ T7054] FAULT_INJECTION: forcing a failure. [ 188.429948][ T7054] name failslab, interval 1, probability 0, space 0, times 0 [ 188.475193][ T7054] CPU: 1 UID: 0 PID: 7054 Comm: syz.3.233 Not tainted 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(full) [ 188.475240][ T7054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 188.475261][ T7054] Call Trace: [ 188.475271][ T7054] [ 188.475284][ T7054] dump_stack_lvl+0x16c/0x1f0 [ 188.475329][ T7054] should_fail_ex+0x512/0x640 [ 188.475369][ T7054] ? fs_reclaim_acquire+0xae/0x150 [ 188.475425][ T7054] should_failslab+0xc2/0x120 [ 188.475486][ T7054] __kmalloc_cache_noprof+0x6a/0x3e0 [ 188.475523][ T7054] ? tomoyo_open_control+0x415/0xa30 [ 188.475578][ T7054] tomoyo_open_control+0x415/0xa30 [ 188.475629][ T7054] do_dentry_open+0x97f/0x1530 [ 188.475665][ T7054] ? __pfx_tomoyo_open+0x10/0x10 [ 188.475701][ T7054] vfs_open+0x82/0x3f0 [ 188.475741][ T7054] path_openat+0x1de4/0x2cb0 [ 188.475779][ T7054] ? __pfx_path_openat+0x10/0x10 [ 188.475814][ T7054] do_filp_open+0x20b/0x470 [ 188.475843][ T7054] ? __pfx_do_filp_open+0x10/0x10 [ 188.475891][ T7054] ? alloc_fd+0x471/0x7d0 [ 188.475924][ T7054] do_sys_openat2+0x11b/0x1d0 [ 188.475960][ T7054] ? __pfx_do_sys_openat2+0x10/0x10 [ 188.476007][ T7054] __x64_sys_openat+0x174/0x210 [ 188.476045][ T7054] ? __pfx___x64_sys_openat+0x10/0x10 [ 188.476095][ T7054] do_syscall_64+0xcd/0x490 [ 188.476124][ T7054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.476147][ T7054] RIP: 0033:0x7f6e2538ebe9 [ 188.476165][ T7054] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 188.476187][ T7054] RSP: 002b:00007f6e261a9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 188.476208][ T7054] RAX: ffffffffffffffda RBX: 00007f6e255b5fa0 RCX: 00007f6e2538ebe9 [ 188.476224][ T7054] RDX: 00000000000c0802 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 188.476238][ T7054] RBP: 00007f6e25411e19 R08: 0000000000000000 R09: 0000000000000000 [ 188.476252][ T7054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 188.476265][ T7054] R13: 00007f6e255b6038 R14: 00007f6e255b5fa0 R15: 00007ffce82e7dc8 [ 188.476294][ T7054] [ 191.469324][ T7098] netlink: 354 bytes leftover after parsing attributes in process `syz.1.245'. [ 191.492532][ T7098] FAULT_INJECTION: forcing a failure. [ 191.492532][ T7098] name failslab, interval 1, probability 0, space 0, times 0 [ 191.536785][ T7098] CPU: 0 UID: 0 PID: 7098 Comm: syz.1.245 Not tainted 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(full) [ 191.536837][ T7098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 191.536855][ T7098] Call Trace: [ 191.536866][ T7098] [ 191.536879][ T7098] dump_stack_lvl+0x16c/0x1f0 [ 191.536921][ T7098] should_fail_ex+0x512/0x640 [ 191.536960][ T7098] ? fs_reclaim_acquire+0xae/0x150 [ 191.537014][ T7098] ? tomoyo_open_control+0x51f/0xa30 [ 191.537060][ T7098] should_failslab+0xc2/0x120 [ 191.537104][ T7098] __kmalloc_noprof+0xd2/0x510 [ 191.537152][ T7098] tomoyo_open_control+0x51f/0xa30 [ 191.537207][ T7098] do_dentry_open+0x97f/0x1530 [ 191.537249][ T7098] ? __pfx_tomoyo_open+0x10/0x10 [ 191.537309][ T7098] vfs_open+0x82/0x3f0 [ 191.537364][ T7098] path_openat+0x1de4/0x2cb0 [ 191.537417][ T7098] ? __pfx_path_openat+0x10/0x10 [ 191.537466][ T7098] do_filp_open+0x20b/0x470 [ 191.537506][ T7098] ? __pfx_do_filp_open+0x10/0x10 [ 191.537576][ T7098] ? alloc_fd+0x471/0x7d0 [ 191.537622][ T7098] do_sys_openat2+0x11b/0x1d0 [ 191.537672][ T7098] ? __pfx_do_sys_openat2+0x10/0x10 [ 191.537740][ T7098] __x64_sys_openat+0x174/0x210 [ 191.537792][ T7098] ? __pfx___x64_sys_openat+0x10/0x10 [ 191.537862][ T7098] do_syscall_64+0xcd/0x490 [ 191.537902][ T7098] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.537936][ T7098] RIP: 0033:0x7fcd1858ebe9 [ 191.537962][ T7098] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 191.537994][ T7098] RSP: 002b:00007fcd167f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 191.538024][ T7098] RAX: ffffffffffffffda RBX: 00007fcd187b5fa0 RCX: 00007fcd1858ebe9 [ 191.538045][ T7098] RDX: 00000000000c0802 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 191.538065][ T7098] RBP: 00007fcd18611e19 R08: 0000000000000000 R09: 0000000000000000 [ 191.538084][ T7098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 191.538103][ T7098] R13: 00007fcd187b6038 R14: 00007fcd187b5fa0 R15: 00007fffe4fd33d8 [ 191.538150][ T7098] [ 192.014706][ T7104] netlink: 'syz.2.246': attribute type 1 has an invalid length. [ 194.569107][ T7154] netlink: 354 bytes leftover after parsing attributes in process `syz.1.257'. [ 194.710614][ T7154] FAULT_INJECTION: forcing a failure. [ 194.710614][ T7154] name failslab, interval 1, probability 0, space 0, times 0 [ 194.770640][ T7154] CPU: 1 UID: 0 PID: 7154 Comm: syz.1.257 Not tainted 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(full) [ 194.770684][ T7154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 194.770703][ T7154] Call Trace: [ 194.770713][ T7154] [ 194.770724][ T7154] dump_stack_lvl+0x16c/0x1f0 [ 194.770765][ T7154] should_fail_ex+0x512/0x640 [ 194.770803][ T7154] ? fs_reclaim_acquire+0xae/0x150 [ 194.770858][ T7154] ? tomoyo_open_control+0x51f/0xa30 [ 194.770905][ T7154] should_failslab+0xc2/0x120 [ 194.770948][ T7154] __kmalloc_noprof+0xd2/0x510 [ 194.770995][ T7154] tomoyo_open_control+0x51f/0xa30 [ 194.771045][ T7154] do_dentry_open+0x97f/0x1530 [ 194.771085][ T7154] ? __pfx_tomoyo_open+0x10/0x10 [ 194.771137][ T7154] vfs_open+0x82/0x3f0 [ 194.771192][ T7154] path_openat+0x1de4/0x2cb0 [ 194.771247][ T7154] ? __pfx_path_openat+0x10/0x10 [ 194.771308][ T7154] do_filp_open+0x20b/0x470 [ 194.771346][ T7154] ? __pfx_do_filp_open+0x10/0x10 [ 194.771412][ T7154] ? alloc_fd+0x471/0x7d0 [ 194.771454][ T7154] do_sys_openat2+0x11b/0x1d0 [ 194.771500][ T7154] ? __pfx_do_sys_openat2+0x10/0x10 [ 194.771562][ T7154] __x64_sys_openat+0x174/0x210 [ 194.771609][ T7154] ? __pfx___x64_sys_openat+0x10/0x10 [ 194.771672][ T7154] do_syscall_64+0xcd/0x490 [ 194.771709][ T7154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.771740][ T7154] RIP: 0033:0x7fcd1858ebe9 [ 194.771763][ T7154] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 194.771791][ T7154] RSP: 002b:00007fcd167f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 194.771819][ T7154] RAX: ffffffffffffffda RBX: 00007fcd187b5fa0 RCX: 00007fcd1858ebe9 [ 194.771838][ T7154] RDX: 00000000000c0802 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 194.771858][ T7154] RBP: 00007fcd18611e19 R08: 0000000000000000 R09: 0000000000000000 [ 194.771876][ T7154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 194.771893][ T7154] R13: 00007fcd187b6038 R14: 00007fcd187b5fa0 R15: 00007fffe4fd33d8 [ 194.771937][ T7154] [ 195.519755][ T7174] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !PjE ùrõ£Ò„yù*›"¤l-ý¤ôy–ú„ [ 197.454988][ T7207] netlink: 354 bytes leftover after parsing attributes in process `syz.2.271'. [ 197.472587][ T7207] FAULT_INJECTION: forcing a failure. [ 197.472587][ T7207] name failslab, interval 1, probability 0, space 0, times 0 [ 197.490049][ T7207] CPU: 0 UID: 0 PID: 7207 Comm: syz.2.271 Not tainted 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(full) [ 197.490093][ T7207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 197.490107][ T7207] Call Trace: [ 197.490115][ T7207] [ 197.490124][ T7207] dump_stack_lvl+0x16c/0x1f0 [ 197.490154][ T7207] should_fail_ex+0x512/0x640 [ 197.490182][ T7207] ? fs_reclaim_acquire+0xae/0x150 [ 197.490220][ T7207] should_failslab+0xc2/0x120 [ 197.490251][ T7207] __kmalloc_cache_noprof+0x6a/0x3e0 [ 197.490276][ T7207] ? tomoyo_open_control+0x415/0xa30 [ 197.490314][ T7207] tomoyo_open_control+0x415/0xa30 [ 197.490352][ T7207] do_dentry_open+0x97f/0x1530 [ 197.490382][ T7207] ? __pfx_tomoyo_open+0x10/0x10 [ 197.490416][ T7207] vfs_open+0x82/0x3f0 [ 197.490453][ T7207] path_openat+0x1de4/0x2cb0 [ 197.490491][ T7207] ? __pfx_path_openat+0x10/0x10 [ 197.490525][ T7207] do_filp_open+0x20b/0x470 [ 197.490553][ T7207] ? __pfx_do_filp_open+0x10/0x10 [ 197.490600][ T7207] ? alloc_fd+0x471/0x7d0 [ 197.490632][ T7207] do_sys_openat2+0x11b/0x1d0 [ 197.490667][ T7207] ? __pfx_do_sys_openat2+0x10/0x10 [ 197.490722][ T7207] __x64_sys_openat+0x174/0x210 [ 197.490760][ T7207] ? __pfx___x64_sys_openat+0x10/0x10 [ 197.490809][ T7207] do_syscall_64+0xcd/0x490 [ 197.490839][ T7207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.490869][ T7207] RIP: 0033:0x7fc3f958ebe9 [ 197.490887][ T7207] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 197.490909][ T7207] RSP: 002b:00007fc3fa323038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 197.490931][ T7207] RAX: ffffffffffffffda RBX: 00007fc3f97b5fa0 RCX: 00007fc3f958ebe9 [ 197.490946][ T7207] RDX: 00000000000c0802 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 197.490960][ T7207] RBP: 00007fc3f9611e19 R08: 0000000000000000 R09: 0000000000000000 [ 197.490974][ T7207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 197.490987][ T7207] R13: 00007fc3f97b6038 R14: 00007fc3f97b5fa0 R15: 00007fff7188be48 [ 197.491016][ T7207] [ 198.183058][ T7215] netlink: 8 bytes leftover after parsing attributes in process `syz.2.274'. [ 199.642712][ T7241] netlink: 354 bytes leftover after parsing attributes in process `syz.0.281'. [ 199.666673][ T7241] FAULT_INJECTION: forcing a failure. [ 199.666673][ T7241] name failslab, interval 1, probability 0, space 0, times 0 [ 199.683511][ T7241] CPU: 1 UID: 0 PID: 7241 Comm: syz.0.281 Not tainted 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(full) [ 199.683551][ T7241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 199.683568][ T7241] Call Trace: [ 199.683577][ T7241] [ 199.683586][ T7241] dump_stack_lvl+0x16c/0x1f0 [ 199.683631][ T7241] should_fail_ex+0x512/0x640 [ 199.683665][ T7241] ? fs_reclaim_acquire+0xae/0x150 [ 199.683716][ T7241] should_failslab+0xc2/0x120 [ 199.683760][ T7241] __kmalloc_cache_noprof+0x6a/0x3e0 [ 199.683793][ T7241] ? tomoyo_open_control+0x415/0xa30 [ 199.683845][ T7241] tomoyo_open_control+0x415/0xa30 [ 199.683888][ T7241] do_dentry_open+0x97f/0x1530 [ 199.683923][ T7241] ? __pfx_tomoyo_open+0x10/0x10 [ 199.683965][ T7241] vfs_open+0x82/0x3f0 [ 199.684009][ T7241] path_openat+0x1de4/0x2cb0 [ 199.684056][ T7241] ? __pfx_path_openat+0x10/0x10 [ 199.684101][ T7241] do_filp_open+0x20b/0x470 [ 199.684136][ T7241] ? __pfx_do_filp_open+0x10/0x10 [ 199.684198][ T7241] ? alloc_fd+0x471/0x7d0 [ 199.684256][ T7241] do_sys_openat2+0x11b/0x1d0 [ 199.684298][ T7241] ? __pfx_do_sys_openat2+0x10/0x10 [ 199.684354][ T7241] __x64_sys_openat+0x174/0x210 [ 199.684401][ T7241] ? __pfx___x64_sys_openat+0x10/0x10 [ 199.684468][ T7241] do_syscall_64+0xcd/0x490 [ 199.684510][ T7241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.684543][ T7241] RIP: 0033:0x7f3b4058ebe9 [ 199.684568][ T7241] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 199.684606][ T7241] RSP: 002b:00007f3b3e7f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 199.684636][ T7241] RAX: ffffffffffffffda RBX: 00007f3b407b5fa0 RCX: 00007f3b4058ebe9 [ 199.684656][ T7241] RDX: 00000000000c0802 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 199.684676][ T7241] RBP: 00007f3b40611e19 R08: 0000000000000000 R09: 0000000000000000 [ 199.684696][ T7241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 199.684715][ T7241] R13: 00007f3b407b6038 R14: 00007f3b407b5fa0 R15: 00007ffda89ed5a8 [ 199.684757][ T7241] [ 201.585788][ T7279] netlink: 354 bytes leftover after parsing attributes in process `syz.2.291'. [ 201.616089][ T7279] FAULT_INJECTION: forcing a failure. [ 201.616089][ T7279] name failslab, interval 1, probability 0, space 0, times 0 [ 201.631921][ T7279] CPU: 0 UID: 0 PID: 7279 Comm: syz.2.291 Not tainted 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(full) [ 201.631968][ T7279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 201.631986][ T7279] Call Trace: [ 201.631997][ T7279] [ 201.632008][ T7279] dump_stack_lvl+0x16c/0x1f0 [ 201.632050][ T7279] should_fail_ex+0x512/0x640 [ 201.632087][ T7279] ? fs_reclaim_acquire+0xae/0x150 [ 201.632138][ T7279] should_failslab+0xc2/0x120 [ 201.632178][ T7279] __kmalloc_cache_noprof+0x6a/0x3e0 [ 201.632211][ T7279] ? tomoyo_open_control+0x415/0xa30 [ 201.632263][ T7279] tomoyo_open_control+0x415/0xa30 [ 201.632316][ T7279] do_dentry_open+0x97f/0x1530 [ 201.632356][ T7279] ? __pfx_tomoyo_open+0x10/0x10 [ 201.632404][ T7279] vfs_open+0x82/0x3f0 [ 201.632456][ T7279] path_openat+0x1de4/0x2cb0 [ 201.632516][ T7279] ? __pfx_path_openat+0x10/0x10 [ 201.632565][ T7279] do_filp_open+0x20b/0x470 [ 201.632604][ T7279] ? __pfx_do_filp_open+0x10/0x10 [ 201.632672][ T7279] ? alloc_fd+0x471/0x7d0 [ 201.632717][ T7279] do_sys_openat2+0x11b/0x1d0 [ 201.632768][ T7279] ? __pfx_do_sys_openat2+0x10/0x10 [ 201.632833][ T7279] __x64_sys_openat+0x174/0x210 [ 201.632884][ T7279] ? __pfx___x64_sys_openat+0x10/0x10 [ 201.632949][ T7279] do_syscall_64+0xcd/0x490 [ 201.632989][ T7279] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.633021][ T7279] RIP: 0033:0x7fc3f958ebe9 [ 201.633046][ T7279] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 201.633077][ T7279] RSP: 002b:00007fc3fa323038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 201.633108][ T7279] RAX: ffffffffffffffda RBX: 00007fc3f97b5fa0 RCX: 00007fc3f958ebe9 [ 201.633129][ T7279] RDX: 00000000000c0802 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 201.633150][ T7279] RBP: 00007fc3f9611e19 R08: 0000000000000000 R09: 0000000000000000 [ 201.633169][ T7279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 201.633187][ T7279] R13: 00007fc3f97b6038 R14: 00007fc3f97b5fa0 R15: 00007fff7188be48 [ 201.633230][ T7279] [ 202.523391][ T7294] netlink: 8 bytes leftover after parsing attributes in process `syz.3.295'. [ 204.861391][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 204.867991][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 208.277186][ T7381] FAULT_INJECTION: forcing a failure. [ 208.277186][ T7381] name failslab, interval 1, probability 0, space 0, times 0 [ 208.291242][ T7381] CPU: 1 UID: 0 PID: 7381 Comm: syz.3.314 Not tainted 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(full) [ 208.291288][ T7381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 208.291307][ T7381] Call Trace: [ 208.291319][ T7381] [ 208.291331][ T7381] dump_stack_lvl+0x16c/0x1f0 [ 208.291373][ T7381] should_fail_ex+0x512/0x640 [ 208.291412][ T7381] ? fs_reclaim_acquire+0xae/0x150 [ 208.291465][ T7381] should_failslab+0xc2/0x120 [ 208.291508][ T7381] __kmalloc_cache_noprof+0x6a/0x3e0 [ 208.291544][ T7381] ? tomoyo_open_control+0x415/0xa30 [ 208.291599][ T7381] tomoyo_open_control+0x415/0xa30 [ 208.291655][ T7381] do_dentry_open+0x97f/0x1530 [ 208.291696][ T7381] ? __pfx_tomoyo_open+0x10/0x10 [ 208.291746][ T7381] vfs_open+0x82/0x3f0 [ 208.291801][ T7381] path_openat+0x1de4/0x2cb0 [ 208.291854][ T7381] ? __pfx_path_openat+0x10/0x10 [ 208.291904][ T7381] do_filp_open+0x20b/0x470 [ 208.291943][ T7381] ? __pfx_do_filp_open+0x10/0x10 [ 208.292014][ T7381] ? alloc_fd+0x471/0x7d0 [ 208.292062][ T7381] do_sys_openat2+0x11b/0x1d0 [ 208.292111][ T7381] ? __pfx_do_sys_openat2+0x10/0x10 [ 208.292177][ T7381] __x64_sys_openat+0x174/0x210 [ 208.292238][ T7381] ? __pfx___x64_sys_openat+0x10/0x10 [ 208.292309][ T7381] do_syscall_64+0xcd/0x490 [ 208.292350][ T7381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.292383][ T7381] RIP: 0033:0x7f6e2538ebe9 [ 208.292409][ T7381] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 208.292440][ T7381] RSP: 002b:00007f6e261a9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 208.292471][ T7381] RAX: ffffffffffffffda RBX: 00007f6e255b5fa0 RCX: 00007f6e2538ebe9 [ 208.292493][ T7381] RDX: 00000000000c0802 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 208.292513][ T7381] RBP: 00007f6e25411e19 R08: 0000000000000000 R09: 0000000000000000 [ 208.292533][ T7381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 208.292552][ T7381] R13: 00007f6e255b6038 R14: 00007f6e255b5fa0 R15: 00007ffce82e7dc8 [ 208.292593][ T7381] [ 208.501728][ C1] vkms_vblank_simulate: vblank timer overrun [ 208.547782][ T7379] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 208.765154][ T7355] ima: policy update failed [ 208.806501][ T30] audit: type=1802 audit(1754691491.494:6): pid=7355 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.308" res=0 errno=0 syzkaller syzkaller login: /[ 216.878762][ T7511] FAULT_INJECTION: forcing a failure. [ 216.878762][ T7511] name failslab, interval 1, probability 0, space 0, times 0 [ 216.933237][ T7511] CPU: 1 UID: 0 PID: 7511 Comm: syz.3.344 Not tainted 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(full) [ 216.933279][ T7511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 216.933306][ T7511] Call Trace: [ 216.933316][ T7511] [ 216.933328][ T7511] dump_stack_lvl+0x16c/0x1f0 [ 216.933372][ T7511] should_fail_ex+0x512/0x640 [ 216.933412][ T7511] ? fs_reclaim_acquire+0xae/0x150 [ 216.933465][ T7511] should_failslab+0xc2/0x120 [ 216.933509][ T7511] __kmalloc_cache_noprof+0x6a/0x3e0 [ 216.933542][ T7511] ? tomoyo_open_control+0x415/0xa30 [ 216.933594][ T7511] tomoyo_open_control+0x415/0xa30 [ 216.933645][ T7511] do_dentry_open+0x97f/0x1530 [ 216.933684][ T7511] ? __pfx_tomoyo_open+0x10/0x10 [ 216.933730][ T7511] vfs_open+0x82/0x3f0 [ 216.933782][ T7511] path_openat+0x1de4/0x2cb0 [ 216.933836][ T7511] ? __pfx_path_openat+0x10/0x10 [ 216.933885][ T7511] do_filp_open+0x20b/0x470 [ 216.933922][ T7511] ? __pfx_do_filp_open+0x10/0x10 [ 216.933987][ T7511] ? alloc_fd+0x471/0x7d0 [ 216.934031][ T7511] do_sys_openat2+0x11b/0x1d0 [ 216.934077][ T7511] ? __pfx_do_sys_openat2+0x10/0x10 [ 216.934140][ T7511] __x64_sys_openat+0x174/0x210 [ 216.934189][ T7511] ? __pfx___x64_sys_openat+0x10/0x10 [ 216.934253][ T7511] do_syscall_64+0xcd/0x490 [ 216.934305][ T7511] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.934337][ T7511] RIP: 0033:0x7f6e2538ebe9 [ 216.934362][ T7511] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 216.934393][ T7511] RSP: 002b:00007f6e261a9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 216.934422][ T7511] RAX: ffffffffffffffda RBX: 00007f6e255b5fa0 RCX: 00007f6e2538ebe9 [ 216.934444][ T7511] RDX: 00000000000c0802 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 216.934464][ T7511] RBP: 00007f6e25411e19 R08: 0000000000000000 R09: 0000000000000000 [ 216.934483][ T7511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 216.934500][ T7511] R13: 00007f6e255b6038 R14: 00007f6e255b5fa0 R15: 00007ffce82e7dc8 [ 216.934540][ T7511] [ 218.386668][ T7519] netlink: 28 bytes leftover after parsing attributes in process `syz.3.345'. [ 218.396227][ T7519] bridge_slave_0: left allmulticast mode [ 218.401924][ T7519] bridge_slave_0: left promiscuous mode [ 218.413148][ T7519] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.322334][ T7567] FAULT_INJECTION: forcing a failure. [ 222.322334][ T7567] name failslab, interval 1, probability 0, space 0, times 0 [ 222.343339][ T7567] CPU: 0 UID: 0 PID: 7567 Comm: syz.2.353 Not tainted 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(full) [ 222.343382][ T7567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 222.343403][ T7567] Call Trace: [ 222.343414][ T7567] [ 222.343426][ T7567] dump_stack_lvl+0x16c/0x1f0 [ 222.343469][ T7567] should_fail_ex+0x512/0x640 [ 222.343511][ T7567] ? fs_reclaim_acquire+0xae/0x150 [ 222.343564][ T7567] ? tomoyo_open_control+0x51f/0xa30 [ 222.343612][ T7567] should_failslab+0xc2/0x120 [ 222.343667][ T7567] __kmalloc_noprof+0xd2/0x510 [ 222.343718][ T7567] tomoyo_open_control+0x51f/0xa30 [ 222.343780][ T7567] do_dentry_open+0x97f/0x1530 [ 222.343825][ T7567] ? __pfx_tomoyo_open+0x10/0x10 [ 222.343875][ T7567] vfs_open+0x82/0x3f0 [ 222.343939][ T7567] path_openat+0x1de4/0x2cb0 [ 222.343994][ T7567] ? __pfx_path_openat+0x10/0x10 [ 222.344044][ T7567] do_filp_open+0x20b/0x470 [ 222.344086][ T7567] ? __pfx_do_filp_open+0x10/0x10 [ 222.344153][ T7567] ? alloc_fd+0x471/0x7d0 [ 222.344199][ T7567] do_sys_openat2+0x11b/0x1d0 [ 222.344257][ T7567] ? __pfx_do_sys_openat2+0x10/0x10 [ 222.344324][ T7567] __x64_sys_openat+0x174/0x210 [ 222.344377][ T7567] ? __pfx___x64_sys_openat+0x10/0x10 [ 222.344445][ T7567] do_syscall_64+0xcd/0x490 [ 222.344486][ T7567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.344519][ T7567] RIP: 0033:0x7fc3f958ebe9 [ 222.344544][ T7567] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 222.344576][ T7567] RSP: 002b:00007fc3fa323038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 222.344607][ T7567] RAX: ffffffffffffffda RBX: 00007fc3f97b5fa0 RCX: 00007fc3f958ebe9 [ 222.344628][ T7567] RDX: 00000000000c0802 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 222.344650][ T7567] RBP: 00007fc3f9611e19 R08: 0000000000000000 R09: 0000000000000000 [ 222.344679][ T7567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 222.344699][ T7567] R13: 00007fc3f97b6038 R14: 00007fc3f97b5fa0 R15: 00007fff7188be48 [ 222.344740][ T7567] [ 223.076644][ T5183] Bluetooth: hci3: unexpected event 0x1d length: 10 > 5 [ 223.920842][ T7590] FAULT_INJECTION: forcing a failure. [ 223.920842][ T7590] name failslab, interval 1, probability 0, space 0, times 0 [ 223.966782][ T7590] CPU: 0 UID: 0 PID: 7590 Comm: syz.1.360 Not tainted 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(full) [ 223.966829][ T7590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 223.966848][ T7590] Call Trace: [ 223.966859][ T7590] [ 223.966872][ T7590] dump_stack_lvl+0x16c/0x1f0 [ 223.966915][ T7590] should_fail_ex+0x512/0x640 [ 223.966953][ T7590] ? fs_reclaim_acquire+0xae/0x150 [ 223.967015][ T7590] should_failslab+0xc2/0x120 [ 223.967063][ T7590] __kmalloc_cache_noprof+0x6a/0x3e0 [ 223.967099][ T7590] ? tomoyo_open_control+0x415/0xa30 [ 223.967154][ T7590] tomoyo_open_control+0x415/0xa30 [ 223.967208][ T7590] do_dentry_open+0x97f/0x1530 [ 223.967249][ T7590] ? __pfx_tomoyo_open+0x10/0x10 [ 223.967299][ T7590] vfs_open+0x82/0x3f0 [ 223.967352][ T7590] path_openat+0x1de4/0x2cb0 [ 223.967404][ T7590] ? __pfx_path_openat+0x10/0x10 [ 223.967455][ T7590] do_filp_open+0x20b/0x470 [ 223.967495][ T7590] ? __pfx_do_filp_open+0x10/0x10 [ 223.967564][ T7590] ? alloc_fd+0x471/0x7d0 [ 223.967608][ T7590] do_sys_openat2+0x11b/0x1d0 [ 223.967656][ T7590] ? __pfx_do_sys_openat2+0x10/0x10 [ 223.967722][ T7590] __x64_sys_openat+0x174/0x210 [ 223.967775][ T7590] ? __pfx___x64_sys_openat+0x10/0x10 [ 223.967844][ T7590] do_syscall_64+0xcd/0x490 [ 223.967885][ T7590] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.967916][ T7590] RIP: 0033:0x7fcd1858ebe9 [ 223.967942][ T7590] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 223.967974][ T7590] RSP: 002b:00007fcd167f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 223.968010][ T7590] RAX: ffffffffffffffda RBX: 00007fcd187b5fa0 RCX: 00007fcd1858ebe9 [ 223.968031][ T7590] RDX: 00000000000c0802 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 223.968051][ T7590] RBP: 00007fcd18611e19 R08: 0000000000000000 R09: 0000000000000000 [ 223.968070][ T7590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 223.968088][ T7590] R13: 00007fcd187b6038 R14: 00007fcd187b5fa0 R15: 00007fffe4fd33d8 [ 223.968130][ T7590] [ 225.284111][ T30] audit: type=1800 audit(1754691508.004:7): pid=7607 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.362" name="dbroot" dev="configfs" ino=17665 res=0 errno=0 [ 226.467087][ T7622] FAULT_INJECTION: forcing a failure. [ 226.467087][ T7622] name failslab, interval 1, probability 0, space 0, times 0 [ 226.482633][ T7622] CPU: 1 UID: 0 PID: 7622 Comm: syz.1.365 Not tainted 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(full) [ 226.482689][ T7622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 226.482707][ T7622] Call Trace: [ 226.482717][ T7622] [ 226.482728][ T7622] dump_stack_lvl+0x16c/0x1f0 [ 226.482773][ T7622] should_fail_ex+0x512/0x640 [ 226.482812][ T7622] ? fs_reclaim_acquire+0xae/0x150 [ 226.482866][ T7622] ? tomoyo_open_control+0x51f/0xa30 [ 226.482912][ T7622] should_failslab+0xc2/0x120 [ 226.482956][ T7622] __kmalloc_noprof+0xd2/0x510 [ 226.483006][ T7622] tomoyo_open_control+0x51f/0xa30 [ 226.483061][ T7622] do_dentry_open+0x97f/0x1530 [ 226.483104][ T7622] ? __pfx_tomoyo_open+0x10/0x10 [ 226.483154][ T7622] vfs_open+0x82/0x3f0 [ 226.483209][ T7622] path_openat+0x1de4/0x2cb0 [ 226.483263][ T7622] ? __pfx_path_openat+0x10/0x10 [ 226.483313][ T7622] do_filp_open+0x20b/0x470 [ 226.483353][ T7622] ? __pfx_do_filp_open+0x10/0x10 [ 226.483422][ T7622] ? alloc_fd+0x471/0x7d0 [ 226.483469][ T7622] do_sys_openat2+0x11b/0x1d0 [ 226.483529][ T7622] ? __pfx_do_sys_openat2+0x10/0x10 [ 226.483598][ T7622] __x64_sys_openat+0x174/0x210 [ 226.483651][ T7622] ? __pfx___x64_sys_openat+0x10/0x10 [ 226.483721][ T7622] do_syscall_64+0xcd/0x490 [ 226.483762][ T7622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.483800][ T7622] RIP: 0033:0x7fcd1858ebe9 [ 226.483824][ T7622] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 226.483854][ T7622] RSP: 002b:00007fcd167f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 226.483884][ T7622] RAX: ffffffffffffffda RBX: 00007fcd187b5fa0 RCX: 00007fcd1858ebe9 [ 226.483903][ T7622] RDX: 00000000000c0802 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 226.483923][ T7622] RBP: 00007fcd18611e19 R08: 0000000000000000 R09: 0000000000000000 [ 226.483943][ T7622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 226.483962][ T7622] R13: 00007fcd187b6038 R14: 00007fcd187b5fa0 R15: 00007fffe4fd33d8 [ 226.484002][ T7622] [ 227.419149][ T7611] Bluetooth: hci1: command 0x0406 tx timeout [ 227.433979][ T7611] Bluetooth: hci2: command 0x0406 tx timeout [ 227.441153][ T7611] Bluetooth: hci0: command 0x0406 tx timeout [ 227.447329][ T7611] Bluetooth: hci3: command 0x0406 tx timeout [ 230.155582][ T7669] FAULT_INJECTION: forcing a failure. [ 230.155582][ T7669] name failslab, interval 1, probability 0, space 0, times 0 [ 230.168575][ T7669] CPU: 1 UID: 0 PID: 7669 Comm: syz.1.376 Not tainted 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(full) [ 230.168619][ T7669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 230.168638][ T7669] Call Trace: [ 230.168649][ T7669] [ 230.168661][ T7669] dump_stack_lvl+0x16c/0x1f0 [ 230.168703][ T7669] should_fail_ex+0x512/0x640 [ 230.168743][ T7669] ? fs_reclaim_acquire+0xae/0x150 [ 230.168796][ T7669] ? tomoyo_open_control+0x51f/0xa30 [ 230.168842][ T7669] should_failslab+0xc2/0x120 [ 230.168885][ T7669] __kmalloc_noprof+0xd2/0x510 [ 230.168930][ T7669] tomoyo_open_control+0x51f/0xa30 [ 230.168997][ T7669] do_dentry_open+0x97f/0x1530 [ 230.169039][ T7669] ? __pfx_tomoyo_open+0x10/0x10 [ 230.169082][ T7669] vfs_open+0x82/0x3f0 [ 230.169121][ T7669] path_openat+0x1de4/0x2cb0 [ 230.169158][ T7669] ? __pfx_path_openat+0x10/0x10 [ 230.169194][ T7669] do_filp_open+0x20b/0x470 [ 230.169222][ T7669] ? __pfx_do_filp_open+0x10/0x10 [ 230.169278][ T7669] ? alloc_fd+0x471/0x7d0 [ 230.169312][ T7669] do_sys_openat2+0x11b/0x1d0 [ 230.169349][ T7669] ? __pfx_do_sys_openat2+0x10/0x10 [ 230.169397][ T7669] __x64_sys_openat+0x174/0x210 [ 230.169435][ T7669] ? __pfx___x64_sys_openat+0x10/0x10 [ 230.169484][ T7669] do_syscall_64+0xcd/0x490 [ 230.169513][ T7669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.169537][ T7669] RIP: 0033:0x7fcd1858ebe9 [ 230.169555][ T7669] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 230.169577][ T7669] RSP: 002b:00007fcd167f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 230.169598][ T7669] RAX: ffffffffffffffda RBX: 00007fcd187b5fa0 RCX: 00007fcd1858ebe9 [ 230.169613][ T7669] RDX: 00000000000c0802 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 230.169628][ T7669] RBP: 00007fcd18611e19 R08: 0000000000000000 R09: 0000000000000000 [ 230.169641][ T7669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 230.169655][ T7669] R13: 00007fcd187b6038 R14: 00007fcd187b5fa0 R15: 00007fffe4fd33d8 [ 230.169683][ T7669] [ 230.648953][ T7674] netlink: 28 bytes leftover after parsing attributes in process `syz.0.377'. [ 230.660756][ T7674] bridge_slave_1: left allmulticast mode [ 230.674404][ T7674] bridge_slave_1: left promiscuous mode [ 230.697363][ T7674] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.002725][ T7674] bridge_slave_0: left allmulticast mode [ 231.013990][ T7674] bridge_slave_0: left promiscuous mode [ 231.019908][ T7674] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.609554][ T30] audit: type=1800 audit(1754691514.294:8): pid=7688 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.378" name="dbroot" dev="configfs" ino=16876 res=0 errno=0 [ 233.035166][ T7702] FAULT_INJECTION: forcing a failure. [ 233.035166][ T7702] name failslab, interval 1, probability 0, space 0, times 0 [ 233.087924][ T7702] CPU: 1 UID: 0 PID: 7702 Comm: syz.2.382 Not tainted 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(full) [ 233.087969][ T7702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 233.087983][ T7702] Call Trace: [ 233.087991][ T7702] [ 233.087999][ T7702] dump_stack_lvl+0x16c/0x1f0 [ 233.088032][ T7702] should_fail_ex+0x512/0x640 [ 233.088059][ T7702] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 233.088091][ T7702] should_failslab+0xc2/0x120 [ 233.088122][ T7702] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 233.088150][ T7702] ? find_held_lock+0x2b/0x80 [ 233.088172][ T7702] ? ptlock_alloc+0x1f/0x70 [ 233.088199][ T7702] ptlock_alloc+0x1f/0x70 [ 233.088221][ T7702] pte_alloc_one+0x82/0x3a0 [ 233.088246][ T7702] do_pte_missing+0x1afc/0x3ba0 [ 233.088278][ T7702] ? mtree_range_walk+0x718/0xc00 [ 233.088306][ T7702] __handle_mm_fault+0x152a/0x2a50 [ 233.088334][ T7702] ? mt_find+0x3ef/0xa30 [ 233.088363][ T7702] ? __pfx___handle_mm_fault+0x10/0x10 [ 233.088385][ T7702] ? __pfx_mt_find+0x10/0x10 [ 233.088429][ T7702] ? find_vma+0xbf/0x140 [ 233.088460][ T7702] ? __pfx_find_vma+0x10/0x10 [ 233.088494][ T7702] handle_mm_fault+0x589/0xd10 [ 233.088531][ T7702] ? __bpf_trace_exceptions+0x1/0x40 [ 233.088568][ T7702] do_user_addr_fault+0x7a6/0x1370 [ 233.088607][ T7702] ? rcu_is_watching+0x12/0xc0 [ 233.088635][ T7702] exc_page_fault+0x5c/0xb0 [ 233.088659][ T7702] asm_exc_page_fault+0x26/0x30 [ 233.088681][ T7702] RIP: 0010:rep_movs_alternative+0xf/0x90 [ 233.088717][ T7702] Code: c4 10 e9 14 23 04 00 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 66 [ 233.088738][ T7702] RSP: 0018:ffffc9000e5afd70 EFLAGS: 00050202 [ 233.088755][ T7702] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000004 [ 233.088769][ T7702] RDX: fffff52001cb5fbc RSI: 0000000000000000 RDI: ffffc9000e5afde0 [ 233.088783][ T7702] RBP: 0000000000000004 R08: 0000000000000001 R09: fffff52001cb5fbc [ 233.088796][ T7702] R10: 0000000000000003 R11: 0000000000000000 R12: 0000000000000000 [ 233.088809][ T7702] R13: ffffc9000e5afde0 R14: 0000000000000000 R15: 0000000000000000 [ 233.088837][ T7702] _copy_from_user+0x98/0xd0 [ 233.088870][ T7702] do_sock_getsockopt+0x3ca/0x440 [ 233.088904][ T7702] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 233.088933][ T7702] ? __fget_files+0x204/0x3c0 [ 233.088972][ T7702] __sys_getsockopt+0x123/0x1b0 [ 233.089002][ T7702] __x64_sys_getsockopt+0xbd/0x160 [ 233.089025][ T7702] ? do_syscall_64+0x91/0x490 [ 233.089049][ T7702] ? lockdep_hardirqs_on+0x7c/0x110 [ 233.089073][ T7702] do_syscall_64+0xcd/0x490 [ 233.089100][ T7702] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.089122][ T7702] RIP: 0033:0x7fc3f958ebe9 [ 233.089139][ T7702] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 233.089160][ T7702] RSP: 002b:00007fc3f77d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 233.089179][ T7702] RAX: ffffffffffffffda RBX: 00007fc3f97b6180 RCX: 00007fc3f958ebe9 [ 233.089193][ T7702] RDX: 0000000000000036 RSI: 0000000000000029 RDI: 0000000000000008 [ 233.089207][ T7702] RBP: 00007fc3f77d5090 R08: 0000000000000000 R09: 0000000000000000 [ 233.089220][ T7702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 233.089233][ T7702] R13: 00007fc3f97b6218 R14: 00007fc3f97b6180 R15: 00007fff7188be48 [ 233.089266][ T7702] [ 235.645298][ T7727] __vm_enough_memory: pid: 7727, comm: syz.0.388, bytes: 4398046511104 not enough memory for the allocation [ 239.572102][ T7773] __vm_enough_memory: pid: 7773, comm: syz.1.399, bytes: 4398046511104 not enough memory for the allocation [ 242.683783][ T7810] FAULT_INJECTION: forcing a failure. [ 242.683783][ T7810] name failslab, interval 1, probability 0, space 0, times 0 [ 242.706722][ T7810] CPU: 1 UID: 0 PID: 7810 Comm: syz.1.406 Not tainted 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(full) [ 242.706771][ T7810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 242.706796][ T7810] Call Trace: [ 242.706807][ T7810] [ 242.706819][ T7810] dump_stack_lvl+0x16c/0x1f0 [ 242.706863][ T7810] should_fail_ex+0x512/0x640 [ 242.706902][ T7810] ? fs_reclaim_acquire+0xae/0x150 [ 242.706956][ T7810] should_failslab+0xc2/0x120 [ 242.706999][ T7810] __kmalloc_cache_noprof+0x6a/0x3e0 [ 242.707036][ T7810] ? tomoyo_open_control+0x415/0xa30 [ 242.707089][ T7810] tomoyo_open_control+0x415/0xa30 [ 242.707142][ T7810] do_dentry_open+0x97f/0x1530 [ 242.707182][ T7810] ? __pfx_tomoyo_open+0x10/0x10 [ 242.707229][ T7810] vfs_open+0x82/0x3f0 [ 242.707293][ T7810] path_openat+0x1de4/0x2cb0 [ 242.707344][ T7810] ? __pfx_path_openat+0x10/0x10 [ 242.707393][ T7810] do_filp_open+0x20b/0x470 [ 242.707431][ T7810] ? __pfx_do_filp_open+0x10/0x10 [ 242.707499][ T7810] ? alloc_fd+0x471/0x7d0 [ 242.707545][ T7810] do_sys_openat2+0x11b/0x1d0 [ 242.707601][ T7810] ? __pfx_do_sys_openat2+0x10/0x10 [ 242.707666][ T7810] __x64_sys_openat+0x174/0x210 [ 242.707717][ T7810] ? __pfx___x64_sys_openat+0x10/0x10 [ 242.707784][ T7810] do_syscall_64+0xcd/0x490 [ 242.707825][ T7810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.707858][ T7810] RIP: 0033:0x7fcd1858ebe9 [ 242.707884][ T7810] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 242.707915][ T7810] RSP: 002b:00007fcd167f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 242.707947][ T7810] RAX: ffffffffffffffda RBX: 00007fcd187b5fa0 RCX: 00007fcd1858ebe9 [ 242.707967][ T7810] RDX: 00000000000c0802 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 242.707988][ T7810] RBP: 00007fcd18611e19 R08: 0000000000000000 R09: 0000000000000000 [ 242.708008][ T7810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 242.708027][ T7810] R13: 00007fcd187b6038 R14: 00007fcd187b5fa0 R15: 00007fffe4fd33d8 [ 242.708069][ T7810] [ 243.189836][ T7817] __vm_enough_memory: pid: 7817, comm: syz.1.409, bytes: 4398046511104 not enough memory for the allocation [ 244.680477][ T7846] FAULT_INJECTION: forcing a failure. [ 244.680477][ T7846] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 244.711396][ T7846] CPU: 0 UID: 0 PID: 7846 Comm: syz.1.414 Not tainted 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(full) [ 244.711439][ T7846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 244.711453][ T7846] Call Trace: [ 244.711461][ T7846] [ 244.711469][ T7846] dump_stack_lvl+0x16c/0x1f0 [ 244.711499][ T7846] should_fail_ex+0x512/0x640 [ 244.711531][ T7846] _copy_from_user+0x2e/0xd0 [ 244.711564][ T7846] copy_from_sockptr_offset.constprop.0+0x153/0x1a0 [ 244.711603][ T7846] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 244.711641][ T7846] ? mtree_range_walk+0x718/0xc00 [ 244.711669][ T7846] do_ipv6_getsockopt+0x217/0x2ec0 [ 244.711711][ T7846] ? __pfx_do_ipv6_getsockopt+0x10/0x10 [ 244.711753][ T7846] ? css_rstat_updated+0x1c2/0x510 [ 244.711777][ T7846] ? __pfx_css_rstat_updated+0x10/0x10 [ 244.711807][ T7846] ? find_held_lock+0x2b/0x80 [ 244.711831][ T7846] ? __up_read+0x1f8/0x750 [ 244.711865][ T7846] ? __pfx___up_read+0x10/0x10 [ 244.711898][ T7846] ? do_user_addr_fault+0x829/0x1370 [ 244.711942][ T7846] ? ipv6_getsockopt+0x126/0x280 [ 244.711977][ T7846] ipv6_getsockopt+0x126/0x280 [ 244.712015][ T7846] ? __pfx_ipv6_getsockopt+0x10/0x10 [ 244.712051][ T7846] ? rcu_is_watching+0x12/0xc0 [ 244.712077][ T7846] ? irqentry_exit+0x3b/0x90 [ 244.712100][ T7846] ? lockdep_hardirqs_on+0x7c/0x110 [ 244.712131][ T7846] rawv6_getsockopt+0xb2/0x4c0 [ 244.712164][ T7846] ? __pfx_rawv6_getsockopt+0x10/0x10 [ 244.712199][ T7846] ? rep_movs_alternative+0xf/0x90 [ 244.712236][ T7846] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 244.712268][ T7846] do_sock_getsockopt+0x34a/0x440 [ 244.712300][ T7846] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 244.712329][ T7846] ? __fget_files+0x204/0x3c0 [ 244.712374][ T7846] __sys_getsockopt+0x123/0x1b0 [ 244.712404][ T7846] __x64_sys_getsockopt+0xbd/0x160 [ 244.712427][ T7846] ? do_syscall_64+0x91/0x490 [ 244.712452][ T7846] ? lockdep_hardirqs_on+0x7c/0x110 [ 244.712476][ T7846] do_syscall_64+0xcd/0x490 [ 244.712503][ T7846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.712527][ T7846] RIP: 0033:0x7fcd1858ebe9 [ 244.712544][ T7846] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 244.712566][ T7846] RSP: 002b:00007fcd167b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 244.712587][ T7846] RAX: ffffffffffffffda RBX: 00007fcd187b6180 RCX: 00007fcd1858ebe9 [ 244.712602][ T7846] RDX: 0000000000000036 RSI: 0000000000000029 RDI: 0000000000000008 [ 244.712616][ T7846] RBP: 00007fcd167b4090 R08: 0000000000000000 R09: 0000000000000000 [ 244.712629][ T7846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 244.712642][ T7846] R13: 00007fcd187b6218 R14: 00007fcd187b6180 R15: 00007fffe4fd33d8 [ 244.712670][ T7846] [ 246.025209][ T7857] FAULT_INJECTION: forcing a failure. [ 246.025209][ T7857] name failslab, interval 1, probability 0, space 0, times 0 [ 246.038744][ T7857] CPU: 1 UID: 0 PID: 7857 Comm: syz.0.417 Not tainted 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(full) [ 246.038789][ T7857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 246.038808][ T7857] Call Trace: [ 246.038819][ T7857] [ 246.038831][ T7857] dump_stack_lvl+0x16c/0x1f0 [ 246.038875][ T7857] should_fail_ex+0x512/0x640 [ 246.038914][ T7857] ? fs_reclaim_acquire+0xae/0x150 [ 246.038967][ T7857] should_failslab+0xc2/0x120 [ 246.039021][ T7857] __kmalloc_cache_noprof+0x6a/0x3e0 [ 246.039057][ T7857] ? tomoyo_open_control+0x415/0xa30 [ 246.039112][ T7857] tomoyo_open_control+0x415/0xa30 [ 246.039168][ T7857] do_dentry_open+0x97f/0x1530 [ 246.039211][ T7857] ? __pfx_tomoyo_open+0x10/0x10 [ 246.039258][ T7857] vfs_open+0x82/0x3f0 [ 246.039312][ T7857] path_openat+0x1de4/0x2cb0 [ 246.039366][ T7857] ? __pfx_path_openat+0x10/0x10 [ 246.039416][ T7857] do_filp_open+0x20b/0x470 [ 246.039457][ T7857] ? __pfx_do_filp_open+0x10/0x10 [ 246.039524][ T7857] ? alloc_fd+0x471/0x7d0 [ 246.039570][ T7857] do_sys_openat2+0x11b/0x1d0 [ 246.039621][ T7857] ? __pfx_do_sys_openat2+0x10/0x10 [ 246.039686][ T7857] __x64_sys_openat+0x174/0x210 [ 246.039737][ T7857] ? __pfx___x64_sys_openat+0x10/0x10 [ 246.039807][ T7857] do_syscall_64+0xcd/0x490 [ 246.039848][ T7857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.039881][ T7857] RIP: 0033:0x7f3b4058ebe9 [ 246.039907][ T7857] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 246.039939][ T7857] RSP: 002b:00007f3b3e7f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 246.039970][ T7857] RAX: ffffffffffffffda RBX: 00007f3b407b5fa0 RCX: 00007f3b4058ebe9 [ 246.039990][ T7857] RDX: 00000000000c0802 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 246.040019][ T7857] RBP: 00007f3b40611e19 R08: 0000000000000000 R09: 0000000000000000 [ 246.040038][ T7857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 246.040056][ T7857] R13: 00007f3b407b6038 R14: 00007f3b407b5fa0 R15: 00007ffda89ed5a8 [ 246.040097][ T7857] [ 246.401435][ T7862] __vm_enough_memory: pid: 7862, comm: syz.3.419, bytes: 4398046511104 not enough memory for the allocation [ 248.946745][ T51] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 249.335651][ T7917] FAULT_INJECTION: forcing a failure. [ 249.335651][ T7917] name failslab, interval 1, probability 0, space 0, times 0 [ 249.394114][ T7917] CPU: 0 UID: 0 PID: 7917 Comm: syz.0.429 Not tainted 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(full) [ 249.394161][ T7917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 249.394181][ T7917] Call Trace: [ 249.394192][ T7917] [ 249.394205][ T7917] dump_stack_lvl+0x16c/0x1f0 [ 249.394249][ T7917] should_fail_ex+0x512/0x640 [ 249.394289][ T7917] ? fs_reclaim_acquire+0xae/0x150 [ 249.394343][ T7917] should_failslab+0xc2/0x120 [ 249.394386][ T7917] __kmalloc_cache_noprof+0x6a/0x3e0 [ 249.394421][ T7917] ? tomoyo_open_control+0x415/0xa30 [ 249.394474][ T7917] tomoyo_open_control+0x415/0xa30 [ 249.394528][ T7917] do_dentry_open+0x97f/0x1530 [ 249.394570][ T7917] ? __pfx_tomoyo_open+0x10/0x10 [ 249.394620][ T7917] vfs_open+0x82/0x3f0 [ 249.394673][ T7917] path_openat+0x1de4/0x2cb0 [ 249.394726][ T7917] ? __pfx_path_openat+0x10/0x10 [ 249.394775][ T7917] do_filp_open+0x20b/0x470 [ 249.394815][ T7917] ? __pfx_do_filp_open+0x10/0x10 [ 249.394883][ T7917] ? alloc_fd+0x471/0x7d0 [ 249.394943][ T7917] do_sys_openat2+0x11b/0x1d0 [ 249.394992][ T7917] ? __pfx_do_sys_openat2+0x10/0x10 [ 249.395067][ T7917] __x64_sys_openat+0x174/0x210 [ 249.395119][ T7917] ? __pfx___x64_sys_openat+0x10/0x10 [ 249.395189][ T7917] do_syscall_64+0xcd/0x490 [ 249.395231][ T7917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.395264][ T7917] RIP: 0033:0x7f3b4058ebe9 [ 249.395290][ T7917] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 249.395322][ T7917] RSP: 002b:00007f3b3e7f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 249.395354][ T7917] RAX: ffffffffffffffda RBX: 00007f3b407b5fa0 RCX: 00007f3b4058ebe9 [ 249.395376][ T7917] RDX: 00000000000c0802 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 249.395396][ T7917] RBP: 00007f3b40611e19 R08: 0000000000000000 R09: 0000000000000000 [ 249.395414][ T7917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 249.395433][ T7917] R13: 00007f3b407b6038 R14: 00007f3b407b5fa0 R15: 00007ffda89ed5a8 [ 249.395474][ T7917] [ 249.741195][ T7920] __vm_enough_memory: pid: 7920, comm: syz.3.430, bytes: 4398046511104 not enough memory for the allocation [ 252.243707][ T7964] netlink: 201 bytes leftover after parsing attributes in process `syz.1.439'. [ 252.839085][ T7973] FAULT_INJECTION: forcing a failure. [ 252.839085][ T7973] name failslab, interval 1, probability 0, space 0, times 0 [ 252.870597][ T7976] __vm_enough_memory: pid: 7976, comm: syz.0.443, bytes: 4398046511104 not enough memory for the allocation [ 252.892816][ T7973] CPU: 0 UID: 0 PID: 7973 Comm: syz.3.441 Not tainted 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(full) [ 252.892862][ T7973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 252.892880][ T7973] Call Trace: [ 252.892890][ T7973] [ 252.892902][ T7973] dump_stack_lvl+0x16c/0x1f0 [ 252.892945][ T7973] should_fail_ex+0x512/0x640 [ 252.892984][ T7973] ? fs_reclaim_acquire+0xae/0x150 [ 252.893031][ T7973] ? tomoyo_open_control+0x51f/0xa30 [ 252.893071][ T7973] should_failslab+0xc2/0x120 [ 252.893109][ T7973] __kmalloc_noprof+0xd2/0x510 [ 252.893150][ T7973] tomoyo_open_control+0x51f/0xa30 [ 252.893195][ T7973] do_dentry_open+0x97f/0x1530 [ 252.893230][ T7973] ? __pfx_tomoyo_open+0x10/0x10 [ 252.893271][ T7973] vfs_open+0x82/0x3f0 [ 252.893315][ T7973] path_openat+0x1de4/0x2cb0 [ 252.893358][ T7973] ? __pfx_path_openat+0x10/0x10 [ 252.893399][ T7973] do_filp_open+0x20b/0x470 [ 252.893433][ T7973] ? __pfx_do_filp_open+0x10/0x10 [ 252.893489][ T7973] ? alloc_fd+0x471/0x7d0 [ 252.893529][ T7973] do_sys_openat2+0x11b/0x1d0 [ 252.893570][ T7973] ? __pfx_do_sys_openat2+0x10/0x10 [ 252.893625][ T7973] __x64_sys_openat+0x174/0x210 [ 252.893668][ T7973] ? __pfx___x64_sys_openat+0x10/0x10 [ 252.893724][ T7973] do_syscall_64+0xcd/0x490 [ 252.893758][ T7973] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.893866][ T7973] RIP: 0033:0x7f6e2538ebe9 [ 252.893893][ T7973] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 252.893924][ T7973] RSP: 002b:00007f6e261a9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 252.893953][ T7973] RAX: ffffffffffffffda RBX: 00007f6e255b5fa0 RCX: 00007f6e2538ebe9 [ 252.893972][ T7973] RDX: 00000000000c0802 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 252.893992][ T7973] RBP: 00007f6e25411e19 R08: 0000000000000000 R09: 0000000000000000 [ 252.894009][ T7973] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 252.894027][ T7973] R13: 00007f6e255b6038 R14: 00007f6e255b5fa0 R15: 00007ffce82e7dc8 [ 252.894068][ T7973] [ 256.984453][ T8025] __vm_enough_memory: pid: 8025, comm: syz.3.452, bytes: 4398046511104 not enough memory for the allocation [ 257.377186][ T8029] FAULT_INJECTION: forcing a failure. [ 257.377186][ T8029] name failslab, interval 1, probability 0, space 0, times 0 [ 257.377235][ T8029] CPU: 1 UID: 0 PID: 8029 Comm: syz.1.453 Not tainted 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(full) [ 257.377276][ T8029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 257.377295][ T8029] Call Trace: [ 257.377306][ T8029] [ 257.377318][ T8029] dump_stack_lvl+0x16c/0x1f0 [ 257.377371][ T8029] should_fail_ex+0x512/0x640 [ 257.377411][ T8029] ? fs_reclaim_acquire+0xae/0x150 [ 257.377465][ T8029] should_failslab+0xc2/0x120 [ 257.377509][ T8029] __kmalloc_cache_noprof+0x6a/0x3e0 [ 257.377545][ T8029] ? tomoyo_open_control+0x415/0xa30 [ 257.377600][ T8029] tomoyo_open_control+0x415/0xa30 [ 257.377654][ T8029] do_dentry_open+0x97f/0x1530 [ 257.377696][ T8029] ? __pfx_tomoyo_open+0x10/0x10 [ 257.377747][ T8029] vfs_open+0x82/0x3f0 [ 257.377801][ T8029] path_openat+0x1de4/0x2cb0 [ 257.377854][ T8029] ? __pfx_path_openat+0x10/0x10 [ 257.377906][ T8029] do_filp_open+0x20b/0x470 [ 257.377946][ T8029] ? __pfx_do_filp_open+0x10/0x10 [ 257.378015][ T8029] ? alloc_fd+0x471/0x7d0 [ 257.378063][ T8029] do_sys_openat2+0x11b/0x1d0 [ 257.378114][ T8029] ? __pfx_do_sys_openat2+0x10/0x10 [ 257.378182][ T8029] __x64_sys_openat+0x174/0x210 [ 257.378234][ T8029] ? __pfx___x64_sys_openat+0x10/0x10 [ 257.378304][ T8029] do_syscall_64+0xcd/0x490 [ 257.378368][ T8029] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.378402][ T8029] RIP: 0033:0x7fcd1858ebe9 [ 257.378429][ T8029] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 257.378461][ T8029] RSP: 002b:00007fcd167f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 257.378493][ T8029] RAX: ffffffffffffffda RBX: 00007fcd187b5fa0 RCX: 00007fcd1858ebe9 [ 257.378514][ T8029] RDX: 00000000000c0802 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 257.378534][ T8029] RBP: 00007fcd18611e19 R08: 0000000000000000 R09: 0000000000000000 [ 257.378553][ T8029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 257.378571][ T8029] R13: 00007fcd187b6038 R14: 00007fcd187b5fa0 R15: 00007fffe4fd33d8 [ 257.378612][ T8029] [ 261.322160][ T8083] bond0: option primary_reselect: invalid value (alwa) [ 261.610866][ T8095] netlink: 342 bytes leftover after parsing attributes in process `syz.0.466'. [ 263.705694][ T8132] __vm_enough_memory: pid: 8132, comm: syz.1.475, bytes: 4398046511104 not enough memory for the allocation [ 263.749528][ T8128] FAULT_INJECTION: forcing a failure. [ 263.749528][ T8128] name failslab, interval 1, probability 0, space 0, times 0 [ 263.854005][ T8128] CPU: 1 UID: 0 PID: 8128 Comm: syz.2.472 Not tainted 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(full) [ 263.854050][ T8128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 263.854068][ T8128] Call Trace: [ 263.854079][ T8128] [ 263.854090][ T8128] dump_stack_lvl+0x16c/0x1f0 [ 263.854133][ T8128] should_fail_ex+0x512/0x640 [ 263.854173][ T8128] ? fs_reclaim_acquire+0xae/0x150 [ 263.854228][ T8128] ? tomoyo_open_control+0x51f/0xa30 [ 263.854274][ T8128] should_failslab+0xc2/0x120 [ 263.854311][ T8128] __kmalloc_noprof+0xd2/0x510 [ 263.854352][ T8128] tomoyo_open_control+0x51f/0xa30 [ 263.854397][ T8128] do_dentry_open+0x97f/0x1530 [ 263.854433][ T8128] ? __pfx_tomoyo_open+0x10/0x10 [ 263.854475][ T8128] vfs_open+0x82/0x3f0 [ 263.854520][ T8128] path_openat+0x1de4/0x2cb0 [ 263.854564][ T8128] ? __pfx_path_openat+0x10/0x10 [ 263.854617][ T8128] do_filp_open+0x20b/0x470 [ 263.854652][ T8128] ? __pfx_do_filp_open+0x10/0x10 [ 263.854710][ T8128] ? alloc_fd+0x471/0x7d0 [ 263.854750][ T8128] do_sys_openat2+0x11b/0x1d0 [ 263.854794][ T8128] ? __pfx_do_sys_openat2+0x10/0x10 [ 263.854885][ T8128] __x64_sys_openat+0x174/0x210 [ 263.854933][ T8128] ? __pfx___x64_sys_openat+0x10/0x10 [ 263.854992][ T8128] do_syscall_64+0xcd/0x490 [ 263.855026][ T8128] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.855054][ T8128] RIP: 0033:0x7fc3f958ebe9 [ 263.855077][ T8128] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 263.855103][ T8128] RSP: 002b:00007fc3fa323038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 263.855130][ T8128] RAX: ffffffffffffffda RBX: 00007fc3f97b5fa0 RCX: 00007fc3f958ebe9 [ 263.855148][ T8128] RDX: 00000000000c0802 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 263.855166][ T8128] RBP: 00007fc3f9611e19 R08: 0000000000000000 R09: 0000000000000000 [ 263.855183][ T8128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 263.855200][ T8128] R13: 00007fc3f97b6038 R14: 00007fc3f97b5fa0 R15: 00007fff7188be48 [ 263.855234][ T8128] [ 266.298486][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 266.323955][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 267.489941][ T8195] FAULT_INJECTION: forcing a failure. [ 267.489941][ T8195] name failslab, interval 1, probability 0, space 0, times 0 [ 267.504013][ T8195] CPU: 0 UID: 0 PID: 8195 Comm: syz.0.485 Not tainted 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(full) [ 267.504046][ T8195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 267.504060][ T8195] Call Trace: [ 267.504068][ T8195] [ 267.504076][ T8195] dump_stack_lvl+0x16c/0x1f0 [ 267.504107][ T8195] should_fail_ex+0x512/0x640 [ 267.504135][ T8195] ? fs_reclaim_acquire+0xae/0x150 [ 267.504175][ T8195] should_failslab+0xc2/0x120 [ 267.504208][ T8195] __kmalloc_cache_noprof+0x6a/0x3e0 [ 267.504234][ T8195] ? tomoyo_open_control+0x415/0xa30 [ 267.504275][ T8195] tomoyo_open_control+0x415/0xa30 [ 267.504314][ T8195] do_dentry_open+0x97f/0x1530 [ 267.504345][ T8195] ? __pfx_tomoyo_open+0x10/0x10 [ 267.504381][ T8195] vfs_open+0x82/0x3f0 [ 267.504420][ T8195] path_openat+0x1de4/0x2cb0 [ 267.504459][ T8195] ? __pfx_path_openat+0x10/0x10 [ 267.504494][ T8195] do_filp_open+0x20b/0x470 [ 267.504522][ T8195] ? __pfx_do_filp_open+0x10/0x10 [ 267.504571][ T8195] ? alloc_fd+0x471/0x7d0 [ 267.504604][ T8195] do_sys_openat2+0x11b/0x1d0 [ 267.504647][ T8195] ? __pfx_do_sys_openat2+0x10/0x10 [ 267.504696][ T8195] __x64_sys_openat+0x174/0x210 [ 267.504733][ T8195] ? __pfx___x64_sys_openat+0x10/0x10 [ 267.504825][ T8195] do_syscall_64+0xcd/0x490 [ 267.504855][ T8195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.504879][ T8195] RIP: 0033:0x7f3b4058ebe9 [ 267.504897][ T8195] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 267.504919][ T8195] RSP: 002b:00007f3b3e7f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 267.504941][ T8195] RAX: ffffffffffffffda RBX: 00007f3b407b5fa0 RCX: 00007f3b4058ebe9 [ 267.504955][ T8195] RDX: 00000000000c0802 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 267.504970][ T8195] RBP: 00007f3b40611e19 R08: 0000000000000000 R09: 0000000000000000 [ 267.504987][ T8195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 267.505001][ T8195] R13: 00007f3b407b6038 R14: 00007f3b407b5fa0 R15: 00007ffda89ed5a8 [ 267.505030][ T8195] [ 271.259537][ T8240] FAULT_INJECTION: forcing a failure. [ 271.259537][ T8240] name failslab, interval 1, probability 0, space 0, times 0 [ 271.347781][ T8240] CPU: 1 UID: 0 PID: 8240 Comm: syz.1.496 Not tainted 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(full) [ 271.347815][ T8240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 271.347830][ T8240] Call Trace: [ 271.347837][ T8240] [ 271.347846][ T8240] dump_stack_lvl+0x16c/0x1f0 [ 271.347877][ T8240] should_fail_ex+0x512/0x640 [ 271.347906][ T8240] ? fs_reclaim_acquire+0xae/0x150 [ 271.347945][ T8240] should_failslab+0xc2/0x120 [ 271.347977][ T8240] __kmalloc_cache_noprof+0x6a/0x3e0 [ 271.348002][ T8240] ? tomoyo_open_control+0x415/0xa30 [ 271.348056][ T8240] tomoyo_open_control+0x415/0xa30 [ 271.348096][ T8240] do_dentry_open+0x97f/0x1530 [ 271.348126][ T8240] ? __pfx_tomoyo_open+0x10/0x10 [ 271.348163][ T8240] vfs_open+0x82/0x3f0 [ 271.348204][ T8240] path_openat+0x1de4/0x2cb0 [ 271.348241][ T8240] ? __pfx_path_openat+0x10/0x10 [ 271.348276][ T8240] do_filp_open+0x20b/0x470 [ 271.348305][ T8240] ? __pfx_do_filp_open+0x10/0x10 [ 271.348353][ T8240] ? alloc_fd+0x471/0x7d0 [ 271.348386][ T8240] do_sys_openat2+0x11b/0x1d0 [ 271.348421][ T8240] ? __pfx_do_sys_openat2+0x10/0x10 [ 271.348469][ T8240] __x64_sys_openat+0x174/0x210 [ 271.348506][ T8240] ? __pfx___x64_sys_openat+0x10/0x10 [ 271.348555][ T8240] do_syscall_64+0xcd/0x490 [ 271.348584][ T8240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.348608][ T8240] RIP: 0033:0x7fcd1858ebe9 [ 271.348626][ T8240] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 271.348648][ T8240] RSP: 002b:00007fcd167f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 271.348669][ T8240] RAX: ffffffffffffffda RBX: 00007fcd187b5fa0 RCX: 00007fcd1858ebe9 [ 271.348684][ T8240] RDX: 00000000000c0802 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 271.348699][ T8240] RBP: 00007fcd18611e19 R08: 0000000000000000 R09: 0000000000000000 [ 271.348713][ T8240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 271.348726][ T8240] R13: 00007fcd187b6038 R14: 00007fcd187b5fa0 R15: 00007fffe4fd33d8 [ 271.348755][ T8240] [ 273.102906][ T8265] __vm_enough_memory: pid: 8265, comm: syz.0.504, bytes: 4398046511104 not enough memory for the allocation [ 273.128011][ T8265] FAULT_INJECTION: forcing a failure. [ 273.128011][ T8265] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 273.149746][ T8265] CPU: 1 UID: 0 PID: 8265 Comm: syz.0.504 Not tainted 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(full) [ 273.149789][ T8265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 273.149807][ T8265] Call Trace: [ 273.149817][ T8265] [ 273.149828][ T8265] dump_stack_lvl+0x16c/0x1f0 [ 273.149867][ T8265] should_fail_ex+0x512/0x640 [ 273.149919][ T8265] should_fail_alloc_page+0xe7/0x130 [ 273.149966][ T8265] prepare_alloc_pages+0x3c2/0x610 [ 273.150020][ T8265] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 273.150065][ T8265] ? is_bpf_text_address+0x8a/0x1a0 [ 273.150105][ T8265] ? bpf_ksym_find+0x124/0x1c0 [ 273.150136][ T8265] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 273.150174][ T8265] ? is_bpf_text_address+0x94/0x1a0 [ 273.150213][ T8265] ? kernel_text_address+0x8d/0x100 [ 273.150242][ T8265] ? __kernel_text_address+0xd/0x40 [ 273.150272][ T8265] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 273.150318][ T8265] ? __lock_acquire+0x62e/0x1ce0 [ 273.150367][ T8265] ? __lock_acquire+0xb97/0x1ce0 [ 273.150406][ T8265] ? _parse_integer_limit+0x17f/0x1d0 [ 273.150444][ T8265] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 273.150494][ T8265] ? policy_nodemask+0xea/0x4e0 [ 273.150539][ T8265] alloc_pages_mpol+0x1fb/0x550 [ 273.150583][ T8265] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 273.150631][ T8265] alloc_pages_noprof+0x131/0x390 [ 273.150672][ T8265] get_free_pages_noprof+0x10/0xb0 [ 273.150722][ T8265] vcs_write+0x11a/0xdb0 [ 273.150757][ T8265] ? get_pid_task+0xfc/0x250 [ 273.150808][ T8265] ? __pfx_vcs_write+0x10/0x10 [ 273.150833][ T8265] ? common_file_perm+0x1a9/0x340 [ 273.150870][ T8265] ? bpf_lsm_file_permission+0x9/0x10 [ 273.150922][ T8265] ? security_file_permission+0x71/0x210 [ 273.150961][ T8265] ? rw_verify_area+0xcf/0x6c0 [ 273.150996][ T8265] ? __pfx_vcs_write+0x10/0x10 [ 273.151023][ T8265] vfs_write+0x29d/0x1150 [ 273.151068][ T8265] ? __pfx_vfs_write+0x10/0x10 [ 273.151102][ T8265] ? find_held_lock+0x2b/0x80 [ 273.151134][ T8265] ? __fget_files+0x204/0x3c0 [ 273.151173][ T8265] ? __fget_files+0x20e/0x3c0 [ 273.151203][ T8265] ? __fget_files+0x200/0x3c0 [ 273.151249][ T8265] __x64_sys_pwrite64+0x1eb/0x250 [ 273.151292][ T8265] ? __pfx___x64_sys_pwrite64+0x10/0x10 [ 273.151346][ T8265] do_syscall_64+0xcd/0x490 [ 273.151386][ T8265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.151418][ T8265] RIP: 0033:0x7f3b4058ebe9 [ 273.151443][ T8265] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 273.151472][ T8265] RSP: 002b:00007f3b3e7f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 273.151502][ T8265] RAX: ffffffffffffffda RBX: 00007f3b407b5fa0 RCX: 00007f3b4058ebe9 [ 273.151523][ T8265] RDX: 0000000000007b05 RSI: 0000200000000340 RDI: 0000000000000004 [ 273.151542][ T8265] RBP: 00007f3b3e7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 273.151560][ T8265] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 273.151578][ T8265] R13: 00007f3b407b6038 R14: 00007f3b407b5fa0 R15: 00007ffda89ed5a8 [ 273.151619][ T8265] [ 273.514828][ T8267] __vm_enough_memory: pid: 8267, comm: syz.3.500, bytes: 4398046511104 not enough memory for the allocation [ 273.630923][ T8269] __vm_enough_memory: pid: 8269, comm: syz.3.505, bytes: 4398046511104 not enough memory for the allocation [ 273.975508][ T8271] FAULT_INJECTION: forcing a failure. [ 273.975508][ T8271] name failslab, interval 1, probability 0, space 0, times 0 [ 274.015416][ T8271] CPU: 0 UID: 0 PID: 8271 Comm: syz.2.506 Not tainted 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(full) [ 274.015463][ T8271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 274.015483][ T8271] Call Trace: [ 274.015495][ T8271] [ 274.015507][ T8271] dump_stack_lvl+0x16c/0x1f0 [ 274.015562][ T8271] should_fail_ex+0x512/0x640 [ 274.015602][ T8271] ? fs_reclaim_acquire+0xae/0x150 [ 274.015654][ T8271] ? tomoyo_open_control+0x51f/0xa30 [ 274.015699][ T8271] should_failslab+0xc2/0x120 [ 274.015744][ T8271] __kmalloc_noprof+0xd2/0x510 [ 274.015793][ T8271] tomoyo_open_control+0x51f/0xa30 [ 274.015847][ T8271] do_dentry_open+0x97f/0x1530 [ 274.015895][ T8271] ? __pfx_tomoyo_open+0x10/0x10 [ 274.015945][ T8271] vfs_open+0x82/0x3f0 [ 274.016000][ T8271] path_openat+0x1de4/0x2cb0 [ 274.016052][ T8271] ? __pfx_path_openat+0x10/0x10 [ 274.016101][ T8271] do_filp_open+0x20b/0x470 [ 274.016139][ T8271] ? __pfx_do_filp_open+0x10/0x10 [ 274.016210][ T8271] ? alloc_fd+0x471/0x7d0 [ 274.016257][ T8271] do_sys_openat2+0x11b/0x1d0 [ 274.016306][ T8271] ? __pfx_do_sys_openat2+0x10/0x10 [ 274.016372][ T8271] __x64_sys_openat+0x174/0x210 [ 274.016423][ T8271] ? __pfx___x64_sys_openat+0x10/0x10 [ 274.016492][ T8271] do_syscall_64+0xcd/0x490 [ 274.016532][ T8271] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.016564][ T8271] RIP: 0033:0x7fc3f958ebe9 [ 274.016589][ T8271] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 274.016621][ T8271] RSP: 002b:00007fc3fa323038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 274.016652][ T8271] RAX: ffffffffffffffda RBX: 00007fc3f97b5fa0 RCX: 00007fc3f958ebe9 [ 274.016673][ T8271] RDX: 00000000000c0802 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 274.016693][ T8271] RBP: 00007fc3f9611e19 R08: 0000000000000000 R09: 0000000000000000 [ 274.016712][ T8271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 274.016730][ T8271] R13: 00007fc3f97b6038 R14: 00007fc3f97b5fa0 R15: 00007fff7188be48 [ 274.016772][ T8271] [ 274.377411][ T8277] netlink: 4 bytes leftover after parsing attributes in process `syz.0.507'. [ 274.771624][ T8286] __vm_enough_memory: pid: 8286, comm: syz.2.511, bytes: 4398046511104 not enough memory for the allocation [ 275.630391][ T8306] __vm_enough_memory: pid: 8306, comm: syz.0.515, bytes: 4398046511104 not enough memory for the allocation [ 275.953575][ T8309] __vm_enough_memory: pid: 8309, comm: syz.0.516, bytes: 4398046511104 not enough memory for the allocation [ 276.058794][ T8309] FAULT_INJECTION: forcing a failure. [ 276.058794][ T8309] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 276.144974][ T8309] CPU: 0 UID: 0 PID: 8309 Comm: syz.0.516 Not tainted 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(full) [ 276.145018][ T8309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 276.145036][ T8309] Call Trace: [ 276.145046][ T8309] [ 276.145058][ T8309] dump_stack_lvl+0x16c/0x1f0 [ 276.145098][ T8309] should_fail_ex+0x512/0x640 [ 276.145141][ T8309] _copy_from_user+0x2e/0xd0 [ 276.145188][ T8309] vcs_write+0x2e7/0xdb0 [ 276.145235][ T8309] ? __pfx_vcs_write+0x10/0x10 [ 276.145261][ T8309] ? common_file_perm+0x1a9/0x340 [ 276.145297][ T8309] ? bpf_lsm_file_permission+0x9/0x10 [ 276.145343][ T8309] ? security_file_permission+0x71/0x210 [ 276.145382][ T8309] ? rw_verify_area+0xcf/0x6c0 [ 276.145418][ T8309] ? __pfx_vcs_write+0x10/0x10 [ 276.145444][ T8309] vfs_write+0x29d/0x1150 [ 276.145490][ T8309] ? __pfx_vfs_write+0x10/0x10 [ 276.145523][ T8309] ? find_held_lock+0x2b/0x80 [ 276.145556][ T8309] ? __fget_files+0x204/0x3c0 [ 276.145597][ T8309] ? __fget_files+0x20e/0x3c0 [ 276.145628][ T8309] ? __fget_files+0x200/0x3c0 [ 276.145673][ T8309] __x64_sys_pwrite64+0x1eb/0x250 [ 276.145715][ T8309] ? __pfx___x64_sys_pwrite64+0x10/0x10 [ 276.145768][ T8309] do_syscall_64+0xcd/0x490 [ 276.145809][ T8309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.145841][ T8309] RIP: 0033:0x7f3b4058ebe9 [ 276.145865][ T8309] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 276.145903][ T8309] RSP: 002b:00007f3b3e7f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 276.145933][ T8309] RAX: ffffffffffffffda RBX: 00007f3b407b5fa0 RCX: 00007f3b4058ebe9 [ 276.145953][ T8309] RDX: 0000000000007b05 RSI: 0000200000000340 RDI: 0000000000000004 [ 276.145971][ T8309] RBP: 00007f3b3e7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 276.145989][ T8309] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 276.146016][ T8309] R13: 00007f3b407b6038 R14: 00007f3b407b5fa0 R15: 00007ffda89ed5a8 [ 276.146061][ T8309] [ 276.279013][ T8316] FAULT_INJECTION: forcing a failure. [ 276.279013][ T8316] name failslab, interval 1, probability 0, space 0, times 0 [ 276.279061][ T8316] CPU: 0 UID: 0 PID: 8316 Comm: syz.1.517 Not tainted 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(full) [ 276.279099][ T8316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 276.279119][ T8316] Call Trace: [ 276.279128][ T8316] [ 276.279141][ T8316] dump_stack_lvl+0x16c/0x1f0 [ 276.279182][ T8316] should_fail_ex+0x512/0x640 [ 276.279223][ T8316] ? fs_reclaim_acquire+0xae/0x150 [ 276.279275][ T8316] should_failslab+0xc2/0x120 [ 276.279326][ T8316] __kmalloc_cache_noprof+0x6a/0x3e0 [ 276.279362][ T8316] ? tomoyo_open_control+0x415/0xa30 [ 276.279416][ T8316] tomoyo_open_control+0x415/0xa30 [ 276.279472][ T8316] do_dentry_open+0x97f/0x1530 [ 276.279513][ T8316] ? __pfx_tomoyo_open+0x10/0x10 [ 276.279563][ T8316] vfs_open+0x82/0x3f0 [ 276.279616][ T8316] path_openat+0x1de4/0x2cb0 [ 276.279666][ T8316] ? __pfx_path_openat+0x10/0x10 [ 276.279716][ T8316] do_filp_open+0x20b/0x470 [ 276.279756][ T8316] ? __pfx_do_filp_open+0x10/0x10 [ 276.279826][ T8316] ? alloc_fd+0x471/0x7d0 [ 276.279873][ T8316] do_sys_openat2+0x11b/0x1d0 [ 276.279933][ T8316] ? __pfx_do_sys_openat2+0x10/0x10 [ 276.280000][ T8316] __x64_sys_openat+0x174/0x210 [ 276.280053][ T8316] ? __pfx___x64_sys_openat+0x10/0x10 [ 276.280124][ T8316] do_syscall_64+0xcd/0x490 [ 276.280164][ T8316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.280197][ T8316] RIP: 0033:0x7fcd1858ebe9 [ 276.280223][ T8316] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 276.280254][ T8316] RSP: 002b:00007fcd167f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 276.280284][ T8316] RAX: ffffffffffffffda RBX: 00007fcd187b5fa0 RCX: 00007fcd1858ebe9 [ 276.280305][ T8316] RDX: 00000000000c0802 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 276.280325][ T8316] RBP: 00007fcd18611e19 R08: 0000000000000000 R09: 0000000000000000 [ 276.280344][ T8316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 276.280363][ T8316] R13: 00007fcd187b6038 R14: 00007fcd187b5fa0 R15: 00007fffe4fd33d8 [ 276.280401][ T8316] [ 277.391124][ T8328] FAULT_INJECTION: forcing a failure. [ 277.391124][ T8328] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 277.414571][ T8328] CPU: 1 UID: 0 PID: 8328 Comm: syz.3.523 Not tainted 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(full) [ 277.414614][ T8328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 277.414632][ T8328] Call Trace: [ 277.414646][ T8328] [ 277.414658][ T8328] dump_stack_lvl+0x16c/0x1f0 [ 277.414698][ T8328] should_fail_ex+0x512/0x640 [ 277.414743][ T8328] _copy_to_iter+0x29f/0x16f0 [ 277.414799][ T8328] ? __pfx__copy_to_iter+0x10/0x10 [ 277.414857][ T8328] ? __pfx_default_wake_function+0x10/0x10 [ 277.414905][ T8328] tty_read+0x26f/0x5d0 [ 277.414948][ T8328] ? __pfx_tty_read+0x10/0x10 [ 277.414993][ T8328] ? bpf_lsm_file_permission+0x9/0x10 [ 277.415037][ T8328] ? security_file_permission+0x71/0x210 [ 277.415075][ T8328] ? rw_verify_area+0xcf/0x6c0 [ 277.415111][ T8328] vfs_read+0x8bc/0xc60 [ 277.415155][ T8328] ? __pfx_vfs_read+0x10/0x10 [ 277.415189][ T8328] ? find_held_lock+0x2b/0x80 [ 277.415246][ T8328] ksys_read+0x12a/0x250 [ 277.415282][ T8328] ? __pfx_ksys_read+0x10/0x10 [ 277.415331][ T8328] do_syscall_64+0xcd/0x490 [ 277.415372][ T8328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.415403][ T8328] RIP: 0033:0x7f6e2538ebe9 [ 277.415426][ T8328] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 277.415455][ T8328] RSP: 002b:00007f6e261a9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 277.415484][ T8328] RAX: ffffffffffffffda RBX: 00007f6e255b5fa0 RCX: 00007f6e2538ebe9 [ 277.415504][ T8328] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000003 [ 277.415522][ T8328] RBP: 00007f6e261a9090 R08: 0000000000000000 R09: 0000000000000000 [ 277.415542][ T8328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 277.415560][ T8328] R13: 00007f6e255b6038 R14: 00007f6e255b5fa0 R15: 00007ffce82e7dc8 [ 277.415601][ T8328] [ 279.254338][ T8355] FAULT_INJECTION: forcing a failure. [ 279.254338][ T8355] name failslab, interval 1, probability 0, space 0, times 0 [ 279.342665][ T8355] CPU: 1 UID: 0 PID: 8355 Comm: syz.3.529 Not tainted 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(full) [ 279.342719][ T8355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 279.342739][ T8355] Call Trace: [ 279.342750][ T8355] [ 279.342762][ T8355] dump_stack_lvl+0x16c/0x1f0 [ 279.342807][ T8355] should_fail_ex+0x512/0x640 [ 279.342846][ T8355] ? fs_reclaim_acquire+0xae/0x150 [ 279.342898][ T8355] ? tomoyo_open_control+0x51f/0xa30 [ 279.342945][ T8355] should_failslab+0xc2/0x120 [ 279.342989][ T8355] __kmalloc_noprof+0xd2/0x510 [ 279.343038][ T8355] tomoyo_open_control+0x51f/0xa30 [ 279.343092][ T8355] do_dentry_open+0x97f/0x1530 [ 279.343134][ T8355] ? __pfx_tomoyo_open+0x10/0x10 [ 279.343183][ T8355] vfs_open+0x82/0x3f0 [ 279.343238][ T8355] path_openat+0x1de4/0x2cb0 [ 279.343292][ T8355] ? __pfx_path_openat+0x10/0x10 [ 279.343344][ T8355] do_filp_open+0x20b/0x470 [ 279.343384][ T8355] ? __pfx_do_filp_open+0x10/0x10 [ 279.343454][ T8355] ? alloc_fd+0x471/0x7d0 [ 279.343503][ T8355] do_sys_openat2+0x11b/0x1d0 [ 279.343554][ T8355] ? __pfx_do_sys_openat2+0x10/0x10 [ 279.343621][ T8355] __x64_sys_openat+0x174/0x210 [ 279.343675][ T8355] ? __pfx___x64_sys_openat+0x10/0x10 [ 279.343752][ T8355] do_syscall_64+0xcd/0x490 [ 279.343798][ T8355] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.343831][ T8355] RIP: 0033:0x7f6e2538ebe9 [ 279.343859][ T8355] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 279.343891][ T8355] RSP: 002b:00007f6e261a9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 279.343922][ T8355] RAX: ffffffffffffffda RBX: 00007f6e255b5fa0 RCX: 00007f6e2538ebe9 [ 279.343943][ T8355] RDX: 00000000000c0802 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 279.343964][ T8355] RBP: 00007f6e25411e19 R08: 0000000000000000 R09: 0000000000000000 [ 279.343983][ T8355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 279.344001][ T8355] R13: 00007f6e255b6038 R14: 00007f6e255b5fa0 R15: 00007ffce82e7dc8 [ 279.344044][ T8355] [ 280.757386][ T8375] __vm_enough_memory: pid: 8375, comm: syz.1.534, bytes: 4398046511104 not enough memory for the allocation [ 285.174544][ T8414] __vm_enough_memory: pid: 8414, comm: syz.3.542, bytes: 4398046511104 not enough memory for the allocation [ 287.390706][ T8439] kafs: addr_prefs: Invalid Command [ 290.068197][ T8474] tc_dump_action: action bad kind [ 291.074213][ T8483] netlink: 4 bytes leftover after parsing attributes in process `syz.2.558'. [ 296.344992][ T8543] FAULT_INJECTION: forcing a failure. [ 296.344992][ T8543] name failslab, interval 1, probability 0, space 0, times 0 [ 296.376394][ T8543] CPU: 1 UID: 0 PID: 8543 Comm: syz.0.571 Not tainted 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(full) [ 296.376442][ T8543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 296.376462][ T8543] Call Trace: [ 296.376473][ T8543] [ 296.376486][ T8543] dump_stack_lvl+0x16c/0x1f0 [ 296.376528][ T8543] should_fail_ex+0x512/0x640 [ 296.376567][ T8543] ? fs_reclaim_acquire+0xae/0x150 [ 296.376620][ T8543] should_failslab+0xc2/0x120 [ 296.376664][ T8543] __kmalloc_cache_noprof+0x6a/0x3e0 [ 296.376700][ T8543] ? tomoyo_open_control+0x415/0xa30 [ 296.376752][ T8543] tomoyo_open_control+0x415/0xa30 [ 296.376806][ T8543] do_dentry_open+0x97f/0x1530 [ 296.376848][ T8543] ? __pfx_tomoyo_open+0x10/0x10 [ 296.376897][ T8543] vfs_open+0x82/0x3f0 [ 296.376953][ T8543] path_openat+0x1de4/0x2cb0 [ 296.377007][ T8543] ? __pfx_path_openat+0x10/0x10 [ 296.377067][ T8543] do_filp_open+0x20b/0x470 [ 296.377109][ T8543] ? __pfx_do_filp_open+0x10/0x10 [ 296.377179][ T8543] ? alloc_fd+0x471/0x7d0 [ 296.377226][ T8543] do_sys_openat2+0x11b/0x1d0 [ 296.377277][ T8543] ? __pfx_do_sys_openat2+0x10/0x10 [ 296.377345][ T8543] __x64_sys_openat+0x174/0x210 [ 296.377395][ T8543] ? __pfx___x64_sys_openat+0x10/0x10 [ 296.377466][ T8543] do_syscall_64+0xcd/0x490 [ 296.377508][ T8543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.377542][ T8543] RIP: 0033:0x7f3b4058ebe9 [ 296.377568][ T8543] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 296.377600][ T8543] RSP: 002b:00007f3b3e7f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 296.377629][ T8543] RAX: ffffffffffffffda RBX: 00007f3b407b5fa0 RCX: 00007f3b4058ebe9 [ 296.377650][ T8543] RDX: 00000000000c0802 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 296.377670][ T8543] RBP: 00007f3b40611e19 R08: 0000000000000000 R09: 0000000000000000 [ 296.377689][ T8543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 296.377708][ T8543] R13: 00007f3b407b6038 R14: 00007f3b407b5fa0 R15: 00007ffda89ed5a8 [ 296.377749][ T8543] [ 301.467805][ T8596] FAULT_INJECTION: forcing a failure. [ 301.467805][ T8596] name failslab, interval 1, probability 0, space 0, times 0 [ 301.513964][ T8596] CPU: 0 UID: 0 PID: 8596 Comm: syz.2.582 Not tainted 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(full) [ 301.514010][ T8596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 301.514029][ T8596] Call Trace: [ 301.514039][ T8596] [ 301.514052][ T8596] dump_stack_lvl+0x16c/0x1f0 [ 301.514095][ T8596] should_fail_ex+0x512/0x640 [ 301.514135][ T8596] ? fs_reclaim_acquire+0xae/0x150 [ 301.514187][ T8596] ? tomoyo_open_control+0x51f/0xa30 [ 301.514234][ T8596] should_failslab+0xc2/0x120 [ 301.514278][ T8596] __kmalloc_noprof+0xd2/0x510 [ 301.514328][ T8596] tomoyo_open_control+0x51f/0xa30 [ 301.514381][ T8596] do_dentry_open+0x97f/0x1530 [ 301.514424][ T8596] ? __pfx_tomoyo_open+0x10/0x10 [ 301.514473][ T8596] vfs_open+0x82/0x3f0 [ 301.514528][ T8596] path_openat+0x1de4/0x2cb0 [ 301.514581][ T8596] ? __pfx_path_openat+0x10/0x10 [ 301.514631][ T8596] do_filp_open+0x20b/0x470 [ 301.514679][ T8596] ? __pfx_do_filp_open+0x10/0x10 [ 301.514750][ T8596] ? alloc_fd+0x471/0x7d0 [ 301.514797][ T8596] do_sys_openat2+0x11b/0x1d0 [ 301.514847][ T8596] ? __pfx_do_sys_openat2+0x10/0x10 [ 301.514910][ T8596] __x64_sys_openat+0x174/0x210 [ 301.514962][ T8596] ? __pfx___x64_sys_openat+0x10/0x10 [ 301.515028][ T8596] do_syscall_64+0xcd/0x490 [ 301.515063][ T8596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.515091][ T8596] RIP: 0033:0x7fc3f958ebe9 [ 301.515113][ T8596] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 301.515140][ T8596] RSP: 002b:00007fc3fa323038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 301.515166][ T8596] RAX: ffffffffffffffda RBX: 00007fc3f97b5fa0 RCX: 00007fc3f958ebe9 [ 301.515184][ T8596] RDX: 00000000000c0802 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 301.515201][ T8596] RBP: 00007fc3f9611e19 R08: 0000000000000000 R09: 0000000000000000 [ 301.515218][ T8596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 301.515233][ T8596] R13: 00007fc3f97b6038 R14: 00007fc3f97b5fa0 R15: 00007fff7188be48 [ 301.515267][ T8596] [ 302.205327][ T5922] smpboot: CPU 1 is now offline [ 302.752919][ T8618] __vm_enough_memory: pid: 8618, comm: syz.0.587, bytes: 4398046511104 not enough memory for the allocation [ 304.896476][ T8642] FAULT_INJECTION: forcing a failure. [ 304.896476][ T8642] name failslab, interval 1, probability 0, space 0, times 0 [ 304.979279][ T8642] CPU: 0 UID: 0 PID: 8642 Comm: syz.0.593 Not tainted 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(full) [ 304.979314][ T8642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 304.979329][ T8642] Call Trace: [ 304.979336][ T8642] [ 304.979345][ T8642] dump_stack_lvl+0x16c/0x1f0 [ 304.979376][ T8642] should_fail_ex+0x512/0x640 [ 304.979405][ T8642] ? fs_reclaim_acquire+0xae/0x150 [ 304.979444][ T8642] should_failslab+0xc2/0x120 [ 304.979481][ T8642] __kmalloc_cache_noprof+0x6a/0x3e0 [ 304.979507][ T8642] ? tomoyo_open_control+0x415/0xa30 [ 304.979547][ T8642] tomoyo_open_control+0x415/0xa30 [ 304.979587][ T8642] do_dentry_open+0x97f/0x1530 [ 304.979617][ T8642] ? __pfx_tomoyo_open+0x10/0x10 [ 304.979652][ T8642] vfs_open+0x82/0x3f0 [ 304.979691][ T8642] path_openat+0x1de4/0x2cb0 [ 304.979728][ T8642] ? __pfx_path_openat+0x10/0x10 [ 304.979764][ T8642] do_filp_open+0x20b/0x470 [ 304.979792][ T8642] ? __pfx_do_filp_open+0x10/0x10 [ 304.979840][ T8642] ? alloc_fd+0x471/0x7d0 [ 304.979873][ T8642] do_sys_openat2+0x11b/0x1d0 [ 304.979909][ T8642] ? __pfx_do_sys_openat2+0x10/0x10 [ 304.979956][ T8642] __x64_sys_openat+0x174/0x210 [ 304.979993][ T8642] ? __pfx___x64_sys_openat+0x10/0x10 [ 304.980042][ T8642] do_syscall_64+0xcd/0x490 [ 304.980072][ T8642] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.980096][ T8642] RIP: 0033:0x7f3b4058ebe9 [ 304.980114][ T8642] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 304.980136][ T8642] RSP: 002b:00007f3b3e7f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 304.980158][ T8642] RAX: ffffffffffffffda RBX: 00007f3b407b5fa0 RCX: 00007f3b4058ebe9 [ 304.980173][ T8642] RDX: 00000000000c0802 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 304.980187][ T8642] RBP: 00007f3b40611e19 R08: 0000000000000000 R09: 0000000000000000 [ 304.980201][ T8642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 304.980215][ T8642] R13: 00007f3b407b6038 R14: 00007f3b407b5fa0 R15: 00007ffda89ed5a8 [ 304.980243][ T8642] [ 308.927084][ T8692] FAULT_INJECTION: forcing a failure. [ 308.927084][ T8692] name failslab, interval 1, probability 0, space 0, times 0 [ 308.986323][ T8692] CPU: 0 UID: 0 PID: 8692 Comm: syz.1.603 Not tainted 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(full) [ 308.986358][ T8692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 308.986373][ T8692] Call Trace: [ 308.986380][ T8692] [ 308.986389][ T8692] dump_stack_lvl+0x16c/0x1f0 [ 308.986421][ T8692] should_fail_ex+0x512/0x640 [ 308.986449][ T8692] ? fs_reclaim_acquire+0xae/0x150 [ 308.986489][ T8692] should_failslab+0xc2/0x120 [ 308.986521][ T8692] __kmalloc_cache_noprof+0x6a/0x3e0 [ 308.986546][ T8692] ? tomoyo_open_control+0x415/0xa30 [ 308.986585][ T8692] tomoyo_open_control+0x415/0xa30 [ 308.986624][ T8692] do_dentry_open+0x97f/0x1530 [ 308.986653][ T8692] ? __pfx_tomoyo_open+0x10/0x10 [ 308.986688][ T8692] vfs_open+0x82/0x3f0 [ 308.986726][ T8692] path_openat+0x1de4/0x2cb0 [ 308.986764][ T8692] ? __pfx_path_openat+0x10/0x10 [ 308.986799][ T8692] do_filp_open+0x20b/0x470 [ 308.986827][ T8692] ? __pfx_do_filp_open+0x10/0x10 [ 308.986875][ T8692] ? alloc_fd+0x471/0x7d0 [ 308.986908][ T8692] do_sys_openat2+0x11b/0x1d0 [ 308.986944][ T8692] ? __pfx_do_sys_openat2+0x10/0x10 [ 308.986991][ T8692] __x64_sys_openat+0x174/0x210 [ 308.987029][ T8692] ? __pfx___x64_sys_openat+0x10/0x10 [ 308.987077][ T8692] do_syscall_64+0xcd/0x490 [ 308.987114][ T8692] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.987138][ T8692] RIP: 0033:0x7fcd1858ebe9 [ 308.987157][ T8692] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 308.987179][ T8692] RSP: 002b:00007fcd167f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 308.987200][ T8692] RAX: ffffffffffffffda RBX: 00007fcd187b5fa0 RCX: 00007fcd1858ebe9 [ 308.987216][ T8692] RDX: 00000000000c0802 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 308.987230][ T8692] RBP: 00007fcd18611e19 R08: 0000000000000000 R09: 0000000000000000 [ 308.987244][ T8692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 308.987258][ T8692] R13: 00007fcd187b6038 R14: 00007fcd187b5fa0 R15: 00007fffe4fd33d8 [ 308.987286][ T8692] [ 309.908756][ T8697] netlink: 8 bytes leftover after parsing attributes in process `syz.0.605'. [ 312.268915][ T8733] blktrace: Concurrent blktraces are not allowed on loop12 [ 312.690847][ T8739] FAULT_INJECTION: forcing a failure. [ 312.690847][ T8739] name failslab, interval 1, probability 0, space 0, times 0 [ 312.785713][ T8739] CPU: 0 UID: 0 PID: 8739 Comm: syz.1.613 Not tainted 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(full) [ 312.785747][ T8739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 312.785768][ T8739] Call Trace: [ 312.785776][ T8739] [ 312.785786][ T8739] dump_stack_lvl+0x16c/0x1f0 [ 312.785817][ T8739] should_fail_ex+0x512/0x640 [ 312.785847][ T8739] ? fs_reclaim_acquire+0xae/0x150 [ 312.785886][ T8739] ? tomoyo_open_control+0x51f/0xa30 [ 312.785920][ T8739] should_failslab+0xc2/0x120 [ 312.785951][ T8739] __kmalloc_noprof+0xd2/0x510 [ 312.785986][ T8739] tomoyo_open_control+0x51f/0xa30 [ 312.786025][ T8739] do_dentry_open+0x97f/0x1530 [ 312.786056][ T8739] ? __pfx_tomoyo_open+0x10/0x10 [ 312.786091][ T8739] vfs_open+0x82/0x3f0 [ 312.786130][ T8739] path_openat+0x1de4/0x2cb0 [ 312.786167][ T8739] ? __pfx_path_openat+0x10/0x10 [ 312.786204][ T8739] do_filp_open+0x20b/0x470 [ 312.786238][ T8739] ? __pfx_do_filp_open+0x10/0x10 [ 312.786286][ T8739] ? alloc_fd+0x471/0x7d0 [ 312.786318][ T8739] do_sys_openat2+0x11b/0x1d0 [ 312.786353][ T8739] ? __pfx_do_sys_openat2+0x10/0x10 [ 312.786404][ T8739] __x64_sys_openat+0x174/0x210 [ 312.786443][ T8739] ? __pfx___x64_sys_openat+0x10/0x10 [ 312.786493][ T8739] do_syscall_64+0xcd/0x490 [ 312.786523][ T8739] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.786548][ T8739] RIP: 0033:0x7fcd1858ebe9 [ 312.786566][ T8739] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 312.786590][ T8739] RSP: 002b:00007fcd167f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 312.786615][ T8739] RAX: ffffffffffffffda RBX: 00007fcd187b5fa0 RCX: 00007fcd1858ebe9 [ 312.786631][ T8739] RDX: 00000000000c0802 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 312.786646][ T8739] RBP: 00007fcd18611e19 R08: 0000000000000000 R09: 0000000000000000 [ 312.786660][ T8739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 312.786674][ T8739] R13: 00007fcd187b6038 R14: 00007fcd187b5fa0 R15: 00007fffe4fd33d8 [ 312.786703][ T8739] [ 312.836740][ T8744] netlink: 28 bytes leftover after parsing attributes in process `syz.3.614'. [ 313.400938][ T8743] ubi: mtd0 is already attached to ubi0 [ 314.107189][ T8741] tty tty46: ldisc open failed (-12), clearing slot 45 [ 314.130493][ T8761] __vm_enough_memory: pid: 8761, comm: syz.0.618, bytes: 4398046511104 not enough memory for the allocation [ 315.301413][ T8782] FAULT_INJECTION: forcing a failure. [ 315.301413][ T8782] name failslab, interval 1, probability 0, space 0, times 0 [ 315.301449][ T8782] CPU: 0 UID: 0 PID: 8782 Comm: syz.1.624 Not tainted 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(full) [ 315.301478][ T8782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 315.301493][ T8782] Call Trace: [ 315.301500][ T8782] [ 315.301510][ T8782] dump_stack_lvl+0x16c/0x1f0 [ 315.301539][ T8782] should_fail_ex+0x512/0x640 [ 315.301567][ T8782] ? fs_reclaim_acquire+0xae/0x150 [ 315.301606][ T8782] should_failslab+0xc2/0x120 [ 315.301638][ T8782] __kmalloc_cache_noprof+0x6a/0x3e0 [ 315.301664][ T8782] ? tomoyo_open_control+0x415/0xa30 [ 315.301704][ T8782] tomoyo_open_control+0x415/0xa30 [ 315.301742][ T8782] do_dentry_open+0x97f/0x1530 [ 315.301772][ T8782] ? __pfx_tomoyo_open+0x10/0x10 [ 315.301808][ T8782] vfs_open+0x82/0x3f0 [ 315.301846][ T8782] path_openat+0x1de4/0x2cb0 [ 315.301883][ T8782] ? __pfx_path_openat+0x10/0x10 [ 315.301927][ T8782] do_filp_open+0x20b/0x470 [ 315.301956][ T8782] ? __pfx_do_filp_open+0x10/0x10 [ 315.302005][ T8782] ? alloc_fd+0x471/0x7d0 [ 315.302038][ T8782] do_sys_openat2+0x11b/0x1d0 [ 315.302074][ T8782] ? __pfx_do_sys_openat2+0x10/0x10 [ 315.302123][ T8782] __x64_sys_openat+0x174/0x210 [ 315.302160][ T8782] ? __pfx___x64_sys_openat+0x10/0x10 [ 315.302209][ T8782] do_syscall_64+0xcd/0x490 [ 315.302238][ T8782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.302262][ T8782] RIP: 0033:0x7fcd1858ebe9 [ 315.302279][ T8782] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 315.302302][ T8782] RSP: 002b:00007fcd167f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 315.302324][ T8782] RAX: ffffffffffffffda RBX: 00007fcd187b5fa0 RCX: 00007fcd1858ebe9 [ 315.302340][ T8782] RDX: 00000000000c0802 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 315.302355][ T8782] RBP: 00007fcd18611e19 R08: 0000000000000000 R09: 0000000000000000 [ 315.302369][ T8782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 315.302382][ T8782] R13: 00007fcd187b6038 R14: 00007fcd187b5fa0 R15: 00007fffe4fd33d8 [ 315.302411][ T8782] [ 319.532972][ T5869] Bluetooth: hci3: unexpected event 0x3c length: 728 > 7 [ 326.458299][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 326.478284][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 326.949170][ T8939] __vm_enough_memory: pid: 8939, comm: syz.2.659, bytes: 4398046511104 not enough memory for the allocation [ 327.678322][ T8946] FAULT_INJECTION: forcing a failure. [ 327.678322][ T8946] name failslab, interval 1, probability 0, space 0, times 0 [ 327.837560][ T8946] CPU: 0 UID: 0 PID: 8946 Comm: syz.2.661 Not tainted 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(full) [ 327.837601][ T8946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 327.837615][ T8946] Call Trace: [ 327.837623][ T8946] [ 327.837633][ T8946] dump_stack_lvl+0x16c/0x1f0 [ 327.837663][ T8946] should_fail_ex+0x512/0x640 [ 327.837692][ T8946] ? fs_reclaim_acquire+0xae/0x150 [ 327.837730][ T8946] ? tomoyo_open_control+0x51f/0xa30 [ 327.837764][ T8946] should_failslab+0xc2/0x120 [ 327.837795][ T8946] __kmalloc_noprof+0xd2/0x510 [ 327.837831][ T8946] tomoyo_open_control+0x51f/0xa30 [ 327.837869][ T8946] do_dentry_open+0x97f/0x1530 [ 327.837907][ T8946] ? __pfx_tomoyo_open+0x10/0x10 [ 327.837943][ T8946] vfs_open+0x82/0x3f0 [ 327.837985][ T8946] path_openat+0x1de4/0x2cb0 [ 327.838023][ T8946] ? __pfx_path_openat+0x10/0x10 [ 327.838059][ T8946] do_filp_open+0x20b/0x470 [ 327.838087][ T8946] ? __pfx_do_filp_open+0x10/0x10 [ 327.838136][ T8946] ? alloc_fd+0x471/0x7d0 [ 327.838169][ T8946] do_sys_openat2+0x11b/0x1d0 [ 327.838209][ T8946] ? __pfx_do_sys_openat2+0x10/0x10 [ 327.838257][ T8946] __x64_sys_openat+0x174/0x210 [ 327.838294][ T8946] ? __pfx___x64_sys_openat+0x10/0x10 [ 327.838344][ T8946] do_syscall_64+0xcd/0x490 [ 327.838374][ T8946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.838398][ T8946] RIP: 0033:0x7fc3f958ebe9 [ 327.838416][ T8946] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 327.838440][ T8946] RSP: 002b:00007fc3f77f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 327.838462][ T8946] RAX: ffffffffffffffda RBX: 00007fc3f97b6090 RCX: 00007fc3f958ebe9 [ 327.838477][ T8946] RDX: 00000000000c0802 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 327.838492][ T8946] RBP: 00007fc3f9611e19 R08: 0000000000000000 R09: 0000000000000000 [ 327.838506][ T8946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 327.838520][ T8946] R13: 00007fc3f97b6128 R14: 00007fc3f97b6090 R15: 00007fff7188be48 [ 327.838549][ T8946] [ 328.451666][ T8948] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 330.277308][ T8957] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.3.664: iget: checksum invalid [ 330.399666][ T8957] faux_driver regulatory: loading /lib/firmware/updates/6.16.0-syzkaller-12016-gbec077162bd0/regulatory.db failed with error -74 [ 330.598858][ T8957] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.3.664: iget: checksum invalid [ 330.686516][ T8957] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 330.751438][ T8957] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.3.664: iget: checksum invalid [ 330.839031][ T8957] faux_driver regulatory: loading /lib/firmware/6.16.0-syzkaller-12016-gbec077162bd0/regulatory.db failed with error -74 [ 330.944855][ T8976] __vm_enough_memory: pid: 8976, comm: syz.1.668, bytes: 4398046511104 not enough memory for the allocation [ 330.961278][ T8957] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.3.664: iget: checksum invalid [ 331.021130][ T8957] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 331.065778][ T8957] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 331.139167][ T8957] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 332.208789][ T8996] FAULT_INJECTION: forcing a failure. [ 332.208789][ T8996] name failslab, interval 1, probability 0, space 0, times 0 [ 332.393177][ T8996] CPU: 0 UID: 0 PID: 8996 Comm: syz.2.672 Not tainted 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(full) [ 332.393210][ T8996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 332.393225][ T8996] Call Trace: [ 332.393239][ T8996] [ 332.393248][ T8996] dump_stack_lvl+0x16c/0x1f0 [ 332.393278][ T8996] should_fail_ex+0x512/0x640 [ 332.393307][ T8996] ? fs_reclaim_acquire+0xae/0x150 [ 332.393346][ T8996] should_failslab+0xc2/0x120 [ 332.393378][ T8996] __kmalloc_cache_noprof+0x6a/0x3e0 [ 332.393404][ T8996] ? tomoyo_open_control+0x415/0xa30 [ 332.393443][ T8996] tomoyo_open_control+0x415/0xa30 [ 332.393482][ T8996] do_dentry_open+0x97f/0x1530 [ 332.393512][ T8996] ? __pfx_tomoyo_open+0x10/0x10 [ 332.393547][ T8996] vfs_open+0x82/0x3f0 [ 332.393585][ T8996] path_openat+0x1de4/0x2cb0 [ 332.393623][ T8996] ? __pfx_path_openat+0x10/0x10 [ 332.393658][ T8996] do_filp_open+0x20b/0x470 [ 332.393687][ T8996] ? __pfx_do_filp_open+0x10/0x10 [ 332.393735][ T8996] ? alloc_fd+0x471/0x7d0 [ 332.393771][ T8996] do_sys_openat2+0x11b/0x1d0 [ 332.393808][ T8996] ? __pfx_do_sys_openat2+0x10/0x10 [ 332.393861][ T8996] __x64_sys_openat+0x174/0x210 [ 332.393899][ T8996] ? __pfx___x64_sys_openat+0x10/0x10 [ 332.393948][ T8996] do_syscall_64+0xcd/0x490 [ 332.393978][ T8996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.394007][ T8996] RIP: 0033:0x7fc3f958ebe9 [ 332.394026][ T8996] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 332.394049][ T8996] RSP: 002b:00007fc3f77f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 332.394072][ T8996] RAX: ffffffffffffffda RBX: 00007fc3f97b6090 RCX: 00007fc3f958ebe9 [ 332.394087][ T8996] RDX: 00000000000c0802 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 332.394102][ T8996] RBP: 00007fc3f9611e19 R08: 0000000000000000 R09: 0000000000000000 [ 332.394116][ T8996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 332.394130][ T8996] R13: 00007fc3f97b6128 R14: 00007fc3f97b6090 R15: 00007fff7188be48 [ 332.394160][ T8996] [ 336.029896][ T9031] ================================================================== [ 336.038026][ T9031] BUG: KASAN: slab-use-after-free in dvb_device_open+0x36a/0x3b0 [ 336.045881][ T9031] Read of size 8 at addr ffff88802ad66618 by task syz.2.681/9031 [ 336.053786][ T9031] [ 336.056128][ T9031] CPU: 0 UID: 0 PID: 9031 Comm: syz.2.681 Not tainted 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(full) [ 336.056159][ T9031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 336.056174][ T9031] Call Trace: [ 336.056183][ T9031] [ 336.056193][ T9031] dump_stack_lvl+0x116/0x1f0 [ 336.056224][ T9031] print_report+0xcd/0x630 [ 336.056260][ T9031] ? __virt_addr_valid+0x81/0x610 [ 336.056290][ T9031] ? __phys_addr+0xe8/0x180 [ 336.056319][ T9031] ? dvb_device_open+0x36a/0x3b0 [ 336.056347][ T9031] kasan_report+0xe0/0x110 [ 336.056378][ T9031] ? dvb_device_open+0x36a/0x3b0 [ 336.056408][ T9031] ? __pfx_dvb_device_open+0x10/0x10 [ 336.056436][ T9031] dvb_device_open+0x36a/0x3b0 [ 336.056464][ T9031] ? __pfx_dvb_device_open+0x10/0x10 [ 336.056492][ T9031] chrdev_open+0x231/0x6a0 [ 336.056521][ T9031] ? __pfx_apparmor_file_open+0x10/0x10 [ 336.056560][ T9031] ? __pfx_chrdev_open+0x10/0x10 [ 336.056591][ T9031] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 336.056621][ T9031] do_dentry_open+0x97f/0x1530 [ 336.056650][ T9031] ? __pfx_chrdev_open+0x10/0x10 [ 336.056684][ T9031] vfs_open+0x82/0x3f0 [ 336.056719][ T9031] path_openat+0x1de4/0x2cb0 [ 336.056751][ T9031] ? __pfx_path_openat+0x10/0x10 [ 336.056783][ T9031] do_filp_open+0x20b/0x470 [ 336.056810][ T9031] ? __pfx_do_filp_open+0x10/0x10 [ 336.056849][ T9031] ? alloc_fd+0x471/0x7d0 [ 336.056878][ T9031] do_sys_openat2+0x11b/0x1d0 [ 336.056914][ T9031] ? __pfx_do_sys_openat2+0x10/0x10 [ 336.056950][ T9031] ? __pfx_do_sys_openat2+0x10/0x10 [ 336.056991][ T9031] __x64_sys_openat+0x174/0x210 [ 336.057028][ T9031] ? __pfx___x64_sys_openat+0x10/0x10 [ 336.057072][ T9031] do_syscall_64+0xcd/0x490 [ 336.057100][ T9031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.057124][ T9031] RIP: 0033:0x7fc3f958ebe9 [ 336.057143][ T9031] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 336.057166][ T9031] RSP: 002b:00007fc3fa323038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 336.057188][ T9031] RAX: ffffffffffffffda RBX: 00007fc3f97b5fa0 RCX: 00007fc3f958ebe9 [ 336.057204][ T9031] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 336.057219][ T9031] RBP: 00007fc3f9611e19 R08: 0000000000000000 R09: 0000000000000000 [ 336.057240][ T9031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 336.057254][ T9031] R13: 00007fc3f97b6038 R14: 00007fc3f97b5fa0 R15: 00007fff7188be48 [ 336.057277][ T9031] [ 336.057286][ T9031] [ 336.306618][ T9031] Allocated by task 1: [ 336.310687][ T9031] kasan_save_stack+0x33/0x60 [ 336.315381][ T9031] kasan_save_track+0x14/0x30 [ 336.320082][ T9031] __kasan_kmalloc+0xaa/0xb0 [ 336.324743][ T9031] dvb_register_device+0x1e4/0x2370 [ 336.330072][ T9031] dvb_register_frontend+0x5a6/0x880 [ 336.335395][ T9031] vidtv_bridge_probe+0x459/0xa90 [ 336.340467][ T9031] platform_probe+0x103/0x1d0 [ 336.345434][ T9031] really_probe+0x241/0xa90 [ 336.350001][ T9031] __driver_probe_device+0x1de/0x440 [ 336.355306][ T9031] driver_probe_device+0x4c/0x1b0 [ 336.360448][ T9031] __driver_attach+0x283/0x580 [ 336.365337][ T9031] bus_for_each_dev+0x13e/0x1d0 [ 336.370231][ T9031] bus_add_driver+0x2e9/0x690 [ 336.375015][ T9031] driver_register+0x15c/0x4b0 [ 336.379811][ T9031] vidtv_bridge_init+0x45/0x80 [ 336.384688][ T9031] do_one_initcall+0x120/0x6e0 [ 336.389490][ T9031] kernel_init_freeable+0x5c2/0x910 [ 336.394818][ T9031] kernel_init+0x1c/0x2b0 [ 336.399194][ T9031] ret_from_fork+0x5d7/0x6f0 [ 336.403826][ T9031] ret_from_fork_asm+0x1a/0x30 [ 336.408625][ T9031] [ 336.410989][ T9031] Freed by task 8948: [ 336.415152][ T9031] kasan_save_stack+0x33/0x60 [ 336.419871][ T9031] kasan_save_track+0x14/0x30 [ 336.424603][ T9031] kasan_save_free_info+0x3b/0x60 [ 336.429641][ T9031] __kasan_slab_free+0x60/0x70 [ 336.434426][ T9031] kfree+0x2b4/0x4d0 [ 336.438348][ T9031] dvb_device_put.part.0+0x60/0x90 [ 336.443475][ T9031] dvb_device_open+0x2a4/0x3b0 [ 336.448268][ T9031] chrdev_open+0x231/0x6a0 [ 336.452818][ T9031] do_dentry_open+0x97f/0x1530 [ 336.457603][ T9031] vfs_open+0x82/0x3f0 [ 336.461717][ T9031] path_openat+0x1de4/0x2cb0 [ 336.466338][ T9031] do_filp_open+0x20b/0x470 [ 336.470857][ T9031] do_sys_openat2+0x11b/0x1d0 [ 336.475571][ T9031] __x64_sys_openat+0x174/0x210 [ 336.480447][ T9031] do_syscall_64+0xcd/0x490 [ 336.484965][ T9031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.490893][ T9031] [ 336.493225][ T9031] The buggy address belongs to the object at ffff88802ad66600 [ 336.493225][ T9031] which belongs to the cache kmalloc-256 of size 256 [ 336.507318][ T9031] The buggy address is located 24 bytes inside of [ 336.507318][ T9031] freed 256-byte region [ffff88802ad66600, ffff88802ad66700) [ 336.521285][ T9031] [ 336.523681][ T9031] The buggy address belongs to the physical page: [ 336.530121][ T9031] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2ad66 [ 336.538990][ T9031] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 336.547497][ T9031] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 336.555067][ T9031] page_type: f5(slab) [ 336.559092][ T9031] raw: 00fff00000000040 ffff88801b841b40 dead000000000122 0000000000000000 [ 336.567693][ T9031] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 336.576298][ T9031] head: 00fff00000000040 ffff88801b841b40 dead000000000122 0000000000000000 [ 336.585071][ T9031] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 336.593839][ T9031] head: 00fff00000000001 ffffea0000ab5981 00000000ffffffff 00000000ffffffff [ 336.602517][ T9031] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 336.611383][ T9031] page dumped because: kasan: bad access detected [ 336.617805][ T9031] page_owner tracks the page as allocated [ 336.623552][ T9031] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 26512807992, free_ts 0 [ 336.643448][ T9031] post_alloc_hook+0x1c0/0x230 [ 336.648390][ T9031] get_page_from_freelist+0x132b/0x38e0 [ 336.653999][ T9031] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 336.659909][ T9031] alloc_pages_mpol+0x1fb/0x550 [ 336.664776][ T9031] new_slab+0x247/0x330 [ 336.668938][ T9031] ___slab_alloc+0xcf2/0x1740 [ 336.673624][ T9031] __slab_alloc.constprop.0+0x56/0xb0 [ 336.679007][ T9031] __kmalloc_cache_noprof+0xfb/0x3e0 [ 336.684304][ T9031] bus_add_driver+0x92/0x690 [ 336.689010][ T9031] driver_register+0x15c/0x4b0 [ 336.694179][ T9031] usb_register_driver+0x216/0x4d0 [ 336.699331][ T9031] do_one_initcall+0x120/0x6e0 [ 336.704230][ T9031] kernel_init_freeable+0x5c2/0x910 [ 336.709473][ T9031] kernel_init+0x1c/0x2b0 [ 336.713840][ T9031] ret_from_fork+0x5d7/0x6f0 [ 336.718483][ T9031] ret_from_fork_asm+0x1a/0x30 [ 336.723290][ T9031] page_owner free stack trace missing [ 336.728675][ T9031] [ 336.731026][ T9031] Memory state around the buggy address: [ 336.736774][ T9031] ffff88802ad66500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 336.744937][ T9031] ffff88802ad66580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 336.753480][ T9031] >ffff88802ad66600: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 336.761921][ T9031] ^ [ 336.767018][ T9031] ffff88802ad66680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 336.775271][ T9031] ffff88802ad66700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 336.783441][ T9031] ================================================================== [ 338.184773][ T9031] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 338.192173][ T9031] CPU: 0 UID: 0 PID: 9031 Comm: syz.2.681 Not tainted 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(full) [ 338.203822][ T9031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 338.213889][ T9031] Call Trace: [ 338.217347][ T9031] [ 338.220298][ T9031] dump_stack_lvl+0x3d/0x1f0 [ 338.224921][ T9031] vpanic+0x6e8/0x7a0 [ 338.228945][ T9031] ? __pfx_vpanic+0x10/0x10 [ 338.233578][ T9031] ? __pfx_vprintk_emit+0x10/0x10 [ 338.238631][ T9031] ? dvb_device_open+0x36a/0x3b0 [ 338.243688][ T9031] panic+0xca/0xd0 [ 338.247575][ T9031] ? __pfx_panic+0x10/0x10 [ 338.252056][ T9031] ? dvb_device_open+0x36a/0x3b0 [ 338.257054][ T9031] ? preempt_schedule_common+0x44/0xc0 [ 338.262541][ T9031] ? preempt_schedule_thunk+0x16/0x30 [ 338.267936][ T9031] check_panic_on_warn+0xab/0xb0 [ 338.272903][ T9031] end_report+0x107/0x170 [ 338.277253][ T9031] kasan_report+0xee/0x110 [ 338.281784][ T9031] ? dvb_device_open+0x36a/0x3b0 [ 338.286744][ T9031] ? __pfx_dvb_device_open+0x10/0x10 [ 338.292042][ T9031] dvb_device_open+0x36a/0x3b0 [ 338.296828][ T9031] ? __pfx_dvb_device_open+0x10/0x10 [ 338.302137][ T9031] chrdev_open+0x231/0x6a0 [ 338.306576][ T9031] ? __pfx_apparmor_file_open+0x10/0x10 [ 338.312199][ T9031] ? __pfx_chrdev_open+0x10/0x10 [ 338.317182][ T9031] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 338.323539][ T9031] do_dentry_open+0x97f/0x1530 [ 338.328446][ T9031] ? __pfx_chrdev_open+0x10/0x10 [ 338.333428][ T9031] vfs_open+0x82/0x3f0 [ 338.337910][ T9031] path_openat+0x1de4/0x2cb0 [ 338.342545][ T9031] ? __pfx_path_openat+0x10/0x10 [ 338.347526][ T9031] do_filp_open+0x20b/0x470 [ 338.352168][ T9031] ? __pfx_do_filp_open+0x10/0x10 [ 338.357268][ T9031] ? alloc_fd+0x471/0x7d0 [ 338.361633][ T9031] do_sys_openat2+0x11b/0x1d0 [ 338.366446][ T9031] ? __pfx_do_sys_openat2+0x10/0x10 [ 338.371713][ T9031] ? __pfx_do_sys_openat2+0x10/0x10 [ 338.377331][ T9031] __x64_sys_openat+0x174/0x210 [ 338.382344][ T9031] ? __pfx___x64_sys_openat+0x10/0x10 [ 338.387871][ T9031] do_syscall_64+0xcd/0x490 [ 338.392447][ T9031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.398633][ T9031] RIP: 0033:0x7fc3f958ebe9 [ 338.403069][ T9031] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 338.422966][ T9031] RSP: 002b:00007fc3fa323038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 338.431508][ T9031] RAX: ffffffffffffffda RBX: 00007fc3f97b5fa0 RCX: 00007fc3f958ebe9 [ 338.439506][ T9031] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 338.447505][ T9031] RBP: 00007fc3f9611e19 R08: 0000000000000000 R09: 0000000000000000 [ 338.455521][ T9031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 338.463518][ T9031] R13: 00007fc3f97b6038 R14: 00007fc3f97b5fa0 R15: 00007fff7188be48 [ 338.471598][ T9031] [ 338.474700][ T9031] Kernel Offset: disabled [ 338.479100][ T9031] Rebooting in 86400 seconds..