last executing test programs: 7.717109018s ago: executing program 1 (id=2786): setresuid$auto(0x8, 0x8, 0x0) r0 = setfsuid$auto(0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket(0x11, 0x3, 0x2) getsockopt$auto(r1, 0x107, 0x1, 0x0, 0x0) setuid$auto(r0) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/pcmC1D1p\x00', 0x84000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) madvise$auto(0x0, 0x240007, 0x19) migrate_pages$auto(0x0, 0xa, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r2 = socket(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) sendto$auto(0x3, 0x0, 0xfffffffffffffdef, 0x101, 0x0, 0x1c) ioctl$auto(0x3, 0x80000541b, 0x38) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x101000, 0x0) r3 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/interrupts\x00', 0x18b202, 0x0) pread64$auto(r3, &(0x7f0000000340)='/proc/Nes\x00'/22, 0x100000001, 0x100) 7.41358255s ago: executing program 1 (id=2789): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x40000008000) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x261c2, 0x184) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000080)='/proc/kpageflags\x00', 0x2, 0x0) readv$auto(0x3, &(0x7f00000000c0)={0x0, 0x101d0}, 0x400) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages$auto(r2, 0x1002, 0x0, 0x0, 0x0, 0x2) r3 = getpid() sendmsg$auto_NL80211_CMD_DEL_TX_TS(r0, 0x0, 0x24004000) kcmp$auto(r2, r3, 0x7, 0xffffffffffffffff, r1) ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0) socket(0xb, 0x800, 0x4) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x22, 0x2, 0x0) socket(0x2c, 0x3, 0xfffffffd) 6.997275586s ago: executing program 0 (id=2790): close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) gettid() openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vbi15\x00', 0x802, 0x0) socket(0xa, 0x1, 0x100) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) ioctl$auto_TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_UDP_GET_REMOTEIP(r2, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000005c0)=ANY=[@ANYBLOB="000b00c7", @ANYRES16=r3, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="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"], 0x13f0}, 0x1, 0x9eff, 0x0, 0x400c014}, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) io_uring_setup$auto(0x6, 0x0) timerfd_create$auto(0x7, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x8, 0x1, 0x9, 0x1, 0xff]}, 0x0) mknod$auto(&(0x7f00000003c0)=':,\x00\xbd\x80\xd6\x002\xb37\xff\x1a\x9e99\xda\xd1v\'\xc6\xd2Fw;\x00v\xdce\xad\xf4\xdb\xc7\x946\xe4\f\x9el]L+\x06\x130V\x1b,d\x8f\xa0\xabDUdk\xac\x82\\tyQ\xd8j\a\x1a[\xdb\x96\x1f{2\x04\xc5Y\xc1@\x0e\xeeWZ\x94N\xd4\xc8q=\x9b\xd1\x7fR3\xb6`\x00\xb3\xe5|1\xba\r\x85\x89\xfe\xed\xe1\xad`\x92\xc7\x9c\xd7\xd8\x15\t&\xb7\xfc\x82\xc4\xd3J\xae\x810\x19\x14\t\xc2\xa5V\xaa\x8d\x04\xf5\xf3\xd6\xd1\xe9k\xaf\x1a\xc6u\x96\xf7\xaa\x84\x92\x995m\xf9O\xc0\x1e\xa05\xdb\xa5\xae\r\x06\xe6\xc3\xd0\xf8:\xf7\xc5u\x91\xf8\x91\xee\xd8y\xb8\xc1)\xad\x05\xeb\xe9\xab\r\x9a@\aa(\x1a\xa4\xc1\xcf\\\xf0\xc3~\xbbd\x94\x9c\x02\xd4\xfc\xd2`\xd9\x83{-\x81zY\\\xac!#\xea\xba\x86)\xe9\xbc\x82\xf6\xd2\x7f\xdb\xa1\xd5\x89|\xa0O\xfcqZ\x85@A\x90\"\x11L\xdd\xa5\x9f\xf5', 0x20e9, 0x103) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r4, 0x0, 0x24048084) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0xc, 0x2, 0x6]}, 0x0) msync$auto(0x1ffff000, 0x180000080000000, 0x400000004) close_range$auto(0x2, 0x8, 0x0) 5.722221358s ago: executing program 0 (id=2793): r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) statmount$auto(0x0, &(0x7f0000000380)={0x4, 0xbf78, 0x3, 0x100, 0x9df, 0x7fffffff, 0x3, 0x7, 0x3, 0xcb, 0x6b7, 0x0, 0xb4, 0x81, 0x8, 0x8, 0x101, 0x10001, 0x4, 0x100000001, 0x0, 0x0, 0x7, 0x7, 0x1, 0x10001, 0x40, 0x8, 0xf, 0x6, 0x10, [0x6, 0x5, 0xffff, 0x7fffffff, 0x7, 0x3, 0x10000, 0x5, 0xe3f8, 0x9, 0x180, 0x1, 0x1000, 0xffffffff, 0x4, 0x1, 0x100, 0x8, 0x9, 0x4, 0xd1c7, 0x3, 0x8, 0xf36, 0x0, 0x6ba3, 0x3, 0x6, 0x7, 0x55ac, 0xbbb, 0xa, 0x0, 0x7, 0x6, 0xfae9, 0x95, 0x0, 0x9, 0xfffffffffffffbff, 0x5, 0x7fff, 0x6]}, 0x4, 0xf) unshare$auto(0x40000080) ioctl$auto_FIDEDUPERANGE(r0, 0xc0189436, 0x2) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2, 0x3, 0xa) socket(0x11, 0x80003, 0x300) clone3$auto(0x0, 0x9) socketpair$auto(0x1, 0x0, 0xfffffffc, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0xc7f16bff2a10ba01, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) ioctl$auto_TIOCVHANGUP2(r1, 0x5437, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capset$auto(&(0x7f0000000180)={0x19980330}, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) open(0x0, 0x22240, 0x154) bpf$auto(0x7, 0x0, 0xa3) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/ttyS2\x00', 0x201, 0x0) 5.597223775s ago: executing program 1 (id=2794): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram6\x00', 0x4040, 0x0) write$auto_tty_fops_tty_io(r0, &(0x7f0000000280)="352c8efa618c0bcf83", 0x9) mmap$auto(0x0, 0x6, 0x2, 0x40eb4, r1, 0x6) ioctl$auto(0xffffffffffffffff, 0x8912, 0x38) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xfffffffffffffffe, 0x8000) ustat$auto(0x801, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) writev$auto(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x40}, 0x8) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) madvise$auto(0x3f000000, 0x2003f0, 0x15) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0xff1, 0x8000) io_uring_setup$auto(0x1, 0x0) bpf$auto(0x5, 0x0, 0x102) getpid() r3 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs1\x00', 0x48080, 0x0) fcntl$auto(0x3, 0x4, 0xa553) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_GET_SCAN(r4, 0x0, 0x0) read$auto(r3, 0x0, 0xb4d3) write$auto(0x3, 0x0, 0xffd8) ioprio_get$auto_IOPRIO_WHO_PGRP(0x2, 0x0) 5.110669844s ago: executing program 3 (id=2795): mmap$auto(0x0, 0x99, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r0, &(0x7f0000000000)="1f91f2c388274610e18d5fc5e5bfd9800e9b63", 0x13) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x90}, 0x20000081) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0x10, 0x2, 0x4) ioctl$auto_KVM_GET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee2, 0x0) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x7ff, 0x9, 0x63, 0x0, 0x0, 0x0, 0x8, 0x200, 0x800000000100002, 0x40000406, 0x2, 0xc, 0x2, 0x11, 0x6, 0x7}) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16=0x0], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="7201", @ANYBLOB="13"], 0x1ac}, 0x1, 0x0, 0x0, 0x2000c000}, 0x4004) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/devices/system/cpu/cpu1/hotplug/target\x00', 0x800, 0x0) read$auto(r2, 0x0, 0x7) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000280), r1) sendmsg$auto_NL80211_CMD_START_SCHED_SCAN(r0, 0x0, 0x20000000) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r4 = socket(0x2, 0x5, 0x0) getsockopt$auto(r4, 0x84, 0x85, 0x0, 0x0) socket(0x2a, 0x5, 0x7) capset$auto(0x0, 0x0) unshare$auto(0x40000080) 5.042725497s ago: executing program 0 (id=2796): unshare$auto(0x40000080) socket(0x2, 0x801, 0x100) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4001}, 0x9800) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x11, 0x80003, 0x300) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc2481, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) epoll_create$auto(0x4) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) write$auto_tty_fops_tty_io(r0, &(0x7f0000000580)="7fd0a917413f68eb6b28d5eea7d1553f6595c094f1f855eb8d8776e6bd8f81c440da3fe3433f8243402fc2752caac5da7a03bbb5adf685740635a6bc231c6cf093b7cf0e4dd07f10b2dc12791aa3ebded3cfe2e4befc0e02d2e064b1db3adc8b2ec1c0378efff268086d6cb998b8dedfb7f20d06b7b091e974de1c1a4ce3d378d91b7639d914ba86b1f18337bb06e3619af99e68dfac380ab153fc75a2159d8efbbf7436752c964490346cf1558249979fc61ee71509560d14bdd0922e50904f3a4b2ae1bfc4f6bb9e08f16afd6baa53cf87077be5bcca2829dd4133da071a6fd072ed5568670a5d171e3deee5576bf571a016c162ca369182f202dbe49839df8d4c438dacdd6cdd67c21e2ed9be20baeff5e5019313d5e6e5a0e93eab61be5dec2c7e144cf9d73fd945c25ff11d5d5aa26bf8ab2e06098b8aeb05c1f29c1a30d268d82768b3350c3efcdac39334de0f6406a1aed635e0c55412ff73b0222d67be6bdd185478d502b492c41696ce6f88609795409aa0841dbc7cb222f0cb239b19d9499fdc45988f0290af0666c37b93f047d45b17cbe7c9332c63ad46c6aa871e4b351efa4fbfb88cfa0281f465d1a970939c2d6c45c50ade06f0bb98ed66623b887de325c0f42ab530b649ea29757af9464c18dea186a0bbc62ce209a3be8e86e8f710323cb899d806caf575cb73a419c0804afd4c8a329a2afaebb87291e9fdfd2ca0edebfc4fb7b1e281fa3e6ac387aebfc92107f4251aa8c96a4c6d7599933c2c489a7696e8e42d88b572fa46bead2c96f619030ab70026f14f91bbf0a4c1b3ed74c564d6ae3eefeef94d37e19701513ff7713a52ebfd8f251dc303455de00d1ee3ed3e204bed2901a644056193fc7e00ce10aa6463892a7881a51893af629f7bd8801ce4c44c7ff2decdb6a69d9ed48ff79661ba9ec4a84dd222d3b40e4abf56222b97db9aa646a67e5031a57d570030f41b09529298f1acddbcd1f0ff6a30cb2a2d5eaecd774bbf897477cc1e55488f3493b6aa6908d24b032cbda24f956f7f262d992838923efde7e8ed0558872451d7bd6a4769ecd47c6d0a125a6e638df6f67793901a67071c506d010930b01ce541aa43f9110d874311d18a8ea50fb1907e8d17c3932e0c12c7d6f7c145209ab81105649fc0c5266063bd8c6a16319a82ff5d236122d53e15d6a7fcb16245d7754f3ffbf659a141cbd29286176fe445deebd5dd18baae1bbdfedbe4bd3453c50fb2f6c22505ecd768ad0703624ebf7b924dc7e8e93ea94c8a6a9f0372351b5a4aaadf89a86faf5241e47be7e6790676fbf8abcc6ef89b9f6ce10600e21815ec6d2c580b5c30ada6b956a07d9964e93419856df00b06245d0743ac2b595097007165cbb17c6a492a6eb0559712e5f89ee86b7a2c46acf9b8d8b2c7a85092966aca97f114635c64f6eb44ad927423a3bc434b267c23d364ee5671d3dcbcca02ffbb633b3c9e6f2058c3b43dd46344b92e000a029e6daf42c4d12e3a470487eb5cca6e2014b87e5a5aee1c6b9485472d18aaea4ebefe77c6901cd52e303083d6b2e47f4be756fb4dd02acd4938e6ae5f7178623b3b4bad0a83c2c511fd4a9e1da40efff3ca03326278860a6c507e50717f0ea9288daa0a33748cdaa74ec20f7b5671ab50d2a0ea649b9c1b258fa833e808ce0f0fb537e75e9e4c8e1b5c7fe8ca456e6c32fdb86b88c0bc30e44c5ec22634cf5b6b78574a5aae4cfd5b011095e2ea022a2fd15495319ddfad5b3fdabcf012d8f182af76c9ea3b083b66fb34b0ba87957fcd34cb0a55478bfb857bb79b52ec8cf52fcdaf09a20b743b765310cb24d4b05e55790ebbc410cc1342c3dc27facd2ae8c2ea0916bbe0e1372c09f2b98d486294c1ad0776828ec7feebdd969af66b82f708494c4abd5841d70a71ed0c6c7eef68559527ea4c43fe26e8889f9410cda85b13dc02bd03692198ce526997cb45b322a6354d58344e94944f9fa25950ae239c17b75d313f75405c012d959eeb2991130ec84e703193d749671264f3aafd55cfcfb2f5762979724318d6f1ed0b5e570d0b050ed9282a71de1533cb642ea831444a4bb7668745bf9814a180b18835e7c61d907e4321c25b5400be50d0117537ca13190ffde1bb077eb0cd74f6163abcb87a2b1e261b2c2084224d743b27b67f404b3b2d66a9c12892fb6894cd87c018e4018cfe5cb05b6114b90fb7faff3e591e4f60803318cc54783f9c1473276b33f59a3e545340299036ce3eefeb5775b4ddc00759012e5a408ea73b702c05c102740c6ba5b140a89cef6a7e9591c9afca16e478698cd9a3b4d103a553a194cc30e498b14c2315c61e5e6c329722c5cb50b6c114e4901c067ccfdb54268eb51b1d43b0cf36b78c2e91abf18675c3b69614e0d10c3f15014d69067a97953ba58e7da1b625ae43465346bb7cff85515f83c1934956b2195cebef82db5fd2e9083da8240e4d7d1ade0d4f2be992f2f23197df1054c89bb1b7ad9c03a3c3cecb278221889cb30374987dd72d0d58015dfee54acb6db2127dc467ba3ce0a2353e809622b23d03a6b52666f10cde5a2abb02571b845d58d6590afc59bd16caa59ae4026888efa3f6b1d0f879afb71a580486005db5a411073f8f4964f73103efa972ecf481118b12ae48ba55c50a5fd7c31991b73242bb7448bcb4e412427a4ab9657a0e1f8ff3332e9da5b6f695dfcc4e6fbeb5f2cea1c70703f7fe4b685feb246b27601163c98a661ee30467ac71ee1df93812258dfd19f30fcd059c1cde93e142a6fe6976f9f78b580073528e1a2ca6084eea907db9e3b1ac68eb150ee596519613a667c897afe767f17f3f227db922972bd9bfdc6b7ebd8f1e6a51587e31dd1bc3abeed8a338cc458ff7031507b678c97d51f03b92292ded0ac1f004fe460cbc56f355d17c8b3aa73645d06fac0664e6b2da6dfdf56a2efbe5fe06ae5f0bb3f1e91e3914dc9cf71b66515a7b669bb60f1ccc7ca1ffa1d76dd8762a7d2c106f3f42b8d7e1c337236bafcd8744a53f175ff22d3fbc3ff2bb70714c512d9e2c5f833276b8be411724a41dc99e21fa744af8be985d800f274cfbf11df693aa52f4b9a2b3503123f50830942dcd8a574b439a1f052019bdcab9c15e72aba31d9ef3dffcad1e9033ae5a9babbc6f1ab1705c910dbce3e1e086d02e0cd276f7e2bbc07239328242c9dcf978cbc65848a5", 0x8de) mmap$auto(0xf, 0x40009, 0xe2, 0x7f8000000000013, 0xffffffffffffffff, 0x28000) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/ip_vs_conn\x00', 0x62240, 0x0) read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000240)=""/7, 0x7) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/zram0/io_stat\x00', 0x40100, 0x0) 4.820343731s ago: executing program 3 (id=2797): prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) socket(0x3, 0x3, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000005, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/usb/usbmon/9t\x00', 0x28800, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sg0\x00', 0x40200, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, 0x0, 0x400, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/037/001\x00', 0x630001, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000004400)='/dev/dsp1\x00', 0x1, 0x0) mmap$auto(0xfffffffffffffff9, 0x400006, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC0\x00', 0x0, 0x0) readv$auto(0x3, 0x0, 0x1) setsockopt$auto(0xffffffffffffffff, 0x1, 0x1021, 0x0, 0xd) close_range$auto(0x2, 0xa, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x40, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/all/forwarding\x00', 0x42a81, 0x0) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/trace\x00', 0x1a6b75d638828712, 0x0) sendfile$auto(r2, r1, 0x0, 0x1000202) close_range$auto(0x2, 0x8, 0x0) 3.82478878s ago: executing program 3 (id=2799): sendfile$auto(0x1, 0x3, 0x0, 0x74c) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0xa, 0x0, 0x1f, 0x101}, 0x8}, 0x7, 0x20020000) setsockopt$auto(0x3, 0x1, 0x7, 0x0, 0x9) socket(0xa, 0x801, 0x106) mmap$auto(0x0, 0xd, 0xdf, 0x9b72, 0x2, 0x8000) setsockopt$auto(0x3, 0x0, 0x18, 0x0, 0x9) write$auto(0x3, 0x0, 0xfffffdef) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) r1 = io_uring_setup$auto(0xc, 0x0) mmap$auto(0x0, 0x400408, 0x10001, 0x411, r1, 0x8000) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, 0x0, 0x20401, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x4, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x5, 0x100000000001000, 0xc) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/cpu/vulnerabilities/spectre_v1\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f00000000c0)=""/48, 0x30) mprotect$auto(0x0, 0xe6a, 0x6) 3.558490929s ago: executing program 2 (id=2800): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) uname$auto(0x0) setsockopt$auto(0x3, 0x10000000084, 0x85, 0x0, 0x90) socket(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card0/pcm0p/oss\x00', 0x480, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev6\x00', 0x169000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x22, 0x3, 0x0) mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfffff000) set_mempolicy$auto(0x6, &(0x7f0000000000)=0x7e, 0x4) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) r0 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) ioctl$auto(r1, 0x5393, r0) fanotify_init$auto(0x6a1, 0x2000000000002) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 3.504534436s ago: executing program 0 (id=2801): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) select$auto(0x3, 0x0, 0x0, 0x0, 0x0) syslog$auto(0x2, 0x0, 0xcf) mmap$auto(0x0, 0x10001, 0x80003, 0x10011, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) shmget$auto(0x400, 0x10563, 0x568c12f2) sendmsg$auto_NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x24048800) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0xffffffffffffffff, 0x400008, 0xe0, 0x9b72, 0xffffffffffffffff, 0x1) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x2020009, 0x3, 0x20000000eb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0xae41, 0x38) clone$auto(0x9001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0xfbe1) write$auto_tomoyo_operations_securityfs_if(0xffffffffffffffff, &(0x7f0000001300), 0x0) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0xc76, 0x8000) shmdt$auto(&(0x7f0000000000)=':-h!/-^@(\']@%]/\x00') mmap$auto(0x0, 0xc, 0x4000000000df, 0x44eb2, 0x10006, 0x300000000000) 3.450017924s ago: executing program 1 (id=2802): openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000040), 0x600240, 0x0) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x20000, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/fs/cifs/SecurityFlags\x00', 0x48041, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x0) openat$auto_drm_connector_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000b80)='/sys/kernel/debug/dri/vkms/Writeback-1/force\x00', 0x2, 0x0) socket(0x2, 0x2, 0x1) socket(0x10, 0x2, 0x4) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) io_uring_setup$auto(0x2, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/icmp/ratemask\x00', 0xa0202, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) socketpair$auto(0x5b, 0x1, 0x420000, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS2\x00', 0x101f81, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) ioctl$auto_TIOCVHANGUP2(r0, 0x5437, 0x0) 3.244674362s ago: executing program 1 (id=2803): openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) r0 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = clone3$auto(&(0x7f00000002c0)={0x4, 0x9, 0x1, 0x2, 0x8000, 0xffffffffffffffff, 0x7, 0x3, 0xffffffffffffffea, 0x8, 0x200}, 0x7) ptrace$auto_PTRACE_GETSIGMASK(0x420a, r1, 0x6e3, 0x1) ioctl$auto_IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptyzf\x00', 0x2200, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) io_setup$auto(0x7ffe, 0x0) io_setup$auto(0x7ffe, &(0x7f0000000000)) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/bus/pci/rescan\x00', 0x20681, 0x0) syz_genetlink_get_family_id$auto_smc_gen_netlink(0x0, r3) write$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000200)='5', 0x1) capset$auto(&(0x7f0000000340)={0x19980330}, 0x0) select$auto(0x9, &(0x7f00000000c0)={[0xeeda, 0x7, 0x100000001, 0x9, 0x6, 0x1ff, 0x6, 0x3, 0x4, 0x4618ecd2, 0x3, 0x42ff, 0x6, 0x9a8c, 0x9, 0x10001]}, &(0x7f0000000200)={[0x8, 0x4, 0x2, 0xb, 0x1, 0x4, 0x0, 0x7fff, 0xa, 0x193, 0xfffffffffffffff9, 0x3, 0x5e4, 0x1000, 0x1, 0x1]}, 0x0, &(0x7f0000000280)={0x6, 0xc8}) open(&(0x7f0000000040)='./file0\x00', 0x40841, 0x8) io_uring_register$auto_IORING_UNREGISTER_PERSONALITY(r0, 0xa, &(0x7f0000000180)="221aa2a2e1a47c16e9b935b36eb66fa98ca6d90b78e1fc1799ad1e15807c54f58fa1ee6c6927048cbda12b4e1ad0336a4b88db6e5c7e4fedd6852f33d0b576", 0x2f) socket(0xa, 0x5, 0x94) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) 2.898107574s ago: executing program 2 (id=2804): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec18\x00', 0x900, 0x0) ioctl$auto_CEC_S_MODE(r0, 0x40046109, &(0x7f0000002c40)=0xd0) ioctl$auto_CEC_DQEVENT(r0, 0xc0506107, 0x0) openat$auto_o2hb_debug_fops_heartbeat(0xffffffffffffff9c, &(0x7f0000001d80)='/sys/kernel/debug/o2hb/failed_regions\x00', 0x200, 0x0) ioctl$auto_CEC_DQEVENT(r0, 0xc0506107, &(0x7f0000000280)={0x4, 0x3, 0xa, @state_change={0xc, 0x6, 0x8}}) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80502, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f00000000c0)) prctl$auto_PR_GET_SPECULATION_CTRL(0x34, 0x10, 0xffffffffffffffff, 0x8000, 0x8acb) write$auto(0xffffffffffffffff, 0x0, 0x7) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC1\x00', 0x20400, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x8c300, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0x80000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x6, 0x1, 0x948b, 0x3, 0x1, 0x572f14dc, 0x80000000, 0x80000000, 0x0, 0x7, 0x6d3e, 0x7, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1fe, 0x3, 0xd, 0x1, 0x948b, 0x0, 0x15f4da0a, 0x41000000003, 0x9, 0x62, 0x8000001b, 0x7, 0x6d3e, 0x9, 0x2, 0x200]}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x814) madvise$auto(0x0, 0xffffffffffff0001, 0x15) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000002180)='/dev/snd/pcmC0D0p\x00', 0x0, 0x0) fcntl$auto(0x3, 0x4, 0xa553) close_range$auto(0x2, 0x8, 0x0) 2.747842586s ago: executing program 3 (id=2805): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/block/parameters/events_dfl_poll_msecs\x00', 0x80002, 0x0) mmap$auto(0x0, 0x4000b, 0x7, 0x9b72, 0x7, 0x28000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) inotify_init1$auto(0x3000000000000) socket$nl_generic(0x10, 0x3, 0x10) socket(0x25, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x15, 0x5, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x183042, 0x0) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, 0x0, 0x100382, 0x0) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) socket(0x1d, 0x2, 0x7) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x0) inotify_init1$auto(0x3000000000000) socket(0xa, 0x2, 0x3a) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) socketpair$auto(0x1, 0x5, 0xfffffffd, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) open(0x0, 0x22240, 0x55) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$auto(0x3, 0x40106f52, r0) 2.425314653s ago: executing program 3 (id=2806): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram6\x00', 0x4040, 0x0) write$auto_tty_fops_tty_io(r0, &(0x7f0000000280)="352c8efa618c0bcf83a4ebdb278754e15f", 0x11) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) ioctl$auto(0xffffffffffffffff, 0x8912, 0x38) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xfffffffffffffffe, 0x8000) ustat$auto(0x801, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) writev$auto(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x40}, 0x8) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) madvise$auto(0x0, 0x2003f0, 0x15) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0xff1, 0x8000) io_uring_setup$auto(0x1, 0x0) bpf$auto(0x5, 0x0, 0x102) getpid() r2 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000164c0), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_SCAN(r3, &(0x7f00000165c0)={0x0, 0x0, &(0x7f0000016580)={&(0x7f0000000140)={0x14, r4, 0xd3ac6c422733a379, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) read$auto(r2, 0x0, 0xb4d3) write$auto(0x3, 0x0, 0xffd8) ioprio_get$auto_IOPRIO_WHO_PGRP(0x2, 0x0) 2.389698533s ago: executing program 2 (id=2807): openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/virt_wifi0/router_solicitations\x00', 0x101202, 0x0) socket(0x2, 0x3, 0xa) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0xa, 0x0) r0 = socket(0xa, 0x2, 0x0) r1 = socket(0xa, 0x3, 0xff) connect$auto(r1, &(0x7f00000018c0)=@generic={0xa}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x3f) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x1ffff000, 0x7, 0x100000000) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x20000000000006, 0x2) shmget$auto(0x8, 0x10563, 0x568d1af2) syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000040), r0) getpgid$auto(0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/bus/usb/001/001\x00', 0x29202, 0x0) 1.892545076s ago: executing program 0 (id=2808): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8400) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) socket(0x1a, 0x800, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) r1 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @loopback}, 0x6a) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x5, 0x0, 0x1f, 0x9}, 0x800009}, 0x3, 0x20000000) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x2f, 0x0, 0x6) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) sendfile$auto(0x1, 0x3, 0x0, 0x0) mbind$auto(0x2000, 0x100000004, 0x5, 0x0, 0xffffffffffffff39, 0xffffffff) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) write$auto(0x3, 0x0, 0xfffffdef) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) mmap$auto(0x0, 0x7, 0x4000000000df, 0xeb1, 0x400, 0x8000) 1.434569853s ago: executing program 1 (id=2809): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D0\x00', 0x109302, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000000)=""/53, 0x35) select$auto(0x7, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) msgrcv$auto(0x71, &(0x7f0000000040)={0x4, 0x7}, 0x0, 0x7fffffffffffffff, 0x5) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty46\x00', 0x0, 0x0) ioctl$auto(r1, 0x540a, 0x0) setsockopt$auto(0xffffffffffffffff, 0x29, 0x21, 0x0, 0x18000113) select$auto(0x3, 0x0, 0x0, 0x0, 0x0) openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, 0x0, 0x582, 0x0) utimes$auto(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={0x8, 0x4}) mmap$auto(0x2000000004, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0xddf) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) io_uring_setup$auto(0x6, 0x0) r2 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x2, 0x0) write$auto_sg_fops_sg(r2, &(0x7f0000001380)="4a0200000000040000899edb615550fd8c44924d87f0010047eb02eff5d2adc245a4e1eded0e91b86c61b6b42ed6", 0x2e) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 791.068241ms ago: executing program 2 (id=2810): unshare$auto(0x40000080) 416.646213ms ago: executing program 0 (id=2811): r0 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x15, 0x5, 0x0) setsockopt$auto(0x3, 0x114, 0xa, 0x0, 0x4) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, 0x0, 0x4004010) r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000fcdbdf25040000000400100008000cf1edfba1d1e45aea61b8f7020700000002681af944a5465101930e1f4b991ef2f10f485ddf80e07251de39066555baed365ef3"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) close_range$auto(r0, 0x8, 0x0) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r1) brk$auto(0xffffffffffffff66) write$auto_tty_fops_tty_io(0xffffffffffffffff, &(0x7f0000000300)="352c8efa618c0bcf83a4ebdb278754e15f334a572cad539da201096bbbc2ce7db19c429be7137d848ef31b38b0b3c7da1c61fef8e0e24e400f96eb989b4f68220f90f3df243e352f17abbc44e0cfececd72dc611200c0fc4cb84d1fc175dc31b38e002c53627c31e0f3a31c079ae368fd33dfdfc97f40f7f", 0x78) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000200), 0x84200, 0x0) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtd0ro\x00', 0x800, 0x0) sendmsg$auto_NL80211_CMD_TDLS_CHANNEL_SWITCH(r1, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="cc000000", @ANYRES16=r3, @ANYBLOB="01002dbd7000fcdbdf256f0000000500d5000500000008001f01060000009e00bd004c59080974edf6e2f7df838fc99571f987047ddd4500b8d4eb66ab1c3eb74de348f2527e80024987ed12f626e267080de8ea6039ac549cb1f5a877d62de0757e764a0231e7ef8647883e3bfb0b5297c36eb225267f0fb849f9fdbf50233dedcf85441d4fe6ca9de163d3a565f0c2ff599c0308af4a0f01a34a1961eba6aea679d7f16f3ad2cb9ebce2bd74e094fbaabec699f5e3aed9eb26075e00000500d20008000000b0acbec656a5a93455b224772ae945dd3fca78967e215b3f1e4dde2bffc3bfd9932d83d208d986a93e26982d51a8f2d2a59f0b83988b5ded03cdf59d85bb537f6707b099fda65a1fcbb36a905ceb5f9342014f96f1b2286ab5c2aebe607ce6911d71fdbe4e42e63c1d3ba59a7ee34cb71457c5174d491ce3a626887f2bd26d8456be36dfecd165e3fc98e5c5c6cf4ce56de5abf7d523aaff54273a366183abe1305627ab5a28cc1ecce217619e143ba1f977"], 0xcc}, 0x1, 0x0, 0x0, 0x4040}, 0xc000) mmap$auto(0x8, 0x2, 0xea2, 0x24f0c8f3, r1, 0xda3) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) r5 = ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) fstatfs$auto(r5, 0x0) 256.150986ms ago: executing program 2 (id=2812): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x15, 0x5, 0x0) socket(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x3, 0x2) socket(0x15, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x2000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) timer_getoverrun$auto(0x8) read$auto(r0, 0x0, 0x1f40) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f00000000c0)={0x0, 0xffffffff}, 0x6) close_range$auto(0x2, 0x8, 0x0) bind$auto(0x3, 0x0, 0x6b) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f00000018c0)=@in={0x2, 0x300, @loopback=0xac14140a}, 0x55) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x5, 0x0) shutdown$auto(0x200000003, 0x2) 179.99694ms ago: executing program 3 (id=2813): openat$auto_nvmf_dev_fops_fabrics(0xffffffffffffff9c, 0x0, 0x90203, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x6, 0x800, 0x8) getsockopt$auto(0xffffffffffffffff, 0x11c, 0xfffffffe, 0x0, 0x0) sendmsg$auto_NFC_CMD_DEP_LINK_UP(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0xc0, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_POWERED={0x5, 0xc, 0x6}, @NFC_ATTR_VENDOR_DATA={0xa2, 0x1f, "ca72646b662e7358493422bc8fe442ae9826bbe6397ee610c070ced27bcbcfd6804e0400e095be877aa26bd87ec7d8a584a05feab347f4d1ca3cfe4fab39a47018a78203b7e1f45c8e73a4b79ec8ef871db7bf7eb5432dedce20f9113b52c982aa1b58b2d3a0f1bea40635e52e20d06af5ec75c199a249ee224c07fe4ee7cc69f50415f093a8e7af5e8bebb83781b5e7cb44dc8f296cd8d7ac74f8dbd8ac"}]}, 0xc0}, 0x1, 0x0, 0x0, 0x40005}, 0x8000) r0 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) write$auto(r0, &(0x7f0000000040)='nbd\x00', 0x4) r1 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) mmap$auto(0x0, 0xffff, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) io_uring_setup$auto(0x87, 0x0) clone$auto(0x1ff00, 0x0, 0x0, 0x0, 0x9) exit$auto(0x7) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r2, 0x0, 0x800) getsockopt$auto(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, 0x0, 0xa2741, 0x0) adjtimex$auto(&(0x7f00000004c0)={0x23, 0x0, 0x0, 0xfffffffffffffffd, 0x3, 0x3, 0x2, 0x0, 0x3, 0x8, 0x2, {0x2100000000, 0x1000010000}, 0xfffffffffffffffc, 0x73d, 0xffffffffffffffdd, 0x1008001, 0x0, 0x6, 0x21b, 0xffffffff, 0xa745, 0x6, 0x1000}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0xa2100, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket(0x18, 0x5, 0x2) set_mempolicy$auto(0x8003, &(0x7f0000000280)=0x7b, 0x3) gettid() kexec_load$auto(0x7, 0x2, &(0x7f0000000040)={@buf=&(0x7f0000000140)="5bafd56c2c122bc0003f91ad0e2963b1259c512c75114cd1bf833777c5f1aa905ac6eaa258e2aca172f1b2fb7932baaa9e", 0x2aa7, 0x6c0000c000, 0xc000}, 0x4) write$auto_console_fops_tty_io(r1, &(0x7f0000000440)="671d264add69b6440843b6e6688a2b5ad9df2669e6f9cd236532b20ed763ac8caf4bde4c30b530ac6ebbff950e1a647d6a08a1b55dde5a409b4d", 0x3a) 0s ago: executing program 2 (id=2814): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto_BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={"6a95fb871712b7b953f18f982600960ad111411be8ac47c2164cf791ec7b1333", 0x9, 0x8, 0x2, 0x3, 0x9, 0xffffffffffffffff}) capset$auto(0x0, &(0x7f0000000100)={0x1000, 0xef, 0x5}) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) r1 = socket(0xa, 0x1, 0x84) getsockopt$auto(r1, 0x84, 0x1b, 0x0, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2) socket(0x2, 0x1, 0x0) r2 = openat$auto_ftrace_event_id_fops_trace_events(0xffffffffffffff9c, 0x0, 0xa2000, 0x0) read$auto_ftrace_event_id_fops_trace_events(r2, 0x0, 0x0) socket(0x11, 0x80003, 0x300) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) select$auto(0x5, &(0x7f00000001c0)={[0x1, 0x2, 0x8, 0x0, 0x8000, 0x3, 0x8, 0x5, 0x81, 0x0, 0x9, 0xe, 0x4, 0x1, 0x5, 0x8]}, &(0x7f0000000240)={[0x6, 0x6, 0x9, 0xfffffffffffffff4, 0x9, 0x2, 0x1, 0x1, 0x8000000000000000, 0x10, 0x4, 0x8, 0x100000000, 0x8, 0x9, 0x1000]}, &(0x7f00000002c0)={[0x0, 0xfffffffffffffffd, 0x2, 0x3, 0x4, 0xa398, 0x2, 0x80, 0x4, 0x597, 0x3, 0x400, 0x7, 0x40, 0x10000, 0x80000001]}, &(0x7f0000000340)={0x1, 0x9}) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0x100082) socket(0x2, 0x3, 0xa) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) sendto$auto(0x3, 0x0, 0xf, 0xe, &(0x7f0000000180)=@in={0x2, 0x4e20, @broadcast}, 0x1a) kernel console output (not intermixed with test programs): 9371][T14678] [ 502.839377][T14678] dump_stack_lvl+0x16c/0x1f0 [ 502.839404][T14678] should_fail_ex+0x512/0x640 [ 502.839423][T14678] ? __kmalloc_noprof+0xbf/0x510 [ 502.839444][T14678] ? drm_atomic_state_init+0xe4/0x320 [ 502.839459][T14678] should_failslab+0xc2/0x120 [ 502.839473][T14678] __kmalloc_noprof+0xd2/0x510 [ 502.839496][T14678] drm_atomic_state_init+0xe4/0x320 [ 502.839511][T14678] ? __kasan_kmalloc+0xaa/0xb0 [ 502.839531][T14678] drm_atomic_state_alloc+0xd3/0x120 [ 502.839546][T14678] drm_client_modeset_commit_atomic+0xcc/0x7e0 [ 502.839562][T14678] ? __pfx___might_resched+0x10/0x10 [ 502.839578][T14678] ? rcu_is_watching+0x12/0xc0 [ 502.839592][T14678] ? trace_contention_end+0xdd/0x130 [ 502.839609][T14678] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 502.839644][T14678] drm_client_modeset_commit_locked+0x14d/0x580 [ 502.839662][T14678] drm_client_modeset_commit+0x4f/0x80 [ 502.839677][T14678] __drm_fb_helper_restore_fbdev_mode_unlocked+0x19f/0x200 [ 502.839699][T14678] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 502.839718][T14678] drm_fbdev_client_restore+0x2c/0x40 [ 502.839735][T14678] drm_client_dev_restore+0x1f3/0x2a0 [ 502.839753][T14678] drm_release+0x2c4/0x360 [ 502.839767][T14678] ? __pfx_drm_release+0x10/0x10 [ 502.839779][T14678] __fput+0x3ff/0xb70 [ 502.839797][T14678] task_work_run+0x14d/0x240 [ 502.839818][T14678] ? __pfx_task_work_run+0x10/0x10 [ 502.839837][T14678] ? __pfx___do_sys_close_range+0x10/0x10 [ 502.839861][T14678] exit_to_user_mode_loop+0xeb/0x110 [ 502.839882][T14678] do_syscall_64+0x3f6/0x490 [ 502.839904][T14678] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.839919][T14678] RIP: 0033:0x7f34fd38e929 [ 502.839931][T14678] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 502.839944][T14678] RSP: 002b:00007f34fe14e038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 502.839957][T14678] RAX: 0000000000000000 RBX: 00007f34fd5b5fa0 RCX: 00007f34fd38e929 [ 502.839966][T14678] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 502.839974][T14678] RBP: 00007f34fd410b39 R08: 0000000000000000 R09: 0000000000000000 [ 502.839983][T14678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 502.839991][T14678] R13: 0000000000000000 R14: 00007f34fd5b5fa0 R15: 00007ffc90af6cb8 [ 502.840011][T14678] [ 503.419327][T14685] FAULT_INJECTION: forcing a failure. [ 503.419327][T14685] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 503.441693][T14685] CPU: 1 UID: 0 PID: 14685 Comm: syz.2.2119 Tainted: G U 6.16.0-rc3-syzkaller-00121-gf02769e7f272 #0 PREEMPT(full) [ 503.441718][T14685] Tainted: [U]=USER [ 503.441723][T14685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 503.441732][T14685] Call Trace: [ 503.441738][T14685] [ 503.441743][T14685] dump_stack_lvl+0x16c/0x1f0 [ 503.441769][T14685] should_fail_ex+0x512/0x640 [ 503.441791][T14685] __fpu_restore_sig+0xfe/0x13a0 [ 503.441811][T14685] ? __pfx___fpu_restore_sig+0x10/0x10 [ 503.441836][T14685] ? __might_fault+0xe3/0x190 [ 503.441856][T14685] ? __might_fault+0x13b/0x190 [ 503.441878][T14685] fpu__restore_sig+0x151/0x190 [ 503.441896][T14685] restore_sigcontext+0x4c9/0x6a0 [ 503.441911][T14685] ? __pfx_restore_sigcontext+0x10/0x10 [ 503.441939][T14685] ? __pfx_restore_altstack+0x10/0x10 [ 503.441958][T14685] ? _raw_spin_unlock_irq+0x23/0x50 [ 503.441975][T14685] ? lockdep_hardirqs_on+0x7c/0x110 [ 503.441997][T14685] __do_sys_rt_sigreturn+0x1bb/0x230 [ 503.442012][T14685] ? __pfx___do_sys_rt_sigreturn+0x10/0x10 [ 503.442032][T14685] do_syscall_64+0xcd/0x490 [ 503.442053][T14685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.442067][T14685] RIP: 0033:0x7f980c78e927 [ 503.442079][T14685] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 503.442092][T14685] RSP: 002b:00007f980d6ce038 EFLAGS: 00000246 [ 503.442103][T14685] RAX: 0000000000000000 RBX: 00007f980c9b5fa0 RCX: 00007f980c78e929 [ 503.442112][T14685] RDX: 00000000000003ff RSI: 0000000000000000 RDI: 0000000000000003 [ 503.442120][T14685] RBP: 00007f980c810b39 R08: 0000000000000000 R09: 0000000000000000 [ 503.442128][T14685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 503.442136][T14685] R13: 0000000000000000 R14: 00007f980c9b5fa0 R15: 00007ffd912a90d8 [ 503.442154][T14685] [ 503.936995][T14705] FAULT_INJECTION: forcing a failure. [ 503.936995][T14705] name failslab, interval 1, probability 0, space 0, times 0 [ 504.015019][T14705] CPU: 1 UID: 0 PID: 14705 Comm: syz.3.2125 Tainted: G U 6.16.0-rc3-syzkaller-00121-gf02769e7f272 #0 PREEMPT(full) [ 504.015044][T14705] Tainted: [U]=USER [ 504.015049][T14705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 504.015058][T14705] Call Trace: [ 504.015063][T14705] [ 504.015068][T14705] dump_stack_lvl+0x16c/0x1f0 [ 504.015093][T14705] should_fail_ex+0x512/0x640 [ 504.015113][T14705] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 504.015133][T14705] should_failslab+0xc2/0x120 [ 504.015147][T14705] __kmalloc_cache_noprof+0x6a/0x3e0 [ 504.015164][T14705] ? percpu_ref_init+0xec/0x410 [ 504.015181][T14705] ? __pfx_io_ring_ctx_ref_free+0x10/0x10 [ 504.015201][T14705] percpu_ref_init+0xec/0x410 [ 504.015219][T14705] io_uring_setup+0x453/0x2080 [ 504.015238][T14705] ? __pfx_io_uring_setup+0x10/0x10 [ 504.015253][T14705] ? do_futex+0x122/0x350 [ 504.015276][T14705] ? __pfx_do_futex+0x10/0x10 [ 504.015293][T14705] ? fd_install+0x225/0x750 [ 504.015319][T14705] ? xfd_validate_state+0x61/0x180 [ 504.015337][T14705] ? __pfx_do_writev+0x10/0x10 [ 504.015359][T14705] __x64_sys_io_uring_setup+0xc2/0x170 [ 504.015378][T14705] do_syscall_64+0xcd/0x490 [ 504.015399][T14705] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.015413][T14705] RIP: 0033:0x7f34fd38e929 [ 504.015424][T14705] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 504.015437][T14705] RSP: 002b:00007f34fe14e038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 504.015450][T14705] RAX: ffffffffffffffda RBX: 00007f34fd5b5fa0 RCX: 00007f34fd38e929 [ 504.015460][T14705] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000001 [ 504.015468][T14705] RBP: 00007f34fd410b39 R08: 0000000000000000 R09: 0000000000000000 [ 504.015477][T14705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 504.015485][T14705] R13: 0000000000000000 R14: 00007f34fd5b5fa0 R15: 00007ffc90af6cb8 [ 504.015502][T14705] [ 504.641493][T14709] Process accounting resumed [ 504.661426][T14714] Process accounting resumed [ 504.801074][T14716] Process accounting resumed [ 504.920386][T14729] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2132'. [ 504.970757][T14729] caif0: entered promiscuous mode [ 505.020642][T14725] sctp: [Deprecated]: syz.2.2131 (pid 14725) Use of int in max_burst socket option deprecated. [ 505.020642][T14725] Use struct sctp_assoc_value instead [ 505.051424][T14732] Process accounting resumed [ 505.177786][T14736] netlink: 146 bytes leftover after parsing attributes in process `syz.3.2134'. [ 505.601748][T14749] FAULT_INJECTION: forcing a failure. [ 505.601748][T14749] name failslab, interval 1, probability 0, space 0, times 0 [ 505.619909][T14746] Process accounting resumed [ 505.668029][T14749] CPU: 1 UID: 0 PID: 14749 Comm: syz.3.2136 Tainted: G U 6.16.0-rc3-syzkaller-00121-gf02769e7f272 #0 PREEMPT(full) [ 505.668054][T14749] Tainted: [U]=USER [ 505.668059][T14749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 505.668067][T14749] Call Trace: [ 505.668072][T14749] [ 505.668078][T14749] dump_stack_lvl+0x16c/0x1f0 [ 505.668103][T14749] should_fail_ex+0x512/0x640 [ 505.668123][T14749] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 505.668144][T14749] should_failslab+0xc2/0x120 [ 505.668157][T14749] __kmalloc_cache_noprof+0x6a/0x3e0 [ 505.668175][T14749] ? mark_held_locks+0x49/0x80 [ 505.668191][T14749] ? rfkill_fop_open+0x1b6/0x750 [ 505.668210][T14749] rfkill_fop_open+0x1b6/0x750 [ 505.668229][T14749] ? __pfx_rfkill_fop_open+0x10/0x10 [ 505.668245][T14749] misc_open+0x35d/0x420 [ 505.668262][T14749] ? __pfx_misc_open+0x10/0x10 [ 505.668278][T14749] chrdev_open+0x231/0x6a0 [ 505.668303][T14749] ? __pfx_apparmor_file_open+0x10/0x10 [ 505.668322][T14749] ? __pfx_chrdev_open+0x10/0x10 [ 505.668343][T14749] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 505.668365][T14749] do_dentry_open+0x744/0x1c10 [ 505.668384][T14749] ? __pfx_chrdev_open+0x10/0x10 [ 505.668407][T14749] vfs_open+0x82/0x3f0 [ 505.668424][T14749] path_openat+0x1de4/0x2cb0 [ 505.668449][T14749] ? __pfx_path_openat+0x10/0x10 [ 505.668468][T14749] ? __lock_acquire+0xb8a/0x1c90 [ 505.668487][T14749] do_filp_open+0x20b/0x470 [ 505.668506][T14749] ? __pfx_do_filp_open+0x10/0x10 [ 505.668538][T14749] ? alloc_fd+0x471/0x7d0 [ 505.668561][T14749] do_sys_openat2+0x11b/0x1d0 [ 505.668575][T14749] ? __pfx_do_sys_openat2+0x10/0x10 [ 505.668597][T14749] __x64_sys_openat+0x174/0x210 [ 505.668612][T14749] ? __pfx___x64_sys_openat+0x10/0x10 [ 505.668635][T14749] do_syscall_64+0xcd/0x490 [ 505.668659][T14749] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.668673][T14749] RIP: 0033:0x7f34fd38e929 [ 505.668685][T14749] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 505.668698][T14749] RSP: 002b:00007f34fe14e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 505.668712][T14749] RAX: ffffffffffffffda RBX: 00007f34fd5b5fa0 RCX: 00007f34fd38e929 [ 505.668721][T14749] RDX: 0000000000080480 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 505.668730][T14749] RBP: 00007f34fd410b39 R08: 0000000000000000 R09: 0000000000000000 [ 505.668739][T14749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 505.668747][T14749] R13: 0000000000000000 R14: 00007f34fd5b5fa0 R15: 00007ffc90af6cb8 [ 505.668766][T14749] [ 506.077246][T14759] netlink: 330 bytes leftover after parsing attributes in process `syz.3.2139'. [ 506.373677][T14771] Process accounting resumed [ 506.948693][T14777] FAULT_INJECTION: forcing a failure. [ 506.948693][T14777] name failslab, interval 1, probability 0, space 0, times 0 [ 507.016929][T14777] CPU: 1 UID: 0 PID: 14777 Comm: syz.2.2142 Tainted: G U 6.16.0-rc3-syzkaller-00121-gf02769e7f272 #0 PREEMPT(full) [ 507.016956][T14777] Tainted: [U]=USER [ 507.016961][T14777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 507.016970][T14777] Call Trace: [ 507.016975][T14777] [ 507.016981][T14777] dump_stack_lvl+0x16c/0x1f0 [ 507.017012][T14777] should_fail_ex+0x512/0x640 [ 507.017031][T14777] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 507.017054][T14777] should_failslab+0xc2/0x120 [ 507.017068][T14777] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 507.017087][T14777] ? __kernfs_new_node+0xd2/0x8e0 [ 507.017107][T14777] __kernfs_new_node+0xd2/0x8e0 [ 507.017127][T14777] ? __pfx___kernfs_new_node+0x10/0x10 [ 507.017150][T14777] ? find_held_lock+0x2b/0x80 [ 507.017164][T14777] ? kernfs_root+0xee/0x2a0 [ 507.017185][T14777] kernfs_new_node+0x13c/0x1e0 [ 507.017207][T14777] __kernfs_create_file+0x53/0x350 [ 507.017225][T14777] sysfs_add_file_mode_ns+0x207/0x3c0 [ 507.017249][T14777] sysfs_merge_group+0x1aa/0x340 [ 507.017268][T14777] ? __pfx_sysfs_merge_group+0x10/0x10 [ 507.017289][T14777] ? __pfx_dev_add_physical_location+0x10/0x10 [ 507.017311][T14777] ? bus_to_subsys+0x131/0x160 [ 507.017329][T14777] dpm_sysfs_add+0x237/0x280 [ 507.017343][T14777] device_add+0x9a6/0x1a70 [ 507.017358][T14777] ? __pfx_device_add+0x10/0x10 [ 507.017370][T14777] ? __pfx___mutex_lock+0x10/0x10 [ 507.017391][T14777] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 507.017414][T14777] input_register_device+0x7e8/0x1130 [ 507.017436][T14777] uinput_ioctl_handler.isra.0+0x1357/0x1df0 [ 507.017452][T14777] ? __pfx_uinput_ioctl_handler.isra.0+0x10/0x10 [ 507.017471][T14777] ? find_held_lock+0x2b/0x80 [ 507.017493][T14777] ? __pfx_uinput_ioctl+0x10/0x10 [ 507.017508][T14777] __x64_sys_ioctl+0x18b/0x210 [ 507.017526][T14777] do_syscall_64+0xcd/0x490 [ 507.017547][T14777] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.017561][T14777] RIP: 0033:0x7f980c78e929 [ 507.017573][T14777] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 507.017586][T14777] RSP: 002b:00007f980d6ce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 507.017599][T14777] RAX: ffffffffffffffda RBX: 00007f980c9b5fa0 RCX: 00007f980c78e929 [ 507.017608][T14777] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000006 [ 507.017616][T14777] RBP: 00007f980c810b39 R08: 0000000000000000 R09: 0000000000000000 [ 507.017624][T14777] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 507.017632][T14777] R13: 0000000000000000 R14: 00007f980c9b5fa0 R15: 00007ffd912a90d8 [ 507.017650][T14777] [ 508.051338][T14793] Process accounting resumed [ 508.361025][T14801] Process accounting resumed [ 508.736351][T14811] Process accounting resumed [ 509.354595][T14834] sp0: Synchronizing with TNC [ 509.957189][T14849] Process accounting resumed [ 510.234623][T14853] Process accounting resumed [ 510.267722][T14856] Process accounting resumed [ 510.825443][T14869] FAULT_INJECTION: forcing a failure. [ 510.825443][T14869] name failslab, interval 1, probability 0, space 0, times 0 [ 510.882563][T14869] CPU: 1 UID: 0 PID: 14869 Comm: syz.1.2168 Tainted: G U 6.16.0-rc3-syzkaller-00121-gf02769e7f272 #0 PREEMPT(full) [ 510.882596][T14869] Tainted: [U]=USER [ 510.882601][T14869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 510.882609][T14869] Call Trace: [ 510.882614][T14869] [ 510.882621][T14869] dump_stack_lvl+0x16c/0x1f0 [ 510.882646][T14869] should_fail_ex+0x512/0x640 [ 510.882668][T14869] should_failslab+0xc2/0x120 [ 510.882683][T14869] __kmalloc_cache_noprof+0x6a/0x3e0 [ 510.882702][T14869] ? sctp_add_bind_addr+0xae/0x3f0 [ 510.882725][T14869] sctp_add_bind_addr+0xae/0x3f0 [ 510.882746][T14869] sctp_copy_local_addr_list+0x39d/0x5a0 [ 510.882764][T14869] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 510.882780][T14869] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 510.882799][T14869] ? sctp_bind_addr_copy+0x331/0x530 [ 510.882817][T14869] sctp_bind_addr_copy+0x331/0x530 [ 510.882840][T14869] sctp_connect_new_asoc+0x1d7/0x790 [ 510.882858][T14869] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 510.882878][T14869] ? sctp_get_af_specific+0x62/0x70 [ 510.882894][T14869] __sctp_connect+0x3f3/0xc60 [ 510.882912][T14869] ? do_raw_spin_lock+0x12c/0x2b0 [ 510.882933][T14869] ? __pfx___sctp_connect+0x10/0x10 [ 510.882950][T14869] ? __pfx_sctp_inet_connect+0x10/0x10 [ 510.882967][T14869] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 510.882988][T14869] ? __pfx_sctp_inet_connect+0x10/0x10 [ 510.883003][T14869] sctp_inet_connect+0x15f/0x200 [ 510.883020][T14869] __sys_connect_file+0x141/0x1a0 [ 510.883040][T14869] __sys_connect+0x13b/0x160 [ 510.883056][T14869] ? __pfx___sys_connect+0x10/0x10 [ 510.883079][T14869] ? xfd_validate_state+0x61/0x180 [ 510.883096][T14869] ? __pfx___do_sys_close_range+0x10/0x10 [ 510.883119][T14869] __x64_sys_connect+0x72/0xb0 [ 510.883135][T14869] ? lockdep_hardirqs_on+0x7c/0x110 [ 510.883154][T14869] do_syscall_64+0xcd/0x490 [ 510.883174][T14869] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.883189][T14869] RIP: 0033:0x7fee9998e929 [ 510.883202][T14869] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 510.883216][T14869] RSP: 002b:00007fee9a7a2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 510.883230][T14869] RAX: ffffffffffffffda RBX: 00007fee99bb5fa0 RCX: 00007fee9998e929 [ 510.883240][T14869] RDX: 0000000000000055 RSI: 0000000000000000 RDI: 0000000000000003 [ 510.883249][T14869] RBP: 00007fee99a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 510.883257][T14869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 510.883266][T14869] R13: 0000000000000000 R14: 00007fee99bb5fa0 R15: 00007fffcf67e8a8 [ 510.883284][T14869] [ 511.957004][T14873] zswap: compressor not available [ 512.402173][T14888] Process accounting resumed [ 512.633132][T14897] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input20 [ 513.008214][T14899] Process accounting resumed [ 513.227013][T14910] sp0: Synchronizing with TNC [ 513.589850][T14914] FAULT_INJECTION: forcing a failure. [ 513.589850][T14914] name failslab, interval 1, probability 0, space 0, times 0 [ 513.672001][T14914] CPU: 1 UID: 0 PID: 14914 Comm: syz.0.2180 Tainted: G U 6.16.0-rc3-syzkaller-00121-gf02769e7f272 #0 PREEMPT(full) [ 513.672028][T14914] Tainted: [U]=USER [ 513.672033][T14914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 513.672041][T14914] Call Trace: [ 513.672047][T14914] [ 513.672053][T14914] dump_stack_lvl+0x16c/0x1f0 [ 513.672078][T14914] should_fail_ex+0x512/0x640 [ 513.672097][T14914] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 513.672120][T14914] should_failslab+0xc2/0x120 [ 513.672133][T14914] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 513.672153][T14914] ? __kernfs_new_node+0xd2/0x8e0 [ 513.672173][T14914] __kernfs_new_node+0xd2/0x8e0 [ 513.672193][T14914] ? __pfx___kernfs_new_node+0x10/0x10 [ 513.672216][T14914] ? find_held_lock+0x2b/0x80 [ 513.672230][T14914] ? kernfs_root+0xee/0x2a0 [ 513.672251][T14914] kernfs_new_node+0x13c/0x1e0 [ 513.672274][T14914] __kernfs_create_file+0x53/0x350 [ 513.672291][T14914] sysfs_add_file_mode_ns+0x207/0x3c0 [ 513.672312][T14914] sysfs_merge_group+0x1aa/0x340 [ 513.672331][T14914] ? __pfx_sysfs_merge_group+0x10/0x10 [ 513.672357][T14914] ? __pfx_dev_add_physical_location+0x10/0x10 [ 513.672380][T14914] ? bus_to_subsys+0x131/0x160 [ 513.672401][T14914] dpm_sysfs_add+0x237/0x280 [ 513.672416][T14914] device_add+0x9a6/0x1a70 [ 513.672432][T14914] ? __pfx_device_add+0x10/0x10 [ 513.672444][T14914] ? __pfx___mutex_lock+0x10/0x10 [ 513.672465][T14914] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 513.672489][T14914] input_register_device+0x7e8/0x1130 [ 513.672510][T14914] uinput_ioctl_handler.isra.0+0x1357/0x1df0 [ 513.672528][T14914] ? __pfx_uinput_ioctl_handler.isra.0+0x10/0x10 [ 513.672547][T14914] ? find_held_lock+0x2b/0x80 [ 513.672568][T14914] ? __pfx_uinput_ioctl+0x10/0x10 [ 513.672582][T14914] __x64_sys_ioctl+0x18b/0x210 [ 513.672599][T14914] do_syscall_64+0xcd/0x490 [ 513.672629][T14914] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.672643][T14914] RIP: 0033:0x7fa2bed8e929 [ 513.672655][T14914] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 513.672668][T14914] RSP: 002b:00007fa2bcbf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 513.672682][T14914] RAX: ffffffffffffffda RBX: 00007fa2befb5fa0 RCX: 00007fa2bed8e929 [ 513.672691][T14914] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000006 [ 513.672699][T14914] RBP: 00007fa2bee10b39 R08: 0000000000000000 R09: 0000000000000000 [ 513.672707][T14914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 513.672715][T14914] R13: 0000000000000000 R14: 00007fa2befb5fa0 R15: 00007ffc8af42ed8 [ 513.672733][T14914] [ 514.830005][T14948] Process accounting resumed [ 515.080671][T14951] FAULT_INJECTION: forcing a failure. [ 515.080671][T14951] name failslab, interval 1, probability 0, space 0, times 0 [ 515.140570][T14951] CPU: 1 UID: 0 PID: 14951 Comm: syz.1.2187 Tainted: G U 6.16.0-rc3-syzkaller-00121-gf02769e7f272 #0 PREEMPT(full) [ 515.140598][T14951] Tainted: [U]=USER [ 515.140603][T14951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 515.140612][T14951] Call Trace: [ 515.140617][T14951] [ 515.140623][T14951] dump_stack_lvl+0x16c/0x1f0 [ 515.140649][T14951] should_fail_ex+0x512/0x640 [ 515.140668][T14951] ? __kvmalloc_node_noprof+0x124/0x620 [ 515.140690][T14951] should_failslab+0xc2/0x120 [ 515.140703][T14951] __kvmalloc_node_noprof+0x137/0x620 [ 515.140722][T14951] ? io_uring_setup+0x377/0x2080 [ 515.140743][T14951] ? io_uring_setup+0x377/0x2080 [ 515.140757][T14951] io_uring_setup+0x377/0x2080 [ 515.140775][T14951] ? __pfx_io_uring_setup+0x10/0x10 [ 515.140791][T14951] ? do_futex+0x122/0x350 [ 515.140807][T14951] ? __pfx_do_futex+0x10/0x10 [ 515.140825][T14951] ? __pfx___might_resched+0x10/0x10 [ 515.140845][T14951] ? xfd_validate_state+0x61/0x180 [ 515.140862][T14951] ? __pfx___do_sys_close_range+0x10/0x10 [ 515.140885][T14951] __x64_sys_io_uring_setup+0xc2/0x170 [ 515.140902][T14951] do_syscall_64+0xcd/0x490 [ 515.140923][T14951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.140937][T14951] RIP: 0033:0x7fee9998e929 [ 515.140948][T14951] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 515.140961][T14951] RSP: 002b:00007fee9a7a2038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 515.140974][T14951] RAX: ffffffffffffffda RBX: 00007fee99bb5fa0 RCX: 00007fee9998e929 [ 515.140984][T14951] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000058 [ 515.140992][T14951] RBP: 00007fee99a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 515.140999][T14951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 515.141007][T14951] R13: 0000000000000000 R14: 00007fee99bb5fa0 R15: 00007fffcf67e8a8 [ 515.141025][T14951] [ 515.609347][T14961] Process accounting resumed [ 515.773586][T14970] FAULT_INJECTION: forcing a failure. [ 515.773586][T14970] name failslab, interval 1, probability 0, space 0, times 0 [ 515.810339][T14970] CPU: 1 UID: 0 PID: 14970 Comm: syz.3.2194 Tainted: G U 6.16.0-rc3-syzkaller-00121-gf02769e7f272 #0 PREEMPT(full) [ 515.810366][T14970] Tainted: [U]=USER [ 515.810371][T14970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 515.810380][T14970] Call Trace: [ 515.810384][T14970] [ 515.810390][T14970] dump_stack_lvl+0x16c/0x1f0 [ 515.810415][T14970] should_fail_ex+0x512/0x640 [ 515.810434][T14970] ? __kmalloc_noprof+0xbf/0x510 [ 515.810456][T14970] ? cache_create_net+0x9d/0x220 [ 515.810475][T14970] should_failslab+0xc2/0x120 [ 515.810489][T14970] __kmalloc_noprof+0xd2/0x510 [ 515.810512][T14970] cache_create_net+0x9d/0x220 [ 515.810532][T14970] ? __pfx_nfsd_net_init+0x10/0x10 [ 515.810547][T14970] nfsd_export_init+0x62/0x250 [ 515.810562][T14970] ? __pfx_nfsd_net_init+0x10/0x10 [ 515.810575][T14970] nfsd_net_init+0x33/0x3d0 [ 515.810589][T14970] ? __pfx_nfsd_net_init+0x10/0x10 [ 515.810603][T14970] ops_init+0x1e2/0x5f0 [ 515.810625][T14970] setup_net+0x1ff/0x510 [ 515.810637][T14970] ? lockdep_init_map_type+0x5c/0x280 [ 515.810656][T14970] ? __pfx_setup_net+0x10/0x10 [ 515.810670][T14970] ? debug_mutex_init+0x37/0x70 [ 515.810686][T14970] copy_net_ns+0x2a6/0x5f0 [ 515.810702][T14970] create_new_namespaces+0x3ea/0xa90 [ 515.810721][T14970] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 515.810737][T14970] ksys_unshare+0x45b/0xa40 [ 515.810758][T14970] ? __pfx_ksys_unshare+0x10/0x10 [ 515.810776][T14970] ? xfd_validate_state+0x61/0x180 [ 515.810799][T14970] __x64_sys_unshare+0x31/0x40 [ 515.810817][T14970] do_syscall_64+0xcd/0x490 [ 515.810839][T14970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.810853][T14970] RIP: 0033:0x7f34fd38e929 [ 515.810865][T14970] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 515.810877][T14970] RSP: 002b:00007f34fe14e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 515.810891][T14970] RAX: ffffffffffffffda RBX: 00007f34fd5b5fa0 RCX: 00007f34fd38e929 [ 515.810900][T14970] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 515.810908][T14970] RBP: 00007f34fd410b39 R08: 0000000000000000 R09: 0000000000000000 [ 515.810916][T14970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 515.810924][T14970] R13: 0000000000000000 R14: 00007f34fd5b5fa0 R15: 00007ffc90af6cb8 [ 515.810942][T14970] [ 516.340977][T14964] Process accounting resumed [ 516.805574][T14988] Process accounting resumed [ 517.055262][T14997] FAULT_INJECTION: forcing a failure. [ 517.055262][T14997] name failslab, interval 1, probability 0, space 0, times 0 [ 517.131112][T14997] CPU: 1 UID: 0 PID: 14997 Comm: syz.2.2198 Tainted: G U 6.16.0-rc3-syzkaller-00121-gf02769e7f272 #0 PREEMPT(full) [ 517.131140][T14997] Tainted: [U]=USER [ 517.131145][T14997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 517.131154][T14997] Call Trace: [ 517.131159][T14997] [ 517.131165][T14997] dump_stack_lvl+0x16c/0x1f0 [ 517.131189][T14997] should_fail_ex+0x512/0x640 [ 517.131208][T14997] ? __kmalloc_noprof+0xbf/0x510 [ 517.131230][T14997] ? __register_sysctl_table+0xea2/0x1900 [ 517.131250][T14997] should_failslab+0xc2/0x120 [ 517.131264][T14997] __kmalloc_noprof+0xd2/0x510 [ 517.131281][T14997] ? __register_sysctl_table+0xe8e/0x1900 [ 517.131305][T14997] __register_sysctl_table+0xea2/0x1900 [ 517.131329][T14997] ? __pfx___register_sysctl_table+0x10/0x10 [ 517.131349][T14997] ? is_module_address+0x69/0xf0 [ 517.131367][T14997] ? register_net_sysctl_sz+0x228/0x3e0 [ 517.131391][T14997] ? __asan_memcpy+0x3c/0x60 [ 517.131411][T14997] vrf_netns_init+0x152/0x1f0 [ 517.131432][T14997] ? __pfx_vrf_netns_init+0x10/0x10 [ 517.131449][T14997] ops_init+0x1e2/0x5f0 [ 517.131472][T14997] setup_net+0x1ff/0x510 [ 517.131483][T14997] ? lockdep_init_map_type+0x5c/0x280 [ 517.131502][T14997] ? __pfx_setup_net+0x10/0x10 [ 517.131516][T14997] ? debug_mutex_init+0x37/0x70 [ 517.131530][T14997] copy_net_ns+0x2a6/0x5f0 [ 517.131546][T14997] create_new_namespaces+0x3ea/0xa90 [ 517.131565][T14997] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 517.131582][T14997] ksys_unshare+0x45b/0xa40 [ 517.131599][T14997] ? __pfx_ksys_unshare+0x10/0x10 [ 517.131616][T14997] ? xfd_validate_state+0x61/0x180 [ 517.131639][T14997] __x64_sys_unshare+0x31/0x40 [ 517.131655][T14997] do_syscall_64+0xcd/0x490 [ 517.131676][T14997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.131690][T14997] RIP: 0033:0x7f980c78e929 [ 517.131702][T14997] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 517.131718][T14997] RSP: 002b:00007f980d6ce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 517.131732][T14997] RAX: ffffffffffffffda RBX: 00007f980c9b5fa0 RCX: 00007f980c78e929 [ 517.131742][T14997] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 517.131751][T14997] RBP: 00007f980c810b39 R08: 0000000000000000 R09: 0000000000000000 [ 517.131759][T14997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 517.131768][T14997] R13: 0000000000000000 R14: 00007f980c9b5fa0 R15: 00007ffd912a90d8 [ 517.131787][T14997] [ 517.132028][T14997] sysctl could not get directory: /net/vrf -12 [ 517.607571][T14998] Process accounting resumed [ 517.847870][T15012] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2200'. [ 517.885580][T15012] bridge0: port 2(bridge_slave_1) entered disabled state [ 518.204284][T15012] bridge_slave_1 (unregistering): left allmulticast mode [ 518.211990][T15012] bridge_slave_1 (unregistering): left promiscuous mode [ 518.231479][T15012] bridge0: port 2(bridge_slave_1) entered disabled state [ 518.616294][T15026] zram0: detected capacity change from 8 to 0 [ 518.733600][T15023] Process accounting resumed [ 519.017787][T15037] netlink: 'syz.3.2209': attribute type 8 has an invalid length. [ 519.088019][T15041] netlink: 'syz.3.2209': attribute type 8 has an invalid length. [ 519.482211][T15046] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma? [ 519.712941][T15051] FAULT_INJECTION: forcing a failure. [ 519.712941][T15051] name failslab, interval 1, probability 0, space 0, times 0 [ 519.837023][T15051] CPU: 1 UID: 0 PID: 15051 Comm: syz.2.2211 Tainted: G U 6.16.0-rc3-syzkaller-00121-gf02769e7f272 #0 PREEMPT(full) [ 519.837049][T15051] Tainted: [U]=USER [ 519.837053][T15051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 519.837062][T15051] Call Trace: [ 519.837067][T15051] [ 519.837073][T15051] dump_stack_lvl+0x16c/0x1f0 [ 519.837098][T15051] should_fail_ex+0x512/0x640 [ 519.837117][T15051] ? fs_reclaim_acquire+0xae/0x150 [ 519.837135][T15051] ? tomoyo_supervisor+0x45b/0x13b0 [ 519.837154][T15051] should_failslab+0xc2/0x120 [ 519.837168][T15051] __kmalloc_noprof+0xd2/0x510 [ 519.837186][T15051] ? tomoyo_profile+0x47/0x60 [ 519.837209][T15051] tomoyo_supervisor+0x45b/0x13b0 [ 519.837232][T15051] ? __pfx_tomoyo_supervisor+0x10/0x10 [ 519.837251][T15051] ? __pfx_vsnprintf+0x10/0x10 [ 519.837278][T15051] ? tomoyo_encode2+0x329/0x3e0 [ 519.837304][T15051] tomoyo_path_number_perm+0x448/0x580 [ 519.837322][T15051] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 519.837356][T15051] ? find_held_lock+0x2b/0x80 [ 519.837370][T15051] ? hook_file_ioctl_common+0x145/0x410 [ 519.837388][T15051] ? __fget_files+0x20e/0x3c0 [ 519.837409][T15051] security_file_ioctl+0x9b/0x240 [ 519.837427][T15051] __x64_sys_ioctl+0xb7/0x210 [ 519.837444][T15051] do_syscall_64+0xcd/0x490 [ 519.837464][T15051] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.837478][T15051] RIP: 0033:0x7f980c78e929 [ 519.837490][T15051] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 519.837503][T15051] RSP: 002b:00007f980d68c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 519.837516][T15051] RAX: ffffffffffffffda RBX: 00007f980c9b6160 RCX: 00007f980c78e929 [ 519.837526][T15051] RDX: 0000000000000000 RSI: 00000000c0045005 RDI: 0000000000000006 [ 519.837534][T15051] RBP: 00007f980c810b39 R08: 0000000000000000 R09: 0000000000000000 [ 519.837542][T15051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 519.837549][T15051] R13: 0000000000000000 R14: 00007f980c9b6160 R15: 00007ffd912a90d8 [ 519.837567][T15051] [ 520.407718][T15065] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input22 [ 520.844250][T15080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 520.945686][T15080] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 522.035140][T15089] Process accounting resumed [ 523.396393][T15134] Process accounting resumed [ 523.407232][T15137] Process accounting resumed [ 523.730436][T15161] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input23 [ 524.671915][T15178] FAULT_INJECTION: forcing a failure. [ 524.671915][T15178] name failslab, interval 1, probability 0, space 0, times 0 [ 524.760819][T15178] CPU: 1 UID: 0 PID: 15178 Comm: syz.1.2240 Tainted: G U 6.16.0-rc3-syzkaller-00121-gf02769e7f272 #0 PREEMPT(full) [ 524.760846][T15178] Tainted: [U]=USER [ 524.760851][T15178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 524.760860][T15178] Call Trace: [ 524.760865][T15178] [ 524.760871][T15178] dump_stack_lvl+0x16c/0x1f0 [ 524.760896][T15178] should_fail_ex+0x512/0x640 [ 524.760916][T15178] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 524.760938][T15178] should_failslab+0xc2/0x120 [ 524.760952][T15178] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 524.760972][T15178] ? copy_net_ns+0xe8/0x5f0 [ 524.760989][T15178] copy_net_ns+0xe8/0x5f0 [ 524.761001][T15178] ? copy_cgroup_ns+0x71/0x700 [ 524.761017][T15178] create_new_namespaces+0x3ea/0xa90 [ 524.761037][T15178] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 524.761054][T15178] ksys_unshare+0x45b/0xa40 [ 524.761071][T15178] ? __pfx_ksys_unshare+0x10/0x10 [ 524.761089][T15178] ? xfd_validate_state+0x61/0x180 [ 524.761111][T15178] __x64_sys_unshare+0x31/0x40 [ 524.761128][T15178] do_syscall_64+0xcd/0x490 [ 524.761148][T15178] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.761162][T15178] RIP: 0033:0x7fee9998e929 [ 524.761174][T15178] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 524.761186][T15178] RSP: 002b:00007fee9a781038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 524.761200][T15178] RAX: ffffffffffffffda RBX: 00007fee99bb6080 RCX: 00007fee9998e929 [ 524.761209][T15178] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 524.761217][T15178] RBP: 00007fee99a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 524.761225][T15178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 524.761233][T15178] R13: 0000000000000000 R14: 00007fee99bb6080 R15: 00007fffcf67e8a8 [ 524.761250][T15178] [ 525.048389][T15179] Process accounting resumed [ 525.432874][T15190] Process accounting resumed [ 526.304960][T15196] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2254'. [ 526.351405][T15196] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.434221][T15196] bridge_slave_1 (unregistering): left allmulticast mode [ 526.471643][T15196] bridge_slave_1 (unregistering): left promiscuous mode [ 526.492430][T15196] bridge0: port 2(bridge_slave_1) entered disabled state [ 527.613223][T15236] random: crng reseeded on system resumption [ 527.697958][T15228] Process accounting resumed [ 528.310621][T15246] Process accounting resumed [ 529.092774][T15264] Process accounting resumed [ 529.375215][T15274] Process accounting resumed [ 529.600090][T15283] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2278'. [ 529.642765][T15283] bridge0: port 2(bridge_slave_1) entered disabled state [ 529.689630][T15283] bridge_slave_1 (unregistering): left allmulticast mode [ 529.719144][T15283] bridge_slave_1 (unregistering): left promiscuous mode [ 529.765075][T15283] bridge0: port 2(bridge_slave_1) entered disabled state [ 531.206677][T15327] Process accounting resumed [ 531.326116][T15340] FAULT_INJECTION: forcing a failure. [ 531.326116][T15340] name failslab, interval 1, probability 0, space 0, times 0 [ 531.451937][T15340] CPU: 1 UID: 0 PID: 15340 Comm: syz.2.2287 Tainted: G U 6.16.0-rc3-syzkaller-00121-gf02769e7f272 #0 PREEMPT(full) [ 531.451964][T15340] Tainted: [U]=USER [ 531.451969][T15340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 531.451978][T15340] Call Trace: [ 531.451982][T15340] [ 531.451988][T15340] dump_stack_lvl+0x16c/0x1f0 [ 531.452013][T15340] should_fail_ex+0x512/0x640 [ 531.452032][T15340] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 531.452053][T15340] should_failslab+0xc2/0x120 [ 531.452067][T15340] __kmalloc_cache_noprof+0x6a/0x3e0 [ 531.452084][T15340] ? copy_net_ns+0x135/0x5f0 [ 531.452101][T15340] copy_net_ns+0x135/0x5f0 [ 531.452113][T15340] ? copy_cgroup_ns+0x71/0x700 [ 531.452130][T15340] create_new_namespaces+0x3ea/0xa90 [ 531.452150][T15340] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 531.452166][T15340] ksys_unshare+0x45b/0xa40 [ 531.452184][T15340] ? __pfx_ksys_unshare+0x10/0x10 [ 531.452201][T15340] ? xfd_validate_state+0x61/0x180 [ 531.452223][T15340] __x64_sys_unshare+0x31/0x40 [ 531.452240][T15340] do_syscall_64+0xcd/0x490 [ 531.452261][T15340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.452274][T15340] RIP: 0033:0x7f980c78e929 [ 531.452285][T15340] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 531.452298][T15340] RSP: 002b:00007f980d6ad038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 531.452312][T15340] RAX: ffffffffffffffda RBX: 00007f980c9b6080 RCX: 00007f980c78e929 [ 531.452321][T15340] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 531.452329][T15340] RBP: 00007f980c810b39 R08: 0000000000000000 R09: 0000000000000000 [ 531.452337][T15340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 531.452345][T15340] R13: 0000000000000000 R14: 00007f980c9b6080 R15: 00007ffd912a90d8 [ 531.452362][T15340] [ 532.562670][T15354] serio: Serial port pty238 [ 532.709073][T15359] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2292'. [ 532.836048][T15359] bridge0: port 2(bridge_slave_1) entered disabled state [ 533.047899][T15359] bridge_slave_1 (unregistering): left allmulticast mode [ 533.098917][T15359] bridge_slave_1 (unregistering): left promiscuous mode [ 533.156357][T15359] bridge0: port 2(bridge_slave_1) entered disabled state [ 533.298003][T15369] Process accounting resumed [ 533.677989][T15388] Process accounting resumed [ 533.761699][T15392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 533.832742][T15392] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 533.956504][T15401] FAULT_INJECTION: forcing a failure. [ 533.956504][T15401] name failslab, interval 1, probability 0, space 0, times 0 [ 534.027773][T15401] CPU: 1 UID: 0 PID: 15401 Comm: syz.0.2303 Tainted: G U 6.16.0-rc3-syzkaller-00121-gf02769e7f272 #0 PREEMPT(full) [ 534.027800][T15401] Tainted: [U]=USER [ 534.027805][T15401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 534.027813][T15401] Call Trace: [ 534.027818][T15401] [ 534.027824][T15401] dump_stack_lvl+0x16c/0x1f0 [ 534.027849][T15401] should_fail_ex+0x512/0x640 [ 534.027868][T15401] ? __kmalloc_noprof+0xbf/0x510 [ 534.027890][T15401] ? net_alloc_generic+0x1e/0x70 [ 534.027910][T15401] should_failslab+0xc2/0x120 [ 534.027923][T15401] __kmalloc_noprof+0xd2/0x510 [ 534.027941][T15401] ? inc_ucount+0x240/0x2f0 [ 534.027960][T15401] net_alloc_generic+0x1e/0x70 [ 534.027980][T15401] copy_net_ns+0xc6/0x5f0 [ 534.027993][T15401] ? copy_cgroup_ns+0x71/0x700 [ 534.028010][T15401] create_new_namespaces+0x3ea/0xa90 [ 534.028029][T15401] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 534.028045][T15401] ksys_unshare+0x45b/0xa40 [ 534.028063][T15401] ? __pfx_ksys_unshare+0x10/0x10 [ 534.028080][T15401] ? xfd_validate_state+0x61/0x180 [ 534.028102][T15401] __x64_sys_unshare+0x31/0x40 [ 534.028119][T15401] do_syscall_64+0xcd/0x490 [ 534.028140][T15401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.028154][T15401] RIP: 0033:0x7fa2bed8e929 [ 534.028165][T15401] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 534.028178][T15401] RSP: 002b:00007fa2bcbd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 534.028191][T15401] RAX: ffffffffffffffda RBX: 00007fa2befb6080 RCX: 00007fa2bed8e929 [ 534.028200][T15401] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 534.028209][T15401] RBP: 00007fa2bee10b39 R08: 0000000000000000 R09: 0000000000000000 [ 534.028217][T15401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 534.028224][T15401] R13: 0000000000000000 R14: 00007fa2befb6080 R15: 00007ffc8af42ed8 [ 534.028241][T15401] [ 534.508824][T15411] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input24 [ 534.823776][T15415] FAULT_INJECTION: forcing a failure. [ 534.823776][T15415] name failslab, interval 1, probability 0, space 0, times 0 [ 534.878070][T15418] sp0: Synchronizing with TNC [ 534.887171][T15415] CPU: 1 UID: 0 PID: 15415 Comm: syz.3.2311 Tainted: G U 6.16.0-rc3-syzkaller-00121-gf02769e7f272 #0 PREEMPT(full) [ 534.887196][T15415] Tainted: [U]=USER [ 534.887201][T15415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 534.887209][T15415] Call Trace: [ 534.887215][T15415] [ 534.887221][T15415] dump_stack_lvl+0x16c/0x1f0 [ 534.887247][T15415] should_fail_ex+0x512/0x640 [ 534.887266][T15415] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 534.887290][T15415] should_failslab+0xc2/0x120 [ 534.887304][T15415] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 534.887325][T15415] ? kvm_sched_clock_read+0x11/0x20 [ 534.887342][T15415] ? local_clock_noinstr+0xd/0xe0 [ 534.887359][T15415] ? append_filter_err+0x3c0/0x5e0 [ 534.887378][T15415] kmemdup_nul+0x49/0xf0 [ 534.887399][T15415] append_filter_err+0x3c0/0x5e0 [ 534.887417][T15415] apply_subsystem_event_filter+0x740/0x17a0 [ 534.887441][T15415] ? __pfx_apply_subsystem_event_filter+0x10/0x10 [ 534.887462][T15415] ? _copy_from_user+0x59/0xd0 [ 534.887484][T15415] subsystem_filter_write+0x95/0x120 [ 534.887512][T15415] ? __pfx_subsystem_filter_write+0x10/0x10 [ 534.887528][T15415] vfs_write+0x29d/0x1150 [ 534.887551][T15415] ? __pfx___mutex_lock+0x10/0x10 [ 534.887570][T15415] ? __pfx_vfs_write+0x10/0x10 [ 534.887593][T15415] ? __fget_files+0x20e/0x3c0 [ 534.887616][T15415] ksys_write+0x12a/0x250 [ 534.887634][T15415] ? __pfx_ksys_write+0x10/0x10 [ 534.887658][T15415] do_syscall_64+0xcd/0x490 [ 534.887679][T15415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.887693][T15415] RIP: 0033:0x7f34fd38e929 [ 534.887705][T15415] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 534.887718][T15415] RSP: 002b:00007f34fe14e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 534.887731][T15415] RAX: ffffffffffffffda RBX: 00007f34fd5b5fa0 RCX: 00007f34fd38e929 [ 534.887740][T15415] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000006 [ 534.887748][T15415] RBP: 00007f34fd410b39 R08: 0000000000000000 R09: 0000000000000000 [ 534.887756][T15415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 534.887764][T15415] R13: 0000000000000000 R14: 00007f34fd5b5fa0 R15: 00007ffc90af6cb8 [ 534.887782][T15415] [ 535.385375][T15430] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 535.426600][T15430] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 535.635935][T15436] Process accounting resumed [ 535.786615][T15447] FAULT_INJECTION: forcing a failure. [ 535.786615][T15447] name failslab, interval 1, probability 0, space 0, times 0 [ 535.824471][T15449] FAULT_INJECTION: forcing a failure. [ 535.824471][T15449] name failslab, interval 1, probability 0, space 0, times 0 [ 535.841524][T15447] CPU: 1 UID: 0 PID: 15447 Comm: syz.1.2319 Tainted: G U 6.16.0-rc3-syzkaller-00121-gf02769e7f272 #0 PREEMPT(full) [ 535.841549][T15447] Tainted: [U]=USER [ 535.841554][T15447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 535.841562][T15447] Call Trace: [ 535.841567][T15447] [ 535.841573][T15447] dump_stack_lvl+0x16c/0x1f0 [ 535.841598][T15447] should_fail_ex+0x512/0x640 [ 535.841618][T15447] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 535.841640][T15447] should_failslab+0xc2/0x120 [ 535.841654][T15447] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 535.841672][T15447] ? __proc_create+0xc3/0x8c0 [ 535.841691][T15447] ? __proc_create+0x2ce/0x8c0 [ 535.841713][T15447] __proc_create+0x2ce/0x8c0 [ 535.841733][T15447] ? __pfx___proc_create+0x10/0x10 [ 535.841760][T15447] proc_create_reg+0x7d/0x180 [ 535.841774][T15447] proc_create_data+0x86/0x110 [ 535.841787][T15447] ? __pfx_proc_create_data+0x10/0x10 [ 535.841802][T15447] ? net_generic+0xf4/0x2a0 [ 535.841823][T15447] nfsd_net_init+0x11b/0x3d0 [ 535.841839][T15447] ? __pfx_nfsd_net_init+0x10/0x10 [ 535.841853][T15447] ops_init+0x1e2/0x5f0 [ 535.841875][T15447] setup_net+0x1ff/0x510 [ 535.841887][T15447] ? lockdep_init_map_type+0x5c/0x280 [ 535.841905][T15447] ? __pfx_setup_net+0x10/0x10 [ 535.841919][T15447] ? debug_mutex_init+0x37/0x70 [ 535.841935][T15447] copy_net_ns+0x2a6/0x5f0 [ 535.841952][T15447] create_new_namespaces+0x3ea/0xa90 [ 535.841971][T15447] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 535.841987][T15447] ksys_unshare+0x45b/0xa40 [ 535.842005][T15447] ? __pfx_ksys_unshare+0x10/0x10 [ 535.842023][T15447] ? xfd_validate_state+0x61/0x180 [ 535.842046][T15447] __x64_sys_unshare+0x31/0x40 [ 535.842062][T15447] do_syscall_64+0xcd/0x490 [ 535.842083][T15447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.842097][T15447] RIP: 0033:0x7fee9998e929 [ 535.842109][T15447] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 535.842122][T15447] RSP: 002b:00007fee9a7a2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 535.842135][T15447] RAX: ffffffffffffffda RBX: 00007fee99bb5fa0 RCX: 00007fee9998e929 [ 535.842144][T15447] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 535.842152][T15447] RBP: 00007fee99a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 535.842160][T15447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 535.842168][T15447] R13: 0000000000000000 R14: 00007fee99bb5fa0 R15: 00007fffcf67e8a8 [ 535.842188][T15447] [ 536.104692][T15449] CPU: 1 UID: 0 PID: 15449 Comm: syz.0.2320 Tainted: G U 6.16.0-rc3-syzkaller-00121-gf02769e7f272 #0 PREEMPT(full) [ 536.104719][T15449] Tainted: [U]=USER [ 536.104724][T15449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 536.104732][T15449] Call Trace: [ 536.104738][T15449] [ 536.104744][T15449] dump_stack_lvl+0x16c/0x1f0 [ 536.104769][T15449] should_fail_ex+0x512/0x640 [ 536.104788][T15449] ? fs_reclaim_acquire+0xae/0x150 [ 536.104806][T15449] ? tomoyo_encode2+0x100/0x3e0 [ 536.104823][T15449] should_failslab+0xc2/0x120 [ 536.104837][T15449] __kmalloc_noprof+0xd2/0x510 [ 536.104855][T15449] ? d_absolute_path+0x136/0x1a0 [ 536.104877][T15449] tomoyo_encode2+0x100/0x3e0 [ 536.104897][T15449] tomoyo_encode+0x29/0x50 [ 536.104914][T15449] tomoyo_realpath_from_path+0x18f/0x6e0 [ 536.104938][T15449] tomoyo_get_exe+0x63/0xa0 [ 536.104952][T15449] tomoyo_write_control+0x689/0x1430 [ 536.104981][T15449] ? __pfx_tomoyo_write_control+0x10/0x10 [ 536.105006][T15449] ? __pfx_tomoyo_write+0x10/0x10 [ 536.105023][T15449] vfs_write+0x29d/0x1150 [ 536.105045][T15449] ? __pfx___mutex_lock+0x10/0x10 [ 536.105065][T15449] ? __pfx_vfs_write+0x10/0x10 [ 536.105089][T15449] ? __fget_files+0x20e/0x3c0 [ 536.105112][T15449] ksys_write+0x12a/0x250 [ 536.105131][T15449] ? __pfx_ksys_write+0x10/0x10 [ 536.105156][T15449] do_syscall_64+0xcd/0x490 [ 536.105177][T15449] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.105192][T15449] RIP: 0033:0x7fa2bed8e929 [ 536.105204][T15449] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 536.105217][T15449] RSP: 002b:00007fa2bcbf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 536.105230][T15449] RAX: ffffffffffffffda RBX: 00007fa2befb5fa0 RCX: 00007fa2bed8e929 [ 536.105239][T15449] RDX: 000000000000fdef RSI: 0000000000000000 RDI: 0000000000000003 [ 536.105247][T15449] RBP: 00007fa2bee10b39 R08: 0000000000000000 R09: 0000000000000000 [ 536.105255][T15449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 536.105263][T15449] R13: 0000000000000000 R14: 00007fa2befb5fa0 R15: 00007ffc8af42ed8 [ 536.105281][T15449] [ 536.105319][T15449] ERROR: Out of memory at tomoyo_realpath_from_path. [ 536.473796][T15452] netlink: 25 bytes leftover after parsing attributes in process `syz.0.2321'. [ 536.620311][T15452] ima: policy update failed [ 536.683264][T15454] FAULT_INJECTION: forcing a failure. [ 536.683264][T15454] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 536.741228][T15454] CPU: 1 UID: 0 PID: 15454 Comm: syz.1.2322 Tainted: G U 6.16.0-rc3-syzkaller-00121-gf02769e7f272 #0 PREEMPT(full) [ 536.741254][T15454] Tainted: [U]=USER [ 536.741258][T15454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 536.741267][T15454] Call Trace: [ 536.741272][T15454] [ 536.741278][T15454] dump_stack_lvl+0x16c/0x1f0 [ 536.741304][T15454] should_fail_ex+0x512/0x640 [ 536.741332][T15454] should_fail_alloc_page+0xe7/0x130 [ 536.741349][T15454] prepare_alloc_pages+0x3c2/0x610 [ 536.741369][T15454] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 536.741390][T15454] ? copy_splice_read+0x1a8/0xba0 [ 536.741407][T15454] ? stack_trace_save+0x8e/0xc0 [ 536.741422][T15454] ? __pfx_stack_trace_save+0x10/0x10 [ 536.741435][T15454] ? stack_depot_save_flags+0x28/0xa40 [ 536.741458][T15454] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 536.741477][T15454] ? kasan_save_stack+0x33/0x60 [ 536.741495][T15454] ? __kasan_kmalloc+0xaa/0xb0 [ 536.741512][T15454] ? copy_splice_read+0x1a8/0xba0 [ 536.741527][T15454] ? do_splice_read+0x282/0x370 [ 536.741541][T15454] ? splice_direct_to_actor+0x2a1/0xa30 [ 536.741556][T15454] ? do_splice_direct+0x174/0x240 [ 536.741570][T15454] ? do_sendfile+0xb06/0xe50 [ 536.741586][T15454] ? __x64_sys_sendfile64+0x1d8/0x220 [ 536.741598][T15454] ? do_syscall_64+0xcd/0x490 [ 536.741629][T15454] alloc_pages_bulk_noprof+0x71c/0x1410 [ 536.741655][T15454] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 536.741678][T15454] ? trace_kmalloc+0x2b/0xd0 [ 536.741690][T15454] ? __kmalloc_noprof+0x242/0x510 [ 536.741713][T15454] copy_splice_read+0x1e1/0xba0 [ 536.741730][T15454] ? __pfx_pipe_to_null+0x10/0x10 [ 536.741753][T15454] ? __pfx_copy_splice_read+0x10/0x10 [ 536.741767][T15454] ? pipe_unlock+0x4a/0x70 [ 536.741787][T15454] ? __pfx_splice_from_pipe+0x10/0x10 [ 536.741809][T15454] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 536.741828][T15454] ? __pfx_copy_splice_read+0x10/0x10 [ 536.741845][T15454] do_splice_read+0x282/0x370 [ 536.741863][T15454] splice_direct_to_actor+0x2a1/0xa30 [ 536.741881][T15454] ? __pfx_direct_splice_actor+0x10/0x10 [ 536.741901][T15454] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 536.741923][T15454] do_splice_direct+0x174/0x240 [ 536.741940][T15454] ? __pfx_do_splice_direct+0x10/0x10 [ 536.741957][T15454] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 536.741974][T15454] ? bpf_lsm_file_permission+0x9/0x10 [ 536.741988][T15454] ? security_file_permission+0x71/0x210 [ 536.742005][T15454] ? rw_verify_area+0xcf/0x680 [ 536.742023][T15454] do_sendfile+0xb06/0xe50 [ 536.742043][T15454] ? __pfx_do_sendfile+0x10/0x10 [ 536.742064][T15454] ? __x64_sys_futex+0x1e0/0x4c0 [ 536.742082][T15454] ? __x64_sys_futex+0x1e9/0x4c0 [ 536.742100][T15454] __x64_sys_sendfile64+0x1d8/0x220 [ 536.742113][T15454] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 536.742132][T15454] do_syscall_64+0xcd/0x490 [ 536.742154][T15454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.742169][T15454] RIP: 0033:0x7fee9998e929 [ 536.742181][T15454] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 536.742195][T15454] RSP: 002b:00007fee9a7a2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 536.742209][T15454] RAX: ffffffffffffffda RBX: 00007fee99bb5fa0 RCX: 00007fee9998e929 [ 536.742218][T15454] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000006 [ 536.742227][T15454] RBP: 00007fee99a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 536.742235][T15454] R10: 0010000800000003 R11: 0000000000000246 R12: 0000000000000000 [ 536.742244][T15454] R13: 0000000000000000 R14: 00007fee99bb5fa0 R15: 00007fffcf67e8a8 [ 536.742262][T15454] [ 537.121827][T15456] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2323'. [ 537.131439][T15456] netlink: 25 bytes leftover after parsing attributes in process `syz.0.2323'. [ 537.152251][ T30] audit: type=1802 audit(6045959761.517:10): pid=15452 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.2321" res=0 errno=0 [ 537.625184][T15464] FAULT_INJECTION: forcing a failure. [ 537.625184][T15464] name failslab, interval 1, probability 0, space 0, times 0 [ 537.650733][T15465] vivid-003: ================= START STATUS ================= [ 537.658377][T15465] vivid-003: Radio HW Seek Mode: Bounded [ 537.674265][T15464] CPU: 1 UID: 0 PID: 15464 Comm: syz.3.2326 Tainted: G U 6.16.0-rc3-syzkaller-00121-gf02769e7f272 #0 PREEMPT(full) [ 537.674290][T15464] Tainted: [U]=USER [ 537.674295][T15464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 537.674304][T15464] Call Trace: [ 537.674309][T15464] [ 537.674315][T15464] dump_stack_lvl+0x16c/0x1f0 [ 537.674340][T15464] should_fail_ex+0x512/0x640 [ 537.674359][T15464] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 537.674382][T15464] should_failslab+0xc2/0x120 [ 537.674396][T15464] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 537.674414][T15464] ? __d_lookup+0x25c/0x4a0 [ 537.674428][T15464] ? __d_alloc+0x31/0xaa0 [ 537.674450][T15464] __d_alloc+0x31/0xaa0 [ 537.674475][T15464] d_alloc+0x4a/0x1e0 [ 537.674495][T15464] __rpc_lookup_create_exclusive+0x119/0x140 [ 537.674514][T15464] ? __pfx___rpc_lookup_create_exclusive+0x10/0x10 [ 537.674536][T15464] rpc_populate.constprop.0+0xbe/0x5d0 [ 537.674560][T15464] rpc_fill_super+0x345/0x840 [ 537.674577][T15464] ? sget_fc+0x808/0xc20 [ 537.674597][T15464] ? __pfx_rpc_fill_super+0x10/0x10 [ 537.674615][T15464] get_tree_keyed+0x10b/0x1d0 [ 537.674634][T15464] vfs_get_tree+0x8b/0x340 [ 537.674649][T15464] vfs_cmd_create+0xd7/0x2a0 [ 537.674670][T15464] __do_sys_fsconfig+0x7b8/0xbe0 [ 537.674685][T15464] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 537.674707][T15464] do_syscall_64+0xcd/0x490 [ 537.674729][T15464] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.674743][T15464] RIP: 0033:0x7f34fd38e929 [ 537.674755][T15464] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 537.674768][T15464] RSP: 002b:00007f34fe14e038 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 537.674781][T15464] RAX: ffffffffffffffda RBX: 00007f34fd5b5fa0 RCX: 00007f34fd38e929 [ 537.674792][T15464] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000005 [ 537.674800][T15464] RBP: 00007f34fd410b39 R08: 0000000000000000 R09: 0000000000000000 [ 537.674808][T15464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 537.674817][T15464] R13: 0000000000000000 R14: 00007f34fd5b5fa0 R15: 00007ffc90af6cb8 [ 537.674836][T15464] [ 537.674894][T15464] net/sunrpc/rpc_pipe.c: rpc_populate failed to populate directory gssd [ 537.917028][T15465] vivid-003: Radio Programmable HW Seek: false [ 537.938858][T15465] vivid-003: RDS Rx I/O Mode: Block I/O [ 537.947706][T15465] vivid-003: Generate RBDS Instead of RDS: false [ 537.960344][T15465] vivid-003: RDS Reception: true [ 537.971463][T15465] vivid-003: RDS Program Type: 0 inactive [ 537.987382][T15465] vivid-003: RDS PS Name: inactive [ 537.997476][T15465] vivid-003: RDS Radio Text: inactive [ 538.003449][T15465] vivid-003: RDS Traffic Announcement: false inactive [ 538.010304][T15465] vivid-003: RDS Traffic Program: false inactive [ 538.016804][T15465] vivid-003: RDS Music: false inactive [ 538.023151][T15465] vivid-003: ================== END STATUS ================== [ 538.413760][T15477] Process accounting resumed [ 538.744398][T15486] Process accounting resumed [ 540.257589][T15520] Process accounting resumed [ 540.274353][T15515] Process accounting resumed [ 540.836316][T15539] Process accounting resumed [ 541.067178][T15552] sp0: Synchronizing with TNC [ 541.370716][T15557] Process accounting resumed [ 541.458238][T15562] FAULT_INJECTION: forcing a failure. [ 541.458238][T15562] name fail_futex, interval 1, probability 0, space 0, times 0 [ 541.494567][T15563] random: crng reseeded on system resumption [ 541.546145][T15562] CPU: 1 UID: 0 PID: 15562 Comm: syz.0.2346 Tainted: G U 6.16.0-rc3-syzkaller-00121-gf02769e7f272 #0 PREEMPT(full) [ 541.546168][T15562] Tainted: [U]=USER [ 541.546173][T15562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 541.546182][T15562] Call Trace: [ 541.546187][T15562] [ 541.546192][T15562] dump_stack_lvl+0x16c/0x1f0 [ 541.546218][T15562] should_fail_ex+0x512/0x640 [ 541.546240][T15562] get_futex_key+0x1d0/0x1540 [ 541.546258][T15562] ? __pfx_pollwake+0x10/0x10 [ 541.546275][T15562] ? __pfx_get_futex_key+0x10/0x10 [ 541.546291][T15562] ? __pfx_pollwake+0x10/0x10 [ 541.546313][T15562] futex_wake+0xea/0x530 [ 541.546330][T15562] ? __pfx_pollwake+0x10/0x10 [ 541.546347][T15562] ? __pfx_futex_wake+0x10/0x10 [ 541.546370][T15562] ? __pfx_pollwake+0x10/0x10 [ 541.546387][T15562] do_futex+0x1e3/0x350 [ 541.546404][T15562] ? __pfx_do_futex+0x10/0x10 [ 541.546420][T15562] ? ktime_get_ts64+0x2d2/0x400 [ 541.546439][T15562] __x64_sys_futex+0x1e0/0x4c0 [ 541.546457][T15562] ? __pfx___x64_sys_futex+0x10/0x10 [ 541.546472][T15562] ? __x64_sys_poll+0x123/0x450 [ 541.546489][T15562] ? __pfx___x64_sys_poll+0x10/0x10 [ 541.546511][T15562] do_syscall_64+0xcd/0x490 [ 541.546532][T15562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.546546][T15562] RIP: 0033:0x7fa2bed8e929 [ 541.546558][T15562] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 541.546571][T15562] RSP: 002b:00007fa2bcbf60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 541.546584][T15562] RAX: ffffffffffffffda RBX: 00007fa2befb5fa8 RCX: 00007fa2bed8e929 [ 541.546593][T15562] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fa2befb5fac [ 541.546601][T15562] RBP: 00007fa2befb5fa0 R08: 00007fa2bfb00000 R09: 0000000000000000 [ 541.546609][T15562] R10: 0000000000000001 R11: 0000000000000246 R12: 00007fa2befb5fac [ 541.546617][T15562] R13: 0000000000000000 R14: 00007ffc8af42df0 R15: 00007ffc8af42ed8 [ 541.546634][T15562] [ 542.002085][T15570] serio: Serial port pty238 [ 542.656503][T15579] Process accounting resumed [ 543.099859][T15590] Process accounting resumed [ 543.262536][T15597] ERROR: Out of memory at tomoyo_memory_ok. [ 543.308336][T15597] ERROR: Domain ' /sbin/init /etc/init.d/rcS /etc/init.d/S50sshd /sbin/start-stop-daemon /usr/sbin/sshd /usr/libexec/sshd-session /bin/sh /root/syz-executor /root/syz-executor /newroot/569/:,' not defined. [ 543.429470][T15597] FAULT_INJECTION: forcing a failure. [ 543.429470][T15597] name failslab, interval 1, probability 0, space 0, times 0 [ 543.462187][T15602] netlink: 25 bytes leftover after parsing attributes in process `syz.2.2360'. [ 543.485634][T15597] CPU: 1 UID: 0 PID: 15597 Comm: syz.3.2358 Tainted: G U 6.16.0-rc3-syzkaller-00121-gf02769e7f272 #0 PREEMPT(full) [ 543.485658][T15597] Tainted: [U]=USER [ 543.485663][T15597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 543.485671][T15597] Call Trace: [ 543.485676][T15597] [ 543.485682][T15597] dump_stack_lvl+0x16c/0x1f0 [ 543.485708][T15597] should_fail_ex+0x512/0x640 [ 543.485728][T15597] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 543.485753][T15597] should_failslab+0xc2/0x120 [ 543.485778][T15597] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 543.485801][T15597] ? kstrdup_const+0x63/0x80 [ 543.485824][T15597] kstrdup+0x53/0x100 [ 543.485845][T15597] kstrdup_const+0x63/0x80 [ 543.485864][T15597] __kernfs_new_node+0x9b/0x8e0 [ 543.485885][T15597] ? __pfx___kernfs_new_node+0x10/0x10 [ 543.485907][T15597] ? find_held_lock+0x2b/0x80 [ 543.485921][T15597] ? kernfs_root+0xee/0x2a0 [ 543.485942][T15597] kernfs_new_node+0x13c/0x1e0 [ 543.485965][T15597] kernfs_create_link+0xcc/0x240 [ 543.485982][T15597] sysfs_do_create_link_sd+0x90/0x140 [ 543.486001][T15597] sysfs_create_link+0x61/0xc0 [ 543.486020][T15597] device_add+0x62c/0x1a70 [ 543.486037][T15597] ? __pfx_device_add+0x10/0x10 [ 543.486050][T15597] ? lockdep_init_map_type+0x5c/0x280 [ 543.486069][T15597] ? __init_waitqueue_head+0xca/0x150 [ 543.486094][T15597] netdev_register_kobject+0x182/0x3a0 [ 543.486112][T15597] register_netdevice+0x13dc/0x2270 [ 543.486129][T15597] ? __pfx_register_netdevice+0x10/0x10 [ 543.486148][T15597] internal_dev_create+0x2d3/0x520 [ 543.486164][T15597] ovs_vport_add+0x147/0x4d0 [ 543.486186][T15597] new_vport+0x16/0x1d0 [ 543.486203][T15597] ovs_dp_cmd_new+0x6ba/0xe60 [ 543.486226][T15597] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 543.486248][T15597] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 543.486266][T15597] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 543.486287][T15597] genl_family_rcv_msg_doit+0x209/0x2f0 [ 543.486305][T15597] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 543.486321][T15597] ? trace_cap_capable+0x18d/0x200 [ 543.486347][T15597] ? bpf_lsm_capable+0x9/0x10 [ 543.486363][T15597] ? security_capable+0x7e/0x260 [ 543.486384][T15597] ? ns_capable+0xd7/0x110 [ 543.486399][T15597] genl_rcv_msg+0x55c/0x800 [ 543.486418][T15597] ? __pfx_genl_rcv_msg+0x10/0x10 [ 543.486434][T15597] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 543.486459][T15597] netlink_rcv_skb+0x158/0x420 [ 543.486473][T15597] ? __pfx_genl_rcv_msg+0x10/0x10 [ 543.486490][T15597] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 543.486512][T15597] ? netlink_deliver_tap+0x1ae/0xd30 [ 543.486528][T15597] genl_rcv+0x28/0x40 [ 543.486541][T15597] netlink_unicast+0x53a/0x7f0 [ 543.486558][T15597] ? __pfx_netlink_unicast+0x10/0x10 [ 543.486577][T15597] netlink_sendmsg+0x8d1/0xdd0 [ 543.486594][T15597] ? __pfx_netlink_sendmsg+0x10/0x10 [ 543.486616][T15597] ____sys_sendmsg+0xa95/0xc70 [ 543.486632][T15597] ? copy_msghdr_from_user+0x10a/0x160 [ 543.486651][T15597] ? __pfx_____sys_sendmsg+0x10/0x10 [ 543.486670][T15597] ? __pfx_futex_wake_mark+0x10/0x10 [ 543.486692][T15597] ___sys_sendmsg+0x134/0x1d0 [ 543.486712][T15597] ? __pfx____sys_sendmsg+0x10/0x10 [ 543.486729][T15597] ? __lock_acquire+0x622/0x1c90 [ 543.486776][T15597] __sys_sendmsg+0x16d/0x220 [ 543.486797][T15597] ? __pfx___sys_sendmsg+0x10/0x10 [ 543.486817][T15597] ? __x64_sys_futex+0x1e0/0x4c0 [ 543.486845][T15597] do_syscall_64+0xcd/0x490 [ 543.486868][T15597] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.486882][T15597] RIP: 0033:0x7f34fd38e929 [ 543.486894][T15597] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 543.486908][T15597] RSP: 002b:00007f34fe14e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 543.486922][T15597] RAX: ffffffffffffffda RBX: 00007f34fd5b5fa0 RCX: 00007f34fd38e929 [ 543.486932][T15597] RDX: 0000000000000080 RSI: 0000200000000140 RDI: 0000000000000006 [ 543.486940][T15597] RBP: 00007f34fd410b39 R08: 0000000000000000 R09: 0000000000000000 [ 543.486949][T15597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 543.486958][T15597] R13: 0000000000000000 R14: 00007f34fd5b5fa0 R15: 00007ffc90af6cb8 [ 543.486977][T15597] [ 544.775247][T15599] Process accounting resumed [ 545.441261][T15622] Process accounting resumed [ 546.432417][T15602] ima: policy update failed [ 546.438244][ T30] audit: type=1802 audit(6045959771.262:11): pid=15602 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.2360" res=0 errno=0 [ 546.587310][ T7807] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 546.884219][T15641] Process accounting resumed [ 547.311796][T15650] FAULT_INJECTION: forcing a failure. [ 547.311796][T15650] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 547.327195][T15650] CPU: 1 UID: 0 PID: 15650 Comm: syz.0.2375 Tainted: G U 6.16.0-rc3-syzkaller-00121-gf02769e7f272 #0 PREEMPT(full) [ 547.327220][T15650] Tainted: [U]=USER [ 547.327225][T15650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 547.327234][T15650] Call Trace: [ 547.327239][T15650] [ 547.327244][T15650] dump_stack_lvl+0x16c/0x1f0 [ 547.327269][T15650] should_fail_ex+0x512/0x640 [ 547.327291][T15650] should_fail_alloc_page+0xe7/0x130 [ 547.327306][T15650] prepare_alloc_pages+0x3c2/0x610 [ 547.327326][T15650] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 547.327346][T15650] ? copy_splice_read+0x1a8/0xba0 [ 547.327362][T15650] ? stack_trace_save+0x8e/0xc0 [ 547.327378][T15650] ? __pfx_stack_trace_save+0x10/0x10 [ 547.327392][T15650] ? stack_depot_save_flags+0x28/0xa40 [ 547.327421][T15650] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 547.327440][T15650] ? kasan_save_stack+0x33/0x60 [ 547.327459][T15650] ? __kasan_kmalloc+0xaa/0xb0 [ 547.327477][T15650] ? copy_splice_read+0x1a8/0xba0 [ 547.327492][T15650] ? do_splice_read+0x282/0x370 [ 547.327510][T15650] ? splice_direct_to_actor+0x2a1/0xa30 [ 547.327526][T15650] ? do_splice_direct+0x174/0x240 [ 547.327541][T15650] ? do_sendfile+0xb06/0xe50 [ 547.327557][T15650] ? __x64_sys_sendfile64+0x1d8/0x220 [ 547.327568][T15650] ? do_syscall_64+0xcd/0x490 [ 547.327600][T15650] alloc_pages_bulk_noprof+0x71c/0x1410 [ 547.327625][T15650] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 547.327649][T15650] ? trace_kmalloc+0x2b/0xd0 [ 547.327661][T15650] ? __kmalloc_noprof+0x242/0x510 [ 547.327684][T15650] copy_splice_read+0x1e1/0xba0 [ 547.327700][T15650] ? __pfx_pipe_to_null+0x10/0x10 [ 547.327723][T15650] ? __pfx_copy_splice_read+0x10/0x10 [ 547.327738][T15650] ? pipe_unlock+0x4a/0x70 [ 547.327756][T15650] ? __pfx_splice_from_pipe+0x10/0x10 [ 547.327778][T15650] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 547.327797][T15650] ? __pfx_copy_splice_read+0x10/0x10 [ 547.327813][T15650] do_splice_read+0x282/0x370 [ 547.327830][T15650] splice_direct_to_actor+0x2a1/0xa30 [ 547.327848][T15650] ? __pfx_direct_splice_actor+0x10/0x10 [ 547.327868][T15650] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 547.327890][T15650] do_splice_direct+0x174/0x240 [ 547.327907][T15650] ? __pfx_do_splice_direct+0x10/0x10 [ 547.327924][T15650] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 547.327941][T15650] ? bpf_lsm_file_permission+0x9/0x10 [ 547.327956][T15650] ? security_file_permission+0x71/0x210 [ 547.327977][T15650] ? rw_verify_area+0xcf/0x680 [ 547.327995][T15650] do_sendfile+0xb06/0xe50 [ 547.328015][T15650] ? __pfx_do_sendfile+0x10/0x10 [ 547.328035][T15650] ? __x64_sys_futex+0x1e0/0x4c0 [ 547.328050][T15650] ? __x64_sys_futex+0x1e9/0x4c0 [ 547.328069][T15650] __x64_sys_sendfile64+0x1d8/0x220 [ 547.328082][T15650] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 547.328101][T15650] do_syscall_64+0xcd/0x490 [ 547.328121][T15650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.328135][T15650] RIP: 0033:0x7fa2bed8e929 [ 547.328147][T15650] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 547.328159][T15650] RSP: 002b:00007fa2bcbf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 547.328174][T15650] RAX: ffffffffffffffda RBX: 00007fa2befb5fa0 RCX: 00007fa2bed8e929 [ 547.328183][T15650] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000006 [ 547.328191][T15650] RBP: 00007fa2bee10b39 R08: 0000000000000000 R09: 0000000000000000 [ 547.328199][T15650] R10: 0010000800000003 R11: 0000000000000246 R12: 0000000000000000 [ 547.328208][T15650] R13: 0000000000000000 R14: 00007fa2befb5fa0 R15: 00007ffc8af42ed8 [ 547.328226][T15650] [ 547.755251][T15653] Process accounting resumed [ 548.128515][T15661] netlink: 25 bytes leftover after parsing attributes in process `syz.1.2382'. [ 548.234448][T15661] ima: policy update failed [ 548.260815][ T30] audit: type=1802 audit(6045959773.083:12): pid=15661 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.2382" res=0 errno=0 [ 548.390627][T15667] Process accounting resumed [ 548.553707][T15669] Process accounting resumed [ 548.698906][T15680] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2387'. [ 549.044968][T15685] Process accounting resumed [ 549.357882][T15690] Process accounting resumed [ 549.758656][T15700] FAULT_INJECTION: forcing a failure. [ 549.758656][T15700] name failslab, interval 1, probability 0, space 0, times 0 [ 549.893320][T15700] CPU: 1 UID: 0 PID: 15700 Comm: syz.2.2391 Tainted: G U 6.16.0-rc3-syzkaller-00121-gf02769e7f272 #0 PREEMPT(full) [ 549.893347][T15700] Tainted: [U]=USER [ 549.893352][T15700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 549.893360][T15700] Call Trace: [ 549.893365][T15700] [ 549.893370][T15700] dump_stack_lvl+0x16c/0x1f0 [ 549.893395][T15700] should_fail_ex+0x512/0x640 [ 549.893415][T15700] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 549.893435][T15700] ? __pfx_mon_text_open+0x10/0x10 [ 549.893460][T15700] should_failslab+0xc2/0x120 [ 549.893473][T15700] __kmalloc_cache_noprof+0x6a/0x3e0 [ 549.893491][T15700] ? lockdep_init_map_type+0x5c/0x280 [ 549.893509][T15700] ? mon_text_open+0xd5/0x4f0 [ 549.893530][T15700] ? __pfx_mon_text_open+0x10/0x10 [ 549.893548][T15700] mon_text_open+0xd5/0x4f0 [ 549.893567][T15700] ? __pfx_mon_text_open+0x10/0x10 [ 549.893585][T15700] ? __debugfs_file_get+0x1fe/0x840 [ 549.893599][T15700] ? __pfx___debugfs_file_get+0x10/0x10 [ 549.893612][T15700] ? __pfx_apparmor_file_open+0x10/0x10 [ 549.893628][T15700] ? lockdown_is_locked_down+0x3f/0x130 [ 549.893645][T15700] ? bpf_lsm_locked_down+0x9/0x10 [ 549.893664][T15700] ? __pfx_mon_text_open+0x10/0x10 [ 549.893684][T15700] full_proxy_open_regular+0x1b6/0x360 [ 549.893700][T15700] do_dentry_open+0x744/0x1c10 [ 549.893720][T15700] ? __pfx_full_proxy_open_regular+0x10/0x10 [ 549.893739][T15700] vfs_open+0x82/0x3f0 [ 549.893755][T15700] path_openat+0x1de4/0x2cb0 [ 549.893780][T15700] ? __pfx_path_openat+0x10/0x10 [ 549.893800][T15700] ? __lock_acquire+0xb8a/0x1c90 [ 549.893819][T15700] do_filp_open+0x20b/0x470 [ 549.893838][T15700] ? __pfx_do_filp_open+0x10/0x10 [ 549.893870][T15700] ? alloc_fd+0x471/0x7d0 [ 549.893892][T15700] do_sys_openat2+0x11b/0x1d0 [ 549.893907][T15700] ? __pfx_do_sys_openat2+0x10/0x10 [ 549.893929][T15700] __x64_sys_openat+0x174/0x210 [ 549.893944][T15700] ? __pfx___x64_sys_openat+0x10/0x10 [ 549.893967][T15700] do_syscall_64+0xcd/0x490 [ 549.893989][T15700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.894003][T15700] RIP: 0033:0x7f980c78e929 [ 549.894014][T15700] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 549.894027][T15700] RSP: 002b:00007f980d6ad038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 549.894041][T15700] RAX: ffffffffffffffda RBX: 00007f980c9b6080 RCX: 00007f980c78e929 [ 549.894050][T15700] RDX: 0000000000000800 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 549.894058][T15700] RBP: 00007f980c810b39 R08: 0000000000000000 R09: 0000000000000000 [ 549.894066][T15700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 549.894074][T15700] R13: 0000000000000000 R14: 00007f980c9b6080 R15: 00007ffd912a90d8 [ 549.894093][T15700] [ 550.653362][T15712] Process accounting resumed [ 550.689027][T15718] Process accounting resumed [ 550.792520][T15709] FAULT_INJECTION: forcing a failure. [ 550.792520][T15709] name failslab, interval 1, probability 0, space 0, times 0 [ 550.848636][T15709] CPU: 1 UID: 0 PID: 15709 Comm: syz.3.2394 Tainted: G U 6.16.0-rc3-syzkaller-00121-gf02769e7f272 #0 PREEMPT(full) [ 550.848662][T15709] Tainted: [U]=USER [ 550.848667][T15709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 550.848675][T15709] Call Trace: [ 550.848681][T15709] [ 550.848686][T15709] dump_stack_lvl+0x16c/0x1f0 [ 550.848712][T15709] should_fail_ex+0x512/0x640 [ 550.848731][T15709] ? __kmalloc_noprof+0xbf/0x510 [ 550.848752][T15709] ? lsm_blob_alloc+0x68/0x90 [ 550.848771][T15709] should_failslab+0xc2/0x120 [ 550.848784][T15709] __kmalloc_noprof+0xd2/0x510 [ 550.848806][T15709] lsm_blob_alloc+0x68/0x90 [ 550.848825][T15709] security_prepare_creds+0x30/0x270 [ 550.848844][T15709] prepare_creds+0x56f/0x7d0 [ 550.848865][T15709] __sys_setregid+0x101/0x910 [ 550.848878][T15709] ? rcu_is_watching+0x12/0xc0 [ 550.848893][T15709] do_syscall_64+0xcd/0x490 [ 550.848915][T15709] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 550.848929][T15709] RIP: 0033:0x7f34fd38e929 [ 550.848940][T15709] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 550.848953][T15709] RSP: 002b:00007f34fe14e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000072 [ 550.848966][T15709] RAX: ffffffffffffffda RBX: 00007f34fd5b5fa0 RCX: 00007f34fd38e929 [ 550.848975][T15709] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffffff [ 550.848983][T15709] RBP: 00007f34fd410b39 R08: 0000000000000000 R09: 0000000000000000 [ 550.848991][T15709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 550.848999][T15709] R13: 0000000000000000 R14: 00007f34fd5b5fa0 R15: 00007ffc90af6cb8 [ 550.849016][T15709] [ 551.029281][T15724] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2398'. [ 551.284775][T15734] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2408'. [ 551.641010][T15746] FAULT_INJECTION: forcing a failure. [ 551.641010][T15746] name failslab, interval 1, probability 0, space 0, times 0 [ 551.709323][T15746] CPU: 1 UID: 0 PID: 15746 Comm: syz.0.2403 Tainted: G U 6.16.0-rc3-syzkaller-00121-gf02769e7f272 #0 PREEMPT(full) [ 551.709349][T15746] Tainted: [U]=USER [ 551.709354][T15746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 551.709362][T15746] Call Trace: [ 551.709367][T15746] [ 551.709376][T15746] dump_stack_lvl+0x16c/0x1f0 [ 551.709401][T15746] should_fail_ex+0x512/0x640 [ 551.709420][T15746] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 551.709443][T15746] should_failslab+0xc2/0x120 [ 551.709456][T15746] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 551.709476][T15746] ? locks_get_lock_context+0x243/0x410 [ 551.709498][T15746] locks_get_lock_context+0x243/0x410 [ 551.709518][T15746] generic_setlease+0x5e7/0x1300 [ 551.709536][T15746] ? find_held_lock+0x2b/0x80 [ 551.709551][T15746] ? __pfx_generic_setlease+0x10/0x10 [ 551.709570][T15746] kernel_setlease+0x106/0x140 [ 551.709586][T15746] vfs_setlease+0x258/0x2d0 [ 551.709602][T15746] fcntl_setlease+0x3ed/0x5a0 [ 551.709616][T15746] ? __pfx_fcntl_setlease+0x10/0x10 [ 551.709639][T15746] do_fcntl+0x751/0x15a0 [ 551.709654][T15746] ? __pfx_do_fcntl+0x10/0x10 [ 551.709672][T15746] ? tomoyo_file_fcntl+0x6c/0xc0 [ 551.709694][T15746] __x64_sys_fcntl+0x163/0x200 [ 551.709709][T15746] do_syscall_64+0xcd/0x490 [ 551.709730][T15746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.709745][T15746] RIP: 0033:0x7fa2bed8e929 [ 551.709757][T15746] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 551.709770][T15746] RSP: 002b:00007fa2bcbd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 551.709783][T15746] RAX: ffffffffffffffda RBX: 00007fa2befb6080 RCX: 00007fa2bed8e929 [ 551.709792][T15746] RDX: 0000000000000001 RSI: 0000000000000400 RDI: 0000000000000005 [ 551.709800][T15746] RBP: 00007fa2bee10b39 R08: 0000000000000000 R09: 0000000000000000 [ 551.709808][T15746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 551.709815][T15746] R13: 0000000000000000 R14: 00007fa2befb6080 R15: 00007ffc8af42ed8 [ 551.709833][T15746] [ 552.436977][T15757] vivid-003: ================= START STATUS ================= [ 552.485107][T15757] vivid-003: Radio HW Seek Mode: Bounded [ 552.490773][T15757] vivid-003: Radio Programmable HW Seek: false [ 552.520323][T15757] vivid-003: RDS Rx I/O Mode: Block I/O [ 552.539758][T15757] vivid-003: Generate RBDS Instead of RDS: false [ 552.591125][T15757] vivid-003: RDS Reception: true [ 552.612986][T15757] vivid-003: RDS Program Type: 0 inactive [ 552.646048][T15757] vivid-003: RDS PS Name: inactive [ 552.665821][T15757] vivid-003: RDS Radio Text: inactive [ 552.687111][T15757] vivid-003: RDS Traffic Announcement: false inactive [ 552.701540][T15757] vivid-003: RDS Traffic Program: false inactive [ 552.727986][T15757] vivid-003: RDS Music: false inactive [ 552.779856][T15749] Process accounting resumed [ 552.793585][T15757] vivid-003: ================== END STATUS ================== [ 553.111193][T15777] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2413'. [ 553.640431][T15800] ERROR: Out of memory at tomoyo_memory_ok. [ 554.417803][T15816] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2421'. [ 554.535011][T15816] Process accounting resumed [ 554.664006][T15823] vivid-003: ================= START STATUS ================= [ 554.702575][T15823] vivid-003: Radio HW Seek Mode: Bounded [ 554.708242][T15823] vivid-003: Radio Programmable HW Seek: false [ 554.794796][T15823] vivid-003: RDS Rx I/O Mode: Block I/O [ 554.836065][T15823] vivid-003: Generate RBDS Instead of RDS: false [ 554.868026][T15823] vivid-003: RDS Reception: true [ 554.877263][T15831] netlink: 25 bytes leftover after parsing attributes in process `syz.1.2425'. [ 554.902091][T15823] vivid-003: RDS Program Type: 0 inactive [ 554.943463][T15823] vivid-003: RDS PS Name: inactive [ 554.971480][T15823] vivid-003: RDS Radio Text: inactive [ 554.999127][T15823] vivid-003: RDS Traffic Announcement: false inactive [ 555.052359][T15823] vivid-003: RDS Traffic Program: false inactive [ 555.096475][T15823] vivid-003: RDS Music: false inactive [ 555.116253][T15842] FAULT_INJECTION: forcing a failure. [ 555.116253][T15842] name failslab, interval 1, probability 0, space 0, times 0 [ 555.129512][T15823] vivid-003: ================== END STATUS ================== [ 555.181881][T15842] CPU: 1 UID: 0 PID: 15842 Comm: syz.2.2426 Tainted: G U 6.16.0-rc3-syzkaller-00121-gf02769e7f272 #0 PREEMPT(full) [ 555.181905][T15842] Tainted: [U]=USER [ 555.181910][T15842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 555.181919][T15842] Call Trace: [ 555.181924][T15842] [ 555.181930][T15842] dump_stack_lvl+0x16c/0x1f0 [ 555.181955][T15842] should_fail_ex+0x512/0x640 [ 555.181973][T15842] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 555.181995][T15842] should_failslab+0xc2/0x120 [ 555.182009][T15842] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 555.182028][T15842] ? do_epoll_ctl+0x1170/0x35b0 [ 555.182047][T15842] do_epoll_ctl+0x1170/0x35b0 [ 555.182071][T15842] ? __pfx_do_epoll_ctl+0x10/0x10 [ 555.182086][T15842] ? find_held_lock+0x2b/0x80 [ 555.182099][T15842] ? __might_fault+0xe3/0x190 [ 555.182117][T15842] ? __might_fault+0xe3/0x190 [ 555.182142][T15842] ? __x64_sys_epoll_ctl+0x15c/0x1e0 [ 555.182157][T15842] __x64_sys_epoll_ctl+0x15c/0x1e0 [ 555.182175][T15842] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 555.182197][T15842] do_syscall_64+0xcd/0x490 [ 555.182218][T15842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.182232][T15842] RIP: 0033:0x7f980c78e929 [ 555.182244][T15842] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 555.182256][T15842] RSP: 002b:00007f980d6ce038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 555.182270][T15842] RAX: ffffffffffffffda RBX: 00007f980c9b5fa0 RCX: 00007f980c78e929 [ 555.182279][T15842] RDX: 0000000000000005 RSI: 0000000000000001 RDI: 0000000000000004 [ 555.182286][T15842] RBP: 00007f980c810b39 R08: 0000000000000000 R09: 0000000000000000 [ 555.182294][T15842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 555.182302][T15842] R13: 0000000000000000 R14: 00007f980c9b5fa0 R15: 00007ffd912a90d8 [ 555.182320][T15842] [ 555.184653][T15843] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2427'. [ 556.275851][T15867] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2432'. [ 556.426241][T15868] Process accounting resumed [ 556.804605][T15874] FAULT_INJECTION: forcing a failure. [ 556.804605][T15874] name failslab, interval 1, probability 0, space 0, times 0 [ 556.911871][T15874] CPU: 1 UID: 0 PID: 15874 Comm: syz.1.2433 Tainted: G U 6.16.0-rc3-syzkaller-00121-gf02769e7f272 #0 PREEMPT(full) [ 556.911897][T15874] Tainted: [U]=USER [ 556.911902][T15874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 556.911911][T15874] Call Trace: [ 556.911916][T15874] [ 556.911922][T15874] dump_stack_lvl+0x16c/0x1f0 [ 556.911946][T15874] should_fail_ex+0x512/0x640 [ 556.911965][T15874] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 556.911987][T15874] should_failslab+0xc2/0x120 [ 556.912001][T15874] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 556.912021][T15874] ? locks_get_lock_context+0x243/0x410 [ 556.912043][T15874] locks_get_lock_context+0x243/0x410 [ 556.912064][T15874] generic_setlease+0x5e7/0x1300 [ 556.912082][T15874] ? find_held_lock+0x2b/0x80 [ 556.912096][T15874] ? __pfx_generic_setlease+0x10/0x10 [ 556.912116][T15874] kernel_setlease+0x106/0x140 [ 556.912131][T15874] vfs_setlease+0x258/0x2d0 [ 556.912148][T15874] fcntl_setlease+0x3ed/0x5a0 [ 556.912162][T15874] ? __pfx_fcntl_setlease+0x10/0x10 [ 556.912185][T15874] do_fcntl+0x751/0x15a0 [ 556.912199][T15874] ? __pfx_do_fcntl+0x10/0x10 [ 556.912216][T15874] ? tomoyo_file_fcntl+0x6c/0xc0 [ 556.912238][T15874] __x64_sys_fcntl+0x163/0x200 [ 556.912254][T15874] do_syscall_64+0xcd/0x490 [ 556.912275][T15874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.912290][T15874] RIP: 0033:0x7fee9998e929 [ 556.912302][T15874] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 556.912314][T15874] RSP: 002b:00007fee9a781038 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 556.912328][T15874] RAX: ffffffffffffffda RBX: 00007fee99bb6080 RCX: 00007fee9998e929 [ 556.912337][T15874] RDX: 0000000000000001 RSI: 0000000000000400 RDI: 0000000000000005 [ 556.912345][T15874] RBP: 00007fee99a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 556.912353][T15874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 556.912361][T15874] R13: 0000000000000000 R14: 00007fee99bb6080 R15: 00007fffcf67e8a8 [ 556.912379][T15874] [ 557.863231][T15899] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input25 [ 557.929604][T15889] FAULT_INJECTION: forcing a failure. [ 557.929604][T15889] name failslab, interval 1, probability 0, space 0, times 0 [ 558.005540][T15902] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2442'. [ 558.056562][T15889] CPU: 1 UID: 0 PID: 15889 Comm: syz.3.2437 Tainted: G U 6.16.0-rc3-syzkaller-00121-gf02769e7f272 #0 PREEMPT(full) [ 558.056589][T15889] Tainted: [U]=USER [ 558.056593][T15889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 558.056602][T15889] Call Trace: [ 558.056607][T15889] [ 558.056613][T15889] dump_stack_lvl+0x16c/0x1f0 [ 558.056638][T15889] should_fail_ex+0x512/0x640 [ 558.056657][T15889] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 558.056678][T15889] ? __pfx_mon_text_open+0x10/0x10 [ 558.056697][T15889] should_failslab+0xc2/0x120 [ 558.056711][T15889] __kmalloc_cache_noprof+0x6a/0x3e0 [ 558.056728][T15889] ? mon_text_open+0x1cb/0x4f0 [ 558.056748][T15889] ? __pfx_mon_text_open+0x10/0x10 [ 558.056767][T15889] mon_text_open+0x1cb/0x4f0 [ 558.056787][T15889] ? __pfx_mon_text_open+0x10/0x10 [ 558.056805][T15889] ? __debugfs_file_get+0x1fe/0x840 [ 558.056818][T15889] ? __pfx___debugfs_file_get+0x10/0x10 [ 558.056831][T15889] ? __pfx_apparmor_file_open+0x10/0x10 [ 558.056846][T15889] ? lockdown_is_locked_down+0x3f/0x130 [ 558.056864][T15889] ? bpf_lsm_locked_down+0x9/0x10 [ 558.056882][T15889] ? __pfx_mon_text_open+0x10/0x10 [ 558.056899][T15889] full_proxy_open_regular+0x1b6/0x360 [ 558.056921][T15889] do_dentry_open+0x744/0x1c10 [ 558.056940][T15889] ? __pfx_full_proxy_open_regular+0x10/0x10 [ 558.056959][T15889] vfs_open+0x82/0x3f0 [ 558.056977][T15889] path_openat+0x1de4/0x2cb0 [ 558.057003][T15889] ? __pfx_path_openat+0x10/0x10 [ 558.057024][T15889] ? __lock_acquire+0xb8a/0x1c90 [ 558.057043][T15889] do_filp_open+0x20b/0x470 [ 558.057062][T15889] ? __pfx_do_filp_open+0x10/0x10 [ 558.057093][T15889] ? alloc_fd+0x471/0x7d0 [ 558.057116][T15889] do_sys_openat2+0x11b/0x1d0 [ 558.057130][T15889] ? __pfx_do_sys_openat2+0x10/0x10 [ 558.057152][T15889] __x64_sys_openat+0x174/0x210 [ 558.057167][T15889] ? __pfx___x64_sys_openat+0x10/0x10 [ 558.057189][T15889] do_syscall_64+0xcd/0x490 [ 558.057210][T15889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.057224][T15889] RIP: 0033:0x7f34fd38e929 [ 558.057237][T15889] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 558.057249][T15889] RSP: 002b:00007f34fe12d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 558.057262][T15889] RAX: ffffffffffffffda RBX: 00007f34fd5b6080 RCX: 00007f34fd38e929 [ 558.057272][T15889] RDX: 0000000000000800 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 558.057280][T15889] RBP: 00007f34fd410b39 R08: 0000000000000000 R09: 0000000000000000 [ 558.057289][T15889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 558.057297][T15889] R13: 0000000000000000 R14: 00007f34fd5b6080 R15: 00007ffc90af6cb8 [ 558.057315][T15889] [ 558.352239][T15904] Process accounting resumed [ 558.799530][T15918] netlink: 338 bytes leftover after parsing attributes in process `syz.2.2446'. [ 560.871632][T15949] Process accounting resumed [ 562.130007][T15977] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 562.223190][T15980] FAULT_INJECTION: forcing a failure. [ 562.223190][T15980] name failslab, interval 1, probability 0, space 0, times 0 [ 562.343894][T15980] CPU: 1 UID: 0 PID: 15980 Comm: syz.0.2460 Tainted: G U 6.16.0-rc3-syzkaller-00121-gf02769e7f272 #0 PREEMPT(full) [ 562.343920][T15980] Tainted: [U]=USER [ 562.343924][T15980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 562.343933][T15980] Call Trace: [ 562.343938][T15980] [ 562.343944][T15980] dump_stack_lvl+0x16c/0x1f0 [ 562.343969][T15980] should_fail_ex+0x512/0x640 [ 562.343988][T15980] ? fs_reclaim_acquire+0xae/0x150 [ 562.344007][T15980] should_failslab+0xc2/0x120 [ 562.344021][T15980] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 562.344041][T15980] ? security_inode_alloc+0x3b/0x2b0 [ 562.344058][T15980] security_inode_alloc+0x3b/0x2b0 [ 562.344073][T15980] inode_init_always_gfp+0xce4/0x1030 [ 562.344094][T15980] alloc_inode+0x86/0x240 [ 562.344113][T15980] create_pipe_files+0x4c/0x930 [ 562.344136][T15980] do_pipe2+0xaf/0x1c0 [ 562.344155][T15980] ? __pfx_do_pipe2+0x10/0x10 [ 562.344176][T15980] ? xfd_validate_state+0x61/0x180 [ 562.344198][T15980] __x64_sys_pipe2+0x54/0x80 [ 562.344218][T15980] do_syscall_64+0xcd/0x490 [ 562.344238][T15980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 562.344253][T15980] RIP: 0033:0x7fa2bed8e929 [ 562.344265][T15980] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 562.344278][T15980] RSP: 002b:00007fa2bcbf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000125 [ 562.344291][T15980] RAX: ffffffffffffffda RBX: 00007fa2befb5fa0 RCX: 00007fa2bed8e929 [ 562.344300][T15980] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 0000000000000000 [ 562.344307][T15980] RBP: 00007fa2bee10b39 R08: 0000000000000000 R09: 0000000000000000 [ 562.344316][T15980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 562.344323][T15980] R13: 0000000000000000 R14: 00007fa2befb5fa0 R15: 00007ffc8af42ed8 [ 562.344341][T15980] [ 562.826459][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.834568][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.959798][T15990] netlink: 338 bytes leftover after parsing attributes in process `syz.2.2463'. [ 562.970774][T15990] netlink: 338 bytes leftover after parsing attributes in process `syz.2.2463'. [ 562.985186][T15990] netlink: 290 bytes leftover after parsing attributes in process `syz.2.2463'. [ 562.997355][T15990] veth0_macvtap: left promiscuous mode [ 563.003588][T15990] netlink: 290 bytes leftover after parsing attributes in process `syz.2.2463'. [ 563.430472][T15996] Process accounting resumed [ 563.458670][T15997] zswap: compressor not available [ 564.221856][T16024] netlink: 25 bytes leftover after parsing attributes in process `syz.2.2475'. [ 564.232884][T16025] netlink: 186 bytes leftover after parsing attributes in process `syz.0.2473'. [ 565.246668][T16046] netlink: 25 bytes leftover after parsing attributes in process `syz.0.2480'. [ 565.978777][T16044] zswap: compressor not available [ 567.223085][T16064] netlink: 25 bytes leftover after parsing attributes in process `syz.3.2481'. [ 567.258140][T16062] FAULT_INJECTION: forcing a failure. [ 567.258140][T16062] name failslab, interval 1, probability 0, space 0, times 0 [ 567.313311][T16062] CPU: 1 UID: 0 PID: 16062 Comm: syz.2.2482 Tainted: G U 6.16.0-rc3-syzkaller-00121-gf02769e7f272 #0 PREEMPT(full) [ 567.313337][T16062] Tainted: [U]=USER [ 567.313342][T16062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 567.313350][T16062] Call Trace: [ 567.313356][T16062] [ 567.313361][T16062] dump_stack_lvl+0x16c/0x1f0 [ 567.313386][T16062] should_fail_ex+0x512/0x640 [ 567.313405][T16062] ? __kmalloc_noprof+0xbf/0x510 [ 567.313426][T16062] ? tracing_log_err+0xb9/0x6a0 [ 567.313443][T16062] should_failslab+0xc2/0x120 [ 567.313457][T16062] __kmalloc_noprof+0xd2/0x510 [ 567.313474][T16062] ? __pfx_trace_seq_printf+0x10/0x10 [ 567.313493][T16062] tracing_log_err+0xb9/0x6a0 [ 567.313515][T16062] append_filter_err+0x380/0x5e0 [ 567.313533][T16062] apply_subsystem_event_filter+0x740/0x17a0 [ 567.313557][T16062] ? __pfx_apply_subsystem_event_filter+0x10/0x10 [ 567.313578][T16062] ? _copy_from_user+0x59/0xd0 [ 567.313600][T16062] subsystem_filter_write+0x95/0x120 [ 567.313618][T16062] ? __pfx_subsystem_filter_write+0x10/0x10 [ 567.313634][T16062] vfs_write+0x29d/0x1150 [ 567.313655][T16062] ? __pfx___mutex_lock+0x10/0x10 [ 567.313685][T16062] ? __pfx_vfs_write+0x10/0x10 [ 567.313710][T16062] ? __fget_files+0x20e/0x3c0 [ 567.313734][T16062] ksys_write+0x12a/0x250 [ 567.313752][T16062] ? __pfx_ksys_write+0x10/0x10 [ 567.313777][T16062] do_syscall_64+0xcd/0x490 [ 567.313798][T16062] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 567.313812][T16062] RIP: 0033:0x7f980c78e929 [ 567.313824][T16062] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 567.313837][T16062] RSP: 002b:00007f980d6ce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 567.313850][T16062] RAX: ffffffffffffffda RBX: 00007f980c9b5fa0 RCX: 00007f980c78e929 [ 567.313859][T16062] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000007 [ 567.313867][T16062] RBP: 00007f980c810b39 R08: 0000000000000000 R09: 0000000000000000 [ 567.313875][T16062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 567.313883][T16062] R13: 0000000000000000 R14: 00007f980c9b5fa0 R15: 00007ffd912a90d8 [ 567.313902][T16062] [ 568.250160][T16074] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2485'. [ 568.275620][ T7807] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 568.337113][T16074] netlink: 25 bytes leftover after parsing attributes in process `syz.2.2485'. [ 568.656341][T16081] Process accounting resumed [ 569.124277][T16098] FAULT_INJECTION: forcing a failure. [ 569.124277][T16098] name failslab, interval 1, probability 0, space 0, times 0 [ 569.146684][T16090] FAULT_INJECTION: forcing a failure. [ 569.146684][T16090] name failslab, interval 1, probability 0, space 0, times 0 [ 569.187780][T16098] CPU: 1 UID: 0 PID: 16098 Comm: syz.0.2493 Tainted: G U 6.16.0-rc3-syzkaller-00121-gf02769e7f272 #0 PREEMPT(full) [ 569.187807][T16098] Tainted: [U]=USER [ 569.187812][T16098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 569.187820][T16098] Call Trace: [ 569.187826][T16098] [ 569.187831][T16098] dump_stack_lvl+0x16c/0x1f0 [ 569.187857][T16098] should_fail_ex+0x512/0x640 [ 569.187876][T16098] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 569.187901][T16098] should_failslab+0xc2/0x120 [ 569.187915][T16098] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 569.187936][T16098] ? apply_subsystem_event_filter+0x46d/0x17a0 [ 569.187957][T16098] kstrdup+0x53/0x100 [ 569.187977][T16098] apply_subsystem_event_filter+0x46d/0x17a0 [ 569.188001][T16098] ? __pfx_apply_subsystem_event_filter+0x10/0x10 [ 569.188022][T16098] ? _copy_from_user+0x59/0xd0 [ 569.188044][T16098] subsystem_filter_write+0x95/0x120 [ 569.188062][T16098] ? __pfx_subsystem_filter_write+0x10/0x10 [ 569.188078][T16098] vfs_write+0x29d/0x1150 [ 569.188099][T16098] ? __pfx___mutex_lock+0x10/0x10 [ 569.188119][T16098] ? __pfx_vfs_write+0x10/0x10 [ 569.188143][T16098] ? __fget_files+0x20e/0x3c0 [ 569.188166][T16098] ksys_write+0x12a/0x250 [ 569.188183][T16098] ? __pfx_ksys_write+0x10/0x10 [ 569.188207][T16098] do_syscall_64+0xcd/0x490 [ 569.188228][T16098] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 569.188242][T16098] RIP: 0033:0x7fa2bed8e929 [ 569.188253][T16098] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 569.188266][T16098] RSP: 002b:00007fa2bcbf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 569.188279][T16098] RAX: ffffffffffffffda RBX: 00007fa2befb5fa0 RCX: 00007fa2bed8e929 [ 569.188289][T16098] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000006 [ 569.188296][T16098] RBP: 00007fa2bee10b39 R08: 0000000000000000 R09: 0000000000000000 [ 569.188304][T16098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 569.188312][T16098] R13: 0000000000000000 R14: 00007fa2befb5fa0 R15: 00007ffc8af42ed8 [ 569.188330][T16098] [ 569.408434][T16090] CPU: 1 UID: 0 PID: 16090 Comm: syz.1.2491 Tainted: G U 6.16.0-rc3-syzkaller-00121-gf02769e7f272 #0 PREEMPT(full) [ 569.408461][T16090] Tainted: [U]=USER [ 569.408466][T16090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 569.408475][T16090] Call Trace: [ 569.408480][T16090] [ 569.408485][T16090] dump_stack_lvl+0x16c/0x1f0 [ 569.408510][T16090] should_fail_ex+0x512/0x640 [ 569.408536][T16090] ? __build_skb_around+0x278/0x3b0 [ 569.408555][T16090] should_failslab+0xc2/0x120 [ 569.408569][T16090] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 569.408590][T16090] ? sctp_chunkify+0x51/0x2d0 [ 569.408612][T16090] sctp_chunkify+0x51/0x2d0 [ 569.408631][T16090] _sctp_make_chunk+0x148/0x270 [ 569.408651][T16090] sctp_make_control+0x2f/0x2d0 [ 569.408670][T16090] sctp_make_sack+0x1af/0x520 [ 569.408690][T16090] ? __pfx_sctp_make_sack+0x10/0x10 [ 569.408715][T16090] ? find_held_lock+0x2b/0x80 [ 569.408733][T16090] sctp_assoc_rwnd_increase+0x40a/0x6a0 [ 569.408751][T16090] sctp_ulpevent_free+0x217/0x4d0 [ 569.408768][T16090] sctp_queue_purge_ulpevents+0xb8/0x100 [ 569.408786][T16090] sctp_close+0x13b/0x940 [ 569.408803][T16090] ? __pfx_sctp_close+0x10/0x10 [ 569.408815][T16090] ? __pfx___might_resched+0x10/0x10 [ 569.408833][T16090] ? down_write+0x14d/0x200 [ 569.408845][T16090] ? ip_mc_drop_socket+0x1f/0x280 [ 569.408860][T16090] ? __pfx_down_write+0x10/0x10 [ 569.408874][T16090] inet_release+0x13f/0x280 [ 569.408893][T16090] __sock_release+0xb3/0x270 [ 569.408914][T16090] ? __pfx_sock_close+0x10/0x10 [ 569.408932][T16090] sock_close+0x1c/0x30 [ 569.408951][T16090] __fput+0x3ff/0xb70 [ 569.408969][T16090] task_work_run+0x14d/0x240 [ 569.408989][T16090] ? __pfx_task_work_run+0x10/0x10 [ 569.409008][T16090] ? __pfx___do_sys_close_range+0x10/0x10 [ 569.409032][T16090] exit_to_user_mode_loop+0xeb/0x110 [ 569.409052][T16090] do_syscall_64+0x3f6/0x490 [ 569.409074][T16090] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 569.409089][T16090] RIP: 0033:0x7fee9998e929 [ 569.409101][T16090] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 569.409114][T16090] RSP: 002b:00007fee9a7a2038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 569.409127][T16090] RAX: 0000000000000000 RBX: 00007fee99bb5fa0 RCX: 00007fee9998e929 [ 569.409136][T16090] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 569.409144][T16090] RBP: 00007fee99a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 569.409153][T16090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 569.409161][T16090] R13: 0000000000000000 R14: 00007fee99bb5fa0 R15: 00007fffcf67e8a8 [ 569.409179][T16090] [ 570.982003][T16114] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2499'. [ 571.099017][T16113] Process accounting resumed [ 571.705737][T16136] random: crng reseeded on system resumption [ 572.450745][T16148] ERROR: Out of memory at tomoyo_memory_ok. [ 572.589977][T16141] ERROR: Out of memory at tomoyo_memory_ok. [ 573.404698][T16166] Process accounting resumed [ 573.602167][T16169] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2514'. [ 573.670600][T16173] Process accounting resumed [ 574.418838][T16186] netlink: 25 bytes leftover after parsing attributes in process `syz.3.2517'. [ 574.533456][T16183] ima: policy update failed [ 574.579549][ T30] audit: type=1802 audit(6045959803.409:13): pid=16183 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.2517" res=0 errno=0 [ 574.761672][T16192] Process accounting resumed [ 575.049235][T16203] random: crng reseeded on system resumption [ 576.469902][T16223] Process accounting resumed [ 576.892386][T16229] FAULT_INJECTION: forcing a failure. [ 576.892386][T16229] name failslab, interval 1, probability 0, space 0, times 0 [ 576.929811][T16230] Process accounting resumed [ 576.963920][T16229] CPU: 1 UID: 0 PID: 16229 Comm: syz.0.2532 Tainted: G U 6.16.0-rc3-syzkaller-00121-gf02769e7f272 #0 PREEMPT(full) [ 576.963945][T16229] Tainted: [U]=USER [ 576.963950][T16229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 576.963958][T16229] Call Trace: [ 576.963964][T16229] [ 576.963970][T16229] dump_stack_lvl+0x16c/0x1f0 [ 576.963995][T16229] should_fail_ex+0x512/0x640 [ 576.964014][T16229] ? __kmalloc_noprof+0xbf/0x510 [ 576.964036][T16229] ? lsm_blob_alloc+0x68/0x90 [ 576.964055][T16229] should_failslab+0xc2/0x120 [ 576.964068][T16229] __kmalloc_noprof+0xd2/0x510 [ 576.964091][T16229] lsm_blob_alloc+0x68/0x90 [ 576.964109][T16229] security_prepare_creds+0x30/0x270 [ 576.964129][T16229] prepare_creds+0x56f/0x7d0 [ 576.964149][T16229] __sys_setregid+0x101/0x910 [ 576.964163][T16229] ? rcu_is_watching+0x12/0xc0 [ 576.964178][T16229] do_syscall_64+0xcd/0x490 [ 576.964199][T16229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.964213][T16229] RIP: 0033:0x7fa2bed8e929 [ 576.964225][T16229] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 576.964237][T16229] RSP: 002b:00007fa2bcbf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000072 [ 576.964251][T16229] RAX: ffffffffffffffda RBX: 00007fa2befb5fa0 RCX: 00007fa2bed8e929 [ 576.964260][T16229] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffffff [ 576.964269][T16229] RBP: 00007fa2bee10b39 R08: 0000000000000000 R09: 0000000000000000 [ 576.964277][T16229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 576.964285][T16229] R13: 0000000000000000 R14: 00007fa2befb5fa0 R15: 00007ffc8af42ed8 [ 576.964302][T16229] [ 578.629062][T16272] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2542'. [ 578.694003][T16274] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 578.726885][T16275] netlink: 25 bytes leftover after parsing attributes in process `syz.3.2543'. [ 579.021653][T16284] ima: policy update failed [ 579.050826][T16281] FAULT_INJECTION: forcing a failure. [ 579.050826][T16281] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 579.066665][T16284] netlink: 25 bytes leftover after parsing attributes in process `syz.3.2544'. [ 579.092192][ T30] audit: type=1802 audit(6045959807.899:14): pid=16284 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.2544" res=0 errno=0 [ 579.150548][T16281] CPU: 1 UID: 0 PID: 16281 Comm: syz.1.2546 Tainted: G U 6.16.0-rc3-syzkaller-00121-gf02769e7f272 #0 PREEMPT(full) [ 579.150574][T16281] Tainted: [U]=USER [ 579.150579][T16281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 579.150587][T16281] Call Trace: [ 579.150592][T16281] [ 579.150598][T16281] dump_stack_lvl+0x16c/0x1f0 [ 579.150637][T16281] should_fail_ex+0x512/0x640 [ 579.150660][T16281] should_fail_alloc_page+0xe7/0x130 [ 579.150675][T16281] prepare_alloc_pages+0x3c2/0x610 [ 579.150695][T16281] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 579.150715][T16281] ? lru_gen_update_size+0x543/0xe10 [ 579.150734][T16281] ? __up_read+0x1f8/0x750 [ 579.150754][T16281] ? __pfx___up_read+0x10/0x10 [ 579.150773][T16281] ? __rmap_walk_file+0x575/0x620 [ 579.150789][T16281] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 579.150810][T16281] ? __rmap_walk_file+0x575/0x620 [ 579.150830][T16281] ? rmap_walk_file+0x174/0x1f0 [ 579.150844][T16281] ? queue_folios_pte_range+0xf95/0x17b0 [ 579.150866][T16281] __folio_alloc_noprof+0x11/0x220 [ 579.150885][T16281] alloc_migration_target+0x2bf/0x770 [ 579.150901][T16281] migrate_pages_batch+0x3bf/0x31a0 [ 579.150919][T16281] ? __pfx_alloc_migration_target+0x10/0x10 [ 579.150939][T16281] ? __pfx_migrate_pages_batch+0x10/0x10 [ 579.150961][T16281] migrate_pages_sync+0x12d/0x8a0 [ 579.150976][T16281] ? __pfx_alloc_migration_target+0x10/0x10 [ 579.150994][T16281] ? __pfx_migrate_pages_sync+0x10/0x10 [ 579.151008][T16281] ? __pfx_queue_pages_test_walk+0x10/0x10 [ 579.151029][T16281] ? walk_page_range_mm+0x269/0x8a0 [ 579.151052][T16281] migrate_pages+0x1b67/0x23b0 [ 579.151068][T16281] ? __pfx_alloc_migration_target+0x10/0x10 [ 579.151087][T16281] ? __pfx_migrate_pages+0x10/0x10 [ 579.151102][T16281] ? queue_pages_range+0x11e/0x180 [ 579.151125][T16281] ? __pfx___up_read+0x10/0x10 [ 579.151144][T16281] ? do_migrate_pages+0x458/0x750 [ 579.151161][T16281] do_migrate_pages+0x48e/0x750 [ 579.151179][T16281] ? __pfx_do_migrate_pages+0x10/0x10 [ 579.151193][T16281] ? rcu_is_watching+0x12/0xc0 [ 579.151210][T16281] ? cap_capable+0xb3/0x250 [ 579.151221][T16281] ? get_task_mm+0xc2/0xf0 [ 579.151236][T16281] ? security_capable+0x250/0x260 [ 579.151258][T16281] kernel_migrate_pages+0x5b0/0x750 [ 579.151272][T16281] ? __pfx_kernel_migrate_pages+0x10/0x10 [ 579.151290][T16281] __x64_sys_migrate_pages+0x96/0x100 [ 579.151304][T16281] ? lockdep_hardirqs_on+0x7c/0x110 [ 579.151323][T16281] do_syscall_64+0xcd/0x490 [ 579.151343][T16281] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 579.151357][T16281] RIP: 0033:0x7fee9998e929 [ 579.151369][T16281] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 579.151383][T16281] RSP: 002b:00007fee9a7a2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000100 [ 579.151397][T16281] RAX: ffffffffffffffda RBX: 00007fee99bb5fa0 RCX: 00007fee9998e929 [ 579.151406][T16281] RDX: 0000200000000100 RSI: 0000000000000003 RDI: 0000000000000000 [ 579.151414][T16281] RBP: 00007fee99a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 579.151422][T16281] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000000 [ 579.151431][T16281] R13: 0000000000000000 R14: 00007fee99bb5fa0 R15: 00007fffcf67e8a8 [ 579.151449][T16281] [ 579.604401][T16292] ERROR: Out of memory at tomoyo_memory_ok. [ 582.462419][T16346] netlink: 330 bytes leftover after parsing attributes in process `syz.0.2564'. [ 582.543203][T16346] veth1_macvtap: left promiscuous mode [ 583.380509][T16360] Process accounting resumed [ 583.933424][T16383] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2574'. [ 585.340222][T16406] Process accounting resumed [ 586.301114][T16431] bridge0: port 2(dummy0) entered blocking state [ 586.310802][T16431] bridge0: port 2(dummy0) entered disabled state [ 586.352549][T16431] dummy0: entered allmulticast mode [ 586.393071][T16431] dummy0: entered promiscuous mode [ 586.430139][T16431] bridge0: port 2(dummy0) entered blocking state [ 586.436575][T16431] bridge0: port 2(dummy0) entered forwarding state [ 586.708938][T16448] : Can't lookup blockdev [ 586.740873][T16440] Process accounting resumed [ 587.111505][T16453] Process accounting resumed [ 589.784710][T16495] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2608'. [ 589.831300][T16495] netlink: 25 bytes leftover after parsing attributes in process `syz.0.2608'. [ 591.497758][T16518] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 592.040896][T16523] kafs: addr_prefs: Invalid Command [ 592.362367][T16510] kexec: Could not allocate control_code_buffer [ 593.035271][T16544] vivid-003: ================= START STATUS ================= [ 593.113403][T16546] delete_channel: no stack [ 593.133411][T16544] vivid-003: Radio HW Seek Mode: Bounded [ 593.286014][T16544] vivid-003: Radio Programmable HW Seek: false [ 593.337490][T16544] vivid-003: RDS Rx I/O Mode: Block I/O [ 593.389392][T16544] vivid-003: Generate RBDS Instead of RDS: false [ 593.517841][T16544] vivid-003: RDS Reception: true [ 593.587389][T16550] Process accounting resumed [ 593.608095][T16544] vivid-003: RDS Program Type: 0 inactive [ 593.711153][T16544] vivid-003: RDS PS Name: inactive [ 593.785781][T16544] vivid-003: RDS Radio Text: inactive [ 593.848472][T16544] vivid-003: RDS Traffic Announcement: false inactive [ 593.898127][T16544] vivid-003: RDS Traffic Program: false inactive [ 593.933596][T16557] can0: slcan on pty233. [ 594.044723][T16544] vivid-003: RDS Music: false inactive [ 594.057966][T16556] can0 (unregistered): slcan off pty233. [ 594.119622][T16544] vivid-003: ================== END STATUS ================== [ 594.622865][T16578] FAULT_INJECTION: forcing a failure. [ 594.622865][T16578] name failslab, interval 1, probability 0, space 0, times 0 [ 594.829448][T16578] CPU: 1 UID: 0 PID: 16578 Comm: syz.3.2632 Tainted: G U 6.16.0-rc3-syzkaller-00121-gf02769e7f272 #0 PREEMPT(full) [ 594.829475][T16578] Tainted: [U]=USER [ 594.829480][T16578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 594.829489][T16578] Call Trace: [ 594.829494][T16578] [ 594.829499][T16578] dump_stack_lvl+0x16c/0x1f0 [ 594.829524][T16578] should_fail_ex+0x512/0x640 [ 594.829544][T16578] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 594.829565][T16578] should_failslab+0xc2/0x120 [ 594.829579][T16578] __kmalloc_cache_noprof+0x6a/0x3e0 [ 594.829596][T16578] ? lockdep_init_map_type+0x5c/0x280 [ 594.829613][T16578] ? zs_create_pool+0x4d2/0xb80 [ 594.829630][T16578] zs_create_pool+0x4d2/0xb80 [ 594.829647][T16578] ? __pfx_zs_create_pool+0x10/0x10 [ 594.829664][T16578] ? disksize_store+0x117/0x670 [ 594.829680][T16578] ? __vmalloc_node_noprof+0xad/0xf0 [ 594.829696][T16578] ? disksize_store+0x117/0x670 [ 594.829714][T16578] disksize_store+0x174/0x670 [ 594.829733][T16578] ? __pfx_disksize_store+0x10/0x10 [ 594.829748][T16578] dev_attr_store+0x55/0x80 [ 594.829769][T16578] ? __pfx_dev_attr_store+0x10/0x10 [ 594.829788][T16578] sysfs_kf_write+0xef/0x150 [ 594.829806][T16578] kernfs_fop_write_iter+0x351/0x510 [ 594.829820][T16578] ? __pfx_sysfs_kf_write+0x10/0x10 [ 594.829838][T16578] vfs_write+0x6c7/0x1150 [ 594.829857][T16578] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 594.829873][T16578] ? __pfx___mutex_lock+0x10/0x10 [ 594.829892][T16578] ? __pfx_vfs_write+0x10/0x10 [ 594.829923][T16578] ksys_write+0x12a/0x250 [ 594.829941][T16578] ? __pfx_ksys_write+0x10/0x10 [ 594.829965][T16578] do_syscall_64+0xcd/0x490 [ 594.829986][T16578] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 594.830000][T16578] RIP: 0033:0x7f34fd38e929 [ 594.830012][T16578] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 594.830025][T16578] RSP: 002b:00007f34fe14e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 594.830038][T16578] RAX: ffffffffffffffda RBX: 00007f34fd5b5fa0 RCX: 00007f34fd38e929 [ 594.830048][T16578] RDX: 0000000000000001 RSI: 0000200000000ec0 RDI: 0000000000000004 [ 594.830056][T16578] RBP: 00007f34fd410b39 R08: 0000000000000000 R09: 0000000000000000 [ 594.830064][T16578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 594.830073][T16578] R13: 0000000000000000 R14: 00007f34fd5b5fa0 R15: 00007ffc90af6cb8 [ 594.830093][T16578] [ 595.077675][ C1] vkms_vblank_simulate: vblank timer overrun [ 596.989509][T16614] zswap: compressor not available [ 599.311449][T16670] FAULT_INJECTION: forcing a failure. [ 599.311449][T16670] name failslab, interval 1, probability 0, space 0, times 0 [ 599.435147][T16670] CPU: 1 UID: 0 PID: 16670 Comm: syz.0.2650 Tainted: G U 6.16.0-rc3-syzkaller-00121-gf02769e7f272 #0 PREEMPT(full) [ 599.435174][T16670] Tainted: [U]=USER [ 599.435178][T16670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 599.435187][T16670] Call Trace: [ 599.435192][T16670] [ 599.435198][T16670] dump_stack_lvl+0x16c/0x1f0 [ 599.435224][T16670] should_fail_ex+0x512/0x640 [ 599.435243][T16670] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 599.435263][T16670] should_failslab+0xc2/0x120 [ 599.435278][T16670] __kmalloc_cache_noprof+0x6a/0x3e0 [ 599.435295][T16670] ? __asan_memcpy+0x3c/0x60 [ 599.435310][T16670] ? create_filter_start.constprop.0+0x103/0x300 [ 599.435330][T16670] create_filter_start.constprop.0+0x103/0x300 [ 599.435350][T16670] apply_subsystem_event_filter+0x18d/0x17a0 [ 599.435370][T16670] ? __might_fault+0xe3/0x190 [ 599.435389][T16670] ? __might_fault+0x13b/0x190 [ 599.435407][T16670] ? __pfx_apply_subsystem_event_filter+0x10/0x10 [ 599.435428][T16670] ? _copy_from_user+0x59/0xd0 [ 599.435450][T16670] subsystem_filter_write+0x95/0x120 [ 599.435468][T16670] ? __pfx_subsystem_filter_write+0x10/0x10 [ 599.435484][T16670] vfs_write+0x29d/0x1150 [ 599.435505][T16670] ? __pfx___mutex_lock+0x10/0x10 [ 599.435529][T16670] ? __pfx_vfs_write+0x10/0x10 [ 599.435552][T16670] ? __fget_files+0x20e/0x3c0 [ 599.435576][T16670] ksys_write+0x12a/0x250 [ 599.435594][T16670] ? __pfx_ksys_write+0x10/0x10 [ 599.435619][T16670] do_syscall_64+0xcd/0x490 [ 599.435641][T16670] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.435656][T16670] RIP: 0033:0x7fa2bed8e929 [ 599.435668][T16670] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 599.435681][T16670] RSP: 002b:00007fa2bcbd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 599.435695][T16670] RAX: ffffffffffffffda RBX: 00007fa2befb6080 RCX: 00007fa2bed8e929 [ 599.435705][T16670] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000006 [ 599.435714][T16670] RBP: 00007fa2bee10b39 R08: 0000000000000000 R09: 0000000000000000 [ 599.435722][T16670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 599.435730][T16670] R13: 0000000000000000 R14: 00007fa2befb6080 R15: 00007ffc8af42ed8 [ 599.435749][T16670] [ 600.282054][T16690] netlink: 25 bytes leftover after parsing attributes in process `syz.3.2655'. [ 600.332050][T16684] ima: policy update failed [ 600.375776][ T30] audit: type=1802 audit(6045959829.217:15): pid=16684 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.2655" res=0 errno=0 [ 602.320821][ T7807] Bluetooth: hci1: unexpected event 0x12 length: 11 > 8 [ 602.721905][T16737] Process accounting resumed [ 606.872094][T16786] netlink: set zone limit has 8 unknown bytes [ 607.752947][T16810] lo: entered allmulticast mode [ 607.982435][ T30] audit: type=1800 audit(6045959836.817:16): pid=16816 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2687" name="members" dev="configfs" ino=49465 res=0 errno=0 [ 608.034771][T16812] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.237432][T16811] lo: left allmulticast mode [ 608.891682][T16827] openvswitch: netlink: Key type 29 is not supported [ 609.715834][T16837] FAULT_INJECTION: forcing a failure. [ 609.715834][T16837] name failslab, interval 1, probability 0, space 0, times 0 [ 609.847468][T16837] CPU: 1 UID: 0 PID: 16837 Comm: syz.3.2691 Tainted: G U 6.16.0-rc3-syzkaller-00121-gf02769e7f272 #0 PREEMPT(full) [ 609.847495][T16837] Tainted: [U]=USER [ 609.847500][T16837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 609.847508][T16837] Call Trace: [ 609.847513][T16837] [ 609.847519][T16837] dump_stack_lvl+0x16c/0x1f0 [ 609.847546][T16837] should_fail_ex+0x512/0x640 [ 609.847568][T16837] ? fs_reclaim_acquire+0xae/0x150 [ 609.847586][T16837] ? tomoyo_encode2+0x100/0x3e0 [ 609.847603][T16837] should_failslab+0xc2/0x120 [ 609.847617][T16837] __kmalloc_noprof+0xd2/0x510 [ 609.847637][T16837] ? d_absolute_path+0x136/0x1a0 [ 609.847654][T16837] tomoyo_encode2+0x100/0x3e0 [ 609.847670][T16837] ? kmem_cache_free+0x261/0x4d0 [ 609.847690][T16837] tomoyo_encode+0x29/0x50 [ 609.847706][T16837] tomoyo_realpath_from_path+0x18f/0x6e0 [ 609.847730][T16837] tomoyo_realpath_nofollow+0xdb/0xf0 [ 609.847748][T16837] ? __pfx_tomoyo_realpath_nofollow+0x10/0x10 [ 609.847765][T16837] ? tomoyo_domain+0xbb/0x150 [ 609.847785][T16837] ? tomoyo_init_request_info+0x101/0x370 [ 609.847801][T16837] tomoyo_find_next_domain+0x2a8/0x20b0 [ 609.847822][T16837] ? __pfx_tomoyo_find_next_domain+0x10/0x10 [ 609.847843][T16837] tomoyo_bprm_check_security+0x12e/0x1d0 [ 609.847864][T16837] ? tomoyo_bprm_check_security+0x120/0x1d0 [ 609.847885][T16837] security_bprm_check+0x1b9/0x1e0 [ 609.847899][T16837] bprm_execve+0x810/0x1650 [ 609.847920][T16837] ? __pfx_bprm_execve+0x10/0x10 [ 609.847937][T16837] ? copy_string_kernel+0x444/0x510 [ 609.847978][T16837] do_execveat_common.isra.0+0x4a5/0x610 [ 609.848001][T16837] __x64_sys_execve+0x8e/0xb0 [ 609.848021][T16837] do_syscall_64+0xcd/0x490 [ 609.848044][T16837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.848057][T16837] RIP: 0033:0x7f34fd38e929 [ 609.848069][T16837] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 609.848082][T16837] RSP: 002b:00007f34fe12d038 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 609.848095][T16837] RAX: ffffffffffffffda RBX: 00007f34fd5b6080 RCX: 00007f34fd38e929 [ 609.848105][T16837] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 609.848114][T16837] RBP: 00007f34fd410b39 R08: 0000000000000000 R09: 0000000000000000 [ 609.848123][T16837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 609.848131][T16837] R13: 0000000000000000 R14: 00007f34fd5b6080 R15: 00007ffc90af6cb8 [ 609.848149][T16837] [ 610.102009][ C1] vkms_vblank_simulate: vblank timer overrun [ 610.247464][T16837] ERROR: Out of memory at tomoyo_realpath_from_path. [ 610.342975][T16825] kexec: Could not allocate control_code_buffer [ 611.430655][T16863] Process accounting resumed [ 612.065651][T16882] openvswitch: netlink: Key type 29 is not supported [ 613.425218][T16912] tc_dump_action: action bad kind [ 614.350460][T16931] ERROR: Out of memory at tomoyo_memory_ok. [ 614.804324][T16942] futex_wake_op: syz.1.2710 tries to shift op by 64; fix this program [ 615.769829][T16956] openvswitch: netlink: Key type 29 is not supported [ 616.159324][T16966] vivid-007: ================= START STATUS ================= [ 616.234358][T16966] vivid-007: Generate PTS: true [ 616.253622][T16966] vivid-007: Generate SCR: true [ 616.275351][T16966] tpg source WxH: 320x240 (Y'CbCr) [ 616.307900][T16966] tpg field: 1 [ 616.311280][T16966] tpg crop: (0,0)/320x240 [ 616.335984][T16966] tpg compose: (0,0)/320x240 [ 616.357251][T16966] tpg colorspace: 8 [ 616.363728][T16961] Process accounting paused [ 616.373426][T16966] tpg transfer function: 0/0 [ 616.390930][T16966] tpg Y'CbCr encoding: 0/0 [ 616.406943][T16966] tpg quantization: 0/0 [ 616.459655][T16966] tpg RGB range: 0/2 [ 616.510538][T16973] Process accounting resumed [ 616.515227][T16966] vivid-007: ================== END STATUS ================== [ 617.018792][T16958] Invalid ELF header magic: != ELF [ 617.428433][ T7807] Bluetooth: hci1: unexpected event 0x09 length: 440 > 3 [ 617.544171][T16996] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2722'. [ 618.454243][T17010] sp0: Synchronizing with TNC [ 619.230924][T17026] Process accounting resumed [ 621.308437][T17067] 0x000200000001-0xa29656a63616329 : "" [ 621.395735][T17067] mtd: partition "" is out of reach -- disabled [ 621.579299][T17067] ftl_cs: FTL header not found. [ 621.761757][T17074] ERROR: Out of memory at tomoyo_memory_ok. [ 622.120058][T17082] ERROR: Out of memory at tomoyo_memory_ok. [ 622.177199][T17074] ERROR: Out of memory at tomoyo_memory_ok. [ 622.555118][T17085] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2745'. [ 624.100086][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.106655][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.659912][T17137] sp0: Synchronizing with TNC [ 625.732923][T17139] Invalid ELF header magic: != ELF [ 626.160194][T17145] FAULT_INJECTION: forcing a failure. [ 626.160194][T17145] name failslab, interval 1, probability 0, space 0, times 0 [ 626.238872][T17145] CPU: 1 UID: 0 PID: 17145 Comm: syz.3.2757 Tainted: G U 6.16.0-rc3-syzkaller-00121-gf02769e7f272 #0 PREEMPT(full) [ 626.238899][T17145] Tainted: [U]=USER [ 626.238904][T17145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 626.238912][T17145] Call Trace: [ 626.238917][T17145] [ 626.238923][T17145] dump_stack_lvl+0x16c/0x1f0 [ 626.238949][T17145] should_fail_ex+0x512/0x640 [ 626.238968][T17145] ? __kmalloc_noprof+0xbf/0x510 [ 626.238990][T17145] ? handler_new_ref+0x1b0/0xc60 [ 626.239010][T17145] should_failslab+0xc2/0x120 [ 626.239023][T17145] __kmalloc_noprof+0xd2/0x510 [ 626.239041][T17145] ? __asan_memcpy+0x3c/0x60 [ 626.239061][T17145] handler_new_ref+0x1b0/0xc60 [ 626.239085][T17145] v4l2_ctrl_new+0x1963/0x2180 [ 626.239111][T17145] ? __pfx_v4l2_ctrl_new+0x10/0x10 [ 626.239136][T17145] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 626.239158][T17145] v4l2_ctrl_new_std+0x1be/0x290 [ 626.239183][T17145] ? __pfx_v4l2_ctrl_new_std+0x10/0x10 [ 626.239205][T17145] ? rcu_is_watching+0x12/0xc0 [ 626.239219][T17145] ? trace_kmalloc+0x2b/0xd0 [ 626.239231][T17145] ? __kvmalloc_node_noprof+0x298/0x620 [ 626.239250][T17145] ? v4l2_ctrl_handler_init_class+0x1fc/0x340 [ 626.239271][T17145] ? media_request_object_init+0x100/0x180 [ 626.239290][T17145] vicodec_open+0x1d0/0xf90 [ 626.239312][T17145] v4l2_open+0x222/0x490 [ 626.239330][T17145] ? __pfx_v4l2_open+0x10/0x10 [ 626.239346][T17145] chrdev_open+0x231/0x6a0 [ 626.239365][T17145] ? __pfx_apparmor_file_open+0x10/0x10 [ 626.239382][T17145] ? __pfx_chrdev_open+0x10/0x10 [ 626.239403][T17145] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 626.239423][T17145] do_dentry_open+0x744/0x1c10 [ 626.239443][T17145] ? __pfx_chrdev_open+0x10/0x10 [ 626.239467][T17145] vfs_open+0x82/0x3f0 [ 626.239483][T17145] path_openat+0x1de4/0x2cb0 [ 626.239508][T17145] ? __pfx_path_openat+0x10/0x10 [ 626.239536][T17145] ? __lock_acquire+0xb8a/0x1c90 [ 626.239558][T17145] do_filp_open+0x20b/0x470 [ 626.239578][T17145] ? __pfx_do_filp_open+0x10/0x10 [ 626.239611][T17145] ? alloc_fd+0x471/0x7d0 [ 626.239634][T17145] do_sys_openat2+0x11b/0x1d0 [ 626.239649][T17145] ? __pfx_do_sys_openat2+0x10/0x10 [ 626.239671][T17145] __x64_sys_openat+0x174/0x210 [ 626.239686][T17145] ? __pfx___x64_sys_openat+0x10/0x10 [ 626.239709][T17145] do_syscall_64+0xcd/0x490 [ 626.239730][T17145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 626.239745][T17145] RIP: 0033:0x7f34fd38e929 [ 626.239757][T17145] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 626.239770][T17145] RSP: 002b:00007f34fe14e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 626.239783][T17145] RAX: ffffffffffffffda RBX: 00007f34fd5b5fa0 RCX: 00007f34fd38e929 [ 626.239793][T17145] RDX: 00000000000c4400 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 626.239802][T17145] RBP: 00007f34fd410b39 R08: 0000000000000000 R09: 0000000000000000 [ 626.239811][T17145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 626.239819][T17145] R13: 0000000000000000 R14: 00007f34fd5b5fa0 R15: 00007ffc90af6cb8 [ 626.239838][T17145] [ 627.753459][T17172] random: crng reseeded on system resumption [ 628.993959][T17198] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2770'. [ 629.480572][T17204] Process accounting resumed [ 629.763173][T17221] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2775'. [ 630.112764][T17221] HfR: entered promiscuous mode [ 631.831910][T17258] Invalid ELF header magic: != ELF [ 632.059370][T17235] kexec: Could not allocate control_code_buffer [ 634.541571][T17304] sp0: Synchronizing with TNC [ 635.053516][T17312] FAULT_INJECTION: forcing a failure. [ 635.053516][T17312] name failslab, interval 1, probability 0, space 0, times 0 [ 635.053567][T17312] CPU: 1 UID: 0 PID: 17312 Comm: syz.3.2795 Tainted: G U 6.16.0-rc3-syzkaller-00121-gf02769e7f272 #0 PREEMPT(full) [ 635.053589][T17312] Tainted: [U]=USER [ 635.053594][T17312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 635.053602][T17312] Call Trace: [ 635.053607][T17312] [ 635.053613][T17312] dump_stack_lvl+0x16c/0x1f0 [ 635.053637][T17312] should_fail_ex+0x512/0x640 [ 635.053656][T17312] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 635.053679][T17312] should_failslab+0xc2/0x120 [ 635.053693][T17312] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 635.053711][T17312] ? __proc_create+0xc3/0x8c0 [ 635.053732][T17312] ? __proc_create+0x2ce/0x8c0 [ 635.053753][T17312] __proc_create+0x2ce/0x8c0 [ 635.053773][T17312] ? __pfx___proc_create+0x10/0x10 [ 635.053800][T17312] proc_create_reg+0x7d/0x180 [ 635.053814][T17312] proc_create_data+0x86/0x110 [ 635.053826][T17312] ? __pfx_proc_create_data+0x10/0x10 [ 635.053841][T17312] ? net_generic+0xf4/0x2a0 [ 635.053869][T17312] nfsd_net_init+0x11b/0x3d0 [ 635.053885][T17312] ? __pfx_nfsd_net_init+0x10/0x10 [ 635.053900][T17312] ops_init+0x1e2/0x5f0 [ 635.053923][T17312] setup_net+0x1ff/0x510 [ 635.053934][T17312] ? lockdep_init_map_type+0x5c/0x280 [ 635.053953][T17312] ? __pfx_setup_net+0x10/0x10 [ 635.053967][T17312] ? debug_mutex_init+0x37/0x70 [ 635.053982][T17312] copy_net_ns+0x2a6/0x5f0 [ 635.053997][T17312] create_new_namespaces+0x3ea/0xa90 [ 635.054016][T17312] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 635.054032][T17312] ksys_unshare+0x45b/0xa40 [ 635.054050][T17312] ? __pfx_ksys_unshare+0x10/0x10 [ 635.054067][T17312] ? xfd_validate_state+0x61/0x180 [ 635.054090][T17312] __x64_sys_unshare+0x31/0x40 [ 635.054106][T17312] do_syscall_64+0xcd/0x490 [ 635.054127][T17312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 635.054142][T17312] RIP: 0033:0x7f34fd38e929 [ 635.054153][T17312] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 635.054166][T17312] RSP: 002b:00007f34fe14e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 635.054180][T17312] RAX: ffffffffffffffda RBX: 00007f34fd5b5fa0 RCX: 00007f34fd38e929 [ 635.054188][T17312] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 635.054197][T17312] RBP: 00007f34fd410b39 R08: 0000000000000000 R09: 0000000000000000 [ 635.054205][T17312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 635.054213][T17312] R13: 0000000000000000 R14: 00007f34fd5b5fa0 R15: 00007ffc90af6cb8 [ 635.054231][T17312] [ 636.372076][T17321] tty tty45: ldisc open failed (-12), clearing slot 44 [ 640.157749][T17396] ================================================================== [ 640.157761][T17396] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x1a6f/0x1e60 [ 640.157785][T17396] Write of size 8 at addr ffffc90003739000 by task syz.3.2813/17396 [ 640.157798][T17396] [ 640.157808][T17396] CPU: 1 UID: 0 PID: 17396 Comm: syz.3.2813 Tainted: G U 6.16.0-rc3-syzkaller-00121-gf02769e7f272 #0 PREEMPT(full) [ 640.157828][T17396] Tainted: [U]=USER [ 640.157833][T17396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 640.157841][T17396] Call Trace: [ 640.157846][T17396] [ 640.157852][T17396] dump_stack_lvl+0x116/0x1f0 [ 640.157874][T17396] print_report+0xcd/0x680 [ 640.157895][T17396] ? __virt_addr_valid+0x81/0x610 [ 640.157910][T17396] ? sys_imageblit+0x1a6f/0x1e60 [ 640.157924][T17396] kasan_report+0xe0/0x110 [ 640.157937][T17396] ? sys_imageblit+0x1a6f/0x1e60 [ 640.157954][T17396] sys_imageblit+0x1a6f/0x1e60 [ 640.157971][T17396] ? __lock_acquire+0xb8a/0x1c90 [ 640.157987][T17396] ? __pfx_sys_imageblit+0x10/0x10 [ 640.158003][T17396] ? do_raw_spin_lock+0x12c/0x2b0 [ 640.158021][T17396] ? find_held_lock+0x2b/0x80 [ 640.158036][T17396] ? queue_work_on+0x12a/0x1f0 [ 640.158054][T17396] ? lockdep_hardirqs_on+0x7c/0x110 [ 640.158074][T17396] ? queue_work_on+0x8b/0x1f0 [ 640.158093][T17396] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 640.158111][T17396] bit_putcs+0x90f/0xde0 [ 640.158134][T17396] ? __pfx_bit_putcs+0x10/0x10 [ 640.158152][T17396] ? bit_cursor+0xeca/0x17e0 [ 640.158173][T17396] ? fb_get_color_depth+0x120/0x250 [ 640.158191][T17396] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 640.158211][T17396] ? __pfx_bit_putcs+0x10/0x10 [ 640.158230][T17396] fbcon_putcs+0x383/0x4a0 [ 640.158248][T17396] fbcon_redraw+0x29b/0x510 [ 640.158268][T17396] fbcon_scroll+0x448/0x690 [ 640.158286][T17396] con_scroll+0x45f/0x690 [ 640.158306][T17396] do_con_write+0x5560/0x8280 [ 640.158340][T17396] ? __pfx_do_con_write+0x10/0x10 [ 640.158364][T17396] con_write+0x23/0xb0 [ 640.158384][T17396] n_tty_write+0x40f/0x1160 [ 640.158402][T17396] ? __pfx_n_tty_write+0x10/0x10 [ 640.158415][T17396] ? rcu_is_watching+0x12/0xc0 [ 640.158429][T17396] ? __pfx_woken_wake_function+0x10/0x10 [ 640.158449][T17396] ? kfree+0x24f/0x4d0 [ 640.158463][T17396] ? file_tty_write.constprop.0+0x6ef/0x9b0 [ 640.158484][T17396] ? __pfx_n_tty_write+0x10/0x10 [ 640.158498][T17396] file_tty_write.constprop.0+0x504/0x9b0 [ 640.158519][T17396] redirected_tty_write+0xd4/0x150 [ 640.158539][T17396] vfs_write+0x6c7/0x1150 [ 640.158557][T17396] ? __pfx_redirected_tty_write+0x10/0x10 [ 640.158577][T17396] ? __pfx_vfs_write+0x10/0x10 [ 640.158593][T17396] ? find_held_lock+0x2b/0x80 [ 640.158610][T17396] ksys_write+0x12a/0x250 [ 640.158627][T17396] ? __pfx_ksys_write+0x10/0x10 [ 640.158647][T17396] do_syscall_64+0xcd/0x490 [ 640.158666][T17396] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 640.158681][T17396] RIP: 0033:0x7f34fd38e929 [ 640.158692][T17396] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 640.158705][T17396] RSP: 002b:00007f34fe12d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 640.158719][T17396] RAX: ffffffffffffffda RBX: 00007f34fd5b6080 RCX: 00007f34fd38e929 [ 640.158728][T17396] RDX: 000000000000003a RSI: 0000200000000440 RDI: 0000000000000005 [ 640.158737][T17396] RBP: 00007f34fd410b39 R08: 0000000000000000 R09: 0000000000000000 [ 640.158746][T17396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 640.158754][T17396] R13: 0000000000000001 R14: 00007f34fd5b6080 R15: 00007ffc90af6cb8 [ 640.158767][T17396] [ 640.158773][T17396] [ 640.158779][T17396] The buggy address belongs to the virtual mapping at [ 640.158779][T17396] [ffffc90003439000, ffffc9000373a000) created by: [ 640.158779][T17396] drm_gem_shmem_vmap_locked+0x4bc/0x720 [ 640.158800][T17396] [ 640.158804][T17396] Memory state around the buggy address: [ 640.158811][T17396] ffffc90003738f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 640.158821][T17396] ffffc90003738f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 640.158831][T17396] >ffffc90003739000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 640.158839][T17396] ^ [ 640.158846][T17396] ffffc90003739080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 640.158856][T17396] ffffc90003739100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 640.158864][T17396] ================================================================== [ 640.158872][T17396] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 640.158882][T17396] CPU: 1 UID: 0 PID: 17396 Comm: syz.3.2813 Tainted: G U 6.16.0-rc3-syzkaller-00121-gf02769e7f272 #0 PREEMPT(full) [ 640.158904][T17396] Tainted: [U]=USER [ 640.158909][T17396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 640.158917][T17396] Call Trace: [ 640.158922][T17396] [ 640.158927][T17396] dump_stack_lvl+0x3d/0x1f0 [ 640.158946][T17396] panic+0x71c/0x800 [ 640.158964][T17396] ? __pfx_panic+0x10/0x10 [ 640.158983][T17396] ? __pfx__printk+0x10/0x10 [ 640.158999][T17396] ? rcu_is_watching+0x12/0xc0 [ 640.159015][T17396] ? sys_imageblit+0x1a6f/0x1e60 [ 640.159030][T17396] check_panic_on_warn+0xab/0xb0 [ 640.159049][T17396] end_report+0x107/0x170 [ 640.159068][T17396] kasan_report+0xee/0x110 [ 640.159081][T17396] ? sys_imageblit+0x1a6f/0x1e60 [ 640.159098][T17396] sys_imageblit+0x1a6f/0x1e60 [ 640.159114][T17396] ? __lock_acquire+0xb8a/0x1c90 [ 640.159131][T17396] ? __pfx_sys_imageblit+0x10/0x10 [ 640.159147][T17396] ? do_raw_spin_lock+0x12c/0x2b0 [ 640.159166][T17396] ? find_held_lock+0x2b/0x80 [ 640.159181][T17396] ? queue_work_on+0x12a/0x1f0 [ 640.159199][T17396] ? lockdep_hardirqs_on+0x7c/0x110 [ 640.159217][T17396] ? queue_work_on+0x8b/0x1f0 [ 640.159236][T17396] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 640.159253][T17396] bit_putcs+0x90f/0xde0 [ 640.159277][T17396] ? __pfx_bit_putcs+0x10/0x10 [ 640.159296][T17396] ? bit_cursor+0xeca/0x17e0 [ 640.159317][T17396] ? fb_get_color_depth+0x120/0x250 [ 640.159342][T17396] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 640.159364][T17396] ? __pfx_bit_putcs+0x10/0x10 [ 640.159383][T17396] fbcon_putcs+0x383/0x4a0 [ 640.159404][T17396] fbcon_redraw+0x29b/0x510 [ 640.159423][T17396] fbcon_scroll+0x448/0x690 [ 640.159443][T17396] con_scroll+0x45f/0x690 [ 640.159462][T17396] do_con_write+0x5560/0x8280 [ 640.159487][T17396] ? __pfx_do_con_write+0x10/0x10 [ 640.159510][T17396] con_write+0x23/0xb0 [ 640.159529][T17396] n_tty_write+0x40f/0x1160 [ 640.159547][T17396] ? __pfx_n_tty_write+0x10/0x10 [ 640.159561][T17396] ? rcu_is_watching+0x12/0xc0 [ 640.159574][T17396] ? __pfx_woken_wake_function+0x10/0x10 [ 640.159594][T17396] ? kfree+0x24f/0x4d0 [ 640.159609][T17396] ? file_tty_write.constprop.0+0x6ef/0x9b0 [ 640.159629][T17396] ? __pfx_n_tty_write+0x10/0x10 [ 640.159644][T17396] file_tty_write.constprop.0+0x504/0x9b0 [ 640.159666][T17396] redirected_tty_write+0xd4/0x150 [ 640.159686][T17396] vfs_write+0x6c7/0x1150 [ 640.159703][T17396] ? __pfx_redirected_tty_write+0x10/0x10 [ 640.159724][T17396] ? __pfx_vfs_write+0x10/0x10 [ 640.159741][T17396] ? find_held_lock+0x2b/0x80 [ 640.159758][T17396] ksys_write+0x12a/0x250 [ 640.159776][T17396] ? __pfx_ksys_write+0x10/0x10 [ 640.159796][T17396] do_syscall_64+0xcd/0x490 [ 640.159816][T17396] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 640.159829][T17396] RIP: 0033:0x7f34fd38e929 [ 640.159840][T17396] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 640.159852][T17396] RSP: 002b:00007f34fe12d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 640.159866][T17396] RAX: ffffffffffffffda RBX: 00007f34fd5b6080 RCX: 00007f34fd38e929 [ 640.159875][T17396] RDX: 000000000000003a RSI: 0000200000000440 RDI: 0000000000000005 [ 640.159884][T17396] RBP: 00007f34fd410b39 R08: 0000000000000000 R09: 0000000000000000 [ 640.159892][T17396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 640.159901][T17396] R13: 0000000000000001 R14: 00007f34fd5b6080 R15: 00007ffc90af6cb8 [ 640.159914][T17396] [ 640.159970][T17396] Kernel Offset: disabled