last executing test programs: 26.50762475s ago: executing program 1 (id=4831): socket(0x2, 0x1, 0x84) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) (async, rerun: 64) rseq$auto(&(0x7f00000001c0)={0xe, 0x20401, 0x5fc, 0x10000006, 0xffffffff, 0x6}, 0x8000, 0x0, 0x6) (async, rerun: 64) mmap$auto(0x0, 0x400008, 0xe1, 0x9b72, 0x2, 0x8000) (async) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) write$auto(r0, 0x0, 0xfffffdef) (async) close_range$auto(0x2, 0x8, 0x0) (async) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000005c0), r2) (async) sendmsg$auto_ETHTOOL_MSG_STRSET_GET(r2, 0x0, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) (async) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x40400, 0x48) openat$auto_proc_page_owner_threshold_(0xffffffffffffff9c, 0x0, 0xc000, 0x0) (async) r4 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async, rerun: 32) fchmodat$auto(r3, &(0x7f0000000080)='./cgroup\x00', 0x2003) (rerun: 32) r5 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x8080, 0x0) setreuid$auto(0x80000000, 0x7fffffffffffffff) (async, rerun: 32) ioctl$auto_SNDCTL_DSP_POST(r5, 0x5008, 0x0) (async, rerun: 32) r6 = openat$auto_vga_arb_device_fops_vgaarb(0xffffffffffffff9c, &(0x7f0000000080), 0x20901, 0x0) r7 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0x1000000000eb1, 0xfffffffffffffffa, 0x8000) socket(0x10, 0x2, 0x14) r8 = fsmount$auto(r6, 0x5, 0xda) ioctl$auto(0x3, 0x8b0b, r8) (async) write$auto(r7, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) ioctl$auto_KVM_HAS_DEVICE_ATTR(r4, 0x4018aee3, &(0x7f00000000c0)={0x101, 0x0}) keyctl$auto(0x7, 0xfffffffb, 0x2, r9, 0x8) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 26.033285079s ago: executing program 1 (id=4833): r0 = openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000240), 0xa002, 0x0) writev$auto(r0, 0x0, 0x100) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) ioctl$auto_UBI_IOCDET(0xffffffffffffffff, 0x40046f41, 0x0) unshare$auto(0x40000080) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/dummy0/mtu\x00', 0xe3542, 0x0) sendfile$auto(r1, r1, 0x0, 0x9) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) r3 = openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cpu/0/cpuid\x00', 0xad00, 0x0) readv$auto(r3, &(0x7f0000000680)={&(0x7f0000000540), 0x40200}, 0x3) ioctl$auto_SNDCTL_DSP_SPEED(r2, 0xc0045002, 0x0) ppoll$auto(&(0x7f0000000000)={r2, 0x40}, 0x2, 0x0, 0x0, 0x8) r4 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x102, 0x0) write$auto_console_fops_tty_io(r4, &(0x7f0000000e00)="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", 0xd8e) ioctl$auto_SNDCTL_DSP_SYNC(r2, 0x5001, 0xfffffffffffffffc) modify_ldt$auto(0x1, 0x0, 0x10) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40, 0x0) r6 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) pread64$auto(r6, 0x0, 0x5, 0x8000400) r7 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) sendmsg$auto_OVS_FLOW_CMD_NEW(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="04010000", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="0000e4800000000800000000000019c9596fa6ea591b8600fc0226f23b00000000000000000000000000000000fb00d97edc7946b28f272870de1524d515e176e05de142cf0d13d09c3708ece76d83a9ef09c0ba3fb28bc1ecc18e1c87067f8b3fd5b3c4", @ANYRES32=0x0, @ANYBLOB="0000bb80fb01721b682b3263a2bc584ce700000006002800c6ce0000c70029809b00eb80b2a8f27f322ebb1d998ad4c095f5fff47261cbfbcf12a27f7843d1267efabf71fefefd9a844fbaf5d43901f6ba2de9801e0215f548e7da3bba8d49933c931e8bd134b77815a831c49137859c16cc46c9f22f4f94fc1c773139999ca9fd635072e13e6d1306fa0b8bdf6e24f8ce9a89a164eae4f5ebcf039c7532f1f92778f961aff8deb24b217ebbd40ecd86ee37c6116b2c5104007b800008001800090000000800db00", @ANYRES32=0xee00, @ANYBLOB="1400fe00fc00000000000000000000000000000108001900", @ANYRES32=r5, @ANYBLOB], 0x104}, 0x1, 0x0, 0x0, 0x2004c080}, 0x4000044) r8 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r7, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) sendmsg$auto_ETHTOOL_MSG_DEBUG_SET(r8, 0x0, 0x20000080) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x40, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x4, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001d, 0x20008000007, 0x6d3e, 0x9, 0xfffffffeffffffff, 0x9000]}, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x404020009, 0xdb, 0xf1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 21.801316166s ago: executing program 3 (id=4837): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) getsockopt$auto_SO_TXREHASH(0xffffffffffffffff, 0x2, 0x4a, &(0x7f0000000040)='/dev/cec4\x00', &(0x7f0000000300)) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000003740)='/dev/sequencer2\x00', 0x88241, 0x0) ioctl$auto_SNDCTL_SEQ_GETINCOUNT(r0, 0x80045105, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x105d00, 0x0) r1 = socket(0x10, 0x2, 0x0) read$auto_proc_oom_adj_operations_base(0xffffffffffffffff, &(0x7f0000000240)=""/153, 0x99) mmap$auto(0x8, 0x400, 0x0, 0x12, r1, 0x9) r2 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec4\x00', 0x101901, 0x0) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f0000000100)={'\x00', 0x0, 0x6, 0x2, 0x9b3, 0x9, "0200000002000000997e763f222ce1", '\x00', "0001410c", '\x00', ["f5404de9641f0000000060c1", "70d9a9a3af9f39d000000001", "ef5ac4927ad89c5c00"]}) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x103e81, 0x0) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) write$auto(0xffffffffffffffff, 0x0, 0x100082) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x101e81, 0x0) ioctl$auto_TCFLSH2(r3, 0x5408, 0x0) mmap$auto(0x0, 0x20009, 0x9, 0xebe, 0xffffffffffffffff, 0x8000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/tty/ttypd/uevent\x00', 0x200, 0x0) read$auto(r4, 0x0, 0x20) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x0, 0x0) writev$auto(r5, &(0x7f0000000200)={0x0, 0x7}, 0x3) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/tty11\x00', 0x4000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_hwsim_simulate_radar_(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/ieee80211/phy17/hwsim/dfs_simulate_radar\x00', 0x0, 0x0) madvise$auto(0x0, 0x20499d, 0x9) 20.597424251s ago: executing program 1 (id=4839): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0x101}, 0x8}, 0x7, 0x20020000) sendmsg$auto_ETHTOOL_MSG_FEC_GET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000380)={0x280, 0x0, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_FEC_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xfff}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8001}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4cb}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}]}, @ETHTOOL_A_FEC_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_FEC_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7b36}]}, @ETHTOOL_A_FEC_HEADER={0x80, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}]}, @ETHTOOL_A_FEC_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}, @ETHTOOL_A_FEC_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7f}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xffffffff}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_FEC_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xc6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}]}, @ETHTOOL_A_FEC_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}, @ETHTOOL_A_FEC_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5003}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}, @ETHTOOL_A_FEC_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}]}, 0x280}, 0x1, 0x0, 0x0, 0x2004c801}, 0x10000) io_uring_setup$auto(0x7, 0x0) setsockopt$auto(0x3, 0x1, 0x2e, 0x0, 0x9) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) 19.771791845s ago: executing program 1 (id=4840): socket(0xa, 0x5, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) setsockopt$auto(0x3, 0x10000000084, 0x71, 0x0, 0x8) r0 = openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000140)='/proc/uptime\x00', 0x40002, 0x0) sendfile$auto(r0, r0, &(0x7f0000000040)=0x8010, 0x4000000000788b) mmap$auto(0x0, 0x61, 0x100001000000003, 0x9b72, 0x2, 0x8000) r1 = open(0x0, 0x26142, 0x4b) ioctl$auto_FS_IOC_SETFLAGS2(r1, 0x40086602, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) close_range$auto(0x2, 0x8, 0x0) 18.410559992s ago: executing program 1 (id=4842): r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0) write$auto_seq_oss_f_ops_seq_oss(r0, &(0x7f0000000040)="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", 0xfe04) r1 = openat$auto_trace_options_core_fops_trace(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/debug/tracing/options/stacktrace\x00', 0x10000, 0x0) socket(0x2, 0x1, 0x106) bind$auto(0x3, 0x0, 0x6c) socket(0x1f, 0x80000, 0x1) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x1, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r3, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) clock_gettime$auto(0x80000000, 0x0) socket(0x1e, 0x5, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd3/queue/rq_affinity\x00', 0x10b042, 0x0) mmap$auto(0x0, 0x3, 0xdf, 0xeb1, 0x40000000000a5, 0x80000008000) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000b80)='/proc/sys/kernel/kptr_restrict\x00', 0x202, 0x0) read$auto(r4, 0x0, 0xb5) r5 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x640, 0x0) setsockopt$auto_SO_SELECT_ERR_QUEUE(0xffffffffffffffff, 0x9, 0x2d, &(0x7f0000000580)='/sys/kernel/debug/tracing/options/stacktrace\x00', 0x40) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/020/001\x00', 0x40, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto_MON_IOCG_STATS(r5, 0x80089203, 0x0) ioctl$auto_FIDEDUPERANGE(r1, 0xc0189436, 0x4) mmap$auto(0x0, 0x4000b, 0x27b, 0x9b72, 0x7, 0x28000) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x10b040, 0x0) 16.575289526s ago: executing program 3 (id=4843): r0 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82000, 0x0) r1 = socket(0x2a, 0x5, 0x6) mmap$auto(0x0, 0x400, 0x80df, 0x200000000009b7e, 0x2, 0x8000) r2 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/pcmC1D1c\x00', 0x4001, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2(r2, 0xc1004111, 0x0) getsockopt$auto_SO_RCVPRIORITY(r1, 0x2, 0x52, &(0x7f00000001c0)='/dev/virtual_nci\x00', &(0x7f0000000240)=0x97a) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) pread64$auto(r0, 0x0, 0x7fb, 0x400) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mincore$auto(0x1000, 0x8001, 0x0) ppoll$auto(0x0, 0x100, 0x0, 0x0, 0x8) r4 = socket(0xa, 0x5, 0x84) getsockopt$auto(r4, 0x84, 0x73, 0x0, 0x0) r5 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) ioctl$auto_USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f00000001c0)={0x80, 0x6, 0x102, 0xe8, 0xec, 0x9c, 0x0}) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xa, 0x8fd6, 0x400000000000948b, 0x3, 0x15f4da0a, 0x2, 0x200003, 0x10000000065, 0x5, 0x3, 0x7, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x4e, 0x5, 0x7, 0x2580000, 0x948b, 0x3, 0x4, 0x3, 0x3, 0x62, 0x80000020, 0x7, 0x6d3e, 0x9, 0x2, 0x2]}, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) inotify_init1$auto(0x403) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0xa, 0x0) 15.718540692s ago: executing program 1 (id=4844): socket(0x6, 0x801, 0x1) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r0 = prctl$auto(0x41, 0x3, 0x0, 0x0, 0x0) close_range$auto(r0, 0x8, 0x8ab) mmap$auto(0x0, 0x40009, 0x4000000000000df, 0x9b72, 0x7, 0x28000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/fs/ext4/sda1/last_trim_minblks\x00', 0x2400, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000200)=""/1, 0x5) socket$nl_generic(0x10, 0x3, 0x10) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2711}, 0x51) socket(0x1d, 0x5, 0x8) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = open(&(0x7f0000000380)='./bus/../file0\x00', 0x34d67c, 0x80) openat$auto_proc_environ_operations_base(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/environ\x00', 0x100, 0x0) r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vbi28\x00', 0x200000, 0x0) ioctl$auto(r3, 0x5646, r3) read$auto_v4l2_fops_v4l2_dev(r3, &(0x7f0000000280)=""/40, 0x28) socket(0x1e, 0x1, 0x0) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0x9) copy_file_range$auto(r2, 0x0, r2, 0x0, 0x2, 0x0) select$auto(0x6, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x3, 0xfff, 0x1, 0x948b, 0x3, 0x95f4da2d, 0xc, 0x6, 0x62, 0x7, 0x7, 0x6d3f, 0xa, 0x4, 0x5]}, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xd, 0x0, 0x0, &(0x7f0000000100)={[0x1ff, 0x6, 0x400000002, 0xfffffffffffffff7, 0x948b, 0x7, 0x400, 0x3fffffff, 0x1, 0x62, 0xc, 0x51c5, 0x3ff, 0x7fff, 0x2, 0x1]}, 0x0) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x68140, 0x0) ioctl$auto(r4, 0x5457, 0xd8) socket(0x1d, 0x6, 0x3) r5 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/smaps_rollup\x00', 0x22602, 0x0) ioctl$auto_PROCMAP_QUERY(r5, 0xc0686611, 0x0) madvise$auto(0xffffffffffffa518, 0x8031ca, 0x9) 12.666468006s ago: executing program 3 (id=4850): r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0) write$auto_seq_oss_f_ops_seq_oss(r0, &(0x7f0000000040)="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", 0xfe04) r1 = openat$auto_trace_options_core_fops_trace(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/debug/tracing/options/stacktrace\x00', 0x10000, 0x0) socket(0x2, 0x1, 0x106) bind$auto(0x3, 0x0, 0x6c) socket(0x1f, 0x80000, 0x1) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x1, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r3, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) clock_gettime$auto(0x80000000, 0x0) socket(0x1e, 0x5, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd3/queue/rq_affinity\x00', 0x10b042, 0x0) mmap$auto(0x0, 0x3, 0xdf, 0xeb1, 0x40000000000a5, 0x80000008000) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000b80)='/proc/sys/kernel/kptr_restrict\x00', 0x202, 0x0) read$auto(r4, 0x0, 0xb5) r5 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x640, 0x0) setsockopt$auto_SO_SELECT_ERR_QUEUE(0xffffffffffffffff, 0x9, 0x2d, &(0x7f0000000580)='/sys/kernel/debug/tracing/options/stacktrace\x00', 0x40) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/020/001\x00', 0x40, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto_MON_IOCG_STATS(r5, 0x80089203, 0x0) ioctl$auto_FIDEDUPERANGE(r1, 0xc0189436, 0x4) mmap$auto(0x0, 0x4000b, 0x27b, 0x9b72, 0x7, 0x28000) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x10b040, 0x0) 10.674118082s ago: executing program 2 (id=4852): r0 = mq_open$auto(&(0x7f0000000100)='.\xf1e4\xdf\x16\x95kxE\xd9x\x15\xb0\xf6V\x93\xb4E\x06\xc5\x94\xfe\x93^d\x83`\x85\xbe\xdf\xfa\xec\x85O\xfc\xf8\xf6\xd39}laI\xa7,\xd7j\xc8:(\'!\xbd\xed\x93P\x98jj\xb2VN\x9e\xa3\xda\xae\v\x97\xd4\xfb\xd6\xa2S\xca\x1b\"wi\xea1\xcd\x1a{x\xce\x8eE\xd9Qi\xf7\xd5\xc9\xb7\xd1`\xc1s`W\xa4\nG\x13&&\x1f\xa5\xef\xee\x15@[\\\r\xb6\f\xf3\x13\xc85.\xb16\xa4\x82\xcbH\xe5\xc7\xf6 \xf7\x9bQD\xd2iFl\xfd\' [ 2462.023384][ T1482] dump_stack_lvl+0x16c/0x1f0 [ 2462.023419][ T1482] should_fail_ex+0x512/0x640 [ 2462.023451][ T1482] ? __kmalloc_noprof+0xbf/0x510 [ 2462.023483][ T1482] ? lsm_blob_alloc+0x68/0x90 [ 2462.023598][ T1482] should_failslab+0xc2/0x120 [ 2462.023633][ T1482] __kmalloc_noprof+0xd2/0x510 [ 2462.023667][ T1482] lsm_blob_alloc+0x68/0x90 [ 2462.023707][ T1482] security_sk_alloc+0x30/0x270 [ 2462.023736][ T1482] sk_prot_alloc+0xfb/0x2a0 [ 2462.023773][ T1482] sk_alloc+0x36/0xc20 [ 2462.023798][ T1482] tipc_sk_create+0xcf/0x21a0 [ 2462.023845][ T1482] ? find_held_lock+0x2b/0x80 [ 2462.023911][ T1482] ? __sock_create+0x2f2/0x8d0 [ 2462.023951][ T1482] __sock_create+0x338/0x8d0 [ 2462.023992][ T1482] __sys_socket+0x14d/0x260 [ 2462.024028][ T1482] ? __pfx___sys_socket+0x10/0x10 [ 2462.024063][ T1482] ? xfd_validate_state+0x61/0x180 [ 2462.024131][ T1482] __x64_sys_socket+0x72/0xb0 [ 2462.024167][ T1482] ? lockdep_hardirqs_on+0x7c/0x110 [ 2462.024194][ T1482] do_syscall_64+0xcd/0x490 [ 2462.024243][ T1482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2462.024268][ T1482] RIP: 0033:0x7f4d0958ebe9 [ 2462.024287][ T1482] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2462.024311][ T1482] RSP: 002b:00007f4d0a34a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 2462.024334][ T1482] RAX: ffffffffffffffda RBX: 00007f4d097b5fa0 RCX: 00007f4d0958ebe9 [ 2462.024349][ T1482] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 000000000000001e [ 2462.024364][ T1482] RBP: 00007f4d09611e19 R08: 0000000000000000 R09: 0000000000000000 [ 2462.024378][ T1482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2462.024392][ T1482] R13: 00007f4d097b6038 R14: 00007f4d097b5fa0 R15: 00007ffc545f1938 [ 2462.024420][ T1482] [ 2462.902904][ T30] audit: type=1326 audit(1754711942.617:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1491 comm="syz.0.4451" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f014958ebe9 code=0x0 [ 2463.012863][ T30] audit: type=1326 audit(1754711942.757:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1494 comm="syz.3.4452" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe15078ebe9 code=0x0 [ 2464.056138][ T1512] FAULT_INJECTION: forcing a failure. [ 2464.056138][ T1512] name failslab, interval 1, probability 0, space 0, times 0 [ 2464.125305][ T1512] CPU: 0 UID: 0 PID: 1512 Comm: syz.3.4457 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) [ 2464.125343][ T1512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2464.125357][ T1512] Call Trace: [ 2464.125365][ T1512] [ 2464.125374][ T1512] dump_stack_lvl+0x16c/0x1f0 [ 2464.125409][ T1512] should_fail_ex+0x512/0x640 [ 2464.125438][ T1512] ? __kmalloc_noprof+0xbf/0x510 [ 2464.125469][ T1512] ? lsm_blob_alloc+0x68/0x90 [ 2464.125501][ T1512] should_failslab+0xc2/0x120 [ 2464.125532][ T1512] __kmalloc_noprof+0xd2/0x510 [ 2464.125565][ T1512] lsm_blob_alloc+0x68/0x90 [ 2464.125597][ T1512] security_sk_alloc+0x30/0x270 [ 2464.125620][ T1512] sk_prot_alloc+0xfb/0x2a0 [ 2464.125656][ T1512] sk_alloc+0x36/0xc20 [ 2464.125680][ T1512] inet_create+0x3a1/0x1040 [ 2464.125779][ T1512] ? inet_create+0x93/0x1040 [ 2464.125817][ T1512] __sock_create+0x338/0x8d0 [ 2464.125856][ T1512] __sys_socket+0x14d/0x260 [ 2464.125890][ T1512] ? __pfx___sys_socket+0x10/0x10 [ 2464.125922][ T1512] ? ksys_write+0x1ac/0x250 [ 2464.125950][ T1512] ? __pfx_ksys_write+0x10/0x10 [ 2464.125983][ T1512] __x64_sys_socket+0x72/0xb0 [ 2464.126022][ T1512] ? lockdep_hardirqs_on+0x7c/0x110 [ 2464.126047][ T1512] do_syscall_64+0xcd/0x490 [ 2464.126076][ T1512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2464.126101][ T1512] RIP: 0033:0x7fe15078ebe9 [ 2464.126119][ T1512] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2464.126167][ T1512] RSP: 002b:00007fe1515c1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 2464.126190][ T1512] RAX: ffffffffffffffda RBX: 00007fe1509b5fa0 RCX: 00007fe15078ebe9 [ 2464.126218][ T1512] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000002 [ 2464.126232][ T1512] RBP: 00007fe1515c1090 R08: 0000000000000000 R09: 0000000000000000 [ 2464.126245][ T1512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2464.126258][ T1512] R13: 00007fe1509b6038 R14: 00007fe1509b5fa0 R15: 00007ffc9bfa3608 [ 2464.126328][ T1512] [ 2464.385684][ T1517] FAULT_INJECTION: forcing a failure. [ 2464.385684][ T1517] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2464.398878][ T1517] CPU: 0 UID: 0 PID: 1517 Comm: syz.2.4458 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) [ 2464.398914][ T1517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2464.398935][ T1517] Call Trace: [ 2464.399013][ T1517] [ 2464.399028][ T1517] dump_stack_lvl+0x16c/0x1f0 [ 2464.399064][ T1517] should_fail_ex+0x512/0x640 [ 2464.399099][ T1517] _copy_from_iter+0x29f/0x16f0 [ 2464.399192][ T1517] ? __alloc_skb+0x200/0x380 [ 2464.399218][ T1517] ? __pfx__copy_from_iter+0x10/0x10 [ 2464.399255][ T1517] ? __pfx___might_resched+0x10/0x10 [ 2464.399307][ T1517] ? __lock_acquire+0xb97/0x1ce0 [ 2464.399367][ T1517] netlink_sendmsg+0x829/0xdd0 [ 2464.399400][ T1517] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2464.399430][ T1517] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 2464.399497][ T1517] ____sys_sendmsg+0xa98/0xc70 [ 2464.399535][ T1517] ? copy_msghdr_from_user+0x10a/0x160 [ 2464.399561][ T1517] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2464.399598][ T1517] ? __pfx__kstrtoull+0x10/0x10 [ 2464.399669][ T1517] ___sys_sendmsg+0x134/0x1d0 [ 2464.399696][ T1517] ? __pfx____sys_sendmsg+0x10/0x10 [ 2464.399735][ T1517] ? find_held_lock+0x2b/0x80 [ 2464.399776][ T1517] __sys_sendmmsg+0x200/0x420 [ 2464.399805][ T1517] ? __pfx___sys_sendmmsg+0x10/0x10 [ 2464.399841][ T1517] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2464.399881][ T1517] ? fput+0x9b/0xd0 [ 2464.399917][ T1517] ? ksys_write+0x1ac/0x250 [ 2464.399944][ T1517] ? __pfx_ksys_write+0x10/0x10 [ 2464.399976][ T1517] __x64_sys_sendmmsg+0x9c/0x100 [ 2464.400009][ T1517] ? lockdep_hardirqs_on+0x7c/0x110 [ 2464.400033][ T1517] do_syscall_64+0xcd/0x490 [ 2464.400062][ T1517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2464.400087][ T1517] RIP: 0033:0x7f7af438ebe9 [ 2464.400107][ T1517] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2464.400130][ T1517] RSP: 002b:00007f7af5241038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2464.400153][ T1517] RAX: ffffffffffffffda RBX: 00007f7af45b5fa0 RCX: 00007f7af438ebe9 [ 2464.400169][ T1517] RDX: 0000000000003d55 RSI: 0000200000000080 RDI: 0000000000000005 [ 2464.400182][ T1517] RBP: 00007f7af5241090 R08: 0000000000000000 R09: 0000000000000000 [ 2464.400196][ T1517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2464.400210][ T1517] R13: 00007f7af45b6038 R14: 00007f7af45b5fa0 R15: 00007ffe3f7d3b48 [ 2464.400239][ T1517] [ 2464.646726][ T1512] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4457'. [ 2464.868642][ T1522] FAULT_INJECTION: forcing a failure. [ 2464.868642][ T1522] name failslab, interval 1, probability 0, space 0, times 0 [ 2464.881781][ T1522] CPU: 0 UID: 0 PID: 1522 Comm: syz.1.4459 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) [ 2464.881816][ T1522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2464.881831][ T1522] Call Trace: [ 2464.881839][ T1522] [ 2464.881848][ T1522] dump_stack_lvl+0x16c/0x1f0 [ 2464.881883][ T1522] should_fail_ex+0x512/0x640 [ 2464.881915][ T1522] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 2464.881961][ T1522] should_failslab+0xc2/0x120 [ 2464.881997][ T1522] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 2464.882028][ T1522] ? __d_alloc+0x32/0xae0 [ 2464.882064][ T1522] __d_alloc+0x32/0xae0 [ 2464.882097][ T1522] path_from_stashed+0x427/0x750 [ 2464.882133][ T1522] open_namespace+0x8d/0x190 [ 2464.882161][ T1522] ? __pfx_open_namespace+0x10/0x10 [ 2464.882189][ T1522] ? bpf_lsm_capable+0x9/0x10 [ 2464.882218][ T1522] open_related_ns+0x41/0x70 [ 2464.882287][ T1522] __tun_chr_ioctl+0x1fd1/0x48b0 [ 2464.882328][ T1522] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 2464.882371][ T1522] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 2464.882410][ T1522] ? hook_file_ioctl_common+0x145/0x410 [ 2464.882446][ T1522] ? __fget_files+0x20e/0x3c0 [ 2464.882476][ T1522] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 2464.882512][ T1522] __x64_sys_ioctl+0x18e/0x210 [ 2464.882553][ T1522] do_syscall_64+0xcd/0x490 [ 2464.882584][ T1522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2464.882610][ T1522] RIP: 0033:0x7f4d0958ebe9 [ 2464.882631][ T1522] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2464.882656][ T1522] RSP: 002b:00007f4d0a34a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2464.882680][ T1522] RAX: ffffffffffffffda RBX: 00007f4d097b5fa0 RCX: 00007f4d0958ebe9 [ 2464.882696][ T1522] RDX: 0000000000005c8d RSI: 00000000000054e3 RDI: 00000000000000c8 [ 2464.882711][ T1522] RBP: 00007f4d09611e19 R08: 0000000000000000 R09: 0000000000000000 [ 2464.882727][ T1522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2464.882741][ T1522] R13: 00007f4d097b6038 R14: 00007f4d097b5fa0 R15: 00007ffc545f1938 [ 2464.882771][ T1522] [ 2465.720241][ T1520] page: refcount:5 mapcount:4 mapping:0000000000000000 index:0xffff888000000000 pfn:0x78002 [ 2465.791456][ T1520] flags: 0xfff18000000204(referenced|workingset|node=0|zone=1|lastcpupid=0x7ff) [ 2465.800551][ T1520] raw: 00fff18000000204 0000000000000000 dead000000000122 0000000000000000 [ 2465.902320][ T1520] raw: ffff888000000000 0000000000000000 0000000500000003 0000000000000000 [ 2465.974061][ T1520] page dumped because: unmovable page [ 2465.979495][ T1520] page_owner tracks the page as allocated [ 2466.049949][ T1520] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), pid 21906, tgid 21906 (syz-executor), ts 1386019528748, free_ts 1382822092576 [ 2466.183791][ T1520] post_alloc_hook+0x1c0/0x230 [ 2466.188633][ T1520] get_page_from_freelist+0x132b/0x38e0 [ 2466.243669][ T1520] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 2466.249731][ T1520] alloc_pages_mpol+0x1fb/0x550 [ 2466.321095][ T1520] alloc_pages_noprof+0x131/0x390 [ 2466.340729][ T1520] __vmalloc_node_range_noprof+0x72f/0x14b0 [ 2466.381985][ T1520] vmalloc_user_noprof+0x9e/0xe0 [ 2466.387016][ T1520] kcov_ioctl+0x4c/0x730 [ 2466.431123][ T1520] __x64_sys_ioctl+0x18e/0x210 [ 2466.453578][ T1520] do_syscall_64+0xcd/0x490 [ 2466.458152][ T1520] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2466.507111][ T1520] page last free pid 21886 tgid 21886 stack trace: [ 2466.555712][ T1520] __free_frozen_pages+0x7d5/0x10f0 [ 2466.590897][ T1520] vfree+0x1fd/0xb50 [ 2466.614054][ T1520] snd_dma_free_pages+0x51/0x70 [ 2466.650459][ T1520] snd_pcm_lib_free_pages+0x172/0x390 [ 2466.706607][ T1520] snd_pcm_release_substream.part.0+0x2a8/0x340 [ 2466.725209][ T1520] snd_pcm_release_substream+0x5b/0x70 [ 2466.755760][ T1520] snd_pcm_oss_release+0x135/0x310 [ 2466.795769][ T1520] __fput+0x3ff/0xb70 [ 2466.799852][ T1520] task_work_run+0x150/0x240 [ 2466.836987][ T1520] exit_to_user_mode_loop+0xeb/0x110 [ 2466.873989][ T1520] do_syscall_64+0x3f6/0x490 [ 2466.895685][ T1520] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2467.325466][ T30] audit: type=1326 audit(1754711947.079:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1550 comm="syz.2.4464" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7af438ebe9 code=0x0 [ 2467.864829][ T1562] FAULT_INJECTION: forcing a failure. [ 2467.864829][ T1562] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2467.969932][ T1562] CPU: 0 UID: 0 PID: 1562 Comm: syz.1.4467 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) [ 2467.969967][ T1562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2467.969981][ T1562] Call Trace: [ 2467.969989][ T1562] [ 2467.969997][ T1562] dump_stack_lvl+0x16c/0x1f0 [ 2467.970030][ T1562] should_fail_ex+0x512/0x640 [ 2467.970064][ T1562] _copy_from_user+0x2e/0xd0 [ 2467.970101][ T1562] copy_msghdr_from_user+0x98/0x160 [ 2467.970130][ T1562] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 2467.970159][ T1562] ? kfree+0x24f/0x4d0 [ 2467.970180][ T1562] ? __pfx__kstrtoull+0x10/0x10 [ 2467.970208][ T1562] ___sys_sendmsg+0xfe/0x1d0 [ 2467.970233][ T1562] ? __pfx____sys_sendmsg+0x10/0x10 [ 2467.970282][ T1562] ? __pfx___might_resched+0x10/0x10 [ 2467.970312][ T1562] __sys_sendmmsg+0x200/0x420 [ 2467.970340][ T1562] ? __pfx___sys_sendmmsg+0x10/0x10 [ 2467.970374][ T1562] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2467.970412][ T1562] ? fput+0x9b/0xd0 [ 2467.970446][ T1562] ? ksys_write+0x1ac/0x250 [ 2467.970471][ T1562] ? __pfx_ksys_write+0x10/0x10 [ 2467.970501][ T1562] __x64_sys_sendmmsg+0x9c/0x100 [ 2467.970525][ T1562] ? lockdep_hardirqs_on+0x7c/0x110 [ 2467.970549][ T1562] do_syscall_64+0xcd/0x490 [ 2467.970576][ T1562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2467.970599][ T1562] RIP: 0033:0x7f4d0958ebe9 [ 2467.970617][ T1562] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2467.970644][ T1562] RSP: 002b:00007f4d0a34a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2467.970665][ T1562] RAX: ffffffffffffffda RBX: 00007f4d097b5fa0 RCX: 00007f4d0958ebe9 [ 2467.970681][ T1562] RDX: 000000000000fffe RSI: 0000000000000000 RDI: 0000000000000003 [ 2467.970694][ T1562] RBP: 00007f4d0a34a090 R08: 0000000000000000 R09: 0000000000000000 [ 2467.970707][ T1562] R10: 00000000004009ff R11: 0000000000000246 R12: 0000000000000001 [ 2467.970721][ T1562] R13: 00007f4d097b6038 R14: 00007f4d097b5fa0 R15: 00007ffc545f1938 [ 2467.970749][ T1562] [ 2468.711991][ T1571] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4468'. [ 2469.444539][ T1580] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 2469.475236][ T1587] FAULT_INJECTION: forcing a failure. [ 2469.475236][ T1587] name failslab, interval 1, probability 0, space 0, times 0 [ 2469.694014][ T1587] CPU: 0 UID: 0 PID: 1587 Comm: syz.0.4471 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) [ 2469.694052][ T1587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2469.694066][ T1587] Call Trace: [ 2469.694073][ T1587] [ 2469.694082][ T1587] dump_stack_lvl+0x16c/0x1f0 [ 2469.694117][ T1587] should_fail_ex+0x512/0x640 [ 2469.694153][ T1587] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 2469.694183][ T1587] should_failslab+0xc2/0x120 [ 2469.694215][ T1587] __kmalloc_cache_noprof+0x6a/0x3e0 [ 2469.694239][ T1587] ? copy_net_ns+0x135/0x5f0 [ 2469.694304][ T1587] copy_net_ns+0x135/0x5f0 [ 2469.694333][ T1587] ? copy_cgroup_ns+0x71/0x700 [ 2469.694382][ T1587] create_new_namespaces+0x3ea/0xa90 [ 2469.694418][ T1587] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 2469.694449][ T1587] ksys_unshare+0x45b/0xa40 [ 2469.694489][ T1587] ? __pfx_ksys_unshare+0x10/0x10 [ 2469.694521][ T1587] ? ksys_write+0x1ac/0x250 [ 2469.694558][ T1587] __x64_sys_unshare+0x31/0x40 [ 2469.694590][ T1587] do_syscall_64+0xcd/0x490 [ 2469.694619][ T1587] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2469.694643][ T1587] RIP: 0033:0x7f014958ebe9 [ 2469.694665][ T1587] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2469.694688][ T1587] RSP: 002b:00007f01477f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 2469.694711][ T1587] RAX: ffffffffffffffda RBX: 00007f01497b5fa0 RCX: 00007f014958ebe9 [ 2469.694753][ T1587] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 2469.694767][ T1587] RBP: 00007f01477f6090 R08: 0000000000000000 R09: 0000000000000000 [ 2469.694781][ T1587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2469.694795][ T1587] R13: 00007f01497b6038 R14: 00007f01497b5fa0 R15: 00007fff61251cb8 [ 2469.694824][ T1587] [ 2471.110709][ T1615] FAULT_INJECTION: forcing a failure. [ 2471.110709][ T1615] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2471.219139][ T1615] CPU: 0 UID: 0 PID: 1615 Comm: syz.1.4472 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) [ 2471.219175][ T1615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2471.219189][ T1615] Call Trace: [ 2471.219197][ T1615] [ 2471.219207][ T1615] dump_stack_lvl+0x16c/0x1f0 [ 2471.219242][ T1615] should_fail_ex+0x512/0x640 [ 2471.219280][ T1615] _copy_to_user+0x32/0xd0 [ 2471.219317][ T1615] do_pages_stat+0x631/0x820 [ 2471.219363][ T1615] ? __pfx_do_pages_stat+0x10/0x10 [ 2471.219429][ T1615] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 2471.219454][ T1615] ? lockdep_hardirqs_on+0x7c/0x110 [ 2471.219480][ T1615] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 2471.219508][ T1615] kernel_move_pages+0xfa8/0x1380 [ 2471.219549][ T1615] ? do_futex+0x122/0x350 [ 2471.219642][ T1615] ? __pfx_do_futex+0x10/0x10 [ 2471.219674][ T1615] ? __pfx_kernel_move_pages+0x10/0x10 [ 2471.219709][ T1615] ? find_held_lock+0x2b/0x80 [ 2471.219752][ T1615] ? __x64_sys_futex+0x1e0/0x4c0 [ 2471.219780][ T1615] ? __x64_sys_futex+0x1e9/0x4c0 [ 2471.219810][ T1615] ? __fget_files+0x20e/0x3c0 [ 2471.219837][ T1615] ? xfd_validate_state+0x61/0x180 [ 2471.219878][ T1615] __x64_sys_move_pages+0xe0/0x1c0 [ 2471.219918][ T1615] ? do_syscall_64+0x91/0x490 [ 2471.219944][ T1615] ? lockdep_hardirqs_on+0x7c/0x110 [ 2471.219968][ T1615] do_syscall_64+0xcd/0x490 [ 2471.219997][ T1615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2471.220021][ T1615] RIP: 0033:0x7f4d0958ebe9 [ 2471.220040][ T1615] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2471.220063][ T1615] RSP: 002b:00007f4d077f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 2471.220084][ T1615] RAX: ffffffffffffffda RBX: 00007f4d097b6180 RCX: 00007f4d0958ebe9 [ 2471.220099][ T1615] RDX: 0000000000000000 RSI: 0000000000001002 RDI: 0000000000000000 [ 2471.220113][ T1615] RBP: 00007f4d09611e19 R08: 0000000000000000 R09: 0000000000000002 [ 2471.220128][ T1615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2471.220141][ T1615] R13: 00007f4d097b6218 R14: 00007f4d097b6180 R15: 00007ffc545f1938 [ 2471.220170][ T1615] [ 2474.077477][ T1647] FAULT_INJECTION: forcing a failure. [ 2474.077477][ T1647] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2474.171885][ T1647] CPU: 0 UID: 0 PID: 1647 Comm: syz.2.4481 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) [ 2474.171934][ T1647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2474.171947][ T1647] Call Trace: [ 2474.171960][ T1647] [ 2474.171968][ T1647] dump_stack_lvl+0x16c/0x1f0 [ 2474.172006][ T1647] should_fail_ex+0x512/0x640 [ 2474.172067][ T1647] _copy_from_iter+0x29f/0x16f0 [ 2474.172104][ T1647] ? __alloc_skb+0x200/0x380 [ 2474.172133][ T1647] ? __pfx__copy_from_iter+0x10/0x10 [ 2474.172221][ T1647] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 2474.172249][ T1647] ? __lock_acquire+0xb97/0x1ce0 [ 2474.172289][ T1647] netlink_sendmsg+0x829/0xdd0 [ 2474.172321][ T1647] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2474.172350][ T1647] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 2474.172393][ T1647] ____sys_sendmsg+0xa98/0xc70 [ 2474.172427][ T1647] ? copy_msghdr_from_user+0x10a/0x160 [ 2474.172452][ T1647] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2474.172498][ T1647] ___sys_sendmsg+0x134/0x1d0 [ 2474.172525][ T1647] ? __pfx____sys_sendmsg+0x10/0x10 [ 2474.172578][ T1647] ? __mutex_unlock_slowpath+0x140/0x800 [ 2474.172614][ T1647] __sys_sendmsg+0x16d/0x220 [ 2474.172640][ T1647] ? __pfx___sys_sendmsg+0x10/0x10 [ 2474.172684][ T1647] do_syscall_64+0xcd/0x490 [ 2474.172714][ T1647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2474.172739][ T1647] RIP: 0033:0x7f7af438ebe9 [ 2474.172757][ T1647] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2474.172779][ T1647] RSP: 002b:00007f7af5241038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2474.172801][ T1647] RAX: ffffffffffffffda RBX: 00007f7af45b5fa0 RCX: 00007f7af438ebe9 [ 2474.172816][ T1647] RDX: 0000000020000000 RSI: 0000200000005380 RDI: 0000000000000003 [ 2474.172831][ T1647] RBP: 00007f7af5241090 R08: 0000000000000000 R09: 0000000000000000 [ 2474.172844][ T1647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2474.172858][ T1647] R13: 00007f7af45b6038 R14: 00007f7af45b5fa0 R15: 00007ffe3f7d3b48 [ 2474.172887][ T1647] [ 2475.293705][ T1656] FAULT_INJECTION: forcing a failure. [ 2475.293705][ T1656] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2475.490129][ T1656] CPU: 0 UID: 0 PID: 1656 Comm: syz.3.4483 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) [ 2475.490166][ T1656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2475.490180][ T1656] Call Trace: [ 2475.490188][ T1656] [ 2475.490197][ T1656] dump_stack_lvl+0x16c/0x1f0 [ 2475.490232][ T1656] should_fail_ex+0x512/0x640 [ 2475.490266][ T1656] should_fail_alloc_page+0xe7/0x130 [ 2475.490302][ T1656] prepare_alloc_pages+0x3c2/0x610 [ 2475.490343][ T1656] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 2475.490374][ T1656] ? copy_splice_read+0x1a8/0xba0 [ 2475.490397][ T1656] ? stack_trace_save+0x8e/0xc0 [ 2475.490461][ T1656] ? __pfx_stack_trace_save+0x10/0x10 [ 2475.490488][ T1656] ? stack_depot_save_flags+0x29/0x9c0 [ 2475.490522][ T1656] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 2475.490550][ T1656] ? kasan_save_stack+0x33/0x60 [ 2475.490577][ T1656] ? __kasan_kmalloc+0xaa/0xb0 [ 2475.490601][ T1656] ? copy_splice_read+0x1a8/0xba0 [ 2475.490622][ T1656] ? do_splice_read+0x285/0x370 [ 2475.490642][ T1656] ? splice_direct_to_actor+0x2a1/0xa30 [ 2475.490664][ T1656] ? do_splice_direct+0x174/0x240 [ 2475.490684][ T1656] ? do_sendfile+0xb06/0xe50 [ 2475.490709][ T1656] ? __x64_sys_sendfile64+0x1d8/0x220 [ 2475.490740][ T1656] ? do_syscall_64+0xcd/0x490 [ 2475.490786][ T1656] alloc_pages_bulk_noprof+0x71c/0x1410 [ 2475.490824][ T1656] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 2475.490859][ T1656] ? trace_kmalloc+0x2b/0xd0 [ 2475.490894][ T1656] ? __kmalloc_noprof+0x242/0x510 [ 2475.490929][ T1656] copy_splice_read+0x1e1/0xba0 [ 2475.490959][ T1656] ? __pfx_copy_splice_read+0x10/0x10 [ 2475.490993][ T1656] ? look_up_lock_class+0x59/0x150 [ 2475.491023][ T1656] ? lockdep_init_map_type+0x5c/0x280 [ 2475.491058][ T1656] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 2475.491088][ T1656] ? __pfx_copy_splice_read+0x10/0x10 [ 2475.491110][ T1656] do_splice_read+0x285/0x370 [ 2475.491137][ T1656] splice_direct_to_actor+0x2a1/0xa30 [ 2475.491163][ T1656] ? __pfx_direct_splice_actor+0x10/0x10 [ 2475.491193][ T1656] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 2475.491216][ T1656] ? get_pid_task+0xfc/0x250 [ 2475.491256][ T1656] do_splice_direct+0x174/0x240 [ 2475.491281][ T1656] ? __pfx_do_splice_direct+0x10/0x10 [ 2475.491305][ T1656] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 2475.491333][ T1656] ? rw_verify_area+0xcf/0x6c0 [ 2475.491359][ T1656] do_sendfile+0xb06/0xe50 [ 2475.491390][ T1656] ? __pfx_do_sendfile+0x10/0x10 [ 2475.491415][ T1656] ? __fget_files+0x20e/0x3c0 [ 2475.491453][ T1656] __x64_sys_sendfile64+0x1d8/0x220 [ 2475.491485][ T1656] ? ksys_write+0x1ac/0x250 [ 2475.491511][ T1656] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 2475.491552][ T1656] do_syscall_64+0xcd/0x490 [ 2475.491580][ T1656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2475.491605][ T1656] RIP: 0033:0x7fe15078ebe9 [ 2475.491627][ T1656] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2475.491651][ T1656] RSP: 002b:00007fe15157f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2475.491673][ T1656] RAX: ffffffffffffffda RBX: 00007fe1509b6180 RCX: 00007fe15078ebe9 [ 2475.491689][ T1656] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000007 [ 2475.491702][ T1656] RBP: 00007fe15157f090 R08: 0000000000000000 R09: 0000000000000000 [ 2475.491717][ T1656] R10: 0000000001000200 R11: 0000000000000246 R12: 0000000000000001 [ 2475.491730][ T1656] R13: 00007fe1509b6218 R14: 00007fe1509b6180 R15: 00007ffc9bfa3608 [ 2475.491760][ T1656] [ 2479.424866][ T1696] FAULT_INJECTION: forcing a failure. [ 2479.424866][ T1696] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2479.691674][ T1696] CPU: 0 UID: 0 PID: 1696 Comm: syz.2.4491 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) [ 2479.691714][ T1696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2479.691729][ T1696] Call Trace: [ 2479.691738][ T1696] [ 2479.691749][ T1696] dump_stack_lvl+0x16c/0x1f0 [ 2479.691789][ T1696] should_fail_ex+0x512/0x640 [ 2479.691828][ T1696] _copy_from_iter+0x29f/0x16f0 [ 2479.691866][ T1696] ? tcp_leave_memory_pressure+0x1f/0x100 [ 2479.691969][ T1696] ? sk_leave_memory_pressure+0x7c/0x130 [ 2479.692009][ T1696] ? __pfx__copy_from_iter+0x10/0x10 [ 2479.692041][ T1696] ? alloc_pages_noprof+0x23c/0x390 [ 2479.692081][ T1696] ? __sk_mem_schedule+0xd0/0x100 [ 2479.692114][ T1696] tcp_sendmsg_locked+0x28c7/0x42a0 [ 2479.692171][ T1696] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 2479.692208][ T1696] ? do_raw_spin_lock+0x12c/0x2b0 [ 2479.692249][ T1696] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 2479.692294][ T1696] ? __local_bh_enable_ip+0xa4/0x120 [ 2479.692329][ T1696] tcp_sendmsg+0x2e/0x50 [ 2479.692360][ T1696] ? __pfx_tcp_sendmsg+0x10/0x10 [ 2479.692394][ T1696] inet_sendmsg+0xb9/0x140 [ 2479.692433][ T1696] sock_write_iter+0x4aa/0x5b0 [ 2479.692468][ T1696] ? __pfx_sock_write_iter+0x10/0x10 [ 2479.692512][ T1696] ? bpf_lsm_file_permission+0x9/0x10 [ 2479.692584][ T1696] ? security_file_permission+0x71/0x210 [ 2479.692618][ T1696] ? rw_verify_area+0xcf/0x6c0 [ 2479.692646][ T1696] vfs_write+0x6c4/0x1150 [ 2479.692674][ T1696] ? __pfx_sock_write_iter+0x10/0x10 [ 2479.692711][ T1696] ? __pfx_vfs_write+0x10/0x10 [ 2479.692736][ T1696] ? find_held_lock+0x2b/0x80 [ 2479.692781][ T1696] ksys_write+0x1f8/0x250 [ 2479.692810][ T1696] ? __pfx_ksys_write+0x10/0x10 [ 2479.692847][ T1696] do_syscall_64+0xcd/0x490 [ 2479.692887][ T1696] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2479.692914][ T1696] RIP: 0033:0x7f7af438ebe9 [ 2479.692959][ T1696] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2479.692984][ T1696] RSP: 002b:00007f7af51ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2479.693008][ T1696] RAX: ffffffffffffffda RBX: 00007f7af45b6180 RCX: 00007f7af438ebe9 [ 2479.693024][ T1696] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003 [ 2479.693039][ T1696] RBP: 00007f7af4411e19 R08: 0000000000000000 R09: 0000000000000000 [ 2479.693054][ T1696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2479.693068][ T1696] R13: 00007f7af45b6218 R14: 00007f7af45b6180 R15: 00007ffe3f7d3b48 [ 2479.693099][ T1696] [ 2480.377215][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 2480.386980][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 2480.651912][ T1706] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4495'. [ 2481.469869][ T1713] FAULT_INJECTION: forcing a failure. [ 2481.469869][ T1713] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2481.553789][ T1713] CPU: 0 UID: 0 PID: 1713 Comm: syz.3.4496 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) [ 2481.553828][ T1713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2481.553842][ T1713] Call Trace: [ 2481.553850][ T1713] [ 2481.553858][ T1713] dump_stack_lvl+0x16c/0x1f0 [ 2481.553894][ T1713] should_fail_ex+0x512/0x640 [ 2481.553929][ T1713] _copy_from_iter+0x29f/0x16f0 [ 2481.553966][ T1713] ? __alloc_skb+0x200/0x380 [ 2481.553992][ T1713] ? __pfx__copy_from_iter+0x10/0x10 [ 2481.554026][ T1713] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 2481.554052][ T1713] ? __lock_acquire+0xb97/0x1ce0 [ 2481.554092][ T1713] netlink_sendmsg+0x829/0xdd0 [ 2481.554124][ T1713] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2481.554154][ T1713] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 2481.554246][ T1713] ____sys_sendmsg+0xa98/0xc70 [ 2481.554281][ T1713] ? copy_msghdr_from_user+0x10a/0x160 [ 2481.554307][ T1713] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2481.554365][ T1713] ___sys_sendmsg+0x134/0x1d0 [ 2481.554393][ T1713] ? __pfx____sys_sendmsg+0x10/0x10 [ 2481.554443][ T1713] ? __mutex_unlock_slowpath+0x140/0x800 [ 2481.554479][ T1713] __sys_sendmsg+0x16d/0x220 [ 2481.554505][ T1713] ? __pfx___sys_sendmsg+0x10/0x10 [ 2481.554549][ T1713] do_syscall_64+0xcd/0x490 [ 2481.554578][ T1713] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2481.554602][ T1713] RIP: 0033:0x7fe15078ebe9 [ 2481.554621][ T1713] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2481.554645][ T1713] RSP: 002b:00007fe1515c1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2481.554667][ T1713] RAX: ffffffffffffffda RBX: 00007fe1509b5fa0 RCX: 00007fe15078ebe9 [ 2481.554682][ T1713] RDX: 0000000020000000 RSI: 0000200000005380 RDI: 000000000000000c [ 2481.554697][ T1713] RBP: 00007fe1515c1090 R08: 0000000000000000 R09: 0000000000000000 [ 2481.554712][ T1713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2481.554725][ T1713] R13: 00007fe1509b6038 R14: 00007fe1509b5fa0 R15: 00007ffc9bfa3608 [ 2481.554754][ T1713] [ 2481.814527][ T1715] netlink: 330 bytes leftover after parsing attributes in process `syz.2.4497'. [ 2482.789820][ T1735] vivid-007: ================= START STATUS ================= [ 2482.822399][ T1735] vivid-007: Generate PTS: true [ 2482.847497][ T1735] vivid-007: Generate SCR: true [ 2482.880511][ T1735] tpg source WxH: 320x240 (Y'CbCr) [ 2482.914067][ T1735] tpg field: 1 [ 2482.917584][ T1735] tpg crop: (0,0)/320x240 [ 2482.921916][ T1735] tpg compose: (0,0)/320x240 [ 2483.027064][ T1735] tpg colorspace: 8 [ 2483.033744][ T1735] tpg transfer function: 0/0 [ 2483.077056][ T1735] tpg Y'CbCr encoding: 0/0 [ 2483.102798][ T1735] tpg quantization: 0/0 [ 2483.142720][ T1735] tpg RGB range: 0/2 [ 2483.152787][ T1735] vivid-007: ================== END STATUS ================== [ 2483.306731][ T1740] FAULT_INJECTION: forcing a failure. [ 2483.306731][ T1740] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2483.453313][ T1740] CPU: 0 UID: 0 PID: 1740 Comm: syz.0.4502 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) [ 2483.453350][ T1740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2483.453364][ T1740] Call Trace: [ 2483.453372][ T1740] [ 2483.453380][ T1740] dump_stack_lvl+0x16c/0x1f0 [ 2483.453416][ T1740] should_fail_ex+0x512/0x640 [ 2483.453456][ T1740] _copy_to_user+0x32/0xd0 [ 2483.453560][ T1740] simple_read_from_buffer+0xcb/0x170 [ 2483.453589][ T1740] proc_fail_nth_read+0x197/0x240 [ 2483.453618][ T1740] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2483.453645][ T1740] ? rw_verify_area+0xcf/0x6c0 [ 2483.453669][ T1740] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2483.453694][ T1740] vfs_read+0x1e4/0xc60 [ 2483.453724][ T1740] ? __pfx___mutex_lock+0x10/0x10 [ 2483.453751][ T1740] ? __pfx_vfs_read+0x10/0x10 [ 2483.453784][ T1740] ? __fget_files+0x20e/0x3c0 [ 2483.453819][ T1740] ksys_read+0x12a/0x250 [ 2483.453845][ T1740] ? __pfx_ksys_read+0x10/0x10 [ 2483.453879][ T1740] do_syscall_64+0xcd/0x490 [ 2483.453908][ T1740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2483.453932][ T1740] RIP: 0033:0x7f014958d5fc [ 2483.453952][ T1740] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 2483.453974][ T1740] RSP: 002b:00007f01477d5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2483.453996][ T1740] RAX: ffffffffffffffda RBX: 00007f01497b6090 RCX: 00007f014958d5fc [ 2483.454011][ T1740] RDX: 000000000000000f RSI: 00007f01477d50a0 RDI: 0000000000000004 [ 2483.454025][ T1740] RBP: 00007f01477d5090 R08: 0000000000000000 R09: 0000000000000000 [ 2483.454039][ T1740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2483.454053][ T1740] R13: 00007f01497b6128 R14: 00007f01497b6090 R15: 00007fff61251cb8 [ 2483.454082][ T1740] [ 2483.783922][ T1748] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 2483.806811][ T1748] .SR: entered promiscuous mode [ 2483.835770][ T1748] Invalid ELF header magic: != ELF [ 2484.939124][ T1758] could not allocate digest TFM handle [ 2484.974160][ T1748] could not allocate digest TFM handle [ 2487.577608][ T1778] netlink: 342 bytes leftover after parsing attributes in process `syz.2.4510'. [ 2487.727555][ T1801] FAULT_INJECTION: forcing a failure. [ 2487.727555][ T1801] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2487.831681][ T1801] CPU: 0 UID: 0 PID: 1801 Comm: syz.0.4514 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) [ 2487.831718][ T1801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2487.831733][ T1801] Call Trace: [ 2487.831741][ T1801] [ 2487.831749][ T1801] dump_stack_lvl+0x16c/0x1f0 [ 2487.831792][ T1801] should_fail_ex+0x512/0x640 [ 2487.831829][ T1801] _copy_from_user+0x2e/0xd0 [ 2487.831864][ T1801] copy_msghdr_from_user+0x98/0x160 [ 2487.831894][ T1801] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 2487.831924][ T1801] ? kfree+0x24f/0x4d0 [ 2487.831946][ T1801] ? __pfx__kstrtoull+0x10/0x10 [ 2487.832029][ T1801] ___sys_sendmsg+0xfe/0x1d0 [ 2487.832056][ T1801] ? __pfx____sys_sendmsg+0x10/0x10 [ 2487.832108][ T1801] ? __pfx___might_resched+0x10/0x10 [ 2487.832162][ T1801] __sys_sendmmsg+0x200/0x420 [ 2487.832191][ T1801] ? __pfx___sys_sendmmsg+0x10/0x10 [ 2487.832227][ T1801] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2487.832266][ T1801] ? fput+0x9b/0xd0 [ 2487.832302][ T1801] ? ksys_write+0x1ac/0x250 [ 2487.832328][ T1801] ? __pfx_ksys_write+0x10/0x10 [ 2487.832360][ T1801] __x64_sys_sendmmsg+0x9c/0x100 [ 2487.832385][ T1801] ? lockdep_hardirqs_on+0x7c/0x110 [ 2487.832410][ T1801] do_syscall_64+0xcd/0x490 [ 2487.832439][ T1801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2487.832463][ T1801] RIP: 0033:0x7f014958ebe9 [ 2487.832481][ T1801] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2487.832505][ T1801] RSP: 002b:00007f01477b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2487.832528][ T1801] RAX: ffffffffffffffda RBX: 00007f01497b6180 RCX: 00007f014958ebe9 [ 2487.832544][ T1801] RDX: 00000000000009a6 RSI: 0000000000000000 RDI: 0000000000000003 [ 2487.832557][ T1801] RBP: 00007f01477b4090 R08: 0000000000000000 R09: 0000000000000000 [ 2487.832571][ T1801] R10: 0000000007000000 R11: 0000000000000246 R12: 0000000000000001 [ 2487.832585][ T1801] R13: 00007f01497b6218 R14: 00007f01497b6180 R15: 00007fff61251cb8 [ 2487.832614][ T1801] [ 2491.937641][ T1858] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4525'. [ 2495.808563][ T1883] netlink: 342 bytes leftover after parsing attributes in process `syz.1.4529'. [ 2500.634323][ T1955] netlink: 342 bytes leftover after parsing attributes in process `syz.1.4541'. [ 2507.575811][ T2059] FAULT_INJECTION: forcing a failure. [ 2507.575811][ T2059] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2507.781149][ T2059] CPU: 0 UID: 0 PID: 2059 Comm: syz.2.4562 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) [ 2507.781185][ T2059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2507.781198][ T2059] Call Trace: [ 2507.781206][ T2059] [ 2507.781227][ T2059] dump_stack_lvl+0x16c/0x1f0 [ 2507.781263][ T2059] should_fail_ex+0x512/0x640 [ 2507.781298][ T2059] _copy_from_user+0x2e/0xd0 [ 2507.781390][ T2059] ____sys_sendmsg+0x607/0xc70 [ 2507.781443][ T2059] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2507.781478][ T2059] ? __pfx__kstrtoull+0x10/0x10 [ 2507.781529][ T2059] ___sys_sendmsg+0x134/0x1d0 [ 2507.781556][ T2059] ? __pfx____sys_sendmsg+0x10/0x10 [ 2507.781594][ T2059] ? find_held_lock+0x2b/0x80 [ 2507.781693][ T2059] __sys_sendmmsg+0x200/0x420 [ 2507.781722][ T2059] ? __pfx___sys_sendmmsg+0x10/0x10 [ 2507.781758][ T2059] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2507.781797][ T2059] ? fput+0x9b/0xd0 [ 2507.781839][ T2059] ? ksys_write+0x1ac/0x250 [ 2507.781865][ T2059] ? __pfx_ksys_write+0x10/0x10 [ 2507.781897][ T2059] __x64_sys_sendmmsg+0x9c/0x100 [ 2507.781922][ T2059] ? lockdep_hardirqs_on+0x7c/0x110 [ 2507.781947][ T2059] do_syscall_64+0xcd/0x490 [ 2507.781975][ T2059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2507.782000][ T2059] RIP: 0033:0x7f7af438ebe9 [ 2507.782019][ T2059] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2507.782042][ T2059] RSP: 002b:00007f7af51ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2507.782064][ T2059] RAX: ffffffffffffffda RBX: 00007f7af45b6180 RCX: 00007f7af438ebe9 [ 2507.782080][ T2059] RDX: 0000000000000007 RSI: 0000200000000140 RDI: 0000000000000003 [ 2507.782093][ T2059] RBP: 00007f7af51ff090 R08: 0000000000000000 R09: 0000000000000000 [ 2507.782107][ T2059] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 2507.782121][ T2059] R13: 00007f7af45b6218 R14: 00007f7af45b6180 R15: 00007ffe3f7d3b48 [ 2507.782150][ T2059] [ 2512.227680][ T2121] can: request_module (can-proto-3) failed. [ 2513.999062][ T2161] FAULT_INJECTION: forcing a failure. [ 2513.999062][ T2161] name failslab, interval 1, probability 0, space 0, times 0 [ 2514.125236][ T2161] CPU: 0 UID: 0 PID: 2161 Comm: syz.2.4580 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) [ 2514.125272][ T2161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2514.125285][ T2161] Call Trace: [ 2514.125293][ T2161] [ 2514.125301][ T2161] dump_stack_lvl+0x16c/0x1f0 [ 2514.125335][ T2161] should_fail_ex+0x512/0x640 [ 2514.125365][ T2161] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 2514.125403][ T2161] should_failslab+0xc2/0x120 [ 2514.125436][ T2161] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 2514.125467][ T2161] ? getname_flags.part.0+0x4c/0x550 [ 2514.125509][ T2161] getname_flags.part.0+0x4c/0x550 [ 2514.125547][ T2161] getname_flags+0x93/0xf0 [ 2514.125570][ T2161] do_sys_openat2+0xb8/0x1d0 [ 2514.125604][ T2161] ? __pfx_do_sys_openat2+0x10/0x10 [ 2514.125646][ T2161] __x64_sys_openat+0x174/0x210 [ 2514.125682][ T2161] ? __pfx___x64_sys_openat+0x10/0x10 [ 2514.125782][ T2161] do_syscall_64+0xcd/0x490 [ 2514.125810][ T2161] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2514.125835][ T2161] RIP: 0033:0x7f7af438ebe9 [ 2514.125853][ T2161] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2514.125875][ T2161] RSP: 002b:00007f7af5220038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2514.125897][ T2161] RAX: ffffffffffffffda RBX: 00007f7af45b6090 RCX: 00007f7af438ebe9 [ 2514.125912][ T2161] RDX: 0000000000060742 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 2514.125925][ T2161] RBP: 00007f7af4411e19 R08: 0000000000000000 R09: 0000000000000000 [ 2514.125938][ T2161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2514.125951][ T2161] R13: 00007f7af45b6128 R14: 00007f7af45b6090 R15: 00007ffe3f7d3b48 [ 2514.125979][ T2161] [ 2515.425011][ T2181] i2c i2c-0: new_device: Instantiated device card: at 0x01 [ 2516.032835][ T2190] i2c i2c-0: new_device: Missing parameters [ 2516.087727][ T2181] zswap: compressor not available [ 2516.439930][ T2193] can: request_module (can-proto-3) failed. [ 2516.692517][ T2165] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 2517.101574][ T2201] FAULT_INJECTION: forcing a failure. [ 2517.101574][ T2201] name failslab, interval 1, probability 0, space 0, times 0 [ 2517.178523][ T2201] CPU: 0 UID: 0 PID: 2201 Comm: syz.3.4588 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) [ 2517.178558][ T2201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2517.178572][ T2201] Call Trace: [ 2517.178580][ T2201] [ 2517.178589][ T2201] dump_stack_lvl+0x16c/0x1f0 [ 2517.178623][ T2201] should_fail_ex+0x512/0x640 [ 2517.178658][ T2201] should_failslab+0xc2/0x120 [ 2517.178692][ T2201] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 2517.178723][ T2201] ? zswap_store+0x839/0x25a0 [ 2517.178763][ T2201] zswap_store+0x839/0x25a0 [ 2517.178810][ T2201] ? __pfx_zswap_store+0x10/0x10 [ 2517.178845][ T2201] ? do_raw_spin_lock+0x12c/0x2b0 [ 2517.178881][ T2201] ? find_held_lock+0x2b/0x80 [ 2517.178905][ T2201] ? folio_free_swap+0x171/0x580 [ 2517.178943][ T2201] ? do_raw_spin_unlock+0x172/0x230 [ 2517.178977][ T2201] ? swp_swap_info+0xce/0x130 [ 2517.179008][ T2201] ? __pfx_swp_swap_info+0x10/0x10 [ 2517.179041][ T2201] ? __pfx_try_to_unmap+0x10/0x10 [ 2517.179071][ T2201] swap_writeout+0x3b2/0xfe0 [ 2517.179108][ T2201] ? folio_clear_dirty_for_io+0x112/0x810 [ 2517.179151][ T2201] shrink_folio_list+0x3e46/0x4880 [ 2517.179187][ T2201] ? __pfx_shrink_folio_list+0x10/0x10 [ 2517.179211][ T2201] ? lock_acquire+0x179/0x350 [ 2517.179245][ T2201] ? __lock_acquire+0x62e/0x1ce0 [ 2517.179288][ T2201] ? __lock_acquire+0x62e/0x1ce0 [ 2517.179350][ T2201] ? __memcg_slab_post_alloc_hook+0x4a0/0x960 [ 2517.179389][ T2201] reclaim_folio_list+0xda/0x5d0 [ 2517.179411][ T2201] ? __pfx_css_rstat_updated+0x10/0x10 [ 2517.179504][ T2201] ? __pfx_reclaim_folio_list+0x10/0x10 [ 2517.179541][ T2201] ? lru_gen_update_size+0x543/0xe10 [ 2517.179571][ T2201] ? lru_gen_del_folio+0x32b/0x540 [ 2517.179595][ T2201] reclaim_pages+0x47b/0x650 [ 2517.179622][ T2201] ? __pfx_vm_normal_page+0x10/0x10 [ 2517.179657][ T2201] ? __pfx_reclaim_pages+0x10/0x10 [ 2517.179680][ T2201] ? find_held_lock+0x2b/0x80 [ 2517.179703][ T2201] ? madvise_cold_or_pageout_pte_range+0x749/0x2120 [ 2517.179743][ T2201] madvise_cold_or_pageout_pte_range+0x1546/0x2120 [ 2517.179808][ T2201] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 2517.179844][ T2201] ? __lock_acquire+0x62e/0x1ce0 [ 2517.179878][ T2201] ? __pfx_stack_trace_save+0x10/0x10 [ 2517.179941][ T2201] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 2517.179979][ T2201] walk_pgd_range+0xc05/0x1f50 [ 2517.180030][ T2201] ? __pfx_walk_pgd_range+0x10/0x10 [ 2517.180067][ T2201] __walk_page_range+0x163/0x820 [ 2517.180101][ T2201] ? __lock_acquire+0xb97/0x1ce0 [ 2517.180139][ T2201] walk_page_range_vma+0x2c7/0xa20 [ 2517.180173][ T2201] ? __pfx_walk_page_range_vma+0x10/0x10 [ 2517.180204][ T2201] ? find_held_lock+0x2b/0x80 [ 2517.180238][ T2201] madvise_pageout+0x257/0x540 [ 2517.180272][ T2201] ? __pfx_madvise_pageout+0x10/0x10 [ 2517.180319][ T2201] ? mas_next_slot+0x12d3/0x21b0 [ 2517.180354][ T2201] madvise_vma_behavior+0xb22/0x2d60 [ 2517.180397][ T2201] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 2517.180435][ T2201] ? __pfx_mt_find+0x10/0x10 [ 2517.180470][ T2201] ? find_vma_prev+0xda/0x160 [ 2517.180513][ T2201] ? find_vma+0xbf/0x140 [ 2517.180544][ T2201] ? __pfx_find_vma+0x10/0x10 [ 2517.180583][ T2201] madvise_walk_vmas+0x31f/0x9c0 [ 2517.180623][ T2201] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 2517.180667][ T2201] madvise_do_behavior+0x1e2/0x530 [ 2517.180705][ T2201] ? __pfx_madvise_do_behavior+0x10/0x10 [ 2517.180742][ T2201] ? down_read+0x13d/0x480 [ 2517.180778][ T2201] ? find_held_lock+0x2b/0x80 [ 2517.180807][ T2201] do_madvise+0x176/0x240 [ 2517.180843][ T2201] ? __pfx_do_madvise+0x10/0x10 [ 2517.180887][ T2201] ? __fget_files+0x20e/0x3c0 [ 2517.180932][ T2201] ? __pfx_ksys_write+0x10/0x10 [ 2517.180967][ T2201] __x64_sys_madvise+0xa9/0x110 [ 2517.181001][ T2201] ? lockdep_hardirqs_on+0x7c/0x110 [ 2517.181034][ T2201] do_syscall_64+0xcd/0x490 [ 2517.181067][ T2201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2517.181092][ T2201] RIP: 0033:0x7fe15078ebe9 [ 2517.181111][ T2201] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2517.181134][ T2201] RSP: 002b:00007fe1515c1038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 2517.181156][ T2201] RAX: ffffffffffffffda RBX: 00007fe1509b5fa0 RCX: 00007fe15078ebe9 [ 2517.181172][ T2201] RDX: 0000000000000015 RSI: ffffffffffff0001 RDI: 0000000000000000 [ 2517.181214][ T2201] RBP: 00007fe1515c1090 R08: 0000000000000000 R09: 0000000000000000 [ 2517.181228][ T2201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2517.181242][ T2201] R13: 00007fe1509b6038 R14: 00007fe1509b5fa0 R15: 00007ffc9bfa3608 [ 2517.181272][ T2201] [ 2518.718661][ T2221] FAULT_INJECTION: forcing a failure. [ 2518.718661][ T2221] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2518.916487][ T2221] CPU: 0 UID: 0 PID: 2221 Comm: syz.1.4592 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) [ 2518.916523][ T2221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2518.916538][ T2221] Call Trace: [ 2518.916546][ T2221] [ 2518.916556][ T2221] dump_stack_lvl+0x16c/0x1f0 [ 2518.916590][ T2221] should_fail_ex+0x512/0x640 [ 2518.916626][ T2221] _copy_from_iter+0x29f/0x16f0 [ 2518.916721][ T2221] ? __alloc_skb+0x200/0x380 [ 2518.916749][ T2221] ? __pfx__copy_from_iter+0x10/0x10 [ 2518.916790][ T2221] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 2518.916818][ T2221] ? __lock_acquire+0xb97/0x1ce0 [ 2518.916860][ T2221] netlink_sendmsg+0x829/0xdd0 [ 2518.916893][ T2221] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2518.916923][ T2221] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 2518.916991][ T2221] ____sys_sendmsg+0xa98/0xc70 [ 2518.917027][ T2221] ? copy_msghdr_from_user+0x10a/0x160 [ 2518.917052][ T2221] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2518.917098][ T2221] ___sys_sendmsg+0x134/0x1d0 [ 2518.917126][ T2221] ? __pfx____sys_sendmsg+0x10/0x10 [ 2518.917177][ T2221] ? __mutex_unlock_slowpath+0x140/0x800 [ 2518.917213][ T2221] __sys_sendmsg+0x16d/0x220 [ 2518.917240][ T2221] ? __pfx___sys_sendmsg+0x10/0x10 [ 2518.917285][ T2221] do_syscall_64+0xcd/0x490 [ 2518.917314][ T2221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2518.917339][ T2221] RIP: 0033:0x7f4d0958ebe9 [ 2518.917359][ T2221] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2518.917384][ T2221] RSP: 002b:00007f4d077f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2518.917407][ T2221] RAX: ffffffffffffffda RBX: 00007f4d097b6180 RCX: 00007f4d0958ebe9 [ 2518.917423][ T2221] RDX: 0000000000048080 RSI: 0000200000000140 RDI: 0000000000000003 [ 2518.917437][ T2221] RBP: 00007f4d077f6090 R08: 0000000000000000 R09: 0000000000000000 [ 2518.917453][ T2221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2518.917467][ T2221] R13: 00007f4d097b6218 R14: 00007f4d097b6180 R15: 00007ffc545f1938 [ 2518.917496][ T2221] [ 2519.226658][ T2202] netlink: 342 bytes leftover after parsing attributes in process `syz.2.4587'. [ 2520.233427][ T2214] netlink: 342 bytes leftover after parsing attributes in process `syz.0.4590'. [ 2521.024697][ T2253] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2521.166074][ T2253] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2521.274803][ T2256] FAULT_INJECTION: forcing a failure. [ 2521.274803][ T2256] name failslab, interval 1, probability 0, space 0, times 0 [ 2521.406990][ T2253] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2521.418728][ T2269] FAULT_INJECTION: forcing a failure. [ 2521.418728][ T2269] name failslab, interval 1, probability 0, space 0, times 0 [ 2521.525826][ T2269] CPU: 0 UID: 0 PID: 2269 Comm: syz.0.4601 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) [ 2521.525863][ T2269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2521.525943][ T2269] Call Trace: [ 2521.525952][ T2269] [ 2521.525963][ T2269] dump_stack_lvl+0x16c/0x1f0 [ 2521.525999][ T2269] should_fail_ex+0x512/0x640 [ 2521.526037][ T2269] should_failslab+0xc2/0x120 [ 2521.526072][ T2269] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 2521.526104][ T2269] ? skb_clone+0x190/0x3f0 [ 2521.526136][ T2269] skb_clone+0x190/0x3f0 [ 2521.526164][ T2269] netlink_deliver_tap+0xabd/0xd30 [ 2521.526197][ T2269] netlink_unicast+0x64c/0x870 [ 2521.526229][ T2269] ? __pfx_netlink_unicast+0x10/0x10 [ 2521.526256][ T2269] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 2521.526282][ T2269] ? __lock_acquire+0xb97/0x1ce0 [ 2521.526324][ T2269] netlink_sendmsg+0x8d1/0xdd0 [ 2521.526356][ T2269] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2521.526387][ T2269] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 2521.526432][ T2269] ____sys_sendmsg+0xa98/0xc70 [ 2521.526487][ T2269] ? copy_msghdr_from_user+0x10a/0x160 [ 2521.526520][ T2269] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2521.526567][ T2269] ___sys_sendmsg+0x134/0x1d0 [ 2521.526595][ T2269] ? __pfx____sys_sendmsg+0x10/0x10 [ 2521.526647][ T2269] ? __mutex_unlock_slowpath+0x140/0x800 [ 2521.526684][ T2269] __sys_sendmsg+0x16d/0x220 [ 2521.526712][ T2269] ? __pfx___sys_sendmsg+0x10/0x10 [ 2521.526757][ T2269] do_syscall_64+0xcd/0x490 [ 2521.526787][ T2269] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2521.526813][ T2269] RIP: 0033:0x7f014958ebe9 [ 2521.526833][ T2269] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2521.526857][ T2269] RSP: 002b:00007f01477f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2521.526881][ T2269] RAX: ffffffffffffffda RBX: 00007f01497b5fa0 RCX: 00007f014958ebe9 [ 2521.526897][ T2269] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 2521.526911][ T2269] RBP: 00007f01477f6090 R08: 0000000000000000 R09: 0000000000000000 [ 2521.526926][ T2269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2521.526939][ T2269] R13: 00007f01497b6038 R14: 00007f01497b5fa0 R15: 00007fff61251cb8 [ 2521.526969][ T2269] [ 2521.946921][ T2274] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4602'. [ 2522.678795][ T2291] can: request_module (can-proto-3) failed. [ 2522.746512][ T2253] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2522.793400][ T2256] CPU: 0 UID: 0 PID: 2256 Comm: syz.1.4598 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) [ 2522.793437][ T2256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2522.793451][ T2256] Call Trace: [ 2522.793458][ T2256] [ 2522.793467][ T2256] dump_stack_lvl+0x16c/0x1f0 [ 2522.793502][ T2256] should_fail_ex+0x512/0x640 [ 2522.793533][ T2256] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 2522.793566][ T2256] should_failslab+0xc2/0x120 [ 2522.793663][ T2256] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 2522.793692][ T2256] ? security_file_alloc+0x34/0x2b0 [ 2522.793762][ T2256] security_file_alloc+0x34/0x2b0 [ 2522.793790][ T2256] init_file+0x93/0x4c0 [ 2522.793826][ T2256] alloc_empty_file+0x73/0x1e0 [ 2522.793861][ T2256] path_openat+0xda/0x2cb0 [ 2522.793888][ T2256] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2522.793922][ T2256] ? __pfx_path_openat+0x10/0x10 [ 2522.793957][ T2256] do_filp_open+0x20b/0x470 [ 2522.793985][ T2256] ? __pfx_do_filp_open+0x10/0x10 [ 2522.794032][ T2256] ? alloc_fd+0x471/0x7d0 [ 2522.794064][ T2256] do_sys_openat2+0x11b/0x1d0 [ 2522.794100][ T2256] ? __pfx_do_sys_openat2+0x10/0x10 [ 2522.794139][ T2256] ? __fget_files+0x20e/0x3c0 [ 2522.794169][ T2256] __x64_sys_openat+0x174/0x210 [ 2522.794206][ T2256] ? __pfx___x64_sys_openat+0x10/0x10 [ 2522.794259][ T2256] ? ksys_write+0x1ac/0x250 [ 2522.794296][ T2256] do_syscall_64+0xcd/0x490 [ 2522.794348][ T2256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2522.794380][ T2256] RIP: 0033:0x7f4d0958ebe9 [ 2522.794401][ T2256] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2522.794424][ T2256] RSP: 002b:00007f4d0a329038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2522.794447][ T2256] RAX: ffffffffffffffda RBX: 00007f4d097b6090 RCX: 00007f4d0958ebe9 [ 2522.794463][ T2256] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 2522.794478][ T2256] RBP: 00007f4d0a329090 R08: 0000000000000000 R09: 0000000000000000 [ 2522.794492][ T2256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2522.794506][ T2256] R13: 00007f4d097b6128 R14: 00007f4d097b6090 R15: 00007ffc545f1938 [ 2522.794535][ T2256] [ 2522.797814][ T2274] veth0_macvtap: left promiscuous mode [ 2523.210399][T30912] Bluetooth: hci1: command 0x0406 tx timeout [ 2523.347671][T30912] Bluetooth: hci0: command 0x0406 tx timeout [ 2523.491387][T30912] Bluetooth: hci2: command 0x0406 tx timeout [ 2524.756288][T30912] Bluetooth: hci4: command 0x0406 tx timeout [ 2524.918333][ T2327] FAULT_INJECTION: forcing a failure. [ 2524.918333][ T2327] name failslab, interval 1, probability 0, space 0, times 0 [ 2524.975627][ T2327] CPU: 0 UID: 0 PID: 2327 Comm: syz.1.4610 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) [ 2524.975668][ T2327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2524.975684][ T2327] Call Trace: [ 2524.975693][ T2327] [ 2524.975704][ T2327] dump_stack_lvl+0x16c/0x1f0 [ 2524.975741][ T2327] should_fail_ex+0x512/0x640 [ 2524.975774][ T2327] ? fs_reclaim_acquire+0xae/0x150 [ 2524.975817][ T2327] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 2524.975947][ T2327] should_failslab+0xc2/0x120 [ 2524.975983][ T2327] __kmalloc_noprof+0xd2/0x510 [ 2524.976020][ T2327] tomoyo_realpath_from_path+0xc2/0x6e0 [ 2524.976062][ T2327] tomoyo_check_open_permission+0x2ab/0x3c0 [ 2524.976091][ T2327] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 2524.976174][ T2327] ? do_raw_spin_lock+0x12c/0x2b0 [ 2524.976234][ T2327] tomoyo_file_open+0x6b/0x90 [ 2524.976273][ T2327] security_file_open+0x84/0x1e0 [ 2524.976306][ T2327] do_dentry_open+0x596/0x1530 [ 2524.976347][ T2327] vfs_open+0x82/0x3f0 [ 2524.976388][ T2327] path_openat+0x1de4/0x2cb0 [ 2524.976428][ T2327] ? __pfx_path_openat+0x10/0x10 [ 2524.976469][ T2327] do_filp_open+0x20b/0x470 [ 2524.976499][ T2327] ? __pfx_do_filp_open+0x10/0x10 [ 2524.976549][ T2327] ? alloc_fd+0x471/0x7d0 [ 2524.976584][ T2327] do_sys_openat2+0x11b/0x1d0 [ 2524.976622][ T2327] ? __pfx_do_sys_openat2+0x10/0x10 [ 2524.976671][ T2327] __x64_sys_openat+0x174/0x210 [ 2524.976710][ T2327] ? __pfx___x64_sys_openat+0x10/0x10 [ 2524.976761][ T2327] do_syscall_64+0xcd/0x490 [ 2524.976793][ T2327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2524.976820][ T2327] RIP: 0033:0x7f4d0958ebe9 [ 2524.976842][ T2327] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2524.976866][ T2327] RSP: 002b:00007f4d0a34a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2524.976891][ T2327] RAX: ffffffffffffffda RBX: 00007f4d097b5fa0 RCX: 00007f4d0958ebe9 [ 2524.976908][ T2327] RDX: 0000000000002002 RSI: 0000200000003dc0 RDI: ffffffffffffff9c [ 2524.976924][ T2327] RBP: 00007f4d09611e19 R08: 0000000000000000 R09: 0000000000000000 [ 2524.976939][ T2327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2524.976955][ T2327] R13: 00007f4d097b6038 R14: 00007f4d097b5fa0 R15: 00007ffc545f1938 [ 2524.976987][ T2327] [ 2524.976999][ T2327] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2528.648410][ T2376] can: request_module (can-proto-3) failed. [ 2531.572302][ T2418] can: request_module (can-proto-0) failed. [ 2533.270136][ T2466] ACPI: EC: Assuming SCI_EVT clearing on QR_EC writes [ 2533.292360][ T2466] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4641'. [ 2533.465575][ T2473] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4642'. [ 2534.305509][ T2488] FAULT_INJECTION: forcing a failure. [ 2534.305509][ T2488] name failslab, interval 1, probability 0, space 0, times 0 [ 2534.362687][ T2488] CPU: 0 UID: 0 PID: 2488 Comm: syz.0.4646 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) [ 2534.362724][ T2488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2534.362738][ T2488] Call Trace: [ 2534.362747][ T2488] [ 2534.362761][ T2488] dump_stack_lvl+0x16c/0x1f0 [ 2534.362796][ T2488] should_fail_ex+0x512/0x640 [ 2534.362828][ T2488] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 2534.362870][ T2488] should_failslab+0xc2/0x120 [ 2534.362902][ T2488] __kmalloc_cache_noprof+0x6a/0x3e0 [ 2534.362926][ T2488] ? sctp_endpoint_new+0x7c/0xcd0 [ 2534.363015][ T2488] sctp_endpoint_new+0x7c/0xcd0 [ 2534.363042][ T2488] sctp_init_sock+0xe2d/0x1330 [ 2534.363085][ T2488] ? sock_init_data_uid+0x7f6/0xa00 [ 2534.363120][ T2488] ? __pfx_sctp_init_sock+0x10/0x10 [ 2534.363163][ T2488] inet_create+0x939/0x1040 [ 2534.363219][ T2488] ? inet_create+0x93/0x1040 [ 2534.363253][ T2488] __sock_create+0x338/0x8d0 [ 2534.363289][ T2488] __sys_socket+0x14d/0x260 [ 2534.363321][ T2488] ? __pfx___sys_socket+0x10/0x10 [ 2534.363351][ T2488] ? ksys_write+0x1ac/0x250 [ 2534.363377][ T2488] ? __pfx_ksys_write+0x10/0x10 [ 2534.363407][ T2488] __x64_sys_socket+0x72/0xb0 [ 2534.363436][ T2488] ? lockdep_hardirqs_on+0x7c/0x110 [ 2534.363461][ T2488] do_syscall_64+0xcd/0x490 [ 2534.363488][ T2488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2534.363511][ T2488] RIP: 0033:0x7f014958ebe9 [ 2534.363534][ T2488] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2534.363556][ T2488] RSP: 002b:00007f01477f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 2534.363576][ T2488] RAX: ffffffffffffffda RBX: 00007f01497b5fa0 RCX: 00007f014958ebe9 [ 2534.363590][ T2488] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000002 [ 2534.363602][ T2488] RBP: 00007f01477f6090 R08: 0000000000000000 R09: 0000000000000000 [ 2534.363615][ T2488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2534.363628][ T2488] R13: 00007f01497b6038 R14: 00007f01497b5fa0 R15: 00007fff61251cb8 [ 2534.363655][ T2488] [ 2534.579725][ T2490] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4646'. [ 2535.496498][ T2509] can: request_module (can-proto-3) failed. [ 2537.673945][T30912] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 2537.692867][ T2546] Line length is too long: Should be less than 4094 [ 2538.481251][ T2571] syz.3.4663 (2571): /proc/2569/oom_adj is deprecated, please use /proc/2569/oom_score_adj instead. [ 2539.491878][ T2597] FAULT_INJECTION: forcing a failure. [ 2539.491878][ T2597] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2539.652607][ T2597] CPU: 0 UID: 0 PID: 2597 Comm: syz.1.4667 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) [ 2539.652645][ T2597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2539.652661][ T2597] Call Trace: [ 2539.652670][ T2597] [ 2539.652680][ T2597] dump_stack_lvl+0x16c/0x1f0 [ 2539.652718][ T2597] should_fail_ex+0x512/0x640 [ 2539.652772][ T2597] should_fail_alloc_page+0xe7/0x130 [ 2539.652813][ T2597] prepare_alloc_pages+0x3c2/0x610 [ 2539.652871][ T2597] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 2539.652904][ T2597] ? mas_next_slot+0x12d3/0x21b0 [ 2539.652939][ T2597] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 2539.652971][ T2597] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 2539.653013][ T2597] ? __lock_acquire+0xb97/0x1ce0 [ 2539.653049][ T2597] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2539.653149][ T2597] ? policy_nodemask+0xea/0x4e0 [ 2539.653185][ T2597] alloc_pages_mpol+0x1fb/0x550 [ 2539.653219][ T2597] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 2539.653251][ T2597] ? __pud_alloc+0x521/0x750 [ 2539.653293][ T2597] alloc_pages_noprof+0x131/0x390 [ 2539.653325][ T2597] __pmd_alloc+0x3b/0x930 [ 2539.653364][ T2597] move_page_tables+0x33a8/0x44a0 [ 2539.653420][ T2597] ? copy_vma+0x496/0xaa0 [ 2539.653453][ T2597] ? __pfx_copy_vma+0x10/0x10 [ 2539.653509][ T2597] ? __pfx_move_page_tables+0x10/0x10 [ 2539.653536][ T2597] ? register_lock_class+0x41/0x4c0 [ 2539.653585][ T2597] ? finish_task_switch.isra.0+0x21c/0xc10 [ 2539.653637][ T2597] copy_vma_and_data+0x24e/0x790 [ 2539.653668][ T2597] ? __pfx_copy_vma_and_data+0x10/0x10 [ 2539.653703][ T2597] ? __vma_enter_locked+0x163/0x3f0 [ 2539.653730][ T2597] ? find_held_lock+0x2b/0x80 [ 2539.653755][ T2597] ? move_vma+0x536/0x1780 [ 2539.653793][ T2597] move_vma+0x548/0x1780 [ 2539.653825][ T2597] ? __pfx_move_vma+0x10/0x10 [ 2539.653851][ T2597] ? mm_get_unmapped_area+0x95/0xe0 [ 2539.653889][ T2597] ? shmem_get_unmapped_area+0x170/0xa00 [ 2539.653916][ T2597] ? cap_mmap_addr+0x4b/0x120 [ 2539.654002][ T2597] ? bpf_lsm_mmap_addr+0x9/0x10 [ 2539.654040][ T2597] ? security_mmap_addr+0x6c/0x1e0 [ 2539.654068][ T2597] ? __get_unmapped_area+0x267/0x440 [ 2539.654107][ T2597] ? vrm_set_new_addr+0x208/0x290 [ 2539.654136][ T2597] mremap_to+0x1b7/0x450 [ 2539.654163][ T2597] do_mremap+0x1004/0x1f80 [ 2539.654203][ T2597] ? __pfx_do_mremap+0x10/0x10 [ 2539.654231][ T2597] ? __pfx_futex_wake+0x10/0x10 [ 2539.654308][ T2597] ? up_write+0x1b2/0x520 [ 2539.654348][ T2597] __do_sys_mremap+0x119/0x170 [ 2539.654375][ T2597] ? __pfx___do_sys_mremap+0x10/0x10 [ 2539.654408][ T2597] ? __x64_sys_futex+0x1e0/0x4c0 [ 2539.654453][ T2597] do_syscall_64+0xcd/0x490 [ 2539.654482][ T2597] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2539.654507][ T2597] RIP: 0033:0x7f4d0958ebe9 [ 2539.654527][ T2597] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2539.654549][ T2597] RSP: 002b:00007f4d077f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 2539.654571][ T2597] RAX: ffffffffffffffda RBX: 00007f4d097b6180 RCX: 00007f4d0958ebe9 [ 2539.654586][ T2597] RDX: 0000000000000008 RSI: 0000000000000002 RDI: 0000000000000000 [ 2539.654600][ T2597] RBP: 00007f4d09611e19 R08: 00007effffffb000 R09: 0000000000000000 [ 2539.654614][ T2597] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 2539.654627][ T2597] R13: 00007f4d097b6218 R14: 00007f4d097b6180 R15: 00007ffc545f1938 [ 2539.654655][ T2597] [ 2540.894261][ T2612] can: request_module (can-proto-3) failed. [ 2541.709547][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 2541.717619][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 2542.063623][ T2630] netlink: 326 bytes leftover after parsing attributes in process `syz.1.4674'. [ 2544.044790][ T2673] FAULT_INJECTION: forcing a failure. [ 2544.044790][ T2673] name failslab, interval 1, probability 0, space 0, times 0 [ 2544.130024][ T2673] CPU: 0 UID: 0 PID: 2673 Comm: syz.0.4682 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) [ 2544.130060][ T2673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2544.130100][ T2673] Call Trace: [ 2544.130128][ T2673] [ 2544.130137][ T2673] dump_stack_lvl+0x16c/0x1f0 [ 2544.130202][ T2673] should_fail_ex+0x512/0x640 [ 2544.130258][ T2673] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 2544.130291][ T2673] should_failslab+0xc2/0x120 [ 2544.130321][ T2673] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 2544.130354][ T2673] ? __d_alloc+0x32/0xae0 [ 2544.130386][ T2673] __d_alloc+0x32/0xae0 [ 2544.130415][ T2673] d_alloc_parallel+0x111/0x1480 [ 2544.130451][ T2673] ? __lock_acquire+0x62e/0x1ce0 [ 2544.130489][ T2673] ? __pfx_d_alloc_parallel+0x10/0x10 [ 2544.130526][ T2673] ? lockdep_init_map_type+0x5c/0x280 [ 2544.130557][ T2673] ? lockdep_init_map_type+0x5c/0x280 [ 2544.130592][ T2673] __lookup_slow+0x193/0x460 [ 2544.130627][ T2673] ? __pfx___lookup_slow+0x10/0x10 [ 2544.130664][ T2673] ? perf_trace_mm_compaction_suitable_template+0xb0/0x5e0 [ 2544.130704][ T2673] ? perf_trace_mm_compaction_suitable_template+0xb0/0x5e0 [ 2544.130737][ T2673] ? d_lookup+0xe7/0x190 [ 2544.130774][ T2673] lookup_noperm+0xe1/0x110 [ 2544.130808][ T2673] simple_start_creating+0xd1/0x1b0 [ 2544.130835][ T2673] start_creating.part.0+0x82/0x190 [ 2544.130882][ T2673] __debugfs_create_file+0xa7/0x6b0 [ 2544.130908][ T2673] debugfs_create_file_full+0x41/0x60 [ 2544.130933][ T2673] ref_tracker_dir_debugfs+0x19d/0x290 [ 2544.130962][ T2673] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 2544.131014][ T2673] ? lockdep_init_map_type+0x5c/0x280 [ 2544.131048][ T2673] preinit_net+0x296/0x8f0 [ 2544.131099][ T2673] copy_net_ns+0x1da/0x5f0 [ 2544.131130][ T2673] create_new_namespaces+0x3ea/0xa90 [ 2544.131163][ T2673] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 2544.131191][ T2673] ksys_unshare+0x45b/0xa40 [ 2544.131224][ T2673] ? __pfx_ksys_unshare+0x10/0x10 [ 2544.131253][ T2673] ? ksys_write+0x1ac/0x250 [ 2544.131287][ T2673] __x64_sys_unshare+0x31/0x40 [ 2544.131316][ T2673] do_syscall_64+0xcd/0x490 [ 2544.131347][ T2673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2544.131370][ T2673] RIP: 0033:0x7f014958ebe9 [ 2544.131408][ T2673] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2544.131444][ T2673] RSP: 002b:00007f01477f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 2544.131495][ T2673] RAX: ffffffffffffffda RBX: 00007f01497b5fa0 RCX: 00007f014958ebe9 [ 2544.131509][ T2673] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 2544.131522][ T2673] RBP: 00007f01477f6090 R08: 0000000000000000 R09: 0000000000000000 [ 2544.131535][ T2673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2544.131548][ T2673] R13: 00007f01497b6038 R14: 00007f01497b5fa0 R15: 00007fff61251cb8 [ 2544.131575][ T2673] [ 2545.655003][ T2684] FAULT_INJECTION: forcing a failure. [ 2545.655003][ T2684] name failslab, interval 1, probability 0, space 0, times 0 [ 2545.807393][ T2684] CPU: 0 UID: 0 PID: 2684 Comm: syz.0.4684 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) [ 2545.807498][ T2684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2545.807514][ T2684] Call Trace: [ 2545.807522][ T2684] [ 2545.807533][ T2684] dump_stack_lvl+0x16c/0x1f0 [ 2545.807567][ T2684] should_fail_ex+0x512/0x640 [ 2545.807604][ T2684] should_failslab+0xc2/0x120 [ 2545.807638][ T2684] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 2545.807670][ T2684] ? skb_clone+0x190/0x3f0 [ 2545.807701][ T2684] skb_clone+0x190/0x3f0 [ 2545.807729][ T2684] netlink_deliver_tap+0xabd/0xd30 [ 2545.807763][ T2684] netlink_unicast+0x64c/0x870 [ 2545.807795][ T2684] ? __pfx_netlink_unicast+0x10/0x10 [ 2545.807822][ T2684] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 2545.807847][ T2684] ? __lock_acquire+0xb97/0x1ce0 [ 2545.807888][ T2684] netlink_sendmsg+0x8d1/0xdd0 [ 2545.807923][ T2684] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2545.807954][ T2684] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 2545.807998][ T2684] ____sys_sendmsg+0xa98/0xc70 [ 2545.808034][ T2684] ? copy_msghdr_from_user+0x10a/0x160 [ 2545.808059][ T2684] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2545.808106][ T2684] ___sys_sendmsg+0x134/0x1d0 [ 2545.808134][ T2684] ? __pfx____sys_sendmsg+0x10/0x10 [ 2545.808186][ T2684] ? __mutex_unlock_slowpath+0x140/0x800 [ 2545.808223][ T2684] __sys_sendmsg+0x16d/0x220 [ 2545.808250][ T2684] ? __pfx___sys_sendmsg+0x10/0x10 [ 2545.808295][ T2684] do_syscall_64+0xcd/0x490 [ 2545.808325][ T2684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2545.808350][ T2684] RIP: 0033:0x7f014958ebe9 [ 2545.808369][ T2684] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2545.808420][ T2684] RSP: 002b:00007f01477d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2545.808443][ T2684] RAX: ffffffffffffffda RBX: 00007f01497b6090 RCX: 00007f014958ebe9 [ 2545.808459][ T2684] RDX: 0000000000040000 RSI: 0000200000000240 RDI: 0000000000000003 [ 2545.808473][ T2684] RBP: 00007f01477d5090 R08: 0000000000000000 R09: 0000000000000000 [ 2545.808492][ T2684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2545.808507][ T2684] R13: 00007f01497b6128 R14: 00007f01497b6090 R15: 00007fff61251cb8 [ 2545.808537][ T2684] [ 2546.122349][ T2696] netlink: 314 bytes leftover after parsing attributes in process `syz.2.4687'. [ 2546.196489][ T2684] netlink: 342 bytes leftover after parsing attributes in process `syz.0.4684'. [ 2548.066970][ T30] audit: type=1800 audit(1754712027.839:41): pid=2733 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="" name="lu_gp_id" dev="configfs" ino=156403 res=0 errno=0 [ 2549.075523][ T30] audit: type=1800 audit(1754712028.870:42): pid=2746 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="" name="lu_gp_id" dev="configfs" ino=156476 res=0 errno=0 [ 2549.991508][ T2769] FAULT_INJECTION: forcing a failure. [ 2549.991508][ T2769] name failslab, interval 1, probability 0, space 0, times 0 [ 2550.070404][ T2769] CPU: 0 UID: 0 PID: 2769 Comm: syz.3.4701 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) [ 2550.070442][ T2769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2550.070456][ T2769] Call Trace: [ 2550.070465][ T2769] [ 2550.070474][ T2769] dump_stack_lvl+0x16c/0x1f0 [ 2550.070510][ T2769] should_fail_ex+0x512/0x640 [ 2550.070607][ T2769] should_failslab+0xc2/0x120 [ 2550.070642][ T2769] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 2550.070673][ T2769] ? skb_clone+0x190/0x3f0 [ 2550.070705][ T2769] skb_clone+0x190/0x3f0 [ 2550.070732][ T2769] netlink_deliver_tap+0xabd/0xd30 [ 2550.070766][ T2769] netlink_unicast+0x64c/0x870 [ 2550.070804][ T2769] ? __pfx_netlink_unicast+0x10/0x10 [ 2550.070831][ T2769] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 2550.070856][ T2769] ? __lock_acquire+0xb97/0x1ce0 [ 2550.070897][ T2769] netlink_sendmsg+0x8d1/0xdd0 [ 2550.070930][ T2769] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2550.070961][ T2769] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 2550.071004][ T2769] ____sys_sendmsg+0xa98/0xc70 [ 2550.071040][ T2769] ? copy_msghdr_from_user+0x10a/0x160 [ 2550.071066][ T2769] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2550.071113][ T2769] ___sys_sendmsg+0x134/0x1d0 [ 2550.071141][ T2769] ? __pfx____sys_sendmsg+0x10/0x10 [ 2550.071193][ T2769] ? __mutex_unlock_slowpath+0x140/0x800 [ 2550.071230][ T2769] __sys_sendmsg+0x16d/0x220 [ 2550.071257][ T2769] ? __pfx___sys_sendmsg+0x10/0x10 [ 2550.071302][ T2769] do_syscall_64+0xcd/0x490 [ 2550.071332][ T2769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2550.071358][ T2769] RIP: 0033:0x7fe15078ebe9 [ 2550.071376][ T2769] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2550.071400][ T2769] RSP: 002b:00007fe1515c1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2550.071423][ T2769] RAX: ffffffffffffffda RBX: 00007fe1509b5fa0 RCX: 00007fe15078ebe9 [ 2550.071439][ T2769] RDX: 0000000020000000 RSI: 0000200000005380 RDI: 0000000000000003 [ 2550.071454][ T2769] RBP: 00007fe1515c1090 R08: 0000000000000000 R09: 0000000000000000 [ 2550.071469][ T2769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2550.071484][ T2769] R13: 00007fe1509b6038 R14: 00007fe1509b5fa0 R15: 00007ffc9bfa3608 [ 2550.071514][ T2769] [ 2553.358740][ T2804] can: request_module (can-proto-3) failed. [ 2554.186509][ T2820] netlink: 326 bytes leftover after parsing attributes in process `syz.3.4709'. [ 2557.712903][ T30] audit: type=1326 audit(1754712037.514:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2863 comm="syz.1.4718" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4d0958ebe9 code=0x0 [ 2559.068672][ T2870] FAULT_INJECTION: forcing a failure. [ 2559.068672][ T2870] name failslab, interval 1, probability 0, space 0, times 0 [ 2559.220062][ T2870] CPU: 0 UID: 0 PID: 2870 Comm: syz.0.4719 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) [ 2559.220101][ T2870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2559.220132][ T2870] Call Trace: [ 2559.220141][ T2870] [ 2559.220151][ T2870] dump_stack_lvl+0x16c/0x1f0 [ 2559.220220][ T2870] should_fail_ex+0x512/0x640 [ 2559.220283][ T2870] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 2559.220319][ T2870] should_failslab+0xc2/0x120 [ 2559.220353][ T2870] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 2559.220383][ T2870] ? sock_alloc_inode+0x25/0x1c0 [ 2559.220419][ T2870] ? __pfx_sock_alloc_inode+0x10/0x10 [ 2559.220474][ T2870] sock_alloc_inode+0x25/0x1c0 [ 2559.220505][ T2870] alloc_inode+0x61/0x240 [ 2559.220542][ T2870] sock_alloc+0x40/0x280 [ 2559.220572][ T2870] __sock_create+0xc1/0x8d0 [ 2559.220606][ T2870] ? __pfx_inet_ctl_sock_create+0x10/0x10 [ 2559.220667][ T2870] inet_ctl_sock_create+0x94/0x230 [ 2559.220703][ T2870] ? __pfx_inet_ctl_sock_create+0x10/0x10 [ 2559.220738][ T2870] ? ndisc_net_init+0x1bc/0x250 [ 2559.220795][ T2870] ? __pfx_ndisc_net_init+0x10/0x10 [ 2559.220820][ T2870] ? __pfx_igmp6_net_init+0x10/0x10 [ 2559.220845][ T2870] igmp6_net_init+0x35/0x470 [ 2559.220869][ T2870] ? __pfx_igmp6_net_init+0x10/0x10 [ 2559.220892][ T2870] ops_init+0x1df/0x5f0 [ 2559.221022][ T2870] setup_net+0x10f/0x380 [ 2559.221049][ T2870] ? lockdep_init_map_type+0x5c/0x280 [ 2559.221096][ T2870] ? __pfx_setup_net+0x10/0x10 [ 2559.221126][ T2870] ? debug_mutex_init+0x37/0x70 [ 2559.221153][ T2870] copy_net_ns+0x2a6/0x5f0 [ 2559.221188][ T2870] create_new_namespaces+0x3ea/0xa90 [ 2559.221229][ T2870] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 2559.221261][ T2870] ksys_unshare+0x45b/0xa40 [ 2559.221297][ T2870] ? __pfx_ksys_unshare+0x10/0x10 [ 2559.221331][ T2870] ? xfd_validate_state+0x61/0x180 [ 2559.221419][ T2870] __x64_sys_unshare+0x31/0x40 [ 2559.221453][ T2870] do_syscall_64+0xcd/0x490 [ 2559.221483][ T2870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2559.221509][ T2870] RIP: 0033:0x7f014958ebe9 [ 2559.221549][ T2870] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2559.221574][ T2870] RSP: 002b:00007f01477f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 2559.221636][ T2870] RAX: ffffffffffffffda RBX: 00007f01497b5fa0 RCX: 00007f014958ebe9 [ 2559.221652][ T2870] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 2559.221667][ T2870] RBP: 00007f0149611e19 R08: 0000000000000000 R09: 0000000000000000 [ 2559.221683][ T2870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2559.221697][ T2870] R13: 00007f01497b6038 R14: 00007f01497b5fa0 R15: 00007fff61251cb8 [ 2559.221747][ T2870] [ 2559.588356][ T2870] socket: no more sockets [ 2559.592755][ T2870] Failed to initialize the IGMP6 control socket (err -23) [ 2559.794744][ T2882] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 2560.725533][ T2893] FAULT_INJECTION: forcing a failure. [ 2560.725533][ T2893] name failslab, interval 1, probability 0, space 0, times 0 [ 2561.182200][ T2893] CPU: 0 UID: 0 PID: 2893 Comm: syz.2.4723 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) [ 2561.182237][ T2893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2561.182252][ T2893] Call Trace: [ 2561.182261][ T2893] [ 2561.182270][ T2893] dump_stack_lvl+0x16c/0x1f0 [ 2561.182305][ T2893] should_fail_ex+0x512/0x640 [ 2561.182341][ T2893] should_failslab+0xc2/0x120 [ 2561.182375][ T2893] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 2561.182443][ T2893] ? skb_clone+0x190/0x3f0 [ 2561.182475][ T2893] skb_clone+0x190/0x3f0 [ 2561.182502][ T2893] netlink_deliver_tap+0xabd/0xd30 [ 2561.182536][ T2893] netlink_unicast+0x64c/0x870 [ 2561.182568][ T2893] ? __pfx_netlink_unicast+0x10/0x10 [ 2561.182596][ T2893] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 2561.182621][ T2893] ? __lock_acquire+0xb97/0x1ce0 [ 2561.182662][ T2893] netlink_sendmsg+0x8d1/0xdd0 [ 2561.182694][ T2893] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2561.182725][ T2893] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 2561.182774][ T2893] ____sys_sendmsg+0xa98/0xc70 [ 2561.182809][ T2893] ? copy_msghdr_from_user+0x10a/0x160 [ 2561.182835][ T2893] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2561.182893][ T2893] ___sys_sendmsg+0x134/0x1d0 [ 2561.182920][ T2893] ? __pfx____sys_sendmsg+0x10/0x10 [ 2561.182970][ T2893] ? __mutex_unlock_slowpath+0x140/0x800 [ 2561.183006][ T2893] __sys_sendmsg+0x16d/0x220 [ 2561.183032][ T2893] ? __pfx___sys_sendmsg+0x10/0x10 [ 2561.183076][ T2893] do_syscall_64+0xcd/0x490 [ 2561.183104][ T2893] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2561.183128][ T2893] RIP: 0033:0x7f7af438ebe9 [ 2561.183146][ T2893] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2561.183169][ T2893] RSP: 002b:00007f7af5241038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2561.183191][ T2893] RAX: ffffffffffffffda RBX: 00007f7af45b5fa0 RCX: 00007f7af438ebe9 [ 2561.183207][ T2893] RDX: 0000000020000000 RSI: 0000200000005380 RDI: 000000000000000c [ 2561.183222][ T2893] RBP: 00007f7af5241090 R08: 0000000000000000 R09: 0000000000000000 [ 2561.183239][ T2893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2561.183253][ T2893] R13: 00007f7af45b6038 R14: 00007f7af45b5fa0 R15: 00007ffe3f7d3b48 [ 2561.183282][ T2893] [ 2561.692634][ T2908] netlink: 'syz.3.4726': attribute type 1 has an invalid length. [ 2561.926714][ T2906] FAULT_INJECTION: forcing a failure. [ 2561.926714][ T2906] name failslab, interval 1, probability 0, space 0, times 0 [ 2561.983922][ T2906] CPU: 0 UID: 0 PID: 2906 Comm: syz.3.4726 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) [ 2561.983960][ T2906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2561.983975][ T2906] Call Trace: [ 2561.983984][ T2906] [ 2561.983994][ T2906] dump_stack_lvl+0x16c/0x1f0 [ 2561.984031][ T2906] should_fail_ex+0x512/0x640 [ 2561.984064][ T2906] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 2561.984099][ T2906] should_failslab+0xc2/0x120 [ 2561.984133][ T2906] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 2561.984164][ T2906] ? security_file_alloc+0x34/0x2b0 [ 2561.984271][ T2906] security_file_alloc+0x34/0x2b0 [ 2561.984302][ T2906] init_file+0x93/0x4c0 [ 2561.984339][ T2906] alloc_empty_file+0x73/0x1e0 [ 2561.984376][ T2906] path_openat+0xda/0x2cb0 [ 2561.984404][ T2906] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2561.984465][ T2906] ? __pfx_path_openat+0x10/0x10 [ 2561.984504][ T2906] do_filp_open+0x20b/0x470 [ 2561.984534][ T2906] ? __pfx_do_filp_open+0x10/0x10 [ 2561.984584][ T2906] ? alloc_fd+0x471/0x7d0 [ 2561.984621][ T2906] do_sys_openat2+0x11b/0x1d0 [ 2561.984668][ T2906] ? __pfx_do_sys_openat2+0x10/0x10 [ 2561.984717][ T2906] __x64_sys_openat+0x174/0x210 [ 2561.984757][ T2906] ? __pfx___x64_sys_openat+0x10/0x10 [ 2561.984808][ T2906] do_syscall_64+0xcd/0x490 [ 2561.984838][ T2906] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2561.984862][ T2906] RIP: 0033:0x7fe15078ebe9 [ 2561.984881][ T2906] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2561.984906][ T2906] RSP: 002b:00007fe1515c1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2561.984930][ T2906] RAX: ffffffffffffffda RBX: 00007fe1509b5fa0 RCX: 00007fe15078ebe9 [ 2561.984947][ T2906] RDX: 0000000000000001 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 2561.984963][ T2906] RBP: 00007fe150811e19 R08: 0000000000000000 R09: 0000000000000000 [ 2561.984978][ T2906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2561.985005][ T2906] R13: 00007fe1509b6038 R14: 00007fe1509b5fa0 R15: 00007ffc9bfa3608 [ 2561.985034][ T2906] [ 2564.745364][ T2931] FAULT_INJECTION: forcing a failure. [ 2564.745364][ T2931] name failslab, interval 1, probability 0, space 0, times 0 [ 2564.814787][ T2931] CPU: 0 UID: 0 PID: 2931 Comm: syz.0.4730 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) [ 2564.814826][ T2931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2564.814841][ T2931] Call Trace: [ 2564.814849][ T2931] [ 2564.814859][ T2931] dump_stack_lvl+0x16c/0x1f0 [ 2564.814894][ T2931] should_fail_ex+0x512/0x640 [ 2564.814925][ T2931] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 2564.814956][ T2931] should_failslab+0xc2/0x120 [ 2564.814989][ T2931] __kmalloc_cache_noprof+0x6a/0x3e0 [ 2564.815012][ T2931] ? read_tsc+0x9/0x20 [ 2564.815042][ T2931] ? ktime_get_mono_fast_ns+0x1be/0x3c0 [ 2564.815070][ T2931] ? init_srcu_struct_fields+0x97a/0xde0 [ 2564.815196][ T2931] ? do_init_timer+0xc9/0x110 [ 2564.815257][ T2931] init_srcu_struct_fields+0x97a/0xde0 [ 2564.815316][ T2931] ? lockdep_init_map_type+0x5c/0x280 [ 2564.815366][ T2931] kvm_dev_ioctl+0x7a0/0x1af0 [ 2564.815422][ T2931] ? find_held_lock+0x2b/0x80 [ 2564.815446][ T2931] ? hook_file_ioctl_common+0x145/0x410 [ 2564.815478][ T2931] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 2564.815506][ T2931] ? __fget_files+0x20e/0x3c0 [ 2564.815538][ T2931] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 2564.815565][ T2931] __x64_sys_ioctl+0x18e/0x210 [ 2564.815608][ T2931] do_syscall_64+0xcd/0x490 [ 2564.815639][ T2931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2564.815665][ T2931] RIP: 0033:0x7f014958ebe9 [ 2564.815685][ T2931] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2564.815710][ T2931] RSP: 002b:00007f01477b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2564.815734][ T2931] RAX: ffffffffffffffda RBX: 00007f01497b6180 RCX: 00007f014958ebe9 [ 2564.815751][ T2931] RDX: 0000000000000a00 RSI: 000000000000ae01 RDI: 0000000000000007 [ 2564.815767][ T2931] RBP: 00007f0149611e19 R08: 0000000000000000 R09: 0000000000000000 [ 2564.815782][ T2931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2564.815797][ T2931] R13: 00007f01497b6218 R14: 00007f01497b6180 R15: 00007fff61251cb8 [ 2564.815828][ T2931] [ 2566.857726][ T2928] netlink: 342 bytes leftover after parsing attributes in process `syz.2.4729'. [ 2567.986554][ T2965] FAULT_INJECTION: forcing a failure. [ 2567.986554][ T2965] name failslab, interval 1, probability 0, space 0, times 0 [ 2568.259700][ T2965] CPU: 0 UID: 0 PID: 2965 Comm: syz.0.4737 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) [ 2568.259739][ T2965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2568.259777][ T2965] Call Trace: [ 2568.259786][ T2965] [ 2568.259796][ T2965] dump_stack_lvl+0x16c/0x1f0 [ 2568.259851][ T2965] should_fail_ex+0x512/0x640 [ 2568.259917][ T2965] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 2568.259953][ T2965] should_failslab+0xc2/0x120 [ 2568.259987][ T2965] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 2568.260017][ T2965] ? sk_prot_alloc+0x60/0x2a0 [ 2568.260065][ T2965] sk_prot_alloc+0x60/0x2a0 [ 2568.260100][ T2965] sk_alloc+0x36/0xc20 [ 2568.260126][ T2965] tipc_sk_create+0xcf/0x21a0 [ 2568.260171][ T2965] ? find_held_lock+0x2b/0x80 [ 2568.260202][ T2965] ? __sock_create+0x2f2/0x8d0 [ 2568.260242][ T2965] __sock_create+0x338/0x8d0 [ 2568.260284][ T2965] __sys_socket+0x14d/0x260 [ 2568.260321][ T2965] ? __pfx___sys_socket+0x10/0x10 [ 2568.260357][ T2965] ? xfd_validate_state+0x61/0x180 [ 2568.260419][ T2965] __x64_sys_socket+0x72/0xb0 [ 2568.260454][ T2965] ? lockdep_hardirqs_on+0x7c/0x110 [ 2568.260481][ T2965] do_syscall_64+0xcd/0x490 [ 2568.260511][ T2965] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2568.260537][ T2965] RIP: 0033:0x7f014958ebe9 [ 2568.260575][ T2965] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2568.260622][ T2965] RSP: 002b:00007f01477b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 2568.260678][ T2965] RAX: ffffffffffffffda RBX: 00007f01497b6180 RCX: 00007f014958ebe9 [ 2568.260695][ T2965] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 000000000000001e [ 2568.260710][ T2965] RBP: 00007f0149611e19 R08: 0000000000000000 R09: 0000000000000000 [ 2568.260726][ T2965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2568.260741][ T2965] R13: 00007f01497b6218 R14: 00007f01497b6180 R15: 00007fff61251cb8 [ 2568.260772][ T2965] [ 2572.034941][ T3015] FAULT_INJECTION: forcing a failure. [ 2572.034941][ T3015] name failslab, interval 1, probability 0, space 0, times 0 [ 2572.121003][ T3015] CPU: 0 UID: 0 PID: 3015 Comm: syz.3.4745 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) [ 2572.121040][ T3015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2572.121054][ T3015] Call Trace: [ 2572.121063][ T3015] [ 2572.121073][ T3015] dump_stack_lvl+0x16c/0x1f0 [ 2572.121190][ T3015] should_fail_ex+0x512/0x640 [ 2572.121222][ T3015] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 2572.121256][ T3015] should_failslab+0xc2/0x120 [ 2572.121292][ T3015] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 2572.121322][ T3015] ? do_futex+0x122/0x350 [ 2572.121381][ T3015] ? __do_sys_getcwd+0xe0/0x930 [ 2572.121422][ T3015] __do_sys_getcwd+0xe0/0x930 [ 2572.121461][ T3015] ? __x64_sys_futex+0x1e0/0x4c0 [ 2572.121490][ T3015] ? __x64_sys_futex+0x1e9/0x4c0 [ 2572.121520][ T3015] ? __pfx___do_sys_getcwd+0x10/0x10 [ 2572.121556][ T3015] ? xfd_validate_state+0x61/0x180 [ 2572.121592][ T3015] ? __pfx_ksys_write+0x10/0x10 [ 2572.121628][ T3015] do_syscall_64+0xcd/0x490 [ 2572.121658][ T3015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2572.121687][ T3015] RIP: 0033:0x7fe15078ebe9 [ 2572.121715][ T3015] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2572.121740][ T3015] RSP: 002b:00007fe1515c1038 EFLAGS: 00000246 ORIG_RAX: 000000000000004f [ 2572.121783][ T3015] RAX: ffffffffffffffda RBX: 00007fe1509b5fa0 RCX: 00007fe15078ebe9 [ 2572.121799][ T3015] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000000 [ 2572.121814][ T3015] RBP: 00007fe150811e19 R08: 0000000000000000 R09: 0000000000000000 [ 2572.121828][ T3015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2572.121843][ T3015] R13: 00007fe1509b6038 R14: 00007fe1509b5fa0 R15: 00007ffc9bfa3608 [ 2572.121874][ T3015] [ 2574.499849][ T3069] FAULT_INJECTION: forcing a failure. [ 2574.499849][ T3069] name failslab, interval 1, probability 0, space 0, times 0 [ 2574.568878][ T3073] openvswitch: netlink: Key 0 has unexpected len 16 expected 0 [ 2574.819499][ T3069] CPU: 0 UID: 0 PID: 3069 Comm: syz.1.4752 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) [ 2574.819536][ T3069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2574.819551][ T3069] Call Trace: [ 2574.819560][ T3069] [ 2574.819569][ T3069] dump_stack_lvl+0x16c/0x1f0 [ 2574.819604][ T3069] should_fail_ex+0x512/0x640 [ 2574.819655][ T3069] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 2574.819691][ T3069] should_failslab+0xc2/0x120 [ 2574.819725][ T3069] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 2574.819756][ T3069] ? sk_prot_alloc+0x60/0x2a0 [ 2574.819793][ T3069] sk_prot_alloc+0x60/0x2a0 [ 2574.819827][ T3069] sk_alloc+0x36/0xc20 [ 2574.819852][ T3069] tipc_sk_create+0xcf/0x21a0 [ 2574.819895][ T3069] ? find_held_lock+0x2b/0x80 [ 2574.819921][ T3069] ? __sock_create+0x2f2/0x8d0 [ 2574.819960][ T3069] __sock_create+0x338/0x8d0 [ 2574.820000][ T3069] __sys_socket+0x14d/0x260 [ 2574.820036][ T3069] ? __pfx___sys_socket+0x10/0x10 [ 2574.820076][ T3069] ? xfd_validate_state+0x61/0x180 [ 2574.820133][ T3069] __x64_sys_socket+0x72/0xb0 [ 2574.820166][ T3069] ? lockdep_hardirqs_on+0x7c/0x110 [ 2574.820192][ T3069] do_syscall_64+0xcd/0x490 [ 2574.820224][ T3069] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2574.820248][ T3069] RIP: 0033:0x7f4d0958ebe9 [ 2574.820266][ T3069] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2574.820290][ T3069] RSP: 002b:00007f4d077f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 2574.820312][ T3069] RAX: ffffffffffffffda RBX: 00007f4d097b6180 RCX: 00007f4d0958ebe9 [ 2574.820328][ T3069] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 000000000000001e [ 2574.820342][ T3069] RBP: 00007f4d09611e19 R08: 0000000000000000 R09: 0000000000000000 [ 2574.820356][ T3069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2574.820389][ T3069] R13: 00007f4d097b6218 R14: 00007f4d097b6180 R15: 00007ffc545f1938 [ 2574.820436][ T3069] [ 2578.595637][ T3135] random: crng reseeded on system resumption [ 2581.663415][ T3191] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4774'. [ 2583.285959][ T3213] random: crng reseeded on system resumption [ 2584.912328][ T3237] netlink: 342 bytes leftover after parsing attributes in process `syz.3.4780'. [ 2586.658760][ T3276] FAULT_INJECTION: forcing a failure. [ 2586.658760][ T3276] name failslab, interval 1, probability 0, space 0, times 0 [ 2586.810634][ T3276] CPU: 0 UID: 0 PID: 3276 Comm: syz.3.4786 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) [ 2586.810674][ T3276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2586.810707][ T3276] Call Trace: [ 2586.810717][ T3276] [ 2586.810728][ T3276] dump_stack_lvl+0x16c/0x1f0 [ 2586.810806][ T3276] should_fail_ex+0x512/0x640 [ 2586.810871][ T3276] ? __kmalloc_noprof+0xbf/0x510 [ 2586.810905][ T3276] ? lsm_blob_alloc+0x68/0x90 [ 2586.810981][ T3276] should_failslab+0xc2/0x120 [ 2586.811017][ T3276] __kmalloc_noprof+0xd2/0x510 [ 2586.811053][ T3276] lsm_blob_alloc+0x68/0x90 [ 2586.811088][ T3276] security_sk_alloc+0x30/0x270 [ 2586.811133][ T3276] sk_prot_alloc+0xfb/0x2a0 [ 2586.811172][ T3276] sk_alloc+0x36/0xc20 [ 2586.811198][ T3276] unix_create1+0xa6/0x700 [ 2586.811273][ T3276] unix_create+0x110/0x270 [ 2586.811308][ T3276] __sock_create+0x338/0x8d0 [ 2586.811350][ T3276] __sys_socketpair+0x25c/0x5a0 [ 2586.811390][ T3276] ? __pfx___sys_socketpair+0x10/0x10 [ 2586.811432][ T3276] ? xfd_validate_state+0x61/0x180 [ 2586.811484][ T3276] ? do_execveat_common.isra.0+0x4c6/0x610 [ 2586.811522][ T3276] __x64_sys_socketpair+0x96/0x100 [ 2586.811560][ T3276] ? lockdep_hardirqs_on+0x7c/0x110 [ 2586.811588][ T3276] do_syscall_64+0xcd/0x490 [ 2586.811619][ T3276] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2586.811645][ T3276] RIP: 0033:0x7fe15078ebe9 [ 2586.811684][ T3276] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2586.811729][ T3276] RSP: 002b:00007fe1515a0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 2586.811785][ T3276] RAX: ffffffffffffffda RBX: 00007fe1509b6090 RCX: 00007fe15078ebe9 [ 2586.811802][ T3276] RDX: 8000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 2586.811818][ T3276] RBP: 00007fe150811e19 R08: 0000000000000000 R09: 0000000000000000 [ 2586.811833][ T3276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2586.811848][ T3276] R13: 00007fe1509b6128 R14: 00007fe1509b6090 R15: 00007ffc9bfa3608 [ 2586.811880][ T3276] [ 2589.958144][ T3316] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4794'. [ 2590.987676][ T5185] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2591.001058][ T5185] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2591.018950][ T5185] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2591.027047][ T5185] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2591.036832][ T5185] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2591.517758][T32024] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2592.074449][T32024] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2592.243046][T32024] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2592.516787][T32024] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2593.117838][ T5185] Bluetooth: hci2: command tx timeout [ 2593.473715][T32024] bridge_slave_1: left allmulticast mode [ 2593.533433][T32024] bridge_slave_1: left promiscuous mode [ 2593.542087][ T3354] netlink: 326 bytes leftover after parsing attributes in process `syz.0.4801'. [ 2593.589628][T32024] bridge0: port 2(bridge_slave_1) entered disabled state [ 2593.678850][T32024] bridge_slave_0: left allmulticast mode [ 2593.724367][T32024] bridge_slave_0: left promiscuous mode [ 2593.762789][T32024] bridge0: port 1(bridge_slave_0) entered disabled state [ 2595.200014][ T5185] Bluetooth: hci2: command tx timeout [ 2595.325447][T32024] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2595.355202][T32024] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2595.391129][T32024] bond0 (unregistering): Released all slaves [ 2595.476220][ T3325] chnl_net:caif_netlink_parms(): no params data found [ 2595.580926][T32024] .SR: left promiscuous mode [ 2596.483450][ T3325] bridge0: port 1(bridge_slave_0) entered blocking state [ 2596.531434][ T3325] bridge0: port 1(bridge_slave_0) entered disabled state [ 2596.574263][ T3325] bridge_slave_0: entered allmulticast mode [ 2596.595964][ T3398] FAULT_INJECTION: forcing a failure. [ 2596.595964][ T3398] name failslab, interval 1, probability 0, space 0, times 0 [ 2596.620690][ T3325] bridge_slave_0: entered promiscuous mode [ 2596.664150][ T3325] bridge0: port 2(bridge_slave_1) entered blocking state [ 2596.681992][ T3398] CPU: 0 UID: 0 PID: 3398 Comm: syz.0.4808 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) [ 2596.682025][ T3398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2596.682057][ T3398] Call Trace: [ 2596.682066][ T3398] [ 2596.682098][ T3398] dump_stack_lvl+0x16c/0x1f0 [ 2596.682164][ T3398] should_fail_ex+0x512/0x640 [ 2596.682225][ T3398] ? fs_reclaim_acquire+0xae/0x150 [ 2596.682266][ T3398] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 2596.682346][ T3398] should_failslab+0xc2/0x120 [ 2596.682380][ T3398] __kmalloc_noprof+0xd2/0x510 [ 2596.682415][ T3398] tomoyo_realpath_from_path+0xc2/0x6e0 [ 2596.682454][ T3398] tomoyo_check_open_permission+0x2ab/0x3c0 [ 2596.682482][ T3398] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 2596.682538][ T3398] ? do_raw_spin_lock+0x12c/0x2b0 [ 2596.682619][ T3398] tomoyo_file_open+0x6b/0x90 [ 2596.682655][ T3398] security_file_open+0x84/0x1e0 [ 2596.682713][ T3398] do_dentry_open+0x596/0x1530 [ 2596.682753][ T3398] vfs_open+0x82/0x3f0 [ 2596.682792][ T3398] path_openat+0x1de4/0x2cb0 [ 2596.682832][ T3398] ? __pfx_path_openat+0x10/0x10 [ 2596.682868][ T3398] do_filp_open+0x20b/0x470 [ 2596.682897][ T3398] ? __pfx_do_filp_open+0x10/0x10 [ 2596.682959][ T3398] ? alloc_fd+0x471/0x7d0 [ 2596.682992][ T3398] do_sys_openat2+0x11b/0x1d0 [ 2596.683026][ T3398] ? __pfx_do_sys_openat2+0x10/0x10 [ 2596.683064][ T3398] ? __fget_files+0x20e/0x3c0 [ 2596.683094][ T3398] __x64_sys_openat+0x174/0x210 [ 2596.683130][ T3398] ? __pfx___x64_sys_openat+0x10/0x10 [ 2596.683164][ T3398] ? ksys_write+0x1ac/0x250 [ 2596.683200][ T3398] do_syscall_64+0xcd/0x490 [ 2596.683230][ T3398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2596.683254][ T3398] RIP: 0033:0x7f014958ebe9 [ 2596.683289][ T3398] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2596.683331][ T3398] RSP: 002b:00007f01477f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2596.683383][ T3398] RAX: ffffffffffffffda RBX: 00007f01497b5fa0 RCX: 00007f014958ebe9 [ 2596.683399][ T3398] RDX: 0000000000020882 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 2596.683413][ T3398] RBP: 00007f01477f6090 R08: 0000000000000000 R09: 0000000000000000 [ 2596.683427][ T3398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2596.683441][ T3398] R13: 00007f01497b6038 R14: 00007f01497b5fa0 R15: 00007fff61251cb8 [ 2596.683472][ T3398] [ 2596.683482][ T3398] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2596.963156][ T3325] bridge0: port 2(bridge_slave_1) entered disabled state [ 2596.988447][ T3325] bridge_slave_1: entered allmulticast mode [ 2597.007521][ T3325] bridge_slave_1: entered promiscuous mode [ 2597.349637][ T5185] Bluetooth: hci2: command tx timeout [ 2597.560301][ T3325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2597.660369][ T3325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2597.928226][T32024] hsr_slave_0: left promiscuous mode [ 2597.952927][T32024] hsr_slave_1: left promiscuous mode [ 2597.981039][T32024] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2597.999699][ T3410] futex_wake_op: syz.0.4808 tries to shift op by -9; fix this program [ 2598.047391][T32024] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2598.195938][T32024] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2598.203392][T32024] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2598.515270][T32024] veth1_macvtap: left promiscuous mode [ 2598.553372][T32024] veth0_macvtap: left promiscuous mode [ 2598.598321][T32024] veth1_vlan: left promiscuous mode [ 2598.630130][T32024] veth0_vlan: left promiscuous mode [ 2599.354620][ T5185] Bluetooth: hci2: command tx timeout [ 2603.116254][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 2603.122760][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 2605.111920][ T3446] futex_wake_op: syz.0.4815 tries to shift op by -9; fix this program [ 2606.036281][T32024] team0 (unregistering): Port device team_slave_1 removed [ 2606.371764][T32024] team0 (unregistering): Port device team_slave_0 removed [ 2609.371770][ T3325] team0: Port device team_slave_0 added [ 2609.493605][ T3325] team0: Port device team_slave_1 added [ 2609.850716][ T3325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2609.857715][ T3325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2610.042662][ T3325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2610.244171][ T3325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2610.274743][ T3325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2610.401801][ T3325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2610.799933][ T3325] hsr_slave_0: entered promiscuous mode [ 2610.826329][ T3325] hsr_slave_1: entered promiscuous mode [ 2610.855447][ T3325] debugfs: 'hsr0' already exists in 'hsr' [ 2610.879182][ T3325] Cannot create hsr debugfs directory [ 2613.982818][ T3517] FAULT_INJECTION: forcing a failure. [ 2613.982818][ T3517] name failslab, interval 1, probability 0, space 0, times 0 [ 2614.281914][ T3517] CPU: 0 UID: 0 PID: 3517 Comm: syz.0.4825 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) [ 2614.281950][ T3517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2614.281982][ T3517] Call Trace: [ 2614.281991][ T3517] [ 2614.282000][ T3517] dump_stack_lvl+0x16c/0x1f0 [ 2614.282074][ T3517] should_fail_ex+0x512/0x640 [ 2614.282134][ T3517] ? fs_reclaim_acquire+0xae/0x150 [ 2614.282176][ T3517] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 2614.282236][ T3517] should_failslab+0xc2/0x120 [ 2614.282269][ T3517] __kmalloc_noprof+0xd2/0x510 [ 2614.282305][ T3517] tomoyo_realpath_from_path+0xc2/0x6e0 [ 2614.282344][ T3517] tomoyo_check_open_permission+0x2ab/0x3c0 [ 2614.282371][ T3517] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 2614.282427][ T3517] ? do_raw_spin_lock+0x12c/0x2b0 [ 2614.282509][ T3517] tomoyo_file_open+0x6b/0x90 [ 2614.282545][ T3517] security_file_open+0x84/0x1e0 [ 2614.282603][ T3517] do_dentry_open+0x596/0x1530 [ 2614.282743][ T3517] vfs_open+0x82/0x3f0 [ 2614.282784][ T3517] path_openat+0x1de4/0x2cb0 [ 2614.282824][ T3517] ? __pfx_path_openat+0x10/0x10 [ 2614.282860][ T3517] do_filp_open+0x20b/0x470 [ 2614.282903][ T3517] ? __pfx_do_filp_open+0x10/0x10 [ 2614.282961][ T3517] ? alloc_fd+0x471/0x7d0 [ 2614.282992][ T3517] do_sys_openat2+0x11b/0x1d0 [ 2614.283025][ T3517] ? __pfx_do_sys_openat2+0x10/0x10 [ 2614.283061][ T3517] ? __fget_files+0x20e/0x3c0 [ 2614.283089][ T3517] __x64_sys_openat+0x174/0x210 [ 2614.283124][ T3517] ? __pfx___x64_sys_openat+0x10/0x10 [ 2614.283156][ T3517] ? ksys_write+0x1ac/0x250 [ 2614.283191][ T3517] do_syscall_64+0xcd/0x490 [ 2614.283219][ T3517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2614.283243][ T3517] RIP: 0033:0x7f014958ebe9 [ 2614.283301][ T3517] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2614.283343][ T3517] RSP: 002b:00007f01477d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2614.283416][ T3517] RAX: ffffffffffffffda RBX: 00007f01497b6090 RCX: 00007f014958ebe9 [ 2614.283432][ T3517] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 2614.283446][ T3517] RBP: 00007f01477d5090 R08: 0000000000000000 R09: 0000000000000000 [ 2614.283473][ T3517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2614.283486][ T3517] R13: 00007f01497b6128 R14: 00007f01497b6090 R15: 00007fff61251cb8 [ 2614.283513][ T3517] [ 2614.283523][ T3517] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2615.433069][ T3325] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2615.500235][ T3325] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2615.548237][ T3325] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2615.742224][ T3325] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2616.118649][ T3515] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2616.124862][ T3515] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2616.482842][ T3515] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2616.560472][ T3515] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2616.622186][ T3515] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 2617.046049][ T3515] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 2618.146982][T30912] Bluetooth: hci0: command 0x0406 tx timeout [ 2618.154433][ T5185] Bluetooth: hci1: command 0x0406 tx timeout [ 2618.413285][ T3325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2618.554398][T30912] Bluetooth: hci4: command 0x0406 tx timeout [ 2618.627002][T30912] Bluetooth: hci2: command 0x0c1a tx timeout [ 2619.419784][ T3325] 8021q: adding VLAN 0 to HW filter on device team0 [ 2620.026278][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 2620.033631][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2620.130793][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 2620.137996][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2620.704163][T30912] Bluetooth: hci2: command 0x0c1a tx timeout [ 2620.753442][ T3325] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2621.899457][ T3325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2622.181789][ T3325] veth0_vlan: entered promiscuous mode [ 2622.282286][ T3325] veth1_vlan: entered promiscuous mode [ 2622.448384][ T3325] veth0_macvtap: entered promiscuous mode [ 2622.519255][ T3325] veth1_macvtap: entered promiscuous mode [ 2622.632476][ T3325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2622.701830][ T3325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2622.786464][T30912] Bluetooth: hci2: command 0x0c1a tx timeout [ 2622.858937][ T1976] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2623.315980][ T1976] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2623.386197][ T1976] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2623.453846][T32024] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2624.275919][T32015] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2624.364253][T32015] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2624.543416][ T1976] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2624.551282][ T1976] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2624.578509][ T3650] FAULT_INJECTION: forcing a failure. [ 2624.578509][ T3650] name failslab, interval 1, probability 0, space 0, times 0 [ 2624.642739][ T3650] CPU: 0 UID: 0 PID: 3650 Comm: syz.1.4842 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) [ 2624.642778][ T3650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2624.642794][ T3650] Call Trace: [ 2624.642802][ T3650] [ 2624.642812][ T3650] dump_stack_lvl+0x16c/0x1f0 [ 2624.642849][ T3650] should_fail_ex+0x512/0x640 [ 2624.642881][ T3650] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 2624.642916][ T3650] should_failslab+0xc2/0x120 [ 2624.642961][ T3650] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 2624.642991][ T3650] ? mas_alloc_nodes+0x18b/0x8b0 [ 2624.643017][ T3650] mas_alloc_nodes+0x18b/0x8b0 [ 2624.643045][ T3650] mas_node_count_gfp+0x105/0x130 [ 2624.643068][ T3650] mas_preallocate+0x7e0/0xde0 [ 2624.643098][ T3650] ? __memcg_slab_post_alloc_hook+0x482/0x960 [ 2624.643185][ T3650] ? __pfx_mas_preallocate+0x10/0x10 [ 2624.643227][ T3650] ? anon_vma_name+0x81/0x2f0 [ 2624.643267][ T3650] __split_vma+0x34a/0x1070 [ 2624.643300][ T3650] ? __pfx___split_vma+0x10/0x10 [ 2624.643333][ T3650] ? __pfx_mas_prev+0x10/0x10 [ 2624.643365][ T3650] vms_gather_munmap_vmas+0x3b1/0x1340 [ 2624.643398][ T3650] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 2624.643429][ T3650] ? mas_walk+0x6f5/0x980 [ 2624.643460][ T3650] __mmap_region+0x436/0x27b0 [ 2624.643491][ T3650] ? __pfx___mmap_region+0x10/0x10 [ 2624.643519][ T3650] ? lock_acquire+0x179/0x350 [ 2624.643557][ T3650] ? mark_held_locks+0x49/0x80 [ 2624.643588][ T3650] ? finish_task_switch.isra.0+0x221/0xc10 [ 2624.643690][ T3650] ? lockdep_hardirqs_on+0x7c/0x110 [ 2624.643739][ T3650] ? finish_task_switch.isra.0+0x221/0xc10 [ 2624.643767][ T3650] ? rcu_is_watching+0x12/0xc0 [ 2624.643817][ T3650] ? trace_sched_exit_tp+0xd1/0x120 [ 2624.643876][ T3650] ? __schedule+0x11a3/0x5de0 [ 2624.643898][ T3650] ? look_up_lock_class+0x59/0x150 [ 2624.643969][ T3650] ? trace_cap_capable+0x18d/0x200 [ 2624.644054][ T3650] mmap_region+0x1ab/0x3f0 [ 2624.644084][ T3650] ? __get_unmapped_area+0x267/0x440 [ 2624.644126][ T3650] do_mmap+0xa3e/0x1210 [ 2624.644166][ T3650] ? __pfx_do_mmap+0x10/0x10 [ 2624.644205][ T3650] ? __pfx_down_write_killable+0x10/0x10 [ 2624.644242][ T3650] vm_mmap_pgoff+0x29e/0x470 [ 2624.644283][ T3650] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 2624.644320][ T3650] ? find_held_lock+0x2b/0x80 [ 2624.644348][ T3650] ? __x64_sys_futex+0x1e0/0x4c0 [ 2624.644401][ T3650] ? __x64_sys_futex+0x1e9/0x4c0 [ 2624.644436][ T3650] ksys_mmap_pgoff+0x7d/0x5c0 [ 2624.644471][ T3650] ? xfd_validate_state+0x61/0x180 [ 2624.644530][ T3650] __x64_sys_mmap+0x125/0x190 [ 2624.644598][ T3650] do_syscall_64+0xcd/0x490 [ 2624.644636][ T3650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2624.644664][ T3650] RIP: 0033:0x7f4d0958ebe9 [ 2624.644684][ T3650] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2624.644710][ T3650] RSP: 002b:00007f4d0a329038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 2624.644735][ T3650] RAX: ffffffffffffffda RBX: 00007f4d097b6090 RCX: 00007f4d0958ebe9 [ 2624.644752][ T3650] RDX: 000000000000027b RSI: 000000000004000b RDI: 0000000000000000 [ 2624.644768][ T3650] RBP: 00007f4d09611e19 R08: 0000000000000007 R09: 0000000000028000 [ 2624.644784][ T3650] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 2624.644799][ T3650] R13: 00007f4d097b6128 R14: 00007f4d097b6090 R15: 00007ffc545f1938 [ 2624.644831][ T3650] [ 2626.847761][ T3669] can: request_module (can-proto-3) failed. [ 2629.838497][ T5185] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2629.889524][ T5185] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2629.908533][ T5185] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2629.917776][ T5185] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2629.927495][ T5185] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2630.100254][ T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2630.583833][ T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2630.613480][ T3726] FAULT_INJECTION: forcing a failure. [ 2630.613480][ T3726] name failslab, interval 1, probability 0, space 0, times 0 [ 2630.911209][ T3726] CPU: 0 UID: 0 PID: 3726 Comm: syz.3.4850 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) [ 2630.911254][ T3726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2630.911276][ T3726] Call Trace: [ 2630.911286][ T3726] [ 2630.911296][ T3726] dump_stack_lvl+0x16c/0x1f0 [ 2630.911340][ T3726] should_fail_ex+0x512/0x640 [ 2630.911373][ T3726] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 2630.911409][ T3726] should_failslab+0xc2/0x120 [ 2630.911501][ T3726] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 2630.911537][ T3726] ? sk_prot_alloc+0x60/0x2a0 [ 2630.911578][ T3726] sk_prot_alloc+0x60/0x2a0 [ 2630.911613][ T3726] sk_alloc+0x36/0xc20 [ 2630.911640][ T3726] tipc_sk_create+0xcf/0x21a0 [ 2630.911683][ T3726] ? find_held_lock+0x2b/0x80 [ 2630.911713][ T3726] ? __sock_create+0x2f2/0x8d0 [ 2630.911753][ T3726] __sock_create+0x338/0x8d0 [ 2630.911794][ T3726] __sys_socket+0x14d/0x260 [ 2630.911830][ T3726] ? __pfx___sys_socket+0x10/0x10 [ 2630.911866][ T3726] ? xfd_validate_state+0x61/0x180 [ 2630.911939][ T3726] __x64_sys_socket+0x72/0xb0 [ 2630.911974][ T3726] ? lockdep_hardirqs_on+0x7c/0x110 [ 2630.912002][ T3726] do_syscall_64+0xcd/0x490 [ 2630.912035][ T3726] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2630.912061][ T3726] RIP: 0033:0x7fe15078ebe9 [ 2630.912081][ T3726] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2630.912105][ T3726] RSP: 002b:00007fe15157f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 2630.912130][ T3726] RAX: ffffffffffffffda RBX: 00007fe1509b6180 RCX: 00007fe15078ebe9 [ 2630.912146][ T3726] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 000000000000001e [ 2630.912161][ T3726] RBP: 00007fe150811e19 R08: 0000000000000000 R09: 0000000000000000 [ 2630.912176][ T3726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2630.912192][ T3726] R13: 00007fe1509b6218 R14: 00007fe1509b6180 R15: 00007ffc9bfa3608 [ 2630.912222][ T3726] [ 2631.892705][ T3737] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 2632.016967][ T5185] Bluetooth: hci3: command tx timeout [ 2632.086925][ T3741] FAULT_INJECTION: forcing a failure. [ 2632.086925][ T3741] name failslab, interval 1, probability 0, space 0, times 0 [ 2632.270882][ T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2632.309359][ T3741] CPU: 0 UID: 0 PID: 3741 Comm: syz.2.4853 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) [ 2632.309399][ T3741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2632.309416][ T3741] Call Trace: [ 2632.309424][ T3741] [ 2632.309434][ T3741] dump_stack_lvl+0x16c/0x1f0 [ 2632.309471][ T3741] should_fail_ex+0x512/0x640 [ 2632.309505][ T3741] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 2632.309543][ T3741] should_failslab+0xc2/0x120 [ 2632.309578][ T3741] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 2632.309609][ T3741] ? lockdep_init_map_type+0x5c/0x280 [ 2632.309645][ T3741] ? __d_alloc+0x32/0xae0 [ 2632.309680][ T3741] __d_alloc+0x32/0xae0 [ 2632.309714][ T3741] d_alloc_pseudo+0x1c/0xc0 [ 2632.309752][ T3741] alloc_file_pseudo+0xcf/0x230 [ 2632.309791][ T3741] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 2632.309828][ T3741] ? alloc_fd+0x471/0x7d0 [ 2632.309859][ T3741] sock_alloc_file+0x50/0x210 [ 2632.309899][ T3741] __sys_socket+0x1c0/0x260 [ 2632.309999][ T3741] ? __pfx___sys_socket+0x10/0x10 [ 2632.310035][ T3741] ? xfd_validate_state+0x61/0x180 [ 2632.310085][ T3741] __x64_sys_socket+0x72/0xb0 [ 2632.310119][ T3741] ? lockdep_hardirqs_on+0x7c/0x110 [ 2632.310148][ T3741] do_syscall_64+0xcd/0x490 [ 2632.310185][ T3741] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2632.310212][ T3741] RIP: 0033:0x7fdcce18ebe9 [ 2632.310233][ T3741] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2632.310257][ T3741] RSP: 002b:00007fdccc3d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 2632.310282][ T3741] RAX: ffffffffffffffda RBX: 00007fdcce3b6180 RCX: 00007fdcce18ebe9 [ 2632.310299][ T3741] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 000000000000001e [ 2632.310339][ T3741] RBP: 00007fdcce211e19 R08: 0000000000000000 R09: 0000000000000000 [ 2632.310355][ T3741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2632.310370][ T3741] R13: 00007fdcce3b6218 R14: 00007fdcce3b6180 R15: 00007fff62540088 [ 2632.310402][ T3741] [ 2633.451760][ T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2634.061011][ T5185] Bluetooth: hci3: command tx timeout [ 2634.650025][ T3714] chnl_net:caif_netlink_parms(): no params data found [ 2634.765499][ T35] bridge_slave_0: left allmulticast mode [ 2634.785848][ T35] bridge_slave_0: left promiscuous mode [ 2634.835716][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 2636.143433][ T5185] Bluetooth: hci3: command tx timeout [ 2636.230237][ T3783] FAULT_INJECTION: forcing a failure. [ 2636.230237][ T3783] name failslab, interval 1, probability 0, space 0, times 0 [ 2636.270017][ T3783] CPU: 0 UID: 0 PID: 3783 Comm: syz.0.4858 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) [ 2636.270056][ T3783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2636.270088][ T3783] Call Trace: [ 2636.270098][ T3783] [ 2636.270108][ T3783] dump_stack_lvl+0x16c/0x1f0 [ 2636.270173][ T3783] should_fail_ex+0x512/0x640 [ 2636.270242][ T3783] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 2636.270275][ T3783] should_failslab+0xc2/0x120 [ 2636.270307][ T3783] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 2636.270335][ T3783] ? lockdep_init_map_type+0x5c/0x280 [ 2636.270395][ T3783] ? __d_alloc+0x32/0xae0 [ 2636.270427][ T3783] __d_alloc+0x32/0xae0 [ 2636.270458][ T3783] d_alloc_pseudo+0x1c/0xc0 [ 2636.270493][ T3783] alloc_file_pseudo+0xcf/0x230 [ 2636.270538][ T3783] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 2636.270573][ T3783] ? alloc_fd+0x471/0x7d0 [ 2636.270601][ T3783] sock_alloc_file+0x50/0x210 [ 2636.270632][ T3783] __sys_socket+0x1c0/0x260 [ 2636.270665][ T3783] ? __pfx___sys_socket+0x10/0x10 [ 2636.270698][ T3783] ? xfd_validate_state+0x61/0x180 [ 2636.270764][ T3783] __x64_sys_socket+0x72/0xb0 [ 2636.270796][ T3783] ? lockdep_hardirqs_on+0x7c/0x110 [ 2636.270821][ T3783] do_syscall_64+0xcd/0x490 [ 2636.270850][ T3783] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2636.270903][ T3783] RIP: 0033:0x7f014958ebe9 [ 2636.270937][ T3783] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2636.270975][ T3783] RSP: 002b:00007f01477b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 2636.271031][ T3783] RAX: ffffffffffffffda RBX: 00007f01497b6180 RCX: 00007f014958ebe9 [ 2636.271046][ T3783] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 000000000000001e [ 2636.271060][ T3783] RBP: 00007f0149611e19 R08: 0000000000000000 R09: 0000000000000000 [ 2636.271074][ T3783] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2636.271088][ T3783] R13: 00007f01497b6218 R14: 00007f01497b6180 R15: 00007fff61251cb8 [ 2636.271116][ T3783] [ 2637.583068][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2637.637726][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2637.661183][ T35] bond0 (unregistering): Released all slaves [ 2637.799369][ T3791] FAULT_INJECTION: forcing a failure. [ 2637.799369][ T3791] name failslab, interval 1, probability 0, space 0, times 0 [ 2637.950600][ T3791] CPU: 0 UID: 0 PID: 3791 Comm: syz.2.4860 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) [ 2637.950640][ T3791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2637.950656][ T3791] Call Trace: [ 2637.950666][ T3791] [ 2637.950741][ T3791] dump_stack_lvl+0x16c/0x1f0 [ 2637.950779][ T3791] should_fail_ex+0x512/0x640 [ 2637.950813][ T3791] ? __kmalloc_noprof+0xbf/0x510 [ 2637.950846][ T3791] ? lsm_blob_alloc+0x68/0x90 [ 2637.950928][ T3791] should_failslab+0xc2/0x120 [ 2637.950963][ T3791] __kmalloc_noprof+0xd2/0x510 [ 2637.950999][ T3791] lsm_blob_alloc+0x68/0x90 [ 2637.951034][ T3791] security_sk_alloc+0x30/0x270 [ 2637.951074][ T3791] sk_prot_alloc+0xfb/0x2a0 [ 2637.951113][ T3791] sk_alloc+0x36/0xc20 [ 2637.951139][ T3791] tipc_sk_create+0xcf/0x21a0 [ 2637.951184][ T3791] ? find_held_lock+0x2b/0x80 [ 2637.951210][ T3791] ? __sock_create+0x2f2/0x8d0 [ 2637.951248][ T3791] __sock_create+0x338/0x8d0 [ 2637.951288][ T3791] __sys_socket+0x14d/0x260 [ 2637.951325][ T3791] ? __pfx___sys_socket+0x10/0x10 [ 2637.951368][ T3791] ? xfd_validate_state+0x61/0x180 [ 2637.951416][ T3791] __x64_sys_socket+0x72/0xb0 [ 2637.951452][ T3791] ? lockdep_hardirqs_on+0x7c/0x110 [ 2637.951478][ T3791] do_syscall_64+0xcd/0x490 [ 2637.951508][ T3791] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2637.951535][ T3791] RIP: 0033:0x7fdcce18ebe9 [ 2637.951555][ T3791] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2637.951578][ T3791] RSP: 002b:00007fdccc3d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 2637.951602][ T3791] RAX: ffffffffffffffda RBX: 00007fdcce3b6180 RCX: 00007fdcce18ebe9 [ 2637.951618][ T3791] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 000000000000001e [ 2637.951633][ T3791] RBP: 00007fdcce211e19 R08: 0000000000000000 R09: 0000000000000000 [ 2637.951648][ T3791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2637.951663][ T3791] R13: 00007fdcce3b6218 R14: 00007fdcce3b6180 R15: 00007fff62540088 [ 2637.951722][ T3791] [ 2638.481354][ T5185] Bluetooth: hci3: command tx timeout [ 2639.245743][ T3805] FAULT_INJECTION: forcing a failure. [ 2639.245743][ T3805] name failslab, interval 1, probability 0, space 0, times 0 [ 2639.324998][ T3805] CPU: 0 UID: 0 PID: 3805 Comm: syz.0.4862 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) [ 2639.325065][ T3805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2639.325096][ T3805] Call Trace: [ 2639.325106][ T3805] [ 2639.325129][ T3805] dump_stack_lvl+0x16c/0x1f0 [ 2639.325196][ T3805] should_fail_ex+0x512/0x640 [ 2639.325259][ T3805] ? __kmalloc_noprof+0xbf/0x510 [ 2639.325300][ T3805] ? lsm_blob_alloc+0x68/0x90 [ 2639.325369][ T3805] should_failslab+0xc2/0x120 [ 2639.325404][ T3805] __kmalloc_noprof+0xd2/0x510 [ 2639.325439][ T3805] lsm_blob_alloc+0x68/0x90 [ 2639.325474][ T3805] security_sk_alloc+0x30/0x270 [ 2639.325512][ T3805] sk_prot_alloc+0xfb/0x2a0 [ 2639.325555][ T3805] sk_alloc+0x36/0xc20 [ 2639.325581][ T3805] tipc_sk_create+0xcf/0x21a0 [ 2639.325626][ T3805] ? find_held_lock+0x2b/0x80 [ 2639.325680][ T3805] ? __sock_create+0x2f2/0x8d0 [ 2639.325721][ T3805] __sock_create+0x338/0x8d0 [ 2639.325763][ T3805] __sys_socket+0x14d/0x260 [ 2639.325800][ T3805] ? __pfx___sys_socket+0x10/0x10 [ 2639.325837][ T3805] ? xfd_validate_state+0x61/0x180 [ 2639.325901][ T3805] __x64_sys_socket+0x72/0xb0 [ 2639.325936][ T3805] ? lockdep_hardirqs_on+0x7c/0x110 [ 2639.325964][ T3805] do_syscall_64+0xcd/0x490 [ 2639.325995][ T3805] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2639.326021][ T3805] RIP: 0033:0x7f014958ebe9 [ 2639.326058][ T3805] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2639.326100][ T3805] RSP: 002b:00007f01477b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 2639.326155][ T3805] RAX: ffffffffffffffda RBX: 00007f01497b6180 RCX: 00007f014958ebe9 [ 2639.326172][ T3805] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 000000000000001e [ 2639.326188][ T3805] RBP: 00007f0149611e19 R08: 0000000000000000 R09: 0000000000000000 [ 2639.326204][ T3805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2639.326219][ T3805] R13: 00007f01497b6218 R14: 00007f01497b6180 R15: 00007fff61251cb8 [ 2639.326249][ T3805] [ 2639.988514][ T3714] bridge0: port 1(bridge_slave_0) entered blocking state [ 2640.009708][ T3714] bridge0: port 1(bridge_slave_0) entered disabled state [ 2640.056387][ T3714] bridge_slave_0: entered allmulticast mode [ 2640.094302][ T3714] bridge_slave_0: entered promiscuous mode [ 2640.201596][ T35] hsr_slave_0: left promiscuous mode [ 2640.232843][ T35] hsr_slave_1: left promiscuous mode [ 2640.305108][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2640.312585][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2640.411802][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2640.458977][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2640.570153][ T35] veth1_macvtap: left promiscuous mode [ 2640.613624][ T35] veth0_macvtap: left promiscuous mode [ 2640.654288][ T35] veth1_vlan: left promiscuous mode [ 2640.659775][ T35] veth0_vlan: left promiscuous mode [ 2640.885864][ T3819] FAULT_INJECTION: forcing a failure. [ 2640.885864][ T3819] name failslab, interval 1, probability 0, space 0, times 0 [ 2641.032468][ T3819] CPU: 0 UID: 0 PID: 3819 Comm: syz.0.4863 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) [ 2641.032526][ T3819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2641.032543][ T3819] Call Trace: [ 2641.032553][ T3819] [ 2641.032563][ T3819] dump_stack_lvl+0x16c/0x1f0 [ 2641.032601][ T3819] should_fail_ex+0x512/0x640 [ 2641.032636][ T3819] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 2641.032674][ T3819] should_failslab+0xc2/0x120 [ 2641.032707][ T3819] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 2641.032738][ T3819] ? sk_prot_alloc+0x60/0x2a0 [ 2641.032775][ T3819] sk_prot_alloc+0x60/0x2a0 [ 2641.032810][ T3819] sk_alloc+0x36/0xc20 [ 2641.032836][ T3819] tipc_sk_create+0xcf/0x21a0 [ 2641.032880][ T3819] ? find_held_lock+0x2b/0x80 [ 2641.032909][ T3819] ? __sock_create+0x2f2/0x8d0 [ 2641.032947][ T3819] __sock_create+0x338/0x8d0 [ 2641.032987][ T3819] __sys_socket+0x14d/0x260 [ 2641.033023][ T3819] ? __pfx___sys_socket+0x10/0x10 [ 2641.033060][ T3819] ? xfd_validate_state+0x61/0x180 [ 2641.033113][ T3819] __x64_sys_socket+0x72/0xb0 [ 2641.033148][ T3819] ? lockdep_hardirqs_on+0x7c/0x110 [ 2641.033176][ T3819] do_syscall_64+0xcd/0x490 [ 2641.033207][ T3819] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2641.033234][ T3819] RIP: 0033:0x7f014958ebe9 [ 2641.033254][ T3819] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2641.033277][ T3819] RSP: 002b:00007f01477d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 2641.033300][ T3819] RAX: ffffffffffffffda RBX: 00007f01497b6090 RCX: 00007f014958ebe9 [ 2641.033316][ T3819] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 000000000000001e [ 2641.033330][ T3819] RBP: 00007f0149611e19 R08: 0000000000000000 R09: 0000000000000000 [ 2641.033345][ T3819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2641.033360][ T3819] R13: 00007f01497b6128 R14: 00007f01497b6090 R15: 00007fff61251cb8 [ 2641.033390][ T3819] [ 2641.934674][ T35] team0 (unregistering): Port device team_slave_1 removed [ 2642.040632][ T35] team0 (unregistering): Port device team_slave_0 removed [ 2642.629849][ T3833] ================================================================== [ 2642.637982][ T3833] BUG: KASAN: slab-use-after-free in force_devcd_write+0x312/0x340 [ 2642.645908][ T3833] Read of size 8 at addr ffff88807cd15000 by task syz.0.4864/3833 [ 2642.653729][ T3833] [ 2642.656064][ T3833] CPU: 0 UID: 0 PID: 3833 Comm: syz.0.4864 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) [ 2642.656099][ T3833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2642.656115][ T3833] Call Trace: [ 2642.656126][ T3833] [ 2642.656136][ T3833] dump_stack_lvl+0x116/0x1f0 [ 2642.656175][ T3833] print_report+0xcd/0x630 [ 2642.656211][ T3833] ? __virt_addr_valid+0x81/0x610 [ 2642.656284][ T3833] ? __phys_addr+0xe8/0x180 [ 2642.656315][ T3833] ? force_devcd_write+0x312/0x340 [ 2642.656344][ T3833] kasan_report+0xe0/0x110 [ 2642.656376][ T3833] ? force_devcd_write+0x312/0x340 [ 2642.656407][ T3833] force_devcd_write+0x312/0x340 [ 2642.656435][ T3833] ? __pfx_force_devcd_write+0x10/0x10 [ 2642.656464][ T3833] ? __debugfs_file_get+0x1fe/0x840 [ 2642.656526][ T3833] ? __pfx___debugfs_file_get+0x10/0x10 [ 2642.656563][ T3833] full_proxy_write+0x12e/0x1a0 [ 2642.656598][ T3833] ? __pfx_full_proxy_write+0x10/0x10 [ 2642.656631][ T3833] vfs_write+0x29d/0x1150 [ 2642.656662][ T3833] ? __pfx___mutex_lock+0x10/0x10 [ 2642.656690][ T3833] ? __pfx_vfs_write+0x10/0x10 [ 2642.656722][ T3833] ? __fget_files+0x20e/0x3c0 [ 2642.656753][ T3833] ksys_write+0x12a/0x250 [ 2642.656781][ T3833] ? __pfx_ksys_write+0x10/0x10 [ 2642.656814][ T3833] do_syscall_64+0xcd/0x490 [ 2642.656843][ T3833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2642.656883][ T3833] RIP: 0033:0x7f014958ebe9 [ 2642.656902][ T3833] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2642.656926][ T3833] RSP: 002b:00007f01477b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2642.656949][ T3833] RAX: ffffffffffffffda RBX: 00007f01497b6180 RCX: 00007f014958ebe9 [ 2642.656966][ T3833] RDX: 000000000000000e RSI: 0000000000000000 RDI: 0000000000000007 [ 2642.656981][ T3833] RBP: 00007f0149611e19 R08: 0000000000000000 R09: 0000000000000000 [ 2642.656996][ T3833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2642.657011][ T3833] R13: 00007f01497b6218 R14: 00007f01497b6180 R15: 00007fff61251cb8 [ 2642.657035][ T3833] [ 2642.657044][ T3833] [ 2642.865721][ T3833] Allocated by task 22242: [ 2642.870143][ T3833] kasan_save_stack+0x33/0x60 [ 2642.874847][ T3833] kasan_save_track+0x14/0x30 [ 2642.879547][ T3833] __kasan_kmalloc+0xaa/0xb0 [ 2642.884155][ T3833] vhci_open+0x4c/0x430 [ 2642.888323][ T3833] misc_open+0x35a/0x420 [ 2642.892677][ T3833] chrdev_open+0x231/0x6a0 [ 2642.897111][ T3833] do_dentry_open+0x97f/0x1530 [ 2642.901893][ T3833] vfs_open+0x82/0x3f0 [ 2642.905985][ T3833] path_openat+0x1de4/0x2cb0 [ 2642.910584][ T3833] do_filp_open+0x20b/0x470 [ 2642.915102][ T3833] do_sys_openat2+0x11b/0x1d0 [ 2642.919804][ T3833] __x64_sys_openat+0x174/0x210 [ 2642.924678][ T3833] do_syscall_64+0xcd/0x490 [ 2642.929278][ T3833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2642.935179][ T3833] [ 2642.937682][ T3833] Freed by task 22242: [ 2642.941820][ T3833] kasan_save_stack+0x33/0x60 [ 2642.946517][ T3833] kasan_save_track+0x14/0x30 [ 2642.951221][ T3833] kasan_save_free_info+0x3b/0x60 [ 2642.956245][ T3833] __kasan_slab_free+0x60/0x70 [ 2642.961017][ T3833] kfree+0x2b4/0x4d0 [ 2642.964926][ T3833] vhci_release+0xbb/0xf0 [ 2642.969264][ T3833] __fput+0x3ff/0xb70 [ 2642.973293][ T3833] task_work_run+0x150/0x240 [ 2642.977904][ T3833] do_exit+0x86f/0x2bf0 [ 2642.982079][ T3833] do_group_exit+0xd3/0x2a0 [ 2642.986601][ T3833] get_signal+0x2673/0x26d0 [ 2642.991186][ T3833] arch_do_signal_or_restart+0x8f/0x790 [ 2642.996816][ T3833] exit_to_user_mode_loop+0x84/0x110 [ 2643.002174][ T3833] do_syscall_64+0x3f6/0x490 [ 2643.006782][ T3833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2643.012683][ T3833] [ 2643.015020][ T3833] The buggy address belongs to the object at ffff88807cd15000 [ 2643.015020][ T3833] which belongs to the cache kmalloc-1k of size 1024 [ 2643.029088][ T3833] The buggy address is located 0 bytes inside of [ 2643.029088][ T3833] freed 1024-byte region [ffff88807cd15000, ffff88807cd15400) [ 2643.042811][ T3833] [ 2643.045141][ T3833] The buggy address belongs to the physical page: [ 2643.051549][ T3833] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7cd10 [ 2643.060372][ T3833] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 2643.068880][ T3833] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 2643.076886][ T3833] page_type: f5(slab) [ 2643.080889][ T3833] raw: 00fff00000000040 ffff88801b841dc0 0000000000000000 dead000000000001 [ 2643.089472][ T3833] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 2643.098059][ T3833] head: 00fff00000000040 ffff88801b841dc0 0000000000000000 dead000000000001 [ 2643.106749][ T3833] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 2643.115443][ T3833] head: 00fff00000000003 ffffea0001f34401 00000000ffffffff 00000000ffffffff [ 2643.124137][ T3833] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 2643.132926][ T3833] page dumped because: kasan: bad access detected [ 2643.139374][ T3833] page_owner tracks the page as allocated [ 2643.145088][ T3833] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5970, tgid 5970 (syz.3.4), ts 119100576662, free_ts 118740447398 [ 2643.166203][ T3833] post_alloc_hook+0x1c0/0x230 [ 2643.170991][ T3833] get_page_from_freelist+0x132b/0x38e0 [ 2643.176555][ T3833] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 2643.182463][ T3833] alloc_pages_mpol+0x1fb/0x550 [ 2643.187333][ T3833] new_slab+0x247/0x330 [ 2643.191510][ T3833] ___slab_alloc+0xcf2/0x1740 [ 2643.196200][ T3833] __slab_alloc.constprop.0+0x56/0xb0 [ 2643.201577][ T3833] __kmalloc_cache_noprof+0xfb/0x3e0 [ 2643.206868][ T3833] snd_pcm_hw_param_near.constprop.0+0xbc/0x8e0 [ 2643.213222][ T3833] snd_pcm_oss_change_params_locked+0x1398/0x3a30 [ 2643.219763][ T3833] snd_pcm_oss_make_ready+0xe6/0x1b0 [ 2643.225065][ T3833] snd_pcm_oss_sync+0x1de/0x840 [ 2643.229934][ T3833] snd_pcm_oss_release+0x28b/0x310 [ 2643.235060][ T3833] __fput+0x3ff/0xb70 [ 2643.239081][ T3833] task_work_run+0x150/0x240 [ 2643.243713][ T3833] exit_to_user_mode_loop+0xeb/0x110 [ 2643.249037][ T3833] page last free pid 5981 tgid 5970 stack trace: [ 2643.255375][ T3833] __free_frozen_pages+0x7d5/0x10f0 [ 2643.260600][ T3833] __put_partials+0x165/0x1c0 [ 2643.265288][ T3833] qlist_free_all+0x4d/0x120 [ 2643.269888][ T3833] kasan_quarantine_reduce+0x195/0x1e0 [ 2643.275358][ T3833] __kasan_slab_alloc+0x69/0x90 [ 2643.280220][ T3833] kmem_cache_alloc_node_noprof+0x1d5/0x3b0 [ 2643.286132][ T3833] kmalloc_reserve+0x18b/0x2c0 [ 2643.290931][ T3833] __alloc_skb+0x166/0x380 [ 2643.295364][ T3833] alloc_skb_with_frags+0xe0/0x860 [ 2643.300525][ T3833] sock_alloc_send_pskb+0x7fb/0x990 [ 2643.305737][ T3833] __ip_append_data+0x2149/0x41c0 [ 2643.310836][ T3833] ip_make_skb+0x27f/0x300 [ 2643.315273][ T3833] udp_sendmsg+0x17d7/0x2870 [ 2643.319913][ T3833] inet_sendmsg+0x105/0x140 [ 2643.324466][ T3833] ____sys_sendmsg+0x973/0xc70 [ 2643.329254][ T3833] ___sys_sendmsg+0x134/0x1d0 [ 2643.333948][ T3833] [ 2643.336317][ T3833] Memory state around the buggy address: [ 2643.341948][ T3833] ffff88807cd14f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 2643.350028][ T3833] ffff88807cd14f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 2643.358093][ T3833] >ffff88807cd15000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2643.366153][ T3833] ^ [ 2643.370216][ T3833] ffff88807cd15080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2643.378333][ T3833] ffff88807cd15100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2643.386389][ T3833] ================================================================== SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 2644.715856][ T3714] bridge0: port 2(bridge_slave_1) entered blocking state [ 2644.724337][ T3714] bridge0: port 2(bridge_slave_1) entered disabled state [ 2644.731618][ T3714] bridge_slave_1: entered allmulticast mode [ 2644.806061][ T3714] bridge_slave_1: entered promiscuous mode [ 2646.035022][ T3833] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 2646.042285][ T3833] CPU: 0 UID: 0 PID: 3833 Comm: syz.0.4864 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) [ 2646.053924][ T3833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2646.063995][ T3833] Call Trace: [ 2646.067294][ T3833] [ 2646.070232][ T3833] dump_stack_lvl+0x3d/0x1f0 [ 2646.074871][ T3833] vpanic+0x6e8/0x7a0 [ 2646.078914][ T3833] ? __pfx_vpanic+0x10/0x10 [ 2646.083440][ T3833] ? __pfx_vprintk_emit+0x10/0x10 [ 2646.088546][ T3833] ? force_devcd_write+0x312/0x340 [ 2646.093679][ T3833] panic+0xca/0xd0 [ 2646.097421][ T3833] ? __pfx_panic+0x10/0x10 [ 2646.101851][ T3833] ? force_devcd_write+0x312/0x340 [ 2646.106975][ T3833] ? preempt_schedule_common+0x44/0xc0 [ 2646.112441][ T3833] ? preempt_schedule_thunk+0x16/0x30 [ 2646.117887][ T3833] check_panic_on_warn+0xab/0xb0 [ 2646.122847][ T3833] end_report+0x107/0x170 [ 2646.127207][ T3833] kasan_report+0xee/0x110 [ 2646.131638][ T3833] ? force_devcd_write+0x312/0x340 [ 2646.136772][ T3833] force_devcd_write+0x312/0x340 [ 2646.141723][ T3833] ? __pfx_force_devcd_write+0x10/0x10 [ 2646.147194][ T3833] ? __debugfs_file_get+0x1fe/0x840 [ 2646.152410][ T3833] ? __pfx___debugfs_file_get+0x10/0x10 [ 2646.157978][ T3833] full_proxy_write+0x12e/0x1a0 [ 2646.162850][ T3833] ? __pfx_full_proxy_write+0x10/0x10 [ 2646.168235][ T3833] vfs_write+0x29d/0x1150 [ 2646.172596][ T3833] ? __pfx___mutex_lock+0x10/0x10 [ 2646.177634][ T3833] ? __pfx_vfs_write+0x10/0x10 [ 2646.182412][ T3833] ? __fget_files+0x20e/0x3c0 [ 2646.187105][ T3833] ksys_write+0x12a/0x250 [ 2646.191443][ T3833] ? __pfx_ksys_write+0x10/0x10 [ 2646.196324][ T3833] do_syscall_64+0xcd/0x490 [ 2646.200851][ T3833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2646.206766][ T3833] RIP: 0033:0x7f014958ebe9 [ 2646.211248][ T3833] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2646.230913][ T3833] RSP: 002b:00007f01477b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2646.239353][ T3833] RAX: ffffffffffffffda RBX: 00007f01497b6180 RCX: 00007f014958ebe9 [ 2646.247347][ T3833] RDX: 000000000000000e RSI: 0000000000000000 RDI: 0000000000000007 [ 2646.255509][ T3833] RBP: 00007f0149611e19 R08: 0000000000000000 R09: 0000000000000000 [ 2646.263506][ T3833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2646.271596][ T3833] R13: 00007f01497b6218 R14: 00007f01497b6180 R15: 00007fff61251cb8 [ 2646.279590][ T3833] [ 2646.282820][ T3833] Kernel Offset: disabled [ 2646.287189][ T3833] Rebooting in 86400 seconds..