last executing test programs: 3.013004257s ago: executing program 1 (id=1813): close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket(0x23, 0x80805, 0x0) inotify_init1$auto(0x3000000000000) mmap$auto(0x0, 0x2020009, 0x126, 0xf8, 0xffffffffffffffff, 0x8000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) bind$auto(0x3, &(0x7f0000000040)=@ethernet={0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1cc5087217524dd0}}, 0x6a) ioctl$auto(0x3, 0x89e0, 0x38) 2.699797624s ago: executing program 1 (id=1818): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$auto(0x8000000000000001, 0x26, 0x8) fcntl$auto(r0, 0x24, 0x8) fcntl$auto(0x8000000000000001, 0x24, 0x8) 2.352625965s ago: executing program 1 (id=1822): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0xa, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) r1 = ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto(r1, 0xc008ae67, r2) 2.329734041s ago: executing program 0 (id=1823): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) sysfs$auto(0x2, 0x2, 0x9) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xe, 0x2, 0x6, 0x5, 0x8, 0xffffffffffffffff, [], {0xd74c, 0x6, 0x2, 0x29f, 0x100, 0x7f, 0x101, 0x6, 0x2}, {0xff, 0x1, 0x10001, 0x7, 0x1, 0x40, 0x76c5, 0x400008, 0x100000005}}) io_uring_enter$auto(r0, 0x9, 0x820e, 0x9, 0x0, 0x18) 2.118871017s ago: executing program 0 (id=1826): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) setuid$auto(0xe) select$auto(0x7, 0x0, &(0x7f0000000080)={[0x209c, 0xe9e, 0x4, 0x15, 0x1000, 0x47, 0xc, 0xf, 0x0, 0x0, 0xe, 0xd59, 0x101, 0xff, 0x2, 0x3]}, 0x0, 0x0) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x1000) io_uring_register$auto(0x2, 0x1, 0x0, 0x0) 1.982227042s ago: executing program 2 (id=1827): mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) r0 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r0, 0x7a7, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, 0x6) ioctl$auto_IOCTL_VMCI_SET_NOTIFY(r0, 0x7cb, 0x0) ioctl$auto_IOCTL_VMCI_SET_NOTIFY(r0, 0x7cb, 0x0) 1.847242855s ago: executing program 0 (id=1829): close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/netdevsim2/new_port\x00', 0x183841, 0x0) openat$auto_dfs_global_fops_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/ubifs/chk_fs\x00', 0x40aa2, 0x0) r0 = open(&(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0x101840, 0x33903f3ada88772b) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x0) read$auto(r0, 0x0, 0x1) write$auto(0x3, 0x0, 0x5c8) 1.773563337s ago: executing program 2 (id=1830): socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x400, 0x70bd2d, 0x25dfdffb, {}, [@NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24008054}, 0x40) sendmsg$auto_TCP_METRICS_CMD_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='Z'], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x2, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 1.691840453s ago: executing program 0 (id=1831): pipe2$auto(&(0x7f00000000c0), 0x0) writev$auto(0xca, &(0x7f0000000080)={&(0x7f00000000c0), 0x2}, 0x2000000000000003) prctl$auto_PR_SME_SET_VL(0x3f, 0x7, 0x7, 0x3, 0x7) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000000080)='\t', 0x1) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/kvm_intel/parameters/vmentry_l1d_flush\x00', 0x82942, 0x0) sendfile$auto(r1, r1, 0x0, 0x200) 1.542756296s ago: executing program 1 (id=1832): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) select$auto(0x0, &(0x7f0000000040)={[0x9, 0x4, 0x800000c8c1, 0x9, 0x6, 0x0, 0xb, 0x6, 0x5, 0xa, 0x5, 0x200cf, 0x45, 0x10c, 0x5, 0xb98]}, 0x0, 0x0, 0x0) sendmsg$auto_TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB='J\x00\x00\x00', @ANYRES16, @ANYBLOB="010025bd7000fcdbdf25020000002c00018028003c8008001b"], 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x44) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 1.3903915s ago: executing program 2 (id=1833): socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x9, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket(0xa, 0x3, 0x6) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) socket(0x2, 0x5, 0x3) setsockopt$auto(0x3, 0x10000000084, 0x17, 0x0, 0x3ff) 1.286148164s ago: executing program 3 (id=1834): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/usbcore/parameters/quirks\x00', 0xc0202, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000800)='/sys/devices/virtual/net/rose15/address\x00', 0x0, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/vlan/config\x00', 0x8000, 0x0) pread64$auto(r1, 0x0, 0xf429, 0xb) read$auto(r0, 0x0, 0x9) write$auto(0x3, 0x0, 0xfdef) 1.185271631s ago: executing program 0 (id=1835): mmap$auto(0x0, 0xdb33, 0xe2, 0xeb1, 0x405, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_loginuid_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/loginuid\x00', 0x109000, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) close_range$auto(0x2, 0x8, 0x0) 1.085118217s ago: executing program 3 (id=1836): close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/net/rpc/nfs4.nametoid/channel\x00', 0x8f3b7a51b80ebd01, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/mnt\x00') openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0xe0180, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x4, 0x7) ioctl$auto(0x1, 0x890b, 0x8) 875.337564ms ago: executing program 3 (id=1837): sendmsg$auto_NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004050}, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/igmp\x00', 0x100, 0x0) pread64$auto(r0, 0x0, 0x40000000f42c, 0x585) r1 = openat$auto_nsim_nexthop_bucket_activity_fops_fib(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/fib/nexthop_bucket_activity\x00', 0x1, 0x0) write$auto_tomoyo_operations_securityfs_if(0xffffffffffffffff, &(0x7f0000000480), 0x0) write$auto(r1, 0x0, 0x9) 819.379987ms ago: executing program 2 (id=1838): close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = socket(0x1e, 0x1, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x200, 0x1) r1 = open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) fanotify_mark$auto(0x0, 0x1, 0xa, r1, 0x0) fanotify_mark$auto(r0, 0x80, 0x9, 0xffffffffffffffff, 0x0) 697.869294ms ago: executing program 0 (id=1839): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x20006, 0x4000000000df, 0xeb1, 0x4, 0x8000) connect$auto(0x4, 0x0, 0x10) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) read$auto(0x3, 0x0, 0x1f40) read$auto(0x4, 0x0, 0xfdef) 643.419555ms ago: executing program 3 (id=1840): close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1d, 0x2, 0x6) r0 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r1, 0xfd}, 0x6a) bind$auto(0x3, &(0x7f00000001c0)=@can={0x1d, r2}, 0x6b) 527.32425ms ago: executing program 1 (id=1841): prctl$auto(0x23, 0xc, 0x2008, 0x9, 0x0) mmap$auto(0x0, 0xe3a, 0xdb, 0x9b72, 0x5, 0x8000) socket(0x10, 0x2, 0x0) mq_timedsend$auto(0xffffffffffffffff, &(0x7f0000000040)='@*!:}\xc1-.!\\#[./\',-\x00', 0x80, 0x9, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x4000000) 488.043168ms ago: executing program 3 (id=1842): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sysfs$auto(0x2, 0x27, 0x6) r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vbi2\x00', 0x0, 0x0) ioctl$auto(r0, 0xc0445624, r0) 382.326111ms ago: executing program 2 (id=1843): mount$auto(0x0, 0x0, &(0x7f0000000100)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x7, 0x0) socket(0x10, 0x2, 0x4) mmap$auto(0x0, 0x2000d, 0x4000000200df, 0xeb1, 0x404, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) bpf$auto(0x3, &(0x7f00000001c0)=@task_fd_query={0x0, 0xffffffffffffffff, 0x8, 0x30017, 0x8020000000a, 0x2, 0x5f, 0x20000000000803, 0xffffffffffffffff}, 0x6f0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 355.150573ms ago: executing program 1 (id=1844): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x34722fd4}, 0x5, 0xffffffffffffffff, 0x4, 0x2e) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/veth1_vlan/disable_ipv6\x00', 0x82002, 0x0) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/virt_wifi0/ra_defrtr_metric\x00', 0x0, 0x0) sendfile$auto(r1, r2, 0x0, 0x1) 66.434315ms ago: executing program 3 (id=1845): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) open(0x0, 0x22240, 0x55) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$auto(0x3, 0x80026f47, r0) 0s ago: executing program 2 (id=1846): statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0x734f, 0x36, 0x67f, 0x1ffde, 0x7, 0x3, 0x20000002, 0xd, 0x3, 0x1, 0x2091, 0xb4, 0x9, 0x6, 0x6, 0x80, 0x4, 0x1cd7, 0x1000, 0x2000, 0x203, 0x0, 0x84}, 0x1fe, 0xd) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x13, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8040) keyctl$auto(0x1d, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x8) r0 = socket(0x10, 0x2, 0x0) getcwd$auto(&(0x7f0000000040)='HSR\x00', 0x5) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f0000000140), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) kernel console output (not intermixed with test programs): 493][ T8468] CPU: 1 UID: 0 PID: 8468 Comm: syz.0.932 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) [ 204.309518][ T8468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 204.309527][ T8468] Call Trace: [ 204.309532][ T8468] [ 204.309538][ T8468] dump_stack_lvl+0x16c/0x1f0 [ 204.309559][ T8468] should_fail_ex+0x512/0x640 [ 204.309577][ T8468] ? __kmalloc_noprof+0xbf/0x510 [ 204.309596][ T8468] ? __netlink_kernel_create+0x17f/0x750 [ 204.309611][ T8468] should_failslab+0xc2/0x120 [ 204.309630][ T8468] __kmalloc_noprof+0xd2/0x510 [ 204.309648][ T8468] ? __netlink_create+0x208/0x2c0 [ 204.309670][ T8468] __netlink_kernel_create+0x17f/0x750 [ 204.309687][ T8468] ? __pfx___netlink_kernel_create+0x10/0x10 [ 204.309702][ T8468] ? find_held_lock+0x2b/0x80 [ 204.309717][ T8468] ? audit_net_init+0x190/0x440 [ 204.309742][ T8468] audit_net_init+0x1ae/0x440 [ 204.309759][ T8468] ? __pfx_audit_net_init+0x10/0x10 [ 204.309776][ T8468] ? __pfx_audit_receive+0x10/0x10 [ 204.309794][ T8468] ? __pfx_audit_multicast_bind+0x10/0x10 [ 204.309812][ T8468] ? __pfx_audit_multicast_unbind+0x10/0x10 [ 204.309831][ T8468] ? __kmalloc_noprof+0x242/0x510 [ 204.309851][ T8468] ? __pfx_audit_net_init+0x10/0x10 [ 204.309867][ T8468] ops_init+0x1df/0x5f0 [ 204.309886][ T8468] setup_net+0x10f/0x380 [ 204.309900][ T8468] ? lockdep_init_map_type+0x5c/0x280 [ 204.309919][ T8468] ? __pfx_setup_net+0x10/0x10 [ 204.309936][ T8468] ? debug_mutex_init+0x37/0x70 [ 204.309951][ T8468] copy_net_ns+0x2a6/0x5f0 [ 204.309971][ T8468] create_new_namespaces+0x3ea/0xa90 [ 204.309991][ T8468] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 204.310009][ T8468] ksys_unshare+0x45b/0xa40 [ 204.310028][ T8468] ? __pfx_ksys_unshare+0x10/0x10 [ 204.310047][ T8468] ? xfd_validate_state+0x61/0x180 [ 204.310073][ T8468] __x64_sys_unshare+0x31/0x40 [ 204.310091][ T8468] do_syscall_64+0xcd/0x490 [ 204.310108][ T8468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.310123][ T8468] RIP: 0033:0x7f4bf098ebe9 [ 204.310135][ T8468] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 204.310148][ T8468] RSP: 002b:00007f4bf18da038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 204.310161][ T8468] RAX: ffffffffffffffda RBX: 00007f4bf0bb5fa0 RCX: 00007f4bf098ebe9 [ 204.310170][ T8468] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 204.310178][ T8468] RBP: 00007f4bf0a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 204.310187][ T8468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 204.310195][ T8468] R13: 00007f4bf0bb6038 R14: 00007f4bf0bb5fa0 R15: 00007fff9d2e1b78 [ 204.310214][ T8468] [ 204.310278][ T8468] audit: cannot initialize netlink socket in namespace [ 206.053182][ T8504] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 206.654867][ T8519] netlink: 4 bytes leftover after parsing attributes in process `syz.2.954'. [ 206.779929][ T8523] netlink: 342 bytes leftover after parsing attributes in process `syz.0.956'. [ 209.797349][ T8588] program syz.3.981 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 211.915710][ T8630] netlink: 342 bytes leftover after parsing attributes in process `syz.2.999'. [ 212.375086][ T8643] FAULT_INJECTION: forcing a failure. [ 212.375086][ T8643] name failslab, interval 1, probability 0, space 0, times 0 [ 212.452097][ T8643] CPU: 1 UID: 0 PID: 8643 Comm: syz.3.1004 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) [ 212.452121][ T8643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 212.452131][ T8643] Call Trace: [ 212.452136][ T8643] [ 212.452142][ T8643] dump_stack_lvl+0x16c/0x1f0 [ 212.452163][ T8643] should_fail_ex+0x512/0x640 [ 212.452182][ T8643] ? __kmalloc_noprof+0xbf/0x510 [ 212.452201][ T8643] ? lsm_blob_alloc+0x68/0x90 [ 212.452219][ T8643] should_failslab+0xc2/0x120 [ 212.452237][ T8643] __kmalloc_noprof+0xd2/0x510 [ 212.452258][ T8643] lsm_blob_alloc+0x68/0x90 [ 212.452277][ T8643] security_sk_alloc+0x30/0x270 [ 212.452291][ T8643] sk_prot_alloc+0x1c7/0x2a0 [ 212.452312][ T8643] sk_alloc+0x36/0xc20 [ 212.452326][ T8643] __netlink_create+0x5e/0x2c0 [ 212.452349][ T8643] __netlink_kernel_create+0xed/0x750 [ 212.452366][ T8643] ? __pfx___netlink_kernel_create+0x10/0x10 [ 212.452387][ T8643] uevent_net_init+0xf8/0x350 [ 212.452406][ T8643] ? __pfx_uevent_net_init+0x10/0x10 [ 212.452424][ T8643] ? __pfx_uevent_net_rcv+0x10/0x10 [ 212.452447][ T8643] ? __pfx_uevent_net_init+0x10/0x10 [ 212.452464][ T8643] ops_init+0x1df/0x5f0 [ 212.452482][ T8643] setup_net+0x10f/0x380 [ 212.452496][ T8643] ? lockdep_init_map_type+0x5c/0x280 [ 212.452516][ T8643] ? __pfx_setup_net+0x10/0x10 [ 212.452532][ T8643] ? debug_mutex_init+0x37/0x70 [ 212.452548][ T8643] copy_net_ns+0x2a6/0x5f0 [ 212.452568][ T8643] create_new_namespaces+0x3ea/0xa90 [ 212.452588][ T8643] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 212.452606][ T8643] ksys_unshare+0x45b/0xa40 [ 212.452625][ T8643] ? __pfx_ksys_unshare+0x10/0x10 [ 212.452645][ T8643] ? xfd_validate_state+0x61/0x180 [ 212.452670][ T8643] __x64_sys_unshare+0x31/0x40 [ 212.452688][ T8643] do_syscall_64+0xcd/0x490 [ 212.452705][ T8643] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.452719][ T8643] RIP: 0033:0x7fb3bab8ebe9 [ 212.452731][ T8643] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 212.452744][ T8643] RSP: 002b:00007fb3bb948038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 212.452758][ T8643] RAX: ffffffffffffffda RBX: 00007fb3badb5fa0 RCX: 00007fb3bab8ebe9 [ 212.452767][ T8643] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 212.452775][ T8643] RBP: 00007fb3bac11e19 R08: 0000000000000000 R09: 0000000000000000 [ 212.452783][ T8643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 212.452791][ T8643] R13: 00007fb3badb6038 R14: 00007fb3badb5fa0 R15: 00007fff58cd8bc8 [ 212.452810][ T8643] [ 212.452872][ T8643] kobject_uevent: unable to create netlink socket! [ 213.483893][ T8660] FAULT_INJECTION: forcing a failure. [ 213.483893][ T8660] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 213.540613][ T8660] CPU: 1 UID: 0 PID: 8660 Comm: syz.2.1011 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) [ 213.540637][ T8660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 213.540646][ T8660] Call Trace: [ 213.540651][ T8660] [ 213.540657][ T8660] dump_stack_lvl+0x16c/0x1f0 [ 213.540679][ T8660] should_fail_ex+0x512/0x640 [ 213.540700][ T8660] should_fail_alloc_page+0xe7/0x130 [ 213.540722][ T8660] prepare_alloc_pages+0x3c2/0x610 [ 213.540743][ T8660] ? rcu_is_watching+0x12/0xc0 [ 213.540760][ T8660] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 213.540780][ T8660] ? rcu_is_watching+0x12/0xc0 [ 213.540794][ T8660] ? trace_mm_page_alloc+0x11f/0x1a0 [ 213.540814][ T8660] ? __alloc_frozen_pages_noprof+0x294/0x23f0 [ 213.540831][ T8660] ? lockdep_hardirqs_on+0x7c/0x110 [ 213.540847][ T8660] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 213.540871][ T8660] ? kmem_cache_alloc_node_noprof+0x1d5/0x3b0 [ 213.540889][ T8660] ? __get_vm_area_node+0x1ca/0x330 [ 213.540908][ T8660] ? __vmalloc_node_noprof+0xad/0xf0 [ 213.540920][ T8660] ? pcpu_mem_zalloc+0x54/0xb0 [ 213.540942][ T8660] ? pcpu_create_chunk+0x432/0x730 [ 213.540956][ T8660] ? pcpu_alloc_noprof+0x11e3/0x1470 [ 213.540971][ T8660] ? bpf_map_alloc_percpu+0x9a/0x4b0 [ 213.540989][ T8660] ? htab_map_alloc+0x10ca/0x1570 [ 213.541001][ T8660] ? map_create+0x58f/0x1f80 [ 213.541029][ T8660] alloc_pages_bulk_noprof+0x71c/0x1410 [ 213.541045][ T8660] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 213.541067][ T8660] ? policy_nodemask+0xea/0x4e0 [ 213.541087][ T8660] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 213.541201][ T8660] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 213.541230][ T8660] kasan_populate_vmalloc+0xf1/0x1f0 [ 213.541257][ T8660] alloc_vmap_area+0x959/0x29c0 [ 213.541286][ T8660] ? __pfx_alloc_vmap_area+0x10/0x10 [ 213.541312][ T8660] __get_vm_area_node+0x1ca/0x330 [ 213.541339][ T8660] __vmalloc_node_range_noprof+0x271/0x14b0 [ 213.541354][ T8660] ? pcpu_mem_zalloc+0x54/0xb0 [ 213.541374][ T8660] ? pcpu_mem_zalloc+0x54/0xb0 [ 213.541393][ T8660] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 213.541415][ T8660] ? pcpu_mem_zalloc+0x54/0xb0 [ 213.541428][ T8660] __vmalloc_node_noprof+0xad/0xf0 [ 213.541441][ T8660] ? pcpu_mem_zalloc+0x54/0xb0 [ 213.541457][ T8660] pcpu_mem_zalloc+0x54/0xb0 [ 213.541472][ T8660] pcpu_create_chunk+0x432/0x730 [ 213.541490][ T8660] pcpu_alloc_noprof+0x11e3/0x1470 [ 213.541515][ T8660] bpf_map_alloc_percpu+0x9a/0x4b0 [ 213.541537][ T8660] htab_map_alloc+0x10ca/0x1570 [ 213.541554][ T8660] ? ns_capable+0xd7/0x110 [ 213.541572][ T8660] map_create+0x58f/0x1f80 [ 213.541598][ T8660] ? __pfx_map_create+0x10/0x10 [ 213.541615][ T8660] ? __might_fault+0xe3/0x190 [ 213.541631][ T8660] ? __might_fault+0xe3/0x190 [ 213.541648][ T8660] ? __might_fault+0x13b/0x190 [ 213.541672][ T8660] __sys_bpf+0x44d2/0x4de0 [ 213.541696][ T8660] ? __pfx___sys_bpf+0x10/0x10 [ 213.541715][ T8660] ? do_writev+0x218/0x340 [ 213.541736][ T8660] ? do_futex+0x122/0x350 [ 213.541756][ T8660] ? __pfx_do_futex+0x10/0x10 [ 213.541785][ T8660] ? xfd_validate_state+0x61/0x180 [ 213.541805][ T8660] ? __pfx_do_writev+0x10/0x10 [ 213.541824][ T8660] __x64_sys_bpf+0x78/0xc0 [ 213.541845][ T8660] ? lockdep_hardirqs_on+0x7c/0x110 [ 213.541861][ T8660] do_syscall_64+0xcd/0x490 [ 213.541879][ T8660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.541894][ T8660] RIP: 0033:0x7fdd55d8ebe9 [ 213.541908][ T8660] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 213.541925][ T8660] RSP: 002b:00007fdd56cbc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 213.541940][ T8660] RAX: ffffffffffffffda RBX: 00007fdd55fb5fa0 RCX: 00007fdd55d8ebe9 [ 213.541951][ T8660] RDX: 00000000000000a3 RSI: 0000200000000780 RDI: 0000000000000000 [ 213.541959][ T8660] RBP: 00007fdd55e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 213.541968][ T8660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 213.541978][ T8660] R13: 00007fdd55fb6038 R14: 00007fdd55fb5fa0 R15: 00007ffd680ce158 [ 213.541997][ T8660] [ 214.187452][ T8658] svc: failed to register nfsdv3 RPC service (errno 512). [ 214.195292][ T8658] svc: failed to register nfsaclv3 RPC service (errno 512). [ 216.003445][ T8688] FAULT_INJECTION: forcing a failure. [ 216.003445][ T8688] name failslab, interval 1, probability 0, space 0, times 0 [ 216.179808][ T8688] CPU: 1 UID: 0 PID: 8688 Comm: syz.3.1022 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) [ 216.179834][ T8688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 216.179842][ T8688] Call Trace: [ 216.179848][ T8688] [ 216.179859][ T8688] dump_stack_lvl+0x16c/0x1f0 [ 216.179882][ T8688] should_fail_ex+0x512/0x640 [ 216.179901][ T8688] ? __kmalloc_noprof+0xbf/0x510 [ 216.179920][ T8688] ? __seq_open_private+0x22/0xd0 [ 216.179943][ T8688] should_failslab+0xc2/0x120 [ 216.179961][ T8688] __kmalloc_noprof+0xd2/0x510 [ 216.179977][ T8688] ? __pfx_apparmor_file_open+0x10/0x10 [ 216.180002][ T8688] __seq_open_private+0x22/0xd0 [ 216.180023][ T8688] proc_timers_open+0x27/0x150 [ 216.180044][ T8688] do_dentry_open+0x97f/0x1530 [ 216.180063][ T8688] ? __pfx_proc_timers_open+0x10/0x10 [ 216.180097][ T8688] vfs_open+0x82/0x3f0 [ 216.180119][ T8688] path_openat+0x1de4/0x2cb0 [ 216.180144][ T8688] ? __pfx_path_openat+0x10/0x10 [ 216.180166][ T8688] do_filp_open+0x20b/0x470 [ 216.180182][ T8688] ? __pfx_do_filp_open+0x10/0x10 [ 216.180205][ T8688] ? __pfx_kfree_link+0x10/0x10 [ 216.180230][ T8688] ? alloc_fd+0x471/0x7d0 [ 216.180250][ T8688] do_sys_openat2+0x11b/0x1d0 [ 216.180270][ T8688] ? __pfx_do_sys_openat2+0x10/0x10 [ 216.180298][ T8688] __x64_sys_openat+0x174/0x210 [ 216.180319][ T8688] ? __pfx___x64_sys_openat+0x10/0x10 [ 216.180346][ T8688] do_syscall_64+0xcd/0x490 [ 216.180364][ T8688] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.180378][ T8688] RIP: 0033:0x7fb3bab8ebe9 [ 216.180390][ T8688] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 216.180404][ T8688] RSP: 002b:00007fb3bb948038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 216.180417][ T8688] RAX: ffffffffffffffda RBX: 00007fb3badb5fa0 RCX: 00007fb3bab8ebe9 [ 216.180427][ T8688] RDX: 0000000000000040 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 216.180435][ T8688] RBP: 00007fb3bac11e19 R08: 0000000000000000 R09: 0000000000000000 [ 216.180443][ T8688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 216.180451][ T8688] R13: 00007fb3badb6038 R14: 00007fb3badb5fa0 R15: 00007fff58cd8bc8 [ 216.180469][ T8688] [ 217.118595][ T8702] FAULT_INJECTION: forcing a failure. [ 217.118595][ T8702] name failslab, interval 1, probability 0, space 0, times 0 [ 217.190520][ T8702] CPU: 1 UID: 0 PID: 8702 Comm: syz.0.1028 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) [ 217.190544][ T8702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 217.190553][ T8702] Call Trace: [ 217.190559][ T8702] [ 217.190564][ T8702] dump_stack_lvl+0x16c/0x1f0 [ 217.190586][ T8702] should_fail_ex+0x512/0x640 [ 217.190603][ T8702] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 217.190621][ T8702] should_failslab+0xc2/0x120 [ 217.190640][ T8702] __kmalloc_cache_noprof+0x6a/0x3e0 [ 217.190724][ T8702] ? snd_pcm_oss_change_params_locked+0x211/0x3a30 [ 217.190747][ T8702] ? kasan_save_track+0x14/0x30 [ 217.190767][ T8702] snd_pcm_oss_change_params_locked+0x211/0x3a30 [ 217.190792][ T8702] ? __mutex_lock+0x1c4/0x10b0 [ 217.190811][ T8702] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 217.190832][ T8702] ? __pfx___mutex_lock+0x10/0x10 [ 217.190851][ T8702] ? __fsnotify_parent+0x24b/0xc40 [ 217.190873][ T8702] snd_pcm_oss_make_ready+0xe6/0x1b0 [ 217.190895][ T8702] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 217.190917][ T8702] snd_pcm_oss_sync+0x1de/0x840 [ 217.190940][ T8702] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 217.190959][ T8702] snd_pcm_oss_release+0x28b/0x310 [ 217.190980][ T8702] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 217.190998][ T8702] __fput+0x3ff/0xb70 [ 217.191022][ T8702] task_work_run+0x150/0x240 [ 217.191045][ T8702] ? __pfx_task_work_run+0x10/0x10 [ 217.191065][ T8702] ? __pfx___do_sys_close_range+0x10/0x10 [ 217.191086][ T8702] exit_to_user_mode_loop+0xeb/0x110 [ 217.191107][ T8702] do_syscall_64+0x3f6/0x490 [ 217.191125][ T8702] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.191139][ T8702] RIP: 0033:0x7f4bf098ebe9 [ 217.191152][ T8702] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 217.191165][ T8702] RSP: 002b:00007f4bf18da038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 217.191178][ T8702] RAX: 0000000000000000 RBX: 00007f4bf0bb5fa0 RCX: 00007f4bf098ebe9 [ 217.191187][ T8702] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000000 [ 217.191195][ T8702] RBP: 00007f4bf0a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 217.191203][ T8702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 217.191211][ T8702] R13: 00007f4bf0bb6038 R14: 00007f4bf0bb5fa0 R15: 00007fff9d2e1b78 [ 217.191229][ T8702] [ 218.810003][ T8721] FAULT_INJECTION: forcing a failure. [ 218.810003][ T8721] name failslab, interval 1, probability 0, space 0, times 0 [ 218.982413][ T8721] CPU: 1 UID: 0 PID: 8721 Comm: syz.0.1035 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) [ 218.982439][ T8721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 218.982449][ T8721] Call Trace: [ 218.982454][ T8721] [ 218.982461][ T8721] dump_stack_lvl+0x16c/0x1f0 [ 218.982484][ T8721] should_fail_ex+0x512/0x640 [ 218.982513][ T8721] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 218.982535][ T8721] should_failslab+0xc2/0x120 [ 218.982557][ T8721] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 218.982576][ T8721] ? __lock_acquire+0xb97/0x1ce0 [ 218.982594][ T8721] ? fcntl_setlk+0xaa/0xe20 [ 218.982610][ T8721] fcntl_setlk+0xaa/0xe20 [ 218.982625][ T8721] ? __pfx_fcntl_setlk+0x10/0x10 [ 218.982641][ T8721] ? find_held_lock+0x2b/0x80 [ 218.982656][ T8721] ? __might_fault+0xe3/0x190 [ 218.982672][ T8721] ? __might_fault+0xe3/0x190 [ 218.982686][ T8721] ? __might_fault+0x13b/0x190 [ 218.982708][ T8721] do_fcntl+0xbce/0x15a0 [ 218.982729][ T8721] ? __pfx_do_fcntl+0x10/0x10 [ 218.982752][ T8721] ? tomoyo_file_fcntl+0x6c/0xc0 [ 218.982774][ T8721] __x64_sys_fcntl+0x163/0x200 [ 218.982795][ T8721] do_syscall_64+0xcd/0x490 [ 218.982812][ T8721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.982827][ T8721] RIP: 0033:0x7f4bf098ebe9 [ 218.982838][ T8721] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 218.982853][ T8721] RSP: 002b:00007f4bf18da038 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 218.982868][ T8721] RAX: ffffffffffffffda RBX: 00007f4bf0bb5fa0 RCX: 00007f4bf098ebe9 [ 218.982879][ T8721] RDX: 0000000000000002 RSI: 0000000000000026 RDI: 0000000000000003 [ 218.982889][ T8721] RBP: 00007f4bf0a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 218.982904][ T8721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 218.982913][ T8721] R13: 00007f4bf0bb6038 R14: 00007f4bf0bb5fa0 R15: 00007fff9d2e1b78 [ 218.982934][ T8721] [ 219.546393][ T8731] FAULT_INJECTION: forcing a failure. [ 219.546393][ T8731] name failslab, interval 1, probability 0, space 0, times 0 [ 219.606707][ T8731] CPU: 1 UID: 0 PID: 8731 Comm: syz.2.1042 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) [ 219.606747][ T8731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 219.606757][ T8731] Call Trace: [ 219.606763][ T8731] [ 219.606769][ T8731] dump_stack_lvl+0x16c/0x1f0 [ 219.606790][ T8731] should_fail_ex+0x512/0x640 [ 219.606807][ T8731] ? fs_reclaim_acquire+0xae/0x150 [ 219.606833][ T8731] should_failslab+0xc2/0x120 [ 219.606864][ T8731] __kmalloc_cache_noprof+0x6a/0x3e0 [ 219.606880][ T8731] ? __lock_acquire+0x62e/0x1ce0 [ 219.606898][ T8731] ? usb_control_msg+0xbc/0x4a0 [ 219.606917][ T8731] usb_control_msg+0xbc/0x4a0 [ 219.606934][ T8731] ? __pfx_usb_control_msg+0x10/0x10 [ 219.606955][ T8731] hub_ext_port_status+0x14e/0x670 [ 219.606976][ T8731] hub_activate+0x6e5/0x1d60 [ 219.606998][ T8731] ? __pfx_hub_activate+0x10/0x10 [ 219.607013][ T8731] ? usb_generic_driver_resume+0x70/0xa0 [ 219.607035][ T8731] hub_resume+0xa8/0x3f0 [ 219.607050][ T8731] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 219.607067][ T8731] ? __pfx_hub_resume+0x10/0x10 [ 219.607083][ T8731] ? __pfx_hcd_bus_resume+0x10/0x10 [ 219.607100][ T8731] usb_resume_interface.constprop.0.isra.0+0x2c2/0x3e0 [ 219.607135][ T8731] usb_resume_both+0x273/0x800 [ 219.607157][ T8731] ? __pfx_usb_resume_both+0x10/0x10 [ 219.607178][ T8731] ? __pfx_usb_runtime_resume+0x10/0x10 [ 219.607201][ T8731] ? __pfx_usb_runtime_resume+0x10/0x10 [ 219.607222][ T8731] __rpm_callback+0xc5/0x610 [ 219.607240][ T8731] ? __pfx_usb_runtime_resume+0x10/0x10 [ 219.607262][ T8731] rpm_callback+0x1b7/0x200 [ 219.607277][ T8731] ? __pfx_usb_runtime_resume+0x10/0x10 [ 219.607298][ T8731] rpm_resume+0xd0a/0x1310 [ 219.607318][ T8731] ? __pfx_rpm_resume+0x10/0x10 [ 219.607332][ T8731] ? do_raw_spin_lock+0x12c/0x2b0 [ 219.607353][ T8731] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 219.607381][ T8731] __pm_runtime_resume+0xb6/0x170 [ 219.607398][ T8731] usb_autoresume_device+0x23/0xe0 [ 219.607421][ T8731] usbdev_open+0x228/0x8b0 [ 219.607434][ T8731] ? do_raw_spin_lock+0x12c/0x2b0 [ 219.607464][ T8731] ? __pfx_usbdev_open+0x10/0x10 [ 219.607477][ T8731] ? chrdev_open+0x58c/0x6a0 [ 219.607498][ T8731] ? __pfx_usbdev_open+0x10/0x10 [ 219.607512][ T8731] chrdev_open+0x231/0x6a0 [ 219.607531][ T8731] ? __pfx_chrdev_open+0x10/0x10 [ 219.607551][ T8731] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 219.607570][ T8731] do_dentry_open+0x97f/0x1530 [ 219.607588][ T8731] ? __pfx_chrdev_open+0x10/0x10 [ 219.607609][ T8731] vfs_open+0x82/0x3f0 [ 219.607632][ T8731] path_openat+0x1de4/0x2cb0 [ 219.607655][ T8731] ? __pfx_path_openat+0x10/0x10 [ 219.607676][ T8731] do_filp_open+0x20b/0x470 [ 219.607693][ T8731] ? __pfx_do_filp_open+0x10/0x10 [ 219.607726][ T8731] ? alloc_fd+0x471/0x7d0 [ 219.607747][ T8731] do_sys_openat2+0x11b/0x1d0 [ 219.607767][ T8731] ? __pfx_do_sys_openat2+0x10/0x10 [ 219.607795][ T8731] __x64_sys_openat+0x174/0x210 [ 219.607816][ T8731] ? __pfx___x64_sys_openat+0x10/0x10 [ 219.607845][ T8731] do_syscall_64+0xcd/0x490 [ 219.607863][ T8731] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.607877][ T8731] RIP: 0033:0x7fdd55d8ebe9 [ 219.607891][ T8731] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 219.607904][ T8731] RSP: 002b:00007fdd56cbc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 219.607918][ T8731] RAX: ffffffffffffffda RBX: 00007fdd55fb5fa0 RCX: 00007fdd55d8ebe9 [ 219.607928][ T8731] RDX: 0000000000040101 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 219.607937][ T8731] RBP: 00007fdd55e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 219.607946][ T8731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 219.607954][ T8731] R13: 00007fdd55fb6038 R14: 00007fdd55fb5fa0 R15: 00007ffd680ce158 [ 219.607979][ T8731] [ 219.607992][ T8731] hub 2-0:1.0: hub_ext_port_status failed (err = -12) [ 220.396014][ T8743] netlink: 'syz.0.1044': attribute type 19 has an invalid length. [ 220.431677][ T8743] netlink: 334 bytes leftover after parsing attributes in process `syz.0.1044'. [ 220.820334][ T8752] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1049'. [ 220.941123][ T8752] hsr0: entered allmulticast mode [ 220.961919][ T8752] hsr_slave_0: entered allmulticast mode [ 221.000910][ T8752] hsr_slave_1: entered allmulticast mode [ 221.668112][ T8774] netlink: 302 bytes leftover after parsing attributes in process `syz.0.1058'. [ 221.759505][ T8768] sctp: [Deprecated]: syz.3.1055 (pid 8768) Use of struct sctp_assoc_value in delayed_ack socket option. [ 221.759505][ T8768] Use struct sctp_sack_info instead [ 221.959484][ T8777] FAULT_INJECTION: forcing a failure. [ 221.959484][ T8777] name failslab, interval 1, probability 0, space 0, times 0 [ 222.005524][ T8777] CPU: 1 UID: 0 PID: 8777 Comm: syz.2.1059 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) [ 222.005554][ T8777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 222.005563][ T8777] Call Trace: [ 222.005568][ T8777] [ 222.005574][ T8777] dump_stack_lvl+0x16c/0x1f0 [ 222.005595][ T8777] should_fail_ex+0x512/0x640 [ 222.005612][ T8777] ? fs_reclaim_acquire+0xae/0x150 [ 222.005635][ T8777] ? tomoyo_open_control+0x51f/0xa30 [ 222.005656][ T8777] should_failslab+0xc2/0x120 [ 222.005688][ T8777] __kmalloc_noprof+0xd2/0x510 [ 222.005710][ T8777] tomoyo_open_control+0x51f/0xa30 [ 222.005733][ T8777] do_dentry_open+0x97f/0x1530 [ 222.005751][ T8777] ? __pfx_tomoyo_open+0x10/0x10 [ 222.005772][ T8777] vfs_open+0x82/0x3f0 [ 222.005794][ T8777] path_openat+0x1de4/0x2cb0 [ 222.005817][ T8777] ? __pfx_path_openat+0x10/0x10 [ 222.005838][ T8777] do_filp_open+0x20b/0x470 [ 222.005854][ T8777] ? __pfx_do_filp_open+0x10/0x10 [ 222.005883][ T8777] ? alloc_fd+0x471/0x7d0 [ 222.005903][ T8777] do_sys_openat2+0x11b/0x1d0 [ 222.005922][ T8777] ? __pfx_do_sys_openat2+0x10/0x10 [ 222.005950][ T8777] __x64_sys_openat+0x174/0x210 [ 222.005970][ T8777] ? __pfx___x64_sys_openat+0x10/0x10 [ 222.005998][ T8777] do_syscall_64+0xcd/0x490 [ 222.006015][ T8777] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.006029][ T8777] RIP: 0033:0x7fdd55d8ebe9 [ 222.006041][ T8777] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 222.006054][ T8777] RSP: 002b:00007fdd56cbc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 222.006068][ T8777] RAX: ffffffffffffffda RBX: 00007fdd55fb5fa0 RCX: 00007fdd55d8ebe9 [ 222.006077][ T8777] RDX: 00000000000c0802 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 222.006092][ T8777] RBP: 00007fdd55e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 222.006101][ T8777] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 222.006110][ T8777] R13: 00007fdd55fb6038 R14: 00007fdd55fb5fa0 R15: 00007ffd680ce158 [ 222.006128][ T8777] [ 223.184171][ T8796] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1068'. [ 223.598861][ T8805] FAULT_INJECTION: forcing a failure. [ 223.598861][ T8805] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 223.753316][ T8797] zswap: compressor 000 not available [ 223.793346][ T8805] CPU: 1 UID: 0 PID: 8805 Comm: syz.0.1070 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) [ 223.793370][ T8805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 223.793379][ T8805] Call Trace: [ 223.793384][ T8805] [ 223.793391][ T8805] dump_stack_lvl+0x16c/0x1f0 [ 223.793413][ T8805] should_fail_ex+0x512/0x640 [ 223.793434][ T8805] should_fail_alloc_page+0xe7/0x130 [ 223.793456][ T8805] prepare_alloc_pages+0x3c2/0x610 [ 223.793477][ T8805] ? rcu_is_watching+0x12/0xc0 [ 223.793494][ T8805] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 223.793514][ T8805] ? rcu_is_watching+0x12/0xc0 [ 223.793527][ T8805] ? trace_mm_page_alloc+0x11f/0x1a0 [ 223.793548][ T8805] ? __alloc_frozen_pages_noprof+0x294/0x23f0 [ 223.793563][ T8805] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 223.793577][ T8805] ? lockdep_hardirqs_on+0x7c/0x110 [ 223.793592][ T8805] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 223.793608][ T8805] ? stack_depot_save_flags+0x3de/0x9c0 [ 223.793630][ T8805] ? alloc_vmap_area+0xdc8/0x29c0 [ 223.793648][ T8805] ? __vmalloc_node_range_noprof+0x271/0x14b0 [ 223.793661][ T8805] ? bloom_map_alloc+0x302/0x4c0 [ 223.793674][ T8805] ? map_create+0x58f/0x1f80 [ 223.793691][ T8805] ? __sys_bpf+0x44d2/0x4de0 [ 223.793709][ T8805] ? __x64_sys_bpf+0x78/0xc0 [ 223.793728][ T8805] ? do_syscall_64+0xcd/0x490 [ 223.793742][ T8805] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.793763][ T8805] alloc_pages_bulk_noprof+0x71c/0x1410 [ 223.793780][ T8805] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 223.793801][ T8805] ? policy_nodemask+0xea/0x4e0 [ 223.793821][ T8805] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 223.793839][ T8805] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 223.793864][ T8805] kasan_populate_vmalloc+0xf1/0x1f0 [ 223.793885][ T8805] alloc_vmap_area+0x959/0x29c0 [ 223.793918][ T8805] ? __pfx_alloc_vmap_area+0x10/0x10 [ 223.793944][ T8805] __get_vm_area_node+0x1ca/0x330 [ 223.793968][ T8805] __vmalloc_node_range_noprof+0x271/0x14b0 [ 223.793982][ T8805] ? bloom_map_alloc+0x302/0x4c0 [ 223.794001][ T8805] ? bloom_map_alloc+0x302/0x4c0 [ 223.794018][ T8805] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 223.794036][ T8805] ? aa_get_newest_label+0xd2/0x250 [ 223.794059][ T8805] ? bloom_map_alloc+0x302/0x4c0 [ 223.794072][ T8805] __bpf_map_area_alloc+0x12e/0x200 [ 223.794093][ T8805] ? bloom_map_alloc+0x302/0x4c0 [ 223.794127][ T8805] bloom_map_alloc+0x302/0x4c0 [ 223.794150][ T8805] map_create+0x58f/0x1f80 [ 223.794177][ T8805] ? __pfx_map_create+0x10/0x10 [ 223.794198][ T8805] ? __might_fault+0xe3/0x190 [ 223.794214][ T8805] ? __might_fault+0xe3/0x190 [ 223.794228][ T8805] ? __might_fault+0x13b/0x190 [ 223.794250][ T8805] __sys_bpf+0x44d2/0x4de0 [ 223.794272][ T8805] ? __pfx___sys_bpf+0x10/0x10 [ 223.794292][ T8805] ? do_writev+0x218/0x340 [ 223.794312][ T8805] ? do_futex+0x122/0x350 [ 223.794331][ T8805] ? __pfx_do_futex+0x10/0x10 [ 223.794357][ T8805] ? xfd_validate_state+0x61/0x180 [ 223.794380][ T8805] ? __pfx_do_writev+0x10/0x10 [ 223.794397][ T8805] __x64_sys_bpf+0x78/0xc0 [ 223.794417][ T8805] ? lockdep_hardirqs_on+0x7c/0x110 [ 223.794433][ T8805] do_syscall_64+0xcd/0x490 [ 223.794451][ T8805] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.794465][ T8805] RIP: 0033:0x7f4bf098ebe9 [ 223.794487][ T8805] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 223.794502][ T8805] RSP: 002b:00007f4bf18da038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 223.794521][ T8805] RAX: ffffffffffffffda RBX: 00007f4bf0bb5fa0 RCX: 00007f4bf098ebe9 [ 223.794531][ T8805] RDX: 00000000000006f4 RSI: 0000200000000280 RDI: 0000000000000000 [ 223.794540][ T8805] RBP: 00007f4bf0a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 223.794549][ T8805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 223.794557][ T8805] R13: 00007f4bf0bb6038 R14: 00007f4bf0bb5fa0 R15: 00007fff9d2e1b78 [ 223.794577][ T8805] [ 225.164717][ T5864] Bluetooth: hci0: ISO packet too small [ 226.994345][ T8879] FAULT_INJECTION: forcing a failure. [ 226.994345][ T8879] name failslab, interval 1, probability 0, space 0, times 0 [ 227.063734][ T8879] CPU: 1 UID: 0 PID: 8879 Comm: syz.3.1102 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) [ 227.063760][ T8879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 227.063769][ T8879] Call Trace: [ 227.063774][ T8879] [ 227.063780][ T8879] dump_stack_lvl+0x16c/0x1f0 [ 227.063802][ T8879] should_fail_ex+0x512/0x640 [ 227.063820][ T8879] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 227.063838][ T8879] should_failslab+0xc2/0x120 [ 227.063860][ T8879] __kmalloc_cache_noprof+0x6a/0x3e0 [ 227.063875][ T8879] ? sctp_endpoint_new+0x7c/0xcd0 [ 227.063892][ T8879] sctp_endpoint_new+0x7c/0xcd0 [ 227.063910][ T8879] sctp_init_sock+0xe2d/0x1330 [ 227.063924][ T8879] ? __pfx_sctp_v6_init_sock+0x10/0x10 [ 227.063938][ T8879] sctp_v6_init_sock+0x16/0x70 [ 227.064090][ T8879] ? __pfx_sctp_v6_init_sock+0x10/0x10 [ 227.064107][ T8879] inet6_create+0xb2d/0x12b0 [ 227.064130][ T8879] ? inet6_create+0x7f/0x12b0 [ 227.064152][ T8879] __sock_create+0x338/0x8d0 [ 227.064177][ T8879] __sys_socket+0x14d/0x260 [ 227.064202][ T8879] ? __pfx___sys_socket+0x10/0x10 [ 227.064221][ T8879] ? xfd_validate_state+0x61/0x180 [ 227.064300][ T8879] ? __pfx_ksys_write+0x10/0x10 [ 227.064324][ T8879] __x64_sys_socket+0x72/0xb0 [ 227.064346][ T8879] ? lockdep_hardirqs_on+0x7c/0x110 [ 227.064362][ T8879] do_syscall_64+0xcd/0x490 [ 227.064379][ T8879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.064395][ T8879] RIP: 0033:0x7fb3bab8ebe9 [ 227.064408][ T8879] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 227.064421][ T8879] RSP: 002b:00007fb3bb948038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 227.064439][ T8879] RAX: ffffffffffffffda RBX: 00007fb3badb5fa0 RCX: 00007fb3bab8ebe9 [ 227.064448][ T8879] RDX: 0000000000000084 RSI: 0000000000000005 RDI: 000000000000000a [ 227.064457][ T8879] RBP: 00007fb3bac11e19 R08: 0000000000000000 R09: 0000000000000000 [ 227.064465][ T8879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 227.064473][ T8879] R13: 00007fb3badb6038 R14: 00007fb3badb5fa0 R15: 00007fff58cd8bc8 [ 227.064491][ T8879] [ 227.652770][ T8885] binder: 8882:8885 ioctl 400454c9 0 returned -22 [ 227.740913][ T8885] binder: 8882:8885 ioctl c0306201 200000000300 returned -11 [ 228.104577][ T8898] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 229.057351][ T8922] netlink: 338 bytes leftover after parsing attributes in process `syz.2.1120'. [ 230.173331][ T8943] netlink: 'syz.1.1129': attribute type 11 has an invalid length. [ 230.385670][ T8947] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1131'. [ 231.792762][ T8981] netlink: 'syz.1.1147': attribute type 2 has an invalid length. [ 231.831268][ T8981] netlink: 'syz.1.1147': attribute type 2 has an invalid length. [ 233.176653][ T9016] netlink: 186 bytes leftover after parsing attributes in process `syz.3.1162'. [ 233.273110][ T9021] netlink: 186 bytes leftover after parsing attributes in process `syz.3.1162'. [ 233.370915][ T9023] netlink: 326 bytes leftover after parsing attributes in process `syz.0.1165'. [ 233.824673][ T9036] netlink: 342 bytes leftover after parsing attributes in process `syz.0.1171'. [ 234.269214][ T9051] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1177'. [ 234.272317][ T9049] netlink: 'syz.2.1176': attribute type 1 has an invalid length. [ 234.372181][ T9049] netlink: 322 bytes leftover after parsing attributes in process `syz.2.1176'. [ 234.429472][ T9054] netlink: 'syz.2.1176': attribute type 1 has an invalid length. [ 234.461791][ T9054] netlink: 322 bytes leftover after parsing attributes in process `syz.2.1176'. [ 234.503543][ T9056] size and base must be multiples of 4 kiB [ 234.545275][ T9056] CPU: 1 UID: 0 PID: 9056 Comm: syz.1.1178 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) [ 234.545300][ T9056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 234.545309][ T9056] Call Trace: [ 234.545314][ T9056] [ 234.545326][ T9056] dump_stack_lvl+0x16c/0x1f0 [ 234.545348][ T9056] mtrr_add+0xdf/0x110 [ 234.545369][ T9056] mtrr_ioctl+0x7ef/0xcf0 [ 234.545389][ T9056] ? __pfx_mtrr_ioctl+0x10/0x10 [ 234.545411][ T9056] ? find_held_lock+0x2b/0x80 [ 234.545430][ T9056] ? __fget_files+0x20e/0x3c0 [ 234.545446][ T9056] ? __pfx_mtrr_ioctl+0x10/0x10 [ 234.545465][ T9056] proc_reg_unlocked_ioctl+0x229/0x320 [ 234.545484][ T9056] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 234.545503][ T9056] __x64_sys_ioctl+0x18e/0x210 [ 234.545526][ T9056] do_syscall_64+0xcd/0x490 [ 234.545547][ T9056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.545560][ T9056] RIP: 0033:0x7f660358ebe9 [ 234.545574][ T9056] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 234.545589][ T9056] RSP: 002b:00007f66017d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 234.545604][ T9056] RAX: ffffffffffffffda RBX: 00007f66037b6090 RCX: 00007f660358ebe9 [ 234.545614][ T9056] RDX: 0000000000000007 RSI: 0000000040104d01 RDI: 0000000000000003 [ 234.545623][ T9056] RBP: 00007f6603611e19 R08: 0000000000000000 R09: 0000000000000000 [ 234.545631][ T9056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 234.545639][ T9056] R13: 00007f66037b6128 R14: 00007f66037b6090 R15: 00007ffd09388158 [ 234.545658][ T9056] [ 235.992801][ T9088] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1192'. [ 236.220370][ T9094] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1195'. [ 236.260080][ T9094] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1195'. [ 236.425264][ T9099] netlink: 206 bytes leftover after parsing attributes in process `syz.3.1197'. [ 236.457734][ T9098] GUP no longer grows the stack in syz.0.1196 (9098): 14000-18000 (4000) [ 236.476816][ T9101] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1198'. [ 236.496468][ T9098] CPU: 1 UID: 0 PID: 9098 Comm: syz.0.1196 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) [ 236.496493][ T9098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 236.496502][ T9098] Call Trace: [ 236.496508][ T9098] [ 236.496514][ T9098] dump_stack_lvl+0x16c/0x1f0 [ 236.496535][ T9098] gup_vma_lookup+0x1d2/0x220 [ 236.496558][ T9098] __get_user_pages+0x243/0x34a0 [ 236.496586][ T9098] ? find_held_lock+0x2b/0x80 [ 236.496601][ T9098] ? __pfx___get_user_pages+0x10/0x10 [ 236.496627][ T9098] get_user_pages_remote+0x243/0xab0 [ 236.496651][ T9098] ? __pfx_get_user_pages_remote+0x10/0x10 [ 236.496672][ T9098] ? __pfx___might_resched+0x10/0x10 [ 236.496687][ T9098] ? noop_dirty_folio+0x5e/0xb0 [ 236.496710][ T9098] __access_remote_vm+0x24d/0x850 [ 236.496734][ T9098] ? __pfx___access_remote_vm+0x10/0x10 [ 236.496759][ T9098] mem_rw+0x20e/0x640 [ 236.496783][ T9098] ? __pfx_mem_write+0x10/0x10 [ 236.496794][ T9098] vfs_write+0x29d/0x1150 [ 236.496813][ T9098] ? __pfx___mutex_lock+0x10/0x10 [ 236.496828][ T9098] ? __pfx_vfs_write+0x10/0x10 [ 236.496849][ T9098] ? __fget_files+0x20e/0x3c0 [ 236.496870][ T9098] ksys_write+0x12a/0x250 [ 236.496885][ T9098] ? __pfx_ksys_write+0x10/0x10 [ 236.496907][ T9098] do_syscall_64+0xcd/0x490 [ 236.496924][ T9098] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.496938][ T9098] RIP: 0033:0x7f4bf098ebe9 [ 236.496950][ T9098] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 236.496967][ T9098] RSP: 002b:00007f4bf18da038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 236.496981][ T9098] RAX: ffffffffffffffda RBX: 00007f4bf0bb5fa0 RCX: 00007f4bf098ebe9 [ 236.496991][ T9098] RDX: 000000000000ffd8 RSI: 0000000000000000 RDI: 0000000000000003 [ 236.497000][ T9098] RBP: 00007f4bf0a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 236.497008][ T9098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 236.497016][ T9098] R13: 00007f4bf0bb6038 R14: 00007f4bf0bb5fa0 R15: 00007fff9d2e1b78 [ 236.497036][ T9098] [ 236.734867][ T9101] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1198'. [ 236.839443][ T9103] FAULT_INJECTION: forcing a failure. [ 236.839443][ T9103] name failslab, interval 1, probability 0, space 0, times 0 [ 236.852522][ T9103] CPU: 1 UID: 0 PID: 9103 Comm: syz.3.1201 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) [ 236.852545][ T9103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 236.852555][ T9103] Call Trace: [ 236.852562][ T9103] [ 236.852569][ T9103] dump_stack_lvl+0x16c/0x1f0 [ 236.852590][ T9103] should_fail_ex+0x512/0x640 [ 236.852609][ T9103] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 236.852629][ T9103] should_failslab+0xc2/0x120 [ 236.852648][ T9103] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 236.852665][ T9103] ? proc_alloc_inode+0x25/0x200 [ 236.852685][ T9103] ? __pfx_proc_alloc_inode+0x10/0x10 [ 236.852702][ T9103] proc_alloc_inode+0x25/0x200 [ 236.852718][ T9103] alloc_inode+0x61/0x240 [ 236.852739][ T9103] new_inode+0x22/0x1c0 [ 236.852758][ T9103] ? proc_lookup_de+0x201/0x360 [ 236.852780][ T9103] proc_get_inode+0x1d/0x780 [ 236.852799][ T9103] proc_lookup_de+0x236/0x360 [ 236.852821][ T9103] proc_tgid_net_lookup+0x75/0x120 [ 236.852844][ T9103] __lookup_slow+0x251/0x460 [ 236.852865][ T9103] ? __pfx___lookup_slow+0x10/0x10 [ 236.852897][ T9103] ? lookup_fast+0x156/0x610 [ 236.852913][ T9103] walk_component+0x353/0x5b0 [ 236.852929][ T9103] link_path_walk+0x627/0xe20 [ 236.852949][ T9103] path_openat+0x1b0/0x2cb0 [ 236.852964][ T9103] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.852985][ T9103] ? __pfx_path_openat+0x10/0x10 [ 236.853006][ T9103] do_filp_open+0x20b/0x470 [ 236.853023][ T9103] ? __pfx_do_filp_open+0x10/0x10 [ 236.853049][ T9103] ? __pfx_kfree_link+0x10/0x10 [ 236.853075][ T9103] ? alloc_fd+0x471/0x7d0 [ 236.853095][ T9103] do_sys_openat2+0x11b/0x1d0 [ 236.853219][ T9103] ? __pfx_do_sys_openat2+0x10/0x10 [ 236.853249][ T9103] __x64_sys_openat+0x174/0x210 [ 236.853271][ T9103] ? __pfx___x64_sys_openat+0x10/0x10 [ 236.853303][ T9103] do_syscall_64+0xcd/0x490 [ 236.853321][ T9103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.853336][ T9103] RIP: 0033:0x7fb3bab8ebe9 [ 236.853349][ T9103] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 236.853362][ T9103] RSP: 002b:00007fb3bb948038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 236.853377][ T9103] RAX: ffffffffffffffda RBX: 00007fb3badb5fa0 RCX: 00007fb3bab8ebe9 [ 236.853388][ T9103] RDX: 0000000000101002 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 236.853397][ T9103] RBP: 00007fb3bac11e19 R08: 0000000000000000 R09: 0000000000000000 [ 236.853405][ T9103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 236.853413][ T9103] R13: 00007fb3badb6038 R14: 00007fb3badb5fa0 R15: 00007fff58cd8bc8 [ 236.853431][ T9103] [ 237.596930][ T9116] netlink: 326 bytes leftover after parsing attributes in process `syz.1.1205'. [ 238.788214][ T9153] vhci_hcd: pdev 268435455 [ 239.126728][ T9163] FAULT_INJECTION: forcing a failure. [ 239.126728][ T9163] name failslab, interval 1, probability 0, space 0, times 0 [ 239.213334][ T9163] CPU: 1 UID: 0 PID: 9163 Comm: syz.2.1225 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) [ 239.213358][ T9163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 239.213367][ T9163] Call Trace: [ 239.213372][ T9163] [ 239.213378][ T9163] dump_stack_lvl+0x16c/0x1f0 [ 239.213400][ T9163] should_fail_ex+0x512/0x640 [ 239.213418][ T9163] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 239.213440][ T9163] should_failslab+0xc2/0x120 [ 239.213460][ T9163] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 239.213476][ T9163] ? alloc_file_pseudo+0x1b3/0x230 [ 239.213495][ T9163] ? alloc_empty_file+0x55/0x1e0 [ 239.213517][ T9163] alloc_empty_file+0x55/0x1e0 [ 239.213537][ T9163] alloc_file_clone+0x5f/0x110 [ 239.213558][ T9163] create_pipe_files+0x412/0x9a0 [ 239.213579][ T9163] do_pipe2+0xaf/0x1c0 [ 239.213595][ T9163] ? __pfx_do_pipe2+0x10/0x10 [ 239.213613][ T9163] ? xfd_validate_state+0x61/0x180 [ 239.213632][ T9163] ? __pfx_do_writev+0x10/0x10 [ 239.213650][ T9163] __x64_sys_pipe+0x33/0x50 [ 239.213667][ T9163] do_syscall_64+0xcd/0x490 [ 239.213684][ T9163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.213698][ T9163] RIP: 0033:0x7fdd55d8ebe9 [ 239.213710][ T9163] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 239.213722][ T9163] RSP: 002b:00007fdd56cbc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000016 [ 239.213736][ T9163] RAX: ffffffffffffffda RBX: 00007fdd55fb5fa0 RCX: 00007fdd55d8ebe9 [ 239.213745][ T9163] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 239.213753][ T9163] RBP: 00007fdd55e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 239.213761][ T9163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 239.213769][ T9163] R13: 00007fdd55fb6038 R14: 00007fdd55fb5fa0 R15: 00007ffd680ce158 [ 239.213786][ T9163] [ 239.520395][ T9171] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input6 [ 239.999246][ T9187] __nla_validate_parse: 3 callbacks suppressed [ 239.999261][ T9187] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1236'. [ 240.358621][ T9199] netlink: 330 bytes leftover after parsing attributes in process `syz.0.1242'. [ 241.011760][ T9218] netlink: 334 bytes leftover after parsing attributes in process `syz.3.1248'. [ 241.101676][ T9221] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1251'. [ 242.597227][ T9254] FAULT_INJECTION: forcing a failure. [ 242.597227][ T9254] name failslab, interval 1, probability 0, space 0, times 0 [ 242.675757][ T9254] CPU: 1 UID: 0 PID: 9254 Comm: syz.0.1263 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) [ 242.675781][ T9254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 242.675800][ T9254] Call Trace: [ 242.675806][ T9254] [ 242.675813][ T9254] dump_stack_lvl+0x16c/0x1f0 [ 242.675835][ T9254] should_fail_ex+0x512/0x640 [ 242.675853][ T9254] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 242.675872][ T9254] should_failslab+0xc2/0x120 [ 242.675891][ T9254] __kmalloc_cache_noprof+0x6a/0x3e0 [ 242.675905][ T9254] ? allocate_file_region_entries+0x15b/0x620 [ 242.675929][ T9254] ? allocate_file_region_entries+0x1a0/0x620 [ 242.675949][ T9254] allocate_file_region_entries+0x1a0/0x620 [ 242.675971][ T9254] ? __pfx_allocate_file_region_entries+0x10/0x10 [ 242.675999][ T9254] region_chg+0x85/0x140 [ 242.676016][ T9254] __vma_reservation_common+0x43b/0x740 [ 242.676035][ T9254] ? __pfx___vma_reservation_common+0x10/0x10 [ 242.676058][ T9254] alloc_hugetlb_folio+0x946/0x1560 [ 242.676082][ T9254] ? __pfx_alloc_hugetlb_folio+0x10/0x10 [ 242.676103][ T9254] ? _raw_spin_unlock+0x28/0x50 [ 242.676117][ T9254] ? __filemap_get_folio+0x32b/0xc30 [ 242.676141][ T9254] hugetlb_fault+0x1bce/0x2f40 [ 242.676158][ T9254] ? __pfx_hugetlb_fault+0x10/0x10 [ 242.676180][ T9254] ? find_vma+0xbf/0x140 [ 242.676197][ T9254] ? __pfx_find_vma+0x10/0x10 [ 242.676217][ T9254] handle_mm_fault+0xbfa/0xd10 [ 242.676232][ T9254] ? __bpf_trace_exceptions+0x1/0x40 [ 242.676255][ T9254] do_user_addr_fault+0x7a6/0x1370 [ 242.676278][ T9254] ? rcu_is_watching+0x12/0xc0 [ 242.676295][ T9254] exc_page_fault+0x5c/0xb0 [ 242.676310][ T9254] asm_exc_page_fault+0x26/0x30 [ 242.676324][ T9254] RIP: 0010:rep_movs_alternative+0x30/0x90 [ 242.676344][ T9254] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 242.676357][ T9254] RSP: 0018:ffffc9000b487950 EFLAGS: 00050246 [ 242.676370][ T9254] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000008 [ 242.676378][ T9254] RDX: fffff52001690f43 RSI: 0000000000000000 RDI: ffffc9000b487a10 [ 242.676387][ T9254] RBP: 0000000000000008 R08: 0000000000000001 R09: fffff52001690f42 [ 242.676395][ T9254] R10: ffffc9000b487a17 R11: 0000000000000000 R12: 0000000000000000 [ 242.676403][ T9254] R13: ffffc9000b487a10 R14: ffffffff896010b0 R15: ffff888031119bc0 [ 242.676413][ T9254] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 242.676441][ T9254] _copy_from_user+0x98/0xd0 [ 242.676461][ T9254] sctp_getsockopt_local_addrs+0x106/0xcd0 [ 242.676487][ T9254] ? __pfx_sctp_getsockopt_local_addrs+0x10/0x10 [ 242.676508][ T9254] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 242.676531][ T9254] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 242.676551][ T9254] ? __local_bh_enable_ip+0xa4/0x120 [ 242.676569][ T9254] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 242.676586][ T9254] sctp_getsockopt+0x124f/0x69b0 [ 242.676605][ T9254] ? __futex_wait+0x24c/0x2f0 [ 242.676628][ T9254] ? __pfx_sctp_getsockopt+0x10/0x10 [ 242.676653][ T9254] ? __lock_acquire+0xb97/0x1ce0 [ 242.676685][ T9254] ? find_held_lock+0x2b/0x80 [ 242.676698][ T9254] ? __might_fault+0xe3/0x190 [ 242.676714][ T9254] ? __might_fault+0xe3/0x190 [ 242.676727][ T9254] ? __might_fault+0x13b/0x190 [ 242.676750][ T9254] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 242.676767][ T9254] do_sock_getsockopt+0x34d/0x440 [ 242.676787][ T9254] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 242.676804][ T9254] ? __fget_files+0x204/0x3c0 [ 242.676829][ T9254] __sys_getsockopt+0x123/0x1b0 [ 242.676848][ T9254] __x64_sys_getsockopt+0xbd/0x160 [ 242.676870][ T9254] ? do_syscall_64+0x91/0x490 [ 242.676886][ T9254] ? lockdep_hardirqs_on+0x7c/0x110 [ 242.676901][ T9254] do_syscall_64+0xcd/0x490 [ 242.676928][ T9254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.676943][ T9254] RIP: 0033:0x7f4bf098ebe9 [ 242.676956][ T9254] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 242.676969][ T9254] RSP: 002b:00007f4bf18da038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 242.676983][ T9254] RAX: ffffffffffffffda RBX: 00007f4bf0bb5fa0 RCX: 00007f4bf098ebe9 [ 242.676993][ T9254] RDX: 000000000000006d RSI: 0000000000000084 RDI: 0000000000000003 [ 242.677001][ T9254] RBP: 00007f4bf0a11e19 R08: 0000200000000280 R09: 0000000000000000 [ 242.677010][ T9254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 242.677018][ T9254] R13: 00007f4bf0bb6038 R14: 00007f4bf0bb5fa0 R15: 00007fff9d2e1b78 [ 242.677038][ T9254] [ 243.953977][ T9262] netlink: 334 bytes leftover after parsing attributes in process `syz.0.1268'. [ 243.995607][ T9264] netlink: 330 bytes leftover after parsing attributes in process `syz.1.1269'. [ 244.347628][ T5864] Bluetooth: hci2: unexpected event 0x3e length: 726 > 260 [ 244.347656][ T5864] Bluetooth: hci2: unexpected subevent 0x0d length: 725 > 260 [ 244.369006][ T5864] Bluetooth: hci2: Unknown advertising packet type: 0x7f [ 244.369054][ T5864] Bluetooth: hci2: adv larger than maximum supported [ 244.377593][ T5864] Bluetooth: hci2: adv larger than maximum supported [ 244.384557][ T5864] Bluetooth: hci2: Malformed LE Event: 0x0d [ 244.606543][ T9277] FAULT_INJECTION: forcing a failure. [ 244.606543][ T9277] name failslab, interval 1, probability 0, space 0, times 0 [ 244.632386][ T9277] CPU: 1 UID: 0 PID: 9277 Comm: syz.1.1275 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) [ 244.632412][ T9277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 244.632421][ T9277] Call Trace: [ 244.632427][ T9277] [ 244.632433][ T9277] dump_stack_lvl+0x16c/0x1f0 [ 244.632453][ T9277] should_fail_ex+0x512/0x640 [ 244.632470][ T9277] ? __kmalloc_noprof+0xbf/0x510 [ 244.632489][ T9277] ? __seq_open_private+0x22/0xd0 [ 244.632536][ T9277] should_failslab+0xc2/0x120 [ 244.632556][ T9277] __kmalloc_noprof+0xd2/0x510 [ 244.632572][ T9277] ? apparmor_file_open+0x1a1/0x9c0 [ 244.632596][ T9277] ? do_raw_spin_lock+0x12c/0x2b0 [ 244.632629][ T9277] __seq_open_private+0x22/0xd0 [ 244.632651][ T9277] sysvipc_proc_open+0x29/0x2d0 [ 244.632669][ T9277] ? __pfx_sysvipc_proc_open+0x10/0x10 [ 244.632687][ T9277] proc_reg_open+0x134/0x5f0 [ 244.632706][ T9277] do_dentry_open+0x97f/0x1530 [ 244.632724][ T9277] ? __pfx_proc_reg_open+0x10/0x10 [ 244.632745][ T9277] vfs_open+0x82/0x3f0 [ 244.632768][ T9277] path_openat+0x1de4/0x2cb0 [ 244.632790][ T9277] ? __pfx_path_openat+0x10/0x10 [ 244.632811][ T9277] do_filp_open+0x20b/0x470 [ 244.632828][ T9277] ? __pfx_do_filp_open+0x10/0x10 [ 244.632857][ T9277] ? alloc_fd+0x471/0x7d0 [ 244.632876][ T9277] do_sys_openat2+0x11b/0x1d0 [ 244.632896][ T9277] ? __pfx_do_sys_openat2+0x10/0x10 [ 244.632923][ T9277] __x64_sys_openat+0x174/0x210 [ 244.632944][ T9277] ? __pfx___x64_sys_openat+0x10/0x10 [ 244.632972][ T9277] do_syscall_64+0xcd/0x490 [ 244.632990][ T9277] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.633005][ T9277] RIP: 0033:0x7f660358ebe9 [ 244.633017][ T9277] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 244.633030][ T9277] RSP: 002b:00007f66017f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 244.633044][ T9277] RAX: ffffffffffffffda RBX: 00007f66037b5fa0 RCX: 00007f660358ebe9 [ 244.633054][ T9277] RDX: 0000000000040000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 244.633063][ T9277] RBP: 00007f6603611e19 R08: 0000000000000000 R09: 0000000000000000 [ 244.633072][ T9277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 244.633082][ T9277] R13: 00007f66037b6038 R14: 00007f66037b5fa0 R15: 00007ffd09388158 [ 244.633101][ T9277] [ 245.401731][ T9283] netlink: 338 bytes leftover after parsing attributes in process `syz.0.1277'. [ 248.982400][ T9360] netlink: 26 bytes leftover after parsing attributes in process `syz.2.1307'. [ 249.052542][ T9362] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1310'. [ 249.086441][ T9360] openvswitch: netlink: IP tunnel dst address not specified [ 249.613480][ T9378] netlink: 'syz.0.1313': attribute type 2 has an invalid length. [ 249.733908][ T9381] netlink: 'syz.0.1313': attribute type 2 has an invalid length. [ 250.595205][ T9403] [U]  [ 250.598216][ T9403] [U] [ 250.600916][ T9403] [U] [ 250.603606][ T9403] [U] [ 250.665976][ T9403] [U] [ 250.668807][ T9403] [U] [ 250.671615][ T9403] [U] [ 250.674475][ T9403] [U] [ 250.736678][ T9406] [U] [ 251.896339][ T9425] netlink: 'syz.0.1336': attribute type 1 has an invalid length. [ 252.370256][ T9434] sd 0:0:1:0: device reset [ 252.601587][ T9441] netlink: 334 bytes leftover after parsing attributes in process `syz.2.1343'. [ 253.228135][ T9449] FAULT_INJECTION: forcing a failure. [ 253.228135][ T9449] name failslab, interval 1, probability 0, space 0, times 0 [ 253.403645][ T9449] CPU: 1 UID: 0 PID: 9449 Comm: syz.3.1347 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) [ 253.403670][ T9449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 253.403680][ T9449] Call Trace: [ 253.403685][ T9449] [ 253.403691][ T9449] dump_stack_lvl+0x16c/0x1f0 [ 253.403712][ T9449] should_fail_ex+0x512/0x640 [ 253.403730][ T9449] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 253.403749][ T9449] should_failslab+0xc2/0x120 [ 253.403769][ T9449] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 253.403784][ T9449] ? __proc_create+0xc3/0x8e0 [ 253.403813][ T9449] ? __proc_create+0x2ce/0x8e0 [ 253.403839][ T9449] __proc_create+0x2ce/0x8e0 [ 253.403861][ T9449] ? __pfx___proc_create+0x10/0x10 [ 253.403884][ T9449] ? mark_held_locks+0x49/0x80 [ 253.403905][ T9449] proc_create_reg+0x7d/0x180 [ 253.403938][ T9449] proc_create_net_data+0x8e/0x1c0 [ 253.403960][ T9449] ? __pfx_proc_create_net_data+0x10/0x10 [ 253.403982][ T9449] ? __pfx___netlink_kernel_create+0x10/0x10 [ 253.403999][ T9449] ? fib4_semantics_init+0x25/0x100 [ 253.404025][ T9449] fib_proc_init+0x58/0x1b0 [ 253.404040][ T9449] fib_net_init+0x2af/0x3f0 [ 253.404055][ T9449] ? __pfx___register_sysctl_table+0x10/0x10 [ 253.404075][ T9449] ? __pfx_fib_net_init+0x10/0x10 [ 253.404091][ T9449] ? lockdep_init_map_type+0x5c/0x280 [ 253.404110][ T9449] ? __pfx_nl_fib_input+0x10/0x10 [ 253.404128][ T9449] ? devinet_init_net+0x5c2/0x910 [ 253.404148][ T9449] ? __pfx_fib_net_init+0x10/0x10 [ 253.404163][ T9449] ops_init+0x1df/0x5f0 [ 253.404184][ T9449] setup_net+0x10f/0x380 [ 253.404199][ T9449] ? lockdep_init_map_type+0x5c/0x280 [ 253.404217][ T9449] ? __pfx_setup_net+0x10/0x10 [ 253.404233][ T9449] ? debug_mutex_init+0x37/0x70 [ 253.404249][ T9449] copy_net_ns+0x2a6/0x5f0 [ 253.404269][ T9449] create_new_namespaces+0x3ea/0xa90 [ 253.404290][ T9449] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 253.404308][ T9449] ksys_unshare+0x45b/0xa40 [ 253.404328][ T9449] ? __pfx_ksys_unshare+0x10/0x10 [ 253.404347][ T9449] ? xfd_validate_state+0x61/0x180 [ 253.404373][ T9449] __x64_sys_unshare+0x31/0x40 [ 253.404391][ T9449] do_syscall_64+0xcd/0x490 [ 253.404408][ T9449] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.404423][ T9449] RIP: 0033:0x7fb3bab8ebe9 [ 253.404435][ T9449] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 253.404448][ T9449] RSP: 002b:00007fb3bb948038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 253.404462][ T9449] RAX: ffffffffffffffda RBX: 00007fb3badb5fa0 RCX: 00007fb3bab8ebe9 [ 253.404471][ T9449] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 253.404480][ T9449] RBP: 00007fb3bac11e19 R08: 0000000000000000 R09: 0000000000000000 [ 253.404489][ T9449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 253.404497][ T9449] R13: 00007fb3badb6038 R14: 00007fb3badb5fa0 R15: 00007fff58cd8bc8 [ 253.404516][ T9449] [ 255.504241][ T9481] netlink: 334 bytes leftover after parsing attributes in process `syz.0.1359'. [ 256.226496][ T9498] netlink: 330 bytes leftover after parsing attributes in process `syz.0.1365'. [ 256.370491][ T9498] : renamed from bond0 (while UP) [ 257.066928][ T9515] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1372'. [ 257.148841][ T9517] FAULT_INJECTION: forcing a failure. [ 257.148841][ T9517] name failslab, interval 1, probability 0, space 0, times 0 [ 257.182851][ T9515] veth0_vlan: entered allmulticast mode [ 257.195921][ T9517] CPU: 1 UID: 0 PID: 9517 Comm: syz.1.1374 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) [ 257.195945][ T9517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 257.195955][ T9517] Call Trace: [ 257.195961][ T9517] [ 257.195967][ T9517] dump_stack_lvl+0x16c/0x1f0 [ 257.195989][ T9517] should_fail_ex+0x512/0x640 [ 257.196006][ T9517] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 257.196024][ T9517] should_failslab+0xc2/0x120 [ 257.196042][ T9517] __kmalloc_cache_noprof+0x6a/0x3e0 [ 257.196057][ T9517] ? single_open+0x4d/0x1f0 [ 257.196079][ T9517] ? __pfx_show_smaps_rollup+0x10/0x10 [ 257.196102][ T9517] single_open+0x4d/0x1f0 [ 257.196122][ T9517] smaps_rollup_open+0x6f/0x170 [ 257.196139][ T9517] do_dentry_open+0x97f/0x1530 [ 257.196158][ T9517] ? __pfx_smaps_rollup_open+0x10/0x10 [ 257.196177][ T9517] vfs_open+0x82/0x3f0 [ 257.196199][ T9517] path_openat+0x1de4/0x2cb0 [ 257.196222][ T9517] ? __pfx_path_openat+0x10/0x10 [ 257.196243][ T9517] do_filp_open+0x20b/0x470 [ 257.196259][ T9517] ? __pfx_do_filp_open+0x10/0x10 [ 257.196281][ T9517] ? __pfx_kfree_link+0x10/0x10 [ 257.196307][ T9517] ? alloc_fd+0x471/0x7d0 [ 257.196326][ T9517] do_sys_openat2+0x11b/0x1d0 [ 257.196346][ T9517] ? __pfx_do_sys_openat2+0x10/0x10 [ 257.196373][ T9517] __x64_sys_openat+0x174/0x210 [ 257.196395][ T9517] ? __pfx___x64_sys_openat+0x10/0x10 [ 257.196422][ T9517] do_syscall_64+0xcd/0x490 [ 257.196440][ T9517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.196454][ T9517] RIP: 0033:0x7f660358ebe9 [ 257.196466][ T9517] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 257.196480][ T9517] RSP: 002b:00007f66017f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 257.196495][ T9517] RAX: ffffffffffffffda RBX: 00007f66037b5fa0 RCX: 00007f660358ebe9 [ 257.196504][ T9517] RDX: 00000000001a3000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 257.196513][ T9517] RBP: 00007f6603611e19 R08: 0000000000000000 R09: 0000000000000000 [ 257.196521][ T9517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 257.196529][ T9517] R13: 00007f66037b6038 R14: 00007f66037b5fa0 R15: 00007ffd09388158 [ 257.196548][ T9517] [ 258.219599][ T9530] syz.2.1379: vmalloc error: size 16384, failed to allocate pages, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 258.277437][ T9530] CPU: 1 UID: 0 PID: 9530 Comm: syz.2.1379 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) [ 258.277463][ T9530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 258.277472][ T9530] Call Trace: [ 258.277477][ T9530] [ 258.277483][ T9530] dump_stack_lvl+0x16c/0x1f0 [ 258.277505][ T9530] warn_alloc+0x248/0x3a0 [ 258.277523][ T9530] ? __pfx_warn_alloc+0x10/0x10 [ 258.277541][ T9530] ? alloc_pages_mpol+0x25a/0x550 [ 258.277562][ T9530] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 258.277589][ T9530] __vmalloc_node_range_noprof+0x11d4/0x14b0 [ 258.277610][ T9530] ? kernel_clone+0xfc/0x930 [ 258.277632][ T9530] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 258.277652][ T9530] ? kernel_clone+0xfc/0x930 [ 258.277668][ T9530] __vmalloc_node_noprof+0xad/0xf0 [ 258.277681][ T9530] ? kernel_clone+0xfc/0x930 [ 258.277699][ T9530] copy_process+0x2c70/0x7690 [ 258.277717][ T9530] ? __pfx___futex_wait+0x10/0x10 [ 258.277750][ T9530] ? __pfx_copy_process+0x10/0x10 [ 258.277767][ T9530] ? futex_private_hash_put+0x176/0x300 [ 258.277787][ T9530] ? futex_private_hash_put+0x18a/0x300 [ 258.277806][ T9530] kernel_clone+0xfc/0x930 [ 258.277827][ T9530] ? __pfx_kernel_clone+0x10/0x10 [ 258.277857][ T9530] ? 0xffffffffff600000 [ 258.277867][ T9530] __do_sys_clone+0xce/0x120 [ 258.277885][ T9530] ? __pfx___do_sys_clone+0x10/0x10 [ 258.277904][ T9530] ? 0xffffffffff600000 [ 258.277920][ T9530] ? xfd_validate_state+0x61/0x180 [ 258.277939][ T9530] ? __pfx_do_writev+0x10/0x10 [ 258.277960][ T9530] do_syscall_64+0xcd/0x490 [ 258.277978][ T9530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.277992][ T9530] RIP: 0033:0x7fdd55d8ebe9 [ 258.278004][ T9530] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 258.278018][ T9530] RSP: 002b:00007fdd56cbc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 258.278032][ T9530] RAX: ffffffffffffffda RBX: 00007fdd55fb5fa0 RCX: 00007fdd55d8ebe9 [ 258.278042][ T9530] RDX: ffffffffffffffff RSI: 0000000000000005 RDI: 0000000000008001 [ 258.278051][ T9530] RBP: 00007fdd55e11e19 R08: 0000000000000006 R09: 0000000000000000 [ 258.278059][ T9530] R10: ffffffffff600000 R11: 0000000000000246 R12: 0000000000000000 [ 258.278068][ T9530] R13: 00007fdd55fb6038 R14: 00007fdd55fb5fa0 R15: 00007ffd680ce158 [ 258.278083][ T9530] ? 0xffffffffff600000 [ 258.278100][ T9530] [ 258.278107][ T9530] Mem-Info: [ 259.310317][ T9530] active_anon:48313 inactive_anon:0 isolated_anon:0 [ 259.310317][ T9530] active_file:15754 inactive_file:44674 isolated_file:0 [ 259.310317][ T9530] unevictable:768 dirty:339 writeback:0 [ 259.310317][ T9530] slab_reclaimable:10443 slab_unreclaimable:93215 [ 259.310317][ T9530] mapped:33456 shmem:41042 pagetables:1142 [ 259.310317][ T9530] sec_pagetables:0 bounce:0 [ 259.310317][ T9530] kernel_misc_reclaimable:0 [ 259.310317][ T9530] free:1277601 free_pcp:18113 free_cma:0 [ 259.536954][ T9530] Node 0 active_anon:189352kB inactive_anon:0kB active_file:63016kB inactive_file:178496kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:126720kB dirty:1356kB writeback:0kB shmem:158732kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11440kB pagetables:4424kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 259.723725][ T9530] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 259.883876][ T9530] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 259.942602][ T9545] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1385'. [ 260.002559][ T9530] lowmem_reserve[]: 0 2480 2481 2481 2481 [ 260.023167][ T9545] ipvlan0: entered allmulticast mode [ 260.030738][ T9530] Node 0 DMA32 free:1222848kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:180048kB inactive_anon:0kB active_file:63016kB inactive_file:177184kB unevictable:1536kB writepending:1356kB present:3129332kB managed:2539664kB mlocked:0kB bounce:0kB free_pcp:52960kB local_pcp:52960kB free_cma:0kB [ 260.183677][ T9530] lowmem_reserve[]: 0 0 1 1 1 [ 260.204845][ T9530] Node 0 Normal free:20kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1312kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 260.348020][ T9530] lowmem_reserve[]: 0 0 0 0 0 [ 260.371048][ T9530] Node 1 Normal free:3883440kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:21252kB local_pcp:21252kB free_cma:0kB [ 260.497723][ T9530] lowmem_reserve[]: 0 0 0 0 0 [ 260.518107][ T9530] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 260.589194][ T9530] Node 0 DMA32: 2946*4kB (UM) 1859*8kB (UM) 974*16kB (UME) 514*32kB (UME) 210*64kB (UME) 73*128kB (UME) 31*256kB (UM) 19*512kB (UM) 10*1024kB (UM) 4*2048kB (ME) 273*4096kB (UM) = 1235776kB [ 260.684153][ T9530] Node 0 Normal: 1*4kB (M) 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB [ 260.777180][ T9530] Node 1 Normal: 216*4kB (UM) 54*8kB (UE) 50*16kB (UME) 156*32kB (UME) 56*64kB (UME) 10*128kB (UE) 1*256kB (U) 1*512kB (U) 2*1024kB (ME) 3*2048kB (UME) 943*4096kB (M) = 3883440kB [ 260.854994][ T9530] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 260.916302][ T9530] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 260.970293][ T9530] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 261.028026][ T9530] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 261.105837][ T9530] 96242 total pagecache pages [ 261.110692][ T9530] 10 pages in swap cache [ 261.115005][ T9530] Free swap = 124956kB [ 261.168093][ T9530] Total swap = 124996kB [ 261.172296][ T9530] 2097051 pages RAM [ 261.202132][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.209758][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.236943][ T9530] 0 pages HighMem/MovableOnly [ 261.277318][ T9530] 430173 pages reserved [ 261.294720][ T9530] 0 pages cma reserved [ 261.623002][ T9577] FAULT_INJECTION: forcing a failure. [ 261.623002][ T9577] name failslab, interval 1, probability 0, space 0, times 0 [ 261.710010][ T9577] CPU: 1 UID: 0 PID: 9577 Comm: syz.0.1400 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) [ 261.710034][ T9577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 261.710044][ T9577] Call Trace: [ 261.710049][ T9577] [ 261.710056][ T9577] dump_stack_lvl+0x16c/0x1f0 [ 261.710077][ T9577] should_fail_ex+0x512/0x640 [ 261.710096][ T9577] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 261.710116][ T9577] should_failslab+0xc2/0x120 [ 261.710136][ T9577] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 261.710153][ T9577] ? __d_alloc+0x32/0xae0 [ 261.710173][ T9577] __d_alloc+0x32/0xae0 [ 261.710194][ T9577] ? file_init_path+0x4fe/0x760 [ 261.710217][ T9577] d_alloc_pseudo+0x1c/0xc0 [ 261.710238][ T9577] alloc_file_pseudo+0xcf/0x230 [ 261.710260][ T9577] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 261.710281][ T9577] ? __pfx_unix_socketpair+0x10/0x10 [ 261.710299][ T9577] sock_alloc_file+0x50/0x210 [ 261.710317][ T9577] __sys_socketpair+0x34e/0x5a0 [ 261.710339][ T9577] ? __pfx___sys_socketpair+0x10/0x10 [ 261.710361][ T9577] ? xfd_validate_state+0x61/0x180 [ 261.710380][ T9577] ? __pfx_do_writev+0x10/0x10 [ 261.710399][ T9577] __x64_sys_socketpair+0x96/0x100 [ 261.710418][ T9577] ? lockdep_hardirqs_on+0x7c/0x110 [ 261.710432][ T9577] do_syscall_64+0xcd/0x490 [ 261.710450][ T9577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.710464][ T9577] RIP: 0033:0x7f4bf098ebe9 [ 261.710476][ T9577] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 261.710490][ T9577] RSP: 002b:00007f4bf18da038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 261.710503][ T9577] RAX: ffffffffffffffda RBX: 00007f4bf0bb5fa0 RCX: 00007f4bf098ebe9 [ 261.710513][ T9577] RDX: 8000000000000000 RSI: 0000000000000005 RDI: 0000000000000001 [ 261.710521][ T9577] RBP: 00007f4bf0a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 261.710530][ T9577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 261.710539][ T9577] R13: 00007f4bf0bb6038 R14: 00007f4bf0bb5fa0 R15: 00007fff9d2e1b78 [ 261.710558][ T9577] [ 261.935390][ T9581] FAULT_INJECTION: forcing a failure. [ 261.935390][ T9581] name failslab, interval 1, probability 0, space 0, times 0 [ 261.949957][ T9581] CPU: 1 UID: 0 PID: 9581 Comm: syz.1.1402 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) [ 261.949982][ T9581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 261.949991][ T9581] Call Trace: [ 261.949996][ T9581] [ 261.950002][ T9581] dump_stack_lvl+0x16c/0x1f0 [ 261.950023][ T9581] should_fail_ex+0x512/0x640 [ 261.950041][ T9581] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 261.950062][ T9581] should_failslab+0xc2/0x120 [ 261.950081][ T9581] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 261.950100][ T9581] ? kstrdup_const+0x63/0x80 [ 261.950120][ T9581] kstrdup+0x53/0x100 [ 261.950137][ T9581] kstrdup_const+0x63/0x80 [ 261.950154][ T9581] alloc_vfsmnt+0xea/0x6b0 [ 261.950173][ T9581] clone_mnt+0x6d/0xbf0 [ 261.950185][ T9581] ? copy_mnt_ns+0x1a9/0xac0 [ 261.950204][ T9581] copy_tree+0x31d/0xbd0 [ 261.950225][ T9581] copy_mnt_ns+0x1a9/0xac0 [ 261.950246][ T9581] ? trace_kmem_cache_alloc+0x28/0xc0 [ 261.950268][ T9581] ? create_new_namespaces+0x30/0xa90 [ 261.950287][ T9581] create_new_namespaces+0xd3/0xa90 [ 261.950302][ T9581] ? bpf_lsm_capable+0x9/0x10 [ 261.950315][ T9581] ? security_capable+0x7e/0x260 [ 261.950338][ T9581] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 261.950355][ T9581] ksys_unshare+0x45b/0xa40 [ 261.950375][ T9581] ? __pfx_ksys_unshare+0x10/0x10 [ 261.950393][ T9581] ? xfd_validate_state+0x61/0x180 [ 261.950419][ T9581] __x64_sys_unshare+0x31/0x40 [ 261.950437][ T9581] do_syscall_64+0xcd/0x490 [ 261.950455][ T9581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.950470][ T9581] RIP: 0033:0x7f660358ebe9 [ 261.950483][ T9581] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 261.950497][ T9581] RSP: 002b:00007f66017f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 261.950520][ T9581] RAX: ffffffffffffffda RBX: 00007f66037b5fa0 RCX: 00007f660358ebe9 [ 261.950530][ T9581] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000020000 [ 261.950538][ T9581] RBP: 00007f6603611e19 R08: 0000000000000000 R09: 0000000000000000 [ 261.950547][ T9581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 261.950556][ T9581] R13: 00007f66037b6038 R14: 00007f66037b5fa0 R15: 00007ffd09388158 [ 261.950575][ T9581] [ 262.570563][ T9586] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1404'. [ 263.200609][ T9598] FAULT_INJECTION: forcing a failure. [ 263.200609][ T9598] name failslab, interval 1, probability 0, space 0, times 0 [ 263.330760][ T9598] CPU: 1 UID: 0 PID: 9598 Comm: syz.3.1410 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) [ 263.330784][ T9598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 263.330793][ T9598] Call Trace: [ 263.330798][ T9598] [ 263.330804][ T9598] dump_stack_lvl+0x16c/0x1f0 [ 263.330825][ T9598] should_fail_ex+0x512/0x640 [ 263.330844][ T9598] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 263.330866][ T9598] should_failslab+0xc2/0x120 [ 263.330885][ T9598] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 263.330902][ T9598] ? __kernfs_new_node+0xd2/0x8e0 [ 263.330923][ T9598] __kernfs_new_node+0xd2/0x8e0 [ 263.330943][ T9598] ? __pfx___kernfs_new_node+0x10/0x10 [ 263.330965][ T9598] ? find_held_lock+0x2b/0x80 [ 263.330980][ T9598] ? kernfs_root+0xee/0x2a0 [ 263.331001][ T9598] kernfs_new_node+0x13c/0x1e0 [ 263.331024][ T9598] __kernfs_create_file+0x53/0x350 [ 263.331040][ T9598] sysfs_add_file_mode_ns+0x207/0x3c0 [ 263.331081][ T9598] internal_create_group+0x578/0xf30 [ 263.331106][ T9598] ? __pfx_internal_create_group+0x10/0x10 [ 263.331128][ T9598] ? kernfs_create_link+0x1bd/0x240 [ 263.331146][ T9598] internal_create_groups+0x9d/0x150 [ 263.331167][ T9598] device_add+0xf30/0x1aa0 [ 263.331190][ T9598] ? __pfx_device_add+0x10/0x10 [ 263.331209][ T9598] ? lockdep_init_map_type+0x5c/0x280 [ 263.331227][ T9598] ? __init_waitqueue_head+0xca/0x150 [ 263.331254][ T9598] netdev_register_kobject+0x1a9/0x3d0 [ 263.331276][ T9598] register_netdevice+0x13dc/0x2270 [ 263.331297][ T9598] ? __pfx_register_netdevice+0x10/0x10 [ 263.331319][ T9598] ? __pfx_loopback_net_init+0x10/0x10 [ 263.331340][ T9598] register_netdev+0x34/0x50 [ 263.331357][ T9598] loopback_net_init+0x7a/0x170 [ 263.331378][ T9598] ? __pfx_loopback_net_init+0x10/0x10 [ 263.331399][ T9598] ops_init+0x1df/0x5f0 [ 263.331425][ T9598] setup_net+0x10f/0x380 [ 263.331439][ T9598] ? lockdep_init_map_type+0x5c/0x280 [ 263.331459][ T9598] ? __pfx_setup_net+0x10/0x10 [ 263.331477][ T9598] ? debug_mutex_init+0x37/0x70 [ 263.331494][ T9598] copy_net_ns+0x2a6/0x5f0 [ 263.331514][ T9598] create_new_namespaces+0x3ea/0xa90 [ 263.331537][ T9598] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 263.331554][ T9598] ksys_unshare+0x45b/0xa40 [ 263.331574][ T9598] ? __pfx_ksys_unshare+0x10/0x10 [ 263.331593][ T9598] ? xfd_validate_state+0x61/0x180 [ 263.331619][ T9598] __x64_sys_unshare+0x31/0x40 [ 263.331637][ T9598] do_syscall_64+0xcd/0x490 [ 263.331658][ T9598] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.331673][ T9598] RIP: 0033:0x7fb3bab8ebe9 [ 263.331686][ T9598] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 263.331699][ T9598] RSP: 002b:00007fb3bb948038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 263.331713][ T9598] RAX: ffffffffffffffda RBX: 00007fb3badb5fa0 RCX: 00007fb3bab8ebe9 [ 263.331723][ T9598] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 263.331733][ T9598] RBP: 00007fb3bac11e19 R08: 0000000000000000 R09: 0000000000000000 [ 263.331741][ T9598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 263.331750][ T9598] R13: 00007fb3badb6038 R14: 00007fb3badb5fa0 R15: 00007fff58cd8bc8 [ 263.331770][ T9598] [ 264.781188][ T9621] netlink: 330 bytes leftover after parsing attributes in process `syz.2.1414'. [ 265.274931][ T9630] FAULT_INJECTION: forcing a failure. [ 265.274931][ T9630] name failslab, interval 1, probability 0, space 0, times 0 [ 265.395671][ T9630] CPU: 1 UID: 0 PID: 9630 Comm: syz.3.1423 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) [ 265.395696][ T9630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 265.395706][ T9630] Call Trace: [ 265.395713][ T9630] [ 265.395720][ T9630] dump_stack_lvl+0x16c/0x1f0 [ 265.395741][ T9630] should_fail_ex+0x512/0x640 [ 265.395763][ T9630] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 265.395782][ T9630] should_failslab+0xc2/0x120 [ 265.395801][ T9630] __kmalloc_cache_noprof+0x6a/0x3e0 [ 265.395816][ T9630] ? single_open+0x4d/0x1f0 [ 265.395838][ T9630] ? __pfx_blk_mq_debugfs_show+0x10/0x10 [ 265.395867][ T9630] single_open+0x4d/0x1f0 [ 265.395888][ T9630] blk_mq_debugfs_open+0xde/0x1b0 [ 265.395903][ T9630] ? __pfx_blk_mq_debugfs_open+0x10/0x10 [ 265.395916][ T9630] full_proxy_open_regular+0x1b9/0x360 [ 265.395940][ T9630] do_dentry_open+0x97f/0x1530 [ 265.395958][ T9630] ? __pfx_full_proxy_open_regular+0x10/0x10 [ 265.395981][ T9630] vfs_open+0x82/0x3f0 [ 265.396003][ T9630] path_openat+0x1de4/0x2cb0 [ 265.396025][ T9630] ? __pfx_path_openat+0x10/0x10 [ 265.396046][ T9630] do_filp_open+0x20b/0x470 [ 265.396063][ T9630] ? __pfx_do_filp_open+0x10/0x10 [ 265.396092][ T9630] ? alloc_fd+0x471/0x7d0 [ 265.396111][ T9630] do_sys_openat2+0x11b/0x1d0 [ 265.396131][ T9630] ? __pfx_do_sys_openat2+0x10/0x10 [ 265.396159][ T9630] __x64_sys_openat+0x174/0x210 [ 265.396180][ T9630] ? __pfx___x64_sys_openat+0x10/0x10 [ 265.396208][ T9630] do_syscall_64+0xcd/0x490 [ 265.396225][ T9630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.396240][ T9630] RIP: 0033:0x7fb3bab8ebe9 [ 265.396261][ T9630] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 265.396275][ T9630] RSP: 002b:00007fb3bb948038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 265.396289][ T9630] RAX: ffffffffffffffda RBX: 00007fb3badb5fa0 RCX: 00007fb3bab8ebe9 [ 265.396299][ T9630] RDX: 0000000000000002 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 265.396308][ T9630] RBP: 00007fb3bac11e19 R08: 0000000000000000 R09: 0000000000000000 [ 265.396317][ T9630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 265.396325][ T9630] R13: 00007fb3badb6038 R14: 00007fb3badb5fa0 R15: 00007fff58cd8bc8 [ 265.396344][ T9630] [ 265.975962][ T9636] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 266.301217][ T9652] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1435'. [ 266.437927][ T9654] FAULT_INJECTION: forcing a failure. [ 266.437927][ T9654] name failslab, interval 1, probability 0, space 0, times 0 [ 266.515789][ T9654] CPU: 1 UID: 0 PID: 9654 Comm: syz.2.1436 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) [ 266.515813][ T9654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 266.515822][ T9654] Call Trace: [ 266.515828][ T9654] [ 266.515834][ T9654] dump_stack_lvl+0x16c/0x1f0 [ 266.515855][ T9654] should_fail_ex+0x512/0x640 [ 266.515874][ T9654] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 266.515894][ T9654] should_failslab+0xc2/0x120 [ 266.515913][ T9654] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 266.515929][ T9654] ? do_futex+0x122/0x350 [ 266.515946][ T9654] ? __do_sys_getcwd+0xe0/0x930 [ 266.515967][ T9654] __do_sys_getcwd+0xe0/0x930 [ 266.516008][ T9654] ? __x64_sys_futex+0x1e0/0x4c0 [ 266.516025][ T9654] ? __x64_sys_futex+0x1e9/0x4c0 [ 266.516043][ T9654] ? __pfx___do_sys_getcwd+0x10/0x10 [ 266.516065][ T9654] ? xfd_validate_state+0x61/0x180 [ 266.516093][ T9654] ? __pfx_ksys_write+0x10/0x10 [ 266.516116][ T9654] do_syscall_64+0xcd/0x490 [ 266.516135][ T9654] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.516150][ T9654] RIP: 0033:0x7fdd55d8ebe9 [ 266.516161][ T9654] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 266.516175][ T9654] RSP: 002b:00007fdd56cbc038 EFLAGS: 00000246 ORIG_RAX: 000000000000004f [ 266.516189][ T9654] RAX: ffffffffffffffda RBX: 00007fdd55fb5fa0 RCX: 00007fdd55d8ebe9 [ 266.516198][ T9654] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000000 [ 266.516206][ T9654] RBP: 00007fdd55e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 266.516215][ T9654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 266.516223][ T9654] R13: 00007fdd55fb6038 R14: 00007fdd55fb5fa0 R15: 00007ffd680ce158 [ 266.516241][ T9654] [ 267.349380][ T1340] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.521597][ T1340] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.615321][ T1340] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.788402][ T1340] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.371355][ T1340] bridge_slave_1: left allmulticast mode [ 268.398513][ T1340] bridge_slave_1: left promiscuous mode [ 268.404359][ T1340] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.539275][ T1340] bridge_slave_0: left allmulticast mode [ 268.545134][ T1340] bridge_slave_0: left promiscuous mode [ 268.628562][ T1340] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.824229][ T5185] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 268.836604][ T5185] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 268.849172][ T5185] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 268.862252][ T5185] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 268.871232][ T5185] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 269.124247][ T9696] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1450'. [ 269.162945][ T9696] netlink: 354 bytes leftover after parsing attributes in process `syz.3.1450'. [ 269.643829][ T9708] netlink: 326 bytes leftover after parsing attributes in process `syz.0.1452'. [ 269.697498][ T9710] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1454'. [ 269.873670][ T1340] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 269.895186][ T1340] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 269.919110][ T1340] bond0 (unregistering): Released all slaves [ 269.947572][ T9710] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 269.975821][ T9710] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 270.028704][ T9710] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 270.065718][ T9710] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 270.645213][ T9724] netlink: 146 bytes leftover after parsing attributes in process `syz.2.1459'. [ 270.666609][ T1340] hsr_slave_0: left promiscuous mode [ 270.693650][ T1340] hsr_slave_1: left promiscuous mode [ 270.712365][ T1340] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 270.788791][ T1340] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 270.853745][ T1340] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 270.910047][ T1340] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 270.955934][ T5864] Bluetooth: hci1: command tx timeout [ 270.992439][ T1340] veth1_macvtap: left promiscuous mode [ 271.041364][ T1340] veth0_macvtap: left promiscuous mode [ 271.079562][ T1340] veth1_vlan: left promiscuous mode [ 271.084970][ T1340] veth0_vlan: left promiscuous mode [ 272.424925][ T1340] team0 (unregistering): Port device team_slave_1 removed [ 272.505074][ T1340] team0 (unregistering): Port device team_slave_0 removed [ 272.750629][ T9765] netlink: 'syz.2.1470': attribute type 1 has an invalid length. [ 273.038310][ T5864] Bluetooth: hci1: command tx timeout [ 273.794654][ T9773] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1471'. [ 274.121164][ T9689] chnl_net:caif_netlink_parms(): no params data found [ 274.599461][ T9794] __vm_enough_memory: pid: 9794, comm: syz.3.1473, bytes: 4398046511104 not enough memory for the allocation [ 274.882791][ T9689] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.912566][ T9689] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.977912][ T9689] bridge_slave_0: entered allmulticast mode [ 275.035964][ T9689] bridge_slave_0: entered promiscuous mode [ 275.082708][ T9689] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.119317][ T5864] Bluetooth: hci1: command tx timeout [ 275.156866][ T9689] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.164180][ T9689] bridge_slave_1: entered allmulticast mode [ 275.238585][ T9689] bridge_slave_1: entered promiscuous mode [ 275.661491][ T9689] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 275.743351][ T9689] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 275.862052][ T9817] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1481'. [ 275.902700][ T9817] netlink: 25 bytes leftover after parsing attributes in process `syz.2.1481'. [ 276.014812][ T9689] team0: Port device team_slave_0 added [ 276.058810][ T9689] team0: Port device team_slave_1 added [ 276.300856][ T9689] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 276.340259][ T9689] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 276.540415][ T9689] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 276.627163][ T9689] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 276.634684][ T9689] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 276.910271][ T9689] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 277.207289][ T5864] Bluetooth: hci1: command tx timeout [ 277.651686][ T9689] hsr_slave_0: entered promiscuous mode [ 277.707568][ T9689] hsr_slave_1: entered promiscuous mode [ 277.714176][ T9689] debugfs: 'hsr0' already exists in 'hsr' [ 277.788203][ T9689] Cannot create hsr debugfs directory [ 278.827914][ T9872] netlink: 334 bytes leftover after parsing attributes in process `syz.3.1496'. [ 279.639269][ T9893] : renamed from gre0 (while UP) [ 280.252706][ T9689] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 280.333896][ T9689] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 280.447517][ T9689] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 280.467463][ T9905] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1503'. [ 280.523929][ T9689] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 280.942403][ T9689] 8021q: adding VLAN 0 to HW filter on device bond0 [ 281.079028][ T9689] 8021q: adding VLAN 0 to HW filter on device team0 [ 281.155997][ T1340] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.163301][ T1340] bridge0: port 1(bridge_slave_0) entered forwarding state [ 281.250988][ T1340] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.258817][ T1340] bridge0: port 2(bridge_slave_1) entered forwarding state [ 281.324481][ T9926] FAULT_INJECTION: forcing a failure. [ 281.324481][ T9926] name fail_futex, interval 1, probability 0, space 0, times 1 [ 281.339090][ T9926] CPU: 1 UID: 0 PID: 9926 Comm: syz.0.1508 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) [ 281.339113][ T9926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 281.339123][ T9926] Call Trace: [ 281.339128][ T9926] [ 281.339136][ T9926] dump_stack_lvl+0x16c/0x1f0 [ 281.339158][ T9926] should_fail_ex+0x512/0x640 [ 281.339179][ T9926] should_fail_futex+0x4c/0x60 [ 281.339201][ T9926] futex_lock_pi_atomic+0x101/0xd50 [ 281.339225][ T9926] futex_lock_pi+0x23f/0x7c0 [ 281.339248][ T9926] ? __pfx_futex_lock_pi+0x10/0x10 [ 281.339266][ T9926] ? __futex_wait+0x24c/0x2f0 [ 281.339300][ T9926] ? futex_private_hash_put+0x18a/0x300 [ 281.339319][ T9926] ? __pfx_futex_wake_mark+0x10/0x10 [ 281.339345][ T9926] ? ksys_write+0x190/0x250 [ 281.339365][ T9926] do_futex+0x11a/0x350 [ 281.339382][ T9926] ? __pfx_do_futex+0x10/0x10 [ 281.339404][ T9926] __x64_sys_futex+0x1e0/0x4c0 [ 281.339423][ T9926] ? fput+0x9b/0xd0 [ 281.339441][ T9926] ? __pfx___x64_sys_futex+0x10/0x10 [ 281.339458][ T9926] ? xfd_validate_state+0x61/0x180 [ 281.339478][ T9926] ? __pfx_ksys_write+0x10/0x10 [ 281.339499][ T9926] do_syscall_64+0xcd/0x490 [ 281.339516][ T9926] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.339530][ T9926] RIP: 0033:0x7f4bf098ebe9 [ 281.339543][ T9926] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 281.339557][ T9926] RSP: 002b:00007f4bf18da038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 281.339571][ T9926] RAX: ffffffffffffffda RBX: 00007f4bf0bb5fa0 RCX: 00007f4bf098ebe9 [ 281.339580][ T9926] RDX: 0000000000000008 RSI: 0000000000000006 RDI: 0000000000000000 [ 281.339588][ T9926] RBP: 00007f4bf0a11e19 R08: 0000000000000000 R09: 000000008000fff2 [ 281.339597][ T9926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 281.339605][ T9926] R13: 00007f4bf0bb6038 R14: 00007f4bf0bb5fa0 R15: 00007fff9d2e1b78 [ 281.339624][ T9926] [ 281.939113][ T9689] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 281.983033][ T9689] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 282.570672][ T9689] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 282.760164][ T9689] veth0_vlan: entered promiscuous mode [ 282.830732][ T9689] veth1_vlan: entered promiscuous mode [ 283.018774][ T9689] veth0_macvtap: entered promiscuous mode [ 283.079323][ T9689] veth1_macvtap: entered promiscuous mode [ 283.121771][ T30] audit: type=1800 audit(1754696864.387:4): pid=9953 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1513" name="dbroot" dev="configfs" ino=25111 res=0 errno=0 [ 283.226847][ T9689] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 283.298716][ T9689] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 283.372780][ T1340] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.439543][ T1340] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.503852][ T1340] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.547747][ T1340] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.780548][ T1340] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 283.850621][ T1340] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 283.860943][ T9964] i2c i2c-0: new_device: Instantiated device card: at 0x01 [ 283.942234][ T9967] netlink: 342 bytes leftover after parsing attributes in process `syz.0.1517'. [ 284.004900][ T1340] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.029657][ T9967] netlink: 342 bytes leftover after parsing attributes in process `syz.0.1517'. [ 284.055405][ T1340] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 285.052636][ T9995] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 285.634693][T10001] netlink: 186 bytes leftover after parsing attributes in process `syz.0.1526'. [ 285.705339][T10001] netlink: 186 bytes leftover after parsing attributes in process `syz.0.1526'. [ 287.644614][T10054] misc userio: The device must be registered before sending interrupts [ 288.741146][T10075] FAULT_INJECTION: forcing a failure. [ 288.741146][T10075] name failslab, interval 1, probability 0, space 0, times 0 [ 288.819971][T10075] CPU: 1 UID: 0 PID: 10075 Comm: syz.0.1542 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) [ 288.819995][T10075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 288.820004][T10075] Call Trace: [ 288.820009][T10075] [ 288.820015][T10075] dump_stack_lvl+0x16c/0x1f0 [ 288.820035][T10075] should_fail_ex+0x512/0x640 [ 288.820053][T10075] ? __kmalloc_noprof+0xbf/0x510 [ 288.820083][T10075] ? get_modalias+0xbb/0x380 [ 288.820107][T10075] should_failslab+0xc2/0x120 [ 288.820128][T10075] __kmalloc_noprof+0xd2/0x510 [ 288.820145][T10075] ? get_modalias+0x20f/0x380 [ 288.820168][T10075] get_modalias+0xbb/0x380 [ 288.820190][T10075] ? __pfx_sys_dmi_modalias_show+0x10/0x10 [ 288.820210][T10075] sys_dmi_modalias_show+0x1f/0xb0 [ 288.820230][T10075] dev_attr_show+0x56/0xe0 [ 288.820250][T10075] ? __pfx_dev_attr_show+0x10/0x10 [ 288.820270][T10075] sysfs_kf_seq_show+0x216/0x3e0 [ 288.820291][T10075] seq_read_iter+0x506/0x12c0 [ 288.820305][T10075] ? __mutex_trylock_common+0xe9/0x250 [ 288.820331][T10075] kernfs_fop_read_iter+0x40f/0x5a0 [ 288.820344][T10075] ? rw_verify_area+0xcf/0x6c0 [ 288.820362][T10075] vfs_read+0x8bc/0xc60 [ 288.820380][T10075] ? __pfx___mutex_lock+0x10/0x10 [ 288.820397][T10075] ? __pfx_vfs_read+0x10/0x10 [ 288.820425][T10075] ksys_read+0x12a/0x250 [ 288.820440][T10075] ? __pfx_ksys_read+0x10/0x10 [ 288.820462][T10075] do_syscall_64+0xcd/0x490 [ 288.820479][T10075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.820493][T10075] RIP: 0033:0x7f4bf098ebe9 [ 288.820505][T10075] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 288.820519][T10075] RSP: 002b:00007f4bf18da038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 288.820533][T10075] RAX: ffffffffffffffda RBX: 00007f4bf0bb5fa0 RCX: 00007f4bf098ebe9 [ 288.820542][T10075] RDX: 0000000000001016 RSI: 0000200000000000 RDI: 0000000000000003 [ 288.820551][T10075] RBP: 00007f4bf0a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 288.820559][T10075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 288.820567][T10075] R13: 00007f4bf0bb6038 R14: 00007f4bf0bb5fa0 R15: 00007fff9d2e1b78 [ 288.820587][T10075] [ 292.328050][T10143] netlink: 342 bytes leftover after parsing attributes in process `syz.0.1559'. [ 292.337524][T10145] FAULT_INJECTION: forcing a failure. [ 292.337524][T10145] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 292.403146][T10145] CPU: 1 UID: 0 PID: 10145 Comm: syz.1.1560 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) [ 292.403172][T10145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 292.403182][T10145] Call Trace: [ 292.403188][T10145] [ 292.403194][T10145] dump_stack_lvl+0x16c/0x1f0 [ 292.403215][T10145] should_fail_ex+0x512/0x640 [ 292.403239][T10145] should_fail_alloc_page+0xe7/0x130 [ 292.403262][T10145] prepare_alloc_pages+0x3c2/0x610 [ 292.403286][T10145] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 292.403303][T10145] ? arch_stack_walk+0xa6/0x100 [ 292.403325][T10145] ? stack_trace_save+0x8e/0xc0 [ 292.403341][T10145] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 292.403357][T10145] ? rcu_is_watching+0x12/0xc0 [ 292.403378][T10145] ? kasan_save_track+0x14/0x30 [ 292.403393][T10145] ? __kasan_slab_alloc+0x89/0x90 [ 292.403408][T10145] ? kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 292.403424][T10145] ? __pmd_alloc+0xbf/0x930 [ 292.403443][T10145] ? __handle_mm_fault+0xa06/0x2a50 [ 292.403455][T10145] ? handle_mm_fault+0x589/0xd10 [ 292.403468][T10145] ? __get_user_pages+0x551/0x34a0 [ 292.403487][T10145] ? interleave_nodes+0x16b/0x410 [ 292.403508][T10145] ? policy_nodemask+0xea/0x4e0 [ 292.403527][T10145] alloc_pages_mpol+0x1fb/0x550 [ 292.403546][T10145] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 292.403570][T10145] alloc_pages_noprof+0x131/0x390 [ 292.403588][T10145] pte_alloc_one+0x1c/0x3a0 [ 292.403604][T10145] __pte_alloc+0x6d/0x3c0 [ 292.403622][T10145] ? __pfx___pte_alloc+0x10/0x10 [ 292.403642][T10145] ? do_raw_spin_lock+0x12c/0x2b0 [ 292.403665][T10145] do_pte_missing+0x285a/0x3ba0 [ 292.403680][T10145] ? do_raw_spin_unlock+0x172/0x230 [ 292.403700][T10145] ? _raw_spin_unlock+0x28/0x50 [ 292.403713][T10145] ? __pmd_alloc+0x3fb/0x930 [ 292.403735][T10145] __handle_mm_fault+0x152a/0x2a50 [ 292.403755][T10145] ? __pfx___handle_mm_fault+0x10/0x10 [ 292.403785][T10145] handle_mm_fault+0x589/0xd10 [ 292.403804][T10145] __get_user_pages+0x551/0x34a0 [ 292.403832][T10145] ? __pfx___get_user_pages+0x10/0x10 [ 292.403869][T10145] populate_vma_page_range+0x267/0x3f0 [ 292.403893][T10145] ? __pfx_populate_vma_page_range+0x10/0x10 [ 292.403914][T10145] ? __pfx_find_vma_intersection+0x10/0x10 [ 292.403937][T10145] ? do_mmap+0x69c/0x1210 [ 292.403958][T10145] __mm_populate+0x1d8/0x380 [ 292.403980][T10145] ? __pfx___mm_populate+0x10/0x10 [ 292.404003][T10145] ? up_write+0x1b2/0x520 [ 292.404024][T10145] vm_mmap_pgoff+0x37f/0x470 [ 292.404046][T10145] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 292.404070][T10145] ? __x64_sys_futex+0x1e0/0x4c0 [ 292.404087][T10145] ? __x64_sys_futex+0x1e9/0x4c0 [ 292.404106][T10145] ksys_mmap_pgoff+0x7d/0x5c0 [ 292.404125][T10145] ? xfd_validate_state+0x61/0x180 [ 292.404144][T10145] ? __pfx_ksys_write+0x10/0x10 [ 292.404162][T10145] __x64_sys_mmap+0x125/0x190 [ 292.404187][T10145] do_syscall_64+0xcd/0x490 [ 292.404205][T10145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.404220][T10145] RIP: 0033:0x7fc68a98ebe9 [ 292.404234][T10145] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 292.404248][T10145] RSP: 002b:00007fc68b7d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 292.404263][T10145] RAX: ffffffffffffffda RBX: 00007fc68abb5fa0 RCX: 00007fc68a98ebe9 [ 292.404272][T10145] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 292.404282][T10145] RBP: 00007fc68aa11e19 R08: 0000000000000002 R09: 0000000000008000 [ 292.404291][T10145] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 292.404299][T10145] R13: 00007fc68abb6038 R14: 00007fc68abb5fa0 R15: 00007ffc71106088 [ 292.404319][T10145] [ 294.560209][T10174] FAULT_INJECTION: forcing a failure. [ 294.560209][T10174] name failslab, interval 1, probability 0, space 0, times 0 [ 294.720891][T10174] CPU: 1 UID: 0 PID: 10174 Comm: syz.0.1568 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) [ 294.720923][T10174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 294.720932][T10174] Call Trace: [ 294.720937][T10174] [ 294.720943][T10174] dump_stack_lvl+0x16c/0x1f0 [ 294.720964][T10174] should_fail_ex+0x512/0x640 [ 294.720986][T10174] should_failslab+0xc2/0x120 [ 294.721005][T10174] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 294.721023][T10174] ? __alloc_skb+0x2b2/0x380 [ 294.721038][T10174] ? __do_sys_close_range+0x39b/0x730 [ 294.721057][T10174] __alloc_skb+0x2b2/0x380 [ 294.721071][T10174] ? __pfx___alloc_skb+0x10/0x10 [ 294.721084][T10174] ? find_held_lock+0x2b/0x80 [ 294.721099][T10174] ? net_generic+0xea/0x2a0 [ 294.721127][T10174] tipc_buf_acquire+0x26/0xe0 [ 294.721149][T10174] tipc_msg_create+0x39/0x1d0 [ 294.721171][T10174] __tipc_shutdown+0xb9d/0xee0 [ 294.721195][T10174] ? __pfx___tipc_shutdown+0x10/0x10 [ 294.721213][T10174] ? do_raw_spin_lock+0x12c/0x2b0 [ 294.721234][T10174] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 294.721254][T10174] ? __pfx_woken_wake_function+0x10/0x10 [ 294.721278][T10174] ? tipc_sk_filtering+0x420/0x520 [ 294.721298][T10174] tipc_release+0xe2/0x1640 [ 294.721315][T10174] ? down_write+0x14d/0x200 [ 294.721331][T10174] ? __pfx_down_write+0x10/0x10 [ 294.721348][T10174] ? __pfx_locks_remove_file+0x10/0x10 [ 294.721365][T10174] __sock_release+0xb3/0x270 [ 294.721382][T10174] ? __pfx_sock_close+0x10/0x10 [ 294.721396][T10174] sock_close+0x1c/0x30 [ 294.721413][T10174] __fput+0x3ff/0xb70 [ 294.721439][T10174] ? _raw_spin_unlock_irq+0x23/0x50 [ 294.721455][T10174] task_work_run+0x150/0x240 [ 294.721477][T10174] ? __pfx_task_work_run+0x10/0x10 [ 294.721499][T10174] ? __pfx___do_sys_close_range+0x10/0x10 [ 294.721521][T10174] exit_to_user_mode_loop+0xeb/0x110 [ 294.721543][T10174] do_syscall_64+0x3f6/0x490 [ 294.721560][T10174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.721574][T10174] RIP: 0033:0x7f4bf098ebe9 [ 294.721587][T10174] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 294.721600][T10174] RSP: 002b:00007f4bf18da038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 294.721615][T10174] RAX: 0000000000000000 RBX: 00007f4bf0bb5fa0 RCX: 00007f4bf098ebe9 [ 294.721624][T10174] RDX: 0000000000000000 RSI: 000000000000000a RDI: 0000000000000002 [ 294.721632][T10174] RBP: 00007f4bf0a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 294.721641][T10174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 294.721650][T10174] R13: 00007f4bf0bb6038 R14: 00007f4bf0bb5fa0 R15: 00007fff9d2e1b78 [ 294.721674][T10174] [ 296.035909][T10191] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1573'. [ 296.068847][T10191] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1573'. [ 296.524578][T10210] FAULT_INJECTION: forcing a failure. [ 296.524578][T10210] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 296.631224][T10210] CPU: 1 UID: 0 PID: 10210 Comm: syz.0.1581 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) [ 296.631249][T10210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 296.631258][T10210] Call Trace: [ 296.631263][T10210] [ 296.631269][T10210] dump_stack_lvl+0x16c/0x1f0 [ 296.631290][T10210] should_fail_ex+0x512/0x640 [ 296.631311][T10210] should_fail_alloc_page+0xe7/0x130 [ 296.631332][T10210] prepare_alloc_pages+0x3c2/0x610 [ 296.631357][T10210] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 296.631373][T10210] ? arch_stack_walk+0xa6/0x100 [ 296.631396][T10210] ? stack_trace_save+0x8e/0xc0 [ 296.631412][T10210] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 296.631428][T10210] ? rcu_is_watching+0x12/0xc0 [ 296.631448][T10210] ? kasan_save_track+0x14/0x30 [ 296.631463][T10210] ? __kasan_slab_alloc+0x89/0x90 [ 296.631479][T10210] ? kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 296.631494][T10210] ? __pmd_alloc+0xbf/0x930 [ 296.631524][T10210] ? __handle_mm_fault+0xa06/0x2a50 [ 296.631538][T10210] ? handle_mm_fault+0x589/0xd10 [ 296.631551][T10210] ? __get_user_pages+0x551/0x34a0 [ 296.631571][T10210] ? interleave_nodes+0x16b/0x410 [ 296.631593][T10210] ? policy_nodemask+0xea/0x4e0 [ 296.631613][T10210] alloc_pages_mpol+0x1fb/0x550 [ 296.631632][T10210] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 296.631655][T10210] alloc_pages_noprof+0x131/0x390 [ 296.631674][T10210] pte_alloc_one+0x1c/0x3a0 [ 296.631689][T10210] __pte_alloc+0x6d/0x3c0 [ 296.631707][T10210] ? __pfx___pte_alloc+0x10/0x10 [ 296.631727][T10210] ? do_raw_spin_lock+0x12c/0x2b0 [ 296.631749][T10210] do_pte_missing+0x285a/0x3ba0 [ 296.631764][T10210] ? do_raw_spin_unlock+0x172/0x230 [ 296.631784][T10210] ? _raw_spin_unlock+0x28/0x50 [ 296.631797][T10210] ? __pmd_alloc+0x3fb/0x930 [ 296.631819][T10210] __handle_mm_fault+0x152a/0x2a50 [ 296.631838][T10210] ? __pfx___handle_mm_fault+0x10/0x10 [ 296.631869][T10210] handle_mm_fault+0x589/0xd10 [ 296.631887][T10210] __get_user_pages+0x551/0x34a0 [ 296.631915][T10210] ? __pfx___get_user_pages+0x10/0x10 [ 296.631941][T10210] populate_vma_page_range+0x267/0x3f0 [ 296.631963][T10210] ? __pfx_populate_vma_page_range+0x10/0x10 [ 296.631984][T10210] ? __pfx_find_vma_intersection+0x10/0x10 [ 296.632008][T10210] ? do_mmap+0x69c/0x1210 [ 296.632029][T10210] __mm_populate+0x1d8/0x380 [ 296.632051][T10210] ? __pfx___mm_populate+0x10/0x10 [ 296.632073][T10210] ? up_write+0x1b2/0x520 [ 296.632095][T10210] vm_mmap_pgoff+0x37f/0x470 [ 296.632117][T10210] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 296.632141][T10210] ? __x64_sys_futex+0x1e0/0x4c0 [ 296.632158][T10210] ? __x64_sys_futex+0x1e9/0x4c0 [ 296.632177][T10210] ksys_mmap_pgoff+0x7d/0x5c0 [ 296.632196][T10210] ? xfd_validate_state+0x61/0x180 [ 296.632215][T10210] ? __pfx_ksys_write+0x10/0x10 [ 296.632234][T10210] __x64_sys_mmap+0x125/0x190 [ 296.632258][T10210] do_syscall_64+0xcd/0x490 [ 296.632275][T10210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.632290][T10210] RIP: 0033:0x7f4bf098ebe9 [ 296.632303][T10210] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 296.632318][T10210] RSP: 002b:00007f4bf18da038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 296.632332][T10210] RAX: ffffffffffffffda RBX: 00007f4bf0bb5fa0 RCX: 00007f4bf098ebe9 [ 296.632342][T10210] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 296.632351][T10210] RBP: 00007f4bf0a11e19 R08: 0000000000000002 R09: 0000000000008000 [ 296.632360][T10210] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 296.632369][T10210] R13: 00007f4bf0bb6038 R14: 00007f4bf0bb5fa0 R15: 00007fff9d2e1b78 [ 296.632388][T10210] [ 297.276075][T10225] device-mapper: ioctl: Unable to rename non-existent device, to uuid [ 297.588706][T10233] netlink: 338 bytes leftover after parsing attributes in process `syz.2.1590'. [ 297.755043][T10237] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1591'. [ 299.222653][T10280] netlink: 'syz.3.1609': attribute type 19 has an invalid length. [ 299.268545][T10280] netlink: 334 bytes leftover after parsing attributes in process `syz.3.1609'. [ 300.434336][T10306] netlink: 346 bytes leftover after parsing attributes in process `syz.3.1620'. [ 300.682864][T10313] FAULT_INJECTION: forcing a failure. [ 300.682864][T10313] name failslab, interval 1, probability 0, space 0, times 0 [ 300.743528][T10313] CPU: 1 UID: 0 PID: 10313 Comm: syz.3.1622 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) [ 300.743552][T10313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 300.743562][T10313] Call Trace: [ 300.743567][T10313] [ 300.743573][T10313] dump_stack_lvl+0x16c/0x1f0 [ 300.743596][T10313] should_fail_ex+0x512/0x640 [ 300.743615][T10313] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 300.743633][T10313] ? __pfx_tomoyo_gc_thread+0x10/0x10 [ 300.743649][T10313] should_failslab+0xc2/0x120 [ 300.743667][T10313] __kmalloc_cache_noprof+0x6a/0x3e0 [ 300.743682][T10313] ? lockdep_init_map_type+0x5c/0x280 [ 300.743700][T10313] ? __kthread_create_on_node+0xce/0x3f0 [ 300.743718][T10313] ? __init_swait_queue_head+0xca/0x150 [ 300.743741][T10313] ? __pfx_tomoyo_gc_thread+0x10/0x10 [ 300.743755][T10313] __kthread_create_on_node+0xce/0x3f0 [ 300.743774][T10313] ? __pfx___kthread_create_on_node+0x10/0x10 [ 300.743801][T10313] ? __pfx_tomoyo_gc_thread+0x10/0x10 [ 300.743816][T10313] kthread_create_on_node+0xc7/0x100 [ 300.743834][T10313] ? __pfx_kthread_create_on_node+0x10/0x10 [ 300.743851][T10313] ? kasan_quarantine_put+0x10a/0x240 [ 300.743868][T10313] ? find_held_lock+0x2b/0x80 [ 300.743882][T10313] ? tomoyo_notify_gc+0xc6/0x470 [ 300.743900][T10313] tomoyo_notify_gc+0xea/0x470 [ 300.743914][T10313] ? ima_iint_find+0xea/0x130 [ 300.743935][T10313] ? __pfx_tomoyo_release+0x10/0x10 [ 300.743952][T10313] tomoyo_release+0x31/0x40 [ 300.743969][T10313] __fput+0x3ff/0xb70 [ 300.743992][T10313] task_work_run+0x150/0x240 [ 300.744014][T10313] ? __pfx_task_work_run+0x10/0x10 [ 300.744035][T10313] ? __pfx___do_sys_close_range+0x10/0x10 [ 300.744056][T10313] exit_to_user_mode_loop+0xeb/0x110 [ 300.744078][T10313] do_syscall_64+0x3f6/0x490 [ 300.744095][T10313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.744110][T10313] RIP: 0033:0x7fb3bab8ebe9 [ 300.744123][T10313] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 300.744137][T10313] RSP: 002b:00007fb3bb948038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 300.744151][T10313] RAX: 0000000000000000 RBX: 00007fb3badb5fa0 RCX: 00007fb3bab8ebe9 [ 300.744160][T10313] RDX: 0000000000000000 RSI: 000000000000000a RDI: 0000000000000002 [ 300.744168][T10313] RBP: 00007fb3bac11e19 R08: 0000000000000000 R09: 0000000000000000 [ 300.744185][T10313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 300.744194][T10313] R13: 00007fb3badb6038 R14: 00007fb3badb5fa0 R15: 00007fff58cd8bc8 [ 300.744214][T10313] [ 301.401394][T10328] netlink: 334 bytes leftover after parsing attributes in process `syz.1.1627'. [ 301.675739][T10336] netlink: 330 bytes leftover after parsing attributes in process `syz.3.1633'. [ 302.857466][T10361] netlink: 334 bytes leftover after parsing attributes in process `syz.0.1643'. [ 303.797265][T10380] device-mapper: ioctl: Unable to rename non-existent device, to uuid [ 304.133643][T10390] netlink: 186 bytes leftover after parsing attributes in process `syz.2.1653'. [ 304.316518][T10383] netlink: 186 bytes leftover after parsing attributes in process `syz.2.1653'. [ 305.784849][T10414] netlink: 146 bytes leftover after parsing attributes in process `syz.1.1662'. [ 306.294164][T10430] netlink: 334 bytes leftover after parsing attributes in process `syz.0.1669'. [ 308.178089][T10458] netlink: 146 bytes leftover after parsing attributes in process `syz.1.1677'. [ 308.446720][T10462] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input7 [ 310.857067][T10500] FAULT_INJECTION: forcing a failure. [ 310.857067][T10500] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 310.987056][T10500] CPU: 1 UID: 0 PID: 10500 Comm: syz.1.1689 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) [ 310.987080][T10500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 310.987089][T10500] Call Trace: [ 310.987095][T10500] [ 310.987101][T10500] dump_stack_lvl+0x16c/0x1f0 [ 310.987122][T10500] should_fail_ex+0x512/0x640 [ 310.987144][T10500] _copy_from_user+0x2e/0xd0 [ 310.987164][T10500] do_handle_open+0x5ca/0xc50 [ 310.987181][T10500] ? __pfx_do_handle_open+0x10/0x10 [ 310.987194][T10500] ? __x64_sys_futex+0x1e0/0x4c0 [ 310.987216][T10500] ? xfd_validate_state+0x61/0x180 [ 310.987243][T10500] ? do_syscall_64+0xcd/0x490 [ 310.987258][T10500] do_syscall_64+0xcd/0x490 [ 310.987275][T10500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.987293][T10500] RIP: 0033:0x7fc68a98ebe9 [ 310.987305][T10500] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 310.987319][T10500] RSP: 002b:00007fc68b7d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 310.987333][T10500] RAX: ffffffffffffffda RBX: 00007fc68abb5fa0 RCX: 00007fc68a98ebe9 [ 310.987343][T10500] RDX: 0000000000000002 RSI: 0000200000000080 RDI: 0000000000000003 [ 310.987353][T10500] RBP: 00007fc68aa11e19 R08: 0000000000000000 R09: 0000000000000000 [ 310.987362][T10500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 310.987389][T10500] R13: 00007fc68abb6038 R14: 00007fc68abb5fa0 R15: 00007ffc71106088 [ 310.987411][T10500] [ 312.560890][T10532] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1696'. [ 312.644898][T10532] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1696'. [ 313.465864][T10545] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1701'. [ 313.780850][T10556] netlink: 330 bytes leftover after parsing attributes in process `syz.3.1705'. [ 314.785392][T10576] netlink: 330 bytes leftover after parsing attributes in process `syz.1.1714'. [ 315.832722][T10591] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1720'. [ 316.052025][T10597] FAULT_INJECTION: forcing a failure. [ 316.052025][T10597] name failslab, interval 1, probability 0, space 0, times 0 [ 316.066357][T10593] ima: policy update failed [ 316.071265][ T30] audit: type=1802 audit(1754696897.347:5): pid=10593 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.1721" res=0 errno=0 [ 316.131401][T10597] CPU: 1 UID: 0 PID: 10597 Comm: syz.3.1722 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) [ 316.131426][T10597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 316.131435][T10597] Call Trace: [ 316.131440][T10597] [ 316.131446][T10597] dump_stack_lvl+0x16c/0x1f0 [ 316.131468][T10597] should_fail_ex+0x512/0x640 [ 316.131486][T10597] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 316.131508][T10597] should_failslab+0xc2/0x120 [ 316.131528][T10597] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 316.131546][T10597] ? trace_kmem_cache_alloc+0x28/0xc0 [ 316.131565][T10597] ? key_alloc+0x43e/0x1330 [ 316.131584][T10597] kmemdup_noprof+0x29/0x60 [ 316.131602][T10597] key_alloc+0x43e/0x1330 [ 316.131623][T10597] ? __pfx_key_alloc+0x10/0x10 [ 316.131644][T10597] keyring_alloc+0x44/0xc0 [ 316.131663][T10597] install_session_keyring_to_cred+0x190/0x230 [ 316.131680][T10597] join_session_keyring+0x1b8/0x340 [ 316.131695][T10597] lookup_user_key+0x576/0x1300 [ 316.131712][T10597] ? __pfx_lookup_user_key+0x10/0x10 [ 316.131728][T10597] ? __pfx_do_futex+0x10/0x10 [ 316.131748][T10597] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 316.131766][T10597] ? __fget_files+0x20e/0x3c0 [ 316.131784][T10597] keyctl_keyring_move+0xb4/0x150 [ 316.131806][T10597] __do_sys_keyctl+0x171/0x590 [ 316.131820][T10597] do_syscall_64+0xcd/0x490 [ 316.131838][T10597] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.131852][T10597] RIP: 0033:0x7fb3bab8ebe9 [ 316.131865][T10597] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 316.131878][T10597] RSP: 002b:00007fb3bb948038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 316.131893][T10597] RAX: ffffffffffffffda RBX: 00007fb3badb5fa0 RCX: 00007fb3bab8ebe9 [ 316.131903][T10597] RDX: fffffffffffffffd RSI: fffffffffffffffc RDI: 000000000000001e [ 316.131911][T10597] RBP: 00007fb3bac11e19 R08: 0000000000000001 R09: 0000000000000000 [ 316.131920][T10597] R10: fffffffffffffffd R11: 0000000000000246 R12: 0000000000000000 [ 316.131928][T10597] R13: 00007fb3badb6038 R14: 00007fb3badb5fa0 R15: 00007fff58cd8bc8 [ 316.131946][T10597] [ 318.103526][T10634] netlink: 334 bytes leftover after parsing attributes in process `syz.2.1736'. [ 318.500966][T10643] netlink: 334 bytes leftover after parsing attributes in process `syz.2.1740'. [ 318.575326][T10646] netlink: 'syz.3.1741': attribute type 29 has an invalid length. [ 318.644214][T10646] netlink: 334 bytes leftover after parsing attributes in process `syz.3.1741'. [ 318.771892][T10650] FAULT_INJECTION: forcing a failure. [ 318.771892][T10650] name failslab, interval 1, probability 0, space 0, times 0 [ 318.862815][T10650] CPU: 1 UID: 0 PID: 10650 Comm: syz.2.1743 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) [ 318.862839][T10650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 318.862849][T10650] Call Trace: [ 318.862854][T10650] [ 318.862861][T10650] dump_stack_lvl+0x16c/0x1f0 [ 318.862883][T10650] should_fail_ex+0x512/0x640 [ 318.862902][T10650] ? __kmalloc_noprof+0xbf/0x510 [ 318.862922][T10650] ? vb2_core_allocated_buffers_storage+0xc4/0x220 [ 318.862942][T10650] should_failslab+0xc2/0x120 [ 318.862963][T10650] __kmalloc_noprof+0xd2/0x510 [ 318.862983][T10650] vb2_core_allocated_buffers_storage+0xc4/0x220 [ 318.863004][T10650] vb2_core_reqbufs+0x398/0xfe0 [ 318.863035][T10650] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 318.863088][T10650] __vb2_init_fileio+0x3f1/0x1100 [ 318.863111][T10650] ? lockdep_hardirqs_on+0x7c/0x110 [ 318.863127][T10650] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 318.863142][T10650] ? __pollwait+0x271/0x490 [ 318.863159][T10650] vb2_core_poll+0x5ec/0x700 [ 318.863179][T10650] vb2_poll+0x33/0x150 [ 318.863198][T10650] vb2_fop_poll+0x10f/0x2c0 [ 318.863216][T10650] ? __pfx_vb2_fop_poll+0x10/0x10 [ 318.863234][T10650] v4l2_poll+0x160/0x320 [ 318.863249][T10650] ? __pfx_v4l2_poll+0x10/0x10 [ 318.863261][T10650] do_select+0xd3a/0x17e0 [ 318.863290][T10650] ? __pfx_do_select+0x10/0x10 [ 318.863305][T10650] ? finish_task_switch.isra.0+0x21c/0xc10 [ 318.863320][T10650] ? __pfx___pollwait+0x10/0x10 [ 318.863336][T10650] ? __pfx_pollwake+0x10/0x10 [ 318.863379][T10650] ? find_held_lock+0x2b/0x80 [ 318.863392][T10650] ? __might_fault+0xe3/0x190 [ 318.863408][T10650] ? __might_fault+0xe3/0x190 [ 318.863421][T10650] ? __might_fault+0x13b/0x190 [ 318.863444][T10650] ? core_sys_select+0x453/0xc10 [ 318.863457][T10650] core_sys_select+0x453/0xc10 [ 318.863477][T10650] ? __pfx_core_sys_select+0x10/0x10 [ 318.863512][T10650] ? read_tsc+0x9/0x20 [ 318.863527][T10650] ? ktime_get_ts64+0x256/0x400 [ 318.863550][T10650] kern_select+0x15d/0x1e0 [ 318.863565][T10650] ? __pfx_kern_select+0x10/0x10 [ 318.863582][T10650] ? xfd_validate_state+0x61/0x180 [ 318.863600][T10650] ? __pfx_ksys_write+0x10/0x10 [ 318.863620][T10650] __x64_sys_select+0xbd/0x160 [ 318.863634][T10650] ? do_syscall_64+0x91/0x490 [ 318.863649][T10650] ? lockdep_hardirqs_on+0x7c/0x110 [ 318.863663][T10650] do_syscall_64+0xcd/0x490 [ 318.863680][T10650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.863694][T10650] RIP: 0033:0x7fdd55d8ebe9 [ 318.863707][T10650] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 318.863721][T10650] RSP: 002b:00007fdd56cbc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 318.863736][T10650] RAX: ffffffffffffffda RBX: 00007fdd55fb5fa0 RCX: 00007fdd55d8ebe9 [ 318.863745][T10650] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000005 [ 318.863755][T10650] RBP: 00007fdd55e11e19 R08: 00002000000001c0 R09: 0000000000000000 [ 318.863775][T10650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 318.863784][T10650] R13: 00007fdd55fb6038 R14: 00007fdd55fb5fa0 R15: 00007ffd680ce158 [ 318.863804][T10650] [ 319.935905][T10664] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 320.765216][T10681] netlink: 334 bytes leftover after parsing attributes in process `syz.1.1755'. [ 321.253446][T10694] mkiss: ax0: crc mode is auto. [ 322.527320][T10724] FAULT_INJECTION: forcing a failure. [ 322.527320][T10724] name failslab, interval 1, probability 0, space 0, times 0 [ 322.615958][T10724] CPU: 1 UID: 0 PID: 10724 Comm: syz.1.1773 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) [ 322.615983][T10724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 322.615992][T10724] Call Trace: [ 322.615998][T10724] [ 322.616005][T10724] dump_stack_lvl+0x16c/0x1f0 [ 322.616026][T10724] should_fail_ex+0x512/0x640 [ 322.616044][T10724] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 322.616064][T10724] should_failslab+0xc2/0x120 [ 322.616083][T10724] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 322.616100][T10724] ? mas_alloc_nodes+0x18b/0x8b0 [ 322.616116][T10724] mas_alloc_nodes+0x18b/0x8b0 [ 322.616133][T10724] mas_node_count_gfp+0x105/0x130 [ 322.616148][T10724] mas_preallocate+0x7e0/0xde0 [ 322.616164][T10724] ? __memcg_slab_post_alloc_hook+0x482/0x960 [ 322.616187][T10724] ? __pfx_mas_preallocate+0x10/0x10 [ 322.616210][T10724] ? anon_vma_name+0x81/0x2f0 [ 322.616232][T10724] __split_vma+0x34a/0x1070 [ 322.616250][T10724] ? __pfx___split_vma+0x10/0x10 [ 322.616270][T10724] ? __lock_acquire+0x62e/0x1ce0 [ 322.616293][T10724] vma_modify+0x16dc/0x2030 [ 322.616311][T10724] ? find_held_lock+0x2b/0x80 [ 322.616325][T10724] ? __pfx_vma_modify+0x10/0x10 [ 322.616345][T10724] vma_modify_flags+0x212/0x2d0 [ 322.616361][T10724] ? __pfx_vma_modify_flags+0x10/0x10 [ 322.616389][T10724] mlock_fixup+0x27c/0xe50 [ 322.616405][T10724] ? mas_find+0x156/0x6d0 [ 322.616422][T10724] apply_vma_lock_flags+0x261/0x390 [ 322.616440][T10724] ? __pfx_apply_vma_lock_flags+0x10/0x10 [ 322.616456][T10724] ? __pfx___might_resched+0x10/0x10 [ 322.616476][T10724] ? __pfx_down_write_killable+0x10/0x10 [ 322.616495][T10724] ? do_futex+0x122/0x350 [ 322.616514][T10724] do_mlock+0x2ac/0x810 [ 322.616529][T10724] ? __pfx___might_resched+0x10/0x10 [ 322.616544][T10724] ? __pfx_do_mlock+0x10/0x10 [ 322.616558][T10724] ? __x64_sys_futex+0x1e0/0x4c0 [ 322.616574][T10724] ? __x64_sys_futex+0x1e9/0x4c0 [ 322.616591][T10724] ? __pfx_blkcg_maybe_throttle_current+0x10/0x10 [ 322.616608][T10724] ? xfd_validate_state+0x61/0x180 [ 322.616628][T10724] ? __pfx_do_writev+0x10/0x10 [ 322.616647][T10724] __x64_sys_mlock+0x59/0x80 [ 322.616663][T10724] do_syscall_64+0xcd/0x490 [ 322.616680][T10724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.616695][T10724] RIP: 0033:0x7fc68a98ebe9 [ 322.616706][T10724] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 322.616720][T10724] RSP: 002b:00007fc68b7d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 322.616741][T10724] RAX: ffffffffffffffda RBX: 00007fc68abb5fa0 RCX: 00007fc68a98ebe9 [ 322.616752][T10724] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 000000000000fbe8 [ 322.616761][T10724] RBP: 00007fc68aa11e19 R08: 0000000000000000 R09: 0000000000000000 [ 322.616769][T10724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 322.616778][T10724] R13: 00007fc68abb6038 R14: 00007fc68abb5fa0 R15: 00007ffc71106088 [ 322.616797][T10724] [ 322.622724][T10728] FAULT_INJECTION: forcing a failure. [ 322.622724][T10728] name failslab, interval 1, probability 0, space 0, times 0 [ 322.970468][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.977164][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.143928][T10735] netlink: 334 bytes leftover after parsing attributes in process `syz.2.1778'. [ 323.254827][T10737] netlink: 334 bytes leftover after parsing attributes in process `syz.2.1778'. [ 323.556938][T10745] netlink: 342 bytes leftover after parsing attributes in process `syz.0.1782'. [ 323.860318][T10749] netlink: 342 bytes leftover after parsing attributes in process `syz.0.1784'. [ 324.037943][T10728] CPU: 1 UID: 0 PID: 10728 Comm: syz.3.1775 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) [ 324.037964][T10728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 324.037973][T10728] Call Trace: [ 324.037978][T10728] [ 324.037984][T10728] dump_stack_lvl+0x16c/0x1f0 [ 324.038005][T10728] should_fail_ex+0x512/0x640 [ 324.038023][T10728] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 324.038040][T10728] should_failslab+0xc2/0x120 [ 324.038068][T10728] __kmalloc_cache_noprof+0x6a/0x3e0 [ 324.038082][T10728] ? __lock_acquire+0xb97/0x1ce0 [ 324.038101][T10728] ? snd_timer_instance_new+0x47/0x2e0 [ 324.038123][T10728] snd_timer_instance_new+0x47/0x2e0 [ 324.038141][T10728] snd_seq_timer_open+0x1cc/0x600 [ 324.038158][T10728] ? __pfx_snd_seq_timer_open+0x10/0x10 [ 324.038175][T10728] ? find_held_lock+0x2b/0x80 [ 324.038191][T10728] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 324.038205][T10728] ? lockdep_hardirqs_on+0x7c/0x110 [ 324.038220][T10728] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 324.038236][T10728] queue_use+0xe3/0x250 [ 324.038256][T10728] snd_seq_queue_alloc+0x2e5/0x5a0 [ 324.038281][T10728] snd_seq_ioctl_create_queue+0xa9/0x380 [ 324.038299][T10728] snd_seq_kernel_client_ctl+0x107/0x1c0 [ 324.038320][T10728] alloc_seq_queue+0xda/0x180 [ 324.038338][T10728] ? __pfx_alloc_seq_queue+0x10/0x10 [ 324.038367][T10728] ? mark_held_locks+0x49/0x80 [ 324.038392][T10728] ? _raw_spin_unlock_irq+0x23/0x50 [ 324.038407][T10728] snd_seq_oss_open+0x38c/0xa20 [ 324.038429][T10728] odev_open+0x6f/0x90 [ 324.038444][T10728] ? __pfx_odev_open+0x10/0x10 [ 324.038460][T10728] soundcore_open+0x40c/0x580 [ 324.038478][T10728] ? __pfx_soundcore_open+0x10/0x10 [ 324.038494][T10728] chrdev_open+0x231/0x6a0 [ 324.038513][T10728] ? __pfx_apparmor_file_open+0x10/0x10 [ 324.038536][T10728] ? __pfx_chrdev_open+0x10/0x10 [ 324.038555][T10728] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 324.038575][T10728] do_dentry_open+0x97f/0x1530 [ 324.038594][T10728] ? __pfx_chrdev_open+0x10/0x10 [ 324.038615][T10728] vfs_open+0x82/0x3f0 [ 324.038638][T10728] path_openat+0x1de4/0x2cb0 [ 324.038662][T10728] ? __pfx_path_openat+0x10/0x10 [ 324.038683][T10728] do_filp_open+0x20b/0x470 [ 324.038700][T10728] ? __pfx_do_filp_open+0x10/0x10 [ 324.038731][T10728] ? alloc_fd+0x471/0x7d0 [ 324.038751][T10728] do_sys_openat2+0x11b/0x1d0 [ 324.038772][T10728] ? __pfx_do_sys_openat2+0x10/0x10 [ 324.038800][T10728] __x64_sys_openat+0x174/0x210 [ 324.038821][T10728] ? __pfx___x64_sys_openat+0x10/0x10 [ 324.038851][T10728] do_syscall_64+0xcd/0x490 [ 324.038868][T10728] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.038883][T10728] RIP: 0033:0x7fb3bab8ebe9 [ 324.038894][T10728] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 324.038908][T10728] RSP: 002b:00007fb3bb948038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 324.038922][T10728] RAX: ffffffffffffffda RBX: 00007fb3badb5fa0 RCX: 00007fb3bab8ebe9 [ 324.038932][T10728] RDX: 0000000000000042 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 324.038941][T10728] RBP: 00007fb3bac11e19 R08: 0000000000000000 R09: 0000000000000000 [ 324.038950][T10728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 324.038958][T10728] R13: 00007fb3badb6038 R14: 00007fb3badb5fa0 R15: 00007fff58cd8bc8 [ 324.038976][T10728] [ 325.269321][T10764] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1790'. [ 325.307020][T10764] netlink: 25 bytes leftover after parsing attributes in process `syz.0.1790'. [ 325.507617][T10768] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 328.410179][T10826] netlink: 'syz.0.1812': attribute type 27 has an invalid length. [ 328.456127][T10826] netlink: 334 bytes leftover after parsing attributes in process `syz.0.1812'. [ 329.914960][T10866] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1830'. [ 329.928012][ T5864] Bluetooth: hci0: SCO packet too small [ 330.193388][T10874] netlink: 'syz.1.1832': attribute type 27 has an invalid length. [ 330.225435][T10868] zswap: compressor not available [ 330.311230][T10874] netlink: 334 bytes leftover after parsing attributes in process `syz.1.1832'. [ 331.550890][T10908] ================================================================== [ 331.559154][T10908] BUG: KASAN: slab-use-after-free in dvb_device_open+0x36a/0x3b0 [ 331.567065][T10908] Read of size 8 at addr ffff88802a7cba18 by task syz.3.1845/10908 [ 331.574960][T10908] [ 331.577281][T10908] CPU: 1 UID: 0 PID: 10908 Comm: syz.3.1845 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) [ 331.577302][T10908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 331.577312][T10908] Call Trace: [ 331.577320][T10908] [ 331.577326][T10908] dump_stack_lvl+0x116/0x1f0 [ 331.577347][T10908] print_report+0xcd/0x630 [ 331.577367][T10908] ? __virt_addr_valid+0x81/0x610 [ 331.577385][T10908] ? __phys_addr+0xe8/0x180 [ 331.577402][T10908] ? dvb_device_open+0x36a/0x3b0 [ 331.577419][T10908] kasan_report+0xe0/0x110 [ 331.577436][T10908] ? dvb_device_open+0x36a/0x3b0 [ 331.577453][T10908] ? __pfx_dvb_device_open+0x10/0x10 [ 331.577469][T10908] dvb_device_open+0x36a/0x3b0 [ 331.577485][T10908] ? __pfx_dvb_device_open+0x10/0x10 [ 331.577501][T10908] chrdev_open+0x231/0x6a0 [ 331.577519][T10908] ? __pfx_apparmor_file_open+0x10/0x10 [ 331.577541][T10908] ? __pfx_chrdev_open+0x10/0x10 [ 331.577558][T10908] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 331.577576][T10908] do_dentry_open+0x97f/0x1530 [ 331.577593][T10908] ? __pfx_chrdev_open+0x10/0x10 [ 331.577612][T10908] vfs_open+0x82/0x3f0 [ 331.577631][T10908] path_openat+0x1de4/0x2cb0 [ 331.577650][T10908] ? __pfx_path_openat+0x10/0x10 [ 331.577668][T10908] do_filp_open+0x20b/0x470 [ 331.577683][T10908] ? __pfx_do_filp_open+0x10/0x10 [ 331.577705][T10908] ? alloc_fd+0x471/0x7d0 [ 331.577721][T10908] do_sys_openat2+0x11b/0x1d0 [ 331.577740][T10908] ? __pfx_do_sys_openat2+0x10/0x10 [ 331.577760][T10908] ? __pfx_do_sys_openat2+0x10/0x10 [ 331.577780][T10908] ? __pfx___might_resched+0x10/0x10 [ 331.577797][T10908] __x64_sys_openat+0x174/0x210 [ 331.577818][T10908] ? __pfx___x64_sys_openat+0x10/0x10 [ 331.577842][T10908] do_syscall_64+0xcd/0x490 [ 331.577858][T10908] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.577873][T10908] RIP: 0033:0x7fb3bab8ebe9 [ 331.577895][T10908] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 331.577909][T10908] RSP: 002b:00007fb3bb948038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 331.577924][T10908] RAX: ffffffffffffffda RBX: 00007fb3badb5fa0 RCX: 00007fb3bab8ebe9 [ 331.577935][T10908] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 331.577944][T10908] RBP: 00007fb3bac11e19 R08: 0000000000000000 R09: 0000000000000000 [ 331.577953][T10908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 331.577963][T10908] R13: 00007fb3badb6038 R14: 00007fb3badb5fa0 R15: 00007fff58cd8bc8 [ 331.577977][T10908] [ 331.577982][T10908] [ 331.836572][T10908] Allocated by task 10881: [ 331.841062][T10908] kasan_save_stack+0x33/0x60 [ 331.847219][T10908] kasan_save_track+0x14/0x30 [ 331.852425][T10908] __kasan_kmalloc+0xaa/0xb0 [ 331.857032][T10908] __kmalloc_noprof+0x223/0x510 [ 331.862051][T10908] __register_sysctl_table+0xea2/0x1900 [ 331.867739][T10908] mpls_dev_sysctl_register+0x185/0x2a0 [ 331.873356][T10908] mpls_dev_notify+0x4ab/0xa20 [ 331.878212][T10908] notifier_call_chain+0xbc/0x410 [ 331.883225][T10908] call_netdevice_notifiers_info+0xbe/0x140 [ 331.889292][T10908] register_netdevice+0x182e/0x2270 [ 331.894766][T10908] __tun_chr_ioctl+0x1ed9/0x48b0 [ 331.900100][T10908] __x64_sys_ioctl+0x18e/0x210 [ 331.904976][T10908] do_syscall_64+0xcd/0x490 [ 331.909815][T10908] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.915726][T10908] [ 331.918157][T10908] Freed by task 1340: [ 331.922411][T10908] kasan_save_stack+0x33/0x60 [ 331.927347][T10908] kasan_save_track+0x14/0x30 [ 331.932151][T10908] kasan_save_free_info+0x3b/0x60 [ 331.937175][T10908] __kasan_slab_free+0x60/0x70 [ 331.941926][T10908] kmem_cache_free_bulk.part.0+0x383/0x7f0 [ 331.948033][T10908] kvfree_rcu_bulk+0x1b7/0x1e0 [ 331.952822][T10908] kfree_rcu_work+0x124/0x1a0 [ 331.957933][T10908] process_one_work+0x9cc/0x1b70 [ 331.962952][T10908] worker_thread+0x6c8/0xf10 [ 331.967956][T10908] kthread+0x3c5/0x780 [ 331.972043][T10908] ret_from_fork+0x5d7/0x6f0 [ 331.976633][T10908] ret_from_fork_asm+0x1a/0x30 [ 331.981581][T10908] [ 331.983900][T10908] Last potentially related work creation: [ 331.989797][T10908] kasan_save_stack+0x33/0x60 [ 331.994647][T10908] kasan_record_aux_stack+0xa7/0xc0 [ 331.999848][T10908] kvfree_call_rcu+0x76/0x470 [ 332.004621][T10908] drop_sysctl_table+0x355/0x5f0 [ 332.009750][T10908] unregister_sysctl_table+0x41/0x60 [ 332.015123][T10908] mpls_dev_notify+0x70c/0xa20 [ 332.019897][T10908] notifier_call_chain+0xbc/0x410 [ 332.025365][T10908] call_netdevice_notifiers_info+0xbe/0x140 [ 332.031368][T10908] unregister_netdevice_many_notify+0xf76/0x24c0 [ 332.037994][T10908] unregister_netdevice_queue+0x305/0x3f0 [ 332.045045][T10908] __tun_detach+0x1249/0x1540 [ 332.050729][T10908] tun_chr_close+0xc2/0x230 [ 332.055543][T10908] __fput+0x3ff/0xb70 [ 332.059955][T10908] task_work_run+0x150/0x240 [ 332.064779][T10908] exit_to_user_mode_loop+0xeb/0x110 [ 332.070250][T10908] do_syscall_64+0x3f6/0x490 [ 332.075007][T10908] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.081092][T10908] [ 332.083410][T10908] The buggy address belongs to the object at ffff88802a7cba00 [ 332.083410][T10908] which belongs to the cache kmalloc-256 of size 256 [ 332.097897][T10908] The buggy address is located 24 bytes inside of [ 332.097897][T10908] freed 256-byte region [ffff88802a7cba00, ffff88802a7cbb00) [ 332.111976][T10908] [ 332.114293][T10908] The buggy address belongs to the physical page: [ 332.120730][T10908] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2a7ca [ 332.129510][T10908] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 332.138097][T10908] ksm flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 332.146272][T10908] page_type: f5(slab) [ 332.150266][T10908] raw: 00fff00000000040 ffff88801b841b40 ffffea0001f09400 0000000000000003 [ 332.159142][T10908] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 332.168032][T10908] head: 00fff00000000040 ffff88801b841b40 ffffea0001f09400 0000000000000003 [ 332.176889][T10908] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 332.185896][T10908] head: 00fff00000000001 ffffea0000a9f281 00000000ffffffff 00000000ffffffff [ 332.194734][T10908] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 332.203574][T10908] page dumped because: kasan: bad access detected [ 332.210203][T10908] page_owner tracks the page as allocated [ 332.216094][T10908] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 21925528703, free_ts 0 [ 332.236150][T10908] post_alloc_hook+0x1c0/0x230 [ 332.241096][T10908] get_page_from_freelist+0x132b/0x38e0 [ 332.246664][T10908] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 332.252732][T10908] alloc_pages_mpol+0x1fb/0x550 [ 332.257928][T10908] new_slab+0x247/0x330 [ 332.262099][T10908] ___slab_alloc+0xcf2/0x1740 [ 332.267120][T10908] __slab_alloc.constprop.0+0x56/0xb0 [ 332.272597][T10908] __kmalloc_cache_noprof+0xfb/0x3e0 [ 332.278311][T10908] bus_add_driver+0x92/0x690 [ 332.283024][T10908] driver_register+0x15c/0x4b0 [ 332.288002][T10908] usb_register_driver+0x216/0x4d0 [ 332.293313][T10908] uvc_init+0x24/0x60 [ 332.297380][T10908] do_one_initcall+0x120/0x6e0 [ 332.302417][T10908] kernel_init_freeable+0x5c2/0x910 [ 332.307713][T10908] kernel_init+0x1c/0x2b0 [ 332.312043][T10908] ret_from_fork+0x5d7/0x6f0 [ 332.316628][T10908] page_owner free stack trace missing [ 332.322078][T10908] [ 332.324470][T10908] Memory state around the buggy address: [ 332.330179][T10908] ffff88802a7cb900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 332.338251][T10908] ffff88802a7cb980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 332.346313][T10908] >ffff88802a7cba00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 332.354851][T10908] ^ [ 332.360052][T10908] ffff88802a7cba80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 332.368815][T10908] ffff88802a7cbb00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 332.377406][T10908] ================================================================== [ 332.385755][ C1] vkms_vblank_simulate: vblank timer overrun [ 332.487948][T10910] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1846'. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 334.482818][T10908] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 334.490247][T10908] CPU: 1 UID: 0 PID: 10908 Comm: syz.3.1845 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) [ 334.502131][T10908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 334.512305][T10908] Call Trace: [ 334.515809][T10908] [ 334.518823][T10908] dump_stack_lvl+0x3d/0x1f0 [ 334.523525][T10908] vpanic+0x6e8/0x7a0 [ 334.527595][T10908] ? __pfx_vpanic+0x10/0x10 [ 334.532092][T10908] ? __pfx_vprintk_emit+0x10/0x10 [ 334.537128][T10908] ? dvb_device_open+0x36a/0x3b0 [ 334.542049][T10908] panic+0xca/0xd0 [ 334.545810][T10908] ? __pfx_panic+0x10/0x10 [ 334.550301][T10908] ? dvb_device_open+0x36a/0x3b0 [ 334.555326][T10908] ? preempt_schedule_common+0x44/0xc0 [ 334.561042][T10908] ? preempt_schedule_thunk+0x16/0x30 [ 334.566555][T10908] check_panic_on_warn+0xab/0xb0 [ 334.571569][T10908] end_report+0x107/0x170 [ 334.576131][T10908] kasan_report+0xee/0x110 [ 334.580555][T10908] ? dvb_device_open+0x36a/0x3b0 [ 334.585683][T10908] ? __pfx_dvb_device_open+0x10/0x10 [ 334.591053][T10908] dvb_device_open+0x36a/0x3b0 [ 334.595981][T10908] ? __pfx_dvb_device_open+0x10/0x10 [ 334.601355][T10908] chrdev_open+0x231/0x6a0 [ 334.606039][T10908] ? __pfx_apparmor_file_open+0x10/0x10 [ 334.611857][T10908] ? __pfx_chrdev_open+0x10/0x10 [ 334.617172][T10908] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 334.624292][T10908] do_dentry_open+0x97f/0x1530 [ 334.629323][T10908] ? __pfx_chrdev_open+0x10/0x10 [ 334.634355][T10908] vfs_open+0x82/0x3f0 [ 334.638525][T10908] path_openat+0x1de4/0x2cb0 [ 334.643469][T10908] ? __pfx_path_openat+0x10/0x10 [ 334.648597][T10908] do_filp_open+0x20b/0x470 [ 334.653253][T10908] ? __pfx_do_filp_open+0x10/0x10 [ 334.658405][T10908] ? alloc_fd+0x471/0x7d0 [ 334.662932][T10908] do_sys_openat2+0x11b/0x1d0 [ 334.667642][T10908] ? __pfx_do_sys_openat2+0x10/0x10 [ 334.672861][T10908] ? __pfx_do_sys_openat2+0x10/0x10 [ 334.678189][T10908] ? __pfx___might_resched+0x10/0x10 [ 334.683743][T10908] __x64_sys_openat+0x174/0x210 [ 334.689057][T10908] ? __pfx___x64_sys_openat+0x10/0x10 [ 334.695052][T10908] do_syscall_64+0xcd/0x490 [ 334.699601][T10908] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.705672][T10908] RIP: 0033:0x7fb3bab8ebe9 [ 334.710133][T10908] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 334.729831][T10908] RSP: 002b:00007fb3bb948038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 334.738244][T10908] RAX: ffffffffffffffda RBX: 00007fb3badb5fa0 RCX: 00007fb3bab8ebe9 [ 334.746302][T10908] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 334.754273][T10908] RBP: 00007fb3bac11e19 R08: 0000000000000000 R09: 0000000000000000 [ 334.762680][T10908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 334.770837][T10908] R13: 00007fb3badb6038 R14: 00007fb3badb5fa0 R15: 00007fff58cd8bc8 [ 334.778925][T10908] [ 334.781996][T10908] Kernel Offset: disabled [ 334.786390][T10908] Rebooting in 86400 seconds..