last executing test programs: 7.19481182s ago: executing program 0 (id=1176): mremap$auto(0x110c230000, 0x4, 0x4, 0x7, 0x110c231000) 7.046164537s ago: executing program 0 (id=1177): mmap$auto(0x0, 0xfff, 0xdf, 0xeb1, 0x401, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) capset$auto(0x0, &(0x7f0000000000)={0x3, 0x7, 0x8}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x40400, 0x48) fchmod$auto(r0, 0x7439) fchown$auto(r0, 0x0, 0x400) r1 = openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000180)={0x80040, 0x40, 0xe}, 0x18) fremovexattr$auto(r1, &(0x7f0000000000)='system.posix_acl_access\x00') futex$auto(&(0x7f0000000000)=0x8, 0x7, 0x3, &(0x7f0000000040)={0x3, 0x401}, &(0x7f0000000080)=0x8, 0x3) recvmsg$auto(0x4, 0x0, 0x33c) 6.818949572s ago: executing program 0 (id=1179): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/vkms/graphics/fb0/rotate\x00', 0xb02, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x5, 0x2000000000002) bpf$auto(0x5, &(0x7f0000000100)=@task_fd_query={0x2, 0x2, 0x4, 0x0, 0x85, 0x7, 0x9, 0x6, 0x8001}, 0x101) socket$nl_generic(0x10, 0x3, 0x10) socket(0x26, 0x80805, 0x0) socket(0xa, 0x3, 0x6) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) bpf$auto(0x0, &(0x7f0000000040)=@bpf_attr_5={@target_ifindex=r1, 0x7f, 0x99, 0x8, 0x1, @relative_id=0x8, 0x5}, 0x92) r2 = open(0x0, 0x261c2, 0x84) bpf$auto(0x3, &(0x7f00000001c0)=@raw_tracepoint={0x5, r2, 0x0, 0x3}, 0xc) socket(0xa, 0x5, 0x84) close_range$auto(0x0, 0xfffffffffffff000, 0x3) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) write$auto(0xffffffffffffffff, &(0x7f0000000080)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94&\x81\xe2\x13\x8f\xea#\xf8F\xbbOO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\b\xc1\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(', 0xa) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r3 = openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r4 = getpid() pipe2$auto(&(0x7f00000000c0), 0x0) process_vm_readv$auto(r4, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) ioctl$auto(r3, 0x40246f4c, 0x38) r5 = fsopen$auto(0x0, 0x1) fsconfig$auto(r5, 0x6, 0x0, 0x0, 0x0) ioctl$auto_SNDCTL_DSP_GETFMTS(r5, 0x8004500b, &(0x7f0000000080)="2bed5a2f9535f29968afe3de473dde55e4c8b1bfa3597035c21038933234132c9a00e0976e597a844a420d34dae1366929a5faed0f0007670f9cb44df59c2430d702ec39f050fc4040") socket(0x11, 0x3, 0x9) socket$nl_generic(0x10, 0x3, 0x10) 6.774028488s ago: executing program 3 (id=1181): mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x101002, 0x0) set_mempolicy$auto(0x8003, &(0x7f0000000280)=0x7b, 0x4) mbind$auto(0x2000, 0x100000004, 0x10000f5ff, 0x0, 0x6, 0x2) 6.557627321s ago: executing program 3 (id=1184): mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) write$auto(0x3, 0x0, 0xffd8) iopl$auto(0x3) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/ip6_vti0/stable_secret\x00', 0x2, 0x0) pwrite64$auto(r0, 0x0, 0x1, 0x27) openat$auto_kmsg_fops_printk(0xffffffffffffff9c, 0x0, 0x22a080, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) capset$auto(0x0, 0x0) migrate_pages$auto(0x0, 0xa, 0x0, 0x0) socket(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) socket(0x15, 0x5, 0x0) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, 0x0, 0x2, 0x0) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x2000, 0x100000004, 0x20000000fffffffe, 0x0, 0x20005, 0x2) prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0) memfd_create$auto(0x0, 0xe) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000001180)='/sys/kernel/security/tomoyo/manager\x00', 0x2, 0x0) write$auto(0x3, 0x0, 0xfdf3) pwritev$auto(0x3, &(0x7f0000001000)={0x0, 0x8}, 0x5, 0x3, 0x9) openat$auto_u32_array_fops_file(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/debug/netdevsim/netdevsim4/ports/3/udp_ports_table1\x00', 0x200, 0x0) r1 = geteuid() keyctl$auto(0x1f, r1, r1, 0x5, 0x8) process_vm_readv$auto(0x0, 0x0, 0x4, 0x0, 0x6, 0x0) timer_create$auto(0x0, 0x0, 0x0) 6.494977027s ago: executing program 0 (id=1185): socket(0x2, 0x3, 0xa) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) socket(0xa, 0x1, 0x84) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) inotify_init1$auto(0x0) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) epoll_create$auto(0x4) socket(0xa, 0x1, 0x84) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000200)='}[,&*}/file0\x00', &(0x7f0000000080)={0x220000, 0x0, 0x11}, 0x18) io_uring_setup$auto(0xd, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000680)='/dev/v4l-subdev5\x00', 0x20281, 0x0) ioctl$auto(r1, 0xc038563c, r0) 6.425382603s ago: executing program 1 (id=1186): r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/fail-nth\x00', 0x440840, 0x0) r1 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/usb/usbmon/9t\x00', 0x0, 0x0) pread64$auto(r1, 0x0, 0x101, 0x103) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) read$auto_mon_fops_text_t_mon_text(r1, 0x0, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0xa101, 0x0) r2 = openat$auto_dfs_global_fops_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ubifs/chk_orphans\x00', 0x426a2, 0x0) write$auto_dfs_global_fops_debug(r2, &(0x7f0000000d80)='0', 0x1) write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x5) pipe2$auto(0x0, 0x80) 6.030781612s ago: executing program 1 (id=1188): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/v4l-touch4\x00', 0x40000, 0x0) ioctl$auto(r1, 0xc0045627, r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$auto_SMC_NETLINK_ENABLE_HS_LIMITATION(r2, &(0x7f00000006c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100}, 0x63, &(0x7f0000000680)={&(0x7f0000000580)={0xc4, r3, 0x800, 0x70bd29, 0x25dfdbfe, {}, "f3fcb9fc261c1fc4de5e45a0c06aa6550e4f73f77b205d7db02cf6ce8d258408d38a71a8f68cb6d8647fa2f686758aa9f24e89b9f4e76f0c6cfb975c93a525d4658878669a66356bc6dc92e56d47dabb9d267836b93538ed70bd85fe4045923c27d9662a9e93aba655bddbb7e8c40e69b8c3efcb869028272358f95642c694e83c1fd8ef8dd48da0f4f6e81e455a836eb2e889c9aaf7114d5d874a5c3f045949939d3e488c5b70188d1cdd52ccd6"}, 0xc4}, 0x1, 0x0, 0x0, 0x24000850}, 0x45) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r4 = syz_genetlink_get_family_id$auto_netdev(&(0x7f00000001c0), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_virt_wifi\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'veth1_to_bridge\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv_slave_1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'vlan1\x00', 0x0}) sendmsg$auto_NETDEV_CMD_DEV_GET(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x34, r4, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@NETDEV_A_DEV_IFINDEX={0x8, 0x1, r5}, @NETDEV_A_DEV_IFINDEX={0x8, 0x1, r6}, @NETDEV_A_DEV_IFINDEX={0x8, 0x1, r7}, @NETDEV_A_DEV_IFINDEX={0x8, 0x1, r8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40084}, 0xc0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRESDEC=0x0], 0x1ac}, 0x1, 0x0, 0x0, 0x40814}, 0x2004c0c0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) r9 = openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa1\x00', 0x101041, 0x0) writev$auto(r9, &(0x7f00000000c0)={&(0x7f0000000100)="7dfb3fd7bc57f6f8dfabf3464b6002e7f4061c40a58f86266598e954dca3a5e07cc3572c7a0d815a4ebf640b372e04ad57f9e655a57e3febd3b073915ff99f2c1134a400684eac3cc81ab7dc767ecd3bf8651ea21f7736643574b21ba5aa4f7a401b40f47f2e73fe1be2af8ff87733066e8f471fc3689b041edb1193e3a87ba4c59864d2275ddfefb183c53e083f16812e34cd6954d549841132188b6e7ade3aeefb59d62a60fec7cffaae414b88e4cd75264c4b5e919561", 0x8}, 0x4) 5.773741166s ago: executing program 0 (id=1189): unshare$auto(0x40000080) (async) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/virtual/block/loop8/io-timeout-fail\x00', 0x22100, 0x0) (async, rerun: 32) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 32) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r2 = socketpair$auto(0x1e, 0x6, 0x8000000000000000, 0x0) ioctl$auto(r1, 0x4b66, r2) (async) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000001180), 0x0, 0x0) ioctl$auto_KVM_GET_API_VERSION(r3, 0xae00, 0x0) (async, rerun: 64) rt_sigqueueinfo$auto(0x0, 0x1, 0x0) (rerun: 64) ptrace$auto_PTRACE_GETEVENTMSG(0x4201, 0x0, 0x101, 0xb) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000003480)=""/247, 0xf7) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x2, 0x1, 0x0, 0x5, 0x7) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async, rerun: 32) socket(0x2, 0x1, 0x100) (async, rerun: 32) bind$auto(0xffffffffffffffff, &(0x7f0000000040)=@vsock={0x28, 0x0, 0x2711}, 0x6a) (async) connect$auto(0x3, &(0x7f0000000080)=@can, 0x4) (async) shutdown$auto(0x200000003, 0x2) (async) madvise$auto(0x4, 0x2003ef, 0x15) (async) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio1\x00', 0x20b42, 0x0) mmap$auto(0x8, 0x9, 0x1, 0xeb3, 0xfffefffffffffffa, 0x8000) (async) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/graphics/fbcon/cursor_blink\x00', 0x0, 0x0) (async) r5 = open(&(0x7f0000000000)='./file0\x00', 0x149443, 0x14) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000100)=""/192, 0xc0) write$auto(r4, 0x0, 0x0) (async, rerun: 32) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async, rerun: 32) setsockopt$auto(0xffffffffffffffff, 0x8, 0xc, 0x0, 0x2) (async) unshare$auto(0x40000080) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x8080) 5.637791332s ago: executing program 1 (id=1191): keyctl$auto(0x3, 0xfffffffffffffffd, 0x0, 0xee01, 0xa00002) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\v\xba\x8av\xf0\x85\x9e`\x1fN$\xd4\x1c\xe0\xa6\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x89\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI', 0x100000a3db) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x5, 0x9000000000000005, 0x2009, 0x0, 0x0) r1 = openat$auto_proc_pid_numa_maps_operations_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x40001, 0x0) ioctl$auto_TCFLSH2(r2, 0x80045439, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) ioctl$auto(r2, 0x8926, r2) read$auto_proc_sessionid_operations_base(r1, 0x0, 0x0) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, &(0x7f0000000040)='/dev/media15\x00', 0x40801, 0x0) madvise$auto(0x0, 0x200007, 0x19) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000005800), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_TX_INFO_FRAME(0xffffffffffffffff, &(0x7f0000006940)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000041}, 0x800) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x1, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000012c0)='/sys/devices/virtual/block/ram4/queue/physical_block_size\x00', 0xa00, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f00000004c0)=""/206, 0xce) syz_open_procfs$namespace(0x0, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\x00x \xec(\x1d\x98\xe9\xc4\xe8\xfc@6=\xab\xf4\x89\x01\x93\xdc\x19\xffv\'\xa1\xd5\x14\x06S\xae\xadB}\xdf]\x99\xc9\x9f4\xbb\xc5\x81\x9d\x8ak\xdeB\xcbd\xd3\x05\xe4P\x84\xcb\xb8#\x13\nYU\'\x95R\xc8\x9d\xb7*\xe0.\xd2\xdf\x1b\x88D\x8c{k\xcec\xe1\xa2j\xec\xc9\xd2\x98\x94I\x102h\x06\x8c\xa2\xc8\x8a7\xb7t', 0x7f1) modify_ldt$auto(0x40, 0x0, 0x7ff) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/can/rcvlist_sff\x00', 0x400, 0x0) pread64$auto(r4, 0x0, 0x101fb, 0x8800000005) unshare$auto(0x40000080) 5.504375774s ago: executing program 3 (id=1192): unshare$auto(0x40000080) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) socket(0x2, 0x1, 0x0) epoll_create$auto(0x4) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/xfrm0/suppress_frag_ndisc\x00', 0x0, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0xa, 0x3, 0x3, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0x8000]}, 0x0) sched_get_priority_min$auto(0x40) mmap$auto(0x2, 0x8, 0xfffffffffffffffc, 0x9b72, 0x2, 0x8000) getsockopt$auto(0x3, 0x200000000001, 0x19, 0x0, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) unshare$auto(0x40000080) statx$auto(0x2, 0x0, 0x1000, 0x8, 0x0) mmap$auto(0x666, 0x10c482, 0x0, 0xeb1, 0x401, 0x3) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48403, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/memory/memory15/online\x00', 0xa001, 0x0) write$auto(r1, &(0x7f0000000140)='0[.[\x00', 0xcd04) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/lru_gen/enabled\x00', 0xb02, 0x0) sendfile$auto(r0, r2, 0x0, 0x3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, 0x0, 0x1541, 0x0) socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x40000080) fsopen$auto(0x0, 0x1) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xd4, 0x8000) 4.673847684s ago: executing program 2 (id=1193): socket(0x2a, 0x2, 0x1) openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000540), 0xa0100, 0x0) openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f00000000c0), 0x2802, 0x0) openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/media5\x00', 0x202, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) openat$auto_objects_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) pwrite64$auto(0xc8, &(0x7f0000000000)='p\x10\xb5n\x91p\xe6\x94\xa1\x90Z\x99\x88d\x11\x1cJ\x99\x12:\x00!\r>\x94\x1a\xd3\xd3\x1d\x93\xab{Lh\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CQ\"\x01\x0e\xa4\xdf\x11\xbb\a\x90\x11x\xfb\xdav\x1cC\x8a\xeeq\xf0\xcdr\xc1\xa8\xcd\xf9.=(\xeb\xd1\x14^\x87&^\xcc\x181\xd6\xa3k\xd9\x9f\xefC\xda\x1f+\xb4`\xdd02S\x18\x9efHu\xfe\xfd\x90\x13\xa2(o\xdf\x82\xca\xb4C\x06-&\xf1\xa22(\xc7}\x0eE.R<\xea\x8e-\x9cv\x0e\xcb\x95\x15\xce\xb3\x8f\xb9]\x9f\xd6\xa0;', 0x28, 0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x3, 0x7, 0x8000000000000000, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) open(0x0, 0x22240, 0x55) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$auto(0x3, 0x80106f53, r0) r1 = openat$auto_bm_register_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) mmap$auto(0x5, 0x4, 0x2, 0x16, r1, 0x6) 3.690897931s ago: executing program 2 (id=1194): close_range$auto(0x0, 0xfffffffffffff000, 0x0) r0 = bpf$auto(0x1, 0x0, 0x10) mmap$auto(0x81, 0x8, 0x3, 0x9b72, r0, 0x8000) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x40242, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x2) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) unshare$auto(0xfffffffffffffffe) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0xf88, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x1, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x41000, 0x0) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x4) r3 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) poll$auto(&(0x7f0000000180)={r3, 0xfff7, 0x9816}, 0x68000000, 0x1) ioctl$auto_VHOST_SET_OWNER(r4, 0xaf01, 0x0) ioctl$auto(r3, 0x4008af24, r3) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x1, 0x0) mq_notify$auto(0xffffffffffffffff, &(0x7f00000002c0)={@sival_int=0xe, @inferred=r1, 0x9, @_sigev_thread={&(0x7f0000000480)=&(0x7f0000000340)=0x81, &(0x7f00000003c0)="f06f5d58cc90da720d401185687422178da09b5a067fc2086df7a7bd1a128cee2b8fab0bdb3f072e50ca745338d4a5a85f8d5148e4273a3011d90eef94e2ad9f7e3e1f28308da43ad6869c4240b02d3fe01d700649cede986d591e753b6850b858e2eb3715623533a2b5e5a4dc80a6c892edf040713f1f9362e2ba66aa9ebca0c7e9086f080c7f43ddfdd4d2f8da1680d9bb8500185d"}}) mmap$auto(0x3, 0x622, 0xdb, 0x9b73, 0x5, 0x3) r5 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x80100, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r5, 0x40146f2c, 0x0) close_range$auto(0x2, 0xa, 0x0) 3.30366511s ago: executing program 2 (id=1195): unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x4000000000db, 0x12, 0x400, 0x18002) r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) sendmsg$auto_THERMAL_GENL_CMD_THRESHOLD_FLUSH(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f00)=ANY=[@ANYRES32, @ANYBLOB="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"], 0x2bc4}, 0x1, 0x0, 0x0, 0xc040004}, 0x1) write$auto_console_fops_tty_io(r0, &(0x7f0000000440)="671d2647dd69b6440843b6e6688a2b5ad9df2669e6f9cd2365", 0xfdef) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x40040, 0x0) listmount$auto(0x0, 0x0, 0x7fffffffffffffff, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000380)='/dev/midi2\x00', 0x20001, 0x0) openat$auto_uhid_fops_uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2201, 0x0) ioperm$auto(0x7, 0x5ad2, 0x8) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x4400000000df, 0xc157, 0x101000000000000, 0x7) sendmsg$auto_GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x15) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) epoll_create$auto(0x4) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x80000, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000800)='/dev/sequencer2\x00', 0x252000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0xa, 0x3, 0x3, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0x8000]}, 0x0) sched_get_priority_min$auto(0x40) mmap$auto(0x0, 0x8, 0x3, 0x9b72, 0x2, 0x8000) getsockopt$auto(0x3, 0x200000000001, 0x19, 0x0, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) fgetxattr$auto(0xffffffffffffffff, &(0x7f00000001c0)='*\x00', &(0x7f0000000200)="3b3b3f223e6478eac596616a1a0afc345a9f22f325e04a0ee380733a190a40c0d9f0e863940a2f2af1c06b180151f12bf9018a11bf1208b5", 0xfcc) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) unshare$auto(0x40000080) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) shmctl$auto_IPC_STAT(0xe000000, 0x2, &(0x7f0000000480)={{0x1, 0xee01, 0xee00, 0x4, 0x1}, 0x10000, 0x5, 0x4, 0xfffffffffffffffd, @raw=0x7fff, @raw, 0xff81, 0x0, &(0x7f0000000340)="90fb7aa26209040bc62e83867d69d53125c0b4fc7b29ff1cf7ae935f2c70a61c73720e81dc71eebe040ca1ec3f10c7a51441e6997139d036c51d6770542f11c337e1ca04d0523502738a89c0e008ea2930406f9d095b0e28e7286164bbcb3e0072e2ae10dd18a8d0b5f8a3b133b195e8f4dc96bf9ee6a5468b8f4c5f41ce30e412c582580c", &(0x7f0000000400)}) 1.765152875s ago: executing program 1 (id=1196): r0 = syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000ac0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_TCP_METRICS_CMD_GET(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000040)={0x14, r0, 0x89c1beb01534ff9b, 0x70bd29, 0x25dfd3f9, {0x1, 0x0, 0xf0}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1.602008917s ago: executing program 1 (id=1197): ioctl$auto_VHOST_SET_VRING_CALL2(0xffffffffffffffff, 0x4008af21, &(0x7f0000000000)={0x2, 0xffffffffffffffff}) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, r0, 0x8000) r1 = socket(0x29, 0x2, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x2000000}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) recvmmsg$auto(r2, &(0x7f0000000140)={{0x0, 0xfffffffe, 0x0, 0x5, 0x0, 0x200002, 0x8}, 0x801}, 0xfffffff9, 0x10, 0x0) ioctl$auto(r1, 0x8932, 0x24) 976.263549ms ago: executing program 3 (id=1198): close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, 0x0, 0x40090) socket(0x2, 0x3, 0x100) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, 0x0, 0x4004) r1 = socket(0xa, 0x5, 0x84) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400, 0xdf, 0xeb1, 0x1272, 0x8000) io_uring_setup$auto(0x6, 0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x40000, 0x0) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0xf7}, 0x7) read$auto(0x3, 0x0, 0x8) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000500)='/dev/video0\x00', 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0x2, 0x1, 0x84) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) mknod$auto(&(0x7f0000000000)='./file0\x00', 0x80, 0x3952e7e4) setsockopt$auto(0x3, 0x10000000084, 0x81, 0x0, 0x8) setsockopt$auto(0x3, 0x10000000084, 0x18, 0x0, 0x8) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) setsockopt$auto(r1, 0x10000000084, 0x23, 0x0, 0x8) 621.223976ms ago: executing program 1 (id=1199): socket(0xa, 0x3, 0x87) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "00800000ffefffffff0200000001"}, 0x55) setsockopt$auto(0x400000000000003, 0x29, 0x6, 0x0, 0x3) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) mmap$auto(0x0, 0x20007, 0x4000000000df, 0xeb1, 0x401, 0x8000) shutdown$auto(0x200000003, 0x2) r0 = open(0x0, 0x64842, 0x0) r1 = socket(0x28, 0x1, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000001, 0x8e051, r0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) prctl$auto(0x1, 0x1, 0x4, 0x5, 0x7) madvise$auto(0xfffffffffffff001, 0xffffffffffff0001, 0x1d) socket(0x10, 0x2, 0x0) statmount$auto(0x0, 0x0, 0x1fe, 0xd) mmap$auto(0x0, 0x200003, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) madvise$auto(0x7668c77b, 0x68e3, 0xcd54) bpf$auto_BPF_MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)=@batch={0x2e152922, 0xffffffff, 0x8ff, 0x10001, 0x1, r1, 0x6}, 0x3) openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/clear_refs\x00', 0x2, 0x0) timer_create$auto(0xfffffffd, 0x0, 0x0) 533.600551ms ago: executing program 2 (id=1200): r0 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x24, r0, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x4a}, @NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0xb}]}, 0x24}}, 0x4000) 356.384213ms ago: executing program 2 (id=1201): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8000, 0x0) socket(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x161500, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_CREATE_VM(r0, 0xc048aeca, 0x2000) 333.093141ms ago: executing program 3 (id=1202): mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) (async, rerun: 64) madvise$auto(0x0, 0xffffffffffff0006, 0x55) (async, rerun: 64) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}}, 0x40000) bpf$auto(0x12, &(0x7f0000000040)=@link_detach, 0x26) (async) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async, rerun: 32) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (rerun: 32) setsockopt$auto(0x3, 0x6, 0x9, 0x0, 0xfb3) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) (async) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x8000, 0xd, 0x1, 0x948b, 0x3, 0x15f4da07, 0x3, 0xd, 0xb979, 0x8000001f, 0x1000, 0x6d3d, 0xc, 0x2, 0x8]}, 0x0) (async, rerun: 32) openat$auto_rb_simple_fops_trace(0xffffffffffffff9c, &(0x7f0000002440)='/sys/kernel/tracing/tracing_on\x00', 0x2, 0x0) (rerun: 32) sendmsg$auto(r2, 0x0, 0x5) (async) select$auto(0xe, &(0x7f00000000c0)={[0xeeca, 0x7, 0xb, 0x9, 0x6, 0x1fc, 0x6, 0x3, 0x2, 0x4618ecd2, 0x3, 0x42ff, 0x6, 0x9a8c, 0x9, 0x10001]}, 0x0, 0x0, &(0x7f0000000280)={0x6, 0xcb}) (async, rerun: 32) recvfrom$auto(0x3, 0x0, 0xc, 0x100, 0x0, 0xfffffffffffffffd) (rerun: 32) write$auto(0x3, 0x0, 0xfffffdef) (async) mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x1a1842, 0x0) (async) unshare$auto(0x40000080) (async) sendmsg$auto_NFC_CMD_GET_DEVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="58010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x158}, 0x1, 0x0, 0x0, 0x48000}, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) sendmsg$auto_NETDEV_CMD_DEV_GET(r0, &(0x7f0000000240)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x841}, 0x200000c0) write$auto(0x3, 0x0, 0xfdef) (async) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/devices/platform/vivid.0/video4linux/vbi14/power/runtime_active_time\x00', 0x2a62, 0x0) write$auto(r3, &(0x7f0000000100)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\xfc\xb2\x00\x00\x00\x00y\x113!\x05\xa7\xd6M\xce\xd6\'\xdf@\x9f\xf5 \x8b_hw\x8em\xd0\b\xe7~15\x9dv\xb2H', 0x81) (async) write$auto(r3, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) 249.909695ms ago: executing program 0 (id=1203): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) r0 = socket(0x1e, 0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) (async) socket(0x2, 0x80002, 0x73) socket(0x2, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) r1 = semctl$auto(0x1ff, 0x100000001, 0x13, 0x9) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) (async) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) r3 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x2, 0x0) mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000000, 0x13, r3, 0x1000) ioctl$auto(r2, 0x2201, r2) capset$auto(&(0x7f0000000000)={0x15, r1}, &(0x7f0000000080)={0x2, 0x5, 0x2}) setsockopt$auto(0x3, 0x10000000084, 0x10, 0x0, 0xc) (async) setsockopt$auto(0x3, 0x10000000084, 0x10, 0x0, 0xc) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0xe6, 0x0, 0x2, 0xb}, 0xfff}, 0x6, 0x311) (async) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0xe6, 0x0, 0x2, 0xb}, 0xfff}, 0x6, 0x311) 57.924691ms ago: executing program 2 (id=1204): ioctl$auto___SNDRV_PCM_IOCTL_SYNC_PTR322(0xffffffffffffffff, 0xc0844123, &(0x7f00000003c0)={0x5, @status={0x6, 0x0, 0xcad, 0xa, 0xdd, 0x5, 0x54d8e21, 0x401}, @control={0x1, 0x5}}) r0 = openat$auto_hpet_fops_hpet(0xffffffffffffff9c, &(0x7f00000000c0), 0x648802, 0x0) mmap$auto(0x0, 0x400408, 0xdf, 0x9b72, r0, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x1c1080, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffe}, 0xfffffffffffffe93, 0x2, 0xc) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_seg6(&(0x7f0000002e40), 0xffffffffffffffff) sendmsg$auto_SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000002f00)={0x0, 0x0, &(0x7f0000002ec0)={&(0x7f00000005c0)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x4048c01}, 0x24) sendmsg$auto_SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000900)=ANY=[@ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x24000015}, 0x20001000) r2 = prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0) r3 = socket(0x2, 0x1, 0x0) getdents$auto(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0xc, 0x3ff}, 0x201) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_seg6(0x0, 0xffffffffffffffff) sendmsg$auto_SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYRES16=r5, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x800) socket(0x21, 0x5, 0xffffffff) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r6, 0x0, 0x8000) r7 = socket(0x5, 0x2, 0x88) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r7, @new_prog_fd=0x4, 0x4, @old_map_fd=r4}, 0xa3) prctl$auto(0x43, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$auto_taskstats(&(0x7f0000000200), r3) read$auto_proc_projid_map_operations_base(r2, &(0x7f0000000100)=""/226, 0xe2) 0s ago: executing program 3 (id=1205): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) recvfrom$auto(r0, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) sendmsg$auto_NETDEV_CMD_QSTATS_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}, 0x1, 0x42, 0x0, 0x20008800}, 0x1) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x14, 0x0, 0x2, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20040000}, 0x4004001) kernel console output (not intermixed with test programs): mp_fn+0x10/0x10 [ 200.411853][ T7947] ? watch_queue_init+0x45/0x170 [ 200.411891][ T7947] watch_queue_init+0x45/0x170 [ 200.411924][ T7947] create_pipe_files+0x676/0x9a0 [ 200.411989][ T7947] do_pipe2+0xaf/0x1c0 [ 200.412020][ T7947] ? __pfx_do_pipe2+0x10/0x10 [ 200.412053][ T7947] ? xfd_validate_state+0x61/0x180 [ 200.412101][ T7947] __x64_sys_pipe2+0x54/0x80 [ 200.412133][ T7947] do_syscall_64+0xcd/0x490 [ 200.412163][ T7947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.412188][ T7947] RIP: 0033:0x7fc84ad8eb69 [ 200.412209][ T7947] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 200.412232][ T7947] RSP: 002b:00007fc84bbd4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000125 [ 200.412258][ T7947] RAX: ffffffffffffffda RBX: 00007fc84afb5fa0 RCX: 00007fc84ad8eb69 [ 200.412274][ T7947] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 0000000000000000 [ 200.412289][ T7947] RBP: 00007fc84ae11df1 R08: 0000000000000000 R09: 0000000000000000 [ 200.412304][ T7947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 200.412319][ T7947] R13: 0000000000000000 R14: 00007fc84afb5fa0 R15: 00007fff055202d8 [ 200.412353][ T7947] [ 200.659094][ T5872] Bluetooth: hci0: command 0x0c1a tx timeout [ 201.439126][ T5872] Bluetooth: hci3: command 0x0c1a tx timeout [ 201.480315][ T7952] netlink: 'syz.0.471': attribute type 1 has an invalid length. [ 201.769511][ T5872] Bluetooth: hci1: command 0x0c1a tx timeout [ 202.729303][ T5872] Bluetooth: hci0: command 0x0c1a tx timeout [ 202.993461][ T7977] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 203.003391][ T7977] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 203.115731][ T7977] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 203.196771][ T7977] page_type: f5(slab) [ 203.251400][ T7977] raw: 00fff00000000040 ffff88801b842140 0000000000000000 dead000000000001 [ 203.523482][ T7977] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 203.532399][ T5872] Bluetooth: hci3: command 0x0c1a tx timeout [ 203.689905][ T7977] head: 00fff00000000040 ffff88801b842140 0000000000000000 dead000000000001 [ 203.711441][ T7977] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 203.722261][ T7977] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 203.747065][ T7977] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 203.759693][ T7977] page dumped because: unmovable page [ 203.839405][ T5872] Bluetooth: hci1: command 0x0c1a tx timeout [ 203.894428][ T7977] page_owner tracks the page as allocated [ 203.937911][ T7977] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5242, tgid 5242 (udevd), ts 44007417109, free_ts 42981430984 [ 203.968991][ T7977] post_alloc_hook+0x1c0/0x230 [ 203.985738][ T7977] get_page_from_freelist+0x132b/0x38e0 [ 204.044476][ T7977] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 204.050571][ T7977] alloc_pages_mpol+0x1fb/0x550 [ 204.058001][ T7977] new_slab+0x247/0x330 [ 204.068188][ T7977] ___slab_alloc+0xcf2/0x1740 [ 204.078358][ T7977] __slab_alloc.constprop.0+0x56/0xb0 [ 204.084118][ T7977] __kmalloc_noprof+0x2f2/0x510 [ 204.095991][ T7977] tomoyo_realpath_from_path+0xc2/0x6e0 [ 204.102725][ T7977] tomoyo_path_perm+0x274/0x460 [ 204.107741][ T7977] security_inode_getattr+0x116/0x290 [ 204.113406][ T7977] vfs_statx+0x121/0x3f0 [ 204.117674][ T7977] vfs_fstatat+0x7b/0xf0 [ 204.123583][ T7977] __do_sys_newfstatat+0x97/0x120 [ 204.128662][ T7977] do_syscall_64+0xcd/0x490 [ 204.133726][ T7977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.143949][ T7977] page last free pid 5337 tgid 5337 stack trace: [ 204.154242][ T7977] __free_frozen_pages+0x7d5/0x10f0 [ 204.159706][ T7977] __put_partials+0x165/0x1c0 [ 204.164543][ T7977] qlist_free_all+0x4d/0x120 [ 204.189367][ T7977] kasan_quarantine_reduce+0x195/0x1e0 [ 204.205354][ T7977] __kasan_slab_alloc+0x69/0x90 [ 204.224201][ T7977] __kmalloc_noprof+0x1d4/0x510 [ 204.239287][ T7977] tomoyo_encode2+0x100/0x3e0 [ 204.244094][ T7977] tomoyo_encode+0x29/0x50 [ 204.272176][ T7977] tomoyo_realpath_from_path+0x18f/0x6e0 [ 204.293095][ T7977] tomoyo_check_open_permission+0x2ab/0x3c0 [ 204.299523][ T7977] tomoyo_file_open+0x6b/0x90 [ 204.308899][ T7977] security_file_open+0x84/0x1e0 [ 204.339437][ T7977] do_dentry_open+0x596/0x1530 [ 204.344320][ T7977] vfs_open+0x82/0x3f0 [ 204.348440][ T7977] path_openat+0x1de4/0x2cb0 [ 204.359255][ T7977] do_filp_open+0x20b/0x470 [ 204.799576][ T5872] Bluetooth: hci0: command 0x0c1a tx timeout [ 205.611663][ T5872] Bluetooth: hci3: command 0x0c1a tx timeout [ 205.924470][ T5872] Bluetooth: hci1: command 0x0c1a tx timeout [ 209.867370][ T8071] ima: policy update failed [ 209.937142][ T30] audit: type=1802 audit(6049345470.494:5): pid=8071 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.494" res=0 errno=0 [ 210.213374][ T8087] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 211.045241][ T8133] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input9 [ 214.392782][ T8193] binder_alloc: binder_alloc_mmap_handler: 8191 0-1000 already mapped failed -16 [ 214.983636][ T8202] FAULT_INJECTION: forcing a failure. [ 214.983636][ T8202] name failslab, interval 1, probability 0, space 0, times 0 [ 214.983692][ T8202] CPU: 0 UID: 0 PID: 8202 Comm: syz.2.518 Not tainted 6.16.0-syzkaller-11699-g7e161a991ea7 #0 PREEMPT(full) [ 214.983724][ T8202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 214.983740][ T8202] Call Trace: [ 214.983747][ T8202] [ 214.983757][ T8202] dump_stack_lvl+0x16c/0x1f0 [ 214.983790][ T8202] should_fail_ex+0x512/0x640 [ 214.983827][ T8202] ? __kmalloc_noprof+0xbf/0x510 [ 214.983860][ T8202] ? vc_allocate+0x489/0x880 [ 214.983886][ T8202] should_failslab+0xc2/0x120 [ 214.983918][ T8202] __kmalloc_noprof+0xd2/0x510 [ 214.983957][ T8202] vc_allocate+0x489/0x880 [ 214.983984][ T8202] ? __pfx_vc_allocate+0x10/0x10 [ 214.984023][ T8202] con_install+0xa1/0x600 [ 214.984053][ T8202] ? __pfx_con_install+0x10/0x10 [ 214.984087][ T8202] ? __pfx_con_install+0x10/0x10 [ 214.984116][ T8202] tty_init_dev.part.0+0x9c/0x500 [ 214.984151][ T8202] tty_open+0xa50/0xf90 [ 214.984188][ T8202] ? __pfx_tty_open+0x10/0x10 [ 214.984218][ T8202] ? chrdev_open+0x58c/0x6a0 [ 214.984254][ T8202] ? __pfx_tty_open+0x10/0x10 [ 214.984283][ T8202] chrdev_open+0x234/0x6a0 [ 214.984316][ T8202] ? __pfx_chrdev_open+0x10/0x10 [ 214.984349][ T8202] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 214.984385][ T8202] do_dentry_open+0x982/0x1530 [ 214.984417][ T8202] ? __pfx_chrdev_open+0x10/0x10 [ 214.984456][ T8202] vfs_open+0x82/0x3f0 [ 214.984488][ T8202] path_openat+0x1de4/0x2cb0 [ 214.984531][ T8202] ? __pfx_path_openat+0x10/0x10 [ 214.984568][ T8202] do_filp_open+0x20b/0x470 [ 214.984592][ T8202] ? __pfx_do_filp_open+0x10/0x10 [ 214.984653][ T8202] ? alloc_fd+0x471/0x7d0 [ 214.984691][ T8202] do_sys_openat2+0x11b/0x1d0 [ 214.984728][ T8202] ? __pfx_do_sys_openat2+0x10/0x10 [ 214.984780][ T8202] __x64_sys_openat+0x174/0x210 [ 214.984822][ T8202] ? __pfx___x64_sys_openat+0x10/0x10 [ 214.984873][ T8202] do_syscall_64+0xcd/0x490 [ 214.984904][ T8202] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.984930][ T8202] RIP: 0033:0x7f75fc78eb69 [ 214.984949][ T8202] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 214.984972][ T8202] RSP: 002b:00007f75fd62b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 214.984996][ T8202] RAX: ffffffffffffffda RBX: 00007f75fc9b6160 RCX: 00007f75fc78eb69 [ 214.985012][ T8202] RDX: 0000000000040002 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 214.985029][ T8202] RBP: 00007f75fc811df1 R08: 0000000000000000 R09: 0000000000000000 [ 214.985044][ T8202] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000 [ 214.985058][ T8202] R13: 0000000000000000 R14: 00007f75fc9b6160 R15: 00007ffd81e09248 [ 214.985093][ T8202] [ 216.173608][ T8217] FAULT_INJECTION: forcing a failure. [ 216.173608][ T8217] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 216.209016][ T8217] CPU: 0 UID: 0 PID: 8217 Comm: syz.2.521 Not tainted 6.16.0-syzkaller-11699-g7e161a991ea7 #0 PREEMPT(full) [ 216.209057][ T8217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 216.209072][ T8217] Call Trace: [ 216.209080][ T8217] [ 216.209089][ T8217] dump_stack_lvl+0x16c/0x1f0 [ 216.209122][ T8217] should_fail_ex+0x512/0x640 [ 216.209158][ T8217] should_fail_alloc_page+0xe7/0x130 [ 216.209194][ T8217] prepare_alloc_pages+0x3c2/0x610 [ 216.209233][ T8217] ? rcu_is_watching+0x12/0xc0 [ 216.209263][ T8217] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 216.209294][ T8217] ? stack_depot_save_flags+0x29/0x9c0 [ 216.209339][ T8217] ? __lock_acquire+0x62e/0x1ce0 [ 216.209383][ T8217] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 216.209430][ T8217] ? __lock_acquire+0x62e/0x1ce0 [ 216.209467][ T8217] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 216.209501][ T8217] ? policy_nodemask+0xea/0x4e0 [ 216.209533][ T8217] alloc_pages_mpol+0x1fb/0x550 [ 216.209564][ T8217] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 216.209595][ T8217] ? __lock_acquire+0x62e/0x1ce0 [ 216.209626][ T8217] folio_alloc_mpol_noprof+0x36/0x2f0 [ 216.209659][ T8217] vma_alloc_folio_noprof+0xed/0x1e0 [ 216.209690][ T8217] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 216.209744][ T8217] do_pte_missing+0x2230/0x3ba0 [ 216.209768][ T8217] ? find_held_lock+0x2b/0x80 [ 216.209799][ T8217] __handle_mm_fault+0x152a/0x2a50 [ 216.209839][ T8217] ? __pfx___handle_mm_fault+0x10/0x10 [ 216.209865][ T8217] ? __pte_offset_map_lock+0x174/0x310 [ 216.209898][ T8217] ? find_held_lock+0x2b/0x80 [ 216.209929][ T8217] ? follow_page_pte.constprop.0+0x5cf/0x1390 [ 216.209971][ T8217] handle_mm_fault+0x589/0xd10 [ 216.210000][ T8217] __get_user_pages+0x551/0x34a0 [ 216.210050][ T8217] ? __pfx___get_user_pages+0x10/0x10 [ 216.210091][ T8217] populate_vma_page_range+0x267/0x3f0 [ 216.210128][ T8217] ? __pfx_populate_vma_page_range+0x10/0x10 [ 216.210161][ T8217] ? __pfx_find_vma_intersection+0x10/0x10 [ 216.210194][ T8217] ? do_mmap+0x69c/0x1210 [ 216.210226][ T8217] __mm_populate+0x1d8/0x380 [ 216.210265][ T8217] ? __pfx___mm_populate+0x10/0x10 [ 216.210300][ T8217] ? up_write+0x1b2/0x520 [ 216.210333][ T8217] vm_mmap_pgoff+0x37f/0x470 [ 216.210372][ T8217] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 216.210427][ T8217] ? __x64_sys_futex+0x1e0/0x4c0 [ 216.210454][ T8217] ? __x64_sys_futex+0x1e9/0x4c0 [ 216.210485][ T8217] ksys_mmap_pgoff+0x7d/0x5c0 [ 216.210513][ T8217] ? xfd_validate_state+0x61/0x180 [ 216.210543][ T8217] ? __pfx_ksys_read+0x10/0x10 [ 216.210570][ T8217] __x64_sys_mmap+0x125/0x190 [ 216.210606][ T8217] do_syscall_64+0xcd/0x490 [ 216.210637][ T8217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.210659][ T8217] RIP: 0033:0x7f75fc78eb69 [ 216.210679][ T8217] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 216.210729][ T8217] RSP: 002b:00007f75fd64c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 216.210750][ T8217] RAX: ffffffffffffffda RBX: 00007f75fc9b6080 RCX: 00007f75fc78eb69 [ 216.210765][ T8217] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000021000 [ 216.210779][ T8217] RBP: 00007f75fc811df1 R08: 0000000000000002 R09: 0000000000008000 [ 216.210793][ T8217] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 216.210806][ T8217] R13: 0000000000000000 R14: 00007f75fc9b6080 R15: 00007ffd81e09248 [ 216.210837][ T8217] [ 217.018930][ T8221] FAULT_INJECTION: forcing a failure. [ 217.018930][ T8221] name failslab, interval 1, probability 0, space 0, times 0 [ 217.089795][ T8216] netlink: 342 bytes leftover after parsing attributes in process `syz.1.522'. [ 217.192020][ T8221] CPU: 1 UID: 0 PID: 8221 Comm: syz.0.523 Not tainted 6.16.0-syzkaller-11699-g7e161a991ea7 #0 PREEMPT(full) [ 217.192059][ T8221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 217.192068][ T8221] Call Trace: [ 217.192073][ T8221] [ 217.192080][ T8221] dump_stack_lvl+0x16c/0x1f0 [ 217.192100][ T8221] should_fail_ex+0x512/0x640 [ 217.192117][ T8221] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 217.192141][ T8221] should_failslab+0xc2/0x120 [ 217.192160][ T8221] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 217.192177][ T8221] ? __pfx_stack_trace_save+0x10/0x10 [ 217.192194][ T8221] ? __d_alloc+0x32/0xae0 [ 217.192213][ T8221] __d_alloc+0x32/0xae0 [ 217.192242][ T8221] d_alloc_parallel+0x111/0x1480 [ 217.192289][ T8221] ? find_held_lock+0x2b/0x80 [ 217.192318][ T8221] ? __pfx_d_alloc_parallel+0x10/0x10 [ 217.192363][ T8221] ? __d_lookup+0x266/0x4a0 [ 217.192406][ T8221] lookup_open.isra.0+0x665/0x1580 [ 217.192442][ T8221] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 217.192489][ T8221] ? mnt_get_write_access+0x20c/0x300 [ 217.192534][ T8221] path_openat+0x893/0x2cb0 [ 217.192570][ T8221] ? __pfx_path_openat+0x10/0x10 [ 217.192593][ T8221] do_filp_open+0x20b/0x470 [ 217.192610][ T8221] ? __pfx_do_filp_open+0x10/0x10 [ 217.192641][ T8221] ? alloc_fd+0x471/0x7d0 [ 217.192662][ T8221] do_sys_openat2+0x11b/0x1d0 [ 217.192684][ T8221] ? __pfx_do_sys_openat2+0x10/0x10 [ 217.192712][ T8221] __x64_sys_openat+0x174/0x210 [ 217.192733][ T8221] ? __pfx___x64_sys_openat+0x10/0x10 [ 217.192762][ T8221] do_syscall_64+0xcd/0x490 [ 217.192779][ T8221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.192794][ T8221] RIP: 0033:0x7fe439d8eb69 [ 217.192806][ T8221] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 217.192820][ T8221] RSP: 002b:00007fe43ac21038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 217.192833][ T8221] RAX: ffffffffffffffda RBX: 00007fe439fb6080 RCX: 00007fe439d8eb69 [ 217.192842][ T8221] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffffffffffffff9c [ 217.192850][ T8221] RBP: 00007fe439e11df1 R08: 0000000000000000 R09: 0000000000000000 [ 217.192859][ T8221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 217.192866][ T8221] R13: 0000000000000000 R14: 00007fe439fb6080 R15: 00007ffd428e9b08 [ 217.192884][ T8221] [ 218.603904][ T8244] nfsd: Unknown parameter 'Z' [ 221.701587][ T8322] ubi0: attaching mtd0 [ 221.729912][ T8322] ubi0: scanning is finished [ 221.758867][ T8322] ubi0: empty MTD device detected [ 222.216449][ T8322] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 222.261713][ T8322] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 222.305716][ T8322] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 222.402880][ T8322] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 222.470907][ T8322] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 222.479404][ T8322] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 222.488046][ T8322] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2899464943 [ 222.501086][ T8322] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 222.520841][ T8343] ubi0: background thread "ubi_bgt0d" started, PID 8343 [ 222.538816][ T8326] ubi0: detaching mtd0 [ 222.706485][ T8326] ubi0: mtd0 is detached [ 223.214268][ T8362] FAULT_INJECTION: forcing a failure. [ 223.214268][ T8362] name failslab, interval 1, probability 0, space 0, times 0 [ 223.232852][ T8362] CPU: 1 UID: 0 PID: 8362 Comm: syz.3.553 Not tainted 6.16.0-syzkaller-11699-g7e161a991ea7 #0 PREEMPT(full) [ 223.232890][ T8362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 223.232905][ T8362] Call Trace: [ 223.232914][ T8362] [ 223.232924][ T8362] dump_stack_lvl+0x16c/0x1f0 [ 223.232956][ T8362] should_fail_ex+0x512/0x640 [ 223.232988][ T8362] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 223.233023][ T8362] should_failslab+0xc2/0x120 [ 223.233058][ T8362] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 223.233087][ T8362] ? __asan_memcpy+0x3c/0x60 [ 223.233112][ T8362] ? __kernfs_new_node+0xd2/0x8e0 [ 223.233147][ T8362] __kernfs_new_node+0xd2/0x8e0 [ 223.233183][ T8362] ? __pfx___kernfs_new_node+0x10/0x10 [ 223.233222][ T8362] ? find_held_lock+0x2b/0x80 [ 223.233249][ T8362] ? kernfs_root+0xee/0x2a0 [ 223.233287][ T8362] kernfs_new_node+0x13c/0x1e0 [ 223.233330][ T8362] kernfs_create_link+0xcc/0x240 [ 223.233359][ T8362] sysfs_do_create_link_sd+0x90/0x140 [ 223.233394][ T8362] sysfs_create_link_nowarn+0x5e/0xc0 [ 223.233426][ T8362] rpc_sysfs_client_setup+0x246/0x320 [ 223.233468][ T8362] ? __pfx_rpc_sysfs_client_setup+0x10/0x10 [ 223.233506][ T8362] ? rpc_net_ns+0xe8/0x2a0 [ 223.233538][ T8362] rpc_new_client+0x948/0x1320 [ 223.233577][ T8362] __rpc_clone_client+0x1d5/0x830 [ 223.233609][ T8362] rpc_bind_new_program+0x1ac/0x290 [ 223.233641][ T8362] ? __pfx_rpc_bind_new_program+0x10/0x10 [ 223.233694][ T8362] ? __pfx___might_resched+0x10/0x10 [ 223.233731][ T8362] ? rcu_is_watching+0x12/0xc0 [ 223.233765][ T8362] rpcb_create_local_net+0x152/0x300 [ 223.233792][ T8362] ? __pfx_rpcb_create_local_net+0x10/0x10 [ 223.233839][ T8362] ? rpcb_create_local+0x1da/0x270 [ 223.233872][ T8362] rpcb_create_local+0x22d/0x270 [ 223.233901][ T8362] svc_bind+0x1e8/0x260 [ 223.233933][ T8362] nfsd_create_serv+0x2d2/0x480 [ 223.233971][ T8362] ? __pfx_nfsd_create_serv+0x10/0x10 [ 223.234009][ T8362] ? __nla_validate_parse+0x600/0x2880 [ 223.234052][ T8362] nfsd_nl_listener_set_doit+0xdd/0x1b10 [ 223.234098][ T8362] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 223.234129][ T8362] ? __nla_parse+0x40/0x60 [ 223.234167][ T8362] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 223.234200][ T8362] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 223.234241][ T8362] genl_family_rcv_msg_doit+0x209/0x2f0 [ 223.234276][ T8362] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 223.234305][ T8362] ? rcu_is_watching+0x12/0xc0 [ 223.234343][ T8362] ? bpf_lsm_capable+0x9/0x10 [ 223.234366][ T8362] ? security_capable+0x7e/0x260 [ 223.234410][ T8362] genl_rcv_msg+0x55c/0x800 [ 223.234446][ T8362] ? __pfx_genl_rcv_msg+0x10/0x10 [ 223.234478][ T8362] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 223.234522][ T8362] netlink_rcv_skb+0x158/0x420 [ 223.234548][ T8362] ? __pfx_genl_rcv_msg+0x10/0x10 [ 223.234581][ T8362] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 223.234624][ T8362] ? netlink_deliver_tap+0x1ae/0xd30 [ 223.234656][ T8362] genl_rcv+0x28/0x40 [ 223.234683][ T8362] netlink_unicast+0x5a7/0x870 [ 223.234786][ T8362] ? __pfx_netlink_unicast+0x10/0x10 [ 223.234814][ T8362] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 223.234838][ T8362] ? __lock_acquire+0xb97/0x1ce0 [ 223.234881][ T8362] netlink_sendmsg+0x8d1/0xdd0 [ 223.234915][ T8362] ? __pfx_netlink_sendmsg+0x10/0x10 [ 223.234948][ T8362] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 223.234993][ T8362] ____sys_sendmsg+0xa98/0xc70 [ 223.235028][ T8362] ? copy_msghdr_from_user+0x10a/0x160 [ 223.235054][ T8362] ? __pfx_____sys_sendmsg+0x10/0x10 [ 223.235104][ T8362] ___sys_sendmsg+0x134/0x1d0 [ 223.235134][ T8362] ? __pfx____sys_sendmsg+0x10/0x10 [ 223.235203][ T8362] __sys_sendmsg+0x16d/0x220 [ 223.235230][ T8362] ? __pfx___sys_sendmsg+0x10/0x10 [ 223.235256][ T8362] ? __x64_sys_futex+0x1e0/0x4c0 [ 223.235311][ T8362] do_syscall_64+0xcd/0x490 [ 223.235342][ T8362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.235366][ T8362] RIP: 0033:0x7f923db8eb69 [ 223.235388][ T8362] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 223.235413][ T8362] RSP: 002b:00007f923e9ec038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 223.235438][ T8362] RAX: ffffffffffffffda RBX: 00007f923ddb5fa0 RCX: 00007f923db8eb69 [ 223.235455][ T8362] RDX: 0000000000000000 RSI: 0000200000003140 RDI: 0000000000000004 [ 223.235471][ T8362] RBP: 00007f923dc11df1 R08: 0000000000000000 R09: 0000000000000000 [ 223.235488][ T8362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 223.235502][ T8362] R13: 0000000000000000 R14: 00007f923ddb5fa0 R15: 00007ffd8de37ae8 [ 223.235539][ T8362] [ 223.235582][ T8362] can't create link to switch in sysfs (-12) [ 223.723475][ T8370] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input10 [ 229.325449][ T8459] FAULT_INJECTION: forcing a failure. [ 229.325449][ T8459] name failslab, interval 1, probability 0, space 0, times 0 [ 229.341424][ T8459] CPU: 0 UID: 0 PID: 8459 Comm: syz.0.578 Not tainted 6.16.0-syzkaller-11699-g7e161a991ea7 #0 PREEMPT(full) [ 229.341460][ T8459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 229.341474][ T8459] Call Trace: [ 229.341483][ T8459] [ 229.341492][ T8459] dump_stack_lvl+0x16c/0x1f0 [ 229.341524][ T8459] should_fail_ex+0x512/0x640 [ 229.341551][ T8459] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 229.341581][ T8459] should_failslab+0xc2/0x120 [ 229.341612][ T8459] __kmalloc_cache_noprof+0x6a/0x3e0 [ 229.341638][ T8459] ? trace_parse_run_command+0x58/0x400 [ 229.341677][ T8459] trace_parse_run_command+0x58/0x400 [ 229.341709][ T8459] ? __pfx_create_dyn_event+0x10/0x10 [ 229.341738][ T8459] ? __pfx_dyn_event_write+0x10/0x10 [ 229.341760][ T8459] vfs_write+0x2a0/0x1150 [ 229.341795][ T8459] ? __pfx___mutex_lock+0x10/0x10 [ 229.341821][ T8459] ? __pfx_vfs_write+0x10/0x10 [ 229.341859][ T8459] ? __fget_files+0x20e/0x3c0 [ 229.341897][ T8459] ksys_write+0x12a/0x250 [ 229.341925][ T8459] ? __pfx_ksys_write+0x10/0x10 [ 229.341963][ T8459] do_syscall_64+0xcd/0x490 [ 229.341993][ T8459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.342017][ T8459] RIP: 0033:0x7fe439d8eb69 [ 229.342037][ T8459] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 229.342059][ T8459] RSP: 002b:00007fe43ac42038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 229.342082][ T8459] RAX: ffffffffffffffda RBX: 00007fe439fb5fa0 RCX: 00007fe439d8eb69 [ 229.342099][ T8459] RDX: 0000000000000014 RSI: 0000200000000140 RDI: 0000000000000007 [ 229.342112][ T8459] RBP: 00007fe43ac42090 R08: 0000000000000000 R09: 0000000000000000 [ 229.342126][ T8459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 229.342140][ T8459] R13: 0000000000000000 R14: 00007fe439fb5fa0 R15: 00007ffd428e9b08 [ 229.342174][ T8459] [ 229.410070][ T8458] netlink: 28 bytes leftover after parsing attributes in process `syz.2.577'. [ 229.620995][ T8466] FAULT_INJECTION: forcing a failure. [ 229.620995][ T8466] name failslab, interval 1, probability 0, space 0, times 0 [ 229.653472][ T8466] CPU: 1 UID: 0 PID: 8466 Comm: syz.0.580 Not tainted 6.16.0-syzkaller-11699-g7e161a991ea7 #0 PREEMPT(full) [ 229.653511][ T8466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 229.653526][ T8466] Call Trace: [ 229.653535][ T8466] [ 229.653544][ T8466] dump_stack_lvl+0x16c/0x1f0 [ 229.653578][ T8466] should_fail_ex+0x512/0x640 [ 229.653607][ T8466] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 229.653638][ T8466] should_failslab+0xc2/0x120 [ 229.653669][ T8466] __kmalloc_cache_noprof+0x6a/0x3e0 [ 229.653695][ T8466] ? cec_open+0xdb/0x690 [ 229.653722][ T8466] cec_open+0xdb/0x690 [ 229.653746][ T8466] ? __pfx_cec_open+0x10/0x10 [ 229.653775][ T8466] ? do_raw_spin_lock+0x12c/0x2b0 [ 229.653808][ T8466] ? find_held_lock+0x2b/0x80 [ 229.653835][ T8466] ? chrdev_open+0x58c/0x6a0 [ 229.653868][ T8466] ? __pfx_cec_open+0x10/0x10 [ 229.653892][ T8466] chrdev_open+0x234/0x6a0 [ 229.653924][ T8466] ? __pfx_chrdev_open+0x10/0x10 [ 229.653957][ T8466] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 229.653993][ T8466] do_dentry_open+0x982/0x1530 [ 229.654023][ T8466] ? __pfx_chrdev_open+0x10/0x10 [ 229.654061][ T8466] vfs_open+0x82/0x3f0 [ 229.654098][ T8466] path_openat+0x1de4/0x2cb0 [ 229.654148][ T8466] ? __pfx_path_openat+0x10/0x10 [ 229.654187][ T8466] do_filp_open+0x20b/0x470 [ 229.654218][ T8466] ? __pfx_do_filp_open+0x10/0x10 [ 229.654267][ T8466] ? alloc_fd+0x471/0x7d0 [ 229.654303][ T8466] do_sys_openat2+0x11b/0x1d0 [ 229.654339][ T8466] ? __pfx_do_sys_openat2+0x10/0x10 [ 229.654389][ T8466] __x64_sys_openat+0x174/0x210 [ 229.654426][ T8466] ? __pfx___x64_sys_openat+0x10/0x10 [ 229.654474][ T8466] do_syscall_64+0xcd/0x490 [ 229.654503][ T8466] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.654526][ T8466] RIP: 0033:0x7fe439d8eb69 [ 229.654547][ T8466] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 229.654570][ T8466] RSP: 002b:00007fe43ac42038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 229.654594][ T8466] RAX: ffffffffffffffda RBX: 00007fe439fb5fa0 RCX: 00007fe439d8eb69 [ 229.654609][ T8466] RDX: 0000000000101901 RSI: 0000200000002c00 RDI: ffffffffffffff9c [ 229.654623][ T8466] RBP: 00007fe439e11df1 R08: 0000000000000000 R09: 0000000000000000 [ 229.654636][ T8466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 229.654651][ T8466] R13: 0000000000000000 R14: 00007fe439fb5fa0 R15: 00007ffd428e9b08 [ 229.654682][ T8466] [ 230.110950][ T30] audit: type=1800 audit(6049345490.664:6): pid=8470 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.581" name="trace_pipe" dev="tracefs" ino=1062 res=0 errno=0 [ 232.730164][ T8512] input: jJǸ-9%vJ86 as /devices/virtual/input/input11 [ 232.770823][ T8508] netlink: 4 bytes leftover after parsing attributes in process `syz.0.591'. [ 232.791165][ T8508] netlink: 354 bytes leftover after parsing attributes in process `syz.0.591'. [ 235.323602][ T8545] FAULT_INJECTION: forcing a failure. [ 235.323602][ T8545] name failslab, interval 1, probability 0, space 0, times 0 [ 235.388858][ T8545] CPU: 0 UID: 0 PID: 8545 Comm: syz.3.600 Not tainted 6.16.0-syzkaller-11699-g7e161a991ea7 #0 PREEMPT(full) [ 235.388894][ T8545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 235.388907][ T8545] Call Trace: [ 235.388915][ T8545] [ 235.388924][ T8545] dump_stack_lvl+0x16c/0x1f0 [ 235.388955][ T8545] should_fail_ex+0x512/0x640 [ 235.388983][ T8545] ? fs_reclaim_acquire+0xae/0x150 [ 235.389021][ T8545] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 235.389051][ T8545] should_failslab+0xc2/0x120 [ 235.389081][ T8545] __kmalloc_noprof+0xd2/0x510 [ 235.389117][ T8545] tomoyo_realpath_from_path+0xc2/0x6e0 [ 235.389156][ T8545] tomoyo_check_open_permission+0x2ab/0x3c0 [ 235.389183][ T8545] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 235.389253][ T8545] ? find_held_lock+0x2b/0x80 [ 235.389288][ T8545] tomoyo_file_open+0x6b/0x90 [ 235.389323][ T8545] security_file_open+0x84/0x1e0 [ 235.389352][ T8545] do_dentry_open+0x596/0x1530 [ 235.389392][ T8545] vfs_open+0x82/0x3f0 [ 235.389430][ T8545] path_openat+0x1de4/0x2cb0 [ 235.389470][ T8545] ? __pfx_path_openat+0x10/0x10 [ 235.389507][ T8545] do_filp_open+0x20b/0x470 [ 235.389536][ T8545] ? __pfx_do_filp_open+0x10/0x10 [ 235.389578][ T8545] ? __pfx_kfree_link+0x10/0x10 [ 235.389620][ T8545] ? alloc_fd+0x471/0x7d0 [ 235.389652][ T8545] do_sys_openat2+0x11b/0x1d0 [ 235.389685][ T8545] ? __pfx_do_sys_openat2+0x10/0x10 [ 235.389725][ T8545] __x64_sys_openat+0x174/0x210 [ 235.389765][ T8545] ? __pfx___x64_sys_openat+0x10/0x10 [ 235.389811][ T8545] do_syscall_64+0xcd/0x490 [ 235.389837][ T8545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.389859][ T8545] RIP: 0033:0x7f923db8d4d0 [ 235.389877][ T8545] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 235.389899][ T8545] RSP: 002b:00007f923e9ebfe0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 235.389922][ T8545] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f923db8d4d0 [ 235.389936][ T8545] RDX: 0000000000000002 RSI: 00007f923dc120d6 RDI: 00000000ffffff9c [ 235.389950][ T8545] RBP: 00007f923dc120d6 R08: 0000000000000000 R09: 00007f923e9ed000 [ 235.389965][ T8545] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000007 [ 235.389980][ T8545] R13: 0000000000000000 R14: 00007f923ddb5fa0 R15: 00007ffd8de37ae8 [ 235.390012][ T8545] [ 235.659281][ T8545] ERROR: Out of memory at tomoyo_realpath_from_path. [ 235.666384][ T8545] FAULT_INJECTION: forcing a failure. [ 235.666384][ T8545] name failslab, interval 1, probability 0, space 0, times 0 [ 235.688233][ T8545] CPU: 1 UID: 0 PID: 8545 Comm: syz.3.600 Not tainted 6.16.0-syzkaller-11699-g7e161a991ea7 #0 PREEMPT(full) [ 235.688270][ T8545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 235.688283][ T8545] Call Trace: [ 235.688291][ T8545] [ 235.688299][ T8545] dump_stack_lvl+0x16c/0x1f0 [ 235.688332][ T8545] should_fail_ex+0x512/0x640 [ 235.688360][ T8545] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 235.688391][ T8545] should_failslab+0xc2/0x120 [ 235.688422][ T8545] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 235.688448][ T8545] ? d_instantiate+0x77/0x90 [ 235.688504][ T8545] ? alloc_empty_file+0x55/0x1e0 [ 235.688543][ T8545] alloc_empty_file+0x55/0x1e0 [ 235.688578][ T8545] alloc_file_pseudo+0x13a/0x230 [ 235.688615][ T8545] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 235.688652][ T8545] ? __raw_spin_lock_init+0x3a/0x110 [ 235.688695][ T8545] create_pipe_files+0x364/0x9a0 [ 235.688730][ T8545] do_pipe2+0xaf/0x1c0 [ 235.688758][ T8545] ? __pfx_do_pipe2+0x10/0x10 [ 235.688787][ T8545] ? ksys_write+0x1ac/0x250 [ 235.688824][ T8545] __x64_sys_pipe2+0x54/0x80 [ 235.688855][ T8545] do_syscall_64+0xcd/0x490 [ 235.688883][ T8545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.688908][ T8545] RIP: 0033:0x7f923db8eb69 [ 235.688928][ T8545] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 235.688951][ T8545] RSP: 002b:00007f923e9ec038 EFLAGS: 00000246 ORIG_RAX: 0000000000000125 [ 235.688975][ T8545] RAX: ffffffffffffffda RBX: 00007f923ddb5fa0 RCX: 00007f923db8eb69 [ 235.688991][ T8545] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 0000000000000000 [ 235.689006][ T8545] RBP: 00007f923e9ec090 R08: 0000000000000000 R09: 0000000000000000 [ 235.689021][ T8545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 235.689037][ T8545] R13: 0000000000000000 R14: 00007f923ddb5fa0 R15: 00007ffd8de37ae8 [ 235.689064][ T8545] [ 235.881828][ C1] vkms_vblank_simulate: vblank timer overrun [ 236.354523][ T8555] vhci_hcd: invalid port number 16 [ 236.380640][ T8555] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 236.394613][ T8558] ACPI: Can not change Invalid GPE/Fixed Event status [ 236.763933][ T8570] FAULT_INJECTION: forcing a failure. [ 236.763933][ T8570] name failslab, interval 1, probability 0, space 0, times 0 [ 236.795844][ T8570] CPU: 1 UID: 0 PID: 8570 Comm: syz.0.606 Not tainted 6.16.0-syzkaller-11699-g7e161a991ea7 #0 PREEMPT(full) [ 236.795884][ T8570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 236.795899][ T8570] Call Trace: [ 236.795908][ T8570] [ 236.795918][ T8570] dump_stack_lvl+0x16c/0x1f0 [ 236.795951][ T8570] should_fail_ex+0x512/0x640 [ 236.795981][ T8570] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 236.796019][ T8570] should_failslab+0xc2/0x120 [ 236.796053][ T8570] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 236.796085][ T8570] ? addrconf_init_net+0x1e9/0x8e0 [ 236.796116][ T8570] ? __pfx_addrconf_init_net+0x10/0x10 [ 236.796148][ T8570] kmemdup_noprof+0x29/0x60 [ 236.796176][ T8570] addrconf_init_net+0x1e9/0x8e0 [ 236.796206][ T8570] ? ip6addrlbl_net_init+0x142/0x380 [ 236.796231][ T8570] ? __pfx_addrconf_init_net+0x10/0x10 [ 236.796264][ T8570] ops_init+0x1df/0x5f0 [ 236.796295][ T8570] setup_net+0x10f/0x380 [ 236.796324][ T8570] ? lockdep_init_map_type+0x5c/0x280 [ 236.796367][ T8570] ? __pfx_setup_net+0x10/0x10 [ 236.796405][ T8570] ? debug_mutex_init+0x37/0x70 [ 236.796434][ T8570] copy_net_ns+0x2a6/0x5f0 [ 236.796468][ T8570] create_new_namespaces+0x3ea/0xa90 [ 236.796507][ T8570] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 236.796540][ T8570] ksys_unshare+0x45b/0xa40 [ 236.796576][ T8570] ? __pfx_ksys_unshare+0x10/0x10 [ 236.796610][ T8570] ? xfd_validate_state+0x61/0x180 [ 236.796657][ T8570] __x64_sys_unshare+0x31/0x40 [ 236.796688][ T8570] do_syscall_64+0xcd/0x490 [ 236.796720][ T8570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.796746][ T8570] RIP: 0033:0x7fe439d8eb69 [ 236.796769][ T8570] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 236.796795][ T8570] RSP: 002b:00007fe43ac42038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 236.796819][ T8570] RAX: ffffffffffffffda RBX: 00007fe439fb5fa0 RCX: 00007fe439d8eb69 [ 236.796836][ T8570] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 236.796852][ T8570] RBP: 00007fe439e11df1 R08: 0000000000000000 R09: 0000000000000000 [ 236.796866][ T8570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 236.796881][ T8570] R13: 0000000000000000 R14: 00007fe439fb5fa0 R15: 00007ffd428e9b08 [ 236.796916][ T8570] [ 238.828793][ T8594] random: crng reseeded on system resumption [ 240.854263][ T8651] FAULT_INJECTION: forcing a failure. [ 240.854263][ T8651] name failslab, interval 1, probability 0, space 0, times 0 [ 240.903985][ T8651] CPU: 1 UID: 0 PID: 8651 Comm: syz.2.625 Not tainted 6.16.0-syzkaller-11699-g7e161a991ea7 #0 PREEMPT(full) [ 240.904031][ T8651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 240.904047][ T8651] Call Trace: [ 240.904056][ T8651] [ 240.904066][ T8651] dump_stack_lvl+0x16c/0x1f0 [ 240.904100][ T8651] should_fail_ex+0x512/0x640 [ 240.904131][ T8651] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 240.904166][ T8651] should_failslab+0xc2/0x120 [ 240.904200][ T8651] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 240.904230][ T8651] ? __pfx___might_resched+0x10/0x10 [ 240.904257][ T8651] ? __anon_vma_prepare+0x344/0x5e0 [ 240.904291][ T8651] __anon_vma_prepare+0x344/0x5e0 [ 240.904316][ T8651] ? __pfx___pte_alloc+0x10/0x10 [ 240.904354][ T8651] __vmf_anon_prepare+0x11c/0x240 [ 240.904393][ T8651] do_pte_missing+0x10bd/0x3ba0 [ 240.904421][ T8651] ? do_raw_spin_unlock+0x172/0x230 [ 240.904465][ T8651] ? __pmd_alloc+0x3fb/0x930 [ 240.904504][ T8651] __handle_mm_fault+0x152a/0x2a50 [ 240.904542][ T8651] ? __pfx___handle_mm_fault+0x10/0x10 [ 240.904601][ T8651] handle_mm_fault+0x589/0xd10 [ 240.904636][ T8651] __get_user_pages+0x551/0x34a0 [ 240.904690][ T8651] ? __pfx___get_user_pages+0x10/0x10 [ 240.904738][ T8651] populate_vma_page_range+0x267/0x3f0 [ 240.904780][ T8651] ? __pfx_populate_vma_page_range+0x10/0x10 [ 240.904817][ T8651] ? __pfx_find_vma_intersection+0x10/0x10 [ 240.904854][ T8651] ? do_mmap+0x69c/0x1210 [ 240.904892][ T8651] __mm_populate+0x1d8/0x380 [ 240.904932][ T8651] ? __pfx___mm_populate+0x10/0x10 [ 240.904970][ T8651] ? up_write+0x1b2/0x520 [ 240.905015][ T8651] vm_mmap_pgoff+0x37f/0x470 [ 240.905058][ T8651] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 240.905104][ T8651] ? __x64_sys_futex+0x1e0/0x4c0 [ 240.905135][ T8651] ? __x64_sys_futex+0x1e9/0x4c0 [ 240.905172][ T8651] ksys_mmap_pgoff+0x7d/0x5c0 [ 240.905205][ T8651] ? xfd_validate_state+0x61/0x180 [ 240.905240][ T8651] ? __pfx_ksys_read+0x10/0x10 [ 240.905272][ T8651] __x64_sys_mmap+0x125/0x190 [ 240.905314][ T8651] do_syscall_64+0xcd/0x490 [ 240.905345][ T8651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.905371][ T8651] RIP: 0033:0x7f75fc78eb69 [ 240.905393][ T8651] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 240.905417][ T8651] RSP: 002b:00007f75fd64c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 240.905441][ T8651] RAX: ffffffffffffffda RBX: 00007f75fc9b6080 RCX: 00007f75fc78eb69 [ 240.905457][ T8651] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 240.905473][ T8651] RBP: 00007f75fc811df1 R08: 0000000000000002 R09: 0000000000008000 [ 240.905488][ T8651] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 240.905504][ T8651] R13: 0000000000000000 R14: 00007f75fc9b6080 R15: 00007ffd81e09248 [ 240.905539][ T8651] [ 241.502962][ T8665] nfsd: Unknown parameter 'Z' [ 243.018992][ T8701] FAULT_INJECTION: forcing a failure. [ 243.018992][ T8701] name failslab, interval 1, probability 0, space 0, times 0 [ 243.051170][ T8701] CPU: 1 UID: 0 PID: 8701 Comm: syz.1.642 Not tainted 6.16.0-syzkaller-11699-g7e161a991ea7 #0 PREEMPT(full) [ 243.051207][ T8701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 243.051227][ T8701] Call Trace: [ 243.051235][ T8701] [ 243.051246][ T8701] dump_stack_lvl+0x16c/0x1f0 [ 243.051280][ T8701] should_fail_ex+0x512/0x640 [ 243.051312][ T8701] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 243.051344][ T8701] should_failslab+0xc2/0x120 [ 243.051378][ T8701] __kmalloc_cache_noprof+0x6a/0x3e0 [ 243.051406][ T8701] ? do_kimage_alloc_init+0x40/0x350 [ 243.051449][ T8701] do_kimage_alloc_init+0x40/0x350 [ 243.051487][ T8701] do_kexec_load+0x1fd/0x8a0 [ 243.051515][ T8701] ? __pfx_do_kexec_load+0x10/0x10 [ 243.051544][ T8701] ? _copy_from_user+0x59/0xd0 [ 243.051578][ T8701] __x64_sys_kexec_load+0x1bf/0x230 [ 243.051608][ T8701] do_syscall_64+0xcd/0x490 [ 243.051647][ T8701] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.051675][ T8701] RIP: 0033:0x7fc84ad8eb69 [ 243.051697][ T8701] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 243.051723][ T8701] RSP: 002b:00007fc84bbd4038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 243.051746][ T8701] RAX: ffffffffffffffda RBX: 00007fc84afb5fa0 RCX: 00007fc84ad8eb69 [ 243.051763][ T8701] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000005 [ 243.051776][ T8701] RBP: 00007fc84ae11df1 R08: 0000000000000000 R09: 0000000000000000 [ 243.051792][ T8701] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 243.051807][ T8701] R13: 0000000000000000 R14: 00007fc84afb5fa0 R15: 00007fff055202d8 [ 243.051840][ T8701] [ 243.227296][ C1] vkms_vblank_simulate: vblank timer overrun [ 244.196695][ T8727] FAULT_INJECTION: forcing a failure. [ 244.196695][ T8727] name failslab, interval 1, probability 0, space 0, times 0 [ 244.264706][ T8727] CPU: 1 UID: 0 PID: 8727 Comm: syz.3.650 Not tainted 6.16.0-syzkaller-11699-g7e161a991ea7 #0 PREEMPT(full) [ 244.264746][ T8727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 244.264762][ T8727] Call Trace: [ 244.264771][ T8727] [ 244.264782][ T8727] dump_stack_lvl+0x16c/0x1f0 [ 244.264817][ T8727] should_fail_ex+0x512/0x640 [ 244.264849][ T8727] ? fs_reclaim_acquire+0xae/0x150 [ 244.264891][ T8727] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 244.264932][ T8727] should_failslab+0xc2/0x120 [ 244.264967][ T8727] __kmalloc_noprof+0xd2/0x510 [ 244.265006][ T8727] tomoyo_realpath_from_path+0xc2/0x6e0 [ 244.265048][ T8727] tomoyo_check_open_permission+0x2ab/0x3c0 [ 244.265077][ T8727] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 244.265144][ T8727] ? find_held_lock+0x2b/0x80 [ 244.265181][ T8727] tomoyo_file_open+0x6b/0x90 [ 244.265218][ T8727] security_file_open+0x84/0x1e0 [ 244.265249][ T8727] do_dentry_open+0x596/0x1530 [ 244.265292][ T8727] vfs_open+0x82/0x3f0 [ 244.265332][ T8727] path_openat+0x1de4/0x2cb0 [ 244.265374][ T8727] ? __pfx_path_openat+0x10/0x10 [ 244.265414][ T8727] do_filp_open+0x20b/0x470 [ 244.265445][ T8727] ? __pfx_do_filp_open+0x10/0x10 [ 244.265502][ T8727] ? alloc_fd+0x471/0x7d0 [ 244.265539][ T8727] do_sys_openat2+0x11b/0x1d0 [ 244.265577][ T8727] ? __pfx_do_sys_openat2+0x10/0x10 [ 244.265628][ T8727] __x64_sys_openat+0x174/0x210 [ 244.265667][ T8727] ? __pfx___x64_sys_openat+0x10/0x10 [ 244.265720][ T8727] do_syscall_64+0xcd/0x490 [ 244.265752][ T8727] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.265777][ T8727] RIP: 0033:0x7f923db8eb69 [ 244.265800][ T8727] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 244.265826][ T8727] RSP: 002b:00007f923e9cb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 244.265849][ T8727] RAX: ffffffffffffffda RBX: 00007f923ddb6080 RCX: 00007f923db8eb69 [ 244.265866][ T8727] RDX: 0000000000000002 RSI: 0000200000000b80 RDI: ffffffffffffff9c [ 244.265880][ T8727] RBP: 00007f923dc11df1 R08: 0000000000000000 R09: 0000000000000000 [ 244.265895][ T8727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 244.265916][ T8727] R13: 0000000000000000 R14: 00007f923ddb6080 R15: 00007ffd8de37ae8 [ 244.265953][ T8727] [ 244.266823][ T8727] ERROR: Out of memory at tomoyo_realpath_from_path. [ 244.543558][ T30] audit: type=1804 audit(6049345505.104:7): pid=8729 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.651" name="/newroot/sys/kernel/tracing/events/vmalloc/filter" dev="tracefs" ino=19680823 res=1 errno=0 [ 244.567860][ C1] vkms_vblank_simulate: vblank timer overrun [ 244.832927][ T8737] netlink: 4 bytes leftover after parsing attributes in process `syz.1.654'. [ 248.799107][ T8820] random: crng reseeded on system resumption [ 250.172276][ T8850] FAULT_INJECTION: forcing a failure. [ 250.172276][ T8850] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 250.186339][ T8850] CPU: 0 UID: 0 PID: 8850 Comm: syz.1.686 Not tainted 6.16.0-syzkaller-11699-g7e161a991ea7 #0 PREEMPT(full) [ 250.186375][ T8850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 250.186389][ T8850] Call Trace: [ 250.186397][ T8850] [ 250.186406][ T8850] dump_stack_lvl+0x16c/0x1f0 [ 250.186438][ T8850] should_fail_ex+0x512/0x640 [ 250.186472][ T8850] _copy_from_user+0x2e/0xd0 [ 250.186506][ T8850] trace_parse_run_command+0xbe/0x400 [ 250.186538][ T8850] ? __pfx_create_dyn_event+0x10/0x10 [ 250.186567][ T8850] ? __pfx_dyn_event_write+0x10/0x10 [ 250.186589][ T8850] vfs_write+0x2a0/0x1150 [ 250.186624][ T8850] ? __pfx___mutex_lock+0x10/0x10 [ 250.186650][ T8850] ? __pfx_vfs_write+0x10/0x10 [ 250.186689][ T8850] ? __fget_files+0x20e/0x3c0 [ 250.186727][ T8850] ksys_write+0x12a/0x250 [ 250.186754][ T8850] ? __pfx_ksys_write+0x10/0x10 [ 250.186793][ T8850] do_syscall_64+0xcd/0x490 [ 250.186822][ T8850] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.186847][ T8850] RIP: 0033:0x7fc84ad8eb69 [ 250.186867][ T8850] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 250.186890][ T8850] RSP: 002b:00007fc84bbd4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 250.186913][ T8850] RAX: ffffffffffffffda RBX: 00007fc84afb5fa0 RCX: 00007fc84ad8eb69 [ 250.186930][ T8850] RDX: 0000000000000014 RSI: 0000200000000140 RDI: 0000000000000007 [ 250.186945][ T8850] RBP: 00007fc84bbd4090 R08: 0000000000000000 R09: 0000000000000000 [ 250.186960][ T8850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 250.186974][ T8850] R13: 0000000000000000 R14: 00007fc84afb5fa0 R15: 00007fff055202d8 [ 250.187009][ T8850] [ 254.025976][ T8892] can: request_module (can-proto-5) failed. [ 255.844475][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.850911][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.039767][ T8923] ima: Unable to open file: /sys/kernel/security/integrity/ima/policy (-26) [ 257.257650][ T8921] ima: policy update failed [ 257.374940][ T30] audit: type=1802 audit(6049345517.914:8): pid=8921 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.704" res=0 errno=0 [ 258.352975][ T8934] FAULT_INJECTION: forcing a failure. [ 258.352975][ T8934] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 258.419250][ T8934] CPU: 0 UID: 0 PID: 8934 Comm: syz.3.708 Not tainted 6.16.0-syzkaller-11699-g7e161a991ea7 #0 PREEMPT(full) [ 258.419291][ T8934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 258.419307][ T8934] Call Trace: [ 258.419316][ T8934] [ 258.419326][ T8934] dump_stack_lvl+0x16c/0x1f0 [ 258.419361][ T8934] should_fail_ex+0x512/0x640 [ 258.419400][ T8934] should_fail_alloc_page+0xe7/0x130 [ 258.419438][ T8934] prepare_alloc_pages+0x3c2/0x610 [ 258.419476][ T8934] ? rcu_is_watching+0x12/0xc0 [ 258.419507][ T8934] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 258.419538][ T8934] ? stack_depot_save_flags+0x29/0x9c0 [ 258.419583][ T8934] ? __lock_acquire+0x62e/0x1ce0 [ 258.419627][ T8934] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 258.419676][ T8934] ? __lock_acquire+0x62e/0x1ce0 [ 258.419718][ T8934] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 258.419759][ T8934] ? policy_nodemask+0xea/0x4e0 [ 258.419797][ T8934] alloc_pages_mpol+0x1fb/0x550 [ 258.419832][ T8934] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 258.419870][ T8934] ? __lock_acquire+0x62e/0x1ce0 [ 258.419906][ T8934] folio_alloc_mpol_noprof+0x36/0x2f0 [ 258.419947][ T8934] vma_alloc_folio_noprof+0xed/0x1e0 [ 258.419985][ T8934] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 258.420034][ T8934] do_pte_missing+0x2230/0x3ba0 [ 258.420063][ T8934] ? find_held_lock+0x2b/0x80 [ 258.420098][ T8934] __handle_mm_fault+0x152a/0x2a50 [ 258.420136][ T8934] ? __pfx___handle_mm_fault+0x10/0x10 [ 258.420166][ T8934] ? __pte_offset_map_lock+0x174/0x310 [ 258.420202][ T8934] ? find_held_lock+0x2b/0x80 [ 258.420238][ T8934] ? follow_page_pte.constprop.0+0x5cf/0x1390 [ 258.420284][ T8934] handle_mm_fault+0x589/0xd10 [ 258.420318][ T8934] __get_user_pages+0x551/0x34a0 [ 258.420363][ T8934] ? __pfx___get_user_pages+0x10/0x10 [ 258.420413][ T8934] populate_vma_page_range+0x267/0x3f0 [ 258.420456][ T8934] ? __pfx_populate_vma_page_range+0x10/0x10 [ 258.420495][ T8934] ? __pfx_find_vma_intersection+0x10/0x10 [ 258.420534][ T8934] ? do_mmap+0x69c/0x1210 [ 258.420585][ T8934] __mm_populate+0x1d8/0x380 [ 258.420627][ T8934] ? __pfx___mm_populate+0x10/0x10 [ 258.420672][ T8934] ? up_write+0x1b2/0x520 [ 258.420714][ T8934] vm_mmap_pgoff+0x37f/0x470 [ 258.420756][ T8934] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 258.420801][ T8934] ? __x64_sys_futex+0x1e0/0x4c0 [ 258.420832][ T8934] ? __x64_sys_futex+0x1e9/0x4c0 [ 258.420870][ T8934] ksys_mmap_pgoff+0x7d/0x5c0 [ 258.420905][ T8934] ? xfd_validate_state+0x61/0x180 [ 258.420941][ T8934] ? __pfx_ksys_read+0x10/0x10 [ 258.420975][ T8934] __x64_sys_mmap+0x125/0x190 [ 258.421019][ T8934] do_syscall_64+0xcd/0x490 [ 258.421052][ T8934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.421084][ T8934] RIP: 0033:0x7f923db8eb69 [ 258.421107][ T8934] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 258.421134][ T8934] RSP: 002b:00007f923e9cb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 258.421160][ T8934] RAX: ffffffffffffffda RBX: 00007f923ddb6080 RCX: 00007f923db8eb69 [ 258.421178][ T8934] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000100000 [ 258.421195][ T8934] RBP: 00007f923dc11df1 R08: 0000000000000002 R09: 0000000000008000 [ 258.421212][ T8934] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 258.421228][ T8934] R13: 0000000000000000 R14: 00007f923ddb6080 R15: 00007ffd8de37ae8 [ 258.421265][ T8934] [ 259.297854][ T8939] netlink: 'syz.1.709': attribute type 1 has an invalid length. [ 259.539874][ T8946] netlink: zone id is out of range [ 259.545033][ T8946] netlink: zone id is out of range [ 259.738897][ T8946] netlink: zone id is out of range [ 259.750256][ T8946] netlink: zone id is out of range [ 259.810867][ T8946] netlink: zone id is out of range [ 259.877363][ T8946] netlink: zone id is out of range [ 259.882849][ T8946] netlink: zone id is out of range [ 259.887969][ T8946] netlink: zone id is out of range [ 259.893267][ T8946] netlink: zone id is out of range [ 259.898412][ T8946] netlink: zone id is out of range [ 259.932237][ T8950] nfsd: Unknown parameter 'Z' [ 260.863455][ T8966] netlink: 326 bytes leftover after parsing attributes in process `syz.2.715'. [ 262.892100][ T9003] netlink: 28 bytes leftover after parsing attributes in process `syz.2.726'. [ 265.197989][ T9079] FAULT_INJECTION: forcing a failure. [ 265.197989][ T9079] name failslab, interval 1, probability 0, space 0, times 0 [ 265.240089][ T9079] CPU: 0 UID: 0 PID: 9079 Comm: syz.2.742 Not tainted 6.16.0-syzkaller-11699-g7e161a991ea7 #0 PREEMPT(full) [ 265.240112][ T9079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 265.240120][ T9079] Call Trace: [ 265.240125][ T9079] [ 265.240131][ T9079] dump_stack_lvl+0x16c/0x1f0 [ 265.240150][ T9079] should_fail_ex+0x512/0x640 [ 265.240168][ T9079] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 265.240189][ T9079] should_failslab+0xc2/0x120 [ 265.240208][ T9079] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 265.240227][ T9079] ? argv_split+0x35/0x440 [ 265.240250][ T9079] kstrndup+0x6d/0x160 [ 265.240267][ T9079] ? __pfx___trace_eprobe_create+0x10/0x10 [ 265.240283][ T9079] argv_split+0x35/0x440 [ 265.240303][ T9079] ? __pfx___trace_eprobe_create+0x10/0x10 [ 265.240318][ T9079] trace_probe_create+0x7d/0x100 [ 265.240336][ T9079] ? __pfx_trace_probe_create+0x10/0x10 [ 265.240359][ T9079] create_dyn_event+0xee/0x1c0 [ 265.240373][ T9079] trace_parse_run_command+0x1a6/0x400 [ 265.240393][ T9079] ? __pfx_create_dyn_event+0x10/0x10 [ 265.240408][ T9079] ? __pfx_dyn_event_write+0x10/0x10 [ 265.240421][ T9079] vfs_write+0x2a0/0x1150 [ 265.240440][ T9079] ? __pfx___mutex_lock+0x10/0x10 [ 265.240456][ T9079] ? __pfx_vfs_write+0x10/0x10 [ 265.240476][ T9079] ? __fget_files+0x20e/0x3c0 [ 265.240498][ T9079] ksys_write+0x12a/0x250 [ 265.240513][ T9079] ? __pfx_ksys_write+0x10/0x10 [ 265.240534][ T9079] do_syscall_64+0xcd/0x490 [ 265.240551][ T9079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.240565][ T9079] RIP: 0033:0x7f75fc78eb69 [ 265.240578][ T9079] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 265.240591][ T9079] RSP: 002b:00007f75fd64c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 265.240605][ T9079] RAX: ffffffffffffffda RBX: 00007f75fc9b6080 RCX: 00007f75fc78eb69 [ 265.240615][ T9079] RDX: 0000000000000014 RSI: 0000200000000140 RDI: 0000000000000007 [ 265.240623][ T9079] RBP: 00007f75fd64c090 R08: 0000000000000000 R09: 0000000000000000 [ 265.240631][ T9079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 265.240639][ T9079] R13: 0000000000000000 R14: 00007f75fc9b6080 R15: 00007ffd81e09248 [ 265.240657][ T9079] [ 266.897671][ T9108] netlink: 8 bytes leftover after parsing attributes in process `syz.2.748'. [ 267.256511][ T5869] udevd[5869]: inotify_add_watch(7, /dev/nbd4128, 10) failed: No such file or directory [ 267.710938][ T9123] random: crng reseeded on system resumption [ 267.745411][ T9123] FAULT_INJECTION: forcing a failure. [ 267.745411][ T9123] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 267.827156][ T9123] CPU: 1 UID: 0 PID: 9123 Comm: syz.2.750 Not tainted 6.16.0-syzkaller-11699-g7e161a991ea7 #0 PREEMPT(full) [ 267.827197][ T9123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 267.827215][ T9123] Call Trace: [ 267.827223][ T9123] [ 267.827233][ T9123] dump_stack_lvl+0x16c/0x1f0 [ 267.827267][ T9123] should_fail_ex+0x512/0x640 [ 267.827304][ T9123] should_fail_alloc_page+0xe7/0x130 [ 267.827338][ T9123] prepare_alloc_pages+0x3c2/0x610 [ 267.827373][ T9123] ? __kernel_text_address+0xd/0x40 [ 267.827402][ T9123] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 267.827447][ T9123] ? stack_trace_save+0x8e/0xc0 [ 267.827475][ T9123] ? __pfx_stack_trace_save+0x10/0x10 [ 267.827504][ T9123] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 267.827539][ T9123] ? kasan_save_stack+0x42/0x60 [ 267.827566][ T9123] ? kasan_save_stack+0x33/0x60 [ 267.827607][ T9123] ? misc_open+0x35a/0x420 [ 267.827643][ T9123] ? chrdev_open+0x234/0x6a0 [ 267.827671][ T9123] ? do_dentry_open+0x982/0x1530 [ 267.827695][ T9123] ? vfs_open+0x82/0x3f0 [ 267.827721][ T9123] ? path_openat+0x1de4/0x2cb0 [ 267.827744][ T9123] ? do_filp_open+0x20b/0x470 [ 267.827765][ T9123] ? do_sys_openat2+0x11b/0x1d0 [ 267.827793][ T9123] ? __x64_sys_openat+0x174/0x210 [ 267.827822][ T9123] ? do_syscall_64+0xcd/0x490 [ 267.827843][ T9123] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.827867][ T9123] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 267.827900][ T9123] ? policy_nodemask+0xea/0x4e0 [ 267.827930][ T9123] alloc_pages_mpol+0x1fb/0x550 [ 267.827959][ T9123] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 267.827995][ T9123] alloc_pages_noprof+0x131/0x390 [ 267.828025][ T9123] get_zeroed_page_noprof+0x18/0xb0 [ 267.828054][ T9123] get_image_page+0x18/0x190 [ 267.828076][ T9123] chain_alloc+0x8c/0xd0 [ 267.828099][ T9123] memory_bm_create+0x30f/0x810 [ 267.828134][ T9123] create_basic_memory_bitmaps+0xbd/0x320 [ 267.828163][ T9123] snapshot_open+0x235/0x2b0 [ 267.828187][ T9123] ? __pfx_snapshot_open+0x10/0x10 [ 267.828213][ T9123] misc_open+0x35a/0x420 [ 267.828245][ T9123] ? __pfx_misc_open+0x10/0x10 [ 267.828275][ T9123] chrdev_open+0x234/0x6a0 [ 267.828300][ T9123] ? __pfx_apparmor_file_open+0x10/0x10 [ 267.828333][ T9123] ? __pfx_chrdev_open+0x10/0x10 [ 267.828361][ T9123] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 267.828394][ T9123] do_dentry_open+0x982/0x1530 [ 267.828427][ T9123] ? __pfx_chrdev_open+0x10/0x10 [ 267.828462][ T9123] vfs_open+0x82/0x3f0 [ 267.828499][ T9123] path_openat+0x1de4/0x2cb0 [ 267.828537][ T9123] ? __pfx_path_openat+0x10/0x10 [ 267.828570][ T9123] do_filp_open+0x20b/0x470 [ 267.828605][ T9123] ? __pfx_do_filp_open+0x10/0x10 [ 267.828656][ T9123] ? alloc_fd+0x471/0x7d0 [ 267.828689][ T9123] do_sys_openat2+0x11b/0x1d0 [ 267.828722][ T9123] ? __pfx_do_sys_openat2+0x10/0x10 [ 267.828766][ T9123] __x64_sys_openat+0x174/0x210 [ 267.828797][ T9123] ? __pfx___x64_sys_openat+0x10/0x10 [ 267.828841][ T9123] do_syscall_64+0xcd/0x490 [ 267.828867][ T9123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.828889][ T9123] RIP: 0033:0x7f75fc78eb69 [ 267.828908][ T9123] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 267.828929][ T9123] RSP: 002b:00007f75fd66d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 267.828952][ T9123] RAX: ffffffffffffffda RBX: 00007f75fc9b5fa0 RCX: 00007f75fc78eb69 [ 267.828966][ T9123] RDX: 0000000000001001 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 267.828981][ T9123] RBP: 00007f75fc811df1 R08: 0000000000000000 R09: 0000000000000000 [ 267.828995][ T9123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 267.829030][ T9123] R13: 0000000000000000 R14: 00007f75fc9b5fa0 R15: 00007ffd81e09248 [ 267.829061][ T9123] [ 270.408323][ T9175] FAULT_INJECTION: forcing a failure. [ 270.408323][ T9175] name failslab, interval 1, probability 0, space 0, times 0 [ 270.460660][ T9175] CPU: 0 UID: 0 PID: 9175 Comm: syz.0.762 Not tainted 6.16.0-syzkaller-11699-g7e161a991ea7 #0 PREEMPT(full) [ 270.460700][ T9175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 270.460716][ T9175] Call Trace: [ 270.460724][ T9175] [ 270.460736][ T9175] dump_stack_lvl+0x16c/0x1f0 [ 270.460770][ T9175] should_fail_ex+0x512/0x640 [ 270.460802][ T9175] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 270.460842][ T9175] should_failslab+0xc2/0x120 [ 270.460877][ T9175] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 270.460909][ T9175] ? kobject_init_and_add+0xe7/0x190 [ 270.460938][ T9175] ? rpc_sysfs_client_setup+0x190/0x320 [ 270.460975][ T9175] ? rpc_new_client+0x948/0x1320 [ 270.461002][ T9175] ? kstrdup_const+0x63/0x80 [ 270.461039][ T9175] kstrdup+0x53/0x100 [ 270.461071][ T9175] kstrdup_const+0x63/0x80 [ 270.461100][ T9175] __kernfs_new_node+0x9b/0x8e0 [ 270.461136][ T9175] ? __pfx_number+0x10/0x10 [ 270.461167][ T9175] ? __pfx___kernfs_new_node+0x10/0x10 [ 270.461209][ T9175] ? find_held_lock+0x2b/0x80 [ 270.461236][ T9175] ? kernfs_root+0xee/0x2a0 [ 270.461276][ T9175] kernfs_new_node+0x13c/0x1e0 [ 270.461320][ T9175] kernfs_create_dir_ns+0x4c/0x1a0 [ 270.461369][ T9175] sysfs_create_dir_ns+0x13a/0x2b0 [ 270.461403][ T9175] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 270.461433][ T9175] ? find_held_lock+0x2b/0x80 [ 270.461466][ T9175] ? rpc_sysfs_client_namespace+0xd/0x40 [ 270.461504][ T9175] kobject_add_internal+0x2c4/0x9b0 [ 270.461543][ T9175] kobject_init_and_add+0x11b/0x190 [ 270.461575][ T9175] ? __pfx_kobject_init_and_add+0x10/0x10 [ 270.461629][ T9175] rpc_sysfs_client_setup+0x190/0x320 [ 270.461670][ T9175] ? __pfx_rpc_sysfs_client_setup+0x10/0x10 [ 270.461709][ T9175] ? rpc_net_ns+0xe8/0x2a0 [ 270.461743][ T9175] rpc_new_client+0x948/0x1320 [ 270.461782][ T9175] __rpc_clone_client+0x1d5/0x830 [ 270.461815][ T9175] rpc_bind_new_program+0x1ac/0x290 [ 270.461848][ T9175] ? __pfx_rpc_bind_new_program+0x10/0x10 [ 270.461896][ T9175] ? __pfx___might_resched+0x10/0x10 [ 270.461922][ T9175] ? rcu_is_watching+0x12/0xc0 [ 270.461947][ T9175] rpcb_create_local_net+0x152/0x300 [ 270.461971][ T9175] ? __pfx_rpcb_create_local_net+0x10/0x10 [ 270.462015][ T9175] ? rpcb_create_local+0x1da/0x270 [ 270.462047][ T9175] rpcb_create_local+0x22d/0x270 [ 270.462073][ T9175] svc_bind+0x1e8/0x260 [ 270.462105][ T9175] nfsd_create_serv+0x2d2/0x480 [ 270.462144][ T9175] ? __pfx_nfsd_create_serv+0x10/0x10 [ 270.462184][ T9175] ? __nla_validate_parse+0x600/0x2880 [ 270.462226][ T9175] nfsd_nl_listener_set_doit+0xdd/0x1b10 [ 270.462272][ T9175] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 270.462300][ T9175] ? __nla_parse+0x40/0x60 [ 270.462336][ T9175] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 270.462380][ T9175] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 270.462424][ T9175] genl_family_rcv_msg_doit+0x209/0x2f0 [ 270.462462][ T9175] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 270.462492][ T9175] ? rcu_is_watching+0x12/0xc0 [ 270.462531][ T9175] ? bpf_lsm_capable+0x9/0x10 [ 270.462555][ T9175] ? security_capable+0x7e/0x260 [ 270.462600][ T9175] genl_rcv_msg+0x55c/0x800 [ 270.462636][ T9175] ? __pfx_genl_rcv_msg+0x10/0x10 [ 270.462668][ T9175] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 270.462713][ T9175] netlink_rcv_skb+0x158/0x420 [ 270.462740][ T9175] ? __pfx_genl_rcv_msg+0x10/0x10 [ 270.462773][ T9175] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 270.462817][ T9175] ? netlink_deliver_tap+0x1ae/0xd30 [ 270.462850][ T9175] genl_rcv+0x28/0x40 [ 270.462877][ T9175] netlink_unicast+0x5a7/0x870 [ 270.462910][ T9175] ? __pfx_netlink_unicast+0x10/0x10 [ 270.462938][ T9175] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 270.462964][ T9175] ? __lock_acquire+0xb97/0x1ce0 [ 270.463006][ T9175] netlink_sendmsg+0x8d1/0xdd0 [ 270.463040][ T9175] ? __pfx_netlink_sendmsg+0x10/0x10 [ 270.463073][ T9175] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 270.463118][ T9175] ____sys_sendmsg+0xa98/0xc70 [ 270.463152][ T9175] ? copy_msghdr_from_user+0x10a/0x160 [ 270.463178][ T9175] ? __pfx_____sys_sendmsg+0x10/0x10 [ 270.463220][ T9175] ? __pfx_futex_wake_mark+0x10/0x10 [ 270.463263][ T9175] ___sys_sendmsg+0x134/0x1d0 [ 270.463293][ T9175] ? __pfx____sys_sendmsg+0x10/0x10 [ 270.463377][ T9175] __sys_sendmsg+0x16d/0x220 [ 270.463406][ T9175] ? __pfx___sys_sendmsg+0x10/0x10 [ 270.463432][ T9175] ? __x64_sys_futex+0x1e0/0x4c0 [ 270.463489][ T9175] do_syscall_64+0xcd/0x490 [ 270.463521][ T9175] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.463548][ T9175] RIP: 0033:0x7fe439d8eb69 [ 270.463570][ T9175] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 270.463596][ T9175] RSP: 002b:00007fe43ac42038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 270.463621][ T9175] RAX: ffffffffffffffda RBX: 00007fe439fb5fa0 RCX: 00007fe439d8eb69 [ 270.463639][ T9175] RDX: 0000000000000000 RSI: 0000200000003140 RDI: 0000000000000004 [ 270.463655][ T9175] RBP: 00007fe439e11df1 R08: 0000000000000000 R09: 0000000000000000 [ 270.463671][ T9175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 270.463687][ T9175] R13: 0000000000000000 R14: 00007fe439fb5fa0 R15: 00007ffd428e9b08 [ 270.463723][ T9175] [ 270.463737][ T9175] kobject: kobject_add_internal failed for clnt-1 (error: -12 parent: rpc-clients) [ 271.523826][ T9180] [U]  [ 271.526858][ T9180] [U] [ 271.529583][ T9180] [U] [ 271.532307][ T9180] [U] [ 271.578545][ T9180] [U] [ 271.581308][ T9180] [U] [ 271.584031][ T9180] [U] [ 271.586751][ T9180] [U] [ 271.627307][ T9180] [U] [ 271.630077][ T9180] [U] [ 271.632798][ T9180] [U] [ 271.635623][ T9180] [U] [ 271.673046][ T9180] [U] [ 271.675800][ T9180] [U] [ 271.678521][ T9180] [U] [ 271.681504][ T9180] [U] [ 271.711579][ T9180] [U] [ 271.714432][ T9180] [U] [ 271.717159][ T9180] [U] [ 271.719959][ T9180] [U] [ 271.732152][ T9180] [U] [ 271.734913][ T9180] [U] [ 271.737625][ T9180] [U] [ 271.740339][ T9180] [U] [ 271.748435][ T9180] [U] [ 271.751292][ T9180] [U] [ 271.754006][ T9180] [U] [ 271.756794][ T9180] [U] [ 271.762039][ T9180] [U] [ 271.764788][ T9180] [U] [ 271.767592][ T9180] [U] [ 271.770425][ T9180] [U] [ 271.799406][ T9180] [U] [ 271.802160][ T9180] [U] [ 271.804881][ T9180] [U] [ 271.807610][ T9180] [U] [ 271.827382][ T9180] [U] [ 271.830145][ T9180] [U] [ 271.832876][ T9180] [U] [ 271.835596][ T9180] [U] [ 271.863356][ T9180] [U] [ 271.866118][ T9180] [U] [ 271.868837][ T9180] [U] [ 271.871551][ T9180] [U] [ 271.894513][ T9180] [U] [ 271.897275][ T9180] [U] [ 271.900024][ T9180] [U] [ 271.902753][ T9180] [U] [ 271.907186][ T9180] [U] [ 271.910009][ T9180] [U] [ 271.912735][ T9180] [U] [ 271.915505][ T9180] [U] [ 271.922346][ T9180] [U] [ 271.925090][ T9180] [U] [ 271.927807][ T9180] [U] [ 271.930518][ T9180] [U] [ 271.935246][ T9180] [U] [ 271.937988][ T9180] [U] [ 271.940699][ T9180] [U] [ 271.943419][ T9180] [U] [ 271.951729][ T9180] [U] [ 271.954465][ T9180] [U] [ 271.957178][ T9180] [U] [ 271.959892][ T9180] [U] [ 271.963768][ T9180] [U] [ 271.966579][ T9180] [U] [ 271.969289][ T9180] [U] [ 271.972004][ T9180] [U] [ 271.992352][ T9180] [U] [ 271.995098][ T9180] [U] [ 271.997815][ T9180] [U] [ 272.000535][ T9180] [U] [ 272.013112][ T9180] [U] [ 272.175146][ T9191] random: crng reseeded on system resumption [ 272.953050][ T9208] bond0: option all_slaves_active: invalid value () [ 273.107995][ T9214] bond0: option all_slaves_active: invalid value () [ 273.310971][ T9222] FAULT_INJECTION: forcing a failure. [ 273.310971][ T9222] name failslab, interval 1, probability 0, space 0, times 0 [ 273.389180][ T9222] CPU: 1 UID: 0 PID: 9222 Comm: syz.1.775 Not tainted 6.16.0-syzkaller-11699-g7e161a991ea7 #0 PREEMPT(full) [ 273.389218][ T9222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 273.389234][ T9222] Call Trace: [ 273.389242][ T9222] [ 273.389253][ T9222] dump_stack_lvl+0x16c/0x1f0 [ 273.389283][ T9222] should_fail_ex+0x512/0x640 [ 273.389312][ T9222] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 273.389345][ T9222] should_failslab+0xc2/0x120 [ 273.389377][ T9222] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 273.389415][ T9222] ? kasan_quarantine_put+0x10a/0x240 [ 273.389443][ T9222] ? rpc_new_task+0x709/0x990 [ 273.389477][ T9222] rpc_new_task+0x709/0x990 [ 273.389514][ T9222] ? rpc_task_get_xprt+0xef/0x2c0 [ 273.389546][ T9222] ? mempool_free+0xff/0x710 [ 273.389581][ T9222] ? __pfx_rpc_new_task+0x10/0x10 [ 273.389620][ T9222] rpc_run_task+0x1e/0x660 [ 273.389653][ T9222] rpc_call_sync+0xc9/0x1b0 [ 273.389685][ T9222] ? __pfx_rpc_call_sync+0x10/0x10 [ 273.389728][ T9222] ? net_generic+0xea/0x2a0 [ 273.389762][ T9222] rpcb_register+0x21e/0x4f0 [ 273.389798][ T9222] ? __pfx_rpcb_register+0x10/0x10 [ 273.389845][ T9222] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 273.389886][ T9222] svc_unregister+0x55b/0x7b0 [ 273.389928][ T9222] svc_bind+0x20a/0x260 [ 273.389960][ T9222] nfsd_create_serv+0x2d2/0x480 [ 273.389999][ T9222] ? __pfx_nfsd_create_serv+0x10/0x10 [ 273.390038][ T9222] ? __nla_validate_parse+0x600/0x2880 [ 273.390081][ T9222] nfsd_nl_listener_set_doit+0xdd/0x1b10 [ 273.390126][ T9222] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 273.390157][ T9222] ? __nla_parse+0x40/0x60 [ 273.390197][ T9222] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 273.390231][ T9222] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 273.390274][ T9222] genl_family_rcv_msg_doit+0x209/0x2f0 [ 273.390309][ T9222] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 273.390341][ T9222] ? rcu_is_watching+0x12/0xc0 [ 273.390380][ T9222] ? bpf_lsm_capable+0x9/0x10 [ 273.390404][ T9222] ? security_capable+0x7e/0x260 [ 273.390449][ T9222] genl_rcv_msg+0x55c/0x800 [ 273.390486][ T9222] ? __pfx_genl_rcv_msg+0x10/0x10 [ 273.390519][ T9222] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 273.390558][ T9222] netlink_rcv_skb+0x158/0x420 [ 273.390583][ T9222] ? __pfx_genl_rcv_msg+0x10/0x10 [ 273.390615][ T9222] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 273.390654][ T9222] ? netlink_deliver_tap+0x1ae/0xd30 [ 273.390682][ T9222] genl_rcv+0x28/0x40 [ 273.390710][ T9222] netlink_unicast+0x5a7/0x870 [ 273.390743][ T9222] ? __pfx_netlink_unicast+0x10/0x10 [ 273.390770][ T9222] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 273.390805][ T9222] ? __lock_acquire+0xb97/0x1ce0 [ 273.390851][ T9222] netlink_sendmsg+0x8d1/0xdd0 [ 273.390886][ T9222] ? __pfx_netlink_sendmsg+0x10/0x10 [ 273.390919][ T9222] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 273.390965][ T9222] ____sys_sendmsg+0xa98/0xc70 [ 273.391001][ T9222] ? copy_msghdr_from_user+0x10a/0x160 [ 273.391028][ T9222] ? __pfx_____sys_sendmsg+0x10/0x10 [ 273.391077][ T9222] ___sys_sendmsg+0x134/0x1d0 [ 273.391107][ T9222] ? __pfx____sys_sendmsg+0x10/0x10 [ 273.391181][ T9222] __sys_sendmsg+0x16d/0x220 [ 273.391209][ T9222] ? __pfx___sys_sendmsg+0x10/0x10 [ 273.391235][ T9222] ? __x64_sys_futex+0x1e0/0x4c0 [ 273.391285][ T9222] do_syscall_64+0xcd/0x490 [ 273.391314][ T9222] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.391340][ T9222] RIP: 0033:0x7fc84ad8eb69 [ 273.391360][ T9222] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 273.391394][ T9222] RSP: 002b:00007fc84bbd4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 273.391417][ T9222] RAX: ffffffffffffffda RBX: 00007fc84afb5fa0 RCX: 00007fc84ad8eb69 [ 273.391432][ T9222] RDX: 0000000000000000 RSI: 0000200000003140 RDI: 0000000000000004 [ 273.391447][ T9222] RBP: 00007fc84ae11df1 R08: 0000000000000000 R09: 0000000000000000 [ 273.391461][ T9222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 273.391474][ T9222] R13: 0000000000000000 R14: 00007fc84afb5fa0 R15: 00007fff055202d8 [ 273.391505][ T9222] [ 274.716360][ T9245] FAULT_INJECTION: forcing a failure. [ 274.716360][ T9245] name failslab, interval 1, probability 0, space 0, times 0 [ 274.729625][ T9245] CPU: 0 UID: 0 PID: 9245 Comm: syz.3.783 Not tainted 6.16.0-syzkaller-11699-g7e161a991ea7 #0 PREEMPT(full) [ 274.729656][ T9245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 274.729665][ T9245] Call Trace: [ 274.729671][ T9245] [ 274.729677][ T9245] dump_stack_lvl+0x16c/0x1f0 [ 274.729698][ T9245] should_fail_ex+0x512/0x640 [ 274.729716][ T9245] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 274.729734][ T9245] should_failslab+0xc2/0x120 [ 274.729754][ T9245] __kmalloc_cache_noprof+0x6a/0x3e0 [ 274.729768][ T9245] ? percpu_ref_init+0xec/0x410 [ 274.729784][ T9245] ? __pfx_io_ring_ctx_ref_free+0x10/0x10 [ 274.729805][ T9245] percpu_ref_init+0xec/0x410 [ 274.729821][ T9245] io_uring_setup+0x453/0x2080 [ 274.729838][ T9245] ? __pfx_io_uring_setup+0x10/0x10 [ 274.729852][ T9245] ? do_futex+0x122/0x350 [ 274.729871][ T9245] ? __pfx_do_futex+0x10/0x10 [ 274.729890][ T9245] ? fdget+0x187/0x210 [ 274.729906][ T9245] ? __sys_sendmsg+0x18c/0x220 [ 274.729927][ T9245] ? xfd_validate_state+0x61/0x180 [ 274.729953][ T9245] __x64_sys_io_uring_setup+0xc2/0x170 [ 274.729969][ T9245] do_syscall_64+0xcd/0x490 [ 274.729985][ T9245] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.729999][ T9245] RIP: 0033:0x7f923db8eb69 [ 274.730012][ T9245] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 274.730025][ T9245] RSP: 002b:00007f923e9ec038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 274.730039][ T9245] RAX: ffffffffffffffda RBX: 00007f923ddb5fa0 RCX: 00007f923db8eb69 [ 274.730049][ T9245] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 274.730057][ T9245] RBP: 00007f923dc11df1 R08: 0000000000000000 R09: 0000000000000000 [ 274.730066][ T9245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 274.730074][ T9245] R13: 0000000000000000 R14: 00007f923ddb5fa0 R15: 00007ffd8de37ae8 [ 274.730093][ T9245] [ 275.433309][ T9253] random: crng reseeded on system resumption [ 275.925027][ T9270] FAULT_INJECTION: forcing a failure. [ 275.925027][ T9270] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 275.985695][ T9270] CPU: 0 UID: 0 PID: 9270 Comm: syz.3.789 Not tainted 6.16.0-syzkaller-11699-g7e161a991ea7 #0 PREEMPT(full) [ 275.985737][ T9270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 275.985752][ T9270] Call Trace: [ 275.985760][ T9270] [ 275.985771][ T9270] dump_stack_lvl+0x16c/0x1f0 [ 275.985816][ T9270] should_fail_ex+0x512/0x640 [ 275.985856][ T9270] should_fail_alloc_page+0xe7/0x130 [ 275.985895][ T9270] prepare_alloc_pages+0x3c2/0x610 [ 275.985933][ T9270] ? rcu_is_watching+0x12/0xc0 [ 275.985962][ T9270] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 275.985994][ T9270] ? stack_depot_save_flags+0x29/0x9c0 [ 275.986027][ T9270] ? __lock_acquire+0x62e/0x1ce0 [ 275.986068][ T9270] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 275.986115][ T9270] ? __lock_acquire+0x62e/0x1ce0 [ 275.986154][ T9270] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 275.986195][ T9270] ? policy_nodemask+0xea/0x4e0 [ 275.986231][ T9270] alloc_pages_mpol+0x1fb/0x550 [ 275.986267][ T9270] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 275.986304][ T9270] ? __lock_acquire+0x62e/0x1ce0 [ 275.986339][ T9270] folio_alloc_mpol_noprof+0x36/0x2f0 [ 275.986376][ T9270] vma_alloc_folio_noprof+0xed/0x1e0 [ 275.986411][ T9270] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 275.986453][ T9270] do_pte_missing+0x2230/0x3ba0 [ 275.986478][ T9270] ? find_held_lock+0x2b/0x80 [ 275.986512][ T9270] __handle_mm_fault+0x152a/0x2a50 [ 275.986546][ T9270] ? __pfx___handle_mm_fault+0x10/0x10 [ 275.986581][ T9270] ? __pte_offset_map_lock+0x174/0x310 [ 275.986618][ T9270] ? find_held_lock+0x2b/0x80 [ 275.986656][ T9270] ? follow_page_pte.constprop.0+0x5cf/0x1390 [ 275.986701][ T9270] handle_mm_fault+0x589/0xd10 [ 275.986735][ T9270] __get_user_pages+0x551/0x34a0 [ 275.986800][ T9270] ? __pfx___get_user_pages+0x10/0x10 [ 275.986851][ T9270] populate_vma_page_range+0x267/0x3f0 [ 275.986895][ T9270] ? __pfx_populate_vma_page_range+0x10/0x10 [ 275.986934][ T9270] ? __pfx_find_vma_intersection+0x10/0x10 [ 275.986973][ T9270] ? do_mmap+0x69c/0x1210 [ 275.987011][ T9270] __mm_populate+0x1d8/0x380 [ 275.987051][ T9270] ? __pfx___mm_populate+0x10/0x10 [ 275.987094][ T9270] ? up_write+0x1b2/0x520 [ 275.987134][ T9270] vm_mmap_pgoff+0x37f/0x470 [ 275.987172][ T9270] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 275.987216][ T9270] ? __x64_sys_futex+0x1e0/0x4c0 [ 275.987246][ T9270] ? __x64_sys_futex+0x1e9/0x4c0 [ 275.987283][ T9270] ksys_mmap_pgoff+0x7d/0x5c0 [ 275.987315][ T9270] ? xfd_validate_state+0x61/0x180 [ 275.987347][ T9270] ? __pfx_ksys_read+0x10/0x10 [ 275.987383][ T9270] __x64_sys_mmap+0x125/0x190 [ 275.987428][ T9270] do_syscall_64+0xcd/0x490 [ 275.987460][ T9270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.987487][ T9270] RIP: 0033:0x7f923db8eb69 [ 275.987510][ T9270] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 275.987534][ T9270] RSP: 002b:00007f923e9cb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 275.987560][ T9270] RAX: ffffffffffffffda RBX: 00007f923ddb6080 RCX: 00007f923db8eb69 [ 275.987576][ T9270] RDX: 00000000000000e3 RSI: 0000000000007589 RDI: 0000000000000000 [ 275.987592][ T9270] RBP: 00007f923dc11df1 R08: 0000000000000002 R09: 0000000000008000 [ 275.987608][ T9270] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 275.987622][ T9270] R13: 0000000000000000 R14: 00007f923ddb6080 R15: 00007ffd8de37ae8 [ 275.987657][ T9270] [ 278.176801][ T9306] vivid-009: ================= START STATUS ================= [ 278.237819][ T9306] vivid-009: Enable Output Cropping: true grabbed [ 278.259774][ T9306] vivid-009: Enable Output Composing: true grabbed [ 278.283207][ T9306] vivid-009: Enable Output Scaler: true grabbed [ 278.298935][ T9306] vivid-009: Tx RGB Quantization Range: Automatic grabbed [ 278.349229][ T9306] vivid-009: Transmit Mode: HDMI grabbed [ 278.439130][ T9306] vivid-009: Hotplug Present: 0x00000000 [ 278.445633][ T9306] vivid-009: RxSense Present: 0x00000000 [ 278.509166][ T9306] vivid-009: EDID Present: 0x00000000 [ 278.514736][ T9306] vivid-009: ================== END STATUS ================== [ 278.812246][ T9321] random: crng reseeded on system resumption [ 278.879735][ T30] audit: type=1800 audit(1843104527.480:9): pid=9321 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.803" name="SYSVffffffff" dev="tmpfs" ino=0 res=0 errno=0 [ 280.129300][ T5872] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 280.368496][ T9361] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 280.541755][ T9364] FAULT_INJECTION: forcing a failure. [ 280.541755][ T9364] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 280.589838][ T9364] CPU: 1 UID: 0 PID: 9364 Comm: syz.1.814 Not tainted 6.16.0-syzkaller-11699-g7e161a991ea7 #0 PREEMPT(full) [ 280.589879][ T9364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 280.589895][ T9364] Call Trace: [ 280.589903][ T9364] [ 280.589914][ T9364] dump_stack_lvl+0x16c/0x1f0 [ 280.589948][ T9364] should_fail_ex+0x512/0x640 [ 280.589986][ T9364] should_fail_alloc_page+0xe7/0x130 [ 280.590022][ T9364] prepare_alloc_pages+0x3c2/0x610 [ 280.590055][ T9364] ? smp_call_function_many_cond+0x457/0x1600 [ 280.590085][ T9364] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 280.590127][ T9364] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 280.590162][ T9364] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 280.590194][ T9364] ? __pfx___text_poke+0x10/0x10 [ 280.590222][ T9364] ? find_held_lock+0x2b/0x80 [ 280.590248][ T9364] ? jump_label_update+0x376/0x550 [ 280.590278][ T9364] ? static_key_slow_inc_cpuslocked+0x101/0x150 [ 280.590314][ T9364] ? __mutex_unlock_slowpath+0x163/0x800 [ 280.590343][ T9364] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 280.590392][ T9364] ? policy_nodemask+0xea/0x4e0 [ 280.590430][ T9364] alloc_pages_mpol+0x1fb/0x550 [ 280.590464][ T9364] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 280.590508][ T9364] alloc_pages_noprof+0x131/0x390 [ 280.590542][ T9364] kvm_arch_vcpu_create+0x2a7/0xb20 [ 280.590576][ T9364] ? lockdep_init_map_type+0x5c/0x280 [ 280.590616][ T9364] kvm_vm_ioctl+0xfec/0x4000 [ 280.590657][ T9364] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 280.590705][ T9364] ? kasan_quarantine_put+0x10a/0x240 [ 280.590733][ T9364] ? lockdep_hardirqs_on+0x7c/0x110 [ 280.590763][ T9364] ? find_held_lock+0x2b/0x80 [ 280.590789][ T9364] ? tomoyo_path_number_perm+0x295/0x580 [ 280.590824][ T9364] ? tomoyo_path_number_perm+0x18d/0x580 [ 280.590853][ T9364] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 280.590894][ T9364] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 280.590932][ T9364] ? do_vfs_ioctl+0x128/0x14f0 [ 280.590971][ T9364] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 280.591019][ T9364] ? find_held_lock+0x2b/0x80 [ 280.591045][ T9364] ? hook_file_ioctl_common+0x145/0x410 [ 280.591082][ T9364] ? __fget_files+0x20e/0x3c0 [ 280.591115][ T9364] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 280.591142][ T9364] __x64_sys_ioctl+0x18b/0x210 [ 280.591184][ T9364] do_syscall_64+0xcd/0x490 [ 280.591214][ T9364] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.591240][ T9364] RIP: 0033:0x7fc84ad8eb69 [ 280.591262][ T9364] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 280.591287][ T9364] RSP: 002b:00007fc84bbd4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 280.591312][ T9364] RAX: ffffffffffffffda RBX: 00007fc84afb5fa0 RCX: 00007fc84ad8eb69 [ 280.591331][ T9364] RDX: 0000000000000002 RSI: 000000000000ae41 RDI: 0000000000000003 [ 280.591347][ T9364] RBP: 00007fc84ae11df1 R08: 0000000000000000 R09: 0000000000000000 [ 280.591370][ T9364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 280.591386][ T9364] R13: 0000000000000000 R14: 00007fc84afb5fa0 R15: 00007fff055202d8 [ 280.591422][ T9364] [ 281.556847][ T9361] svc: failed to register nfsdv3 RPC service (errno 111). [ 281.573515][ T9361] svc: failed to register nfsaclv3 RPC service (errno 111). [ 282.287746][ T9379] Invalid ELF header magic: != ELF [ 282.780857][ T9392] FAULT_INJECTION: forcing a failure. [ 282.780857][ T9392] name failslab, interval 1, probability 0, space 0, times 0 [ 282.794450][ T9392] CPU: 0 UID: 0 PID: 9392 Comm: syz.1.820 Not tainted 6.16.0-syzkaller-11699-g7e161a991ea7 #0 PREEMPT(full) [ 282.794489][ T9392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 282.794504][ T9392] Call Trace: [ 282.794513][ T9392] [ 282.794523][ T9392] dump_stack_lvl+0x16c/0x1f0 [ 282.794557][ T9392] should_fail_ex+0x512/0x640 [ 282.794588][ T9392] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 282.794626][ T9392] should_failslab+0xc2/0x120 [ 282.794660][ T9392] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 282.794692][ T9392] ? rpc_new_task+0x709/0x990 [ 282.794723][ T9392] ? lockdep_hardirqs_on+0x7c/0x110 [ 282.794753][ T9392] rpc_new_task+0x709/0x990 [ 282.794783][ T9392] ? kmem_cache_free+0x2d1/0x4d0 [ 282.794809][ T9392] ? rpc_task_get_xprt+0xef/0x2c0 [ 282.794840][ T9392] ? mempool_free+0xff/0x710 [ 282.794875][ T9392] ? __pfx_rpc_new_task+0x10/0x10 [ 282.794929][ T9392] rpc_run_task+0x1e/0x660 [ 282.794965][ T9392] rpc_call_sync+0xc9/0x1b0 [ 282.794999][ T9392] ? __pfx_rpc_call_sync+0x10/0x10 [ 282.795044][ T9392] ? net_generic+0xea/0x2a0 [ 282.795079][ T9392] rpcb_register+0x21e/0x4f0 [ 282.795108][ T9392] ? __pfx_rpcb_register+0x10/0x10 [ 282.795137][ T9392] ? __local_bh_enable_ip+0xa4/0x120 [ 282.795169][ T9392] ? __local_bh_enable_ip+0xa4/0x120 [ 282.795199][ T9392] ? svc_close_list+0xd3/0x110 [ 282.795242][ T9392] svc_unregister+0x55b/0x7b0 [ 282.795283][ T9392] svc_rpcb_cleanup+0x1c/0x30 [ 282.795310][ T9392] nfsd_destroy_serv+0x1b0/0x4a0 [ 282.795349][ T9392] ? __pfx_nfsd_destroy_serv+0x10/0x10 [ 282.795385][ T9392] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 282.795424][ T9392] ? svc_xprt_create_from_sa+0xbf/0x130 [ 282.795458][ T9392] nfsd_nl_listener_set_doit+0x823/0x1b10 [ 282.795505][ T9392] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 282.795536][ T9392] ? __nla_parse+0x40/0x60 [ 282.795576][ T9392] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 282.795611][ T9392] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 282.795652][ T9392] genl_family_rcv_msg_doit+0x209/0x2f0 [ 282.795687][ T9392] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 282.795718][ T9392] ? rcu_is_watching+0x12/0xc0 [ 282.795757][ T9392] ? bpf_lsm_capable+0x9/0x10 [ 282.795781][ T9392] ? security_capable+0x7e/0x260 [ 282.795827][ T9392] genl_rcv_msg+0x55c/0x800 [ 282.795863][ T9392] ? __pfx_genl_rcv_msg+0x10/0x10 [ 282.795896][ T9392] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 282.795947][ T9392] netlink_rcv_skb+0x158/0x420 [ 282.795975][ T9392] ? __pfx_genl_rcv_msg+0x10/0x10 [ 282.796010][ T9392] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 282.796056][ T9392] ? netlink_deliver_tap+0x1ae/0xd30 [ 282.796093][ T9392] genl_rcv+0x28/0x40 [ 282.796121][ T9392] netlink_unicast+0x5a7/0x870 [ 282.796153][ T9392] ? __pfx_netlink_unicast+0x10/0x10 [ 282.796182][ T9392] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 282.796207][ T9392] ? __lock_acquire+0xb97/0x1ce0 [ 282.796251][ T9392] netlink_sendmsg+0x8d1/0xdd0 [ 282.796286][ T9392] ? __pfx_netlink_sendmsg+0x10/0x10 [ 282.796319][ T9392] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 282.796365][ T9392] ____sys_sendmsg+0xa98/0xc70 [ 282.796400][ T9392] ? copy_msghdr_from_user+0x10a/0x160 [ 282.796426][ T9392] ? __pfx_____sys_sendmsg+0x10/0x10 [ 282.796478][ T9392] ___sys_sendmsg+0x134/0x1d0 [ 282.796507][ T9392] ? __pfx____sys_sendmsg+0x10/0x10 [ 282.796583][ T9392] __sys_sendmsg+0x16d/0x220 [ 282.796611][ T9392] ? __pfx___sys_sendmsg+0x10/0x10 [ 282.796637][ T9392] ? __x64_sys_futex+0x1e0/0x4c0 [ 282.796685][ T9392] do_syscall_64+0xcd/0x490 [ 282.796714][ T9392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.796739][ T9392] RIP: 0033:0x7fc84ad8eb69 [ 282.796762][ T9392] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 282.796787][ T9392] RSP: 002b:00007fc84bbd4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 282.796812][ T9392] RAX: ffffffffffffffda RBX: 00007fc84afb5fa0 RCX: 00007fc84ad8eb69 [ 282.796830][ T9392] RDX: 0000000000000000 RSI: 0000200000003140 RDI: 0000000000000004 [ 282.796847][ T9392] RBP: 00007fc84ae11df1 R08: 0000000000000000 R09: 0000000000000000 [ 282.796862][ T9392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 282.796877][ T9392] R13: 0000000000000000 R14: 00007fc84afb5fa0 R15: 00007fff055202d8 [ 282.796920][ T9392] [ 283.220435][ C0] vkms_vblank_simulate: vblank timer overrun [ 283.915838][ T9409] FAULT_INJECTION: forcing a failure. [ 283.915838][ T9409] name failslab, interval 1, probability 0, space 0, times 0 [ 283.974589][ T9409] CPU: 0 UID: 0 PID: 9409 Comm: syz.0.824 Not tainted 6.16.0-syzkaller-11699-g7e161a991ea7 #0 PREEMPT(full) [ 283.974631][ T9409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 283.974647][ T9409] Call Trace: [ 283.974656][ T9409] [ 283.974667][ T9409] dump_stack_lvl+0x16c/0x1f0 [ 283.974702][ T9409] should_fail_ex+0x512/0x640 [ 283.974729][ T9409] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 283.974766][ T9409] should_failslab+0xc2/0x120 [ 283.974795][ T9409] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 283.974829][ T9409] ? lockdep_init_map_type+0x5c/0x280 [ 283.974865][ T9409] ? __d_alloc+0x32/0xae0 [ 283.974903][ T9409] __d_alloc+0x32/0xae0 [ 283.974938][ T9409] d_alloc_pseudo+0x1c/0xc0 [ 283.974976][ T9409] alloc_file_pseudo+0xcf/0x230 [ 283.975015][ T9409] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 283.975068][ T9409] ? alloc_fd+0x471/0x7d0 [ 283.975101][ T9409] sock_alloc_file+0x50/0x210 [ 283.975144][ T9409] __sys_socket+0x1c0/0x260 [ 283.975178][ T9409] ? __pfx___sys_socket+0x10/0x10 [ 283.975212][ T9409] ? xfd_validate_state+0x61/0x180 [ 283.975247][ T9409] ? __pfx_ksys_write+0x10/0x10 [ 283.975284][ T9409] __x64_sys_socket+0x72/0xb0 [ 283.975317][ T9409] ? lockdep_hardirqs_on+0x7c/0x110 [ 283.975344][ T9409] do_syscall_64+0xcd/0x490 [ 283.975375][ T9409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.975401][ T9409] RIP: 0033:0x7fe439d8eb69 [ 283.975423][ T9409] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 283.975450][ T9409] RSP: 002b:00007fe43ac42038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 283.975474][ T9409] RAX: ffffffffffffffda RBX: 00007fe439fb5fa0 RCX: 00007fe439d8eb69 [ 283.975492][ T9409] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 283.975508][ T9409] RBP: 00007fe439e11df1 R08: 0000000000000000 R09: 0000000000000000 [ 283.975524][ T9409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 283.975540][ T9409] R13: 0000000000000000 R14: 00007fe439fb5fa0 R15: 00007ffd428e9b08 [ 283.975576][ T9409] [ 284.185629][ C0] vkms_vblank_simulate: vblank timer overrun [ 285.598735][ T9446] netlink: 28 bytes leftover after parsing attributes in process `syz.3.835'. [ 285.618025][ T9446] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 285.656811][ T9446] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 285.669892][ T9446] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 285.678878][ T9446] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 286.035420][ T9451] syz.2.837 (9451) used obsolete PPPIOCDETACH ioctl [ 286.634746][ T9459] syz.1.839 (9459) used greatest stack depth: 19176 bytes left [ 287.223345][ T9480] ovs_: entered promiscuous mode [ 288.875065][ T9488] workqueue: Failed to create a rescuer kthread for wq "nfc19_nci_cmd_wq": -EINTR [ 290.439706][ T9613] bcachefs: bch2_ioctl_fsck_offline() ret EFAULT [ 294.492028][ T9677] netlink: 342 bytes leftover after parsing attributes in process `syz.3.882'. [ 295.354099][ T9697] ovs_: entered promiscuous mode [ 297.633755][ T9738] openvswitch: ovs_: Dropping previously announced user features [ 297.702890][ T9742] binder: 9739:9742 ioctl 541b 38 returned -22 syzkaller syzkaller login: [ 299.731521][ T9790] netlink: 4 bytes leftover after parsing attributes in process `syz.3.908'. [ 300.830158][ T9821] FAULT_INJECTION: forcing a failure. [ 300.830158][ T9821] name failslab, interval 1, probability 0, space 0, times 0 [ 300.867676][ T9821] CPU: 0 UID: 0 PID: 9821 Comm: syz.2.918 Not tainted 6.16.0-syzkaller-11699-g7e161a991ea7 #0 PREEMPT(full) [ 300.867713][ T9821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 300.867728][ T9821] Call Trace: [ 300.867736][ T9821] [ 300.867746][ T9821] dump_stack_lvl+0x16c/0x1f0 [ 300.867777][ T9821] should_fail_ex+0x512/0x640 [ 300.867812][ T9821] should_failslab+0xc2/0x120 [ 300.867844][ T9821] __kmalloc_cache_noprof+0x6a/0x3e0 [ 300.867872][ T9821] ? proc_thread_self_get_link+0x1c6/0x240 [ 300.867911][ T9821] proc_thread_self_get_link+0x1c6/0x240 [ 300.867943][ T9821] ? __pfx_proc_thread_self_get_link+0x10/0x10 [ 300.867974][ T9821] step_into+0x195e/0x2270 [ 300.868007][ T9821] ? __pfx_step_into+0x10/0x10 [ 300.868037][ T9821] ? lookup_fast+0x156/0x610 [ 300.868067][ T9821] walk_component+0xfc/0x5b0 [ 300.868172][ T9821] link_path_walk+0x627/0xe20 [ 300.868229][ T9821] path_openat+0x1b0/0x2cb0 [ 300.868255][ T9821] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.868294][ T9821] ? __pfx_path_openat+0x10/0x10 [ 300.868333][ T9821] do_filp_open+0x20b/0x470 [ 300.868368][ T9821] ? __pfx_do_filp_open+0x10/0x10 [ 300.868415][ T9821] ? alloc_fd+0x471/0x7d0 [ 300.868448][ T9821] do_sys_openat2+0x11b/0x1d0 [ 300.868483][ T9821] ? __pfx_do_sys_openat2+0x10/0x10 [ 300.868530][ T9821] __x64_sys_openat+0x174/0x210 [ 300.868564][ T9821] ? __pfx___x64_sys_openat+0x10/0x10 [ 300.868615][ T9821] do_syscall_64+0xcd/0x490 [ 300.868646][ T9821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.868670][ T9821] RIP: 0033:0x7f75fc78d4d0 [ 300.868691][ T9821] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 300.868716][ T9821] RSP: 002b:00007f75fd66cfe0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 300.868740][ T9821] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f75fc78d4d0 [ 300.868757][ T9821] RDX: 0000000000000002 RSI: 00007f75fc8120d6 RDI: 00000000ffffff9c [ 300.868773][ T9821] RBP: 00007f75fc8120d6 R08: 0000000000000000 R09: 00007f75fd66e000 [ 300.868789][ T9821] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000000a [ 300.868804][ T9821] R13: 0000000000000000 R14: 00007f75fc9b5fa0 R15: 00007ffd81e09248 [ 300.868839][ T9821] [ 301.150822][ T9821] FAULT_INJECTION: forcing a failure. [ 301.150822][ T9821] name failslab, interval 1, probability 0, space 0, times 0 [ 301.176828][ T9821] CPU: 1 UID: 0 PID: 9821 Comm: syz.2.918 Not tainted 6.16.0-syzkaller-11699-g7e161a991ea7 #0 PREEMPT(full) [ 301.176866][ T9821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 301.176881][ T9821] Call Trace: [ 301.176889][ T9821] [ 301.176898][ T9821] dump_stack_lvl+0x16c/0x1f0 [ 301.176930][ T9821] should_fail_ex+0x512/0x640 [ 301.176959][ T9821] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 301.176993][ T9821] should_failslab+0xc2/0x120 [ 301.177023][ T9821] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 301.177052][ T9821] ? security_file_alloc+0x34/0x2b0 [ 301.177084][ T9821] security_file_alloc+0x34/0x2b0 [ 301.177112][ T9821] init_file+0x93/0x4c0 [ 301.177146][ T9821] alloc_empty_file+0x73/0x1e0 [ 301.177179][ T9821] alloc_file_clone+0x5f/0x110 [ 301.177215][ T9821] create_pipe_files+0x412/0x9a0 [ 301.177248][ T9821] do_pipe2+0xaf/0x1c0 [ 301.177275][ T9821] ? __pfx_do_pipe2+0x10/0x10 [ 301.177310][ T9821] ? ksys_write+0x1ac/0x250 [ 301.177347][ T9821] __x64_sys_pipe2+0x54/0x80 [ 301.177377][ T9821] do_syscall_64+0xcd/0x490 [ 301.177405][ T9821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.177429][ T9821] RIP: 0033:0x7f75fc78eb69 [ 301.177446][ T9821] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 301.177467][ T9821] RSP: 002b:00007f75fd66d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000125 [ 301.177489][ T9821] RAX: ffffffffffffffda RBX: 00007f75fc9b5fa0 RCX: 00007f75fc78eb69 [ 301.177505][ T9821] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 0000000000000000 [ 301.177519][ T9821] RBP: 00007f75fd66d090 R08: 0000000000000000 R09: 0000000000000000 [ 301.177533][ T9821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 301.177548][ T9821] R13: 0000000000000000 R14: 00007f75fc9b5fa0 R15: 00007ffd81e09248 [ 301.177581][ T9821] [ 303.486849][ T9865] netlink: 266 bytes leftover after parsing attributes in process `syz.0.925'. [ 303.507674][ T9865] IPv6: NLM_F_CREATE should be specified when creating new route [ 303.542952][ T9865] netlink: 12 bytes leftover after parsing attributes in process `syz.0.925'. [ 303.561969][ T9865] vcan0: entered promiscuous mode [ 304.014903][ T9878] FAULT_INJECTION: forcing a failure. [ 304.014903][ T9878] name failslab, interval 1, probability 0, space 0, times 0 [ 304.020994][ T9879] FAULT_INJECTION: forcing a failure. [ 304.020994][ T9879] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 304.029102][ T9878] CPU: 1 UID: 0 PID: 9878 Comm: syz.0.928 Not tainted 6.16.0-syzkaller-11699-g7e161a991ea7 #0 PREEMPT(full) [ 304.029140][ T9878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 304.029156][ T9878] Call Trace: [ 304.029165][ T9878] [ 304.029175][ T9878] dump_stack_lvl+0x16c/0x1f0 [ 304.029207][ T9878] should_fail_ex+0x512/0x640 [ 304.029239][ T9878] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 304.029270][ T9878] should_failslab+0xc2/0x120 [ 304.029306][ T9878] __kmalloc_cache_noprof+0x6a/0x3e0 [ 304.029333][ T9878] ? kernfs_fop_open+0x244/0xda0 [ 304.029364][ T9878] kernfs_fop_open+0x244/0xda0 [ 304.029396][ T9878] do_dentry_open+0x982/0x1530 [ 304.029428][ T9878] ? __pfx_kernfs_fop_open+0x10/0x10 [ 304.029462][ T9878] vfs_open+0x82/0x3f0 [ 304.029502][ T9878] path_openat+0x1de4/0x2cb0 [ 304.029544][ T9878] ? __pfx_path_openat+0x10/0x10 [ 304.029583][ T9878] do_filp_open+0x20b/0x470 [ 304.029614][ T9878] ? __pfx_do_filp_open+0x10/0x10 [ 304.029668][ T9878] ? alloc_fd+0x471/0x7d0 [ 304.029705][ T9878] do_sys_openat2+0x11b/0x1d0 [ 304.029741][ T9878] ? __pfx_do_sys_openat2+0x10/0x10 [ 304.029800][ T9878] __x64_sys_openat+0x174/0x210 [ 304.029840][ T9878] ? __pfx___x64_sys_openat+0x10/0x10 [ 304.029895][ T9878] do_syscall_64+0xcd/0x490 [ 304.029926][ T9878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.029952][ T9878] RIP: 0033:0x7fe439d8eb69 [ 304.029972][ T9878] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 304.029997][ T9878] RSP: 002b:00007fe43ac21038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 304.030022][ T9878] RAX: ffffffffffffffda RBX: 00007fe439fb6080 RCX: 00007fe439d8eb69 [ 304.030038][ T9878] RDX: 0000000000002002 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 304.030054][ T9878] RBP: 00007fe439e11df1 R08: 0000000000000000 R09: 0000000000000000 [ 304.030070][ T9878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 304.030086][ T9878] R13: 0000000000000000 R14: 00007fe439fb6080 R15: 00007ffd428e9b08 [ 304.030120][ T9878] [ 304.329231][ T9879] CPU: 1 UID: 0 PID: 9879 Comm: syz.3.929 Not tainted 6.16.0-syzkaller-11699-g7e161a991ea7 #0 PREEMPT(full) [ 304.329268][ T9879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 304.329282][ T9879] Call Trace: [ 304.329291][ T9879] [ 304.329301][ T9879] dump_stack_lvl+0x16c/0x1f0 [ 304.329335][ T9879] should_fail_ex+0x512/0x640 [ 304.329379][ T9879] should_fail_alloc_page+0xe7/0x130 [ 304.329417][ T9879] prepare_alloc_pages+0x3c2/0x610 [ 304.329457][ T9879] ? rcu_is_watching+0x12/0xc0 [ 304.329488][ T9879] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 304.329521][ T9879] ? css_rstat_updated+0x1c2/0x510 [ 304.329551][ T9879] ? __pfx_css_rstat_updated+0x10/0x10 [ 304.329579][ T9879] ? __lock_acquire+0x62e/0x1ce0 [ 304.329617][ T9879] ? rcu_is_watching+0x12/0xc0 [ 304.329646][ T9879] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 304.329678][ T9879] ? __mod_zone_page_state+0xcc/0x1a0 [ 304.329716][ T9879] ? __lock_acquire+0x62e/0x1ce0 [ 304.329754][ T9879] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 304.329795][ T9879] ? policy_nodemask+0xea/0x4e0 [ 304.329834][ T9879] alloc_pages_mpol+0x1fb/0x550 [ 304.329870][ T9879] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 304.329907][ T9879] ? __lock_acquire+0x62e/0x1ce0 [ 304.329944][ T9879] folio_alloc_mpol_noprof+0x36/0x2f0 [ 304.329991][ T9879] vma_alloc_folio_noprof+0xed/0x1e0 [ 304.330030][ T9879] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 304.330079][ T9879] do_pte_missing+0x2230/0x3ba0 [ 304.330108][ T9879] ? find_held_lock+0x2b/0x80 [ 304.330143][ T9879] __handle_mm_fault+0x152a/0x2a50 [ 304.330183][ T9879] ? __pfx___handle_mm_fault+0x10/0x10 [ 304.330213][ T9879] ? __pte_offset_map_lock+0x174/0x310 [ 304.330249][ T9879] ? find_held_lock+0x2b/0x80 [ 304.330287][ T9879] ? follow_page_pte.constprop.0+0x5cf/0x1390 [ 304.330334][ T9879] handle_mm_fault+0x589/0xd10 [ 304.330371][ T9879] __get_user_pages+0x551/0x34a0 [ 304.330424][ T9879] ? __pfx___get_user_pages+0x10/0x10 [ 304.330473][ T9879] populate_vma_page_range+0x267/0x3f0 [ 304.330516][ T9879] ? __pfx_populate_vma_page_range+0x10/0x10 [ 304.330555][ T9879] ? __pfx_find_vma_intersection+0x10/0x10 [ 304.330593][ T9879] ? do_mmap+0x69c/0x1210 [ 304.330632][ T9879] __mm_populate+0x1d8/0x380 [ 304.330673][ T9879] ? __pfx___mm_populate+0x10/0x10 [ 304.330715][ T9879] ? up_write+0x1b2/0x520 [ 304.330753][ T9879] vm_mmap_pgoff+0x37f/0x470 [ 304.330793][ T9879] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 304.330837][ T9879] ? __x64_sys_futex+0x1e0/0x4c0 [ 304.330868][ T9879] ? __x64_sys_futex+0x1e9/0x4c0 [ 304.330906][ T9879] ksys_mmap_pgoff+0x7d/0x5c0 [ 304.330940][ T9879] ? xfd_validate_state+0x61/0x180 [ 304.330982][ T9879] ? __pfx_ksys_read+0x10/0x10 [ 304.331016][ T9879] __x64_sys_mmap+0x125/0x190 [ 304.331060][ T9879] do_syscall_64+0xcd/0x490 [ 304.331091][ T9879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.331118][ T9879] RIP: 0033:0x7f923db8eb69 [ 304.331139][ T9879] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 304.331165][ T9879] RSP: 002b:00007f923e9cb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 304.331190][ T9879] RAX: ffffffffffffffda RBX: 00007f923ddb6080 RCX: 00007f923db8eb69 [ 304.331208][ T9879] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000104000 [ 304.331225][ T9879] RBP: 00007f923dc11df1 R08: 0000000000000002 R09: 0000000000008000 [ 304.331241][ T9879] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 304.331257][ T9879] R13: 0000000000000000 R14: 00007f923ddb6080 R15: 00007ffd8de37ae8 [ 304.331293][ T9879] [ 305.878228][ T9894] openvswitch: ovs_: Dropping previously announced user features [ 306.783171][ T9915] nfsd: Unknown parameter 'Z' [ 307.048168][ T9915] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 307.102472][ T9915] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 307.108698][ T9915] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 307.205787][ T9915] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 307.263682][ T9915] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 308.393343][ T9955] netlink: 28 bytes leftover after parsing attributes in process `syz.1.949'. [ 308.434118][ T9955] team_slave_0: entered allmulticast mode [ 309.123303][ T5866] Bluetooth: hci3: command 0x0c1a tx timeout [ 309.129431][ T5872] Bluetooth: hci0: command 0x0c1a tx timeout [ 309.135513][ T5872] Bluetooth: hci2: command 0x0c1a tx timeout [ 309.279375][ T5872] Bluetooth: hci1: command 0x0c1a tx timeout [ 311.364816][ T5872] Bluetooth: hci1: command 0x0c1a tx timeout [ 311.645791][T10004] ovs_: entered promiscuous mode [ 312.455369][T10009] openvswitch: ovs_: Dropping previously announced user features [ 313.333670][T10041] CIFS: VFS: Invalid SecurityFlags: [ 314.831320][T10061] FAULT_INJECTION: forcing a failure. [ 314.831320][T10061] name failslab, interval 1, probability 0, space 0, times 0 [ 314.913135][T10061] CPU: 1 UID: 0 PID: 10061 Comm: syz.0.975 Not tainted 6.16.0-syzkaller-11699-g7e161a991ea7 #0 PREEMPT(full) [ 314.913160][T10061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 314.913170][T10061] Call Trace: [ 314.913175][T10061] [ 314.913182][T10061] dump_stack_lvl+0x16c/0x1f0 [ 314.913203][T10061] should_fail_ex+0x512/0x640 [ 314.913221][T10061] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 314.913244][T10061] should_failslab+0xc2/0x120 [ 314.913264][T10061] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 314.913283][T10061] ? brnf_init_net+0x42/0x450 [ 314.913300][T10061] ? __pfx_brnf_init_net+0x10/0x10 [ 314.913316][T10061] kmemdup_noprof+0x29/0x60 [ 314.913334][T10061] brnf_init_net+0x42/0x450 [ 314.913351][T10061] ? __pfx_brnf_init_net+0x10/0x10 [ 314.913366][T10061] ops_init+0x1df/0x5f0 [ 314.913385][T10061] setup_net+0x10f/0x380 [ 314.913399][T10061] ? lockdep_init_map_type+0x5c/0x280 [ 314.913419][T10061] ? __pfx_setup_net+0x10/0x10 [ 314.913436][T10061] ? debug_mutex_init+0x37/0x70 [ 314.913452][T10061] copy_net_ns+0x2a6/0x5f0 [ 314.913471][T10061] create_new_namespaces+0x3ea/0xa90 [ 314.913492][T10061] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 314.913510][T10061] ksys_unshare+0x45b/0xa40 [ 314.913530][T10061] ? __pfx_ksys_unshare+0x10/0x10 [ 314.913549][T10061] ? xfd_validate_state+0x61/0x180 [ 314.913575][T10061] __x64_sys_unshare+0x31/0x40 [ 314.913594][T10061] do_syscall_64+0xcd/0x490 [ 314.913611][T10061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.913626][T10061] RIP: 0033:0x7fe439d8eb69 [ 314.913638][T10061] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 314.913653][T10061] RSP: 002b:00007fe43ac42038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 314.913667][T10061] RAX: ffffffffffffffda RBX: 00007fe439fb5fa0 RCX: 00007fe439d8eb69 [ 314.913677][T10061] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 314.913685][T10061] RBP: 00007fe439e11df1 R08: 0000000000000000 R09: 0000000000000000 [ 314.913694][T10061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 314.913702][T10061] R13: 0000000000000000 R14: 00007fe439fb5fa0 R15: 00007ffd428e9b08 [ 314.913720][T10061] [ 315.685548][T10071] netlink: 'syz.0.978': attribute type 1 has an invalid length. [ 317.174858][T10110] openvswitch: ovs_: Dropping previously announced user features [ 317.292201][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.316487][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.624564][T10152] FAULT_INJECTION: forcing a failure. [ 318.624564][T10152] name failslab, interval 1, probability 0, space 0, times 0 [ 318.637424][T10152] CPU: 0 UID: 0 PID: 10152 Comm: syz.2.996 Not tainted 6.16.0-syzkaller-11699-g7e161a991ea7 #0 PREEMPT(full) [ 318.637447][T10152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 318.637457][T10152] Call Trace: [ 318.637464][T10152] [ 318.637471][T10152] dump_stack_lvl+0x16c/0x1f0 [ 318.637491][T10152] should_fail_ex+0x512/0x640 [ 318.637510][T10152] ? __kmalloc_node_noprof+0xc5/0x500 [ 318.637537][T10152] should_failslab+0xc2/0x120 [ 318.637557][T10152] __kmalloc_node_noprof+0xd8/0x500 [ 318.637574][T10152] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 318.637593][T10152] ? alloc_slab_obj_exts+0x41/0xa0 [ 318.637611][T10152] alloc_slab_obj_exts+0x41/0xa0 [ 318.637637][T10152] new_slab+0x27d/0x330 [ 318.637652][T10152] ___slab_alloc+0xcf2/0x1740 [ 318.637667][T10152] ? fcntl_dirnotify+0x23b/0xb60 [ 318.637695][T10152] ? fcntl_dirnotify+0x23b/0xb60 [ 318.637713][T10152] ? __slab_alloc.constprop.0+0x56/0xb0 [ 318.637727][T10152] __slab_alloc.constprop.0+0x56/0xb0 [ 318.637744][T10152] kmem_cache_alloc_noprof+0xef/0x3b0 [ 318.637761][T10152] ? fcntl_dirnotify+0x23b/0xb60 [ 318.637781][T10152] fcntl_dirnotify+0x23b/0xb60 [ 318.637803][T10152] do_fcntl+0xe62/0x15a0 [ 318.637823][T10152] ? __pfx_do_fcntl+0x10/0x10 [ 318.637860][T10152] ? tomoyo_file_fcntl+0x6c/0xc0 [ 318.637897][T10152] __x64_sys_fcntl+0x163/0x200 [ 318.637935][T10152] do_syscall_64+0xcd/0x490 [ 318.637956][T10152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.637972][T10152] RIP: 0033:0x7f75fc78eb69 [ 318.637985][T10152] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 318.637999][T10152] RSP: 002b:00007f75fd66d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 318.638014][T10152] RAX: ffffffffffffffda RBX: 00007f75fc9b5fa0 RCX: 00007f75fc78eb69 [ 318.638023][T10152] RDX: 0000000000000002 RSI: 0000000000000402 RDI: 0000000000000004 [ 318.638032][T10152] RBP: 00007f75fc811df1 R08: 0000000000000000 R09: 0000000000000000 [ 318.638040][T10152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 318.638049][T10152] R13: 0000000000000000 R14: 00007f75fc9b5fa0 R15: 00007ffd81e09248 [ 318.638066][T10152] [ 319.143966][T10163] openvswitch: ovs_: Dropping previously announced user features [ 321.069631][T10206] bond0: option all_slaves_active: invalid value () [ 324.738752][T10280] zswap: compressor 000 not available [ 324.805413][T10273] random: crng reseeded on system resumption [ 325.071769][T10294] capability: warning: `syz.1.1030' uses 32-bit capabilities (legacy support in use) [ 326.184275][T10306] bond0: option all_slaves_active: invalid value () [ 327.968433][T10325] FAULT_INJECTION: forcing a failure. [ 327.968433][T10325] name failslab, interval 1, probability 0, space 0, times 0 [ 328.005553][T10325] CPU: 0 UID: 0 PID: 10325 Comm: syz.0.1036 Not tainted 6.16.0-syzkaller-11699-g7e161a991ea7 #0 PREEMPT(full) [ 328.005584][T10325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 328.005593][T10325] Call Trace: [ 328.005599][T10325] [ 328.005605][T10325] dump_stack_lvl+0x16c/0x1f0 [ 328.005624][T10325] should_fail_ex+0x512/0x640 [ 328.005641][T10325] ? fs_reclaim_acquire+0xae/0x150 [ 328.005664][T10325] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 328.005682][T10325] should_failslab+0xc2/0x120 [ 328.005700][T10325] __kmalloc_noprof+0xd2/0x510 [ 328.005724][T10325] tomoyo_realpath_from_path+0xc2/0x6e0 [ 328.005747][T10325] tomoyo_check_open_permission+0x2ab/0x3c0 [ 328.005768][T10325] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 328.005825][T10325] ? find_held_lock+0x2b/0x80 [ 328.005857][T10325] tomoyo_file_open+0x6b/0x90 [ 328.005891][T10325] security_file_open+0x84/0x1e0 [ 328.005918][T10325] do_dentry_open+0x596/0x1530 [ 328.005957][T10325] vfs_open+0x82/0x3f0 [ 328.005996][T10325] path_openat+0x1de4/0x2cb0 [ 328.006038][T10325] ? __pfx_path_openat+0x10/0x10 [ 328.006075][T10325] do_filp_open+0x20b/0x470 [ 328.006104][T10325] ? __pfx_do_filp_open+0x10/0x10 [ 328.006145][T10325] ? __pfx_kfree_link+0x10/0x10 [ 328.006190][T10325] ? alloc_fd+0x471/0x7d0 [ 328.006228][T10325] do_sys_openat2+0x11b/0x1d0 [ 328.006262][T10325] ? __pfx_do_sys_openat2+0x10/0x10 [ 328.006307][T10325] __x64_sys_openat+0x174/0x210 [ 328.006342][T10325] ? __pfx___x64_sys_openat+0x10/0x10 [ 328.006387][T10325] do_syscall_64+0xcd/0x490 [ 328.006413][T10325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.006437][T10325] RIP: 0033:0x7fe439d8d4d0 [ 328.006465][T10325] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 328.006487][T10325] RSP: 002b:00007fe43ac41fe0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 328.006511][T10325] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fe439d8d4d0 [ 328.006527][T10325] RDX: 0000000000000002 RSI: 00007fe439e120d6 RDI: 00000000ffffff9c [ 328.006541][T10325] RBP: 00007fe439e120d6 R08: 0000000000000000 R09: 00007fe43ac43000 [ 328.006556][T10325] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000000b [ 328.006569][T10325] R13: 0000000000000000 R14: 00007fe439fb5fa0 R15: 00007ffd428e9b08 [ 328.006598][T10325] [ 328.007752][T10325] ERROR: Out of memory at tomoyo_realpath_from_path. [ 328.089519][T10320] openvswitch: ovs_: Dropping previously announced user features [ 328.269351][T10325] FAULT_INJECTION: forcing a failure. [ 328.269351][T10325] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 328.294953][T10325] CPU: 1 UID: 0 PID: 10325 Comm: syz.0.1036 Not tainted 6.16.0-syzkaller-11699-g7e161a991ea7 #0 PREEMPT(full) [ 328.294975][T10325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 328.294984][T10325] Call Trace: [ 328.294989][T10325] [ 328.294994][T10325] dump_stack_lvl+0x16c/0x1f0 [ 328.295015][T10325] should_fail_ex+0x512/0x640 [ 328.295035][T10325] _copy_to_user+0x32/0xd0 [ 328.295056][T10325] do_pipe2+0x142/0x1c0 [ 328.295083][T10325] ? __pfx_do_pipe2+0x10/0x10 [ 328.295109][T10325] ? ksys_write+0x1ac/0x250 [ 328.295146][T10325] __x64_sys_pipe2+0x54/0x80 [ 328.295174][T10325] do_syscall_64+0xcd/0x490 [ 328.295202][T10325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.295227][T10325] RIP: 0033:0x7fe439d8eb69 [ 328.295245][T10325] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 328.295269][T10325] RSP: 002b:00007fe43ac42038 EFLAGS: 00000246 ORIG_RAX: 0000000000000125 [ 328.295292][T10325] RAX: ffffffffffffffda RBX: 00007fe439fb5fa0 RCX: 00007fe439d8eb69 [ 328.295306][T10325] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 0000000000000000 [ 328.295319][T10325] RBP: 00007fe43ac42090 R08: 0000000000000000 R09: 0000000000000000 [ 328.295333][T10325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 328.295346][T10325] R13: 0000000000000000 R14: 00007fe439fb5fa0 R15: 00007ffd428e9b08 [ 328.295378][T10325] [ 328.712000][T10334] netlink: 338 bytes leftover after parsing attributes in process `syz.1.1037'. [ 328.807941][T10332] netlink: 334 bytes leftover after parsing attributes in process `syz.0.1038'. g&[ 332.406204][T10397] nfsd: Unknown parameter 'Z' [ 333.184630][T10416] binder: 10415:10416 unknown command 4294967282 [ 333.191419][T10416] binder: 10415:10416 ioctl c0306201 2000000000c0 returned -22 [ 334.509744][T10448] FAULT_INJECTION: forcing a failure. [ 334.509744][T10448] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 334.543924][T10448] CPU: 0 UID: 0 PID: 10448 Comm: syz.0.1061 Not tainted 6.16.0-syzkaller-11699-g7e161a991ea7 #0 PREEMPT(full) [ 334.543960][T10448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 334.543974][T10448] Call Trace: [ 334.543982][T10448] [ 334.543992][T10448] dump_stack_lvl+0x16c/0x1f0 [ 334.544024][T10448] should_fail_ex+0x512/0x640 [ 334.544059][T10448] _copy_to_user+0x32/0xd0 [ 334.544104][T10448] simple_read_from_buffer+0xcb/0x170 [ 334.544133][T10448] proc_fail_nth_read+0x197/0x240 [ 334.544162][T10448] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 334.544189][T10448] ? rw_verify_area+0xcf/0x6c0 [ 334.544214][T10448] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 334.544236][T10448] vfs_readv+0x5be/0x8b0 [ 334.544267][T10448] ? __pfx_vfs_readv+0x10/0x10 [ 334.544288][T10448] ? __mutex_lock+0x1c4/0x10b0 [ 334.544312][T10448] ? find_held_lock+0x2b/0x80 [ 334.544345][T10448] ? __pfx___mutex_lock+0x10/0x10 [ 334.544383][T10448] ? __fget_files+0x20e/0x3c0 [ 334.544408][T10448] ? __fget_files+0x1e0/0x3c0 [ 334.544442][T10448] ? do_readv+0x132/0x340 [ 334.544465][T10448] do_readv+0x132/0x340 [ 334.544492][T10448] ? __pfx_do_readv+0x10/0x10 [ 334.544529][T10448] do_syscall_64+0xcd/0x490 [ 334.544558][T10448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.544583][T10448] RIP: 0033:0x7fe439d8eb69 [ 334.544604][T10448] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 334.544627][T10448] RSP: 002b:00007fe43ac42038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 334.544651][T10448] RAX: ffffffffffffffda RBX: 00007fe439fb5fa0 RCX: 00007fe439d8eb69 [ 334.544667][T10448] RDX: 0000000000000001 RSI: 0000200000000a80 RDI: 0000000000000003 [ 334.544682][T10448] RBP: 00007fe43ac42090 R08: 0000000000000000 R09: 0000000000000000 [ 334.544697][T10448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 334.544712][T10448] R13: 0000000000000000 R14: 00007fe439fb5fa0 R15: 00007ffd428e9b08 [ 334.544746][T10448] [ 339.192171][T10505] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input13 [ 339.275168][T10485] kexec: Could not allocate control_code_buffer [ 345.044954][T10619] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 345.877361][T10636] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input14 [ 346.199943][T10644] ptp ptp0: only physical clock in use now [ 346.267167][T10648] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1109'. [ 346.954204][T10661] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1111'. [ 347.215187][T10661] team0: Port device team_slave_1 removed [ 348.533365][T10688] FAULT_INJECTION: forcing a failure. [ 348.533365][T10688] name fail_futex, interval 1, probability 0, space 0, times 0 [ 348.546558][T10688] CPU: 0 UID: 0 PID: 10688 Comm: syz.2.1120 Not tainted 6.16.0-syzkaller-11699-g7e161a991ea7 #0 PREEMPT(full) [ 348.546594][T10688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 348.546608][T10688] Call Trace: [ 348.546616][T10688] [ 348.546625][T10688] dump_stack_lvl+0x16c/0x1f0 [ 348.546654][T10688] should_fail_ex+0x512/0x640 [ 348.546687][T10688] should_fail_futex+0x4c/0x60 [ 348.546736][T10688] futex_lock_pi_atomic+0x101/0xd50 [ 348.546777][T10688] futex_lock_pi+0x23f/0x7c0 [ 348.546816][T10688] ? __pfx_futex_lock_pi+0x10/0x10 [ 348.546848][T10688] ? __futex_wait+0x24c/0x2f0 [ 348.546907][T10688] ? futex_private_hash_put+0x18a/0x300 [ 348.546940][T10688] ? __pfx_futex_wake_mark+0x10/0x10 [ 348.546982][T10688] ? ksys_write+0x190/0x250 [ 348.547014][T10688] do_futex+0x11a/0x350 [ 348.547041][T10688] ? __pfx_do_futex+0x10/0x10 [ 348.547078][T10688] __x64_sys_futex+0x1e0/0x4c0 [ 348.547107][T10688] ? fput+0x9b/0xd0 [ 348.547136][T10688] ? __pfx___x64_sys_futex+0x10/0x10 [ 348.547164][T10688] ? xfd_validate_state+0x61/0x180 [ 348.547195][T10688] ? __pfx_ksys_write+0x10/0x10 [ 348.547230][T10688] do_syscall_64+0xcd/0x490 [ 348.547256][T10688] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.547278][T10688] RIP: 0033:0x7f75fc78eb69 [ 348.547297][T10688] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 348.547319][T10688] RSP: 002b:00007f75fd66d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 348.547340][T10688] RAX: ffffffffffffffda RBX: 00007f75fc9b5fa0 RCX: 00007f75fc78eb69 [ 348.547356][T10688] RDX: 0000000000000008 RSI: 0000000000000006 RDI: 0000000000000000 [ 348.547369][T10688] RBP: 00007f75fc811df1 R08: 0000000000000000 R09: 000000008000fff2 [ 348.547383][T10688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 348.547396][T10688] R13: 0000000000000000 R14: 00007f75fc9b5fa0 R15: 00007ffd81e09248 [ 348.547426][T10688] [ 348.912677][T10694] FAULT_INJECTION: forcing a failure. [ 348.912677][T10694] name failslab, interval 1, probability 0, space 0, times 0 [ 348.912706][T10694] CPU: 1 UID: 0 PID: 10694 Comm: syz.1.1118 Not tainted 6.16.0-syzkaller-11699-g7e161a991ea7 #0 PREEMPT(full) [ 348.912726][T10694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 348.912735][T10694] Call Trace: [ 348.912740][T10694] [ 348.912746][T10694] dump_stack_lvl+0x16c/0x1f0 [ 348.912766][T10694] should_fail_ex+0x512/0x640 [ 348.912784][T10694] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 348.912803][T10694] should_failslab+0xc2/0x120 [ 348.912823][T10694] __kmalloc_cache_noprof+0x6a/0x3e0 [ 348.912839][T10694] ? device_create_groups_vargs+0x8a/0x270 [ 348.912863][T10694] device_create_groups_vargs+0x8a/0x270 [ 348.912886][T10694] device_create+0xed/0x130 [ 348.912906][T10694] ? __pfx_device_create+0x10/0x10 [ 348.912924][T10694] ? do_raw_spin_lock+0x12c/0x2b0 [ 348.912947][T10694] ? is_console_locked+0x9/0x20 [ 348.912963][T10694] ? con_is_visible+0x65/0x150 [ 348.912984][T10694] ? csi_J+0x54a/0xad0 [ 348.913002][T10694] vcs_make_sysfs+0x32/0x80 [ 348.913024][T10694] vc_allocate+0x501/0x880 [ 348.913039][T10694] ? __pfx_vc_allocate+0x10/0x10 [ 348.913060][T10694] con_install+0xa1/0x600 [ 348.913077][T10694] ? __pfx_con_install+0x10/0x10 [ 348.913095][T10694] ? __pfx_con_install+0x10/0x10 [ 348.913111][T10694] tty_init_dev.part.0+0x9c/0x500 [ 348.913130][T10694] tty_open+0xa50/0xf90 [ 348.913150][T10694] ? __pfx_tty_open+0x10/0x10 [ 348.913167][T10694] ? chrdev_open+0x10b/0x6a0 [ 348.913188][T10694] ? __pfx_tty_open+0x10/0x10 [ 348.913204][T10694] chrdev_open+0x234/0x6a0 [ 348.913221][T10694] ? __pfx_apparmor_file_open+0x10/0x10 [ 348.913244][T10694] ? __pfx_chrdev_open+0x10/0x10 [ 348.913263][T10694] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 348.913283][T10694] do_dentry_open+0x982/0x1530 [ 348.913301][T10694] ? __pfx_chrdev_open+0x10/0x10 [ 348.913322][T10694] vfs_open+0x82/0x3f0 [ 348.913345][T10694] path_openat+0x1de4/0x2cb0 [ 348.913369][T10694] ? __pfx_path_openat+0x10/0x10 [ 348.913396][T10694] do_filp_open+0x20b/0x470 [ 348.913413][T10694] ? __pfx_do_filp_open+0x10/0x10 [ 348.913443][T10694] ? alloc_fd+0x471/0x7d0 [ 348.913464][T10694] do_sys_openat2+0x11b/0x1d0 [ 348.913485][T10694] ? __pfx_do_sys_openat2+0x10/0x10 [ 348.913513][T10694] __x64_sys_openat+0x174/0x210 [ 348.913534][T10694] ? __pfx___x64_sys_openat+0x10/0x10 [ 348.913563][T10694] do_syscall_64+0xcd/0x490 [ 348.913580][T10694] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.913595][T10694] RIP: 0033:0x7fc84ad8eb69 [ 348.913608][T10694] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 348.913629][T10694] RSP: 002b:00007fc84bbb3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 348.913643][T10694] RAX: ffffffffffffffda RBX: 00007fc84afb6080 RCX: 00007fc84ad8eb69 [ 348.913653][T10694] RDX: 0000000000040002 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 348.913663][T10694] RBP: 00007fc84ae11df1 R08: 0000000000000000 R09: 0000000000000000 [ 348.913671][T10694] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000 [ 348.913680][T10694] R13: 0000000000000000 R14: 00007fc84afb6080 R15: 00007fff055202d8 [ 348.913700][T10694] [ 351.268893][T10694] tty tty26: ldisc open failed (-12), clearing slot 25 [ 351.400831][T10717] usb usb24: check_ctrlrecip: process 10717 (syz.3.1125) requesting ep 01 but needs 81 [ 351.436706][T10717] usb usb24: usbfs: process 10717 (syz.3.1125) did not claim interface 0 before use [ 354.864657][T10778] netlink: 122 bytes leftover after parsing attributes in process `syz.1.1138'. [ 355.169229][T10790] perf: Dynamic interrupt throttling disabled, can hang your system! [ 355.271568][T10791] ubi0: attaching mtd0 [ 355.277281][T10791] ubi0: scanning is finished [ 355.791677][T10791] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 355.800854][T10791] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 355.813390][T10791] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 355.827956][T10791] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 355.836784][T10791] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 355.844904][T10791] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 355.853575][T10791] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2899464943 [ 355.878336][T10791] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 355.889125][T10807] ubi0: background thread "ubi_bgt0d" started, PID 10807 [ 356.573981][T10818] FAULT_INJECTION: forcing a failure. [ 356.573981][T10818] name failslab, interval 1, probability 0, space 0, times 0 [ 356.648887][T10821] random: crng reseeded on system resumption [ 356.672129][T10818] CPU: 1 UID: 0 PID: 10818 Comm: syz.0.1148 Not tainted 6.16.0-syzkaller-11699-g7e161a991ea7 #0 PREEMPT(full) [ 356.672164][T10818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 356.672179][T10818] Call Trace: [ 356.672187][T10818] [ 356.672196][T10818] dump_stack_lvl+0x16c/0x1f0 [ 356.672228][T10818] should_fail_ex+0x512/0x640 [ 356.672273][T10818] should_failslab+0xc2/0x120 [ 356.672305][T10818] __kmalloc_cache_noprof+0x6a/0x3e0 [ 356.672332][T10818] ? proc_thread_self_get_link+0x1c6/0x240 [ 356.672370][T10818] proc_thread_self_get_link+0x1c6/0x240 [ 356.672402][T10818] ? __pfx_proc_thread_self_get_link+0x10/0x10 [ 356.672433][T10818] step_into+0x195e/0x2270 [ 356.672466][T10818] ? __pfx_step_into+0x10/0x10 [ 356.672497][T10818] ? lookup_fast+0x156/0x610 [ 356.672525][T10818] walk_component+0xfc/0x5b0 [ 356.672553][T10818] link_path_walk+0x627/0xe20 [ 356.672592][T10818] path_openat+0x1b0/0x2cb0 [ 356.672617][T10818] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.672662][T10818] ? __pfx_path_openat+0x10/0x10 [ 356.672701][T10818] do_filp_open+0x20b/0x470 [ 356.672730][T10818] ? __pfx_do_filp_open+0x10/0x10 [ 356.672785][T10818] ? alloc_fd+0x471/0x7d0 [ 356.672822][T10818] do_sys_openat2+0x11b/0x1d0 [ 356.672858][T10818] ? __pfx_do_sys_openat2+0x10/0x10 [ 356.672907][T10818] __x64_sys_openat+0x174/0x210 [ 356.672942][T10818] ? __pfx___x64_sys_openat+0x10/0x10 [ 356.672992][T10818] do_syscall_64+0xcd/0x490 [ 356.673019][T10818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.673041][T10818] RIP: 0033:0x7fe439d8d4d0 [ 356.673059][T10818] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 356.673080][T10818] RSP: 002b:00007fe43ac41fe0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 356.673103][T10818] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fe439d8d4d0 [ 356.673116][T10818] RDX: 0000000000000002 RSI: 00007fe439e120d6 RDI: 00000000ffffff9c [ 356.673126][T10818] RBP: 00007fe439e120d6 R08: 0000000000000000 R09: 00007fe43ac43000 [ 356.673134][T10818] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000000c [ 356.673142][T10818] R13: 0000000000000000 R14: 00007fe439fb5fa0 R15: 00007ffd428e9b08 [ 356.673161][T10818] [ 357.494027][T10837] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input15 [ 357.965624][T10839] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input16 [ 358.358739][T10856] binder_alloc: binder_alloc_mmap_handler: 10855 0-1000 already mapped failed -16 [ 359.702405][T10890] nfsd: Unknown parameter 'Z' [ 361.303897][T10923] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 361.361110][T10923] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 362.184006][T10946] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 362.196182][T10949] netlink: 'syz.2.1182': attribute type 21 has an invalid length. [ 362.217426][T10949] netlink: 334 bytes leftover after parsing attributes in process `syz.2.1182'. [ 365.094534][T11006] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 365.179848][T11006] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 365.234813][T11006] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 365.319841][T11006] page_type: f5(slab) [ 365.323902][T11006] raw: 00fff00000000040 ffff88801b842140 0000000000000000 dead000000000001 [ 365.383699][T11006] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 365.513285][T11006] head: 00fff00000000040 ffff88801b842140 0000000000000000 dead000000000001 [ 365.524329][T11006] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 365.579225][T11006] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 365.588857][T11006] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 365.598036][T11006] page dumped because: unmovable page [ 365.771833][T11006] page_owner tracks the page as allocated [ 365.816419][T11006] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5242, tgid 5242 (udevd), ts 44007417109, free_ts 42981430984 [ 365.898906][T11006] post_alloc_hook+0x1c0/0x230 [ 365.898960][T11006] get_page_from_freelist+0x132b/0x38e0 [ 365.898990][T11006] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 365.901343][T11006] alloc_pages_mpol+0x1fb/0x550 [ 365.901385][T11006] new_slab+0x247/0x330 [ 365.901408][T11006] ___slab_alloc+0xcf2/0x1740 [ 365.901431][T11006] __slab_alloc.constprop.0+0x56/0xb0 [ 365.901456][T11006] __kmalloc_noprof+0x2f2/0x510 [ 365.901485][T11006] tomoyo_realpath_from_path+0xc2/0x6e0 [ 365.901548][T11006] tomoyo_path_perm+0x274/0x460 [ 365.901574][T11006] security_inode_getattr+0x116/0x290 [ 365.901602][T11006] vfs_statx+0x121/0x3f0 [ 365.901636][T11006] vfs_fstatat+0x7b/0xf0 [ 365.901671][T11006] __do_sys_newfstatat+0x97/0x120 [ 365.901703][T11006] do_syscall_64+0xcd/0x490 [ 365.901730][T11006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.901757][T11006] page last free pid 5337 tgid 5337 stack trace: [ 365.901774][T11006] __free_frozen_pages+0x7d5/0x10f0 [ 365.901798][T11006] __put_partials+0x165/0x1c0 [ 365.901822][T11006] qlist_free_all+0x4d/0x120 [ 365.901847][T11006] kasan_quarantine_reduce+0x195/0x1e0 [ 365.901873][T11006] __kasan_slab_alloc+0x69/0x90 [ 365.901903][T11006] __kmalloc_noprof+0x1d4/0x510 [ 365.901932][T11006] tomoyo_encode2+0x100/0x3e0 [ 365.901970][T11006] tomoyo_encode+0x29/0x50 [ 365.902002][T11006] tomoyo_realpath_from_path+0x18f/0x6e0 [ 365.902036][T11006] tomoyo_check_open_permission+0x2ab/0x3c0 [ 365.902065][T11006] tomoyo_file_open+0x6b/0x90 [ 365.902102][T11006] security_file_open+0x84/0x1e0 [ 365.902133][T11006] do_dentry_open+0x596/0x1530 [ 365.902163][T11006] vfs_open+0x82/0x3f0 [ 365.902197][T11006] path_openat+0x1de4/0x2cb0 [ 365.902226][T11006] do_filp_open+0x20b/0x470 [ 368.819548][T11074] ------------[ cut here ]------------ [ 368.825048][T11074] WARNING: CPU: 0 PID: 11074 at kernel/trace/trace.c:8594 tracing_buffers_mmap_close+0xdd/0x130 [ 368.835987][T11074] Modules linked in: [ 368.840487][T11074] CPU: 0 UID: 0 PID: 11074 Comm: syz.0.1203 Not tainted 6.16.0-syzkaller-11699-g7e161a991ea7 #0 PREEMPT(full) [ 368.852531][T11074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 368.862996][T11074] RIP: 0010:tracing_buffers_mmap_close+0xdd/0x130 [ 368.870035][T11074] Code: 75 46 48 8b 7b 08 e8 02 96 ff ff 31 ff 89 c3 89 c6 e8 e7 58 fb ff 85 db 75 0a 48 83 c4 08 5b e9 99 5d fb ff e8 94 5d fb ff 90 <0f> 0b 90 48 83 c4 08 5b e9 86 5d fb ff e8 e1 b1 60 00 eb 87 e8 0a [ 368.890544][T11074] RSP: 0018:ffffc9000482fbb8 EFLAGS: 00010293 [ 368.896739][T11074] RAX: 0000000000000000 RBX: 00000000ffffffed RCX: ffffffff81bfb209 [ 368.904895][T11074] RDX: ffff88803147da00 RSI: ffffffff81bfb21c RDI: 0000000000000005 [ 368.912955][T11074] RBP: ffffffff81bfb140 R08: 0000000000000005 R09: 0000000000000000 [ 368.921246][T11074] R10: 00000000ffffffed R11: 0000000000000000 R12: ffff888075e11188 [ 368.929522][T11074] R13: dffffc0000000000 R14: ffffc9000482fc50 R15: 0000000000000000 [ 368.937658][T11074] FS: 0000000000000000(0000) GS:ffff8881246ce000(0000) knlGS:0000000000000000 [ 368.946775][T11074] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 368.953745][T11074] CR2: 00007f923e8e56c0 CR3: 000000005f76a000 CR4: 00000000003526f0 [ 368.962242][T11074] Call Trace: [ 368.965561][T11074] [ 368.968751][T11074] remove_vma+0x85/0x160 [ 368.973312][T11074] exit_mmap+0x511/0xb90 [ 368.977612][T11074] ? __pfx_exit_mmap+0x10/0x10 [ 368.982491][T11074] ? __lock_acquire+0xb97/0x1ce0 [ 368.987492][T11074] __mmput+0x12a/0x410 [ 368.991665][T11074] mmput+0x62/0x70 [ 368.995431][T11074] do_exit+0x7c7/0x2bf0 [ 368.999672][T11074] ? __pfx_do_exit+0x10/0x10 [ 369.004290][T11074] ? preempt_schedule_thunk+0x16/0x30 [ 369.009845][T11074] do_group_exit+0xd3/0x2a0 [ 369.014397][T11074] __x64_sys_exit_group+0x3e/0x50 [ 369.019578][T11074] x64_sys_call+0x14fa/0x1720 [ 369.024653][T11074] do_syscall_64+0xcd/0x490 [ 369.029712][T11074] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.035682][T11074] RIP: 0033:0x7fe439d8eb69 [ 369.040337][T11074] Code: Unable to access opcode bytes at 0x7fe439d8eb3f. [ 369.047465][T11074] RSP: 002b:00007ffd428e9e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 369.056274][T11074] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe439d8eb69 [ 369.064577][T11074] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 369.072876][T11074] RBP: 00007ffd428e9ecc R08: 00000016428e9f5f R09: 000055557ce0d590 [ 369.081186][T11074] R10: 0000000000000001 R11: 0000000000000246 R12: 000000000000011f [ 369.089349][T11074] R13: 000055557ce0d590 R14: 00000000000594fc R15: 00007ffd428e9f20 [ 369.097470][T11074] [ 369.100638][T11074] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 369.108072][T11074] CPU: 0 UID: 0 PID: 11074 Comm: syz.0.1203 Not tainted 6.16.0-syzkaller-11699-g7e161a991ea7 #0 PREEMPT(full) [ 369.119908][T11074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 369.129998][T11074] Call Trace: [ 369.133302][T11074] [ 369.136254][T11074] dump_stack_lvl+0x3d/0x1f0 [ 369.140972][T11074] vpanic+0x6e8/0x7a0 [ 369.144994][T11074] ? __pfx_vpanic+0x10/0x10 [ 369.149545][T11074] ? tracing_buffers_mmap_close+0xdd/0x130 [ 369.155410][T11074] panic+0xca/0xd0 [ 369.159259][T11074] ? __pfx_panic+0x10/0x10 [ 369.163719][T11074] ? check_panic_on_warn+0x1f/0xb0 [ 369.168878][T11074] check_panic_on_warn+0xab/0xb0 [ 369.173854][T11074] __warn+0xf6/0x3c0 [ 369.177784][T11074] ? tracing_buffers_mmap_close+0xdd/0x130 [ 369.183618][T11074] report_bug+0x3c3/0x580 [ 369.188000][T11074] ? tracing_buffers_mmap_close+0xdd/0x130 [ 369.193812][T11074] handle_bug+0x184/0x210 [ 369.198162][T11074] exc_invalid_op+0x17/0x50 [ 369.202710][T11074] asm_exc_invalid_op+0x1a/0x20 [ 369.207564][T11074] RIP: 0010:tracing_buffers_mmap_close+0xdd/0x130 [ 369.214092][T11074] Code: 75 46 48 8b 7b 08 e8 02 96 ff ff 31 ff 89 c3 89 c6 e8 e7 58 fb ff 85 db 75 0a 48 83 c4 08 5b e9 99 5d fb ff e8 94 5d fb ff 90 <0f> 0b 90 48 83 c4 08 5b e9 86 5d fb ff e8 e1 b1 60 00 eb 87 e8 0a [ 369.233736][T11074] RSP: 0018:ffffc9000482fbb8 EFLAGS: 00010293 [ 369.239813][T11074] RAX: 0000000000000000 RBX: 00000000ffffffed RCX: ffffffff81bfb209 [ 369.247958][T11074] RDX: ffff88803147da00 RSI: ffffffff81bfb21c RDI: 0000000000000005 [ 369.256016][T11074] RBP: ffffffff81bfb140 R08: 0000000000000005 R09: 0000000000000000 [ 369.264024][T11074] R10: 00000000ffffffed R11: 0000000000000000 R12: ffff888075e11188 [ 369.271995][T11074] R13: dffffc0000000000 R14: ffffc9000482fc50 R15: 0000000000000000 [ 369.279989][T11074] ? __pfx_tracing_buffers_mmap_close+0x10/0x10 [ 369.286258][T11074] ? tracing_buffers_mmap_close+0xc9/0x130 [ 369.292075][T11074] ? tracing_buffers_mmap_close+0xdc/0x130 [ 369.297897][T11074] ? tracing_buffers_mmap_close+0xdc/0x130 [ 369.303720][T11074] remove_vma+0x85/0x160 [ 369.307982][T11074] exit_mmap+0x511/0xb90 [ 369.312253][T11074] ? __pfx_exit_mmap+0x10/0x10 [ 369.317048][T11074] ? __lock_acquire+0xb97/0x1ce0 [ 369.322022][T11074] __mmput+0x12a/0x410 [ 369.326101][T11074] mmput+0x62/0x70 [ 369.330088][T11074] do_exit+0x7c7/0x2bf0 [ 369.334262][T11074] ? __pfx_do_exit+0x10/0x10 [ 369.338863][T11074] ? preempt_schedule_thunk+0x16/0x30 [ 369.344261][T11074] do_group_exit+0xd3/0x2a0 [ 369.348780][T11074] __x64_sys_exit_group+0x3e/0x50 [ 369.353920][T11074] x64_sys_call+0x14fa/0x1720 [ 369.358688][T11074] do_syscall_64+0xcd/0x490 [ 369.363215][T11074] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.369195][T11074] RIP: 0033:0x7fe439d8eb69 [ 369.373624][T11074] Code: Unable to access opcode bytes at 0x7fe439d8eb3f. [ 369.380650][T11074] RSP: 002b:00007ffd428e9e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 369.389344][T11074] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe439d8eb69 [ 369.397324][T11074] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 369.405383][T11074] RBP: 00007ffd428e9ecc R08: 00000016428e9f5f R09: 000055557ce0d590 [ 369.413533][T11074] R10: 0000000000000001 R11: 0000000000000246 R12: 000000000000011f [ 369.421524][T11074] R13: 000055557ce0d590 R14: 00000000000594fc R15: 00007ffd428e9f20 [ 369.429603][T11074] [ 369.433077][T11074] Kernel Offset: disabled [ 369.437483][T11074] Rebooting in 86400 seconds..