last executing test programs: 13.257696369s ago: executing program 1 (id=1043): io_uring_setup$auto(0x86, 0x0) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x6) socket(0x10, 0x4, 0xffffffc0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948e, 0x3, 0x15f4da0a, 0x3, 0x3, 0x8, 0x0, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x120e2, 0x0) write$auto(r1, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) fcntl$auto_F_SETOWN_EX(0xffffffffffffffff, 0xf, 0x5a5) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14f602, 0x0) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/all/addr_gen_mode\x00', 0xa0202, 0x0) sendfile$auto(r2, r2, 0x0, 0x7fffe000) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) write$auto(0x3, 0x0, 0x100082) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/system/cpu/vulnerabilities/spec_rstack_overflow\x00', 0x40, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000380)=""/11, 0xb) madvise$auto(0x0, 0xffffffffffff0005, 0x17) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) lstat$auto(0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mseal$auto(0x0, 0x7dda, 0x0) prctl$auto(0x39, 0x1, 0x0, 0x0, 0x0) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_CTRL_CMD_GETPOLICY(r4, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x30000881}, 0xc040810) 9.919340855s ago: executing program 1 (id=1052): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/system/cpu/hotplug/states\x00', 0x8800, 0x0) read$auto(r0, &(0x7f0000000000)='%\x00', 0xfffffffffffff000) 9.557199451s ago: executing program 1 (id=1054): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) select$auto(0x3, 0x0, 0x0, 0x0, 0x0) syslog$auto(0x2, 0x0, 0xcf) mmap$auto(0x0, 0x20006, 0x3, 0x12, 0xffffffffffffffff, 0x8000) write$auto(0xca, &(0x7f0000000040)='\x04>2\x0f\x00\x00\x96\x18am\xea\xf4\x1b\xf8', 0x7e) close_range$auto(0x2, 0x8, 0x0) shmget$auto(0x400, 0x10563, 0x568c12f2) sendmsg$auto_NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x24048800) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x2020009, 0x3, 0x20000000eb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0xae41, 0x38) clone$auto(0x9001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6) write$auto_tomoyo_operations_securityfs_if(0xffffffffffffffff, &(0x7f0000001300), 0x0) shmat$auto(0x0, &(0x7f0000000580)='(\x00', 0xfffffffa) syz_clone(0x25342080, 0x0, 0x0, 0x0, 0x0, 0x0) 8.151384909s ago: executing program 2 (id=1060): r0 = prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/usb/usbmon/9t\x00', 0xa00, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x40200, 0x0) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x400, 0x0) openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/tracing/set_event_notrace_pid\x00', 0x100242, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000004400)='/dev/dsp1\x00', 0x1, 0x0) setsockopt$auto(0xffffffffffffffff, 0x1, 0x1021, 0x0, 0xd) ioctl$auto_BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, &(0x7f0000000280)={0x3, 0x3}) close_range$auto(0x2, 0xa, 0x0) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/all/forwarding\x00', 0x42a81, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/loop12/queue/wbt_lat_usec\x00', 0x102, 0x0) sendfile$auto(r5, r5, 0x0, 0x1) sendfile$auto(r4, r3, 0x0, 0x1000202) ioctl$auto_VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r3) ioctl$auto(0x3, 0x541b, 0x38) r6 = syz_clone(0x10000000, &(0x7f0000000340)="dd60cefd7bf1df064e3e3a9ddd7f68cbd4402affe7bb6d5a30303963ec4bf275351ef838494c0cceef4cb5e89d7d3718bf66469b213b35585e754c6ff412ee40d28876ab656640e0a3494651ff9d89ce596ebe9d259a271b32941e9ba3f29194d1615eb39ea325974f4f6ff5faa9ab7a7c2480f2305986dd54dd5aaa9802b6a1f1de8770e43cf02a66d3ab542933cc7ecdd08703c7af9e19d41977fe3f", 0x9d, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)="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") r7 = waitid$auto_P_PGID(0x2, 0x0, &(0x7f0000001480)={@_si_pad}, 0x4, &(0x7f0000001500)={{0x7, 0x5}, {0x6}, 0x40, 0x1, 0xffff, 0x10, 0x3, 0x53a, 0x297d, 0xfffffffffffff800, 0x45c, 0x5, 0x7, 0x10, 0x2e2, 0x9}) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(r2, 0xc4c85512, &(0x7f0000001900)={{@inferred=r6, 0x401, 0x10001, 0x3, "ecbff10575af4c9718f1304addbc043d66e7f86b9ee625f047cd260942e1f1b4a7b0bd4835b94219660703a2", @inferred=r7}, 0x1, @enumerated=@item=[0x8, 0x7f, 0x103, 0x3, 0x7, 0xffffff63, 0x9, 0x4, 0xffffffff, 0x6, 0x8c2e, 0xa2, 0x2, 0x0, 0x0, 0xf, 0x5, 0xa, 0x7, 0x9, 0xf9, 0xb1bc, 0x80, 0xd3b, 0x10, 0x7, 0x4, 0x9, 0x3e, 0xa, 0x4, 0x2, 0x3, 0x3, 0x90, 0x4, 0x2, 0xe6a, 0x0, 0x6, 0xffeffffe, 0x1, 0xffffffff, 0x3, 0xe5b, 0x51, 0x1, 0xf, 0x800, 0x1000, 0x7, 0xb, 0x8001, 0x1, 0x6, 0x7, 0x4, 0x9, 0x3, 0x400, 0x5, 0xff, 0x51f05f0b, 0x2c, 0x100, 0x0, 0x8, 0x4, 0x0, 0x6, 0x6, 0x3, 0x1, 0xd7e7, 0x3, 0xe, 0x81, 0x101, 0x8, 0x4, 0x1, 0x5, 0x5, 0x2, 0x8, 0xd493, 0xfffeffff, 0x7, 0x4bd, 0x9, 0x0, 0x101, 0x50, 0xff, 0x7, 0x0, 0x2d6, 0x6, 0x54, 0x80000001, 0x9, 0x4, 0xdc, 0xfff, 0x0, 0x3930, 0x0, 0x9, 0x1, 0x6, 0x8, 0xffffffff, 0x1, 0x5, 0x2, 0x4e9ff2bc, 0x2, 0x5, 0x9e8f, 0x2, 0x1, 0x200, 0x6, 0x3, 0x10, 0x0, 0x7fffffff, 0x1000], "6408d19d718d32198f01b46af51ecd30768053ea3dc6bfb431b0599cfaa4e9a61f06bb647d0241555cc45dc6b6a9946886c8d8081a2fbba1eea1955b0700000cc14950305ca647dc6d22dd0000000000000d0000000000000000000000000000000000000000000200"}) ioctl$auto_BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, &(0x7f0000000180)={0xfffffffffffffffe, {0x6, 0xd, 0x9, 0x55e5, 0xb6a}}) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x5c5fd097f751b33e}, 0x80) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) 6.681152712s ago: executing program 1 (id=1064): mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x1e, 0x7, 0x3, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0x2, 0x2, 0x0) mq_open$auto(&(0x7f0000000500)='#:\x00', 0xfffffff0, 0x831c, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x18b440, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/driver/nvram\x00', 0x40000, 0x0) readv$auto(0x3, 0x0, 0x1) clone$auto(0x2, 0x81, 0x0, 0x0, 0x3) mremap$auto(0x4003, 0xfee0, 0x1, 0x2, 0xfffff000) munmap$auto(0x8000, 0xffffffff) io_uring_setup$auto(0x6, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r0 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r1 = socket(0x2b, 0x1, 0x1) ioctl$auto(r1, 0x8983, 0x4) ioctl$auto_IOCTL_STOP_ACCEL_DEV(0xffffffffffffffff, 0x40096101, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x40440, 0x0) mmap$auto(0xfffffffffffffffc, 0x4020009, 0x80000000df, 0xeb1, 0x401, 0x8000) r2 = socket(0x2, 0x5, 0x8) close_range$auto(r0, 0x8, 0x8001) open(0x0, 0x22240, 0x155) socket(0x2, 0x1, 0x100) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) socket(0x2, 0x1, 0x106) listen$auto(0x3, 0x81) sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) 6.583688298s ago: executing program 3 (id=1065): mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) mremap$auto(0x3fffff, 0x7, 0x3fd6, 0x3, 0x20000000) 6.463237356s ago: executing program 2 (id=1066): mmap$auto(0x0, 0x2020006, 0x1000000000000007, 0xeb1, 0x0, 0x1008000) r0 = socket(0x29, 0x2, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) recvmmsg$auto(r1, &(0x7f0000000040)={{0x0, 0x1, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) ioctl$auto(r0, 0x89a1, 0x24) mmap$auto(0x0, 0x61, 0x100001000000004, 0xfa31, 0x400, 0x8000) munlock$auto(0x9, 0x29b9) 6.271682982s ago: executing program 3 (id=1067): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:13/power/runtime_active_time\x00', 0x34c00, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000000), r1) sendmsg$auto_MACSEC_CMD_UPD_RXSA(r1, &(0x7f0000006200)={0x0, 0xfffffffffffffe47, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="230027bd7000fcdbdf2508ffe9000c000380050001801500000004000280080001"], 0x2c}, 0x1, 0x0, 0x0, 0x4008000}, 0x44044) read$auto(r0, 0x0, 0x20) 6.090674289s ago: executing program 3 (id=1069): io_uring_setup$auto(0x86, 0x0) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x6) socket(0x10, 0x4, 0xffffffc0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948e, 0x3, 0x15f4da0a, 0x3, 0x3, 0x8, 0x0, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x120e2, 0x0) write$auto(r1, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) fcntl$auto_F_SETOWN_EX(0xffffffffffffffff, 0xf, 0x5a5) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14f602, 0x0) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/all/addr_gen_mode\x00', 0xa0202, 0x0) sendfile$auto(r2, r2, 0x0, 0x7fffe000) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) write$auto(0x3, 0x0, 0x100082) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/system/cpu/vulnerabilities/spec_rstack_overflow\x00', 0x40, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000380)=""/11, 0xb) madvise$auto(0x0, 0xffffffffffff0005, 0x17) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) lstat$auto(0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mseal$auto(0x0, 0x7dda, 0x0) prctl$auto(0x39, 0x1, 0x0, 0x0, 0x0) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_CTRL_CMD_GETPOLICY(r4, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x30000881}, 0xc040810) 5.915628934s ago: executing program 0 (id=1070): openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000440)='/proc/thread-self/mountinfo\x00', 0x800, 0x0) unshare$auto(0x40000080) write$auto(0xffffffffffffffff, &(0x7f0000000400)='/de\xef\xe7auDio1\x00\f\'\x8b\xd9\xfeN\xcd#)\x8c\x89>-o\xd7\x8f$\xac\xfc\xa2\xccm\x0e \xfb\xe5\xe9\x92\xaa\xef\x84$\x84Ia>6pV;{\'\xaa\xbeS\x14\xb6\xd2\xf6\xb7\xcd\x02\x00\x05X\x1dK\x18\x99\x02\xb3\x0fY0\x80\x99\xe3\x0e\xa2D\xc0\xecE\x86\xd9J\x9c\xa8\x98\x02\xdb\xf1\x81TMpS\xc5\xab\xa1\x1bG\v>\x03\xf7\xe1\xaf\xe3\x04\xc3 ffF\x0f\xa6}\xa3\xa8\xd1\xe2\xd0\xfbG\xa6\xa6\x8e7\x80\xd9\xd0\xdf\xad\xb1\x15B\xb4=`\x94\xc6<\x18\x15\xcc^\v\xc8\x86\x8eY>\xfe\xe7%\xcb\xdd\xda!\xd45Z\xd0\xfc\x1b\xf0\xe1\xd6:\xd7\xe9N\xc1W\xe3\xae\xe9\xb27>k\xf8\xdf\xe1\xf9\xcc\xcb\v\x01D\xc3\xa9T\xb9UY\xaf\xa4\xe4\xfec\xa3\x9bI@\xb7w\xf8\x14\xc0\xd5\xd5\x95', 0x8) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0xdf33, 0xe2, 0xeb1, 0x405, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x14, 0x944, 0x1ffe0, 0x3, 0x6, 0x2, 0x9, 0x5, 0xfff, 0x7, 0x8001, 0x2, 0x5, 0x3, 0x40, 0x7, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6}, 0x1fe, 0x81) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='T'], 0x1ac}, 0x1, 0x0, 0x0, 0x801}, 0x40000) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) mmap$auto(0x3, 0x40000b, 0x1000000000007fb, 0x80000011, 0x2, 0x4) madvise$auto(0x0, 0xffffffffffff0001, 0x15) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) madvise$auto(0x0, 0x2003f0, 0x15) read$auto_v4l2_fops_v4l2_dev(0xffffffffffffffff, &(0x7f00000010c0)=""/22, 0x16) r1 = mq_open$auto(&(0x7f0000000100)='?\x11aX\x00\xf0\x1bQ\xba\'P\x1b;U\xda\x98\x924\xe3%H\xdc\x04\xffY\xd4\x88%\xda\xb5\xaf\xf2(\xe1\xe0\xd7\x85o\x9a:\xff4\x05\xed\x98\xd7\xd8;\x97\xc3\x05\xce\xad\x94\xc1\x1a$\x05\xf3\xf0 \x9e\xf1f\x9d\xb9\xd5\xd04u\xd6\x7f\xe2\x18\xb3\xe2\xa2\x9fw\xc5\x10\xb0\xca\xeaC\\\xa3\xb8RC\x1dH\x85\x15 \xe0|C\x18\x0f|\xd5\xbfn\x1a\xff\xd3\xc3\xc1Y>E\xbcu\xff\xbe\x12\xa3\x10\x1aJ\xf9\xa38\xa4\x06\xf7\xe1\xf3\xcb\xcc9A\x96H\xf6\xb2\xef\x1do\xcf\xb2\xcf\xf3\x90X\x06\xc7b\x1d\xceW\x9e\xf3\xcb\a\xf8\x97e^L\xe2\v\xed\x93\'\xd5\xc5\"\a|v\xdd(\xaco-;\'\xcb\x9b\xb7\xc7@#$-\xd3\x9bcn\x1a+_\xd0\x84\x88F\xb0\"\xac\xd82v\x1d\x04\xf0T\a\x1d\xb7\xe9_BeD\x98\xe4n\xd6B\x9b\xe6\xe7O4\x7f\xe1\xdf\x101:\xc9\xec\xeaY\x16\x88K^=g\x9f\xeaR\xccB\xce\x80\xe4A\xe2P\x12\\>b\xfc\xeb\xdf\xed\xd86$Cr\x80BTo+\xd8\x96_\xd1\xe8\xf6\xf8,n>\xb49x\x13\xadb\xf1\xfe\x84\x11v\x1c\"\xf5\x82\f\xa4\xd3)K\x14\xa3\xbe%\xee\xb1\xdf\x8eU%\xd5\x050\xb6o)+)\xb0\xf8\xc2E\x827\x98r)\x14\x92%\xb9\x85\xd4N\xe8\xc1w$\xa5_\x93\v\x15\xc5\xa7/\xc3s\x91\xedo}\xe8\xa5r\xfe\xf8\x14pXD\xcf?\xd6\x8a\xd6!\x1b\xe1+\xeb\xb1Y}\xac\xdf\x18U\x9b$\xfeg\xc5N\x1b;?\xef\xfff:\x80\x9b>\xd4\t\xaes\xb6\x98\xf3\xe3\xc4\xd8\x18dG\xf5\x8a:-o\xd7\x8f$\xac\xfc\xa2\xccm\x0e \xfb\xe5\xe9\x92\xaa\xef\x84$\x84Ia>6pV;{\'\xaa\xbeS\x14\xb6\xd2\xf6\xb7\xcd\x02\x00\x05X\x1dK\x18\x99\x02\xb3\x0fY0\x80\x99\xe3\x0e\xa2D\xc0\xecE\x86\xd9J\x9c\xa8\x98\x02\xdb\xf1\x81TMpS\xc5\xab\xa1\x1bG\v>\x03\xf7\xe1\xaf\xe3\x04\xc3 ffF\x0f\xa6}\xa3\xa8\xd1\xe2\xd0\xfbG\xa6\xa6\x8e7\x80\xd9\xd0\xdf\xad\xb1\x15B\xb4=`\x94\xc6<\x18\x15\xcc^\v\xc8\x86\x8eY>\xfe\xe7%\xcb\xdd\xda!\xd45Z\xd0\xfc\x1b\xf0\xe1\xd6:\xd7\xe9N\xc1W\xe3\xae\xe9\xb27>k\xf8\xdf\xe1\xf9\xcc\xcb\v\x01D\xc3\xa9T\xb9UY\xaf\xa4\xe4\xfec\xa3\x9bI@\xb7w\xf8\x14\xc0\xd5\xd5\x95', 0x8) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0xdf33, 0xe2, 0xeb1, 0x405, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x14, 0x944, 0x1ffe0, 0x3, 0x6, 0x2, 0x9, 0x5, 0xfff, 0x7, 0x8001, 0x2, 0x5, 0x3, 0x40, 0x7, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6}, 0x1fe, 0x81) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='T'], 0x1ac}, 0x1, 0x0, 0x0, 0x801}, 0x40000) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) mmap$auto(0x3, 0x40000b, 0x1000000000007fb, 0x80000011, 0x2, 0x4) madvise$auto(0x0, 0xffffffffffff0001, 0x15) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) madvise$auto(0x0, 0x2003f0, 0x15) read$auto_v4l2_fops_v4l2_dev(0xffffffffffffffff, &(0x7f00000010c0)=""/22, 0x16) ppoll$auto(&(0x7f0000000080)={0xffffffffffffffff, 0x200, 0x9}, 0x9, &(0x7f0000000040)={0x9}, &(0x7f00000000c0)={0x100}, 0x8) mq_timedsend$auto(0xffffffffffffffff, 0x0, 0x2000, 0x2, 0x0) 3.309915695s ago: executing program 3 (id=1075): io_uring_setup$auto(0x86, 0x0) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x6) socket(0x10, 0x4, 0xffffffc0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948e, 0x3, 0x15f4da0a, 0x3, 0x3, 0x8, 0x0, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x120e2, 0x0) write$auto(r1, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) fcntl$auto_F_SETOWN_EX(0xffffffffffffffff, 0xf, 0x5a5) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14f602, 0x0) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/all/addr_gen_mode\x00', 0xa0202, 0x0) sendfile$auto(r2, r2, 0x0, 0x7fffe000) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) write$auto(0x3, 0x0, 0x100082) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/system/cpu/vulnerabilities/spec_rstack_overflow\x00', 0x40, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000380)=""/11, 0xb) madvise$auto(0x0, 0xffffffffffff0005, 0x17) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) lstat$auto(0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mseal$auto(0x0, 0x7dda, 0x0) prctl$auto(0x39, 0x1, 0x0, 0x0, 0x0) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_CTRL_CMD_GETPOLICY(r4, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="010325bd7040ffdbdf250a0000"], 0x28}, 0x1, 0x0, 0x0, 0x30000881}, 0xc040810) 3.24522886s ago: executing program 2 (id=1076): r0 = socket(0x2, 0x1, 0x106) bind$auto(0x3, 0x0, 0x6a) connect$auto(r0, &(0x7f00000000c0)=@in={0x2, 0x3, @multicast2}, 0x55) setsockopt$auto(r0, 0x6, 0xd, &(0x7f0000000280)='lp\x00h\x85M\xdf\xdc\x83\x8a\xa7\xe4]U(\x01\t=\x1e\x00\x00', 0x4) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x10000000017, 0x28, 0x4, 0x8000000156, 0x0) remap_file_pages$auto(0x5, 0x1000, 0x0, 0x8, 0x10007) openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, 0x0, 0x2000, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)=ANY=[], 0x14}, 0x1, 0x68, 0x0, 0x4000000}, 0x0) tkill$auto(0x0, 0x7) write$auto(0x3, 0x0, 0x100082) mmap$auto(0x0, 0x400008, 0xdf, 0x10000000001013, 0x2, 0x8000) setsockopt$auto(0x3, 0x114, 0xa, 0x0, 0x4) r1 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r1, &(0x7f0000000e00)="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", 0xcb6) 2.830448192s ago: executing program 0 (id=1077): socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0xfffffffffffffffe, 0x2020009, 0x3a3d, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff) r0 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy0/reset\x00', 0x82, 0x0) write$auto_debugfs_full_proxy_file_operations_internal(r0, 0x0, 0x20) mmap$auto(0x2, 0xaa06, 0xffffffff, 0xeb1, r0, 0x2) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nbd11\x00', 0x0, 0x0) r2 = ioctl$auto_NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) ioctl$auto_IMADDTIMER(r2, 0x80044940, &(0x7f0000000080)=0xfffffc00) mmap$auto(0x3, 0x810002, 0xffb, 0x8000000008011, r1, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_dma_heap_fops_dma_heap(0xffffffffffffffff, 0xffffffffffdffe00, &(0x7f0000000140)=';') openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, 0x0, 0x18000, 0x0) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, 0x0, 0x200, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) prctl$auto(0x1000000003b, 0x4, 0x0, 0x9, 0x200000000007) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) writev$auto(0xffffffffffffffff, 0x0, 0x8) r4 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/net/rpc/nfs4.idtoname/channel\x00', 0x8f3b7a51b80ebd01, 0x0) write$auto_proc_reg_file_ops_compat_inode(r5, &(0x7f0000000040)="04000000027e0dc0023acb0c00000c000000fad4de9a20350a", 0x19) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x2, 0x1, 0x106) write$auto(r4, &(0x7f0000000040)='nbd\x00', 0x4) 1.663985488s ago: executing program 0 (id=1078): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) ioctl$auto_SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000080)={0x1, 0xaa, 0xb, 0x1, 0x100, "a72250de129a1e8f005000"}) (fail_nth: 1) 1.136624827s ago: executing program 0 (id=1079): timer_create$auto(0x0, &(0x7f0000000140)={@sival_ptr=0x0, @inferred, 0x1}, &(0x7f0000000200)=0x1000004) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/lo/disable_ipv6\x00', 0x40001, 0x0) write$auto(r0, 0x0, 0x0) timer_settime$auto(0x0, 0x8, &(0x7f0000000040)={{0x0, 0xd5}, {0x1004}}, &(0x7f0000000100)={{0xb04, 0x4}, {0x9000, 0x7ff}}) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) ioctl$auto_SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000080)={0x1, 0xaa, 0xb, 0x1, 0x100, "a72250de129a1e8f005000"}) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/dev_snmp6/macvlan0\x00', 0x80400, 0x0) 862.094965ms ago: executing program 0 (id=1080): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x802, 0x0) ioctl$auto_USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000240)={0x23, 0x3, 0x18, 0x10, 0x808, 0x7fb, &(0x7f0000000340)="2e87ae255faea9bca16821e73660a43c98f81f056a20818dde63d3c3436ada5521c127417b70c848d2f0b41c9954b52c56fd29b722f89cb8e96cfabaead96bc484c33f7fb2b8e8aeaeeb962fd2017e70de4a4892c560daf3d83461a5c527c6ca6471a2d3bb0714224c0002a6ed62432b4a635d9cb072fba6cc4049f67aced3906e0af971d833a8a1d53e32a133a5b4c89ec915deff549042f4d94e13d7855e68b736ec90d98b3cc7629a"}) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x1000, 0x400005, 0x4, 0x9b72, 0xffffffffffffffff, 0x8000) mseal$auto(0x0, 0x7dda, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/net/rpc/nfs4.nametoid/channel\x00', 0x8f3b7a51b8162d21, 0x0) mq_open$auto(&(0x7f0000000000)='.\xf1e4\xdf\x16\x95kxE\xd9x\x15\xb0\xf6V\x93\xb4E\x06\xc5}l', 0x400056a, 0x9, 0x0) ftruncate$auto(0x3, 0x700) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x20540, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb0, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x407, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0x10001, 0x3, 0x62, 0x80000001, 0x7, 0x6d3b, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r1, 0x0, 0x100000a3d9) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/afs/addr_prefs\x00', 0x102, 0x0) writev$auto(r2, &(0x7f0000000080)={&(0x7f0000000040), 0x6}, 0x3) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) 724.923678ms ago: executing program 3 (id=1081): r0 = mq_open$auto(0x0, 0x7e, 0x9, 0x0) mq_timedsend$auto(r0, 0x0, 0x2000, 0x2, 0x0) 511.562327ms ago: executing program 3 (id=1082): io_uring_setup$auto(0x86, 0x0) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x6) socket(0x10, 0x4, 0xffffffc0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948e, 0x3, 0x15f4da0a, 0x3, 0x3, 0x8, 0x0, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x120e2, 0x0) write$auto(r1, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) fcntl$auto_F_SETOWN_EX(0xffffffffffffffff, 0xf, 0x5a5) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14f602, 0x0) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/all/addr_gen_mode\x00', 0xa0202, 0x0) sendfile$auto(r2, r2, 0x0, 0x7fffe000) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) write$auto(0x3, 0x0, 0x100082) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/system/cpu/vulnerabilities/spec_rstack_overflow\x00', 0x40, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000380)=""/11, 0xb) madvise$auto(0x0, 0xffffffffffff0005, 0x17) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) lstat$auto(0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mseal$auto(0x0, 0x7dda, 0x0) prctl$auto(0x39, 0x1, 0x0, 0x0, 0x0) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_CTRL_CMD_GETPOLICY(r4, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="010325bd7040ffdbdf250a0000"], 0x28}, 0x1, 0x0, 0x0, 0x30000881}, 0xc040810) 249.407089ms ago: executing program 1 (id=1083): mmap$auto(0x0, 0x2020009, 0x3, 0x973, 0xfffffffffffffffa, 0x7) close_range$auto(0x0, 0xfffffffffffff000, 0x3) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0) ioctl$auto(r0, 0x2, 0x9) syz_genetlink_get_family_id$auto_gtp(0x0, 0xffffffffffffffff) mmap$auto(0x6, 0x7, 0x1002, 0x80000010, r0, 0x8003) socket(0x25, 0x1, 0x0) getsockopt$auto(0x3, 0x200000000001, 0x2a, 0x0, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/conf/veth1_to_batadv/src_valid_mark\x00', 0x7030c0, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x541ec1, 0x0) r2 = prctl$auto(0x1, 0x3, 0x0, 0x0, 0x7) ioctl$auto_TIOCSTI2(r1, 0x545c, 0x0) io_uring_register$auto_IORING_REGISTER_MEM_REGION(r2, 0x22, &(0x7f0000000300)="5c9f650d671c10c802164e96fc2bfae33c6adc200fa7c36d7c738d38e99ad443cfd34a8d867ff59cf41059541553e8ecbd2c1372fed6c22727da95de91f8d3f79375a1929f47168bfb069800afa1fe59de370768a33b9cf5f5f4ce9d0782898937dbcd796277bf8a9dcf3d4a4b1c820ca4089c2af56c544f9ecbeac29ecdd9b2d484cbb9f50e8ec9d6456482b83112260e48d97f649dcc902c98f740e1642a2bb8f0a62c04c61f037f878771b2e5188d7883b38fa092c4f49dee772ee7b0db27fd5fe691", 0xfffffe01) mmap$auto(0x4, 0x9, 0xdf, 0x11, 0xffffffffffffffff, 0x8002) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x8402, 0x0) io_uring_register$auto_IORING_REGISTER_ZCRX_IFQ(0xffffffffffffffff, 0x20, &(0x7f0000000140)="a339597aee982215dec7c50d7e257fb7fb3325a9465c9e5fc702f257e9b16b787ba2441ec57fd92d6578373e9f79e274ace9bf9432c6e4411b7aca11a02760000000000000007e71bbb976a42dca621280ae2aa62df58fc6a4a995ce3a89ab1e9871e0c6112032fb2c9cd3834dac5cd4415e5f0535e65043cccbaf00"/135, 0x0) prctl$auto(0x41, 0x7ff, 0x0, 0x0, 0x2) prctl$auto(0x1044, 0xb, 0x0, 0x0, 0x6) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x801, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2711, @host}, 0x51) socket(0x2, 0xa, 0x6) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000002b80), 0xffffffffffffffff) sendmsg$auto_SMC_PNETID_GET(r3, &(0x7f0000002c40)={0x0, 0x0, &(0x7f0000002c00)={&(0x7f0000002bc0)={0x14, r4, 0x1, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20044000}, 0x8040) open(&(0x7f0000000100)='./bus\x00', 0x14d27e, 0x10) 0s ago: executing program 2 (id=1084): mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x6) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/devices/system/node/node1/cpumap\x00', 0x48000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000001c0)=""/128, 0x1a) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) ioctl$auto(r0, 0x8, r0) writev$auto(r1, &(0x7f0000000100)={0x0, 0x8}, 0x2) mmap$auto(0x0, 0x400007, 0xe1, 0x100000011, 0xffffffffffffffff, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/platform/vhci_hcd.1/usb12/bDeviceClass\x00', 0x8002, 0x0) read$auto(r2, 0x0, 0x4cb) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/virtual/net/nr1/statistics/tx_compressed\x00', 0x48a801, 0x0) write$auto(r3, &(0x7f0000000580)='7\x00\xb1\x9a\xc0\xf9\xc0e\xd2T\xbe\xb6I\x9d\xd9\x18\xf5\x91\xbfq\xfe\xf2\x9a\x02\x9fC0xb\xccW(\xc1n+\n|5\xa5\x9c=^\xf1\x11H\x1c\xf73\x16\xd2\a\xfaw\xcc\xf1\x1a7\xab\xa1\xeaF\xf5\x00\x00\x00\xd1\x83\xccG^\xbbh\xe6C\xf4dC\x8a\n\x88\xbcW@+\xafD\xd1\x8a\xc13W\xf66\x86\xe5\xee\xa7\x1d\x0f\x90\x00\xcf\xdb\xf5\xbf\xd4\xc8\x84\xb3\xeeb\xb0\xc7kN\x80\x93\xf5\x89\xe1\xc9tp\xd4jm\x7f\xf0a\xc3\r\x14\xcf\xcf\\e!\a\x82\t,\xa7\x00\xbd&\xcax\xf8P\xc1\x8f\x87\x83\x0f\x93zR~\x9b\xf0\x86\x98\x01\\p\xc5\xd1*e\x02\x04\x8bJ\xd8z\xf4J\x1d,\n\x86\x05\'y~4\x19b\x15\xd1\xdcw\x13\xa7\n\x83\x89/~\xab\xa6\xcd\xe5[\xb7\x83\xd3\xa0\xc3\xf2\x86', 0x100000000001) prctl$auto(0x1000000001c, 0x5, 0x100000000, 0x400000000009, 0x3fffffffff) setresuid$auto(0x2, 0xee01, 0x8080) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/pcm0p/oss\x00', 0xaa102, 0x0) write$auto(r4, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\x00x \xec(\x1d\x98\xe9\xc4\xe8\xfc@6=\xab\xf4\x89\x01\x93\xdc\x19\xffv\'\xa1\xd5\x14\x06S\xae\xadB}\xdf]\x99\xc9\x9f4\xbb\xc5\x81\x9d\x8ak\xdeB\xcbd\xd3\x05\xe4P\x84\xcb\xb8#\x13\nYU\'\x95R\xc8\x9d\xb7*\xe0.\xd2\xdf\x1b\x88D\x8c{k\xcec\xe1\xa2j\xec\xc9\xd2\x98\x94I\x102h\x06\x8c\xa2\xc8\x8a7\xb7t', 0x7ef) mmap$auto(0x0, 0xd2, 0x4000000000df, 0xeb1, 0x401, 0x80000000) r5 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000600)='/dev/audio\x00', 0x20000, 0x0) ioctl$auto_SOUND_MIXER_READ_STEREODEVS2(r5, 0x80044dfb, 0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82040, 0x0) socket(0xa, 0x1, 0x100) ioperm$auto(0x7, 0x5ad2, 0xc) modify_ldt$auto(0x1, 0x0, 0x10) pread64$auto(0xffffffffffffffff, 0x0, 0x0, 0x8000000000000001) socket(0x2, 0x1, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_RSS_GET(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x10) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x100, 0x1, 0x0, 0x1, 0x4) select$auto(0x12, 0x0, 0x0, &(0x7f0000000240)={[0x1ff, 0x7, 0xd, 0x40000000008fd6, 0x400000000000948f, 0x3, 0xc, 0x3, 0x3, 0x64, 0x80000001, 0x3, 0x1, 0x9, 0x2000000000001]}, 0x0) kernel console output (not intermixed with test programs): 002b:00007f02031580e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 174.161909][ T6747] RAX: ffffffffffffffda RBX: 00007f02025b5fa8 RCX: 00007f020238e929 [ 174.161927][ T6747] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f02025b5fa8 [ 174.161945][ T6747] RBP: 00007f02025b5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 174.161962][ T6747] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f02025b5fac [ 174.161979][ T6747] R13: 0000000000000000 R14: 00007ffd78be99f0 R15: 00007ffd78be9ad8 [ 174.162018][ T6747] [ 174.937392][ T6756] ALSA: mixer_oss: invalid OSS volume '' [ 176.030398][ T6770] syz.3.165 uses obsolete (PF_INET,SOCK_PACKET) [ 176.196051][ T6774] netlink: 12 bytes leftover after parsing attributes in process `syz.1.164'. [ 176.746533][ T30] audit: type=1800 audit(1752373700.819:2): pid=6782 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.168" name="features" dev="configfs" ino=10619 res=0 errno=0 [ 176.780398][ T6784] warning: `syz.3.169' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 176.858479][ T6785] netlink: zone id is out of range [ 176.872247][ T6785] netlink: zone id is out of range [ 176.946986][ T6787] FAULT_INJECTION: forcing a failure. [ 176.946986][ T6787] name failslab, interval 1, probability 0, space 0, times 0 [ 176.969551][ T6785] netlink: set zone limit has 8 unknown bytes [ 177.013568][ T6787] CPU: 1 UID: 0 PID: 6787 Comm: syz.3.170 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 177.013601][ T6787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 177.013611][ T6787] Call Trace: [ 177.013617][ T6787] [ 177.013625][ T6787] dump_stack_lvl+0x16c/0x1f0 [ 177.013656][ T6787] should_fail_ex+0x512/0x640 [ 177.013687][ T6787] ? __kvmalloc_node_noprof+0x124/0x620 [ 177.013715][ T6787] should_failslab+0xc2/0x120 [ 177.013732][ T6787] __kvmalloc_node_noprof+0x137/0x620 [ 177.013760][ T6787] ? __pfx___mutex_lock+0x10/0x10 [ 177.013785][ T6787] ? traverse.part.0.constprop.0+0x392/0x640 [ 177.013814][ T6787] ? traverse.part.0.constprop.0+0x392/0x640 [ 177.013835][ T6787] traverse.part.0.constprop.0+0x392/0x640 [ 177.013865][ T6787] seq_read_iter+0x932/0x12c0 [ 177.013888][ T6787] ? aa_file_perm+0x4d6/0xfb0 [ 177.013917][ T6787] seq_read+0x39e/0x4e0 [ 177.013939][ T6787] ? __pfx_seq_read+0x10/0x10 [ 177.013965][ T6787] ? get_pid_task+0xfc/0x250 [ 177.013997][ T6787] ? __pfx_seq_read+0x10/0x10 [ 177.014024][ T6787] proc_reg_read+0x240/0x330 [ 177.014050][ T6787] ? __pfx_proc_reg_read+0x10/0x10 [ 177.014076][ T6787] vfs_read+0x1e4/0xc60 [ 177.014104][ T6787] ? __pfx_vfs_read+0x10/0x10 [ 177.014126][ T6787] ? find_held_lock+0x2b/0x80 [ 177.014145][ T6787] ? __fget_files+0x204/0x3c0 [ 177.014171][ T6787] ? __fget_files+0x20e/0x3c0 [ 177.014193][ T6787] ? __fget_files+0x180/0x3c0 [ 177.014221][ T6787] __x64_sys_pread64+0x1eb/0x250 [ 177.014247][ T6787] ? __pfx___x64_sys_pread64+0x10/0x10 [ 177.014280][ T6787] do_syscall_64+0xcd/0x490 [ 177.014307][ T6787] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.014326][ T6787] RIP: 0033:0x7efc12d8e929 [ 177.014340][ T6787] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 177.014356][ T6787] RSP: 002b:00007efc13b85038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 177.014372][ T6787] RAX: ffffffffffffffda RBX: 00007efc12fb5fa0 RCX: 00007efc12d8e929 [ 177.014383][ T6787] RDX: 0000000000000202 RSI: 0000200000000080 RDI: 0000000000000003 [ 177.014393][ T6787] RBP: 00007efc13b85090 R08: 0000000000000000 R09: 0000000000000000 [ 177.014402][ T6787] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000001 [ 177.014412][ T6787] R13: 0000000000000000 R14: 00007efc12fb5fa0 R15: 00007ffe47d939d8 [ 177.014432][ T6787] [ 177.775290][ T6795] netlink: 28 bytes leftover after parsing attributes in process `syz.3.181'. [ 177.904991][ T6795] team0: Port device team_slave_1 removed [ 179.631814][ T6825] netlink: 12 bytes leftover after parsing attributes in process `syz.2.177'. [ 180.697058][ T6836] ovs_ÿþ: entered promiscuous mode [ 181.138735][ T6846] netlink: zone id is out of range [ 181.366999][ T6846] netlink: set zone limit has 8 unknown bytes [ 181.769566][ T5167] Bluetooth: hci2: unexpected event 0x1d length: 10 > 5 [ 183.116477][ T6879] netlink: 12 bytes leftover after parsing attributes in process `syz.0.189'. [ 184.682805][ T6899] netlink: zone id is out of range [ 184.815424][ T6899] netlink: set zone limit has 8 unknown bytes [ 188.497357][ T6989] process 'syz.0.206' launched './file0' with NULL argv: empty string added [ 188.770501][ T6992] netlink: zone id is out of range [ 189.018867][ T6992] netlink: set zone limit has 8 unknown bytes [ 190.347280][ T5167] Bluetooth: hci3: unexpected event 0x1d length: 10 > 5 [ 190.541488][ T7025] FAULT_INJECTION: forcing a failure. [ 190.541488][ T7025] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 190.692991][ T7025] CPU: 0 UID: 0 PID: 7025 Comm: syz.1.212 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 190.693036][ T7025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 190.693051][ T7025] Call Trace: [ 190.693061][ T7025] [ 190.693071][ T7025] dump_stack_lvl+0x16c/0x1f0 [ 190.693121][ T7025] should_fail_ex+0x512/0x640 [ 190.693171][ T7025] should_fail_alloc_page+0xe7/0x130 [ 190.693203][ T7025] prepare_alloc_pages+0x3c2/0x610 [ 190.693237][ T7025] ? rcu_is_watching+0x12/0xc0 [ 190.693275][ T7025] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 190.693325][ T7025] ? __lock_acquire+0x622/0x1c90 [ 190.693366][ T7025] ? css_rstat_updated+0x9d/0xd30 [ 190.693394][ T7025] ? __lock_acquire+0x622/0x1c90 [ 190.693443][ T7025] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 190.693487][ T7025] ? __lock_acquire+0x622/0x1c90 [ 190.693539][ T7025] ? __lock_acquire+0x622/0x1c90 [ 190.693583][ T7025] ? __lock_acquire+0x622/0x1c90 [ 190.693622][ T7025] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 190.693669][ T7025] ? policy_nodemask+0xea/0x4e0 [ 190.693702][ T7025] alloc_pages_mpol+0x1fb/0x550 [ 190.693733][ T7025] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 190.693784][ T7025] folio_alloc_mpol_noprof+0x36/0x2f0 [ 190.693822][ T7025] vma_alloc_folio_noprof+0xed/0x1e0 [ 190.693856][ T7025] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 190.693890][ T7025] ? find_held_lock+0x2b/0x80 [ 190.693924][ T7025] ? __handle_mm_fault+0x1092/0x5490 [ 190.693971][ T7025] __handle_mm_fault+0x2f21/0x5490 [ 190.694022][ T7025] ? __pfx___handle_mm_fault+0x10/0x10 [ 190.694063][ T7025] ? __pte_offset_map_lock+0x174/0x310 [ 190.694095][ T7025] ? find_held_lock+0x2b/0x80 [ 190.694124][ T7025] ? find_held_lock+0x2b/0x80 [ 190.694166][ T7025] ? follow_page_pte+0x3af/0x14c0 [ 190.694210][ T7025] handle_mm_fault+0x589/0xd10 [ 190.694258][ T7025] __get_user_pages+0x589/0x3b80 [ 190.694305][ T7025] ? __pfx_mt_find+0x10/0x10 [ 190.694334][ T7025] ? __pfx___get_user_pages+0x10/0x10 [ 190.694385][ T7025] populate_vma_page_range+0x278/0x3a0 [ 190.694423][ T7025] ? __pfx_populate_vma_page_range+0x10/0x10 [ 190.694459][ T7025] ? __pfx_find_vma_intersection+0x10/0x10 [ 190.694504][ T7025] __mm_populate+0x1d8/0x380 [ 190.694542][ T7025] ? __pfx___mm_populate+0x10/0x10 [ 190.694582][ T7025] ? up_write+0x209/0x520 [ 190.694631][ T7025] vm_mmap_pgoff+0x362/0x450 [ 190.694668][ T7025] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 190.694709][ T7025] ? __x64_sys_futex+0x1e0/0x4c0 [ 190.694743][ T7025] ? __x64_sys_futex+0x1e9/0x4c0 [ 190.694794][ T7025] ksys_mmap_pgoff+0x7d/0x5c0 [ 190.694826][ T7025] ? xfd_validate_state+0x61/0x180 [ 190.694874][ T7025] __x64_sys_mmap+0x125/0x190 [ 190.694922][ T7025] do_syscall_64+0xcd/0x490 [ 190.694972][ T7025] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.695002][ T7025] RIP: 0033:0x7f4d5b38e929 [ 190.695027][ T7025] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 190.695055][ T7025] RSP: 002b:00007f4d5c2ae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 190.695084][ T7025] RAX: ffffffffffffffda RBX: 00007f4d5b5b6080 RCX: 00007f4d5b38e929 [ 190.695104][ T7025] RDX: 0000000000000003 RSI: 0000000000040009 RDI: 0000000000000000 [ 190.695120][ T7025] RBP: 00007f4d5b410b39 R08: 0000000000000007 R09: 0000000000028000 [ 190.695138][ T7025] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 190.695155][ T7025] R13: 0000000000000000 R14: 00007f4d5b5b6080 R15: 00007fff242c36a8 [ 190.695195][ T7025] [ 191.819535][ T7054] FAULT_INJECTION: forcing a failure. [ 191.819535][ T7054] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 191.834671][ T7054] CPU: 1 UID: 0 PID: 7054 Comm: syz.2.215 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 191.834696][ T7054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 191.834705][ T7054] Call Trace: [ 191.834711][ T7054] [ 191.834718][ T7054] dump_stack_lvl+0x16c/0x1f0 [ 191.834748][ T7054] should_fail_ex+0x512/0x640 [ 191.834776][ T7054] _copy_from_user+0x2e/0xd0 [ 191.834803][ T7054] copy_msghdr_from_user+0x98/0x160 [ 191.834829][ T7054] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 191.834874][ T7054] ___sys_sendmsg+0xfe/0x1d0 [ 191.834900][ T7054] ? __pfx____sys_sendmsg+0x10/0x10 [ 191.834923][ T7054] ? __lock_acquire+0x622/0x1c90 [ 191.834977][ T7054] __sys_sendmsg+0x16d/0x220 [ 191.835003][ T7054] ? __pfx___sys_sendmsg+0x10/0x10 [ 191.835041][ T7054] do_syscall_64+0xcd/0x490 [ 191.835073][ T7054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.835091][ T7054] RIP: 0033:0x7fce8438e929 [ 191.835105][ T7054] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 191.835127][ T7054] RSP: 002b:00007fce851b5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 191.835144][ T7054] RAX: ffffffffffffffda RBX: 00007fce845b6080 RCX: 00007fce8438e929 [ 191.835155][ T7054] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 191.835165][ T7054] RBP: 00007fce851b5090 R08: 0000000000000000 R09: 0000000000000000 [ 191.835175][ T7054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 191.835184][ T7054] R13: 0000000000000000 R14: 00007fce845b6080 R15: 00007ffcdbfe0e38 [ 191.835204][ T7054] [ 193.614459][ T7084] netlink: zone id is out of range [ 193.645597][ T7084] netlink: zone id is out of range [ 193.858983][ T7084] netlink: set zone limit has 8 unknown bytes [ 194.429296][ T7082] netlink: zone id is out of range [ 194.549524][ T7082] netlink: set zone limit has 8 unknown bytes [ 195.008523][ T7112] vhci_hcd: invalid port number 16 [ 195.030902][ T7112] vhci_hcd: invalid port number 16 [ 195.558542][ T7123] zswap: compressor not available [ 196.416168][ T7135] zswap: compressor not available [ 196.433407][ T7143] FAULT_INJECTION: forcing a failure. [ 196.433407][ T7143] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 196.471136][ T7143] CPU: 1 UID: 0 PID: 7143 Comm: syz.2.230 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 196.471181][ T7143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 196.471195][ T7143] Call Trace: [ 196.471205][ T7143] [ 196.471215][ T7143] dump_stack_lvl+0x16c/0x1f0 [ 196.471258][ T7143] should_fail_ex+0x512/0x640 [ 196.471304][ T7143] _copy_to_iter+0x29f/0x16f0 [ 196.471351][ T7143] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 196.471399][ T7143] ? __pfx__copy_to_iter+0x10/0x10 [ 196.471442][ T7143] ? kernfs_seq_stop+0xcd/0x120 [ 196.471475][ T7143] ? kernfs_put_active+0x86/0xe0 [ 196.471523][ T7143] seq_read_iter+0xcf8/0x12c0 [ 196.471577][ T7143] kernfs_fop_read_iter+0x40f/0x5a0 [ 196.471606][ T7143] ? rw_verify_area+0xcf/0x680 [ 196.471642][ T7143] vfs_read+0x8bf/0xc60 [ 196.471685][ T7143] ? __pfx___mutex_lock+0x10/0x10 [ 196.471736][ T7143] ? __pfx_vfs_read+0x10/0x10 [ 196.471810][ T7143] ksys_read+0x12a/0x250 [ 196.471848][ T7143] ? __pfx_ksys_read+0x10/0x10 [ 196.471905][ T7143] do_syscall_64+0xcd/0x490 [ 196.471949][ T7143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.471978][ T7143] RIP: 0033:0x7fce8438e929 [ 196.472002][ T7143] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 196.472027][ T7143] RSP: 002b:00007fce851b5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 196.472054][ T7143] RAX: ffffffffffffffda RBX: 00007fce845b6080 RCX: 00007fce8438e929 [ 196.472072][ T7143] RDX: 00000000000000ce RSI: 00002000000004c0 RDI: 0000000000000004 [ 196.472089][ T7143] RBP: 00007fce851b5090 R08: 0000000000000000 R09: 0000000000000000 [ 196.472105][ T7143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 196.472136][ T7143] R13: 0000000000000000 R14: 00007fce845b6080 R15: 00007ffcdbfe0e38 [ 196.472182][ T7143] [ 196.662857][ C1] vkms_vblank_simulate: vblank timer overrun [ 196.935036][ T7157] netlink: zone id is out of range [ 197.057183][ T7157] netlink: zone id is out of range [ 197.397984][ T7157] netlink: set zone limit has 8 unknown bytes [ 199.187656][ T7180] netlink: zone id is out of range [ 199.306932][ T7180] netlink: set zone limit has 8 unknown bytes [ 199.629762][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.639487][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 202.623755][ T7223] zswap: compressor not available [ 203.755061][ T7236] netlink: zone id is out of range [ 203.876065][ T7236] netlink: set zone limit has 8 unknown bytes [ 207.210931][ T7275] netlink: zone id is out of range [ 207.294998][ T7275] netlink: zone id is out of range [ 207.382373][ T7275] netlink: set zone limit has 8 unknown bytes [ 207.678457][ T7293] netlink: zone id is out of range [ 207.747198][ T7293] netlink: zone id is out of range [ 207.855840][ T7293] netlink: set zone limit has 8 unknown bytes [ 208.615259][ T7308] zswap: compressor not available [ 210.284927][ T7352] device-mapper: ioctl: Invalid data size in the ioctl structure: 1 [ 211.068124][ T7359] netlink: zone id is out of range [ 211.092574][ T7359] netlink: zone id is out of range [ 211.094503][ T7354] FAULT_INJECTION: forcing a failure. [ 211.094503][ T7354] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 211.142778][ T7354] CPU: 1 UID: 0 PID: 7354 Comm: syz.0.271 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 211.142821][ T7354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 211.142838][ T7354] Call Trace: [ 211.142847][ T7354] [ 211.142859][ T7354] dump_stack_lvl+0x16c/0x1f0 [ 211.142905][ T7354] should_fail_ex+0x512/0x640 [ 211.142952][ T7354] should_fail_alloc_page+0xe7/0x130 [ 211.142984][ T7354] prepare_alloc_pages+0x3c2/0x610 [ 211.143019][ T7354] ? rcu_is_watching+0x12/0xc0 [ 211.143055][ T7354] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 211.143101][ T7354] ? kasan_save_stack+0x42/0x60 [ 211.143140][ T7354] ? kasan_save_stack+0x33/0x60 [ 211.143179][ T7354] ? kasan_save_track+0x14/0x30 [ 211.143217][ T7354] ? __kasan_slab_alloc+0x89/0x90 [ 211.143258][ T7354] ? kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 211.143299][ T7354] ? ptlock_alloc+0x1f/0x70 [ 211.143332][ T7354] ? pte_alloc_one+0x82/0x3a0 [ 211.143356][ T7354] ? css_rstat_updated+0x9d/0xd30 [ 211.143384][ T7354] ? __handle_mm_fault+0x4358/0x5490 [ 211.143421][ T7354] ? populate_vma_page_range+0x278/0x3a0 [ 211.143454][ T7354] ? __mm_populate+0x1d8/0x380 [ 211.143493][ T7354] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 211.143534][ T7354] ? __lock_acquire+0x622/0x1c90 [ 211.143588][ T7354] ? __lock_acquire+0x622/0x1c90 [ 211.143639][ T7354] ? __lock_acquire+0x622/0x1c90 [ 211.143676][ T7354] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 211.143721][ T7354] ? policy_nodemask+0xea/0x4e0 [ 211.143753][ T7354] alloc_pages_mpol+0x1fb/0x550 [ 211.143783][ T7354] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 211.143823][ T7354] folio_alloc_mpol_noprof+0x36/0x2f0 [ 211.143858][ T7354] vma_alloc_folio_noprof+0xed/0x1e0 [ 211.143890][ T7354] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 211.143920][ T7354] ? find_held_lock+0x2b/0x80 [ 211.143950][ T7354] ? __handle_mm_fault+0x1092/0x5490 [ 211.143994][ T7354] __handle_mm_fault+0x2f21/0x5490 [ 211.144043][ T7354] ? __pfx___handle_mm_fault+0x10/0x10 [ 211.144083][ T7354] ? __pte_offset_map_lock+0x174/0x310 [ 211.144112][ T7354] ? find_held_lock+0x2b/0x80 [ 211.144139][ T7354] ? find_held_lock+0x2b/0x80 [ 211.144173][ T7354] ? follow_page_pte+0x3af/0x14c0 [ 211.144212][ T7354] handle_mm_fault+0x589/0xd10 [ 211.144251][ T7354] __get_user_pages+0x589/0x3b80 [ 211.144288][ T7354] ? __pfx_mt_find+0x10/0x10 [ 211.144310][ T7354] ? __pfx___get_user_pages+0x10/0x10 [ 211.144350][ T7354] populate_vma_page_range+0x278/0x3a0 [ 211.144382][ T7354] ? __pfx_populate_vma_page_range+0x10/0x10 [ 211.144409][ T7354] ? __pfx_find_vma_intersection+0x10/0x10 [ 211.144446][ T7354] __mm_populate+0x1d8/0x380 [ 211.144477][ T7354] ? __pfx___mm_populate+0x10/0x10 [ 211.144511][ T7354] ? up_write+0x1b2/0x520 [ 211.144559][ T7354] vm_mmap_pgoff+0x362/0x450 [ 211.144592][ T7354] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 211.144639][ T7354] ? __x64_sys_futex+0x1e0/0x4c0 [ 211.144668][ T7354] ? __x64_sys_futex+0x1e9/0x4c0 [ 211.144705][ T7354] ksys_mmap_pgoff+0x7d/0x5c0 [ 211.144731][ T7354] ? xfd_validate_state+0x61/0x180 [ 211.144763][ T7354] ? __pfx_do_writev+0x10/0x10 [ 211.144800][ T7354] __x64_sys_mmap+0x125/0x190 [ 211.144841][ T7354] do_syscall_64+0xcd/0x490 [ 211.144879][ T7354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.144903][ T7354] RIP: 0033:0x7f020238e929 [ 211.144923][ T7354] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 211.144946][ T7354] RSP: 002b:00007f0203158038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 211.144968][ T7354] RAX: ffffffffffffffda RBX: 00007f02025b5fa0 RCX: 00007f020238e929 [ 211.144983][ T7354] RDX: 00000000000000df RSI: 0000000000400009 RDI: 0000000000000000 [ 211.144995][ T7354] RBP: 00007f0202410b39 R08: 8000000000000003 R09: 0000000000008000 [ 211.145010][ T7354] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 211.145023][ T7354] R13: 0000000000000000 R14: 00007f02025b5fa0 R15: 00007ffd78be9ad8 [ 211.145056][ T7354] [ 211.580183][ T7359] netlink: set zone limit has 8 unknown bytes [ 212.941534][ T7390] ubi0: attaching mtd0 [ 212.961111][ T7390] ubi0: scanning is finished [ 212.975846][ T7390] ubi0: empty MTD device detected [ 213.153006][ T7369] zswap: compressor not available [ 213.389549][ T7390] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 213.398356][ T7390] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 213.425445][ T7390] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 213.432542][ T7390] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 213.440239][ T7390] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 213.447252][ T7390] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 213.455505][ T7390] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3047073319 [ 213.542835][ T7390] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 213.610837][ T7394] ubi0: background thread "ubi_bgt0d" started, PID 7394 [ 214.734227][ T7402] netlink: zone id is out of range [ 214.793537][ T7402] netlink: zone id is out of range [ 214.860867][ T7402] netlink: set zone limit has 8 unknown bytes [ 216.448217][ T7426] FAULT_INJECTION: forcing a failure. [ 216.448217][ T7426] name failslab, interval 1, probability 0, space 0, times 0 [ 216.524589][ T7426] CPU: 1 UID: 0 PID: 7426 Comm: syz.0.286 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 216.524631][ T7426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 216.524648][ T7426] Call Trace: [ 216.524657][ T7426] [ 216.524668][ T7426] dump_stack_lvl+0x16c/0x1f0 [ 216.524715][ T7426] should_fail_ex+0x512/0x640 [ 216.524755][ T7426] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 216.524798][ T7426] should_failslab+0xc2/0x120 [ 216.524826][ T7426] __kmalloc_cache_noprof+0x6a/0x3e0 [ 216.524862][ T7426] ? snd_pcm_hw_param_first+0x30d/0x6f0 [ 216.524889][ T7426] ? snd_pcm_hw_param_near.constprop.0+0x72f/0x8e0 [ 216.524918][ T7426] ? snd_pcm_hw_param_near.constprop.0+0xbc/0x8e0 [ 216.524956][ T7426] snd_pcm_hw_param_near.constprop.0+0xbc/0x8e0 [ 216.524994][ T7426] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 216.525026][ T7426] ? __asan_memset+0x23/0x50 [ 216.525060][ T7426] ? calc_src_frames.isra.0+0x187/0x1d0 [ 216.525090][ T7426] ? calc_dst_frames.constprop.0.isra.0+0x103/0x130 [ 216.525131][ T7426] snd_pcm_oss_change_params_locked+0x13f9/0x3a30 [ 216.525183][ T7426] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 216.525248][ T7426] snd_pcm_oss_get_active_substream+0x168/0x1d0 [ 216.525287][ T7426] snd_pcm_oss_ioctl+0x21e9/0x37a0 [ 216.525330][ T7426] ? hook_file_ioctl_common+0x145/0x410 [ 216.525362][ T7426] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 216.525398][ T7426] ? __fget_files+0x20e/0x3c0 [ 216.525443][ T7426] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 216.525477][ T7426] __x64_sys_ioctl+0x18b/0x210 [ 216.525515][ T7426] do_syscall_64+0xcd/0x490 [ 216.525559][ T7426] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.525588][ T7426] RIP: 0033:0x7f020238e929 [ 216.525611][ T7426] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 216.525638][ T7426] RSP: 002b:00007f0203137038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 216.525666][ T7426] RAX: ffffffffffffffda RBX: 00007f02025b6080 RCX: 00007f020238e929 [ 216.525685][ T7426] RDX: 0000000000000000 RSI: 00000000c0045002 RDI: 0000000000000003 [ 216.525701][ T7426] RBP: 00007f0203137090 R08: 0000000000000000 R09: 0000000000000000 [ 216.525718][ T7426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 216.525734][ T7426] R13: 0000000000000001 R14: 00007f02025b6080 R15: 00007ffd78be9ad8 [ 216.525773][ T7426] [ 216.773116][ C1] vkms_vblank_simulate: vblank timer overrun [ 217.787243][ T7448] netlink: 28 bytes leftover after parsing attributes in process `syz.3.292'. [ 217.813404][ T7448] ipvlan1: entered allmulticast mode [ 217.828980][ T7448] veth0_vlan: entered allmulticast mode [ 217.934413][ T7448] netlink: 28 bytes leftover after parsing attributes in process `syz.3.292'. [ 218.372280][ T7449] zswap: compressor not available [ 219.070127][ T7472] FAULT_INJECTION: forcing a failure. [ 219.070127][ T7472] name failslab, interval 1, probability 0, space 0, times 0 [ 219.070163][ T7472] CPU: 0 UID: 0 PID: 7472 Comm: syz.2.296 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 219.070184][ T7472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 219.070196][ T7472] Call Trace: [ 219.070201][ T7472] [ 219.070208][ T7472] dump_stack_lvl+0x16c/0x1f0 [ 219.070239][ T7472] should_fail_ex+0x512/0x640 [ 219.070263][ T7472] ? fs_reclaim_acquire+0xae/0x150 [ 219.070286][ T7472] ? tomoyo_encode2+0x100/0x3e0 [ 219.070308][ T7472] should_failslab+0xc2/0x120 [ 219.070324][ T7472] __kmalloc_noprof+0xd2/0x510 [ 219.070355][ T7472] tomoyo_encode2+0x100/0x3e0 [ 219.070381][ T7472] tomoyo_encode+0x29/0x50 [ 219.070403][ T7472] tomoyo_mount_acl+0x144/0x850 [ 219.070423][ T7472] ? kernel_text_address+0x8d/0x100 [ 219.070440][ T7472] ? __kernel_text_address+0xd/0x40 [ 219.070463][ T7472] ? unwind_get_return_address+0x59/0xa0 [ 219.070492][ T7472] ? arch_stack_walk+0xa6/0x100 [ 219.070510][ T7472] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 219.070537][ T7472] ? stack_trace_save+0x8e/0xc0 [ 219.070573][ T7472] ? tomoyo_domain+0xbb/0x150 [ 219.070599][ T7472] ? tomoyo_profile+0x47/0x60 [ 219.070627][ T7472] tomoyo_mount_permission+0x16d/0x420 [ 219.070651][ T7472] ? tomoyo_mount_permission+0x14f/0x420 [ 219.070674][ T7472] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 219.070709][ T7472] security_sb_mount+0x9b/0x260 [ 219.070729][ T7472] path_mount+0x128/0x2020 [ 219.070757][ T7472] ? kmem_cache_free+0x2d1/0x4d0 [ 219.070786][ T7472] ? __pfx_path_mount+0x10/0x10 [ 219.070816][ T7472] ? putname+0x154/0x1a0 [ 219.070835][ T7472] __x64_sys_mount+0x28d/0x310 [ 219.070862][ T7472] ? __pfx___x64_sys_mount+0x10/0x10 [ 219.070896][ T7472] do_syscall_64+0xcd/0x490 [ 219.070924][ T7472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.070941][ T7472] RIP: 0033:0x7fce8438e929 [ 219.070955][ T7472] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 219.070972][ T7472] RSP: 002b:00007fce851d6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 219.070988][ T7472] RAX: ffffffffffffffda RBX: 00007fce845b5fa0 RCX: 00007fce8438e929 [ 219.070999][ T7472] RDX: 00002000000001c0 RSI: 0000200000000180 RDI: 0000000000000000 [ 219.071009][ T7472] RBP: 00007fce851d6090 R08: 0000000000000000 R09: 0000000000000000 [ 219.071019][ T7472] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000001 [ 219.071028][ T7472] R13: 0000000000000000 R14: 00007fce845b5fa0 R15: 00007ffcdbfe0e38 [ 219.071050][ T7472] [ 220.683807][ T7492] netlink: 4 bytes leftover after parsing attributes in process `syz.2.301'. [ 220.698683][ T7492] netlink: 13 bytes leftover after parsing attributes in process `syz.2.301'. [ 220.710326][ T7492] kAFS: No cell specified [ 222.188846][ T7494] Bluetooth: hci1: command 0x0406 tx timeout [ 222.188964][ T7518] Bluetooth: hci0: command 0x0406 tx timeout [ 222.188997][ T7518] Bluetooth: hci2: command 0x0406 tx timeout [ 222.189023][ T7518] Bluetooth: hci3: command 0x0406 tx timeout [ 223.393905][ T7550] device-mapper: ioctl: Invalid ioctl structure: name , dev b00010007 [ 224.083041][ T7554] capability: warning: `syz.0.314' uses 32-bit capabilities (legacy support in use) [ 224.789943][ T7563] netlink: zone id is out of range [ 224.819529][ T7563] netlink: zone id is out of range [ 224.883809][ T7563] netlink: set zone limit has 8 unknown bytes [ 225.114085][ T7572] netlink: 28 bytes leftover after parsing attributes in process `syz.1.318'. [ 225.154235][ T7572] ipvlan1: entered allmulticast mode [ 225.172766][ T7572] veth0_vlan: entered allmulticast mode [ 225.325803][ T7579] netlink: 28 bytes leftover after parsing attributes in process `syz.1.318'. [ 226.587053][ T7591] FAULT_INJECTION: forcing a failure. [ 226.587053][ T7591] name failslab, interval 1, probability 0, space 0, times 0 [ 226.618126][ T7591] CPU: 0 UID: 0 PID: 7591 Comm: syz.1.322 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 226.618172][ T7591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 226.618186][ T7591] Call Trace: [ 226.618194][ T7591] [ 226.618204][ T7591] dump_stack_lvl+0x16c/0x1f0 [ 226.618249][ T7591] should_fail_ex+0x512/0x640 [ 226.618285][ T7591] ? __kmalloc_noprof+0xbf/0x510 [ 226.618330][ T7591] ? fib_default_rule_add+0x4f/0x420 [ 226.618370][ T7591] should_failslab+0xc2/0x120 [ 226.618396][ T7591] __kmalloc_noprof+0xd2/0x510 [ 226.618443][ T7591] fib_default_rule_add+0x4f/0x420 [ 226.618485][ T7591] fib4_rules_init+0xa6/0x1c0 [ 226.618524][ T7591] fib_net_init+0x1dc/0x3f0 [ 226.618552][ T7591] ? __pfx___register_sysctl_table+0x10/0x10 [ 226.618595][ T7591] ? __pfx_fib_net_init+0x10/0x10 [ 226.618622][ T7591] ? lockdep_init_map_type+0x5c/0x280 [ 226.618659][ T7591] ? do_init_timer+0xc9/0x110 [ 226.618692][ T7591] ? devinet_init_net+0x5c2/0x910 [ 226.618729][ T7591] ? __pfx_fib_net_init+0x10/0x10 [ 226.618756][ T7591] ops_init+0x1df/0x5f0 [ 226.618804][ T7591] setup_net+0x1ff/0x510 [ 226.618844][ T7591] ? lockdep_init_map_type+0x5c/0x280 [ 226.618884][ T7591] ? __pfx_setup_net+0x10/0x10 [ 226.618930][ T7591] ? debug_mutex_init+0x37/0x70 [ 226.618965][ T7591] copy_net_ns+0x2a6/0x5f0 [ 226.618998][ T7591] create_new_namespaces+0x3ea/0xa90 [ 226.619040][ T7591] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 226.619076][ T7591] ksys_unshare+0x45b/0xa40 [ 226.619116][ T7591] ? __pfx_ksys_unshare+0x10/0x10 [ 226.619163][ T7591] ? xfd_validate_state+0x61/0x180 [ 226.619215][ T7591] __x64_sys_unshare+0x31/0x40 [ 226.619253][ T7591] do_syscall_64+0xcd/0x490 [ 226.619297][ T7591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.619325][ T7591] RIP: 0033:0x7f4d5b38e929 [ 226.619348][ T7591] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 226.619374][ T7591] RSP: 002b:00007f4d5c2ae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 226.619399][ T7591] RAX: ffffffffffffffda RBX: 00007f4d5b5b6080 RCX: 00007f4d5b38e929 [ 226.619417][ T7591] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 226.619433][ T7591] RBP: 00007f4d5b410b39 R08: 0000000000000000 R09: 0000000000000000 [ 226.619449][ T7591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 226.619465][ T7591] R13: 0000000000000000 R14: 00007f4d5b5b6080 R15: 00007fff242c36a8 [ 226.619503][ T7591] [ 227.985440][ T7604] FAULT_INJECTION: forcing a failure. [ 227.985440][ T7604] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 228.082947][ T7604] CPU: 0 UID: 0 PID: 7604 Comm: syz.2.324 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 228.082988][ T7604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 228.083004][ T7604] Call Trace: [ 228.083013][ T7604] [ 228.083024][ T7604] dump_stack_lvl+0x16c/0x1f0 [ 228.083071][ T7604] should_fail_ex+0x512/0x640 [ 228.083110][ T7604] _copy_to_user+0x32/0xd0 [ 228.083147][ T7604] simple_read_from_buffer+0xcb/0x170 [ 228.083179][ T7604] proc_fail_nth_read+0x197/0x270 [ 228.083206][ T7604] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 228.083234][ T7604] ? rw_verify_area+0xcf/0x680 [ 228.083261][ T7604] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 228.083287][ T7604] vfs_read+0x1e4/0xc60 [ 228.083321][ T7604] ? __pfx___mutex_lock+0x10/0x10 [ 228.083353][ T7604] ? __pfx_vfs_read+0x10/0x10 [ 228.083403][ T7604] ? __fget_files+0x20e/0x3c0 [ 228.083445][ T7604] ksys_read+0x12a/0x250 [ 228.083474][ T7604] ? __pfx_ksys_read+0x10/0x10 [ 228.083523][ T7604] do_syscall_64+0xcd/0x490 [ 228.083558][ T7604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.083580][ T7604] RIP: 0033:0x7fce8438d33c [ 228.083599][ T7604] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 228.083620][ T7604] RSP: 002b:00007fce851d6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 228.083642][ T7604] RAX: ffffffffffffffda RBX: 00007fce845b5fa0 RCX: 00007fce8438d33c [ 228.083657][ T7604] RDX: 000000000000000f RSI: 00007fce851d60a0 RDI: 0000000000000006 [ 228.083670][ T7604] RBP: 00007fce851d6090 R08: 0000000000000000 R09: 0000000000000000 [ 228.083683][ T7604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 228.083695][ T7604] R13: 0000000000000000 R14: 00007fce845b5fa0 R15: 00007ffcdbfe0e38 [ 228.083725][ T7604] [ 232.034018][ T7666] device-mapper: ioctl: Invalid ioctl structure: name , dev b00010007 [ 232.274967][ T7668] vivid-009: ================= START STATUS ================= [ 232.283000][ T7668] vivid-009: Enable Output Cropping: true grabbed [ 232.289746][ T7668] vivid-009: Enable Output Composing: true grabbed [ 232.300141][ T7668] vivid-009: Enable Output Scaler: true grabbed [ 232.339377][ T7668] vivid-009: Tx RGB Quantization Range: Automatic grabbed [ 232.393156][ T7668] vivid-009: Transmit Mode: HDMI grabbed [ 232.398920][ T7668] vivid-009: Hotplug Present: 0x00000000 [ 232.441990][ T7673] block nbd7: not configured, cannot reconfigure [ 232.493126][ T7668] vivid-009: RxSense Present: 0x00000000 [ 232.506587][ T7668] vivid-009: EDID Present: 0x00000000 [ 232.532874][ T7668] vivid-009: ================== END STATUS ================== [ 233.531531][ T7686] ALSA: mixer_oss: invalid OSS volume '' [ 233.998800][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 234.005348][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 234.021422][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 234.027893][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 234.051260][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 234.058993][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 234.096104][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 234.113425][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 234.408352][ T7699] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xffeffd12 [ 235.012991][ T7720] netlink: 504 bytes leftover after parsing attributes in process `syz.0.353'. [ 235.025498][ T7720] netlink: 350 bytes leftover after parsing attributes in process `syz.0.353'. [ 235.625078][ T7737] FAULT_INJECTION: forcing a failure. [ 235.625078][ T7737] name failslab, interval 1, probability 0, space 0, times 0 [ 235.647128][ T7737] CPU: 0 UID: 0 PID: 7737 Comm: syz.1.357 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 235.647169][ T7737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 235.647185][ T7737] Call Trace: [ 235.647194][ T7737] [ 235.647204][ T7737] dump_stack_lvl+0x16c/0x1f0 [ 235.647248][ T7737] should_fail_ex+0x512/0x640 [ 235.647286][ T7737] ? __kmalloc_node_noprof+0xc5/0x500 [ 235.647329][ T7737] should_failslab+0xc2/0x120 [ 235.647357][ T7737] __kmalloc_node_noprof+0xd8/0x500 [ 235.647398][ T7737] ? alloc_slab_obj_exts+0x41/0xa0 [ 235.647440][ T7737] alloc_slab_obj_exts+0x41/0xa0 [ 235.647475][ T7737] __memcg_slab_post_alloc_hook+0x255/0x960 [ 235.647514][ T7737] ? kasan_save_track+0x14/0x30 [ 235.647558][ T7737] kmem_cache_alloc_noprof+0x307/0x3b0 [ 235.647597][ T7737] ? find_held_lock+0x2b/0x80 [ 235.647624][ T7737] ? alloc_vfsmnt+0x23/0x730 [ 235.647656][ T7737] alloc_vfsmnt+0x23/0x730 [ 235.647685][ T7737] clone_mnt+0x6d/0xff0 [ 235.647713][ T7737] ? copy_tree+0x50d/0xa20 [ 235.647749][ T7737] ? copy_mnt_ns+0x1ac/0xac0 [ 235.647795][ T7737] copy_tree+0x38d/0xa20 [ 235.647848][ T7737] copy_mnt_ns+0x1ac/0xac0 [ 235.647885][ T7737] ? trace_kmem_cache_alloc+0x28/0xc0 [ 235.647915][ T7737] ? trace_cap_capable+0x18d/0x200 [ 235.647941][ T7737] ? create_new_namespaces+0x30/0xa90 [ 235.647977][ T7737] create_new_namespaces+0xd3/0xa90 [ 235.648017][ T7737] ? bpf_lsm_capable+0x9/0x10 [ 235.648049][ T7737] ? security_capable+0x7e/0x260 [ 235.648080][ T7737] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 235.648116][ T7737] ksys_unshare+0x45b/0xa40 [ 235.648152][ T7737] ? __pfx_ksys_unshare+0x10/0x10 [ 235.648185][ T7737] ? ksys_write+0x1ac/0x250 [ 235.648233][ T7737] __x64_sys_unshare+0x31/0x40 [ 235.648268][ T7737] do_syscall_64+0xcd/0x490 [ 235.648311][ T7737] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.648337][ T7737] RIP: 0033:0x7f4d5b38e929 [ 235.648358][ T7737] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 235.648384][ T7737] RSP: 002b:00007f4d5c2cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 235.648409][ T7737] RAX: ffffffffffffffda RBX: 00007f4d5b5b5fa0 RCX: 00007f4d5b38e929 [ 235.648427][ T7737] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000020000 [ 235.648442][ T7737] RBP: 00007f4d5c2cf090 R08: 0000000000000000 R09: 0000000000000000 [ 235.648459][ T7737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 235.648475][ T7737] R13: 0000000000000000 R14: 00007f4d5b5b5fa0 R15: 00007fff242c36a8 [ 235.648513][ T7737] [ 236.279532][ T7744] netlink: zone id is out of range [ 236.361467][ T7744] netlink: zone id is out of range [ 236.541731][ T7744] netlink: set zone limit has 8 unknown bytes [ 236.763431][ T7747] cougar: G6 mapped to space [ 237.614738][ T7761] FAULT_INJECTION: forcing a failure. [ 237.614738][ T7761] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 237.678387][ T7761] CPU: 1 UID: 0 PID: 7761 Comm: syz.2.361 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 237.678429][ T7761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 237.678446][ T7761] Call Trace: [ 237.678455][ T7761] [ 237.678466][ T7761] dump_stack_lvl+0x16c/0x1f0 [ 237.678510][ T7761] should_fail_ex+0x512/0x640 [ 237.678557][ T7761] _copy_to_user+0x32/0xd0 [ 237.678605][ T7761] simple_read_from_buffer+0xcb/0x170 [ 237.678644][ T7761] proc_fail_nth_read+0x197/0x270 [ 237.678679][ T7761] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 237.678716][ T7761] ? rw_verify_area+0xcf/0x680 [ 237.678749][ T7761] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 237.678781][ T7761] vfs_read+0x1e4/0xc60 [ 237.678824][ T7761] ? __pfx___mutex_lock+0x10/0x10 [ 237.678864][ T7761] ? __pfx_vfs_read+0x10/0x10 [ 237.678910][ T7761] ? __fget_files+0x20e/0x3c0 [ 237.678961][ T7761] ksys_read+0x12a/0x250 [ 237.678997][ T7761] ? __pfx_ksys_read+0x10/0x10 [ 237.679056][ T7761] do_syscall_64+0xcd/0x490 [ 237.679101][ T7761] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.679129][ T7761] RIP: 0033:0x7fce8438d33c [ 237.679152][ T7761] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 237.679178][ T7761] RSP: 002b:00007fce851d6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 237.679204][ T7761] RAX: ffffffffffffffda RBX: 00007fce845b5fa0 RCX: 00007fce8438d33c [ 237.679222][ T7761] RDX: 000000000000000f RSI: 00007fce851d60a0 RDI: 0000000000000004 [ 237.679238][ T7761] RBP: 00007fce851d6090 R08: 0000000000000000 R09: 0000000000000000 [ 237.679254][ T7761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 237.679270][ T7761] R13: 0000000000000000 R14: 00007fce845b5fa0 R15: 00007ffcdbfe0e38 [ 237.679308][ T7761] [ 238.360626][ T7763] zswap: compressor not available [ 238.898048][ T7770] ubi: mtd0 is already attached to ubi0 [ 239.095112][ T7768] ALSA: mixer_oss: invalid OSS volume '' [ 239.230781][ T7779] FAULT_INJECTION: forcing a failure. [ 239.230781][ T7779] name failslab, interval 1, probability 0, space 0, times 0 [ 239.272533][ T7779] CPU: 1 UID: 0 PID: 7779 Comm: syz.1.366 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 239.272583][ T7779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 239.272599][ T7779] Call Trace: [ 239.272608][ T7779] [ 239.272620][ T7779] dump_stack_lvl+0x16c/0x1f0 [ 239.272666][ T7779] should_fail_ex+0x512/0x640 [ 239.272705][ T7779] ? fs_reclaim_acquire+0xae/0x150 [ 239.272745][ T7779] ? tomoyo_encode2+0x100/0x3e0 [ 239.272782][ T7779] should_failslab+0xc2/0x120 [ 239.272811][ T7779] __kmalloc_noprof+0xd2/0x510 [ 239.272853][ T7779] ? d_absolute_path+0x136/0x1a0 [ 239.272891][ T7779] tomoyo_encode2+0x100/0x3e0 [ 239.272938][ T7779] tomoyo_encode+0x29/0x50 [ 239.272976][ T7779] tomoyo_realpath_from_path+0x18f/0x6e0 [ 239.273030][ T7779] tomoyo_check_open_permission+0x2ab/0x3c0 [ 239.273070][ T7779] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 239.273150][ T7779] ? do_raw_spin_lock+0x12c/0x2b0 [ 239.273211][ T7779] tomoyo_file_open+0x6b/0x90 [ 239.273267][ T7779] security_file_open+0x84/0x1e0 [ 239.273309][ T7779] do_dentry_open+0x596/0x1c10 [ 239.273368][ T7779] vfs_open+0x82/0x3f0 [ 239.273407][ T7779] path_openat+0x1de4/0x2cb0 [ 239.273466][ T7779] ? __pfx_path_openat+0x10/0x10 [ 239.273514][ T7779] ? __lock_acquire+0xb8a/0x1c90 [ 239.273561][ T7779] do_filp_open+0x20b/0x470 [ 239.273605][ T7779] ? __pfx_do_filp_open+0x10/0x10 [ 239.273678][ T7779] ? alloc_fd+0x471/0x7d0 [ 239.273732][ T7779] do_sys_openat2+0x11b/0x1d0 [ 239.273765][ T7779] ? __pfx_do_sys_openat2+0x10/0x10 [ 239.273817][ T7779] __x64_sys_openat+0x174/0x210 [ 239.273853][ T7779] ? __pfx___x64_sys_openat+0x10/0x10 [ 239.273906][ T7779] do_syscall_64+0xcd/0x490 [ 239.273955][ T7779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.273984][ T7779] RIP: 0033:0x7f4d5b38e929 [ 239.274008][ T7779] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 239.274037][ T7779] RSP: 002b:00007f4d5c2cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 239.274066][ T7779] RAX: ffffffffffffffda RBX: 00007f4d5b5b5fa0 RCX: 00007f4d5b38e929 [ 239.274085][ T7779] RDX: 0000000000040100 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 239.274104][ T7779] RBP: 00007f4d5b410b39 R08: 0000000000000000 R09: 0000000000000000 [ 239.274121][ T7779] R10: 0000000000000700 R11: 0000000000000246 R12: 0000000000000000 [ 239.274139][ T7779] R13: 0000000000000000 R14: 00007f4d5b5b5fa0 R15: 00007fff242c36a8 [ 239.274180][ T7779] [ 239.706966][ T7779] ERROR: Out of memory at tomoyo_realpath_from_path. [ 240.717214][ T7796] FAULT_INJECTION: forcing a failure. [ 240.717214][ T7796] name failslab, interval 1, probability 0, space 0, times 0 [ 240.736937][ T7796] CPU: 0 UID: 0 PID: 7796 Comm: syz.1.371 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 240.736985][ T7796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 240.736999][ T7796] Call Trace: [ 240.737009][ T7796] [ 240.737019][ T7796] dump_stack_lvl+0x16c/0x1f0 [ 240.737062][ T7796] should_fail_ex+0x512/0x640 [ 240.737100][ T7796] ? __kmalloc_noprof+0xbf/0x510 [ 240.737145][ T7796] ? copy_splice_read+0x1a8/0xba0 [ 240.737175][ T7796] should_failslab+0xc2/0x120 [ 240.737200][ T7796] __kmalloc_noprof+0xd2/0x510 [ 240.737246][ T7796] copy_splice_read+0x1a8/0xba0 [ 240.737286][ T7796] ? __pfx_copy_splice_read+0x10/0x10 [ 240.737322][ T7796] ? look_up_lock_class+0x59/0x150 [ 240.737365][ T7796] ? lockdep_init_map_type+0x5c/0x280 [ 240.737405][ T7796] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 240.737444][ T7796] ? __pfx_copy_splice_read+0x10/0x10 [ 240.737476][ T7796] do_splice_read+0x285/0x370 [ 240.737516][ T7796] splice_direct_to_actor+0x2a1/0xa30 [ 240.737554][ T7796] ? __pfx_direct_splice_actor+0x10/0x10 [ 240.737595][ T7796] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 240.737627][ T7796] ? get_pid_task+0xfc/0x250 [ 240.737673][ T7796] do_splice_direct+0x174/0x240 [ 240.737709][ T7796] ? __pfx_do_splice_direct+0x10/0x10 [ 240.737743][ T7796] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 240.737778][ T7796] ? bpf_lsm_file_permission+0x9/0x10 [ 240.737808][ T7796] ? security_file_permission+0x71/0x210 [ 240.737846][ T7796] ? rw_verify_area+0xcf/0x680 [ 240.737885][ T7796] do_sendfile+0xb06/0xe50 [ 240.737963][ T7796] ? __pfx_do_sendfile+0x10/0x10 [ 240.738005][ T7796] ? __fget_files+0x20e/0x3c0 [ 240.738054][ T7796] __x64_sys_sendfile64+0x1d8/0x220 [ 240.738082][ T7796] ? ksys_write+0x1ac/0x250 [ 240.738122][ T7796] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 240.738149][ T7796] ? xfd_validate_state+0x61/0x180 [ 240.738200][ T7796] do_syscall_64+0xcd/0x490 [ 240.738245][ T7796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.738274][ T7796] RIP: 0033:0x7f4d5b38e929 [ 240.738299][ T7796] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 240.738326][ T7796] RSP: 002b:00007f4d5c2ae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 240.738354][ T7796] RAX: ffffffffffffffda RBX: 00007f4d5b5b6080 RCX: 00007f4d5b38e929 [ 240.738386][ T7796] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000002 [ 240.738402][ T7796] RBP: 00007f4d5c2ae090 R08: 0000000000000000 R09: 0000000000000000 [ 240.738418][ T7796] R10: 0010000800000003 R11: 0000000000000246 R12: 0000000000000001 [ 240.738435][ T7796] R13: 0000000000000000 R14: 00007f4d5b5b6080 R15: 00007fff242c36a8 [ 240.738475][ T7796] [ 241.012282][ C0] vkms_vblank_simulate: vblank timer overrun [ 244.322736][ T7835] cougar: G6 mapped to space [ 244.550049][ T7843] futex_wake_op: syz.3.382 tries to shift op by -9; fix this program [ 248.291739][ T7902] FAULT_INJECTION: forcing a failure. [ 248.291739][ T7902] name failslab, interval 1, probability 0, space 0, times 0 [ 248.304665][ T7902] CPU: 1 UID: 0 PID: 7902 Comm: syz.0.394 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 248.304703][ T7902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 248.304719][ T7902] Call Trace: [ 248.304728][ T7902] [ 248.304739][ T7902] dump_stack_lvl+0x16c/0x1f0 [ 248.304787][ T7902] should_fail_ex+0x512/0x640 [ 248.304827][ T7902] ? fs_reclaim_acquire+0xae/0x150 [ 248.304863][ T7902] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 248.304903][ T7902] should_failslab+0xc2/0x120 [ 248.304931][ T7902] __kmalloc_noprof+0xd2/0x510 [ 248.304992][ T7902] tomoyo_realpath_from_path+0xc2/0x6e0 [ 248.305035][ T7902] ? tomoyo_profile+0x47/0x60 [ 248.305083][ T7902] tomoyo_path_number_perm+0x245/0x580 [ 248.305114][ T7902] ? tomoyo_path_number_perm+0x237/0x580 [ 248.305151][ T7902] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 248.305187][ T7902] ? find_held_lock+0x2b/0x80 [ 248.305252][ T7902] ? find_held_lock+0x2b/0x80 [ 248.305280][ T7902] ? hook_file_ioctl_common+0x145/0x410 [ 248.305321][ T7902] ? __fget_files+0x20e/0x3c0 [ 248.305367][ T7902] security_file_ioctl+0x9b/0x240 [ 248.305405][ T7902] __x64_sys_ioctl+0xb7/0x210 [ 248.305443][ T7902] do_syscall_64+0xcd/0x490 [ 248.305488][ T7902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.305517][ T7902] RIP: 0033:0x7f020238e929 [ 248.305540][ T7902] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 248.305567][ T7902] RSP: 002b:00007f0203137038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 248.305593][ T7902] RAX: ffffffffffffffda RBX: 00007f02025b6080 RCX: 00007f020238e929 [ 248.305612][ T7902] RDX: 0000000000000005 RSI: 0000000000005609 RDI: 0000000000000006 [ 248.305628][ T7902] RBP: 00007f0203137090 R08: 0000000000000000 R09: 0000000000000000 [ 248.305644][ T7902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 248.305660][ T7902] R13: 0000000000000000 R14: 00007f02025b6080 R15: 00007ffd78be9ad8 [ 248.305699][ T7902] [ 248.305712][ T7902] ERROR: Out of memory at tomoyo_realpath_from_path. [ 250.977105][ T7924] ubi: mtd0 is already attached to ubi0 [ 251.250159][ T7918] ALSA: mixer_oss: invalid OSS volume '' [ 253.038133][ T7945] netlink: zone id is out of range [ 253.156880][ T7945] netlink: zone id is out of range [ 253.450460][ T7945] netlink: set zone limit has 8 unknown bytes [ 255.890691][ T7977] FAULT_INJECTION: forcing a failure. [ 255.890691][ T7977] name failslab, interval 1, probability 0, space 0, times 0 [ 255.911912][ T7977] CPU: 0 UID: 0 PID: 7977 Comm: syz.3.413 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 255.911951][ T7977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 255.911967][ T7977] Call Trace: [ 255.911977][ T7977] [ 255.911988][ T7977] dump_stack_lvl+0x16c/0x1f0 [ 255.912034][ T7977] should_fail_ex+0x512/0x640 [ 255.912073][ T7977] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 255.912118][ T7977] should_failslab+0xc2/0x120 [ 255.912145][ T7977] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 255.912188][ T7977] ? __mpol_dup+0x74/0x380 [ 255.912223][ T7977] __mpol_dup+0x74/0x380 [ 255.912254][ T7977] ? __pfx___mpol_dup+0x10/0x10 [ 255.912284][ T7977] ? mas_walk+0x6a6/0x910 [ 255.912324][ T7977] mbind_range+0x2ad/0x570 [ 255.912361][ T7977] do_mbind+0x848/0xf30 [ 255.912399][ T7977] ? __might_fault+0xe3/0x190 [ 255.912436][ T7977] ? __pfx_do_mbind+0x10/0x10 [ 255.912490][ T7977] ? __pfx_get_nodes+0x10/0x10 [ 255.912527][ T7977] ? __fget_files+0x20e/0x3c0 [ 255.912574][ T7977] kernel_mbind+0x1e3/0x1f0 [ 255.912608][ T7977] ? __pfx_kernel_mbind+0x10/0x10 [ 255.912650][ T7977] do_syscall_64+0xcd/0x490 [ 255.912692][ T7977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.912720][ T7977] RIP: 0033:0x7efc12d8e929 [ 255.912742][ T7977] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 255.912768][ T7977] RSP: 002b:00007efc13b85038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 255.912793][ T7977] RAX: ffffffffffffffda RBX: 00007efc12fb5fa0 RCX: 00007efc12d8e929 [ 255.912810][ T7977] RDX: 0000000000008003 RSI: 0000000000800605 RDI: 0000000000000000 [ 255.912825][ T7977] RBP: 00007efc13b85090 R08: 0000000000000003 R09: 0000000000000003 [ 255.912850][ T7977] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 255.912865][ T7977] R13: 0000000000000000 R14: 00007efc12fb5fa0 R15: 00007ffe47d939d8 [ 255.912903][ T7977] [ 257.100517][ T7990] netlink: zone id is out of range [ 257.117788][ T7990] netlink: zone id is out of range [ 257.145817][ T7990] netlink: set zone limit has 8 unknown bytes [ 258.724777][ T8022] random: crng reseeded on system resumption [ 258.861238][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 258.871676][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.385150][ T8042] netlink: zone id is out of range [ 260.393403][ T8042] netlink: zone id is out of range [ 260.415304][ T8042] netlink: set zone limit has 8 unknown bytes [ 261.068742][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.068837][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 262.772026][ T8089] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 265.330117][ T8143] FAULT_INJECTION: forcing a failure. [ 265.330117][ T8143] name failslab, interval 1, probability 0, space 0, times 0 [ 265.344492][ T8143] CPU: 1 UID: 0 PID: 8143 Comm: syz.3.453 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 265.344531][ T8143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 265.344547][ T8143] Call Trace: [ 265.344556][ T8143] [ 265.344567][ T8143] dump_stack_lvl+0x16c/0x1f0 [ 265.344615][ T8143] should_fail_ex+0x512/0x640 [ 265.344659][ T8143] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 265.344709][ T8143] should_failslab+0xc2/0x120 [ 265.344779][ T8143] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 265.344820][ T8143] ? stack_depot_save_flags+0x28/0xa40 [ 265.344861][ T8143] ? alloc_empty_file+0x55/0x1e0 [ 265.344893][ T8143] alloc_empty_file+0x55/0x1e0 [ 265.344924][ T8143] path_openat+0xda/0x2cb0 [ 265.344961][ T8143] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.345003][ T8143] ? __pfx_path_openat+0x10/0x10 [ 265.345044][ T8143] ? __lock_acquire+0xb8a/0x1c90 [ 265.345088][ T8143] do_filp_open+0x20b/0x470 [ 265.345130][ T8143] ? __pfx_do_filp_open+0x10/0x10 [ 265.345199][ T8143] ? alloc_fd+0x471/0x7d0 [ 265.345248][ T8143] do_sys_openat2+0x11b/0x1d0 [ 265.345280][ T8143] ? __pfx_do_sys_openat2+0x10/0x10 [ 265.345317][ T8143] ? __fget_files+0x20e/0x3c0 [ 265.345363][ T8143] __x64_sys_openat+0x174/0x210 [ 265.345396][ T8143] ? __pfx___x64_sys_openat+0x10/0x10 [ 265.345445][ T8143] do_syscall_64+0xcd/0x490 [ 265.345490][ T8143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.345518][ T8143] RIP: 0033:0x7efc12d8d290 [ 265.345540][ T8143] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 265.345567][ T8143] RSP: 002b:00007efc13b84f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 265.345593][ T8143] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007efc12d8d290 [ 265.345611][ T8143] RDX: 0000000000000000 RSI: 00007efc13b84fa0 RDI: 00000000ffffff9c [ 265.345627][ T8143] RBP: 00007efc13b84fa0 R08: 0000000000000000 R09: 0000000000000000 [ 265.345644][ T8143] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 265.345659][ T8143] R13: 0000000000000000 R14: 00007efc12fb5fa0 R15: 00007ffe47d939d8 [ 265.345696][ T8143] [ 269.978635][ T8208] random: crng reseeded on system resumption [ 272.551151][ T8241] netlink: zone id is out of range [ 272.567636][ T8241] netlink: zone id is out of range [ 272.640830][ T8238] netlink: zone id is out of range [ 272.675942][ T8238] netlink: zone id is out of range [ 272.681514][ T8241] netlink: set zone limit has 8 unknown bytes [ 272.734412][ T8238] netlink: set zone limit has 8 unknown bytes [ 273.181628][ T8251] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 273.393353][ T8257] netlink: 342 bytes leftover after parsing attributes in process `syz.2.483'. [ 274.060617][ T8265] random: crng reseeded on system resumption [ 275.777168][ T8282] netlink: zone id is out of range [ 275.820407][ T8282] netlink: zone id is out of range [ 276.001220][ T8282] netlink: set zone limit has 8 unknown bytes [ 276.470087][ T8298] Console: switching to colour VGA+ 80x25 [ 277.826507][ T8316] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 279.015469][ T8338] FAULT_INJECTION: forcing a failure. [ 279.015469][ T8338] name failslab, interval 1, probability 0, space 0, times 0 [ 279.159183][ T8338] CPU: 0 UID: 0 PID: 8338 Comm: syz.0.503 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 279.159224][ T8338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 279.159240][ T8338] Call Trace: [ 279.159249][ T8338] [ 279.159259][ T8338] dump_stack_lvl+0x16c/0x1f0 [ 279.159305][ T8338] should_fail_ex+0x512/0x640 [ 279.159344][ T8338] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 279.159390][ T8338] should_failslab+0xc2/0x120 [ 279.159419][ T8338] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 279.159460][ T8338] ? __alloc_skb+0x2b2/0x380 [ 279.159503][ T8338] __alloc_skb+0x2b2/0x380 [ 279.159540][ T8338] ? __pfx___alloc_skb+0x10/0x10 [ 279.159583][ T8338] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 279.159619][ T8338] netlink_alloc_large_skb+0x69/0x130 [ 279.159651][ T8338] netlink_sendmsg+0x6a1/0xdd0 [ 279.159687][ T8338] ? __pfx_netlink_sendmsg+0x10/0x10 [ 279.159732][ T8338] ____sys_sendmsg+0xa98/0xc70 [ 279.159764][ T8338] ? copy_msghdr_from_user+0x10a/0x160 [ 279.159816][ T8338] ? __pfx_____sys_sendmsg+0x10/0x10 [ 279.159865][ T8338] ___sys_sendmsg+0x134/0x1d0 [ 279.159909][ T8338] ? __pfx____sys_sendmsg+0x10/0x10 [ 279.159947][ T8338] ? __lock_acquire+0x622/0x1c90 [ 279.160034][ T8338] __sys_sendmsg+0x16d/0x220 [ 279.160076][ T8338] ? __pfx___sys_sendmsg+0x10/0x10 [ 279.160143][ T8338] do_syscall_64+0xcd/0x490 [ 279.160189][ T8338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.160218][ T8338] RIP: 0033:0x7f020238e929 [ 279.160240][ T8338] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 279.160267][ T8338] RSP: 002b:00007f0203158038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 279.160295][ T8338] RAX: ffffffffffffffda RBX: 00007f02025b5fa0 RCX: 00007f020238e929 [ 279.160313][ T8338] RDX: 00000000000048d0 RSI: 0000200000000340 RDI: 0000000000000003 [ 279.160330][ T8338] RBP: 00007f0203158090 R08: 0000000000000000 R09: 0000000000000000 [ 279.160346][ T8338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 279.160362][ T8338] R13: 0000000000000000 R14: 00007f02025b5fa0 R15: 00007ffd78be9ad8 [ 279.160398][ T8338] [ 279.815625][ T8346] FAULT_INJECTION: forcing a failure. [ 279.815625][ T8346] name failslab, interval 1, probability 0, space 0, times 0 [ 280.022348][ T8346] CPU: 1 UID: 0 PID: 8346 Comm: syz.0.504 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 280.022393][ T8346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 280.022411][ T8346] Call Trace: [ 280.022420][ T8346] [ 280.022432][ T8346] dump_stack_lvl+0x16c/0x1f0 [ 280.022478][ T8346] should_fail_ex+0x512/0x640 [ 280.022512][ T8346] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 280.022550][ T8346] should_failslab+0xc2/0x120 [ 280.022581][ T8346] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 280.022620][ T8346] ? alloc_empty_file+0x55/0x1e0 [ 280.022654][ T8346] alloc_empty_file+0x55/0x1e0 [ 280.022681][ T8346] path_openat+0xda/0x2cb0 [ 280.022711][ T8346] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.022746][ T8346] ? __pfx_path_openat+0x10/0x10 [ 280.022780][ T8346] ? __lock_acquire+0xb8a/0x1c90 [ 280.022815][ T8346] do_filp_open+0x20b/0x470 [ 280.022855][ T8346] ? __pfx_do_filp_open+0x10/0x10 [ 280.022910][ T8346] ? alloc_fd+0x471/0x7d0 [ 280.022949][ T8346] do_sys_openat2+0x11b/0x1d0 [ 280.022975][ T8346] ? __pfx_do_sys_openat2+0x10/0x10 [ 280.023012][ T8346] __x64_sys_openat+0x174/0x210 [ 280.023038][ T8346] ? __pfx___x64_sys_openat+0x10/0x10 [ 280.023076][ T8346] do_syscall_64+0xcd/0x490 [ 280.023113][ T8346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.023135][ T8346] RIP: 0033:0x7f020238e929 [ 280.023154][ T8346] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 280.023175][ T8346] RSP: 002b:00007f0203137038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 280.023197][ T8346] RAX: ffffffffffffffda RBX: 00007f02025b6080 RCX: 00007f020238e929 [ 280.023212][ T8346] RDX: 0000000000080102 RSI: 0000200000000200 RDI: ffffffffffffff9c [ 280.023227][ T8346] RBP: 00007f0202410b39 R08: 0000000000000000 R09: 0000000000000000 [ 280.023240][ T8346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 280.023253][ T8346] R13: 0000000000000000 R14: 00007f02025b6080 R15: 00007ffd78be9ad8 [ 280.023283][ T8346] [ 280.228409][ C1] vkms_vblank_simulate: vblank timer overrun [ 281.220549][ T8364] net_ratelimit: 3 callbacks suppressed [ 281.220574][ T8364] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 283.213130][ T8386] can: request_module (can-proto-3) failed. [ 286.874983][ T8466] netlink: zone id is out of range [ 286.916723][ T8466] netlink: zone id is out of range [ 287.183822][ T8466] netlink: set zone limit has 8 unknown bytes [ 287.571033][ T8486] FAULT_INJECTION: forcing a failure. [ 287.571033][ T8486] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 287.629173][ T8486] CPU: 0 UID: 0 PID: 8486 Comm: syz.0.533 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 287.629217][ T8486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 287.629233][ T8486] Call Trace: [ 287.629242][ T8486] [ 287.629254][ T8486] dump_stack_lvl+0x16c/0x1f0 [ 287.629300][ T8486] should_fail_ex+0x512/0x640 [ 287.629346][ T8486] _copy_from_iter+0x29f/0x16f0 [ 287.629402][ T8486] ? __pfx__copy_from_iter+0x10/0x10 [ 287.629448][ T8486] ? rcu_is_watching+0x12/0xc0 [ 287.629486][ T8486] ? trace_kmalloc+0x2b/0xd0 [ 287.629514][ T8486] ? __kmalloc_noprof+0x242/0x510 [ 287.629560][ T8486] kernfs_fop_write_iter+0x19a/0x510 [ 287.629596][ T8486] vfs_write+0x6c7/0x1150 [ 287.629635][ T8486] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 287.629666][ T8486] ? __pfx___mutex_lock+0x10/0x10 [ 287.629707][ T8486] ? __pfx_vfs_write+0x10/0x10 [ 287.629775][ T8486] ksys_write+0x12a/0x250 [ 287.629814][ T8486] ? __pfx_ksys_write+0x10/0x10 [ 287.629866][ T8486] do_syscall_64+0xcd/0x490 [ 287.629911][ T8486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.629939][ T8486] RIP: 0033:0x7f020238e929 [ 287.629961][ T8486] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 287.629988][ T8486] RSP: 002b:00007f0203158038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 287.630030][ T8486] RAX: ffffffffffffffda RBX: 00007f02025b5fa0 RCX: 00007f020238e929 [ 287.630047][ T8486] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000003 [ 287.630062][ T8486] RBP: 00007f0203158090 R08: 0000000000000000 R09: 0000000000000000 [ 287.630076][ T8486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 287.630090][ T8486] R13: 0000000000000000 R14: 00007f02025b5fa0 R15: 00007ffd78be9ad8 [ 287.630127][ T8486] [ 287.870921][ T8494] ubi: mtd0 is already attached to ubi0 [ 288.987099][ T8510] FAULT_INJECTION: forcing a failure. [ 288.987099][ T8510] name failslab, interval 1, probability 0, space 0, times 0 [ 289.014800][ T8510] CPU: 0 UID: 0 PID: 8510 Comm: syz.3.541 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 289.014842][ T8510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 289.014858][ T8510] Call Trace: [ 289.014868][ T8510] [ 289.014878][ T8510] dump_stack_lvl+0x16c/0x1f0 [ 289.014926][ T8510] should_fail_ex+0x512/0x640 [ 289.014965][ T8510] ? fs_reclaim_acquire+0xae/0x150 [ 289.015002][ T8510] ? tomoyo_encode2+0x100/0x3e0 [ 289.015037][ T8510] should_failslab+0xc2/0x120 [ 289.015065][ T8510] __kmalloc_noprof+0xd2/0x510 [ 289.015108][ T8510] ? d_absolute_path+0x136/0x1a0 [ 289.015144][ T8510] tomoyo_encode2+0x100/0x3e0 [ 289.015188][ T8510] tomoyo_encode+0x29/0x50 [ 289.015226][ T8510] tomoyo_realpath_from_path+0x18f/0x6e0 [ 289.015277][ T8510] tomoyo_path_number_perm+0x245/0x580 [ 289.015310][ T8510] ? tomoyo_path_number_perm+0x237/0x580 [ 289.015347][ T8510] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 289.015383][ T8510] ? find_held_lock+0x2b/0x80 [ 289.015451][ T8510] ? find_held_lock+0x2b/0x80 [ 289.015487][ T8510] ? hook_file_ioctl_common+0x145/0x410 [ 289.015528][ T8510] ? __fget_files+0x20e/0x3c0 [ 289.015575][ T8510] security_file_ioctl+0x9b/0x240 [ 289.015613][ T8510] __x64_sys_ioctl+0xb7/0x210 [ 289.015650][ T8510] do_syscall_64+0xcd/0x490 [ 289.015696][ T8510] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.015724][ T8510] RIP: 0033:0x7efc12d8e929 [ 289.015747][ T8510] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 289.015773][ T8510] RSP: 002b:00007efc13b85038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 289.015801][ T8510] RAX: ffffffffffffffda RBX: 00007efc12fb5fa0 RCX: 00007efc12d8e929 [ 289.015819][ T8510] RDX: 0000200000000080 RSI: 0000000040186f40 RDI: 0000000000000009 [ 289.015835][ T8510] RBP: 00007efc13b85090 R08: 0000000000000000 R09: 0000000000000000 [ 289.015851][ T8510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 289.015867][ T8510] R13: 0000000000000000 R14: 00007efc12fb5fa0 R15: 00007ffe47d939d8 [ 289.015906][ T8510] [ 289.015933][ T8510] ERROR: Out of memory at tomoyo_realpath_from_path. [ 289.252809][ T8510] ubi: mtd0 is already attached to ubi0 [ 289.714515][ T8517] netlink: zone id is out of range [ 289.747870][ T8526] ubi: mtd0 is already attached to ubi0 [ 289.763492][ T8517] netlink: zone id is out of range [ 289.865889][ T8517] netlink: set zone limit has 8 unknown bytes [ 291.033835][ T8538] random: crng reseeded on system resumption [ 291.744139][ T8556] netlink: zone id is out of range [ 291.807787][ T8556] netlink: zone id is out of range [ 292.043959][ T8556] netlink: set zone limit has 8 unknown bytes [ 292.905325][ T8595] can: request_module (can-proto-3) failed. [ 294.471815][ T8617] netlink: zone id is out of range [ 294.540841][ T8617] netlink: zone id is out of range [ 294.631335][ T8617] netlink: set zone limit has 8 unknown bytes [ 295.204834][ T8626] FAULT_INJECTION: forcing a failure. [ 295.204834][ T8626] name failslab, interval 1, probability 0, space 0, times 0 [ 295.256706][ T8626] CPU: 1 UID: 0 PID: 8626 Comm: syz.3.570 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 295.256746][ T8626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 295.256762][ T8626] Call Trace: [ 295.256772][ T8626] [ 295.256782][ T8626] dump_stack_lvl+0x16c/0x1f0 [ 295.256830][ T8626] should_fail_ex+0x512/0x640 [ 295.256870][ T8626] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 295.256918][ T8626] should_failslab+0xc2/0x120 [ 295.256946][ T8626] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 295.256990][ T8626] ? mpol_new+0x11b/0x2d0 [ 295.257037][ T8626] mpol_new+0x11b/0x2d0 [ 295.257082][ T8626] do_mbind+0x218/0xf30 [ 295.257119][ T8626] ? find_held_lock+0x2b/0x80 [ 295.257148][ T8626] ? __might_fault+0xe3/0x190 [ 295.257188][ T8626] ? __might_fault+0xe3/0x190 [ 295.257228][ T8626] ? __pfx_do_mbind+0x10/0x10 [ 295.257283][ T8626] ? __pfx_get_nodes+0x10/0x10 [ 295.257340][ T8626] ? __fget_files+0x20e/0x3c0 [ 295.257384][ T8626] kernel_mbind+0x1e3/0x1f0 [ 295.257420][ T8626] ? __pfx_kernel_mbind+0x10/0x10 [ 295.257465][ T8626] do_syscall_64+0xcd/0x490 [ 295.257511][ T8626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.257539][ T8626] RIP: 0033:0x7efc12d8e929 [ 295.257562][ T8626] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 295.257589][ T8626] RSP: 002b:00007efc13b85038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 295.257624][ T8626] RAX: ffffffffffffffda RBX: 00007efc12fb5fa0 RCX: 00007efc12d8e929 [ 295.257642][ T8626] RDX: 0000000000000002 RSI: 0000000000000002 RDI: 00000000f4000000 [ 295.257659][ T8626] RBP: 00007efc13b85090 R08: 0000000000000007 R09: 0000000000000000 [ 295.257675][ T8626] R10: 0000200000002100 R11: 0000000000000246 R12: 0000000000000001 [ 295.257692][ T8626] R13: 0000000000000000 R14: 00007efc12fb5fa0 R15: 00007ffe47d939d8 [ 295.257730][ T8626] [ 296.679856][ T8643] zswap: compressor not available [ 298.662305][ T8675] netlink: zone id is out of range [ 298.681311][ T8675] netlink: zone id is out of range [ 298.759918][ T8675] netlink: set zone limit has 8 unknown bytes [ 299.509166][ T8688] zswap: compressor not available syzkaller syzkaller login: [ 304.002039][ T8733] zswap: compressor not available [ 304.063835][ T8740] FAULT_INJECTION: forcing a failure. [ 304.063835][ T8740] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 304.071728][ T8740] CPU: 0 UID: 0 PID: 8740 Comm: syz.2.596 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 304.071767][ T8740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 304.071783][ T8740] Call Trace: [ 304.071792][ T8740] [ 304.071802][ T8740] dump_stack_lvl+0x16c/0x1f0 [ 304.071849][ T8740] should_fail_ex+0x512/0x640 [ 304.071896][ T8740] _copy_from_iter+0x463/0x16f0 [ 304.071947][ T8740] ? rcu_is_watching+0x12/0xc0 [ 304.071974][ T8740] ? __pfx__copy_from_iter+0x10/0x10 [ 304.072013][ T8740] ? kmem_cache_alloc_noprof+0x21e/0x3b0 [ 304.072056][ T8740] ? __asan_memset+0x23/0x50 [ 304.072094][ T8740] ? __build_skb_around+0x278/0x3b0 [ 304.072131][ T8740] ? is_vmalloc_addr+0x86/0xa0 [ 304.072175][ T8740] netlink_sendmsg+0x829/0xdd0 [ 304.072211][ T8740] ? __pfx_netlink_sendmsg+0x10/0x10 [ 304.072254][ T8740] ____sys_sendmsg+0xa98/0xc70 [ 304.072288][ T8740] ? __pfx_____sys_sendmsg+0x10/0x10 [ 304.072324][ T8740] ? __pfx__kstrtoull+0x10/0x10 [ 304.072364][ T8740] ___sys_sendmsg+0x134/0x1d0 [ 304.072406][ T8740] ? __pfx____sys_sendmsg+0x10/0x10 [ 304.072462][ T8740] ? find_held_lock+0x2b/0x80 [ 304.072513][ T8740] __sys_sendmmsg+0x200/0x420 [ 304.072568][ T8740] ? __pfx___sys_sendmmsg+0x10/0x10 [ 304.072618][ T8740] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 304.072673][ T8740] ? fput+0x70/0xf0 [ 304.072701][ T8740] ? ksys_write+0x1ac/0x250 [ 304.072741][ T8740] ? __pfx_ksys_write+0x10/0x10 [ 304.072786][ T8740] __x64_sys_sendmmsg+0x9c/0x100 [ 304.072825][ T8740] ? lockdep_hardirqs_on+0x7c/0x110 [ 304.072864][ T8740] do_syscall_64+0xcd/0x490 [ 304.072909][ T8740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.072936][ T8740] RIP: 0033:0x7fce8438e929 [ 304.072958][ T8740] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 304.072983][ T8740] RSP: 002b:00007fce851d6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 304.073010][ T8740] RAX: ffffffffffffffda RBX: 00007fce845b5fa0 RCX: 00007fce8438e929 [ 304.073027][ T8740] RDX: 0000000000000007 RSI: 0000200000000200 RDI: 0000000000000003 [ 304.073044][ T8740] RBP: 00007fce851d6090 R08: 0000000000000000 R09: 0000000000000000 [ 304.073059][ T8740] R10: 0000000000004008 R11: 0000000000000246 R12: 0000000000000001 [ 304.073075][ T8740] R13: 0000000000000000 R14: 00007fce845b5fa0 R15: 00007ffcdbfe0e38 [ 304.073111][ T8740] [ 304.169843][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 304.171094][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 304.241618][ T8748] input: jJǸ-¶š9ã%vø“û¨lÐQ  J86Ö‘ as /devices/virtual/input/input28 [ 305.245959][ T8750] netlink: zone id is out of range [ 305.273127][ T8750] netlink: zone id is out of range [ 305.443342][ T8750] netlink: set zone limit has 8 unknown bytes [ 307.305889][ T8777] zswap: compressor not available [ 308.051085][ T8797] zswap: compressor not available [ 310.461147][ T8827] netlink: zone id is out of range [ 310.465208][ T8827] netlink: zone id is out of range [ 310.537054][ T8827] netlink: set zone limit has 8 unknown bytes [ 311.539727][ T8845] zswap: compressor not available [ 312.007095][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 312.009348][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 312.095606][ T8858] input: jJǸ-¶š9ã%vø“û¨lÐQ  J86Ö‘ as /devices/virtual/input/input29 [ 313.455164][ T8868] netlink: 8 bytes leftover after parsing attributes in process `syz.1.627'. [ 314.368876][ T8863] netlink: zone id is out of range [ 314.403825][ T8863] netlink: zone id is out of range [ 314.703721][ T8863] netlink: set zone limit has 8 unknown bytes [ 317.103942][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.112804][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.333920][ T8922] input: jJǸ-¶š9ã%vø“û¨lÐQ  J86Ö‘ as /devices/virtual/input/input31 [ 318.173945][ T8925] netlink: 8 bytes leftover after parsing attributes in process `syz.0.638'. [ 321.327510][ T8975] netlink: 8 bytes leftover after parsing attributes in process `syz.0.649'. [ 322.520749][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.549980][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 326.407017][ T9046] netlink: zone id is out of range [ 326.490767][ T9046] netlink: zone id is out of range [ 326.679595][ T9046] netlink: set zone limit has 8 unknown bytes [ 330.543206][ T9103] netlink: zone id is out of range [ 330.585150][ T9103] netlink: zone id is out of range [ 330.828692][ T9103] netlink: set zone limit has 8 unknown bytes [ 333.195979][ T9137] netlink: zone id is out of range [ 333.280963][ T9137] netlink: zone id is out of range [ 333.645693][ T9137] netlink: set zone limit has 8 unknown bytes [ 335.126289][ T9184] netlink: 8 bytes leftover after parsing attributes in process `syz.2.694'. [ 336.729640][ T9217] netlink: 338 bytes leftover after parsing attributes in process `syz.3.700'. [ 336.774358][ T9219] FAULT_INJECTION: forcing a failure. [ 336.774358][ T9219] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 336.781549][ T9218] netlink: 338 bytes leftover after parsing attributes in process `syz.3.700'. [ 336.820081][ T9219] CPU: 0 UID: 0 PID: 9219 Comm: syz.3.700 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 336.820118][ T9219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 336.820132][ T9219] Call Trace: [ 336.820142][ T9219] [ 336.820152][ T9219] dump_stack_lvl+0x16c/0x1f0 [ 336.820206][ T9219] should_fail_ex+0x512/0x640 [ 336.820253][ T9219] _copy_from_iter+0x29f/0x16f0 [ 336.820299][ T9219] ? __alloc_skb+0x200/0x380 [ 336.820336][ T9219] ? __pfx__copy_from_iter+0x10/0x10 [ 336.820383][ T9219] ? __lock_acquire+0xb8a/0x1c90 [ 336.820429][ T9219] netlink_sendmsg+0x829/0xdd0 [ 336.820463][ T9219] ? __pfx_netlink_sendmsg+0x10/0x10 [ 336.820504][ T9219] ____sys_sendmsg+0xa98/0xc70 [ 336.820533][ T9219] ? copy_msghdr_from_user+0x10a/0x160 [ 336.820570][ T9219] ? __pfx_____sys_sendmsg+0x10/0x10 [ 336.820606][ T9219] ? kfree+0x24f/0x4d0 [ 336.820638][ T9219] ? __pfx__kstrtoull+0x10/0x10 [ 336.820677][ T9219] ___sys_sendmsg+0x134/0x1d0 [ 336.820718][ T9219] ? __pfx____sys_sendmsg+0x10/0x10 [ 336.820797][ T9219] ? __pfx___might_resched+0x10/0x10 [ 336.820836][ T9219] __sys_sendmmsg+0x200/0x420 [ 336.820883][ T9219] ? __pfx___sys_sendmmsg+0x10/0x10 [ 336.820935][ T9219] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 336.820995][ T9219] ? fput+0x70/0xf0 [ 336.821022][ T9219] ? ksys_write+0x1ac/0x250 [ 336.821061][ T9219] ? __pfx_ksys_write+0x10/0x10 [ 336.821104][ T9219] __x64_sys_sendmmsg+0x9c/0x100 [ 336.821146][ T9219] ? lockdep_hardirqs_on+0x7c/0x110 [ 336.821192][ T9219] do_syscall_64+0xcd/0x490 [ 336.821233][ T9219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.821261][ T9219] RIP: 0033:0x7efc12d8e929 [ 336.821285][ T9219] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 336.821310][ T9219] RSP: 002b:00007efc13b43038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 336.821339][ T9219] RAX: ffffffffffffffda RBX: 00007efc12fb6160 RCX: 00007efc12d8e929 [ 336.821358][ T9219] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 336.821376][ T9219] RBP: 00007efc13b43090 R08: 0000000000000000 R09: 0000000000000000 [ 336.821392][ T9219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 336.821409][ T9219] R13: 0000000000000000 R14: 00007efc12fb6160 R15: 00007ffe47d939d8 [ 336.821446][ T9219] [ 337.208069][ T9208] netlink: zone id is out of range [ 337.220044][ T9208] netlink: zone id is out of range [ 337.274998][ T9208] netlink: set zone limit has 8 unknown bytes [ 337.509459][ T9225] netlink: 'syz.0.702': attribute type 16 has an invalid length. [ 337.533837][ T9225] netlink: 326 bytes leftover after parsing attributes in process `syz.0.702'. [ 337.619145][ T9225] veth1_macvtap: left promiscuous mode [ 337.663215][ T9229] netlink: 8 bytes leftover after parsing attributes in process `syz.2.703'. [ 337.804979][ T9224] netlink: zone id is out of range [ 337.833747][ T9224] netlink: zone id is out of range [ 338.049221][ T9224] netlink: set zone limit has 8 unknown bytes [ 346.249520][ T9330] netlink: zone id is out of range [ 346.302959][ T9330] netlink: zone id is out of range [ 346.398794][ T9330] netlink: set zone limit has 8 unknown bytes [ 350.646330][ T9392] netlink: zone id is out of range [ 350.682460][ T9392] netlink: zone id is out of range [ 350.892429][ T9392] netlink: set zone limit has 8 unknown bytes [ 353.273826][ T9424] netlink: zone id is out of range [ 353.331994][ T9424] netlink: zone id is out of range [ 353.448073][ T9424] netlink: set zone limit has 8 unknown bytes [ 354.809344][ T9441] netlink: zone id is out of range [ 354.817413][ T9441] netlink: zone id is out of range [ 354.899238][ T9441] netlink: set zone limit has 8 unknown bytes [ 355.397626][ T9445] netlink: zone id is out of range [ 355.464061][ T9445] netlink: zone id is out of range [ 355.580728][ T9445] netlink: set zone limit has 8 unknown bytes [ 355.809965][ T9455] FAULT_INJECTION: forcing a failure. [ 355.809965][ T9455] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 355.862848][ T9455] CPU: 1 UID: 0 PID: 9455 Comm: syz.2.753 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 355.862888][ T9455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 355.862903][ T9455] Call Trace: [ 355.862912][ T9455] [ 355.862923][ T9455] dump_stack_lvl+0x16c/0x1f0 [ 355.862970][ T9455] should_fail_ex+0x512/0x640 [ 355.863026][ T9455] _copy_from_iter+0x29f/0x16f0 [ 355.863076][ T9455] ? __alloc_skb+0x200/0x380 [ 355.863112][ T9455] ? __pfx__copy_from_iter+0x10/0x10 [ 355.863158][ T9455] ? __lock_acquire+0xb8a/0x1c90 [ 355.863204][ T9455] netlink_sendmsg+0x829/0xdd0 [ 355.863237][ T9455] ? __pfx_netlink_sendmsg+0x10/0x10 [ 355.863280][ T9455] ____sys_sendmsg+0xa98/0xc70 [ 355.863311][ T9455] ? copy_msghdr_from_user+0x10a/0x160 [ 355.863351][ T9455] ? __pfx_____sys_sendmsg+0x10/0x10 [ 355.863387][ T9455] ? kfree+0x24f/0x4d0 [ 355.863419][ T9455] ? __pfx__kstrtoull+0x10/0x10 [ 355.863459][ T9455] ___sys_sendmsg+0x134/0x1d0 [ 355.863503][ T9455] ? __pfx____sys_sendmsg+0x10/0x10 [ 355.863578][ T9455] ? __pfx___might_resched+0x10/0x10 [ 355.863617][ T9455] __sys_sendmmsg+0x200/0x420 [ 355.863662][ T9455] ? __pfx___sys_sendmmsg+0x10/0x10 [ 355.863721][ T9455] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 355.863780][ T9455] ? fput+0x70/0xf0 [ 355.863807][ T9455] ? ksys_write+0x1ac/0x250 [ 355.863846][ T9455] ? __pfx_ksys_write+0x10/0x10 [ 355.863892][ T9455] __x64_sys_sendmmsg+0x9c/0x100 [ 355.863933][ T9455] ? lockdep_hardirqs_on+0x7c/0x110 [ 355.863980][ T9455] do_syscall_64+0xcd/0x490 [ 355.864024][ T9455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.864052][ T9455] RIP: 0033:0x7fce8438e929 [ 355.864076][ T9455] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 355.864102][ T9455] RSP: 002b:00007fce851d6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 355.864129][ T9455] RAX: ffffffffffffffda RBX: 00007fce845b5fa0 RCX: 00007fce8438e929 [ 355.864147][ T9455] RDX: 0000000000000007 RSI: 0000200000000200 RDI: 0000000000000003 [ 355.864163][ T9455] RBP: 00007fce851d6090 R08: 0000000000000000 R09: 0000000000000000 [ 355.864179][ T9455] R10: 0000000000004008 R11: 0000000000000246 R12: 0000000000000002 [ 355.864195][ T9455] R13: 0000000000000000 R14: 00007fce845b5fa0 R15: 00007ffcdbfe0e38 [ 355.864233][ T9455] [ 357.487828][ T9464] netlink: zone id is out of range [ 358.305538][ T9472] net_ratelimit: 4 callbacks suppressed [ 358.305652][ T9472] netlink: set zone limit has 8 unknown bytes [ 360.890125][ T9504] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x18000 [ 360.926098][ T9504] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff) [ 360.926164][ T9504] raw: 00fff00000002000 ffffea0000600008 ffffea0000600008 0000000000000000 [ 360.926182][ T9504] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 360.926193][ T9504] page dumped because: unmovable page [ 360.926203][ T9504] page_owner info is not present (never set?) [ 363.448836][ T9532] ima: policy update failed [ 363.459034][ T30] audit: type=1802 audit(1752374131.538:3): pid=9532 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.767" res=0 errno=0 [ 363.466236][ T9532] netlink: 25 bytes leftover after parsing attributes in process `syz.1.767'. [ 366.497403][ T9579] ptrace attach of ""[9586] was attempted by "./syz-executor exec"[9579] [ 366.860941][ T9589] ima: policy update failed [ 366.878609][ T30] audit: type=1802 audit(1752374134.958:4): pid=9589 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.783" res=0 errno=0 [ 366.901070][ T9589] netlink: 25 bytes leftover after parsing attributes in process `syz.2.783'. [ 367.129755][ T9595] FAULT_INJECTION: forcing a failure. [ 367.129755][ T9595] name failslab, interval 1, probability 0, space 0, times 0 [ 367.155307][ T9595] CPU: 0 UID: 0 PID: 9595 Comm: syz.1.784 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 367.155343][ T9595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 367.155358][ T9595] Call Trace: [ 367.155368][ T9595] [ 367.155378][ T9595] dump_stack_lvl+0x16c/0x1f0 [ 367.155426][ T9595] should_fail_ex+0x512/0x640 [ 367.155466][ T9595] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 367.155513][ T9595] should_failslab+0xc2/0x120 [ 367.155539][ T9595] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 367.155583][ T9595] ? mas_alloc_nodes+0x18b/0x8b0 [ 367.155626][ T9595] mas_alloc_nodes+0x18b/0x8b0 [ 367.155672][ T9595] mas_node_count_gfp+0x105/0x130 [ 367.155713][ T9595] mas_preallocate+0x7e0/0xde0 [ 367.155739][ T9595] ? __memcg_slab_post_alloc_hook+0x442/0x960 [ 367.155777][ T9595] ? __pfx_mas_preallocate+0x10/0x10 [ 367.155828][ T9595] ? anon_vma_name+0x75/0x100 [ 367.155866][ T9595] __split_vma+0x34a/0x1070 [ 367.155912][ T9595] ? __pfx___split_vma+0x10/0x10 [ 367.155984][ T9595] vms_gather_munmap_vmas+0x392/0x1310 [ 367.156033][ T9595] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 367.156077][ T9595] ? mas_walk+0x6a6/0x910 [ 367.156131][ T9595] __mmap_region+0x3c7/0x25e0 [ 367.156174][ T9595] ? psi_task_switch+0x2c1/0x8e0 [ 367.156211][ T9595] ? __pfx___mmap_region+0x10/0x10 [ 367.156266][ T9595] ? mark_held_locks+0x49/0x80 [ 367.156305][ T9595] ? finish_task_switch.isra.0+0x221/0xc10 [ 367.156337][ T9595] ? lockdep_hardirqs_on+0x7c/0x110 [ 367.156377][ T9595] ? finish_task_switch.isra.0+0x221/0xc10 [ 367.156410][ T9595] ? rcu_is_watching+0x12/0xc0 [ 367.156441][ T9595] ? trace_sched_exit_tp+0xde/0x130 [ 367.156476][ T9595] ? __schedule+0x1181/0x5de0 [ 367.156595][ T9595] ? trace_cap_capable+0x18d/0x200 [ 367.156638][ T9595] mmap_region+0x1ab/0x3f0 [ 367.156682][ T9595] ? __get_unmapped_area+0x267/0x440 [ 367.156720][ T9595] do_mmap+0xa3e/0x1210 [ 367.156761][ T9595] ? __pfx_do_mmap+0x10/0x10 [ 367.156801][ T9595] ? __pfx_down_write_killable+0x10/0x10 [ 367.156828][ T9595] ? do_raw_spin_lock+0x12c/0x2b0 [ 367.156880][ T9595] vm_mmap_pgoff+0x281/0x450 [ 367.156917][ T9595] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 367.156956][ T9595] ? __x64_sys_futex+0x1e0/0x4c0 [ 367.156990][ T9595] ? __x64_sys_futex+0x1e9/0x4c0 [ 367.157032][ T9595] ksys_mmap_pgoff+0x7d/0x5c0 [ 367.157062][ T9595] ? xfd_validate_state+0x61/0x180 [ 367.157107][ T9595] __x64_sys_mmap+0x125/0x190 [ 367.157154][ T9595] do_syscall_64+0xcd/0x490 [ 367.157200][ T9595] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.157229][ T9595] RIP: 0033:0x7f4d5b38e929 [ 367.157252][ T9595] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 367.157278][ T9595] RSP: 002b:00007f4d5c2ae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 367.157304][ T9595] RAX: ffffffffffffffda RBX: 00007f4d5b5b6080 RCX: 00007f4d5b38e929 [ 367.157323][ T9595] RDX: 00000000000000df RSI: 0000000000000400 RDI: 0000000000000000 [ 367.157339][ T9595] RBP: 00007f4d5b410b39 R08: 0000000000001000 R09: 0000004000028000 [ 367.157356][ T9595] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 367.157372][ T9595] R13: 0000000000000000 R14: 00007f4d5b5b6080 R15: 00007fff242c36a8 [ 367.157410][ T9595] [ 367.703224][ T9601] [U]  [ 367.706274][ T9601] [U] [ 367.709085][ T9601] [U] [ 367.712015][ T9601] [U] [ 367.797767][ T9601] [U] [ 367.800563][ T9601] [U] [ 367.803328][ T9601] [U] [ 367.806078][ T9601] [U] [ 367.841792][ T9601] [U] [ 367.844576][ T9601] [U] [ 367.847418][ T9601] [U] [ 367.850224][ T9601] [U] [ 367.939244][ T9601] [U] [ 367.942154][ T9601] [U] [ 367.944929][ T9601] [U] [ 367.947687][ T9601] [U] [ 368.129311][ T9601] [U] [ 368.132073][ T9601] [U] [ 368.134881][ T9601] [U] [ 368.137616][ T9601] [U] [ 368.284081][ T9615] [U] [ 369.064640][ T9620] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x18000 [ 369.110379][ T9620] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff) [ 369.160435][ T9620] raw: 00fff00000002000 ffffea0000600008 ffffea0000600008 0000000000000000 [ 369.252048][ T9620] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 369.261399][ T9620] page dumped because: unmovable page [ 369.269053][ T9620] page_owner info is not present (never set?) [ 370.646522][ T30] audit: type=1800 audit(1752374138.728:5): pid=9638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.796" name="members" dev="configfs" ino=21661 res=0 errno=0 [ 370.649820][ T9638] netlink: 24 bytes leftover after parsing attributes in process `syz.0.796'. [ 372.789371][ T9670] netlink: zone id is out of range [ 372.894357][ T9670] netlink: set zone limit has 8 unknown bytes [ 374.709951][ T9704] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input34 [ 374.887558][ T9708] phram: not enough arguments [ 374.912137][ T9708] nbd: must specify at least one socket [ 375.406768][ T9718] [U]  [ 375.409675][ T9718] [U] [ 375.412454][ T9718] [U] [ 375.415222][ T9718] [U] [ 375.484661][ T9718] [U] [ 375.487476][ T9718] [U] [ 375.490338][ T9718] [U] [ 375.493091][ T9718] [U] [ 375.587509][ T9718] [U] [ 375.590316][ T9718] [U] [ 375.593077][ T9718] [U] [ 375.595838][ T9718] [U] [ 375.609147][ T9718] [U] [ 375.611946][ T9718] [U] [ 375.614748][ T9718] [U] [ 375.617596][ T9718] [U] [ 375.631078][ T9706] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input35 [ 375.654323][ T9718] [U] [ 375.657122][ T9718] [U] [ 375.659880][ T9718] [U] [ 375.662659][ T9718] [U] [ 375.778419][ T9718] [U] [ 375.781300][ T9718] [U] [ 375.784068][ T9718] [U] [ 375.786824][ T9718] [U] [ 375.800907][ T9718] [U] [ 375.803712][ T9718] [U] [ 375.806474][ T9718] [U] [ 375.809319][ T9718] [U] [ 375.821243][ T9718] [U] [ 375.824034][ T9718] [U] [ 375.826878][ T9718] [U] [ 375.829682][ T9718] [U] [ 375.857461][ T9718] [U] [ 375.860350][ T9718] [U] [ 375.863105][ T9718] [U] [ 375.865948][ T9718] [U] [ 375.897823][ T9721] [U] [ 376.474602][ T9728] ======================================================= [ 376.474602][ T9728] WARNING: The mand mount option has been deprecated and [ 376.474602][ T9728] and is ignored by this kernel. Remove the mand [ 376.474602][ T9728] option from the mount to silence this warning. [ 376.474602][ T9728] ======================================================= [ 378.230432][ T9739] ptrace attach of ""[9751] was attempted by "./syz-executor exec"[9739] [ 380.130370][ T9780] netlink: zone id is out of range [ 380.171983][ T9780] netlink: zone id is out of range [ 380.284610][ T9780] netlink: set zone limit has 8 unknown bytes [ 382.905256][ T9844] FAULT_INJECTION: forcing a failure. [ 382.905256][ T9844] name failslab, interval 1, probability 0, space 0, times 0 [ 382.923428][ T9844] CPU: 1 UID: 0 PID: 9844 Comm: syz.1.840 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 382.923470][ T9844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 382.923487][ T9844] Call Trace: [ 382.923497][ T9844] [ 382.923509][ T9844] dump_stack_lvl+0x16c/0x1f0 [ 382.923561][ T9844] should_fail_ex+0x512/0x640 [ 382.923619][ T9844] should_failslab+0xc2/0x120 [ 382.923654][ T9844] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 382.923700][ T9844] ? skb_clone+0x190/0x3f0 [ 382.923749][ T9844] skb_clone+0x190/0x3f0 [ 382.923791][ T9844] netlink_deliver_tap+0xabd/0xd30 [ 382.923845][ T9844] netlink_unicast+0x62f/0x850 [ 382.923883][ T9844] ? __pfx_netlink_unicast+0x10/0x10 [ 382.923910][ T9844] ? __build_skb_around+0x278/0x3b0 [ 382.923945][ T9844] ? is_vmalloc_addr+0x86/0xa0 [ 382.923990][ T9844] netlink_sendmsg+0x8d1/0xdd0 [ 382.924027][ T9844] ? __pfx_netlink_sendmsg+0x10/0x10 [ 382.924073][ T9844] ____sys_sendmsg+0xa98/0xc70 [ 382.924110][ T9844] ? __pfx_____sys_sendmsg+0x10/0x10 [ 382.924148][ T9844] ? __pfx__kstrtoull+0x10/0x10 [ 382.924191][ T9844] ___sys_sendmsg+0x134/0x1d0 [ 382.924236][ T9844] ? __pfx____sys_sendmsg+0x10/0x10 [ 382.924298][ T9844] ? find_held_lock+0x2b/0x80 [ 382.924355][ T9844] __sys_sendmmsg+0x200/0x420 [ 382.924399][ T9844] ? __pfx___sys_sendmmsg+0x10/0x10 [ 382.924467][ T9844] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 382.924529][ T9844] ? fput+0x70/0xf0 [ 382.924557][ T9844] ? ksys_write+0x1ac/0x250 [ 382.924596][ T9844] ? __pfx_ksys_write+0x10/0x10 [ 382.924653][ T9844] __x64_sys_sendmmsg+0x9c/0x100 [ 382.924694][ T9844] ? lockdep_hardirqs_on+0x7c/0x110 [ 382.924733][ T9844] do_syscall_64+0xcd/0x490 [ 382.924779][ T9844] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.924808][ T9844] RIP: 0033:0x7f4d5b38e929 [ 382.924832][ T9844] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 382.924858][ T9844] RSP: 002b:00007f4d5c2cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 382.924895][ T9844] RAX: ffffffffffffffda RBX: 00007f4d5b5b5fa0 RCX: 00007f4d5b38e929 [ 382.924915][ T9844] RDX: 0000000000000007 RSI: 0000200000000200 RDI: 0000000000000003 [ 382.924933][ T9844] RBP: 00007f4d5c2cf090 R08: 0000000000000000 R09: 0000000000000000 [ 382.924952][ T9844] R10: 0000000000004008 R11: 0000000000000246 R12: 0000000000000001 [ 382.924970][ T9844] R13: 0000000000000000 R14: 00007f4d5b5b5fa0 R15: 00007fff242c36a8 [ 382.925011][ T9844] [ 383.653260][ T9843] netlink: zone id is out of range [ 383.683038][ T9843] netlink: zone id is out of range [ 383.797213][ T9843] netlink: set zone limit has 8 unknown bytes [ 383.947041][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.960862][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 386.782084][ T9900] netlink: zone id is out of range [ 386.904041][ T9900] netlink: zone id is out of range [ 387.097340][ T9900] netlink: set zone limit has 8 unknown bytes [ 387.575546][ T9927] netlink: 8 bytes leftover after parsing attributes in process `syz.3.858'. [ 390.269621][ T9969] netlink: zone id is out of range [ 390.328877][ T9969] netlink: zone id is out of range [ 390.435070][ T9969] netlink: set zone limit has 8 unknown bytes [ 390.845010][ T9978] FAULT_INJECTION: forcing a failure. [ 390.845010][ T9978] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 390.912807][ T9978] CPU: 0 UID: 0 PID: 9978 Comm: syz.0.873 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 390.912835][ T9978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 390.912845][ T9978] Call Trace: [ 390.912852][ T9978] [ 390.912859][ T9978] dump_stack_lvl+0x16c/0x1f0 [ 390.912891][ T9978] should_fail_ex+0x512/0x640 [ 390.912920][ T9978] strncpy_from_user+0x3b/0x2e0 [ 390.912947][ T9978] getname_flags.part.0+0x8f/0x550 [ 390.912971][ T9978] getname_flags+0x93/0xf0 [ 390.912998][ T9978] do_sys_openat2+0xb8/0x1d0 [ 390.913018][ T9978] ? __pfx_do_sys_openat2+0x10/0x10 [ 390.913045][ T9978] __x64_sys_openat+0x174/0x210 [ 390.913066][ T9978] ? __pfx___x64_sys_openat+0x10/0x10 [ 390.913094][ T9978] do_syscall_64+0xcd/0x490 [ 390.913122][ T9978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.913140][ T9978] RIP: 0033:0x7f020238d290 [ 390.913154][ T9978] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 390.913171][ T9978] RSP: 002b:00007f0203157f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 390.913188][ T9978] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f020238d290 [ 390.913199][ T9978] RDX: 0000000000000002 RSI: 00007f0203157fa0 RDI: 00000000ffffff9c [ 390.913209][ T9978] RBP: 00007f0203157fa0 R08: 0000000000000000 R09: 00007f0203157cd5 [ 390.913220][ T9978] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 390.913230][ T9978] R13: 0000000000000000 R14: 00007f02025b5fa0 R15: 00007ffd78be9ad8 [ 390.913251][ T9978] [ 397.227553][ T30] audit: type=1800 audit(1752374165.308:6): pid=10079 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.897" name="SYSV0000000a" dev="hugetlbfs" ino=0 res=0 errno=0 [ 398.357332][T10124] FAULT_INJECTION: forcing a failure. [ 398.357332][T10124] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 398.432898][T10124] CPU: 1 UID: 0 PID: 10124 Comm: syz.2.907 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 398.432935][T10124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 398.432952][T10124] Call Trace: [ 398.432962][T10124] [ 398.432973][T10124] dump_stack_lvl+0x16c/0x1f0 [ 398.433021][T10124] should_fail_ex+0x512/0x640 [ 398.433069][T10124] should_fail_alloc_page+0xe7/0x130 [ 398.433100][T10124] prepare_alloc_pages+0x3c2/0x610 [ 398.433142][T10124] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 398.433189][T10124] ? __pfx_stack_trace_save+0x10/0x10 [ 398.433220][T10124] ? stack_depot_save_flags+0x28/0xa40 [ 398.433269][T10124] ? look_up_lock_class+0x59/0x150 [ 398.433310][T10124] ? register_lock_class+0x41/0x4c0 [ 398.433349][T10124] ? find_held_lock+0x2b/0x80 [ 398.433380][T10124] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 398.433426][T10124] ? look_up_lock_class+0x59/0x150 [ 398.433478][T10124] ? register_lock_class+0x41/0x4c0 [ 398.433532][T10124] ? __lock_acquire+0xb8a/0x1c90 [ 398.433574][T10124] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 398.433620][T10124] ? policy_nodemask+0xea/0x4e0 [ 398.433652][T10124] alloc_pages_mpol+0x1fb/0x550 [ 398.433683][T10124] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 398.433724][T10124] alloc_pages_noprof+0x131/0x390 [ 398.433754][T10124] __pmd_alloc+0x3b/0x930 [ 398.433791][T10124] huge_pte_alloc+0x41d/0x5b0 [ 398.433834][T10124] hugetlb_fault+0x373/0x3070 [ 398.433879][T10124] ? __pfx_hugetlb_fault+0x10/0x10 [ 398.433944][T10124] ? find_vma+0xbf/0x140 [ 398.433972][T10124] ? __pfx_find_vma+0x10/0x10 [ 398.434008][T10124] handle_mm_fault+0xbfa/0xd10 [ 398.434050][T10124] ? __pkru_allows_pkey+0x51/0xb0 [ 398.434095][T10124] do_user_addr_fault+0x7a6/0x1370 [ 398.434142][T10124] ? rcu_is_watching+0x12/0xc0 [ 398.434179][T10124] exc_page_fault+0x5c/0xb0 [ 398.434220][T10124] asm_exc_page_fault+0x26/0x30 [ 398.434248][T10124] RIP: 0010:rep_movs_alternative+0x11/0x90 [ 398.434282][T10124] Code: e9 84 11 04 00 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f 8a 06 <88> 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 4d 11 04 00 66 66 2e 0f [ 398.434309][T10124] RSP: 0018:ffffc9000bdd7b18 EFLAGS: 00050202 [ 398.434333][T10124] RAX: 00000000000000fa RBX: 0000000000000001 RCX: 0000000000000001 [ 398.434351][T10124] RDX: fffff520017baf83 RSI: ffffc9000bdd7c18 RDI: 0000000000000000 [ 398.434369][T10124] RBP: 0000000000000000 R08: 0000000000000000 R09: fffff520017baf83 [ 398.434386][T10124] R10: 0000000000000000 R11: 0000000000000001 R12: ffffc9000bdd7c18 [ 398.434402][T10124] R13: 0000000000000001 R14: 00007ffffffff000 R15: 0000000000000000 [ 398.434471][T10124] _copy_to_user+0xbb/0xd0 [ 398.434520][T10124] mousedev_read+0x3a9/0x7d0 [ 398.434563][T10124] ? __pfx_mousedev_read+0x10/0x10 [ 398.434601][T10124] ? __pfx_autoremove_wake_function+0x10/0x10 [ 398.434639][T10124] ? apparmor_file_permission+0x251/0x400 [ 398.434674][T10124] ? bpf_lsm_file_permission+0x9/0x10 [ 398.434705][T10124] ? security_file_permission+0x71/0x210 [ 398.434744][T10124] ? rw_verify_area+0xcf/0x680 [ 398.434781][T10124] ? __pfx_mousedev_read+0x10/0x10 [ 398.434814][T10124] vfs_readv+0x5c1/0x8b0 [ 398.434861][T10124] ? __pfx_vfs_readv+0x10/0x10 [ 398.434929][T10124] ? __fget_files+0x20e/0x3c0 [ 398.434966][T10124] ? __fget_files+0x180/0x3c0 [ 398.435008][T10124] ? do_readv+0x28c/0x340 [ 398.435038][T10124] do_readv+0x28c/0x340 [ 398.435075][T10124] ? __pfx_do_readv+0x10/0x10 [ 398.435125][T10124] do_syscall_64+0xcd/0x490 [ 398.435169][T10124] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.435197][T10124] RIP: 0033:0x7fce8438e929 [ 398.435219][T10124] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 398.435246][T10124] RSP: 002b:00007fce851d6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 398.435271][T10124] RAX: ffffffffffffffda RBX: 00007fce845b5fa0 RCX: 00007fce8438e929 [ 398.435289][T10124] RDX: 0000000000000001 RSI: 0000200000000a80 RDI: 0000000000000003 [ 398.435307][T10124] RBP: 00007fce851d6090 R08: 0000000000000000 R09: 0000000000000000 [ 398.435324][T10124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 398.435340][T10124] R13: 0000000000000000 R14: 00007fce845b5fa0 R15: 00007ffcdbfe0e38 [ 398.435381][T10124] [ 398.865499][ C1] vkms_vblank_simulate: vblank timer overrun [ 401.180183][T10163] netlink: zone id is out of range [ 401.202021][T10163] netlink: zone id is out of range [ 401.271650][T10163] netlink: set zone limit has 8 unknown bytes [ 401.488457][T10170] FAULT_INJECTION: forcing a failure. [ 401.488457][T10170] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 401.585464][T10170] CPU: 1 UID: 0 PID: 10170 Comm: syz.3.919 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 401.585506][T10170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 401.585522][T10170] Call Trace: [ 401.585532][T10170] [ 401.585543][T10170] dump_stack_lvl+0x16c/0x1f0 [ 401.585592][T10170] should_fail_ex+0x512/0x640 [ 401.585641][T10170] _copy_from_user+0x2e/0xd0 [ 401.585688][T10170] move_addr_to_kernel+0x65/0x170 [ 401.585726][T10170] __copy_msghdr+0x386/0x470 [ 401.585770][T10170] copy_msghdr_from_user+0xc1/0x160 [ 401.585812][T10170] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 401.585876][T10170] ___sys_sendmsg+0xfe/0x1d0 [ 401.585923][T10170] ? __pfx____sys_sendmsg+0x10/0x10 [ 401.585962][T10170] ? __lock_acquire+0x622/0x1c90 [ 401.586051][T10170] __sys_sendmsg+0x16d/0x220 [ 401.586096][T10170] ? __pfx___sys_sendmsg+0x10/0x10 [ 401.586166][T10170] do_syscall_64+0xcd/0x490 [ 401.586212][T10170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.586243][T10170] RIP: 0033:0x7efc12d8e929 [ 401.586267][T10170] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 401.586296][T10170] RSP: 002b:00007efc13b85038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 401.586325][T10170] RAX: ffffffffffffffda RBX: 00007efc12fb5fa0 RCX: 00007efc12d8e929 [ 401.586345][T10170] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 401.586363][T10170] RBP: 00007efc13b85090 R08: 0000000000000000 R09: 0000000000000000 [ 401.586380][T10170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 401.586397][T10170] R13: 0000000000000000 R14: 00007efc12fb5fa0 R15: 00007ffe47d939d8 [ 401.586443][T10170] [ 403.729361][T10198] Unable to find swap-space signature [ 404.754611][T10221] FAULT_INJECTION: forcing a failure. [ 404.754611][T10221] name failslab, interval 1, probability 0, space 0, times 0 [ 404.795184][T10221] CPU: 1 UID: 0 PID: 10221 Comm: syz.0.940 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 404.795227][T10221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 404.795244][T10221] Call Trace: [ 404.795254][T10221] [ 404.795265][T10221] dump_stack_lvl+0x16c/0x1f0 [ 404.795314][T10221] should_fail_ex+0x512/0x640 [ 404.795354][T10221] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 404.795397][T10221] should_failslab+0xc2/0x120 [ 404.795424][T10221] __kmalloc_cache_noprof+0x6a/0x3e0 [ 404.795463][T10221] ? snd_seq_oss_timer_new+0x43/0x230 [ 404.795501][T10221] snd_seq_oss_timer_new+0x43/0x230 [ 404.795530][T10221] snd_seq_oss_open+0x5ce/0xa20 [ 404.795567][T10221] odev_open+0x6f/0x90 [ 404.795607][T10221] ? __pfx_odev_open+0x10/0x10 [ 404.795649][T10221] soundcore_open+0x40c/0x580 [ 404.795695][T10221] ? __pfx_soundcore_open+0x10/0x10 [ 404.795739][T10221] chrdev_open+0x231/0x6a0 [ 404.795783][T10221] ? __pfx_apparmor_file_open+0x10/0x10 [ 404.795819][T10221] ? __pfx_chrdev_open+0x10/0x10 [ 404.795864][T10221] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 404.795906][T10221] do_dentry_open+0x744/0x1c10 [ 404.795951][T10221] ? __pfx_chrdev_open+0x10/0x10 [ 404.796004][T10221] vfs_open+0x82/0x3f0 [ 404.796041][T10221] path_openat+0x1de4/0x2cb0 [ 404.796096][T10221] ? __pfx_path_openat+0x10/0x10 [ 404.796171][T10221] ? __lock_acquire+0xb8a/0x1c90 [ 404.796217][T10221] do_filp_open+0x20b/0x470 [ 404.796259][T10221] ? __pfx_do_filp_open+0x10/0x10 [ 404.796332][T10221] ? alloc_fd+0x471/0x7d0 [ 404.796382][T10221] do_sys_openat2+0x11b/0x1d0 [ 404.796413][T10221] ? __pfx_do_sys_openat2+0x10/0x10 [ 404.796462][T10221] __x64_sys_openat+0x174/0x210 [ 404.796495][T10221] ? __pfx___x64_sys_openat+0x10/0x10 [ 404.796527][T10221] ? ksys_write+0x1ac/0x250 [ 404.796582][T10221] do_syscall_64+0xcd/0x490 [ 404.796628][T10221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.796657][T10221] RIP: 0033:0x7f020238e929 [ 404.796680][T10221] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 404.796708][T10221] RSP: 002b:00007f0203158038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 404.796736][T10221] RAX: ffffffffffffffda RBX: 00007f02025b5fa0 RCX: 00007f020238e929 [ 404.796755][T10221] RDX: 0000000000000002 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 404.796773][T10221] RBP: 00007f0203158090 R08: 0000000000000000 R09: 0000000000000000 [ 404.796790][T10221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 404.796807][T10221] R13: 0000000000000000 R14: 00007f02025b5fa0 R15: 00007ffd78be9ad8 [ 404.796847][T10221] [ 404.796858][T10221] ALSA: seq_oss: can't alloc timer [ 408.795806][T10273] netlink: zone id is out of range [ 408.879779][T10273] netlink: zone id is out of range [ 408.955419][T10273] netlink: set zone limit has 8 unknown bytes [ 412.410363][T10340] XFS: Clearing xfsstats [ 412.509298][T10333] netlink: zone id is out of range [ 412.594775][T10333] netlink: zone id is out of range [ 412.690381][T10346] ubi: mtd0 is already attached to ubi0 [ 412.752143][T10349] netlink: 28 bytes leftover after parsing attributes in process `syz.0.960'. [ 412.762475][T10333] netlink: set zone limit has 8 unknown bytes [ 412.765952][T10349] ipvlan1: entered allmulticast mode [ 412.775209][T10349] veth0_vlan: entered allmulticast mode [ 412.846217][T10351] FAULT_INJECTION: forcing a failure. [ 412.846217][T10351] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 412.862664][T10351] CPU: 1 UID: 0 PID: 10351 Comm: syz.0.960 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 412.862704][T10351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 412.862721][T10351] Call Trace: [ 412.862731][T10351] [ 412.862742][T10351] dump_stack_lvl+0x16c/0x1f0 [ 412.862791][T10351] should_fail_ex+0x512/0x640 [ 412.862837][T10351] _copy_from_iter+0x463/0x16f0 [ 412.862886][T10351] ? rcu_is_watching+0x12/0xc0 [ 412.862918][T10351] ? __pfx__copy_from_iter+0x10/0x10 [ 412.862964][T10351] ? kmem_cache_alloc_noprof+0x21e/0x3b0 [ 412.863008][T10351] ? __asan_memset+0x23/0x50 [ 412.863044][T10351] ? __build_skb_around+0x278/0x3b0 [ 412.863076][T10351] ? is_vmalloc_addr+0x86/0xa0 [ 412.863121][T10351] netlink_sendmsg+0x829/0xdd0 [ 412.863158][T10351] ? __pfx_netlink_sendmsg+0x10/0x10 [ 412.863216][T10351] ____sys_sendmsg+0xa98/0xc70 [ 412.863254][T10351] ? __pfx_____sys_sendmsg+0x10/0x10 [ 412.863294][T10351] ? __pfx__kstrtoull+0x10/0x10 [ 412.863344][T10351] ___sys_sendmsg+0x134/0x1d0 [ 412.863388][T10351] ? __pfx____sys_sendmsg+0x10/0x10 [ 412.863449][T10351] ? find_held_lock+0x2b/0x80 [ 412.863505][T10351] __sys_sendmmsg+0x200/0x420 [ 412.863552][T10351] ? __pfx___sys_sendmmsg+0x10/0x10 [ 412.863608][T10351] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 412.863669][T10351] ? fput+0x70/0xf0 [ 412.863695][T10351] ? ksys_write+0x1ac/0x250 [ 412.863735][T10351] ? __pfx_ksys_write+0x10/0x10 [ 412.863782][T10351] __x64_sys_sendmmsg+0x9c/0x100 [ 412.863823][T10351] ? lockdep_hardirqs_on+0x7c/0x110 [ 412.863863][T10351] do_syscall_64+0xcd/0x490 [ 412.863909][T10351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.863938][T10351] RIP: 0033:0x7f020238e929 [ 412.863961][T10351] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 412.863988][T10351] RSP: 002b:00007f0203137038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 412.864015][T10351] RAX: ffffffffffffffda RBX: 00007f02025b6080 RCX: 00007f020238e929 [ 412.864034][T10351] RDX: 0000000000000007 RSI: 0000200000000200 RDI: 0000000000000004 [ 412.864050][T10351] RBP: 00007f0203137090 R08: 0000000000000000 R09: 0000000000000000 [ 412.864073][T10351] R10: 0000000000004008 R11: 0000000000000246 R12: 0000000000000001 [ 412.864090][T10351] R13: 0000000000000000 R14: 00007f02025b6080 R15: 00007ffd78be9ad8 [ 412.864128][T10351] [ 413.335945][T10357] netlink: 346 bytes leftover after parsing attributes in process `syz.0.962'. [ 413.679010][T10369] FAULT_INJECTION: forcing a failure. [ 413.679010][T10369] name failslab, interval 1, probability 0, space 0, times 0 [ 413.752694][T10369] CPU: 1 UID: 0 PID: 10369 Comm: syz.3.964 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 413.752736][T10369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 413.752752][T10369] Call Trace: [ 413.752761][T10369] [ 413.752772][T10369] dump_stack_lvl+0x16c/0x1f0 [ 413.752815][T10369] should_fail_ex+0x512/0x640 [ 413.752850][T10369] ? __kmalloc_noprof+0xbf/0x510 [ 413.752890][T10369] ? constrain_params_by_rules+0x175/0xca0 [ 413.752918][T10369] should_failslab+0xc2/0x120 [ 413.752943][T10369] __kmalloc_noprof+0xd2/0x510 [ 413.752978][T10369] ? unwind_get_return_address+0x59/0xa0 [ 413.753035][T10369] constrain_params_by_rules+0x175/0xca0 [ 413.753072][T10369] ? stack_trace_save+0x8e/0xc0 [ 413.753104][T10369] ? stack_depot_save_flags+0x28/0xa40 [ 413.753148][T10369] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 413.753174][T10369] ? snd_pcm_hw_param_near.constprop.0+0x72f/0x8e0 [ 413.753202][T10369] ? snd_pcm_oss_change_params_locked+0x1398/0x3a30 [ 413.753237][T10369] ? __kasan_kmalloc+0xaa/0xb0 [ 413.753271][T10369] ? snd_pcm_hw_param_near.constprop.0+0xbc/0x8e0 [ 413.753297][T10369] ? snd_pcm_oss_change_params_locked+0x13f9/0x3a30 [ 413.753324][T10369] ? snd_pcm_oss_get_active_substream+0x168/0x1d0 [ 413.753367][T10369] ? snd_interval_refine+0x2fa/0x580 [ 413.753406][T10369] snd_pcm_hw_refine+0x7de/0xad0 [ 413.753442][T10369] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 413.753486][T10369] ? _snd_pcm_hw_param_min+0x259/0x630 [ 413.753518][T10369] snd_pcm_hw_param_near.constprop.0+0x58a/0x8e0 [ 413.753553][T10369] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 413.753582][T10369] ? __asan_memset+0x23/0x50 [ 413.753614][T10369] ? calc_src_frames.isra.0+0x187/0x1d0 [ 413.753641][T10369] ? calc_dst_frames.constprop.0.isra.0+0x103/0x130 [ 413.753679][T10369] snd_pcm_oss_change_params_locked+0x13f9/0x3a30 [ 413.753728][T10369] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 413.753789][T10369] snd_pcm_oss_get_active_substream+0x168/0x1d0 [ 413.753826][T10369] snd_pcm_oss_ioctl+0x21e9/0x37a0 [ 413.753857][T10369] ? hook_file_ioctl_common+0x145/0x410 [ 413.753887][T10369] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 413.753920][T10369] ? __fget_files+0x20e/0x3c0 [ 413.753961][T10369] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 413.753992][T10369] __x64_sys_ioctl+0x18b/0x210 [ 413.754036][T10369] do_syscall_64+0xcd/0x490 [ 413.754078][T10369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.754104][T10369] RIP: 0033:0x7efc12d8e929 [ 413.754126][T10369] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 413.754151][T10369] RSP: 002b:00007efc13b64038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 413.754177][T10369] RAX: ffffffffffffffda RBX: 00007efc12fb6080 RCX: 00007efc12d8e929 [ 413.754194][T10369] RDX: 0000000000000000 RSI: 00000000c0045002 RDI: 0000000000000003 [ 413.754209][T10369] RBP: 00007efc13b64090 R08: 0000000000000000 R09: 0000000000000000 [ 413.754225][T10369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 413.754240][T10369] R13: 0000000000000001 R14: 00007efc12fb6080 R15: 00007ffe47d939d8 [ 413.754276][T10369] [ 414.757105][T10391] FAULT_INJECTION: forcing a failure. [ 414.757105][T10391] name failslab, interval 1, probability 0, space 0, times 0 [ 414.770795][T10391] CPU: 1 UID: 0 PID: 10391 Comm: syz.1.968 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 414.770826][T10391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 414.770836][T10391] Call Trace: [ 414.770843][T10391] [ 414.770850][T10391] dump_stack_lvl+0x16c/0x1f0 [ 414.770880][T10391] should_fail_ex+0x512/0x640 [ 414.770905][T10391] ? fs_reclaim_acquire+0xae/0x150 [ 414.770928][T10391] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 414.770953][T10391] should_failslab+0xc2/0x120 [ 414.770970][T10391] __kmalloc_noprof+0xd2/0x510 [ 414.770996][T10391] ? trace_kmalloc+0x2b/0xd0 [ 414.771013][T10391] ? __kmalloc_noprof+0x242/0x510 [ 414.771041][T10391] tomoyo_realpath_from_path+0xc2/0x6e0 [ 414.771121][T10391] ? tomoyo_fill_path_info+0x233/0x420 [ 414.771142][T10391] tomoyo_mount_acl+0x1ae/0x850 [ 414.771163][T10391] ? kernel_text_address+0x8d/0x100 [ 414.771179][T10391] ? __kernel_text_address+0xd/0x40 [ 414.771195][T10391] ? unwind_get_return_address+0x59/0xa0 [ 414.771223][T10391] ? arch_stack_walk+0xa6/0x100 [ 414.771242][T10391] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 414.771269][T10391] ? stack_trace_save+0x8e/0xc0 [ 414.771310][T10391] ? tomoyo_domain+0xbb/0x150 [ 414.771337][T10391] ? tomoyo_profile+0x47/0x60 [ 414.771366][T10391] tomoyo_mount_permission+0x16d/0x420 [ 414.771388][T10391] ? tomoyo_mount_permission+0x14f/0x420 [ 414.771411][T10391] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 414.771446][T10391] security_sb_mount+0x9b/0x260 [ 414.771467][T10391] path_mount+0x128/0x2020 [ 414.771495][T10391] ? kmem_cache_free+0x2d1/0x4d0 [ 414.771519][T10391] ? __pfx_path_mount+0x10/0x10 [ 414.771549][T10391] ? putname+0x154/0x1a0 [ 414.771568][T10391] __x64_sys_mount+0x28d/0x310 [ 414.771596][T10391] ? __pfx___x64_sys_mount+0x10/0x10 [ 414.771629][T10391] do_syscall_64+0xcd/0x490 [ 414.771657][T10391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.771676][T10391] RIP: 0033:0x7f4d5b38e929 [ 414.771696][T10391] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 414.771713][T10391] RSP: 002b:00007f4d5c2cf038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 414.771730][T10391] RAX: ffffffffffffffda RBX: 00007f4d5b5b5fa0 RCX: 00007f4d5b38e929 [ 414.771741][T10391] RDX: 00002000000001c0 RSI: 0000200000000180 RDI: 0000000000000000 [ 414.771752][T10391] RBP: 00007f4d5c2cf090 R08: 0000000000000000 R09: 0000000000000000 [ 414.771763][T10391] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000001 [ 414.771772][T10391] R13: 0000000000000000 R14: 00007f4d5b5b5fa0 R15: 00007fff242c36a8 [ 414.771794][T10391] [ 414.772052][T10391] ERROR: Out of memory at tomoyo_realpath_from_path. [ 415.193678][T10384] FAULT_INJECTION: forcing a failure. [ 415.193678][T10384] name failslab, interval 1, probability 0, space 0, times 0 [ 415.206722][T10384] CPU: 1 UID: 0 PID: 10384 Comm: syz.2.966 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 415.206763][T10384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 415.206781][T10384] Call Trace: [ 415.206791][T10384] [ 415.206804][T10384] dump_stack_lvl+0x16c/0x1f0 [ 415.206853][T10384] should_fail_ex+0x512/0x640 [ 415.206892][T10384] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 415.206937][T10384] should_failslab+0xc2/0x120 [ 415.206965][T10384] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 415.207003][T10384] ? __proc_create+0xc3/0x8c0 [ 415.207049][T10384] ? __proc_create+0x2ce/0x8c0 [ 415.207095][T10384] __proc_create+0x2ce/0x8c0 [ 415.207156][T10384] ? __pfx___proc_create+0x10/0x10 [ 415.207210][T10384] ? _raw_write_unlock+0x28/0x50 [ 415.207250][T10384] ? proc_register+0x314/0x5f0 [ 415.207280][T10384] proc_create_reg+0x7d/0x180 [ 415.207313][T10384] proc_create_seq_private+0x8e/0x1d0 [ 415.207346][T10384] ? __pfx_proc_create_seq_private+0x10/0x10 [ 415.207390][T10384] xt_proto_init+0x45b/0xc10 [ 415.207433][T10384] ? __pfx_xt_proto_init+0x10/0x10 [ 415.207466][T10384] ? __kmalloc_noprof+0x242/0x510 [ 415.207505][T10384] ? __kasan_kmalloc+0xaa/0xb0 [ 415.207550][T10384] ? __pfx_arp_tables_net_init+0x10/0x10 [ 415.207596][T10384] ops_init+0x1df/0x5f0 [ 415.207646][T10384] setup_net+0x1ff/0x510 [ 415.207689][T10384] ? lockdep_init_map_type+0x5c/0x280 [ 415.207734][T10384] ? __pfx_setup_net+0x10/0x10 [ 415.207784][T10384] ? debug_mutex_init+0x37/0x70 [ 415.207821][T10384] copy_net_ns+0x2a6/0x5f0 [ 415.207854][T10384] create_new_namespaces+0x3ea/0xa90 [ 415.207895][T10384] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 415.207935][T10384] ksys_unshare+0x45b/0xa40 [ 415.207979][T10384] ? __pfx_ksys_unshare+0x10/0x10 [ 415.208025][T10384] ? syscall_user_dispatch+0x78/0x140 [ 415.208066][T10384] __x64_sys_unshare+0x31/0x40 [ 415.208116][T10384] do_syscall_64+0xcd/0x490 [ 415.208166][T10384] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.208199][T10384] RIP: 0033:0x7fce8438e929 [ 415.208225][T10384] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 415.208257][T10384] RSP: 002b:00007fce851b5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 415.208287][T10384] RAX: ffffffffffffffda RBX: 00007fce845b6080 RCX: 00007fce8438e929 [ 415.208308][T10384] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 415.208336][T10384] RBP: 00007fce84410b39 R08: 0000000000000000 R09: 0000000000000000 [ 415.208354][T10384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 415.208370][T10384] R13: 0000000000000000 R14: 00007fce845b6080 R15: 00007ffcdbfe0e38 [ 415.208409][T10384] [ 415.837060][T10406] kAFS: No cell specified [ 416.430912][T10415] FAULT_INJECTION: forcing a failure. [ 416.430912][T10415] name failslab, interval 1, probability 0, space 0, times 0 [ 416.455275][T10415] CPU: 1 UID: 0 PID: 10415 Comm: syz.3.976 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 416.455323][T10415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 416.455343][T10415] Call Trace: [ 416.455354][T10415] [ 416.455366][T10415] dump_stack_lvl+0x16c/0x1f0 [ 416.455414][T10415] should_fail_ex+0x512/0x640 [ 416.455454][T10415] ? __kvmalloc_node_noprof+0x124/0x620 [ 416.455501][T10415] should_failslab+0xc2/0x120 [ 416.455531][T10415] __kvmalloc_node_noprof+0x137/0x620 [ 416.455572][T10415] ? seq_read_iter+0x826/0x12c0 [ 416.455604][T10415] ? __lock_acquire+0xb8a/0x1c90 [ 416.455653][T10415] ? seq_read_iter+0x826/0x12c0 [ 416.455685][T10415] seq_read_iter+0x826/0x12c0 [ 416.455725][T10415] ? __mutex_trylock_common+0xe9/0x250 [ 416.455777][T10415] kernfs_fop_read_iter+0x40f/0x5a0 [ 416.455809][T10415] ? rw_verify_area+0xcf/0x680 [ 416.455851][T10415] vfs_read+0x8bf/0xc60 [ 416.455898][T10415] ? __pfx___mutex_lock+0x10/0x10 [ 416.455940][T10415] ? __pfx_vfs_read+0x10/0x10 [ 416.456035][T10415] ksys_read+0x12a/0x250 [ 416.456078][T10415] ? __pfx_ksys_read+0x10/0x10 [ 416.456136][T10415] do_syscall_64+0xcd/0x490 [ 416.456184][T10415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.456213][T10415] RIP: 0033:0x7efc12d8e929 [ 416.456238][T10415] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 416.456268][T10415] RSP: 002b:00007efc13b85038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 416.456303][T10415] RAX: ffffffffffffffda RBX: 00007efc12fb5fa0 RCX: 00007efc12d8e929 [ 416.456323][T10415] RDX: 0000000000000098 RSI: 0000200000000340 RDI: 0000000000000003 [ 416.456341][T10415] RBP: 00007efc12e10b39 R08: 0000000000000000 R09: 0000000000000000 [ 416.456359][T10415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 416.456376][T10415] R13: 0000000000000000 R14: 00007efc12fb5fa0 R15: 00007ffe47d939d8 [ 416.456417][T10415] [ 420.135404][T10464] ALSA: mixer_oss: invalid OSS volume '' [ 421.537409][T10461] Invalid ELF header magic: != ELF [ 421.825193][ T30] audit: type=1800 audit(1752374189.908:7): pid=10470 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.988" name="SYSVffffffff" dev="tmpfs" ino=0 res=0 errno=0 [ 423.263660][T10516] FAULT_INJECTION: forcing a failure. [ 423.263660][T10516] name failslab, interval 1, probability 0, space 0, times 0 [ 423.589700][T10516] CPU: 1 UID: 0 PID: 10516 Comm: syz.1.994 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 423.589745][T10516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 423.589762][T10516] Call Trace: [ 423.589772][T10516] [ 423.589784][T10516] dump_stack_lvl+0x16c/0x1f0 [ 423.589833][T10516] should_fail_ex+0x512/0x640 [ 423.589877][T10516] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 423.589922][T10516] should_failslab+0xc2/0x120 [ 423.589953][T10516] __kmalloc_cache_noprof+0x6a/0x3e0 [ 423.590006][T10516] ? kernfs_fop_open+0xa3a/0xda0 [ 423.590046][T10516] kernfs_fop_open+0xa3a/0xda0 [ 423.590080][T10516] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 423.590131][T10516] do_dentry_open+0x744/0x1c10 [ 423.590178][T10516] ? __pfx_kernfs_fop_open+0x10/0x10 [ 423.590219][T10516] vfs_open+0x82/0x3f0 [ 423.590254][T10516] path_openat+0x1de4/0x2cb0 [ 423.590313][T10516] ? __pfx_path_openat+0x10/0x10 [ 423.590360][T10516] ? __lock_acquire+0xb8a/0x1c90 [ 423.590408][T10516] do_filp_open+0x20b/0x470 [ 423.590452][T10516] ? __pfx_do_filp_open+0x10/0x10 [ 423.590529][T10516] ? alloc_fd+0x471/0x7d0 [ 423.590583][T10516] do_sys_openat2+0x11b/0x1d0 [ 423.590617][T10516] ? __pfx_do_sys_openat2+0x10/0x10 [ 423.590669][T10516] __x64_sys_openat+0x174/0x210 [ 423.590710][T10516] ? __pfx___x64_sys_openat+0x10/0x10 [ 423.590763][T10516] do_syscall_64+0xcd/0x490 [ 423.590812][T10516] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.590843][T10516] RIP: 0033:0x7f4d5b38e929 [ 423.590869][T10516] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 423.590897][T10516] RSP: 002b:00007f4d5c2cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 423.590926][T10516] RAX: ffffffffffffffda RBX: 00007f4d5b5b5fa0 RCX: 00007f4d5b38e929 [ 423.590946][T10516] RDX: 00000000001a1842 RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 423.590966][T10516] RBP: 00007f4d5b410b39 R08: 0000000000000000 R09: 0000000000000000 [ 423.590996][T10516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 423.591014][T10516] R13: 0000000000000000 R14: 00007f4d5b5b5fa0 R15: 00007fff242c36a8 [ 423.591055][T10516] [ 426.360439][T10531] ALSA: mixer_oss: invalid OSS volume '' [ 434.303750][T10643] ALSA: mixer_oss: invalid OSS volume '' [ 434.320930][T10643] ubi: mtd0 is already attached to ubi0 [ 435.717024][T10663] netlink: 346 bytes leftover after parsing attributes in process `syz.1.1031'. [ 437.501030][T10684] netlink: zone id is out of range [ 437.635336][T10684] netlink: zone id is out of range [ 437.881573][T10684] netlink: set zone limit has 8 unknown bytes [ 440.960364][T10728] netlink: 346 bytes leftover after parsing attributes in process `syz.3.1044'. [ 442.670996][T10751] ubi: mtd0 is already attached to ubi0 [ 442.923342][T10748] ALSA: mixer_oss: invalid OSS volume '' [ 444.111573][T10771] FAULT_INJECTION: forcing a failure. [ 444.111573][T10771] name failslab, interval 1, probability 0, space 0, times 0 [ 444.124325][T10771] CPU: 1 UID: 0 PID: 10771 Comm: syz.3.1051 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 444.124351][T10771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 444.124361][T10771] Call Trace: [ 444.124369][T10771] [ 444.124376][T10771] dump_stack_lvl+0x16c/0x1f0 [ 444.124407][T10771] should_fail_ex+0x512/0x640 [ 444.124432][T10771] ? __kmalloc_noprof+0xbf/0x510 [ 444.124460][T10771] ? create_ruleset+0x21/0x140 [ 444.124486][T10771] should_failslab+0xc2/0x120 [ 444.124503][T10771] __kmalloc_noprof+0xd2/0x510 [ 444.124528][T10771] ? __might_fault+0xe3/0x190 [ 444.124553][T10771] ? __might_fault+0xe3/0x190 [ 444.124581][T10771] create_ruleset+0x21/0x140 [ 444.124608][T10771] landlock_create_ruleset+0x77/0x230 [ 444.124628][T10771] __do_sys_landlock_create_ruleset+0x255/0x4e0 [ 444.124657][T10771] ? __pfx___do_sys_landlock_create_ruleset+0x10/0x10 [ 444.124693][T10771] do_syscall_64+0xcd/0x490 [ 444.124720][T10771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.124739][T10771] RIP: 0033:0x7efc12d8e929 [ 444.124753][T10771] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 444.124770][T10771] RSP: 002b:00007efc13b85038 EFLAGS: 00000246 ORIG_RAX: 00000000000001bc [ 444.124787][T10771] RAX: ffffffffffffffda RBX: 00007efc12fb5fa0 RCX: 00007efc12d8e929 [ 444.124798][T10771] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 0000200000000000 [ 444.124808][T10771] RBP: 00007efc12e10b39 R08: 0000000000000000 R09: 0000000000000000 [ 444.124818][T10771] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 444.124829][T10771] R13: 0000000000000000 R14: 00007efc12fb5fa0 R15: 00007ffe47d939d8 [ 444.124850][T10771] [ 445.413176][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.419557][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 447.355386][T10804] netlink: zone id is out of range [ 447.434911][T10804] netlink: zone id is out of range [ 447.613989][T10804] netlink: set zone limit has 8 unknown bytes [ 448.320748][T10836] netlink: 346 bytes leftover after parsing attributes in process `syz.0.1070'. [ 449.996662][T10860] netlink: 346 bytes leftover after parsing attributes in process `syz.0.1074'. [ 452.315104][T10879] FAULT_INJECTION: forcing a failure. [ 452.315104][T10879] name failslab, interval 1, probability 0, space 0, times 0 [ 452.335744][T10879] CPU: 0 UID: 0 PID: 10879 Comm: syz.0.1078 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 452.335786][T10879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 452.335804][T10879] Call Trace: [ 452.335814][T10879] [ 452.335825][T10879] dump_stack_lvl+0x16c/0x1f0 [ 452.335872][T10879] should_fail_ex+0x512/0x640 [ 452.335913][T10879] ? fs_reclaim_acquire+0xae/0x150 [ 452.335950][T10879] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 452.335989][T10879] should_failslab+0xc2/0x120 [ 452.336019][T10879] __kmalloc_noprof+0xd2/0x510 [ 452.336073][T10879] tomoyo_realpath_from_path+0xc2/0x6e0 [ 452.336119][T10879] ? tomoyo_profile+0x47/0x60 [ 452.336168][T10879] tomoyo_path_number_perm+0x245/0x580 [ 452.336200][T10879] ? tomoyo_path_number_perm+0x237/0x580 [ 452.336238][T10879] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 452.336276][T10879] ? find_held_lock+0x2b/0x80 [ 452.336344][T10879] ? find_held_lock+0x2b/0x80 [ 452.336375][T10879] ? hook_file_ioctl_common+0x145/0x410 [ 452.336417][T10879] ? __fget_files+0x20e/0x3c0 [ 452.336465][T10879] security_file_ioctl+0x9b/0x240 [ 452.336503][T10879] __x64_sys_ioctl+0xb7/0x210 [ 452.336541][T10879] do_syscall_64+0xcd/0x490 [ 452.336588][T10879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.336628][T10879] RIP: 0033:0x7f020238e929 [ 452.336653][T10879] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 452.336681][T10879] RSP: 002b:00007f0203158038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 452.336708][T10879] RAX: ffffffffffffffda RBX: 00007f02025b5fa0 RCX: 00007f020238e929 [ 452.336726][T10879] RDX: 0000200000000080 RSI: 00000000c0305710 RDI: 0000000000000003 [ 452.336744][T10879] RBP: 00007f0203158090 R08: 0000000000000000 R09: 0000000000000000 [ 452.336761][T10879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 452.336777][T10879] R13: 0000000000000000 R14: 00007f02025b5fa0 R15: 00007ffd78be9ad8 [ 452.336817][T10879] [ 452.336829][T10879] ERROR: Out of memory at tomoyo_realpath_from_path. [ 452.921993][T10850] netlink: zone id is out of range [ 452.968271][T10850] netlink: zone id is out of range [ 453.284492][T10850] netlink: set zone limit has 8 unknown bytes [ 453.416600][T10883] vhci_hcd: invalid port number 16 [ 453.428327][T10883] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 454.218882][T10895] ================================================================== [ 454.227105][T10895] BUG: KASAN: slab-out-of-bounds in afs_proc_addr_prefs_write+0x13a9/0x15f0 [ 454.235867][T10895] Read of size 1 at addr ffff88806df190a7 by task syz.0.1080/10895 [ 454.243860][T10895] [ 454.246242][T10895] CPU: 0 UID: 0 PID: 10895 Comm: syz.0.1080 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 454.246284][T10895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 454.246304][T10895] Call Trace: [ 454.246315][T10895] [ 454.246326][T10895] dump_stack_lvl+0x116/0x1f0 [ 454.246378][T10895] print_report+0xcd/0x610 [ 454.246406][T10895] ? __virt_addr_valid+0x81/0x610 [ 454.246441][T10895] ? __phys_addr+0xe8/0x180 [ 454.246475][T10895] ? afs_proc_addr_prefs_write+0x13a9/0x15f0 [ 454.246509][T10895] kasan_report+0xe0/0x110 [ 454.246539][T10895] ? afs_proc_addr_prefs_write+0x13a9/0x15f0 [ 454.246578][T10895] afs_proc_addr_prefs_write+0x13a9/0x15f0 [ 454.246613][T10895] ? __lock_acquire+0xb8a/0x1c90 [ 454.246670][T10895] ? __pfx_afs_proc_addr_prefs_write+0x10/0x10 [ 454.246707][T10895] ? find_held_lock+0x2b/0x80 [ 454.246738][T10895] ? __might_fault+0xe3/0x190 [ 454.246781][T10895] ? __might_fault+0xe3/0x190 [ 454.246824][T10895] ? __might_fault+0x13b/0x190 [ 454.246876][T10895] ? proc_simple_write+0x117/0x1b0 [ 454.246906][T10895] proc_simple_write+0x117/0x1b0 [ 454.246938][T10895] ? __pfx_proc_simple_write+0x10/0x10 [ 454.246970][T10895] proc_reg_write+0x240/0x330 [ 454.247012][T10895] ? __pfx_proc_reg_write+0x10/0x10 [ 454.247050][T10895] vfs_writev+0x5dc/0xde0 [ 454.247087][T10895] ? __pfx___mutex_trylock_common+0x10/0x10 [ 454.247137][T10895] ? __pfx_vfs_writev+0x10/0x10 [ 454.247175][T10895] ? __mutex_lock+0x1ca/0xb90 [ 454.247219][T10895] ? kmem_cache_free+0x2d1/0x4d0 [ 454.247266][T10895] ? __pfx___mutex_lock+0x10/0x10 [ 454.247319][T10895] ? __fget_files+0x20e/0x3c0 [ 454.247366][T10895] ? do_writev+0x132/0x340 [ 454.247405][T10895] do_writev+0x132/0x340 [ 454.247445][T10895] ? __pfx_do_writev+0x10/0x10 [ 454.247491][T10895] do_syscall_64+0xcd/0x490 [ 454.247538][T10895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.247570][T10895] RIP: 0033:0x7f020238e929 [ 454.247597][T10895] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 454.247636][T10895] RSP: 002b:00007f0203116038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 454.247668][T10895] RAX: ffffffffffffffda RBX: 00007f02025b6160 RCX: 00007f020238e929 [ 454.247689][T10895] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000009 [ 454.247708][T10895] RBP: 00007f0202410b39 R08: 0000000000000000 R09: 0000000000000000 [ 454.247727][T10895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 454.247746][T10895] R13: 0000000000000000 R14: 00007f02025b6160 R15: 00007ffd78be9ad8 [ 454.247775][T10895] [ 454.247787][T10895] [ 454.510396][T10895] Allocated by task 10895: [ 454.514824][T10895] kasan_save_stack+0x33/0x60 [ 454.519648][T10895] kasan_save_track+0x14/0x30 [ 454.524355][T10895] __kasan_kmalloc+0xaa/0xb0 [ 454.528974][T10895] __kmalloc_node_track_caller_noprof+0x221/0x510 [ 454.535417][T10895] memdup_user_nul+0x2b/0x120 [ 454.540195][T10895] proc_simple_write+0xc7/0x1b0 [ 454.545062][T10895] proc_reg_write+0x240/0x330 [ 454.549767][T10895] vfs_writev+0x5dc/0xde0 [ 454.554119][T10895] do_writev+0x132/0x340 [ 454.558385][T10895] do_syscall_64+0xcd/0x490 [ 454.562916][T10895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.568956][T10895] [ 454.571292][T10895] The buggy address belongs to the object at ffff88806df190a0 [ 454.571292][T10895] which belongs to the cache kmalloc-8 of size 8 [ 454.585280][T10895] The buggy address is located 0 bytes to the right of [ 454.585280][T10895] allocated 7-byte region [ffff88806df190a0, ffff88806df190a7) [ 454.600134][T10895] [ 454.602469][T10895] The buggy address belongs to the physical page: [ 454.608939][T10895] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x6df19 [ 454.617981][T10895] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 454.625108][T10895] page_type: f5(slab) [ 454.629118][T10895] raw: 00fff00000000000 ffff88801b841500 dead000000000100 dead000000000122 [ 454.637890][T10895] raw: 0000000000000000 0000000080800080 00000000f5000000 0000000000000000 [ 454.646494][T10895] page dumped because: kasan: bad access detected [ 454.652925][T10895] page_owner tracks the page as allocated [ 454.658646][T10895] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6310, tgid 6309 (syz.3.69), ts 135198401199, free_ts 135179586934 [ 454.677862][T10895] post_alloc_hook+0x1c0/0x230 [ 454.682658][T10895] get_page_from_freelist+0x1321/0x3890 [ 454.688319][T10895] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 454.694238][T10895] alloc_pages_mpol+0x1fb/0x550 [ 454.699101][T10895] new_slab+0x23b/0x330 [ 454.703282][T10895] ___slab_alloc+0xd9c/0x1940 [ 454.707980][T10895] __slab_alloc.constprop.0+0x56/0xb0 [ 454.713378][T10895] __kmalloc_node_track_caller_noprof+0x2ee/0x510 [ 454.719886][T10895] kstrdup+0x53/0x100 [ 454.724009][T10895] kstrdup_const+0x63/0x80 [ 454.728480][T10895] __kernfs_new_node+0x9b/0x8e0 [ 454.733377][T10895] kernfs_new_node+0x13c/0x1e0 [ 454.738256][T10895] kernfs_create_dir_ns+0x4c/0x1a0 [ 454.743380][T10895] sysfs_create_dir_ns+0x13a/0x2b0 [ 454.748519][T10895] kobject_add_internal+0x2c4/0x9b0 [ 454.753834][T10895] kobject_init_and_add+0x11b/0x190 [ 454.759048][T10895] page last free pid 6309 tgid 6309 stack trace: [ 454.765670][T10895] __free_frozen_pages+0x7fe/0x1180 [ 454.770983][T10895] __put_partials+0x16d/0x1c0 [ 454.775691][T10895] qlist_free_all+0x4d/0x120 [ 454.780316][T10895] kasan_quarantine_reduce+0x195/0x1e0 [ 454.785805][T10895] __kasan_slab_alloc+0x69/0x90 [ 454.790682][T10895] kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 454.796167][T10895] jbd2__journal_start+0x193/0x6a0 [ 454.801299][T10895] __ext4_journal_start_sb+0x195/0x690 [ 454.806799][T10895] ext4_dirty_inode+0xa1/0x130 [ 454.811652][T10895] __mark_inode_dirty+0x1eb/0xe50 [ 454.816698][T10895] generic_update_time+0xcf/0xf0 [ 454.821651][T10895] file_update_time+0x17d/0x1c0 [ 454.826522][T10895] ext4_page_mkwrite+0x35e/0x1760 [ 454.831573][T10895] do_page_mkwrite+0x174/0x380 [ 454.836539][T10895] __handle_mm_fault+0x3829/0x5490 [ 454.841671][T10895] handle_mm_fault+0x589/0xd10 [ 454.846459][T10895] [ 454.848791][T10895] Memory state around the buggy address: [ 454.854464][T10895] ffff88806df18f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 454.862672][T10895] ffff88806df19000: fa fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc [ 454.870839][T10895] >ffff88806df19080: fa fc fc fc 07 fc fc fc 05 fc fc fc fa fc fc fc [ 454.879085][T10895] ^ [ 454.884207][T10895] ffff88806df19100: fa fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc [ 454.892453][T10895] ffff88806df19180: fa fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc [ 454.900528][T10895] ================================================================== [ 455.022728][T10895] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 455.030006][T10895] CPU: 1 UID: 0 PID: 10895 Comm: syz.0.1080 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 455.042217][T10895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 455.052678][T10895] Call Trace: [ 455.056002][T10895] [ 455.058980][T10895] dump_stack_lvl+0x3d/0x1f0 [ 455.063640][T10895] panic+0x71c/0x800 [ 455.067694][T10895] ? __pfx_panic+0x10/0x10 [ 455.072196][T10895] ? mark_held_locks+0x49/0x80 [ 455.077040][T10895] ? preempt_schedule_thunk+0x16/0x30 [ 455.082487][T10895] ? afs_proc_addr_prefs_write+0x13a9/0x15f0 [ 455.088526][T10895] ? preempt_schedule_common+0x44/0xc0 [ 455.094070][T10895] ? afs_proc_addr_prefs_write+0x13a9/0x15f0 [ 455.100107][T10895] check_panic_on_warn+0xab/0xb0 [ 455.105242][T10895] end_report+0x107/0x170 [ 455.109625][T10895] kasan_report+0xee/0x110 [ 455.114079][T10895] ? afs_proc_addr_prefs_write+0x13a9/0x15f0 [ 455.120102][T10895] afs_proc_addr_prefs_write+0x13a9/0x15f0 [ 455.125951][T10895] ? __lock_acquire+0xb8a/0x1c90 [ 455.130924][T10895] ? __pfx_afs_proc_addr_prefs_write+0x10/0x10 [ 455.137109][T10895] ? find_held_lock+0x2b/0x80 [ 455.141826][T10895] ? __might_fault+0xe3/0x190 [ 455.146570][T10895] ? __might_fault+0xe3/0x190 [ 455.151276][T10895] ? __might_fault+0x13b/0x190 [ 455.156096][T10895] ? proc_simple_write+0x117/0x1b0 [ 455.161241][T10895] proc_simple_write+0x117/0x1b0 [ 455.166298][T10895] ? __pfx_proc_simple_write+0x10/0x10 [ 455.171936][T10895] proc_reg_write+0x240/0x330 [ 455.176671][T10895] ? __pfx_proc_reg_write+0x10/0x10 [ 455.181910][T10895] vfs_writev+0x5dc/0xde0 [ 455.186334][T10895] ? __pfx___mutex_trylock_common+0x10/0x10 [ 455.192266][T10895] ? __pfx_vfs_writev+0x10/0x10 [ 455.197144][T10895] ? __mutex_lock+0x1ca/0xb90 [ 455.201891][T10895] ? kmem_cache_free+0x2d1/0x4d0 [ 455.207038][T10895] ? __pfx___mutex_lock+0x10/0x10 [ 455.212098][T10895] ? __fget_files+0x20e/0x3c0 [ 455.216807][T10895] ? do_writev+0x132/0x340 [ 455.221248][T10895] do_writev+0x132/0x340 [ 455.225696][T10895] ? __pfx_do_writev+0x10/0x10 [ 455.230495][T10895] do_syscall_64+0xcd/0x490 [ 455.235067][T10895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.241244][T10895] RIP: 0033:0x7f020238e929 [ 455.245768][T10895] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 455.265404][T10895] RSP: 002b:00007f0203116038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 455.273846][T10895] RAX: ffffffffffffffda RBX: 00007f02025b6160 RCX: 00007f020238e929 [ 455.282021][T10895] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000009 [ 455.290017][T10895] RBP: 00007f0202410b39 R08: 0000000000000000 R09: 0000000000000000 [ 455.298005][T10895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 455.306251][T10895] R13: 0000000000000000 R14: 00007f02025b6160 R15: 00007ffd78be9ad8 [ 455.314247][T10895] [ 455.317630][T10895] Kernel Offset: disabled [ 455.322019][T10895] Rebooting in 86400 seconds..