last executing test programs: 8m6.066105581s ago: executing program 3 (id=175): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0xb2) mmap$auto(0x0, 0x9, 0x3, 0x8012, 0x3, 0x8000) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d) mlock$auto(0x81, 0xffff) ioctl$auto_BTRFS_IOC_FORGET_DEV(r0, 0x50009405, &(0x7f0000001080)={@raw=0x8001, "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"}) fallocate$auto(0x8000000000000003, 0x3, 0xf, 0x200000004) r1 = gettid() rt_sigqueueinfo$auto(r1, 0x11, &(0x7f0000000000)={@siginfo_0_0={0x0, 0x3, 0x4, @_sigpoll={0x2, r0}}}) openat$auto_tracing_saved_cmdlines_fops_trace(0xffffffffffffff9c, &(0x7f0000001040)='/sys/kernel/tracing/saved_cmdlines\x00', 0x2000, 0x0) madvise$auto(0x0, 0x7, 0xc) 8m5.591113408s ago: executing program 3 (id=180): r0 = socket(0xa, 0x802, 0x3a) r1 = socket(0x10, 0x2, 0xc) r2 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r1, &(0x7f00000002c0)={0x0, 0xf5, &(0x7f0000000180)={&(0x7f0000000240)={0x14, r2, 0x1f5, 0x70bd28, 0x25dfdbfb, {0xa, 0x0, 0xa00}}, 0xfdef}, 0x1, 0x0, 0x0, 0x20000000}, 0x2000000) setsockopt$auto(r0, 0x404, 0x21, &(0x7f0000000540)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\xff\x1b\x01\x1e\xe2\xa8\xd6\xd9\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\xf2Vw\xbe\x1c$\xddm\x8a\x9d\x91_\vBj\x0eQ\xce\x16\'C\x8c\x01\x80\x92u\xd5\xb8\\\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\x00\x00\x00\x00\xe4\xa5\xfe\xb5h\xae\xec%\xf9\x94A\x9c\x17\xaa\xce\fh-M\xdb-\x15VX\xfe\xca+\xb5\x95\xb3JL\x0fl\xe84\xbd\xa3nO\x9f\xfa\xb1\x06$\b$i3\x83\xd7\x06\xd6\x1e\xdbB\x9bb\x1cXC\x8c\x8b\xd9\xff\xf2Bf\x99!Z\x13\xff\xca\xf3e\x015\x9b\x86\xd6$\x1a\r3\x91\xb7\x942\xeb\xadVA\xfc\x1f\xbf1\xb7T\xc1\xbf\xc0\xc2\xfc\xe8w\xd33\xb2,\xb0\x9fA3\xc2\xa2\x1cM\x825\x94U\xbbNeb\xd2\xa9\x0f\xed\x8b\xea\xfa\x8a\x04.\xffMIw\x0f\xd6\xae^\xd2\xf1j\xcb\r\xa4\x1d0d\xca\x81\x9c\x80GL\x0e\xe6\x19\x8au\x1a7\xc5\x86\xf6\x1e\xe00\xc6\"\x83\x1c\xa2\x9e\a\x1c\xea\xa3\x9c\xe1BF\x05b\xf6\xdcf\x04\xd9B\xb9\x98\x9cq\xbd\xfb\xb5~\xf2\x8d\x9f`\xec\xd0\xafY\xcf\x84yI\xc7B\x87\xfa\x01G\x93\x7f\xab\xaf\x1f\x05\x90\xcd\xc72h9\xca\xb8\xca\xc7D\xfb\xab\\$\xdc\xbd\x1aG&\xc7\x99N\xfd\r\xf7\xabm\xef\xcf\xd72;\x10\x14\xbe\x01\x03\xdf\xbc@\x8eI\x8f\x9ct\xfdL!\x1fRhb\x14V\xbd`j\x8b\xa0/\xe1\x18\xe2(\xf0\x1c\xaa\xa9D-\x12\xb6,\xd9\xb4\xcfw%F@\xad\x99rA\x92\xa1\x05t\x84j\xa8\xf7\xf4\xec\xbf\xceiC\xe3\x04\xde\x10\xb7?\xdf\xd4\x8fP\xe7\x19?\xcbroP\xe3\v\xca\x93\xd30\f\xe6\xde>\xeeS\x14\xa2%\x1fesvSQ\xe7y\x04\xc7\x8b\xdd\xdfig\'\xa7\xa5\xd5\x02\xd06\xf1\xaf\xc5\xb5\xf4\xd3\xa2\xc1\xaaf\xb8&\x959-\n\xccW\x1c\x94t\x98\xc6\xd7\x9dh\xdf\x91\xd9\x1ew\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5,\xcc\xfa`\xfa\x90\xf0C\xdc\xbebBW\x8a\x95\xf4\x14\xc7\x90V\xe7a\xfb*\xcc6\xba\x9ef\x19R\xff\xd2\xd8\x98\xa8\x17\xcb\x84\xe8\xfb\x00`\xc2\xce~U\xca\\\xc1\xb7\xf1\n\xb9\xbfk\x1e\xdb\xed\x81{\x1f\x18j\x16\rk\x0eO\xe3\xa78&Z\x9e\xbf\x84\xd6\x1f\xe8\x88\x1f\xbc\x1eT\xa6{9hb\xbc\x1a\\\xb3\x846&\x1a\xbb\x9c:e\x9c\x18\x11\xf0\x8eQ\xd8\x8a3^?\x13\x00\xcbx\xb2\x18e\x95$\x9d\x804', 0x100000a3d9) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x1300, 0x400108, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/virtual/tty/ptyqe/power/control\x00', 0xa0b02, 0x0) read$auto(0xffffffffffffffff, 0x0, 0xb4d3) write$auto(0x3, 0x0, 0x70) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) socket(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x2, 0x4) r3 = socket(0x10, 0x3, 0x6) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r4, @ANYBLOB="01002dbd7000fedbdf2505000000da0203800800c000e000000204002a000400110008002e00", @ANYRES32, @ANYBLOB="d152e64e22695352dd73864415aa8a78c65e6ab752fb4d469a47a092ae7d5061cdd9690cac4138553ecfbb1b32dd7c33b14cc842bc1e2a5da4203e64ceaa9db5223aa655b6313c011b3e73a75f1aa1f7b2ea43344b15bd494886e355cf6d92c8fe670a42bc677830013e9c4aa4fa30c3e6630bf0ed13206d5a18f6813c6fb03466112aedf5d67bb5b99fe96a6dcd279916b0bce029925b63c48d41ca8a76e46c6014100005800c00c50003000000000000000c02368008027a8087010c800800e800", @ANYRES32=r2, @ANYBLOB="0800fb00", @ANYRES32=r3], 0x2f0}, 0x1, 0x0, 0x0, 0x40000}, 0x50) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 5.451986271s ago: executing program 1 (id=1891): mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'virt_wifi0\x00', 0x0}) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000826bd7000fedbdf250300000008000400b70a0000060007000080000008000200", @ANYRES32=r1, @ANYBLOB="0a0005000180c200000e00000a0001000180c200000e00000a000100000000000000000008000200", @ANYRES32=r1, @ANYBLOB="060006ff05000000080003009b"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000780)='/proc/sys/net/ipv6/neigh/virt_wifi0/retrans_time\x00', 0x101000, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x600, 0x9}, 0x7}, 0x3, 0x0) 5.45003331s ago: executing program 4 (id=1892): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40002, 0x300) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) mmap$auto(0x0, 0x20009, 0x7fffffff, 0xeb1, 0x401, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/nfs/parameters/nfs_idmap_cache_timeout\x00', 0xc2902, 0x0) read$auto(r2, 0x0, 0x20) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) ioctl$auto_TCFLSH2(r1, 0x5453, 0x0) socket(0x15, 0x800, 0x81) ioctl$auto_NS_GET_TGID_FROM_PIDNS(0xffffffffffffffff, 0x8004b707, &(0x7f0000000040)=0x1) r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20b42, 0x0) ioctl$auto_SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000040)) prctl$auto_PR_SET_MM_START_STACK(0x5, 0x5, 0xffffffffffffffff, 0x2, 0x2) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4) r5 = open(0x0, 0x161342, 0x100) write$auto_mousedev_fops_mousedev(r5, 0x0, 0x0) poll$auto(&(0x7f0000000d40)={0x3, 0x1, 0xa}, 0x5, 0x400) clone$auto(0x21, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6) prctl$auto(0x10000000024, 0x2, 0x2008, 0x4000000c, 0x80001) getrandom$auto(0x0, 0x6000000, 0x3) lseek$auto(r0, 0x1, 0x2) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/mac80211_hwsim/hwsim1/net/wlan1/type\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r6, &(0x7f0000000040)=""/116, 0x74) madvise$auto(0x0, 0xf663, 0x15) mmap$auto(0x0, 0x8, 0x9, 0xeb1, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0x20499d, 0x9) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/loop1/integrity/device_is_integrity_capable\x00', 0x109080, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r7, &(0x7f0000001100)=""/167, 0xa7) 5.291923321s ago: executing program 2 (id=1893): openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x80000000000000a, 0x2, 0x8) socket(0xa, 0x801, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) clock_nanosleep$auto(0x8, 0x1, 0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x9, 0x400000072, 0x8b72, 0x1000000002, 0x8000) close_range$auto(0x2, 0x8, 0x0) 3.955658269s ago: executing program 1 (id=1894): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_fault_around_bytes_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x2282, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev5\x00', 0x280, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop14\x00', 0x28000, 0x0) ioctl$auto_BLKPG(r1, 0x1269, 0x300000000000000) ioctl$auto_IOC_PR_RESERVE(r1, 0x401070c9, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/v4l-subdev0\x00', 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/lockd/parameters/nlm_grace_period\x00', 0x8001, 0x0) write$auto(r0, 0x0, 0x2) 3.808835181s ago: executing program 2 (id=1895): mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) socket(0x10, 0x2, 0x0) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000326bd7000fddbdf250200000008002700080000000500190005000000"], 0x24}, 0x1, 0x0, 0x0, 0x40814}, 0x24008000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="180027"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 3.555646329s ago: executing program 0 (id=1896): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x10, 0x80002, 0x0) mmap$auto(0x2, 0x2000b, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) timerfd_create$auto(0x8, 0x800) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x1, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bdi/43:416/min_bytes\x00', 0x28180, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x3, 0x2) pipe$auto(0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0x4048aec9, r1) timerfd_settime$auto(r0, 0x2, 0x0, 0x0) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000380)='/dev/fuse\x00', 0x40, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) open(&(0x7f0000000800)='./file0\x00', 0x19bf00, 0x11c) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0xf) close_range$auto(0x0, 0xffffeffe, 0x2) pipe$auto(0x0) socket(0xa, 0x3, 0xff) pipe$auto(0x0) 3.349552601s ago: executing program 0 (id=1897): socket(0x2, 0x3, 0xa) connect$auto(0x3, 0x0, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sendfile$auto(0x1, 0xffffffffffffffff, 0x0, 0x7ffff000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0xfffffffffffffffd, 0x400008, 0xdf, 0x9b72, 0x2, 0x40000008000) close_range$auto(0x2, 0x8, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x184) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000080)='/proc/kpageflags\x00', 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) r0 = socket(0x2, 0x1, 0x106) getsockopt$auto(r0, 0x29, 0x4b, 0x0, 0x0) readv$auto(0x3, &(0x7f00000000c0)={0x0, 0x101d0}, 0x400) mmap$auto(0x9, 0xb, 0x3, 0xeb1, 0xfffffffffffffffa, 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000540), 0xa0100, 0x0) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, 0x0, 0x1, 0x0) bpf$auto_BPF_TASK_FD_QUERY(0x14, 0x0, 0xfffffff9) mmap$auto(0x1, 0x400008, 0xdf, 0x9b76, 0x2, 0x3) clone3$auto(0x0, 0x8000000000400001) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r2, 0x2, 0x7fe) ptrace$auto(0xe, r2, 0xfffffffffffffffe, 0x4053) lseek$auto(r1, 0x100000000, 0x2) mmap$auto(0x0, 0x40006, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 3.262532025s ago: executing program 4 (id=1898): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/bonding/arp_validate\x00', 0x20042, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x202, 0x0) mmap$auto(0x0, 0x7, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0xca, 0x0, 0x1ff) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv6/neigh/bond_slave_1/proxy_qlen\x00', 0x40001, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) bind$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0x1a000}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) io_uring_setup$auto(0xa, 0x0) close_range$auto(0x2, 0xa, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/conf/macvlan1/shared_media\x00', 0x50b780, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101800, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) eventfd$auto(0x8e) openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, &(0x7f0000000000), 0x22a40, 0x0) socket(0x2, 0x801, 0x100) sendmsg$auto_ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x80, 0x0, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_RINGS_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x883}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_RINGS_RX_BUF_LEN={0x8, 0xa, 0x5}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x7fffffff}, @ETHTOOL_A_RINGS_RX_BUF_LEN={0x8, 0xa, 0x1}]}, 0x80}, 0x1, 0x0, 0x0, 0x801}, 0x90) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/vkms/drm/card1/card1-Virtual-1/status\x00', 0x20b42, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000040)=""/40, 0x28) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) ioperm$auto(0x7, 0x6, 0x2) mmap$auto(0x13c4, 0xc, 0x4, 0x17, r0, 0x7ffd) 3.260376316s ago: executing program 1 (id=1899): r0 = socket(0xa, 0x2, 0x73) syz_genetlink_get_family_id$auto_tipcv2(0x0, 0xffffffffffffffff) r1 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) read$auto_check_wx_fops_(r1, &(0x7f0000000700)=""/231, 0xe7) mmap$auto(0xfffffffffffffffd, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) write$auto(0x3, 0x0, 0x100082) get_robust_list$auto(0x0, 0x0, 0x0) r2 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x103041, 0x0) write$auto(r2, 0x0, 0x9) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv6/conf/bridge_slave_0/mldv2_unsolicited_report_interval\x00', 0x40001, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r3, 0x0, 0x0) sendmsg$auto_NL80211_CMD_GET_MPP(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="2400727f8dd2e6a15e59c27213340a990000", @ANYRES16=0x0, @ANYBLOB="000428bd7000005000006b0000000d00180061680c6789a6fb56dd000000"], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x24004000) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) sendmsg$auto_MACSEC_CMD_ADD_RXSA(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0xd0}, 0x2404c084) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) pwrite64$auto(r3, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\b\x05s\x1cJ\x99\x8a>c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x10000003) r4 = gettid() timer_create$auto(0x0, &(0x7f0000000040)={@sival_ptr=0x0, @raw=0x4, 0x6, @_tid=r4}, 0x0) capget$auto(&(0x7f0000000200)={0xdc, r4}, &(0x7f0000000240)={0x4, 0xfffffffc, 0xfff}) write$auto(0xffffffffffffffff, &(0x7f0000000300)='/proc/sys/net/ipv6/conf/bridge_slave_0/mldv2_unsolicited_report_interval\x00', 0x3) sendmmsg$auto(r0, &(0x7f00000005c0)={{&(0x7f0000000380)="4e03c7ff89712afb06da612d101bfda890e625a3121e271b70d277fabd317878363e216b5ec6d0ee73387af04393f5cf81f72a2e61", 0x7f, &(0x7f0000000480)={&(0x7f0000000400)="975df2b5ddfc7d64ad302f501851fa0efcd4de7f0f73315aabfaa3e87499209d0140dd21f4937ccbc4dea6672afe3bec4378ff1f92e972a70d3291929f79366634fa10ab9f0b7354ba254a6c2f19afe76ad5841fef0578d872bac51bd818c94234bc71602d4820f0859a59b2a168cfdfa7f966", 0x7f}, 0x5, &(0x7f00000004c0)="f0c4270b0810dcdfbb5a6ffdbde706a5c11ea5e3b6c714efe676db9341824da532ae86ab67b077c20627cdb6ccafd783e3e4846ee7abdd98f3af6049d8876f84419ec5cfd19cffc9a0ef868b9272e7a810fc9e01fa601bb86ad6ef413f5ea48a13a4b50c80a5044f0c707ab5a184bb5a8795a1d77bce5ac2faaee3d6f946b63d94af567b338138261a590fb072061ce676bb2629386f4bcb3a9901fc443146cadb7e5793336f42699cabe1d0e2802e6374a23acba79af59fc59f0347439f9bf8a214", 0x40, 0x5}, 0x4}, 0xffffffc2, 0xffff) close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x2, 0x0) r5 = socket(0xa, 0x3, 0xff) connect$auto(r5, &(0x7f00000018c0)=@generic={0xa}, 0x55) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 3.120933455s ago: executing program 2 (id=1900): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto(0xffffffffffffffff, 0x8001, r0) close_range$auto(0x2, 0x8, 0x0) socket(0x29, 0x5, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x1ff, 0x7, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x9, 0x6, 0x80003, 0x4, 0x1ffffffffffd, 0xb4, 0xffffffffffffffff, 0x8, 0x10007, 0x80, 0x4, 0x0, 0xa, 0x22000, 0x200, 0x0, 0x84}, 0x1fe, 0xd) r2 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/ksm/general_profit\x00', 0xa800, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f00000000c0)=""/34, 0x22) ioctl$auto__ctl_fops_dm_ioctl(r2, 0xfffffffffffffd03, &(0x7f00000001c0)) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/module/ip_vs_ftp/parameters/ports\x00', 0x80100, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, 0x0, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) chmod$auto(&(0x7f0000000140)='./file0\x00', 0x3ff) (fail_nth: 4) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, 0x0, 0x4800) 2.893622022s ago: executing program 1 (id=1901): close_range$auto(0x0, 0xffffffffffffffff, 0x2) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r0 = socket(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0x2, 0x2, 0x0) r1 = socket(0x2, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@l2={0x1f, 0x4, @any, 0x9}, 0x6a) socket(0x2, 0x1, 0x106) listen$auto(0x3, 0x81) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) write$auto(0x4, 0x0, 0x100082) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00'}) r2 = bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_11={0xa, 0x740, 0x8000, 0x5, 0x5, 0x8, 0xfffffff2, r0}, 0xfffffffd) r3 = bpf$auto(0x2, &(0x7f00000001c0)=@bpf_attr_1={r2, 0x200000000000002, @value=0x8, 0x20}, 0x0) r4 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000080), 0x402, 0x0) ioctl$auto_VHOST_SET_OWNER(r4, 0xaf01, 0x0) connect$auto(r3, &(0x7f0000000040)=@generic={0x2, "53c769977d042bb9b4afdd1214d4"}, 0x9) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002dbd7001f9dbca250100000008000a00000000000500070000000000080009009c781e010600020000000000080017"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2.350274696s ago: executing program 4 (id=1902): mmap$auto(0x0, 0x400008, 0xde, 0x9b72, 0x2, 0x8000) r0 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r0, 0xffffffffffdffe00, &(0x7f0000000140)=';') r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) ioctl$auto_KVM_HAS_DEVICE_ATTR(r1, 0x4018aee3, &(0x7f0000000040)={0x5, 0x0, 0x7ff}) r2 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x1c1041, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(r2, &(0x7f0000000000)=@generic={0x9, "00faf518c000"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) listmount$auto(&(0x7f0000000000)={0x1f, @raw, 0x80000024, 0x0, 0x2}, 0x0, 0xf4240, 0x0) membarrier$auto(0x2, 0x0, 0x9) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0xc02, 0x0) socket(0x22, 0x3, 0x1) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22241, 0x155) 2.28804187s ago: executing program 0 (id=1903): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000e3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket(0x11, 0x3, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) sendmmsg$auto(r1, &(0x7f0000000080)={{&(0x7f0000000280), 0x1, &(0x7f0000000280)={&(0x7f0000000780)="4c0300000000000000a3677337f9ecba", 0xfffffffffffffff7}, 0x5, 0x0, 0x5, 0x2}, 0x8}, 0xfffffffe, 0x100) pivot_root$auto(0x0, 0x0) nanosleep$auto(0x0, 0x0) open(0x0, 0x7ffd, 0x12) kexec_load$auto(0x9, 0x0, 0x0, 0x1003e0000) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@xdp={0x2c, 0xb, 0x0, 0x800}, 0x9) madvise$auto(0x4, 0x3, 0xa) mmap$auto(0x7f, 0x82020009, 0x3, 0xeb1, 0xffffffffffffffff, 0xfff) madvise$auto(0x8001, 0x9, 0x138) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20b42, 0x0) ioctl$auto_SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000040)) connect$auto(0x3, 0x0, 0x10) unshare$auto(0x40000080) r3 = socket(0x2, 0x2, 0x1) getsockopt$auto(r3, 0x1, 0x4, &(0x7f0000000040)='/dev/cec27\x00', 0x0) madvise$auto(0x0, 0xffffffffffff0000, 0x15) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x180b01, 0x0) r4 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f00000002c0), 0x20000, 0x0) ioctl$auto_USB_RAW_IOCTL_INIT(r4, 0x41015500, &(0x7f0000000140)={"a7a018b09bb196a05739a38a73473b93f5452886bc599ef976c54a71a5ce72a9af15390e93a8760df83859e16320e8d0b1161f13d12afae66b1d900a49586aa98d3504ca431aabab1964249251e57fa70517cc19b0e3974dc2a89e90c932b8859c767780d65e849700", "e600d778e82f8b8db7e27a036e39a8ac08de7e036d650e2184857e6b64f6a2c7fb08c6f5ce3828fb4e9498c076bef49c99c9cd91332e12b53664dc20fa879020fbd184c0d300c13be6047a70685ce029fb2385ae6e132c1c6adbcfbd873a3b925d397a08e8733e19ef5ec4f40b0b473c72efd18b8a9e9f3d12c5e44468922beb", 0x3}) ioctl$auto_USB_RAW_IOCTL_RUN(r4, 0x5501, 0x0) 1.677821295s ago: executing program 2 (id=1904): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sysfs$auto(0x2, 0x27, 0x6) r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vbi2\x00', 0x0, 0x0) ioctl$auto(r0, 0xc0445624, r0) (fail_nth: 4) syz_genetlink_get_family_id$auto_netdev(0x0, 0xffffffffffffffff) sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008810}, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/irq/8/smp_affinity_list\x00', 0x0, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) socket(0x2b, 0x1, 0x5) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-touch0\x00', 0xe0800, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x24041, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x1004, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) syz_genetlink_get_family_id$auto_taskstats(0x0, r2) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)={0x14, r4, 0x1, 0x70bd2b, 0x25dfdbf9}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$auto_TIOCEXCL2(r2, 0x540c, 0x0) mq_open$auto(&(0x7f00000000c0)='\x12\xe6D\b\x9e\x00\x80\x8d\f\xb9w-\xbd!\x9eb\xed\xfb\x0f\xe5\x9dZ\xc2\xd1\x01wBV\x91\x8f_\xc0.\x84\xfe\x84\xd1se\x01\x06\x00\xb3\x13_Y&\xa9\x88\xe4\xa2\xb0V\x85\x92<\xb6\xdcT \\\xf2\v\xb1\xe2\xd8\xfa\xd8V\xe5\x00\xfa\xe9!\xc5<\xce\x18=\x06\xdagq\xb5\r\t\xb2\xde\x99\xd50\xbb\x192\x1c4\x86\xc0\xc1-\xd5\x10\xc3\xfc*[8\x89h\xc5\xba\xff\xc8u5f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f0000000240)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x2000000007, 0x6, 0xc, 0x2, 0x6]}, 0x0) pwrite64$auto(0xffffffffffffffff, &(0x7f0000000000)='./cgroup/\xe4amo/ry.pres\t\x00re', 0x6bc, 0x5) mmap$auto(0x2000000000000, 0x7, 0x4000000000df, 0x78, 0x4, 0x300000000000) mmap$auto(0x0, 0x2020009, 0x40000003, 0xeb1, 0xfffffffffffffffa, 0xb9) r2 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dri/renderD128\x00', 0x30000, 0x0) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000080), r2) write$auto(r0, &(0x7f0000000180)='{@\x00', 0x7) socket(0x10, 0x2, 0xc) kernel console output (not intermixed with test programs): ozen_pages_noprof+0x10/0x10 [ 566.805683][T12532] ? kernel_text_address+0x8d/0x100 [ 566.805722][T12532] ? __kernel_text_address+0xd/0x40 [ 566.805759][T12532] ? unwind_get_return_address+0x59/0xa0 [ 566.805798][T12532] ? arch_stack_walk+0xa6/0x100 [ 566.805827][T12532] ? __lock_acquire+0x622/0x1c90 [ 566.805860][T12532] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 566.805899][T12532] ? policy_nodemask+0xea/0x4e0 [ 566.805929][T12532] alloc_pages_mpol+0x1fb/0x550 [ 566.805957][T12532] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 566.805994][T12532] alloc_pages_noprof+0x131/0x390 [ 566.806022][T12532] __pmd_alloc+0x3b/0x930 [ 566.806052][T12532] ? find_held_lock+0x2b/0x80 [ 566.806078][T12532] __handle_mm_fault+0xaac/0x5490 [ 566.806126][T12532] ? __pfx___handle_mm_fault+0x10/0x10 [ 566.806160][T12532] ? __pfx_mt_find+0x10/0x10 [ 566.806204][T12532] ? find_vma+0xbf/0x140 [ 566.806232][T12532] ? __pfx_find_vma+0x10/0x10 [ 566.806263][T12532] handle_mm_fault+0x589/0xd10 [ 566.806301][T12532] ? __pkru_allows_pkey+0x51/0xb0 [ 566.806336][T12532] do_user_addr_fault+0x7a6/0x1370 [ 566.806372][T12532] ? rcu_is_watching+0x12/0xc0 [ 566.806401][T12532] exc_page_fault+0x5c/0xb0 [ 566.806424][T12532] asm_exc_page_fault+0x26/0x30 [ 566.806447][T12532] RIP: 0010:rep_movs_alternative+0x30/0x90 [ 566.806481][T12532] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 4d 11 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 566.806503][T12532] RSP: 0018:ffffc90004707968 EFLAGS: 00050216 [ 566.806521][T12532] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000014 [ 566.806536][T12532] RDX: fffff520008e0f7a RSI: 0000000000000000 RDI: ffffc90004707bc0 [ 566.806551][T12532] RBP: 0000000000000014 R08: 0000000000000001 R09: fffff520008e0f7a [ 566.806565][T12532] R10: 0000000000000003 R11: 0000000000000001 R12: 0000000000000000 [ 566.806578][T12532] R13: ffffc90004707bc0 R14: 0000000000000000 R15: 0000000000000000 [ 566.806612][T12532] _copy_from_user+0x98/0xd0 [ 566.806642][T12532] copy_from_sockptr_offset.constprop.0+0x153/0x1a0 [ 566.806677][T12532] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 566.806712][T12532] ? __local_bh_enable_ip+0xa4/0x120 [ 566.806739][T12532] ? lockdep_hardirqs_on+0x7c/0x110 [ 566.806765][T12532] do_ipv6_setsockopt+0x2e4f/0x4300 [ 566.806803][T12532] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 566.806850][T12532] ? __mutex_trylock_common+0xe9/0x250 [ 566.806886][T12532] ? __pfx___mutex_trylock_common+0x10/0x10 [ 566.806922][T12532] ? __pfx___might_resched+0x10/0x10 [ 566.806952][T12532] ? trace_contention_end+0xdd/0x130 [ 566.806986][T12532] ? __mutex_lock+0x1ca/0xb90 [ 566.807012][T12532] ? smc_setsockopt+0x100/0xa00 [ 566.807046][T12532] ? __pfx___mutex_lock+0x10/0x10 [ 566.807077][T12532] ? ipv6_setsockopt+0xcb/0x170 [ 566.807105][T12532] ipv6_setsockopt+0xcb/0x170 [ 566.807139][T12532] tcp_setsockopt+0xa7/0x100 [ 566.807167][T12532] smc_setsockopt+0x1b6/0xa00 [ 566.807199][T12532] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 566.807235][T12532] ? __pfx_smc_setsockopt+0x10/0x10 [ 566.807274][T12532] ? __pfx_smc_setsockopt+0x10/0x10 [ 566.807307][T12532] do_sock_setsockopt+0xf0/0x1d0 [ 566.807342][T12532] __sys_setsockopt+0x120/0x1a0 [ 566.807370][T12532] __x64_sys_setsockopt+0xbd/0x160 [ 566.807393][T12532] ? do_syscall_64+0x91/0x490 [ 566.807416][T12532] ? lockdep_hardirqs_on+0x7c/0x110 [ 566.807438][T12532] do_syscall_64+0xcd/0x490 [ 566.807464][T12532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.807486][T12532] RIP: 0033:0x7ffbbf18e9a9 [ 566.807504][T12532] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 566.807526][T12532] RSP: 002b:00007ffbc00a3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 566.807546][T12532] RAX: ffffffffffffffda RBX: 00007ffbbf3b5fa0 RCX: 00007ffbbf18e9a9 [ 566.807562][T12532] RDX: 000000000000001b RSI: 0000000000000029 RDI: 0400000000000003 [ 566.807576][T12532] RBP: 00007ffbc00a3090 R08: 000000000000056b R09: 0000000000000000 [ 566.807591][T12532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 566.807610][T12532] R13: 0000000000000000 R14: 00007ffbbf3b5fa0 R15: 00007fff56215e48 [ 566.807640][T12532] [ 567.293624][ C0] vkms_vblank_simulate: vblank timer overrun [ 567.885085][T12529] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1608'. [ 569.352930][T12554] netlink: 54 bytes leftover after parsing attributes in process `syz.4.1616'. [ 569.479720][T12554] netlink: 54 bytes leftover after parsing attributes in process `syz.4.1616'. [ 569.623927][T12552] ima: policy update failed [ 569.696591][ T30] audit: type=1802 audit(6048701389.201:11): pid=12552 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.1616" res=0 errno=0 [ 570.920302][T12584] FAULT_INJECTION: forcing a failure. [ 570.920302][T12584] name failslab, interval 1, probability 0, space 0, times 0 [ 571.002715][T12584] CPU: 0 UID: 0 PID: 12584 Comm: syz.4.1624 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 571.002750][T12584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 571.002764][T12584] Call Trace: [ 571.002771][T12584] [ 571.002781][T12584] dump_stack_lvl+0x16c/0x1f0 [ 571.002810][T12584] should_fail_ex+0x512/0x640 [ 571.002835][T12584] ? __kmalloc_noprof+0xbf/0x510 [ 571.002862][T12584] ? __register_sysctl_table+0xb3/0x1900 [ 571.002889][T12584] should_failslab+0xc2/0x120 [ 571.002916][T12584] __kmalloc_noprof+0xd2/0x510 [ 571.002947][T12584] __register_sysctl_table+0xb3/0x1900 [ 571.002974][T12584] ? is_module_address+0x5f/0xf0 [ 571.003014][T12584] ? __pfx___register_sysctl_table+0x10/0x10 [ 571.003041][T12584] ? is_module_address+0x69/0xf0 [ 571.003074][T12584] ? register_net_sysctl_sz+0x228/0x3e0 [ 571.003105][T12584] ? __asan_memcpy+0x3c/0x60 [ 571.003145][T12584] nf_log_net_init+0x109/0x450 [ 571.003175][T12584] ? __pfx_nf_log_net_init+0x10/0x10 [ 571.003202][T12584] ops_init+0x1df/0x5f0 [ 571.003232][T12584] setup_net+0x1ff/0x510 [ 571.003264][T12584] ? lockdep_init_map_type+0x5c/0x280 [ 571.003300][T12584] ? __pfx_setup_net+0x10/0x10 [ 571.003330][T12584] ? debug_mutex_init+0x37/0x70 [ 571.003358][T12584] copy_net_ns+0x2a6/0x5f0 [ 571.003391][T12584] create_new_namespaces+0x3ea/0xa90 [ 571.003425][T12584] copy_namespaces+0x468/0x560 [ 571.003454][T12584] copy_process+0x2822/0x7650 [ 571.003484][T12584] ? preempt_schedule_thunk+0x16/0x30 [ 571.003527][T12584] ? __pfx_copy_process+0x10/0x10 [ 571.003558][T12584] ? find_held_lock+0x2b/0x80 [ 571.003587][T12584] ? wake_up_q+0xb0/0x160 [ 571.003608][T12584] ? do_raw_spin_unlock+0x172/0x230 [ 571.003651][T12584] kernel_clone+0xfc/0x960 [ 571.003682][T12584] ? __pfx_futex_wake+0x10/0x10 [ 571.003721][T12584] ? __pfx_kernel_clone+0x10/0x10 [ 571.003749][T12584] ? __pfx_vfs_writev+0x10/0x10 [ 571.003804][T12584] __do_sys_clone+0xce/0x120 [ 571.003834][T12584] ? __pfx___do_sys_clone+0x10/0x10 [ 571.003879][T12584] ? xfd_validate_state+0x61/0x180 [ 571.003911][T12584] ? __pfx_do_writev+0x10/0x10 [ 571.003969][T12584] do_syscall_64+0xcd/0x490 [ 571.003995][T12584] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.004019][T12584] RIP: 0033:0x7fbaec58e9a9 [ 571.004037][T12584] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 571.004059][T12584] RSP: 002b:00007fbaed336fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 571.004080][T12584] RAX: ffffffffffffffda RBX: 00007fbaec7b5fa0 RCX: 00007fbaec58e9a9 [ 571.004095][T12584] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000042ae1411 [ 571.004109][T12584] RBP: 00007fbaec610d69 R08: 0000000000000000 R09: 0000000000000000 [ 571.004123][T12584] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 571.004137][T12584] R13: 0000000000000000 R14: 00007fbaec7b5fa0 R15: 00007ffc5b75cce8 [ 571.004166][T12584] [ 571.295515][ C0] vkms_vblank_simulate: vblank timer overrun [ 572.937554][T12607] Invalid ELF header magic: != ELF [ 573.347831][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 573.366580][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 573.894202][T12628] netlink: 54 bytes leftover after parsing attributes in process `syz.0.1638'. [ 573.908173][T12628] netlink: 54 bytes leftover after parsing attributes in process `syz.0.1638'. [ 573.927245][T12627] ima: policy update failed [ 573.936851][ T30] audit: type=1802 audit(6048701393.441:12): pid=12627 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.1638" res=0 errno=0 [ 575.934832][T12666] netlink: 'syz.0.1649': attribute type 25 has an invalid length. [ 575.982164][T12665] ima: policy update failed [ 576.014547][ T30] audit: type=1802 audit(6048701395.521:13): pid=12665 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.1649" res=0 errno=0 [ 576.491822][T12675] FAULT_INJECTION: forcing a failure. [ 576.491822][T12675] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 576.672187][T12675] CPU: 0 UID: 0 PID: 12675 Comm: syz.0.1650 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 576.672220][T12675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 576.672234][T12675] Call Trace: [ 576.672241][T12675] [ 576.672249][T12675] dump_stack_lvl+0x16c/0x1f0 [ 576.672275][T12675] should_fail_ex+0x512/0x640 [ 576.672303][T12675] _copy_from_user+0x2e/0xd0 [ 576.672330][T12675] core_sys_select+0x35b/0xc10 [ 576.672373][T12675] ? __pfx_core_sys_select+0x10/0x10 [ 576.672413][T12675] ? proc_fail_nth_write+0x9f/0x250 [ 576.672468][T12675] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 576.672500][T12675] kern_select+0x15d/0x1e0 [ 576.672535][T12675] ? __pfx_kern_select+0x10/0x10 [ 576.672574][T12675] ? __pfx_ksys_write+0x10/0x10 [ 576.672599][T12675] __x64_sys_select+0xbd/0x160 [ 576.672633][T12675] ? do_syscall_64+0x91/0x490 [ 576.672655][T12675] ? lockdep_hardirqs_on+0x7c/0x110 [ 576.672676][T12675] do_syscall_64+0xcd/0x490 [ 576.672708][T12675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.672731][T12675] RIP: 0033:0x7ffbbf18e9a9 [ 576.672748][T12675] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 576.672770][T12675] RSP: 002b:00007ffbc0061038 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 576.672791][T12675] RAX: ffffffffffffffda RBX: 00007ffbbf3b6160 RCX: 00007ffbbf18e9a9 [ 576.672805][T12675] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000e [ 576.672836][T12675] RBP: 00007ffbc0061090 R08: 0000000000000000 R09: 0000000000000000 [ 576.672850][T12675] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 576.672864][T12675] R13: 0000000000000001 R14: 00007ffbbf3b6160 R15: 00007fff56215e48 [ 576.672893][T12675] [ 579.937288][T12708] ima: policy update failed [ 579.966752][ T30] audit: type=1802 audit(6048701399.481:14): pid=12708 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.1659" res=0 errno=0 [ 580.437042][ T5856] Bluetooth: hci2: unexpected event 0x3e length: 726 > 260 [ 580.437078][ T5856] Bluetooth: hci2: unexpected subevent 0x05 length: 725 > 12 [ 581.052388][T12729] FAULT_INJECTION: forcing a failure. [ 581.052388][T12729] name failslab, interval 1, probability 0, space 0, times 0 [ 581.256766][T12729] CPU: 0 UID: 0 PID: 12729 Comm: syz.2.1661 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 581.256800][T12729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 581.256814][T12729] Call Trace: [ 581.256822][T12729] [ 581.256831][T12729] dump_stack_lvl+0x16c/0x1f0 [ 581.256859][T12729] should_fail_ex+0x512/0x640 [ 581.256884][T12729] ? __kmalloc_noprof+0xbf/0x510 [ 581.256910][T12729] ? __register_sysctl_table+0xea2/0x1900 [ 581.256937][T12729] should_failslab+0xc2/0x120 [ 581.256965][T12729] __kmalloc_noprof+0xd2/0x510 [ 581.256987][T12729] ? __register_sysctl_table+0xe8e/0x1900 [ 581.257021][T12729] __register_sysctl_table+0xea2/0x1900 [ 581.257054][T12729] ? __pfx___register_sysctl_table+0x10/0x10 [ 581.257081][T12729] ? is_module_address+0x69/0xf0 [ 581.257116][T12729] ? register_net_sysctl_sz+0x228/0x3e0 [ 581.257147][T12729] ? __asan_memcpy+0x3c/0x60 [ 581.257184][T12729] ? __pfx_nf_lwtunnel_net_init+0x10/0x10 [ 581.257216][T12729] nf_lwtunnel_net_init+0x60/0xf0 [ 581.257247][T12729] ops_init+0x1df/0x5f0 [ 581.257284][T12729] setup_net+0x1ff/0x510 [ 581.257311][T12729] ? lockdep_init_map_type+0x5c/0x280 [ 581.257346][T12729] ? __pfx_setup_net+0x10/0x10 [ 581.257376][T12729] ? debug_mutex_init+0x37/0x70 [ 581.257403][T12729] copy_net_ns+0x2a6/0x5f0 [ 581.257436][T12729] create_new_namespaces+0x3ea/0xa90 [ 581.257471][T12729] copy_namespaces+0x468/0x560 [ 581.257500][T12729] copy_process+0x2822/0x7650 [ 581.257543][T12729] ? __pfx_copy_process+0x10/0x10 [ 581.257574][T12729] ? find_held_lock+0x2b/0x80 [ 581.257610][T12729] kernel_clone+0xfc/0x960 [ 581.257643][T12729] ? __pfx_kernel_clone+0x10/0x10 [ 581.257691][T12729] __do_sys_clone+0xce/0x120 [ 581.257722][T12729] ? __pfx___do_sys_clone+0x10/0x10 [ 581.257766][T12729] ? xfd_validate_state+0x61/0x180 [ 581.257798][T12729] ? __pfx_do_writev+0x10/0x10 [ 581.257844][T12729] do_syscall_64+0xcd/0x490 [ 581.257871][T12729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 581.257895][T12729] RIP: 0033:0x7fa50f58e9a9 [ 581.257915][T12729] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 581.257938][T12729] RSP: 002b:00007fa51035dfe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 581.257960][T12729] RAX: ffffffffffffffda RBX: 00007fa50f7b5fa0 RCX: 00007fa50f58e9a9 [ 581.257976][T12729] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000042ae1411 [ 581.257990][T12729] RBP: 00007fa50f610d69 R08: 0000000000000000 R09: 0000000000000000 [ 581.258004][T12729] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 581.258018][T12729] R13: 0000000000000000 R14: 00007fa50f7b5fa0 R15: 00007fff9bbd7a08 [ 581.258047][T12729] [ 581.258628][T12729] sysctl could not get directory: /net/netfilter -12 [ 582.477180][T12739] FAULT_INJECTION: forcing a failure. [ 582.477180][T12739] name failslab, interval 1, probability 0, space 0, times 0 [ 582.601686][ T5856] Bluetooth: hci2: command tx timeout [ 582.700010][T12739] CPU: 0 UID: 0 PID: 12739 Comm: syz.1.1664 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 582.700043][T12739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 582.700058][T12739] Call Trace: [ 582.700065][T12739] [ 582.700074][T12739] dump_stack_lvl+0x16c/0x1f0 [ 582.700102][T12739] should_fail_ex+0x512/0x640 [ 582.700125][T12739] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 582.700166][T12739] should_failslab+0xc2/0x120 [ 582.700193][T12739] __kmalloc_cache_noprof+0x6a/0x3e0 [ 582.700230][T12739] ? madvise_collapse+0x1cb/0xb20 [ 582.700266][T12739] madvise_collapse+0x1cb/0xb20 [ 582.700297][T12739] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 582.700326][T12739] ? is_bpf_text_address+0x94/0x1a0 [ 582.700361][T12739] ? __pfx_madvise_collapse+0x10/0x10 [ 582.700396][T12739] ? mtree_range_walk+0x718/0xc00 [ 582.700431][T12739] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 582.700477][T12739] madvise_vma_behavior+0x118d/0x2420 [ 582.700508][T12739] ? mas_prev_setup.constprop.0+0x81/0x830 [ 582.700550][T12739] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 582.700581][T12739] ? __pfx_mas_prev+0x10/0x10 [ 582.700612][T12739] ? find_vma_prev+0xda/0x160 [ 582.700644][T12739] ? __pfx_find_vma_prev+0x10/0x10 [ 582.700691][T12739] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 582.700721][T12739] madvise_walk_vmas+0x1d1/0x2c0 [ 582.700751][T12739] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 582.700787][T12739] madvise_do_behavior+0x15d/0x3f0 [ 582.700820][T12739] ? __pfx_madvise_do_behavior+0x10/0x10 [ 582.700867][T12739] do_madvise+0x161/0x230 [ 582.700897][T12739] ? __pfx_do_madvise+0x10/0x10 [ 582.700939][T12739] ? ksys_write+0x1ac/0x250 [ 582.700961][T12739] ? __pfx_ksys_write+0x10/0x10 [ 582.700989][T12739] __x64_sys_madvise+0xa9/0x110 [ 582.701018][T12739] ? lockdep_hardirqs_on+0x7c/0x110 [ 582.701045][T12739] do_syscall_64+0xcd/0x490 [ 582.701072][T12739] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 582.701096][T12739] RIP: 0033:0x7f265738e9a9 [ 582.701114][T12739] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 582.701137][T12739] RSP: 002b:00007f265816d038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 582.701158][T12739] RAX: ffffffffffffffda RBX: 00007f26575b5fa0 RCX: 00007f265738e9a9 [ 582.701174][T12739] RDX: 0000000000000019 RSI: 0000000000200007 RDI: 0000000000000000 [ 582.701188][T12739] RBP: 00007f265816d090 R08: 0000000000000000 R09: 0000000000000000 [ 582.701202][T12739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 582.701215][T12739] R13: 0000000000000000 R14: 00007f26575b5fa0 R15: 00007fff98957368 [ 582.701244][T12739] [ 584.241321][T12755] FAULT_INJECTION: forcing a failure. [ 584.241321][T12755] name failslab, interval 1, probability 0, space 0, times 0 [ 584.266979][T12755] CPU: 0 UID: 0 PID: 12755 Comm: syz.0.1668 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 584.267013][T12755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 584.267027][T12755] Call Trace: [ 584.267035][T12755] [ 584.267044][T12755] dump_stack_lvl+0x16c/0x1f0 [ 584.267072][T12755] should_fail_ex+0x512/0x640 [ 584.267097][T12755] ? __kmalloc_noprof+0xbf/0x510 [ 584.267123][T12755] ? lsm_blob_alloc+0x68/0x90 [ 584.267148][T12755] should_failslab+0xc2/0x120 [ 584.267176][T12755] __kmalloc_noprof+0xd2/0x510 [ 584.267207][T12755] lsm_blob_alloc+0x68/0x90 [ 584.267233][T12755] security_sk_alloc+0x30/0x270 [ 584.267266][T12755] sk_prot_alloc+0x1c7/0x2a0 [ 584.267300][T12755] sk_alloc+0x36/0xc20 [ 584.267323][T12755] __netlink_create+0x5e/0x2c0 [ 584.267349][T12755] __netlink_kernel_create+0xed/0x750 [ 584.267380][T12755] ? __pfx___netlink_kernel_create+0x10/0x10 [ 584.267418][T12755] ? __pfx_genl_pernet_init+0x10/0x10 [ 584.267450][T12755] genl_pernet_init+0xbd/0x170 [ 584.267484][T12755] ? __pfx_genl_pernet_init+0x10/0x10 [ 584.267516][T12755] ? lockdep_init_map_type+0x5c/0x280 [ 584.267552][T12755] ? __pfx_genl_rcv+0x10/0x10 [ 584.267581][T12755] ? __pfx_genl_bind+0x10/0x10 [ 584.267611][T12755] ? __pfx_genl_unbind+0x10/0x10 [ 584.267640][T12755] ? __pfx_genl_release+0x10/0x10 [ 584.267674][T12755] ? debug_mutex_init+0x37/0x70 [ 584.267701][T12755] ops_init+0x1df/0x5f0 [ 584.267732][T12755] setup_net+0x1ff/0x510 [ 584.267758][T12755] ? lockdep_init_map_type+0x5c/0x280 [ 584.267792][T12755] ? __pfx_setup_net+0x10/0x10 [ 584.267821][T12755] ? debug_mutex_init+0x37/0x70 [ 584.267849][T12755] copy_net_ns+0x2a6/0x5f0 [ 584.267882][T12755] create_new_namespaces+0x3ea/0xa90 [ 584.267916][T12755] copy_namespaces+0x468/0x560 [ 584.267945][T12755] copy_process+0x2822/0x7650 [ 584.267999][T12755] ? __pfx_copy_process+0x10/0x10 [ 584.268030][T12755] ? kfree+0x24f/0x4d0 [ 584.268068][T12755] ? __futex_hash.constprop.0+0x1e9/0x440 [ 584.268102][T12755] kernel_clone+0xfc/0x960 [ 584.268135][T12755] ? __pfx_kernel_clone+0x10/0x10 [ 584.268182][T12755] __do_sys_clone+0xce/0x120 [ 584.268215][T12755] ? __pfx___do_sys_clone+0x10/0x10 [ 584.268261][T12755] ? xfd_validate_state+0x61/0x180 [ 584.268292][T12755] ? __pfx_do_writev+0x10/0x10 [ 584.268338][T12755] do_syscall_64+0xcd/0x490 [ 584.268366][T12755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.268390][T12755] RIP: 0033:0x7ffbbf18e9a9 [ 584.268409][T12755] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 584.268433][T12755] RSP: 002b:00007ffbc00a2fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 584.268455][T12755] RAX: ffffffffffffffda RBX: 00007ffbbf3b5fa0 RCX: 00007ffbbf18e9a9 [ 584.268471][T12755] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000042ae1411 [ 584.268485][T12755] RBP: 00007ffbbf210d69 R08: 0000000000000000 R09: 0000000000000000 [ 584.268499][T12755] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 584.268513][T12755] R13: 0000000000000000 R14: 00007ffbbf3b5fa0 R15: 00007fff56215e48 [ 584.268549][T12755] [ 585.948379][T12777] netlink: 'syz.2.1671': attribute type 25 has an invalid length. [ 585.978407][T12776] ima: policy update failed [ 586.041279][ T30] audit: type=1802 audit(6048701412.515:15): pid=12776 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.1671" res=0 errno=0 [ 586.228132][T12780] sd 0:0:1:0: PR command failed: 1026 [ 586.233626][T12780] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 586.309725][T12780] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 588.419289][T12819] netlink: 'syz.0.1682': attribute type 25 has an invalid length. [ 588.447252][T12818] ima: policy update failed [ 588.461995][ T30] audit: type=1802 audit(6048701414.975:16): pid=12818 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.1682" res=0 errno=0 [ 590.257579][T12839] kexec: Could not allocate control_code_buffer [ 590.770116][T12867] netlink: 'syz.4.1693': attribute type 25 has an invalid length. [ 590.901073][T12863] ima: policy update failed [ 590.906592][T12865] FAULT_INJECTION: forcing a failure. [ 590.906592][T12865] name fail_futex, interval 1, probability 0, space 0, times 1 [ 590.925263][T12865] CPU: 0 UID: 0 PID: 12865 Comm: syz.0.1695 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 590.925295][T12865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 590.925310][T12865] Call Trace: [ 590.925317][T12865] [ 590.925326][T12865] dump_stack_lvl+0x16c/0x1f0 [ 590.925353][T12865] should_fail_ex+0x512/0x640 [ 590.925388][T12865] get_futex_key+0x1d0/0x1540 [ 590.925420][T12865] ? __pfx_get_futex_key+0x10/0x10 [ 590.925456][T12865] futex_wake+0xe7/0x4e0 [ 590.925489][T12865] ? rcu_is_watching+0x12/0xc0 [ 590.925513][T12865] ? __pfx_futex_wake+0x10/0x10 [ 590.925549][T12865] ? lockdep_init_map_type+0x5c/0x280 [ 590.925591][T12865] do_futex+0x1e3/0x350 [ 590.925620][T12865] ? __pfx_do_futex+0x10/0x10 [ 590.925655][T12865] __x64_sys_futex+0x1e0/0x4c0 [ 590.925688][T12865] ? __pfx___x64_sys_futex+0x10/0x10 [ 590.925718][T12865] ? fd_install+0x244/0x750 [ 590.925762][T12865] do_syscall_64+0xcd/0x490 [ 590.925787][T12865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 590.925811][T12865] RIP: 0033:0x7ffbbf18e9a9 [ 590.925829][T12865] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 590.925851][T12865] RSP: 002b:00007ffbc00a30e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 590.925872][T12865] RAX: ffffffffffffffda RBX: 00007ffbbf3b5fa8 RCX: 00007ffbbf18e9a9 [ 590.925887][T12865] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007ffbbf3b5fac [ 590.925902][T12865] RBP: 00007ffbbf3b5fa0 R08: 00007ffbc00a4000 R09: 0000000000000000 [ 590.925916][T12865] R10: 0000000000000003 R11: 0000000000000246 R12: 00007ffbbf3b5fac [ 590.925930][T12865] R13: 0000000000000000 R14: 00007fff56215d60 R15: 00007fff56215e48 [ 590.925957][T12865] [ 591.351821][ T30] audit: type=1802 audit(6048701417.675:17): pid=12863 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.1693" res=0 errno=0 [ 592.109854][T12886] FAULT_INJECTION: forcing a failure. [ 592.109854][T12886] name failslab, interval 1, probability 0, space 0, times 0 [ 592.127177][T12886] CPU: 0 UID: 0 PID: 12886 Comm: syz.0.1701 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 592.127209][T12886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 592.127287][T12886] Call Trace: [ 592.127296][T12886] [ 592.127305][T12886] dump_stack_lvl+0x16c/0x1f0 [ 592.127335][T12886] should_fail_ex+0x512/0x640 [ 592.127360][T12886] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 592.127388][T12886] should_failslab+0xc2/0x120 [ 592.127416][T12886] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 592.127441][T12886] ? __pmd_alloc+0xbf/0x930 [ 592.127478][T12886] __pmd_alloc+0xbf/0x930 [ 592.127512][T12886] huge_pte_alloc+0x41d/0x5b0 [ 592.127552][T12886] hugetlb_fault+0x373/0x3070 [ 592.127594][T12886] ? __pfx_hugetlb_fault+0x10/0x10 [ 592.127642][T12886] ? find_vma+0xbf/0x140 [ 592.127671][T12886] ? __pfx_find_vma+0x10/0x10 [ 592.127703][T12886] handle_mm_fault+0xbfa/0xd10 [ 592.127742][T12886] ? __pkru_allows_pkey+0x51/0xb0 [ 592.127782][T12886] do_user_addr_fault+0x7a6/0x1370 [ 592.127820][T12886] ? rcu_is_watching+0x12/0xc0 [ 592.127849][T12886] exc_page_fault+0x5c/0xb0 [ 592.127873][T12886] asm_exc_page_fault+0x26/0x30 [ 592.127897][T12886] RIP: 0010:rep_movs_alternative+0x11/0x90 [ 592.127931][T12886] Code: e9 84 11 04 00 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f 8a 06 <88> 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 4d 11 04 00 66 66 2e 0f [ 592.127955][T12886] RSP: 0018:ffffc90004c5fe98 EFLAGS: 00050202 [ 592.127974][T12886] RAX: 0000000000000070 RBX: 0000000000000007 RCX: 0000000000000007 [ 592.127988][T12886] RDX: fffffbfff177ea4c RSI: ffffffff8bbf5260 RDI: 0000000000000000 [ 592.128004][T12886] RBP: 0000000000000000 R08: 0000000000000000 R09: fffffbfff177ea4c [ 592.128018][T12886] R10: 0000000000000006 R11: 0000000000000001 R12: ffffffff8bbf5260 [ 592.128032][T12886] R13: 0000000000000007 R14: 00007ffffffff000 R15: 0000000000000000 [ 592.128063][T12886] _copy_to_user+0xbb/0xd0 [ 592.128093][T12886] fs_name+0x172/0x220 [ 592.128120][T12886] __x64_sys_sysfs+0xbf/0x1a0 [ 592.128147][T12886] do_syscall_64+0xcd/0x490 [ 592.128174][T12886] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.128198][T12886] RIP: 0033:0x7ffbbf18e9a9 [ 592.128216][T12886] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 592.128245][T12886] RSP: 002b:00007ffbc00a3038 EFLAGS: 00000246 ORIG_RAX: 000000000000008b [ 592.128267][T12886] RAX: ffffffffffffffda RBX: 00007ffbbf3b5fa0 RCX: 00007ffbbf18e9a9 [ 592.128283][T12886] RDX: 0000000000000000 RSI: 000000000000000e RDI: 0000000000000002 [ 592.128298][T12886] RBP: 00007ffbbf210d69 R08: 0000000000000000 R09: 0000000000000000 [ 592.128312][T12886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 592.128326][T12886] R13: 0000000000000000 R14: 00007ffbbf3b5fa0 R15: 00007fff56215e48 [ 592.128356][T12886] [ 592.424311][T12886] netlink: 206 bytes leftover after parsing attributes in process `syz.0.1701'. [ 592.454198][T12888] FAULT_INJECTION: forcing a failure. [ 592.454198][T12888] name failslab, interval 1, probability 0, space 0, times 0 [ 592.467387][T12888] CPU: 0 UID: 0 PID: 12888 Comm: syz.2.1699 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 592.467417][T12888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 592.467432][T12888] Call Trace: [ 592.467439][T12888] [ 592.467447][T12888] dump_stack_lvl+0x16c/0x1f0 [ 592.467475][T12888] should_fail_ex+0x512/0x640 [ 592.467498][T12888] ? __kmalloc_noprof+0xbf/0x510 [ 592.467525][T12888] ? __register_sysctl_table+0xea2/0x1900 [ 592.467550][T12888] should_failslab+0xc2/0x120 [ 592.467577][T12888] __kmalloc_noprof+0xd2/0x510 [ 592.467599][T12888] ? __register_sysctl_table+0xe8e/0x1900 [ 592.467631][T12888] __register_sysctl_table+0xea2/0x1900 [ 592.467664][T12888] ? __pfx___register_sysctl_table+0x10/0x10 [ 592.467690][T12888] ? is_module_address+0x69/0xf0 [ 592.467723][T12888] ? register_net_sysctl_sz+0x228/0x3e0 [ 592.467752][T12888] ? __asan_memcpy+0x3c/0x60 [ 592.467788][T12888] ? __pfx_nf_lwtunnel_net_init+0x10/0x10 [ 592.467819][T12888] nf_lwtunnel_net_init+0x60/0xf0 [ 592.467848][T12888] ops_init+0x1df/0x5f0 [ 592.467877][T12888] setup_net+0x1ff/0x510 [ 592.467902][T12888] ? lockdep_init_map_type+0x5c/0x280 [ 592.467969][T12888] ? __pfx_setup_net+0x10/0x10 [ 592.467999][T12888] ? debug_mutex_init+0x37/0x70 [ 592.468025][T12888] copy_net_ns+0x2a6/0x5f0 [ 592.468057][T12888] create_new_namespaces+0x3ea/0xa90 [ 592.468110][T12888] copy_namespaces+0x468/0x560 [ 592.468139][T12888] copy_process+0x2822/0x7650 [ 592.468183][T12888] ? __pfx_copy_process+0x10/0x10 [ 592.468215][T12888] ? find_held_lock+0x2b/0x80 [ 592.468250][T12888] kernel_clone+0xfc/0x960 [ 592.468289][T12888] ? __pfx_kernel_clone+0x10/0x10 [ 592.468337][T12888] __do_sys_clone+0xce/0x120 [ 592.468368][T12888] ? __pfx___do_sys_clone+0x10/0x10 [ 592.468413][T12888] ? xfd_validate_state+0x61/0x180 [ 592.468457][T12888] ? __pfx_do_writev+0x10/0x10 [ 592.468501][T12888] do_syscall_64+0xcd/0x490 [ 592.468531][T12888] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.468555][T12888] RIP: 0033:0x7fa50f58e9a9 [ 592.468593][T12888] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 592.468616][T12888] RSP: 002b:00007fa51035dfe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 592.468638][T12888] RAX: ffffffffffffffda RBX: 00007fa50f7b5fa0 RCX: 00007fa50f58e9a9 [ 592.468653][T12888] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000042ae1411 [ 592.468668][T12888] RBP: 00007fa50f610d69 R08: 0000000000000000 R09: 0000000000000000 [ 592.468683][T12888] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 592.468697][T12888] R13: 0000000000000000 R14: 00007fa50f7b5fa0 R15: 00007fff9bbd7a08 [ 592.468726][T12888] [ 592.468736][T12888] sysctl could not get directory: /net/netfilter -12 [ 593.374806][T12902] FAULT_INJECTION: forcing a failure. [ 593.374806][T12902] name failslab, interval 1, probability 0, space 0, times 0 [ 593.399980][T12902] CPU: 0 UID: 0 PID: 12902 Comm: syz.0.1704 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 593.400012][T12902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 593.400026][T12902] Call Trace: [ 593.400033][T12902] [ 593.400041][T12902] dump_stack_lvl+0x16c/0x1f0 [ 593.400069][T12902] should_fail_ex+0x512/0x640 [ 593.400093][T12902] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 593.400130][T12902] should_failslab+0xc2/0x120 [ 593.400157][T12902] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 593.400182][T12902] ? __alloc_skb+0x2b2/0x380 [ 593.400209][T12902] __alloc_skb+0x2b2/0x380 [ 593.400231][T12902] ? __pfx___alloc_skb+0x10/0x10 [ 593.400254][T12902] ? genl_rcv_msg+0x4bb/0x800 [ 593.400295][T12902] netlink_ack+0x15d/0xb80 [ 593.400332][T12902] netlink_rcv_skb+0x332/0x420 [ 593.400361][T12902] ? __pfx_genl_rcv_msg+0x10/0x10 [ 593.400396][T12902] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 593.400442][T12902] ? netlink_deliver_tap+0x1ae/0xd30 [ 593.400474][T12902] genl_rcv+0x28/0x40 [ 593.400502][T12902] netlink_unicast+0x58a/0x850 [ 593.400535][T12902] ? __pfx_netlink_unicast+0x10/0x10 [ 593.400573][T12902] netlink_sendmsg+0x8d1/0xdd0 [ 593.400606][T12902] ? __pfx_netlink_sendmsg+0x10/0x10 [ 593.400647][T12902] ____sys_sendmsg+0xa95/0xc70 [ 593.400681][T12902] ? copy_msghdr_from_user+0x10a/0x160 [ 593.400706][T12902] ? __pfx_____sys_sendmsg+0x10/0x10 [ 593.400752][T12902] ___sys_sendmsg+0x134/0x1d0 [ 593.400778][T12902] ? __pfx____sys_sendmsg+0x10/0x10 [ 593.400800][T12902] ? __lock_acquire+0x622/0x1c90 [ 593.400869][T12902] __sys_sendmsg+0x16d/0x220 [ 593.400895][T12902] ? __pfx___sys_sendmsg+0x10/0x10 [ 593.400939][T12902] do_syscall_64+0xcd/0x490 [ 593.400965][T12902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 593.400994][T12902] RIP: 0033:0x7ffbbf18e9a9 [ 593.401012][T12902] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 593.401035][T12902] RSP: 002b:00007ffbc00a3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 593.401057][T12902] RAX: ffffffffffffffda RBX: 00007ffbbf3b5fa0 RCX: 00007ffbbf18e9a9 [ 593.401072][T12902] RDX: 0000000000004002 RSI: 00002000000079c0 RDI: 0000000000000003 [ 593.401086][T12902] RBP: 00007ffbc00a3090 R08: 0000000000000000 R09: 0000000000000000 [ 593.401100][T12902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 593.401118][T12902] R13: 0000000000000000 R14: 00007ffbbf3b5fa0 R15: 00007fff56215e48 [ 593.401147][T12902] [ 594.794702][T12926] FAULT_INJECTION: forcing a failure. [ 594.794702][T12926] name failslab, interval 1, probability 0, space 0, times 0 [ 594.864264][T12926] CPU: 0 UID: 0 PID: 12926 Comm: syz.2.1710 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 594.864298][T12926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 594.864313][T12926] Call Trace: [ 594.864320][T12926] [ 594.864329][T12926] dump_stack_lvl+0x16c/0x1f0 [ 594.864358][T12926] should_fail_ex+0x512/0x640 [ 594.864383][T12926] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 594.864415][T12926] should_failslab+0xc2/0x120 [ 594.864443][T12926] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 594.864472][T12926] ? kstrdup_const+0x63/0x80 [ 594.864500][T12926] kstrdup+0x53/0x100 [ 594.864525][T12926] kstrdup_const+0x63/0x80 [ 594.864548][T12926] alloc_vfsmnt+0xea/0x730 [ 594.864591][T12926] clone_mnt+0x6d/0xff0 [ 594.864622][T12926] ? copy_tree+0x50d/0xa20 [ 594.864642][T12926] ? copy_mnt_ns+0x1ac/0xac0 [ 594.864670][T12926] copy_tree+0x38d/0xa20 [ 594.864701][T12926] copy_mnt_ns+0x1ac/0xac0 [ 594.864724][T12926] ? trace_kmem_cache_alloc+0x28/0xc0 [ 594.864754][T12926] ? trace_cap_capable+0x18d/0x200 [ 594.864782][T12926] ? create_new_namespaces+0x30/0xa90 [ 594.864812][T12926] create_new_namespaces+0xd3/0xa90 [ 594.864838][T12926] ? bpf_lsm_capable+0x9/0x10 [ 594.864890][T12926] ? security_capable+0x7e/0x260 [ 594.864922][T12926] copy_namespaces+0x468/0x560 [ 594.864950][T12926] copy_process+0x2822/0x7650 [ 594.864989][T12926] ? preempt_schedule_thunk+0x16/0x30 [ 594.865037][T12926] ? __pfx_copy_process+0x10/0x10 [ 594.865068][T12926] ? find_held_lock+0x2b/0x80 [ 594.865098][T12926] ? wake_up_q+0xb0/0x160 [ 594.865120][T12926] ? do_raw_spin_unlock+0x172/0x230 [ 594.865170][T12926] kernel_clone+0xfc/0x960 [ 594.865201][T12926] ? __pfx_futex_wake+0x10/0x10 [ 594.865242][T12926] ? __pfx_kernel_clone+0x10/0x10 [ 594.865275][T12926] ? __pfx_vfs_writev+0x10/0x10 [ 594.865331][T12926] __do_sys_clone+0xce/0x120 [ 594.865375][T12926] ? __pfx___do_sys_clone+0x10/0x10 [ 594.865421][T12926] ? xfd_validate_state+0x61/0x180 [ 594.865454][T12926] ? __pfx_do_writev+0x10/0x10 [ 594.865502][T12926] do_syscall_64+0xcd/0x490 [ 594.865532][T12926] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 594.865557][T12926] RIP: 0033:0x7fa50f58e9a9 [ 594.865577][T12926] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 594.865600][T12926] RSP: 002b:00007fa51035dfe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 594.865625][T12926] RAX: ffffffffffffffda RBX: 00007fa50f7b5fa0 RCX: 00007fa50f58e9a9 [ 594.865641][T12926] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000042ae1411 [ 594.865655][T12926] RBP: 00007fa50f610d69 R08: 0000000000000000 R09: 0000000000000000 [ 594.865672][T12926] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 594.865687][T12926] R13: 0000000000000000 R14: 00007fa50f7b5fa0 R15: 00007fff9bbd7a08 [ 594.865717][T12926] [ 596.194506][T12927] bridge0: port 3(team0) entered blocking state [ 596.207892][T12927] bridge0: port 3(team0) entered disabled state [ 596.241950][T12927] team0: entered allmulticast mode [ 596.272448][T12927] team_slave_1: entered allmulticast mode [ 596.295154][T12927] team0: entered promiscuous mode [ 596.314586][T12927] team_slave_0: entered promiscuous mode [ 596.321049][T12927] team_slave_1: entered promiscuous mode [ 596.333232][T12927] bridge0: port 3(team0) entered blocking state [ 596.339739][T12927] bridge0: port 3(team0) entered forwarding state [ 596.349599][T12947] netlink: 'syz.4.1716': attribute type 1 has an invalid length. [ 596.571547][T12949] netlink: 'syz.0.1717': attribute type 1 has an invalid length. [ 596.580570][T12949] netlink: 54 bytes leftover after parsing attributes in process `syz.0.1717'. [ 596.620170][T12948] ima: policy update failed [ 596.638861][ T30] audit: type=1802 audit(6048701423.135:18): pid=12948 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.1717" res=0 errno=0 [ 597.836021][T12962] FAULT_INJECTION: forcing a failure. [ 597.836021][T12962] name failslab, interval 1, probability 0, space 0, times 0 [ 597.951029][T12962] CPU: 0 UID: 0 PID: 12962 Comm: syz.0.1723 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 597.951061][T12962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 597.951076][T12962] Call Trace: [ 597.951083][T12962] [ 597.951092][T12962] dump_stack_lvl+0x16c/0x1f0 [ 597.951119][T12962] should_fail_ex+0x512/0x640 [ 597.951143][T12962] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 597.951170][T12962] should_failslab+0xc2/0x120 [ 597.951198][T12962] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 597.951221][T12962] ? __proc_create+0xc3/0x8c0 [ 597.951245][T12962] ? __proc_create+0x2ce/0x8c0 [ 597.951275][T12962] __proc_create+0x2ce/0x8c0 [ 597.951301][T12962] ? __pfx___proc_create+0x10/0x10 [ 597.951328][T12962] ? insert_header+0xf8d/0x1480 [ 597.951355][T12962] ? __register_sysctl_table+0x736/0x1900 [ 597.951385][T12962] proc_create_reg+0x7d/0x180 [ 597.951414][T12962] proc_create_net_data+0x8e/0x1b0 [ 597.951462][T12962] ? __pfx_proc_create_net_data+0x10/0x10 [ 597.951492][T12962] ? __pfx___register_sysctl_table+0x10/0x10 [ 597.951518][T12962] ? is_module_address+0x69/0xf0 [ 597.951553][T12962] ? register_net_sysctl_sz+0x228/0x3e0 [ 597.951584][T12962] ? __pfx_nf_log_net_init+0x10/0x10 [ 597.951612][T12962] nf_log_net_init+0x69/0x450 [ 597.951640][T12962] ? __pfx_nf_log_net_init+0x10/0x10 [ 597.951667][T12962] ops_init+0x1df/0x5f0 [ 597.951698][T12962] setup_net+0x1ff/0x510 [ 597.951724][T12962] ? lockdep_init_map_type+0x5c/0x280 [ 597.951759][T12962] ? __pfx_setup_net+0x10/0x10 [ 597.951788][T12962] ? debug_mutex_init+0x37/0x70 [ 597.951816][T12962] copy_net_ns+0x2a6/0x5f0 [ 597.951849][T12962] create_new_namespaces+0x3ea/0xa90 [ 597.951884][T12962] copy_namespaces+0x468/0x560 [ 597.951921][T12962] copy_process+0x2822/0x7650 [ 597.951952][T12962] ? preempt_schedule_thunk+0x16/0x30 [ 597.951996][T12962] ? __pfx_copy_process+0x10/0x10 [ 597.952030][T12962] ? find_held_lock+0x2b/0x80 [ 597.952058][T12962] ? wake_up_q+0xb0/0x160 [ 597.952079][T12962] ? do_raw_spin_unlock+0x172/0x230 [ 597.952122][T12962] kernel_clone+0xfc/0x960 [ 597.952153][T12962] ? __pfx_futex_wake+0x10/0x10 [ 597.952187][T12962] ? __pfx_kernel_clone+0x10/0x10 [ 597.952216][T12962] ? __pfx_vfs_writev+0x10/0x10 [ 597.952270][T12962] __do_sys_clone+0xce/0x120 [ 597.952301][T12962] ? __pfx___do_sys_clone+0x10/0x10 [ 597.952346][T12962] ? xfd_validate_state+0x61/0x180 [ 597.952377][T12962] ? __pfx_do_writev+0x10/0x10 [ 597.952422][T12962] do_syscall_64+0xcd/0x490 [ 597.952449][T12962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.952474][T12962] RIP: 0033:0x7ffbbf18e9a9 [ 597.952493][T12962] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 597.952516][T12962] RSP: 002b:00007ffbc00a2fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 597.952539][T12962] RAX: ffffffffffffffda RBX: 00007ffbbf3b5fa0 RCX: 00007ffbbf18e9a9 [ 597.952555][T12962] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000042ae1411 [ 597.952570][T12962] RBP: 00007ffbbf210d69 R08: 0000000000000000 R09: 0000000000000000 [ 597.952584][T12962] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 597.952599][T12962] R13: 0000000000000000 R14: 00007ffbbf3b5fa0 R15: 00007fff56215e48 [ 597.952629][T12962] [ 600.937996][T12990] netlink: 'syz.1.1728': attribute type 1 has an invalid length. [ 600.945873][T12990] netlink: 54 bytes leftover after parsing attributes in process `syz.1.1728'. [ 601.082622][T12987] ima: policy update failed [ 601.183864][ T30] audit: type=1802 audit(6048701427.695:19): pid=12987 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.1728" res=0 errno=0 [ 601.410425][T12999] FAULT_INJECTION: forcing a failure. [ 601.410425][T12999] name failslab, interval 1, probability 0, space 0, times 0 [ 601.447331][T12999] CPU: 0 UID: 0 PID: 12999 Comm: syz.0.1735 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 601.447365][T12999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 601.447380][T12999] Call Trace: [ 601.447388][T12999] [ 601.447397][T12999] dump_stack_lvl+0x16c/0x1f0 [ 601.447435][T12999] should_fail_ex+0x512/0x640 [ 601.447460][T12999] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 601.447492][T12999] should_failslab+0xc2/0x120 [ 601.447521][T12999] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 601.447548][T12999] ? __pfx_proc_create_net_data+0x10/0x10 [ 601.447576][T12999] ? nf_log_net_init+0x9f/0x450 [ 601.447605][T12999] ? __pfx_nf_log_net_init+0x10/0x10 [ 601.447633][T12999] kmemdup_noprof+0x29/0x60 [ 601.447658][T12999] nf_log_net_init+0x9f/0x450 [ 601.447687][T12999] ? __pfx_nf_log_net_init+0x10/0x10 [ 601.447713][T12999] ops_init+0x1df/0x5f0 [ 601.447744][T12999] setup_net+0x1ff/0x510 [ 601.447770][T12999] ? lockdep_init_map_type+0x5c/0x280 [ 601.447805][T12999] ? __pfx_setup_net+0x10/0x10 [ 601.447835][T12999] ? debug_mutex_init+0x37/0x70 [ 601.447862][T12999] copy_net_ns+0x2a6/0x5f0 [ 601.447895][T12999] create_new_namespaces+0x3ea/0xa90 [ 601.447929][T12999] copy_namespaces+0x468/0x560 [ 601.447958][T12999] copy_process+0x2822/0x7650 [ 601.448005][T12999] ? __pfx_copy_process+0x10/0x10 [ 601.448036][T12999] ? kfree+0x24f/0x4d0 [ 601.448074][T12999] ? __futex_hash.constprop.0+0x1e9/0x440 [ 601.448108][T12999] kernel_clone+0xfc/0x960 [ 601.448141][T12999] ? __pfx_kernel_clone+0x10/0x10 [ 601.448202][T12999] __do_sys_clone+0xce/0x120 [ 601.448234][T12999] ? __pfx___do_sys_clone+0x10/0x10 [ 601.448280][T12999] ? xfd_validate_state+0x61/0x180 [ 601.448312][T12999] ? __pfx_do_writev+0x10/0x10 [ 601.448359][T12999] do_syscall_64+0xcd/0x490 [ 601.448385][T12999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 601.448417][T12999] RIP: 0033:0x7ffbbf18e9a9 [ 601.448436][T12999] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 601.448459][T12999] RSP: 002b:00007ffbc00a2fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 601.448482][T12999] RAX: ffffffffffffffda RBX: 00007ffbbf3b5fa0 RCX: 00007ffbbf18e9a9 [ 601.448498][T12999] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000042ae1411 [ 601.448513][T12999] RBP: 00007ffbbf210d69 R08: 0000000000000000 R09: 0000000000000000 [ 601.448528][T12999] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 601.448544][T12999] R13: 0000000000000000 R14: 00007ffbbf3b5fa0 R15: 00007fff56215e48 [ 601.448573][T12999] [ 602.657510][T13015] FAULT_INJECTION: forcing a failure. [ 602.657510][T13015] name failslab, interval 1, probability 0, space 0, times 0 [ 602.676596][T13015] CPU: 0 UID: 0 PID: 13015 Comm: syz.0.1739 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 602.676629][T13015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 602.676642][T13015] Call Trace: [ 602.676649][T13015] [ 602.676658][T13015] dump_stack_lvl+0x16c/0x1f0 [ 602.676686][T13015] should_fail_ex+0x512/0x640 [ 602.676708][T13015] ? __kmalloc_noprof+0xbf/0x510 [ 602.676733][T13015] ? net_shaper_nl_group_doit+0x304/0x1460 [ 602.676763][T13015] should_failslab+0xc2/0x120 [ 602.676789][T13015] __kmalloc_noprof+0xd2/0x510 [ 602.676810][T13015] ? ref_tracker_alloc+0x305/0x5b0 [ 602.676840][T13015] net_shaper_nl_group_doit+0x304/0x1460 [ 602.676872][T13015] ? ___sys_sendmsg+0x134/0x1d0 [ 602.676895][T13015] ? do_syscall_64+0xcd/0x490 [ 602.676917][T13015] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 602.676942][T13015] ? __pfx_net_shaper_nl_group_doit+0x10/0x10 [ 602.676979][T13015] ? netdev_get_by_index+0x81/0xb0 [ 602.677009][T13015] ? net_shaper_ctx_setup+0x1a3/0x530 [ 602.677039][T13015] genl_family_rcv_msg_doit+0x209/0x2f0 [ 602.677075][T13015] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 602.677107][T13015] ? rcu_is_watching+0x12/0xc0 [ 602.677141][T13015] ? bpf_lsm_capable+0x9/0x10 [ 602.677173][T13015] ? security_capable+0x7e/0x260 [ 602.677207][T13015] genl_rcv_msg+0x55c/0x800 [ 602.677251][T13015] ? __pfx_genl_rcv_msg+0x10/0x10 [ 602.677283][T13015] ? __pfx_net_shaper_nl_pre_doit+0x10/0x10 [ 602.677311][T13015] ? __pfx_net_shaper_nl_group_doit+0x10/0x10 [ 602.677341][T13015] ? __pfx_net_shaper_nl_post_doit+0x10/0x10 [ 602.677381][T13015] netlink_rcv_skb+0x158/0x420 [ 602.677408][T13015] ? __pfx_genl_rcv_msg+0x10/0x10 [ 602.677442][T13015] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 602.677482][T13015] ? netlink_deliver_tap+0x1ae/0xd30 [ 602.677513][T13015] genl_rcv+0x28/0x40 [ 602.677541][T13015] netlink_unicast+0x58a/0x850 [ 602.677573][T13015] ? __pfx_netlink_unicast+0x10/0x10 [ 602.677629][T13015] netlink_sendmsg+0x8d1/0xdd0 [ 602.677662][T13015] ? __pfx_netlink_sendmsg+0x10/0x10 [ 602.677703][T13015] ____sys_sendmsg+0xa95/0xc70 [ 602.677736][T13015] ? copy_msghdr_from_user+0x10a/0x160 [ 602.677761][T13015] ? __pfx_____sys_sendmsg+0x10/0x10 [ 602.677807][T13015] ___sys_sendmsg+0x134/0x1d0 [ 602.677833][T13015] ? __pfx____sys_sendmsg+0x10/0x10 [ 602.677856][T13015] ? __lock_acquire+0x622/0x1c90 [ 602.677924][T13015] __sys_sendmsg+0x16d/0x220 [ 602.677949][T13015] ? __pfx___sys_sendmsg+0x10/0x10 [ 602.677994][T13015] do_syscall_64+0xcd/0x490 [ 602.678020][T13015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 602.678043][T13015] RIP: 0033:0x7ffbbf18e9a9 [ 602.678061][T13015] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 602.678084][T13015] RSP: 002b:00007ffbc00a3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 602.678106][T13015] RAX: ffffffffffffffda RBX: 00007ffbbf3b5fa0 RCX: 00007ffbbf18e9a9 [ 602.678121][T13015] RDX: 0000000000000014 RSI: 0000200000001600 RDI: 0000000000000003 [ 602.678136][T13015] RBP: 00007ffbc00a3090 R08: 0000000000000000 R09: 0000000000000000 [ 602.678149][T13015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 602.678163][T13015] R13: 0000000000000000 R14: 00007ffbbf3b5fa0 R15: 00007fff56215e48 [ 602.678193][T13015] [ 603.176377][T13024] FAULT_INJECTION: forcing a failure. [ 603.176377][T13024] name failslab, interval 1, probability 0, space 0, times 0 [ 603.189614][T13024] CPU: 0 UID: 0 PID: 13024 Comm: syz.0.1740 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 603.189646][T13024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 603.189660][T13024] Call Trace: [ 603.189668][T13024] [ 603.189676][T13024] dump_stack_lvl+0x16c/0x1f0 [ 603.189705][T13024] should_fail_ex+0x512/0x640 [ 603.189729][T13024] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 603.189786][T13024] should_failslab+0xc2/0x120 [ 603.189813][T13024] __kmalloc_cache_noprof+0x6a/0x3e0 [ 603.189850][T13024] ? apply_wqattrs_prepare+0x130/0xbd0 [ 603.189882][T13024] apply_wqattrs_prepare+0x130/0xbd0 [ 603.189920][T13024] apply_workqueue_attrs_locked+0x64/0xe0 [ 603.189947][T13024] __alloc_workqueue+0xf41/0x1810 [ 603.189988][T13024] alloc_workqueue+0xd2/0x200 [ 603.190023][T13024] ? __pfx_alloc_workqueue+0x10/0x10 [ 603.190058][T13024] ? rcu_is_watching+0x12/0xc0 [ 603.190082][T13024] ? trace_kmalloc+0x2b/0xd0 [ 603.190111][T13024] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 603.190152][T13024] ieee80211_register_hw+0x1e92/0x4140 [ 603.190199][T13024] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 603.190234][T13024] ? find_held_lock+0x2b/0x80 [ 603.190259][T13024] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 603.190295][T13024] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 603.190328][T13024] ? __hrtimer_setup+0x176/0x280 [ 603.190368][T13024] mac80211_hwsim_new_radio+0x3034/0x54d0 [ 603.190411][T13024] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 603.190446][T13024] hwsim_new_radio_nl+0xb51/0x12c0 [ 603.190482][T13024] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 603.190516][T13024] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 603.190552][T13024] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 603.190601][T13024] genl_family_rcv_msg_doit+0x209/0x2f0 [ 603.190637][T13024] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 603.190672][T13024] ? trace_cap_capable+0x18d/0x200 [ 603.190708][T13024] ? bpf_lsm_capable+0x9/0x10 [ 603.190742][T13024] ? security_capable+0x7e/0x260 [ 603.190771][T13024] ? ns_capable+0xd7/0x110 [ 603.190797][T13024] genl_rcv_msg+0x55c/0x800 [ 603.190834][T13024] ? __pfx_genl_rcv_msg+0x10/0x10 [ 603.190873][T13024] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 603.190909][T13024] netlink_rcv_skb+0x158/0x420 [ 603.190938][T13024] ? __pfx_genl_rcv_msg+0x10/0x10 [ 603.190973][T13024] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 603.191030][T13024] ? netlink_deliver_tap+0x1ae/0xd30 [ 603.191061][T13024] genl_rcv+0x28/0x40 [ 603.191091][T13024] netlink_unicast+0x58a/0x850 [ 603.191124][T13024] ? __pfx_netlink_unicast+0x10/0x10 [ 603.191166][T13024] netlink_sendmsg+0x8d1/0xdd0 [ 603.191200][T13024] ? __pfx_netlink_sendmsg+0x10/0x10 [ 603.191240][T13024] ____sys_sendmsg+0xa95/0xc70 [ 603.191274][T13024] ? copy_msghdr_from_user+0x10a/0x160 [ 603.191299][T13024] ? __pfx_____sys_sendmsg+0x10/0x10 [ 603.191338][T13024] ? __pfx_futex_wake_mark+0x10/0x10 [ 603.191376][T13024] ___sys_sendmsg+0x134/0x1d0 [ 603.191402][T13024] ? __pfx____sys_sendmsg+0x10/0x10 [ 603.191443][T13024] ? __lock_acquire+0x622/0x1c90 [ 603.191513][T13024] __sys_sendmsg+0x16d/0x220 [ 603.191539][T13024] ? __pfx___sys_sendmsg+0x10/0x10 [ 603.191568][T13024] ? __x64_sys_futex+0x1e0/0x4c0 [ 603.191617][T13024] do_syscall_64+0xcd/0x490 [ 603.191644][T13024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 603.191668][T13024] RIP: 0033:0x7ffbbf18e9a9 [ 603.191687][T13024] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 603.191711][T13024] RSP: 002b:00007ffbc00a3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 603.191733][T13024] RAX: ffffffffffffffda RBX: 00007ffbbf3b5fa0 RCX: 00007ffbbf18e9a9 [ 603.191748][T13024] RDX: 00000000040000c0 RSI: 0000200000000300 RDI: 0000000000000006 [ 603.191763][T13024] RBP: 00007ffbbf210d69 R08: 0000000000000000 R09: 0000000000000000 [ 603.191778][T13024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 603.191791][T13024] R13: 0000000000000000 R14: 00007ffbbf3b5fa0 R15: 00007fff56215e48 [ 603.191822][T13024] [ 603.899665][T13037] mkiss: ax0: crc mode is auto. [ 603.953827][T13025] FAULT_INJECTION: forcing a failure. [ 603.953827][T13025] name failslab, interval 1, probability 0, space 0, times 0 [ 603.967974][T13025] CPU: 0 UID: 0 PID: 13025 Comm: syz.4.1734 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 603.968009][T13025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 603.968024][T13025] Call Trace: [ 603.968031][T13025] [ 603.968040][T13025] dump_stack_lvl+0x16c/0x1f0 [ 603.968068][T13025] should_fail_ex+0x512/0x640 [ 603.968097][T13025] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 603.968139][T13025] should_failslab+0xc2/0x120 [ 603.968169][T13025] __kmalloc_cache_noprof+0x6a/0x3e0 [ 603.968207][T13025] ? apply_wqattrs_prepare+0x130/0xbd0 [ 603.968239][T13025] apply_wqattrs_prepare+0x130/0xbd0 [ 603.968277][T13025] apply_workqueue_attrs_locked+0x64/0xe0 [ 603.968304][T13025] __alloc_workqueue+0xf41/0x1810 [ 603.968341][T13025] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 603.968382][T13025] alloc_workqueue+0xd2/0x200 [ 603.968413][T13025] ? __pfx_alloc_workqueue+0x10/0x10 [ 603.968452][T13025] ? __pfx___debug_object_init+0x10/0x10 [ 603.968492][T13025] nci_register_device+0x511/0xb80 [ 603.968534][T13025] ? __pfx_nci_register_device+0x10/0x10 [ 603.968576][T13025] ? lockdep_init_map_type+0x5c/0x280 [ 603.968617][T13025] virtual_ncidev_open+0x141/0x220 [ 603.968654][T13025] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 603.968690][T13025] misc_open+0x35d/0x420 [ 603.968727][T13025] ? __pfx_misc_open+0x10/0x10 [ 603.968762][T13025] chrdev_open+0x231/0x6a0 [ 603.968787][T13025] ? __pfx_apparmor_file_open+0x10/0x10 [ 603.968825][T13025] ? __pfx_chrdev_open+0x10/0x10 [ 603.968853][T13025] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 603.968896][T13025] do_dentry_open+0x744/0x1c10 [ 603.968921][T13025] ? __pfx_chrdev_open+0x10/0x10 [ 603.968953][T13025] vfs_open+0x82/0x3f0 [ 603.968987][T13025] path_openat+0x1de4/0x2cb0 [ 603.969020][T13025] ? __pfx_path_openat+0x10/0x10 [ 603.969045][T13025] ? __lock_acquire+0xb8a/0x1c90 [ 603.969081][T13025] do_filp_open+0x20b/0x470 [ 603.969113][T13025] ? __pfx_do_filp_open+0x10/0x10 [ 603.969158][T13025] ? alloc_fd+0x471/0x7d0 [ 603.969204][T13025] do_sys_openat2+0x11b/0x1d0 [ 603.969237][T13025] ? __pfx_do_sys_openat2+0x10/0x10 [ 603.969280][T13025] __x64_sys_openat+0x174/0x210 [ 603.969314][T13025] ? __pfx___x64_sys_openat+0x10/0x10 [ 603.969359][T13025] do_syscall_64+0xcd/0x490 [ 603.969386][T13025] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 603.969409][T13025] RIP: 0033:0x7fbaec58e9a9 [ 603.969429][T13025] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 603.969452][T13025] RSP: 002b:00007fbaed316038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 603.969474][T13025] RAX: ffffffffffffffda RBX: 00007fbaec7b6080 RCX: 00007fbaec58e9a9 [ 603.969489][T13025] RDX: 0000000000000002 RSI: 0000200000000400 RDI: ffffffffffffff9c [ 603.969504][T13025] RBP: 00007fbaec610d69 R08: 0000000000000000 R09: 0000000000000000 [ 603.969518][T13025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 603.969532][T13025] R13: 0000000000000000 R14: 00007fbaec7b6080 R15: 00007ffc5b75cce8 [ 603.969562][T13025] [ 605.681963][T13061] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1750'. [ 605.965980][T13065] FAULT_INJECTION: forcing a failure. [ 605.965980][T13065] name failslab, interval 1, probability 0, space 0, times 0 [ 606.050476][T13065] CPU: 0 UID: 0 PID: 13065 Comm: syz.2.1747 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 606.050510][T13065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 606.050524][T13065] Call Trace: [ 606.050532][T13065] [ 606.050542][T13065] dump_stack_lvl+0x16c/0x1f0 [ 606.050570][T13065] should_fail_ex+0x512/0x640 [ 606.050639][T13065] ? __kmalloc_noprof+0xbf/0x510 [ 606.050665][T13065] ? __netlink_kernel_create+0x17f/0x750 [ 606.050695][T13065] should_failslab+0xc2/0x120 [ 606.050723][T13065] __kmalloc_noprof+0xd2/0x510 [ 606.050754][T13065] __netlink_kernel_create+0x17f/0x750 [ 606.050786][T13065] ? __pfx___netlink_kernel_create+0x10/0x10 [ 606.050823][T13065] ? __pfx_genl_pernet_init+0x10/0x10 [ 606.050856][T13065] genl_pernet_init+0xbd/0x170 [ 606.050895][T13065] ? __pfx_genl_pernet_init+0x10/0x10 [ 606.050940][T13065] ? lockdep_init_map_type+0x5c/0x280 [ 606.050976][T13065] ? __pfx_genl_rcv+0x10/0x10 [ 606.051005][T13065] ? __pfx_genl_bind+0x10/0x10 [ 606.051035][T13065] ? __pfx_genl_unbind+0x10/0x10 [ 606.051064][T13065] ? __pfx_genl_release+0x10/0x10 [ 606.051097][T13065] ? debug_mutex_init+0x37/0x70 [ 606.051124][T13065] ops_init+0x1df/0x5f0 [ 606.051155][T13065] setup_net+0x1ff/0x510 [ 606.051181][T13065] ? lockdep_init_map_type+0x5c/0x280 [ 606.051215][T13065] ? __pfx_setup_net+0x10/0x10 [ 606.051244][T13065] ? debug_mutex_init+0x37/0x70 [ 606.051272][T13065] copy_net_ns+0x2a6/0x5f0 [ 606.051305][T13065] create_new_namespaces+0x3ea/0xa90 [ 606.051340][T13065] copy_namespaces+0x468/0x560 [ 606.051368][T13065] copy_process+0x2822/0x7650 [ 606.051399][T13065] ? preempt_schedule_thunk+0x16/0x30 [ 606.051442][T13065] ? __pfx_copy_process+0x10/0x10 [ 606.051473][T13065] ? find_held_lock+0x2b/0x80 [ 606.051501][T13065] ? wake_up_q+0xb0/0x160 [ 606.051521][T13065] ? do_raw_spin_unlock+0x172/0x230 [ 606.051564][T13065] kernel_clone+0xfc/0x960 [ 606.051595][T13065] ? __pfx_futex_wake+0x10/0x10 [ 606.051629][T13065] ? __pfx_kernel_clone+0x10/0x10 [ 606.051658][T13065] ? __pfx_vfs_writev+0x10/0x10 [ 606.051711][T13065] __do_sys_clone+0xce/0x120 [ 606.051742][T13065] ? __pfx___do_sys_clone+0x10/0x10 [ 606.051787][T13065] ? xfd_validate_state+0x61/0x180 [ 606.051819][T13065] ? __pfx_do_writev+0x10/0x10 [ 606.051864][T13065] do_syscall_64+0xcd/0x490 [ 606.051891][T13065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 606.051923][T13065] RIP: 0033:0x7fa50f58e9a9 [ 606.051941][T13065] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 606.051965][T13065] RSP: 002b:00007fa51035dfe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 606.051987][T13065] RAX: ffffffffffffffda RBX: 00007fa50f7b5fa0 RCX: 00007fa50f58e9a9 [ 606.052002][T13065] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000042ae1411 [ 606.052017][T13065] RBP: 00007fa50f610d69 R08: 0000000000000000 R09: 0000000000000000 [ 606.052031][T13065] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 606.052044][T13065] R13: 0000000000000000 R14: 00007fa50f7b5fa0 R15: 00007fff9bbd7a08 [ 606.052074][T13065] [ 606.416178][T13070] random: crng reseeded on system resumption [ 606.628153][T13072] FAULT_INJECTION: forcing a failure. [ 606.628153][T13072] name failslab, interval 1, probability 0, space 0, times 0 [ 606.641048][T13072] CPU: 0 UID: 0 PID: 13072 Comm: syz.4.1754 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 606.641080][T13072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 606.641095][T13072] Call Trace: [ 606.641104][T13072] [ 606.641113][T13072] dump_stack_lvl+0x16c/0x1f0 [ 606.641143][T13072] should_fail_ex+0x512/0x640 [ 606.641167][T13072] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 606.641200][T13072] should_failslab+0xc2/0x120 [ 606.641228][T13072] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 606.641257][T13072] ? fib_notifier_ops_register+0x32/0x270 [ 606.641288][T13072] ? __pfx_fib6_net_init+0x10/0x10 [ 606.641314][T13072] kmemdup_noprof+0x29/0x60 [ 606.641340][T13072] fib_notifier_ops_register+0x32/0x270 [ 606.641369][T13072] ? __pfx_fib6_net_init+0x10/0x10 [ 606.641393][T13072] fib6_notifier_init+0x1d/0x90 [ 606.641419][T13072] fib6_net_init+0x22/0xb20 [ 606.641445][T13072] ? __pfx_fib6_net_init+0x10/0x10 [ 606.641470][T13072] ops_init+0x1df/0x5f0 [ 606.641500][T13072] setup_net+0x1ff/0x510 [ 606.641526][T13072] ? lockdep_init_map_type+0x5c/0x280 [ 606.641562][T13072] ? __pfx_setup_net+0x10/0x10 [ 606.641591][T13072] ? debug_mutex_init+0x37/0x70 [ 606.641618][T13072] copy_net_ns+0x2a6/0x5f0 [ 606.641652][T13072] create_new_namespaces+0x3ea/0xa90 [ 606.641686][T13072] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 606.641717][T13072] ksys_unshare+0x45b/0xa40 [ 606.641750][T13072] ? __pfx_ksys_unshare+0x10/0x10 [ 606.641784][T13072] ? xfd_validate_state+0x61/0x180 [ 606.641825][T13072] __x64_sys_unshare+0x31/0x40 [ 606.641858][T13072] do_syscall_64+0xcd/0x490 [ 606.641892][T13072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 606.641918][T13072] RIP: 0033:0x7fbaec58e9a9 [ 606.641937][T13072] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 606.641961][T13072] RSP: 002b:00007fbaed337038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 606.641982][T13072] RAX: ffffffffffffffda RBX: 00007fbaec7b5fa0 RCX: 00007fbaec58e9a9 [ 606.642001][T13072] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 606.642015][T13072] RBP: 00007fbaec610d69 R08: 0000000000000000 R09: 0000000000000000 [ 606.642030][T13072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 606.642044][T13072] R13: 0000000000000000 R14: 00007fbaec7b5fa0 R15: 00007ffc5b75cce8 [ 606.642074][T13072] [ 607.016183][T13075] FAULT_INJECTION: forcing a failure. [ 607.016183][T13075] name fail_futex, interval 1, probability 0, space 0, times 0 [ 607.065394][T13075] CPU: 0 UID: 0 PID: 13075 Comm: syz.0.1753 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 607.065429][T13075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 607.065444][T13075] Call Trace: [ 607.065452][T13075] [ 607.065461][T13075] dump_stack_lvl+0x16c/0x1f0 [ 607.065490][T13075] should_fail_ex+0x512/0x640 [ 607.065520][T13075] get_futex_key+0x1d0/0x1540 [ 607.065552][T13075] ? __pfx_get_futex_key+0x10/0x10 [ 607.065585][T13075] ? queue_pages_test_walk+0x279/0x410 [ 607.065615][T13075] ? __pfx_find_vma+0x10/0x10 [ 607.065648][T13075] futex_wait_setup+0x84/0x510 [ 607.065691][T13075] __futex_wait+0x194/0x2f0 [ 607.065735][T13075] ? __pfx___futex_wait+0x10/0x10 [ 607.065776][T13075] ? __pfx_futex_wake_mark+0x10/0x10 [ 607.065826][T13075] ? queue_pages_range+0x11e/0x180 [ 607.065861][T13075] ? __futex_hash.constprop.0+0x1e9/0x440 [ 607.065893][T13075] futex_wait+0xe8/0x380 [ 607.065927][T13075] ? __pfx_futex_wait+0x10/0x10 [ 607.065979][T13075] do_futex+0x229/0x350 [ 607.066011][T13075] ? __pfx_do_futex+0x10/0x10 [ 607.066042][T13075] ? __pfx___might_resched+0x10/0x10 [ 607.066073][T13075] __x64_sys_futex+0x1e0/0x4c0 [ 607.066105][T13075] ? kernel_migrate_pages+0x9d/0x750 [ 607.066134][T13075] ? __pfx___x64_sys_futex+0x10/0x10 [ 607.066164][T13075] ? xfd_validate_state+0x61/0x180 [ 607.066196][T13075] ? __pfx_ksys_read+0x10/0x10 [ 607.066227][T13075] do_syscall_64+0xcd/0x490 [ 607.066254][T13075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 607.066278][T13075] RIP: 0033:0x7ffbbf18e9a9 [ 607.066296][T13075] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 607.066319][T13075] RSP: 002b:00007ffbc00a30e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 607.066341][T13075] RAX: ffffffffffffffda RBX: 00007ffbbf3b5fa8 RCX: 00007ffbbf18e9a9 [ 607.066357][T13075] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007ffbbf3b5fa8 [ 607.066371][T13075] RBP: 00007ffbbf3b5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 607.066386][T13075] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffbbf3b5fac [ 607.066400][T13075] R13: 0000000000000000 R14: 00007fff56215d60 R15: 00007fff56215e48 [ 607.066429][T13075] [ 608.429428][T13088] ram7: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8 p9 p10 p11 p12 [ 608.682171][T13088] ram7: p1 start 3287837005 is beyond EOD, truncated [ 608.775800][T13088] ram7: p2 start 3582576716 is beyond EOD, truncated [ 608.822908][T13088] ram7: p3 start 3621870235 is beyond EOD, truncated [ 608.881138][T13088] ram7: p4 start 439779997 is beyond EOD, truncated [ 608.921621][T13088] ram7: p5 start 1633049859 is beyond EOD, truncated [ 608.950325][T13088] ram7: p6 start 181311785 is beyond EOD, truncated [ 608.973954][T13088] ram7: p7 start 347350297 is beyond EOD, truncated [ 608.982984][T13088] ram7: p8 start 1243026312 is beyond EOD, truncated [ 608.996180][T13088] ram7: p9 start 1502562942 is beyond EOD, truncated [ 609.004602][T13088] ram7: p10 start 3543928514 is beyond EOD, truncated [ 609.015808][T13088] ram7: p11 start 3128659320 is beyond EOD, truncated [ 609.030632][T13088] ram7: p12 start 174762021 is beyond EOD, truncated [ 609.351836][T13104] ram7: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8 p9 p10 p11 p12 [ 609.361446][T13104] ram7: p1 start 3287837005 is beyond EOD, truncated [ 609.370705][T13104] ram7: p2 start 3582576716 is beyond EOD, truncated [ 609.385236][T13104] ram7: p3 start 3621870235 is beyond EOD, truncated [ 609.394981][T13104] ram7: p4 start 439779997 is beyond EOD, truncated [ 609.407061][T13104] ram7: p5 start 1633049859 is beyond EOD, truncated [ 609.414381][T13104] ram7: p6 start 181311785 is beyond EOD, truncated [ 609.425537][T13104] ram7: p7 start 347350297 is beyond EOD, truncated [ 609.435656][T13104] ram7: p8 start 1243026312 is beyond EOD, truncated [ 609.443571][T13104] ram7: p9 start 1502562942 is beyond EOD, truncated [ 609.454272][T13104] ram7: p10 start 3543928514 is beyond EOD, truncated [ 609.469595][T13104] ram7: p11 start 3128659320 is beyond EOD, truncated [ 609.482427][T13104] ram7: p12 start 174762021 is beyond EOD, truncated [ 609.710699][T13111] FAULT_INJECTION: forcing a failure. [ 609.710699][T13111] name failslab, interval 1, probability 0, space 0, times 0 [ 609.726967][T13111] CPU: 0 UID: 0 PID: 13111 Comm: syz.0.1764 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 609.727003][T13111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 609.727018][T13111] Call Trace: [ 609.727026][T13111] [ 609.727035][T13111] dump_stack_lvl+0x16c/0x1f0 [ 609.727064][T13111] should_fail_ex+0x512/0x640 [ 609.727088][T13111] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 609.727120][T13111] should_failslab+0xc2/0x120 [ 609.727148][T13111] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 609.727175][T13111] ? __pfx_proc_create_net_data+0x10/0x10 [ 609.727204][T13111] ? nf_log_net_init+0x9f/0x450 [ 609.727233][T13111] ? __pfx_nf_log_net_init+0x10/0x10 [ 609.727261][T13111] kmemdup_noprof+0x29/0x60 [ 609.727286][T13111] nf_log_net_init+0x9f/0x450 [ 609.727315][T13111] ? __pfx_nf_log_net_init+0x10/0x10 [ 609.727342][T13111] ops_init+0x1df/0x5f0 [ 609.727373][T13111] setup_net+0x1ff/0x510 [ 609.727398][T13111] ? lockdep_init_map_type+0x5c/0x280 [ 609.727449][T13111] ? __pfx_setup_net+0x10/0x10 [ 609.727480][T13111] ? debug_mutex_init+0x37/0x70 [ 609.727508][T13111] copy_net_ns+0x2a6/0x5f0 [ 609.727541][T13111] create_new_namespaces+0x3ea/0xa90 [ 609.727576][T13111] copy_namespaces+0x468/0x560 [ 609.727611][T13111] copy_process+0x2822/0x7650 [ 609.727656][T13111] ? __pfx_copy_process+0x10/0x10 [ 609.727687][T13111] ? kfree+0x24f/0x4d0 [ 609.727725][T13111] ? __futex_hash.constprop.0+0x1e9/0x440 [ 609.727759][T13111] kernel_clone+0xfc/0x960 [ 609.727792][T13111] ? __pfx_kernel_clone+0x10/0x10 [ 609.727840][T13111] __do_sys_clone+0xce/0x120 [ 609.727870][T13111] ? __pfx___do_sys_clone+0x10/0x10 [ 609.727915][T13111] ? xfd_validate_state+0x61/0x180 [ 609.727946][T13111] ? __pfx_do_writev+0x10/0x10 [ 609.727993][T13111] do_syscall_64+0xcd/0x490 [ 609.728020][T13111] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.728044][T13111] RIP: 0033:0x7ffbbf18e9a9 [ 609.728062][T13111] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 609.728086][T13111] RSP: 002b:00007ffbc00a2fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 609.728108][T13111] RAX: ffffffffffffffda RBX: 00007ffbbf3b5fa0 RCX: 00007ffbbf18e9a9 [ 609.728124][T13111] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000042ae1411 [ 609.728138][T13111] RBP: 00007ffbbf210d69 R08: 0000000000000000 R09: 0000000000000000 [ 609.728153][T13111] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 609.728167][T13111] R13: 0000000000000000 R14: 00007ffbbf3b5fa0 R15: 00007fff56215e48 [ 609.728197][T13111] [ 611.256701][T11362] Bluetooth: hci2: command 0x0406 tx timeout [ 611.323971][T13119] nbd: must specify a size in bytes for the device [ 612.255414][T13144] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input14 [ 613.315601][T13145] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input15 [ 613.508928][T13153] ima: policy update failed [ 613.534424][ T30] audit: type=1802 audit(6048701440.025:20): pid=13153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.1774" res=0 errno=0 [ 614.446403][T13170] FAULT_INJECTION: forcing a failure. [ 614.446403][T13170] name failslab, interval 1, probability 0, space 0, times 0 [ 614.610176][T13170] CPU: 0 UID: 0 PID: 13170 Comm: syz.1.1780 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 614.610213][T13170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 614.610229][T13170] Call Trace: [ 614.610238][T13170] [ 614.610249][T13170] dump_stack_lvl+0x16c/0x1f0 [ 614.610282][T13170] should_fail_ex+0x512/0x640 [ 614.610309][T13170] ? __kmalloc_noprof+0xbf/0x510 [ 614.610341][T13170] ? iovec_from_user+0x108/0x140 [ 614.610370][T13170] should_failslab+0xc2/0x120 [ 614.610402][T13170] __kmalloc_noprof+0xd2/0x510 [ 614.610429][T13170] ? look_up_lock_class+0x59/0x150 [ 614.610464][T13170] iovec_from_user+0x108/0x140 [ 614.610501][T13170] __import_iovec+0x88/0x650 [ 614.610531][T13170] ? __lock_acquire+0xb8a/0x1c90 [ 614.610578][T13170] import_iovec+0x86/0xb0 [ 614.610616][T13170] vfs_writev+0x19b/0xde0 [ 614.610657][T13170] ? __pfx___mutex_trylock_common+0x10/0x10 [ 614.610709][T13170] ? __pfx_vfs_writev+0x10/0x10 [ 614.610751][T13170] ? __mutex_lock+0x1ca/0xb90 [ 614.610789][T13170] ? __pfx___mutex_lock+0x10/0x10 [ 614.610833][T13170] ? __fget_files+0x20e/0x3c0 [ 614.610874][T13170] ? __fget_files+0x1b0/0x3c0 [ 614.610927][T13170] ? do_writev+0x132/0x340 [ 614.610965][T13170] do_writev+0x132/0x340 [ 614.611009][T13170] ? __pfx_do_writev+0x10/0x10 [ 614.611054][T13170] do_syscall_64+0xcd/0x490 [ 614.611080][T13170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 614.611111][T13170] RIP: 0033:0x7f265738e9a9 [ 614.611129][T13170] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 614.611151][T13170] RSP: 002b:00007f265816d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 614.611172][T13170] RAX: ffffffffffffffda RBX: 00007f26575b5fa0 RCX: 00007f265738e9a9 [ 614.611188][T13170] RDX: 000000000000000a RSI: 0000200000000200 RDI: 0000000000000003 [ 614.611202][T13170] RBP: 00007f265816d090 R08: 0000000000000000 R09: 0000000000000000 [ 614.611216][T13170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 614.611230][T13170] R13: 0000000000000000 R14: 00007f26575b5fa0 R15: 00007fff98957368 [ 614.611259][T13170] [ 614.828713][ C0] vkms_vblank_simulate: vblank timer overrun [ 614.997502][T13178] FAULT_INJECTION: forcing a failure. [ 614.997502][T13178] name fail_futex, interval 1, probability 0, space 0, times 0 [ 615.010527][T13178] CPU: 0 UID: 0 PID: 13178 Comm: syz.2.1784 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 615.010558][T13178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 615.010572][T13178] Call Trace: [ 615.010581][T13178] [ 615.010591][T13178] dump_stack_lvl+0x16c/0x1f0 [ 615.010618][T13178] should_fail_ex+0x512/0x640 [ 615.010646][T13178] get_futex_key+0x1d0/0x1540 [ 615.010678][T13178] ? __pfx_get_futex_key+0x10/0x10 [ 615.010707][T13178] ? pick_eevdf+0x3be/0x5b0 [ 615.010734][T13178] ? update_curr_se+0x8b/0x270 [ 615.010765][T13178] ? update_curr+0x74/0x800 [ 615.010803][T13178] futex_wait_setup+0x84/0x510 [ 615.010845][T13178] __futex_wait+0x194/0x2f0 [ 615.010880][T13178] ? __pfx___futex_wait+0x10/0x10 [ 615.010913][T13178] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 615.010954][T13178] ? __pfx_futex_wake_mark+0x10/0x10 [ 615.010992][T13178] ? plist_check_head+0xa3/0x150 [ 615.011027][T13178] ? find_held_lock+0x2b/0x80 [ 615.011059][T13178] futex_wait+0xe8/0x380 [ 615.011093][T13178] ? __pfx_futex_wait+0x10/0x10 [ 615.011160][T13178] do_futex+0x229/0x350 [ 615.011189][T13178] ? __pfx_do_futex+0x10/0x10 [ 615.011221][T13178] ? __pfx___might_resched+0x10/0x10 [ 615.011250][T13178] __x64_sys_futex+0x1e0/0x4c0 [ 615.011280][T13178] ? __pfx_blkcg_maybe_throttle_current+0x10/0x10 [ 615.011318][T13178] ? __pfx___x64_sys_futex+0x10/0x10 [ 615.011346][T13178] ? xfd_validate_state+0x61/0x180 [ 615.011377][T13178] ? __pfx_do_writev+0x10/0x10 [ 615.011422][T13178] do_syscall_64+0xcd/0x490 [ 615.011449][T13178] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 615.011472][T13178] RIP: 0033:0x7fa50f58e9a9 [ 615.011491][T13178] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 615.011513][T13178] RSP: 002b:00007fa51035e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 615.011534][T13178] RAX: ffffffffffffffda RBX: 00007fa50f7b5fa8 RCX: 00007fa50f58e9a9 [ 615.011550][T13178] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fa50f7b5fa8 [ 615.011564][T13178] RBP: 00007fa50f7b5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 615.011578][T13178] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fa50f7b5fac [ 615.011592][T13178] R13: 0000000000000000 R14: 00007fff9bbd7920 R15: 00007fff9bbd7a08 [ 615.011620][T13178] [ 615.012806][T13178] Unable to find swap-space signature [ 615.969798][T13196] netlink: 330 bytes leftover after parsing attributes in process `syz.0.1786'. [ 616.006873][T13196] : renamed from bond_slave_1 (while UP) [ 618.329338][T13232] zswap: compressor 000 not available [ 618.509556][T13253] netlink: 'syz.0.1794': attribute type 25 has an invalid length. [ 618.552108][T13251] ima: policy update failed [ 618.577850][ T30] audit: type=1802 audit(6048701445.075:21): pid=13251 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.1794" res=0 errno=0 [ 618.849115][T13249] FAULT_INJECTION: forcing a failure. [ 618.849115][T13249] name failslab, interval 1, probability 0, space 0, times 0 [ 619.026678][T13249] CPU: 0 UID: 0 PID: 13249 Comm: syz.2.1793 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 619.026720][T13249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 619.026735][T13249] Call Trace: [ 619.026743][T13249] [ 619.026752][T13249] dump_stack_lvl+0x16c/0x1f0 [ 619.026781][T13249] should_fail_ex+0x512/0x640 [ 619.026806][T13249] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 619.026835][T13249] should_failslab+0xc2/0x120 [ 619.026862][T13249] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 619.026887][T13249] ? security_file_alloc+0x34/0x2b0 [ 619.026929][T13249] security_file_alloc+0x34/0x2b0 [ 619.026968][T13249] init_file+0x93/0x4c0 [ 619.027000][T13249] alloc_empty_file+0x73/0x1e0 [ 619.027032][T13249] alloc_file_pseudo+0x13a/0x230 [ 619.027064][T13249] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 619.027096][T13249] ? alloc_fd+0x471/0x7d0 [ 619.027138][T13249] sock_alloc_file+0x50/0x210 [ 619.027168][T13249] __sys_socket+0x1c0/0x260 [ 619.027203][T13249] ? __pfx___sys_socket+0x10/0x10 [ 619.027237][T13249] ? xfd_validate_state+0x61/0x180 [ 619.027268][T13249] ? __pfx___do_sys_prctl+0x10/0x10 [ 619.027314][T13249] __x64_sys_socket+0x72/0xb0 [ 619.027347][T13249] ? lockdep_hardirqs_on+0x7c/0x110 [ 619.027370][T13249] do_syscall_64+0xcd/0x490 [ 619.027397][T13249] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.027421][T13249] RIP: 0033:0x7fa50f58e9a9 [ 619.027440][T13249] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 619.027464][T13249] RSP: 002b:00007fa51035e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 619.027487][T13249] RAX: ffffffffffffffda RBX: 00007fa50f7b5fa0 RCX: 00007fa50f58e9a9 [ 619.027502][T13249] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 619.027516][T13249] RBP: 00007fa50f610d69 R08: 0000000000000000 R09: 0000000000000000 [ 619.027530][T13249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 619.027544][T13249] R13: 0000000000000000 R14: 00007fa50f7b5fa0 R15: 00007fff9bbd7a08 [ 619.027573][T13249] [ 620.036234][T13277] netlink: 'syz.4.1805': attribute type 25 has an invalid length. [ 620.090436][T13274] ima: policy update failed [ 620.165356][ T30] audit: type=1802 audit(6048701446.605:22): pid=13274 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.1805" res=0 errno=0 [ 621.374700][T13309] FAULT_INJECTION: forcing a failure. [ 621.374700][T13309] name failslab, interval 1, probability 0, space 0, times 0 [ 621.460831][T13309] CPU: 0 UID: 0 PID: 13309 Comm: syz.1.1811 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 621.460864][T13309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 621.460877][T13309] Call Trace: [ 621.460885][T13309] [ 621.460894][T13309] dump_stack_lvl+0x16c/0x1f0 [ 621.460921][T13309] should_fail_ex+0x512/0x640 [ 621.460945][T13309] ? __kmalloc_noprof+0xbf/0x510 [ 621.460970][T13309] ? lsm_blob_alloc+0x68/0x90 [ 621.460994][T13309] should_failslab+0xc2/0x120 [ 621.461026][T13309] __kmalloc_noprof+0xd2/0x510 [ 621.461055][T13309] lsm_blob_alloc+0x68/0x90 [ 621.461081][T13309] security_sk_alloc+0x30/0x270 [ 621.461113][T13309] sk_prot_alloc+0x1c7/0x2a0 [ 621.461146][T13309] sk_alloc+0x36/0xc20 [ 621.461169][T13309] __netlink_create+0x5e/0x2c0 [ 621.461194][T13309] __netlink_kernel_create+0xed/0x750 [ 621.461225][T13309] ? __pfx___netlink_kernel_create+0x10/0x10 [ 621.461260][T13309] ? __pfx_genl_pernet_init+0x10/0x10 [ 621.461292][T13309] genl_pernet_init+0xbd/0x170 [ 621.461324][T13309] ? __pfx_genl_pernet_init+0x10/0x10 [ 621.461374][T13309] ? lockdep_init_map_type+0x5c/0x280 [ 621.461409][T13309] ? __pfx_genl_rcv+0x10/0x10 [ 621.461438][T13309] ? __pfx_genl_bind+0x10/0x10 [ 621.461475][T13309] ? __pfx_genl_unbind+0x10/0x10 [ 621.461504][T13309] ? __pfx_genl_release+0x10/0x10 [ 621.461538][T13309] ? debug_mutex_init+0x37/0x70 [ 621.461565][T13309] ops_init+0x1df/0x5f0 [ 621.461596][T13309] setup_net+0x1ff/0x510 [ 621.461622][T13309] ? lockdep_init_map_type+0x5c/0x280 [ 621.461657][T13309] ? __pfx_setup_net+0x10/0x10 [ 621.461687][T13309] ? debug_mutex_init+0x37/0x70 [ 621.461714][T13309] copy_net_ns+0x2a6/0x5f0 [ 621.461748][T13309] create_new_namespaces+0x3ea/0xa90 [ 621.461782][T13309] copy_namespaces+0x468/0x560 [ 621.461811][T13309] copy_process+0x2822/0x7650 [ 621.461855][T13309] ? __pfx_copy_process+0x10/0x10 [ 621.461886][T13309] ? find_held_lock+0x2b/0x80 [ 621.461922][T13309] kernel_clone+0xfc/0x960 [ 621.461955][T13309] ? __pfx_kernel_clone+0x10/0x10 [ 621.462002][T13309] __do_sys_clone+0xce/0x120 [ 621.462033][T13309] ? __pfx___do_sys_clone+0x10/0x10 [ 621.462078][T13309] ? xfd_validate_state+0x61/0x180 [ 621.462109][T13309] ? __pfx_do_writev+0x10/0x10 [ 621.462155][T13309] do_syscall_64+0xcd/0x490 [ 621.462183][T13309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 621.462207][T13309] RIP: 0033:0x7f265738e9a9 [ 621.462226][T13309] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 621.462249][T13309] RSP: 002b:00007f265816cfe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 621.462272][T13309] RAX: ffffffffffffffda RBX: 00007f26575b5fa0 RCX: 00007f265738e9a9 [ 621.462288][T13309] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000042ae1411 [ 621.462303][T13309] RBP: 00007f2657410d69 R08: 0000000000000000 R09: 0000000000000000 [ 621.462317][T13309] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 621.462331][T13309] R13: 0000000000000000 R14: 00007f26575b5fa0 R15: 00007fff98957368 [ 621.462361][T13309] [ 622.123165][T13318] FAULT_INJECTION: forcing a failure. [ 622.123165][T13318] name fail_futex, interval 1, probability 0, space 0, times 0 [ 622.154300][T13318] CPU: 0 UID: 0 PID: 13318 Comm: syz.4.1813 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 622.154335][T13318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 622.154350][T13318] Call Trace: [ 622.154357][T13318] [ 622.154367][T13318] dump_stack_lvl+0x16c/0x1f0 [ 622.154395][T13318] should_fail_ex+0x512/0x640 [ 622.154424][T13318] get_futex_key+0x1d0/0x1540 [ 622.154454][T13318] ? __call_rcu_common.constprop.0+0xa5/0xa10 [ 622.154501][T13318] ? __pfx_get_futex_key+0x10/0x10 [ 622.154526][T13318] ? __sock_release+0x20b/0x270 [ 622.154554][T13318] ? __sys_socket+0x14d/0x260 [ 622.154586][T13318] ? __x64_sys_socket+0x72/0xb0 [ 622.154620][T13318] ? do_syscall_64+0xcd/0x490 [ 622.154643][T13318] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 622.154675][T13318] futex_wait_setup+0x84/0x510 [ 622.154718][T13318] __futex_wait+0x194/0x2f0 [ 622.154754][T13318] ? __pfx___futex_wait+0x10/0x10 [ 622.154793][T13318] ? __pfx_futex_wake_mark+0x10/0x10 [ 622.154836][T13318] ? __destroy_inode+0x2e4/0x730 [ 622.154866][T13318] ? __futex_hash.constprop.0+0x1e9/0x440 [ 622.154896][T13318] futex_wait+0xe8/0x380 [ 622.154930][T13318] ? __pfx_futex_wait+0x10/0x10 [ 622.154963][T13318] ? __pfx_evict+0x10/0x10 [ 622.155000][T13318] ? iput+0x519/0x880 [ 622.155034][T13318] do_futex+0x229/0x350 [ 622.155064][T13318] ? __pfx_do_futex+0x10/0x10 [ 622.155092][T13318] ? __sock_release+0x20b/0x270 [ 622.155130][T13318] __x64_sys_futex+0x1e0/0x4c0 [ 622.155161][T13318] ? __sys_socket+0xac/0x260 [ 622.155195][T13318] ? __pfx___x64_sys_futex+0x10/0x10 [ 622.155226][T13318] ? xfd_validate_state+0x61/0x180 [ 622.155258][T13318] ? __pfx_do_writev+0x10/0x10 [ 622.155304][T13318] do_syscall_64+0xcd/0x490 [ 622.155331][T13318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 622.155355][T13318] RIP: 0033:0x7fbaec58e9a9 [ 622.155373][T13318] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 622.155396][T13318] RSP: 002b:00007fbaed3370e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 622.155419][T13318] RAX: ffffffffffffffda RBX: 00007fbaec7b5fa8 RCX: 00007fbaec58e9a9 [ 622.155434][T13318] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fbaec7b5fa8 [ 622.155449][T13318] RBP: 00007fbaec7b5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 622.155464][T13318] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbaec7b5fac [ 622.155484][T13318] R13: 0000000000000000 R14: 00007ffc5b75cc00 R15: 00007ffc5b75cce8 [ 622.155513][T13318] [ 622.511463][T13321] FAULT_INJECTION: forcing a failure. [ 622.511463][T13321] name failslab, interval 1, probability 0, space 0, times 0 [ 622.524672][T13321] CPU: 0 UID: 0 PID: 13321 Comm: syz.2.1812 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 622.524703][T13321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 622.524717][T13321] Call Trace: [ 622.524726][T13321] [ 622.524735][T13321] dump_stack_lvl+0x16c/0x1f0 [ 622.524764][T13321] should_fail_ex+0x512/0x640 [ 622.524787][T13321] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 622.524816][T13321] should_failslab+0xc2/0x120 [ 622.524843][T13321] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 622.524869][T13321] ? proc_alloc_inode+0x25/0x200 [ 622.524895][T13321] ? __pfx_proc_alloc_inode+0x10/0x10 [ 622.524915][T13321] proc_alloc_inode+0x25/0x200 [ 622.524936][T13321] alloc_inode+0x61/0x240 [ 622.524966][T13321] new_inode+0x22/0x1c0 [ 622.525001][T13321] proc_pid_make_inode+0x22/0x160 [ 622.525040][T13321] proc_pident_instantiate+0x85/0x320 [ 622.525083][T13321] proc_pident_lookup+0x21d/0x290 [ 622.525128][T13321] __lookup_slow+0x24e/0x460 [ 622.525161][T13321] ? __pfx___lookup_slow+0x10/0x10 [ 622.525211][T13321] ? lookup_fast+0x156/0x610 [ 622.525250][T13321] walk_component+0x353/0x5b0 [ 622.525288][T13321] link_path_walk+0x627/0xe20 [ 622.525340][T13321] path_openat+0x1b0/0x2cb0 [ 622.525360][T13321] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 622.525395][T13321] ? __pfx_path_openat+0x10/0x10 [ 622.525419][T13321] ? __lock_acquire+0xb8a/0x1c90 [ 622.525457][T13321] do_filp_open+0x20b/0x470 [ 622.525479][T13321] ? __pfx_do_filp_open+0x10/0x10 [ 622.525513][T13321] ? __pfx_kfree_link+0x10/0x10 [ 622.525553][T13321] ? alloc_fd+0x471/0x7d0 [ 622.525598][T13321] do_sys_openat2+0x11b/0x1d0 [ 622.525630][T13321] ? __pfx_do_sys_openat2+0x10/0x10 [ 622.525673][T13321] __x64_sys_openat+0x174/0x210 [ 622.525705][T13321] ? __pfx___x64_sys_openat+0x10/0x10 [ 622.525737][T13321] ? ksys_write+0x1ac/0x250 [ 622.525769][T13321] do_syscall_64+0xcd/0x490 [ 622.525796][T13321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 622.525819][T13321] RIP: 0033:0x7fa50f58d310 [ 622.525838][T13321] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 622.525861][T13321] RSP: 002b:00007fa51035df10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 622.525882][T13321] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fa50f58d310 [ 622.525897][T13321] RDX: 0000000000000002 RSI: 00007fa51035dfa0 RDI: 00000000ffffff9c [ 622.525912][T13321] RBP: 00007fa51035dfa0 R08: 0000000000000000 R09: 0000000000000000 [ 622.525926][T13321] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 622.525940][T13321] R13: 0000000000000000 R14: 00007fa50f7b5fa0 R15: 00007fff9bbd7a08 [ 622.525969][T13321] [ 623.553459][T13335] FAULT_INJECTION: forcing a failure. [ 623.553459][T13335] name failslab, interval 1, probability 0, space 0, times 0 [ 623.606703][T13335] CPU: 0 UID: 0 PID: 13335 Comm: syz.2.1818 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 623.606737][T13335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 623.606752][T13335] Call Trace: [ 623.606760][T13335] [ 623.606768][T13335] dump_stack_lvl+0x16c/0x1f0 [ 623.606797][T13335] should_fail_ex+0x512/0x640 [ 623.606821][T13335] ? __kmalloc_noprof+0xbf/0x510 [ 623.606848][T13335] ? __seq_open_private+0x22/0xd0 [ 623.606880][T13335] should_failslab+0xc2/0x120 [ 623.606908][T13335] __kmalloc_noprof+0xd2/0x510 [ 623.606932][T13335] ? apparmor_file_open+0x1a1/0x9c0 [ 623.606969][T13335] ? do_raw_spin_lock+0x12c/0x2b0 [ 623.607014][T13335] __seq_open_private+0x22/0xd0 [ 623.607048][T13335] sysvipc_proc_open+0x29/0x2d0 [ 623.607086][T13335] ? __pfx_sysvipc_proc_open+0x10/0x10 [ 623.607125][T13335] proc_reg_open+0x119/0x610 [ 623.607150][T13335] do_dentry_open+0x744/0x1c10 [ 623.607175][T13335] ? __pfx_proc_reg_open+0x10/0x10 [ 623.607203][T13335] vfs_open+0x82/0x3f0 [ 623.607238][T13335] path_openat+0x1de4/0x2cb0 [ 623.607270][T13335] ? __pfx_path_openat+0x10/0x10 [ 623.607301][T13335] ? __lock_acquire+0xb8a/0x1c90 [ 623.607339][T13335] do_filp_open+0x20b/0x470 [ 623.607362][T13335] ? __pfx_do_filp_open+0x10/0x10 [ 623.607406][T13335] ? alloc_fd+0x471/0x7d0 [ 623.607452][T13335] do_sys_openat2+0x11b/0x1d0 [ 623.607483][T13335] ? __pfx_do_sys_openat2+0x10/0x10 [ 623.607526][T13335] __x64_sys_openat+0x174/0x210 [ 623.607560][T13335] ? __pfx___x64_sys_openat+0x10/0x10 [ 623.607604][T13335] do_syscall_64+0xcd/0x490 [ 623.607631][T13335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 623.607655][T13335] RIP: 0033:0x7fa50f58e9a9 [ 623.607673][T13335] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 623.607697][T13335] RSP: 002b:00007fa51035e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 623.607719][T13335] RAX: ffffffffffffffda RBX: 00007fa50f7b5fa0 RCX: 00007fa50f58e9a9 [ 623.607735][T13335] RDX: 0000000000040000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 623.607750][T13335] RBP: 00007fa50f610d69 R08: 0000000000000000 R09: 0000000000000000 [ 623.607764][T13335] R10: 000000000000f000 R11: 0000000000000246 R12: 0000000000000000 [ 623.607778][T13335] R13: 0000000000000000 R14: 00007fa50f7b5fa0 R15: 00007fff9bbd7a08 [ 623.607807][T13335] [ 624.575142][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805db04800: rx timeout, send abort [ 624.586177][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805db04800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 624.824838][T13348] netlink: 'syz.0.1822': attribute type 25 has an invalid length. [ 624.841941][T13347] ima: policy update failed [ 624.851011][ T30] audit: type=1802 audit(6048701451.365:23): pid=13347 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.1822" res=0 errno=0 [ 626.636614][T13338] FAULT_INJECTION: forcing a failure. [ 626.636614][T13338] name failslab, interval 1, probability 0, space 0, times 0 [ 626.885105][T13338] CPU: 0 UID: 0 PID: 13338 Comm: syz.4.1819 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 626.885139][T13338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 626.885154][T13338] Call Trace: [ 626.885161][T13338] [ 626.885171][T13338] dump_stack_lvl+0x16c/0x1f0 [ 626.885200][T13338] should_fail_ex+0x512/0x640 [ 626.885223][T13338] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 626.885272][T13338] should_failslab+0xc2/0x120 [ 626.885300][T13338] __kmalloc_cache_noprof+0x6a/0x3e0 [ 626.885335][T13338] ? copy_from_sockptr_offset+0xed/0x1b0 [ 626.885369][T13338] ? tcp_fastopen_reset_cipher+0x54/0x3b0 [ 626.885404][T13338] tcp_fastopen_reset_cipher+0x54/0x3b0 [ 626.885437][T13338] do_tcp_setsockopt+0x6da/0x2640 [ 626.885466][T13338] ? __pfx_do_tcp_setsockopt+0x10/0x10 [ 626.885491][T13338] ? iput+0x519/0x880 [ 626.885524][T13338] ? iput+0x521/0x880 [ 626.885554][T13338] ? __mptcp_nmpc_sk+0x103/0x7d0 [ 626.885593][T13338] tcp_setsockopt+0xe2/0x100 [ 626.885614][T13338] ? __local_bh_enable_ip+0xa4/0x120 [ 626.885646][T13338] mptcp_setsockopt+0x534/0x30e0 [ 626.885681][T13338] ? __pfx_mptcp_setsockopt+0x10/0x10 [ 626.885713][T13338] ? __pfx_aa_sk_perm+0x10/0x10 [ 626.885747][T13338] ? __fget_files+0x204/0x3c0 [ 626.885806][T13338] ? sock_common_setsockopt+0x2e/0xf0 [ 626.885836][T13338] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 626.885870][T13338] do_sock_setsockopt+0xf0/0x1d0 [ 626.885904][T13338] __sys_setsockopt+0x120/0x1a0 [ 626.885938][T13338] __x64_sys_setsockopt+0xbd/0x160 [ 626.885960][T13338] ? do_syscall_64+0x91/0x490 [ 626.885983][T13338] ? lockdep_hardirqs_on+0x7c/0x110 [ 626.886009][T13338] do_syscall_64+0xcd/0x490 [ 626.886036][T13338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 626.886060][T13338] RIP: 0033:0x7fbaec58e9a9 [ 626.886078][T13338] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 626.886101][T13338] RSP: 002b:00007fbaed337038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 626.886123][T13338] RAX: ffffffffffffffda RBX: 00007fbaec7b5fa0 RCX: 00007fbaec58e9a9 [ 626.886138][T13338] RDX: 0000000000000021 RSI: 0000000000000006 RDI: 0000000000000003 [ 626.886152][T13338] RBP: 00007fbaed337090 R08: 0000000000000020 R09: 0000000000000000 [ 626.886166][T13338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 626.886180][T13338] R13: 0000000000000000 R14: 00007fbaec7b5fa0 R15: 00007ffc5b75cce8 [ 626.886210][T13338] [ 627.129465][ C0] vkms_vblank_simulate: vblank timer overrun [ 627.137054][ C0] hrtimer: interrupt took 250579243 ns [ 627.237215][ C0] vkms_vblank_simulate: vblank timer overrun [ 627.688658][T13367] vivid-004: kernel_thread() failed [ 628.206068][T13384] netlink: 'syz.2.1833': attribute type 25 has an invalid length. [ 628.241678][T13383] ima: policy update failed [ 628.306754][ T30] audit: type=1802 audit(6048701454.765:24): pid=13383 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.1833" res=0 errno=0 [ 628.666423][T13392] FAULT_INJECTION: forcing a failure. [ 628.666423][T13392] name failslab, interval 1, probability 0, space 0, times 0 [ 628.709064][T13392] CPU: 0 UID: 0 PID: 13392 Comm: syz.1.1836 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 628.709097][T13392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 628.709111][T13392] Call Trace: [ 628.709119][T13392] [ 628.709127][T13392] dump_stack_lvl+0x16c/0x1f0 [ 628.709156][T13392] should_fail_ex+0x512/0x640 [ 628.709179][T13392] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 628.709207][T13392] should_failslab+0xc2/0x120 [ 628.709234][T13392] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 628.709259][T13392] ? security_file_alloc+0x34/0x2b0 [ 628.709300][T13392] security_file_alloc+0x34/0x2b0 [ 628.709337][T13392] init_file+0x93/0x4c0 [ 628.709365][T13392] alloc_empty_file+0x73/0x1e0 [ 628.709396][T13392] alloc_file_pseudo+0x13a/0x230 [ 628.709433][T13392] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 628.709473][T13392] __shmem_file_setup+0x1a3/0x330 [ 628.709512][T13392] shmem_zero_setup+0x93/0x1a0 [ 628.709538][T13392] __mmap_region+0x1ece/0x25e0 [ 628.709566][T13392] ? __pfx___mmap_region+0x10/0x10 [ 628.709598][T13392] ? is_bpf_text_address+0x8a/0x1a0 [ 628.709631][T13392] ? bpf_ksym_find+0x124/0x1c0 [ 628.709657][T13392] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 628.709686][T13392] ? is_bpf_text_address+0x94/0x1a0 [ 628.709718][T13392] ? kernel_text_address+0x8d/0x100 [ 628.709757][T13392] ? __kernel_text_address+0xd/0x40 [ 628.709846][T13392] ? trace_cap_capable+0x18d/0x200 [ 628.709884][T13392] mmap_region+0x1ab/0x3f0 [ 628.709908][T13392] ? __get_unmapped_area+0x267/0x440 [ 628.709943][T13392] do_mmap+0xa3e/0x1210 [ 628.709980][T13392] ? __pfx_do_mmap+0x10/0x10 [ 628.710015][T13392] ? __pfx_down_write_killable+0x10/0x10 [ 628.710049][T13392] vm_mmap_pgoff+0x281/0x450 [ 628.710083][T13392] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 628.710115][T13392] ? __fget_files+0x20e/0x3c0 [ 628.710161][T13392] ksys_mmap_pgoff+0x7d/0x5c0 [ 628.710191][T13392] ? __pfx_ksys_write+0x10/0x10 [ 628.710217][T13392] __x64_sys_mmap+0x125/0x190 [ 628.710255][T13392] do_syscall_64+0xcd/0x490 [ 628.710281][T13392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 628.710305][T13392] RIP: 0033:0x7f265738e9a9 [ 628.710323][T13392] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 628.710347][T13392] RSP: 002b:00007f265816d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 628.710368][T13392] RAX: ffffffffffffffda RBX: 00007f26575b5fa0 RCX: 00007f265738e9a9 [ 628.710384][T13392] RDX: 00004000000000df RSI: 0000000000020009 RDI: 0000000000000000 [ 628.710398][T13392] RBP: 00007f265816d090 R08: 0000000000000401 R09: 0000000000008000 [ 628.710412][T13392] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000001 [ 628.710426][T13392] R13: 0000000000000001 R14: 00007f26575b5fa0 R15: 00007fff98957368 [ 628.710454][T13392] [ 628.992397][ C0] vkms_vblank_simulate: vblank timer overrun [ 629.232243][T13400] FAULT_INJECTION: forcing a failure. [ 629.232243][T13400] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 629.246155][T13400] CPU: 0 UID: 0 PID: 13400 Comm: syz.2.1841 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 629.246186][T13400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 629.246201][T13400] Call Trace: [ 629.246210][T13400] [ 629.246219][T13400] dump_stack_lvl+0x16c/0x1f0 [ 629.246247][T13400] should_fail_ex+0x512/0x640 [ 629.246275][T13400] should_fail_alloc_page+0xe7/0x130 [ 629.246305][T13400] prepare_alloc_pages+0x3c2/0x610 [ 629.246343][T13400] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 629.246370][T13400] ? kasan_save_stack+0x42/0x60 [ 629.246391][T13400] ? kasan_save_stack+0x33/0x60 [ 629.246412][T13400] ? kasan_save_track+0x14/0x30 [ 629.246433][T13400] ? __kasan_slab_alloc+0x89/0x90 [ 629.246456][T13400] ? kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 629.246483][T13400] ? __pmd_alloc+0xbf/0x930 [ 629.246512][T13400] ? __handle_mm_fault+0xaac/0x5490 [ 629.246547][T13400] ? handle_mm_fault+0x589/0xd10 [ 629.246580][T13400] ? do_user_addr_fault+0x7a6/0x1370 [ 629.246613][T13400] ? exc_page_fault+0x5c/0xb0 [ 629.246632][T13400] ? asm_exc_page_fault+0x26/0x30 [ 629.246655][T13400] ? rep_movs_alternative+0x4a/0x90 [ 629.246685][T13400] ? _copy_from_iter+0x383/0x16f0 [ 629.246710][T13400] ? j1939_sk_sendmsg+0x7f2/0x13d0 [ 629.246743][T13400] ? __sys_sendto+0x4a3/0x520 [ 629.246762][T13400] ? __x64_sys_sendto+0xe0/0x1c0 [ 629.246782][T13400] ? do_syscall_64+0xcd/0x490 [ 629.246804][T13400] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 629.246829][T13400] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 629.246869][T13400] ? __lock_acquire+0xb8a/0x1c90 [ 629.246903][T13400] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 629.246941][T13400] ? policy_nodemask+0xea/0x4e0 [ 629.246971][T13400] alloc_pages_mpol+0x1fb/0x550 [ 629.247000][T13400] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 629.247030][T13400] ? __thp_vma_allowable_orders+0x1c5/0xb10 [ 629.247067][T13400] alloc_pages_noprof+0x131/0x390 [ 629.247096][T13400] pte_alloc_one+0x1c/0x3a0 [ 629.247117][T13400] __handle_mm_fault+0x3a68/0x5490 [ 629.247162][T13400] ? __pfx___handle_mm_fault+0x10/0x10 [ 629.247196][T13400] ? __pfx_mt_find+0x10/0x10 [ 629.247239][T13400] ? find_vma+0xbf/0x140 [ 629.247267][T13400] ? __pfx_find_vma+0x10/0x10 [ 629.247299][T13400] handle_mm_fault+0x589/0xd10 [ 629.247337][T13400] ? __pkru_allows_pkey+0x51/0xb0 [ 629.247371][T13400] do_user_addr_fault+0x7a6/0x1370 [ 629.247407][T13400] ? rcu_is_watching+0x12/0xc0 [ 629.247436][T13400] exc_page_fault+0x5c/0xb0 [ 629.247458][T13400] asm_exc_page_fault+0x26/0x30 [ 629.247480][T13400] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 629.247512][T13400] Code: 11 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 629.247534][T13400] RSP: 0018:ffffc90003f2fab8 EFLAGS: 00050202 [ 629.247553][T13400] RAX: 0000000000000001 RBX: 00000000000006f9 RCX: 00000000000006f9 [ 629.247567][T13400] RDX: ffffed10051670e3 RSI: 0000000000000000 RDI: ffff888028b38018 [ 629.247582][T13400] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed10051670e2 [ 629.247596][T13400] R10: ffff888028b38710 R11: 0000000000000000 R12: ffffc90003f2fd80 [ 629.247611][T13400] R13: 00000000000006f9 R14: ffff888028b38018 R15: 00007ffffffff000 [ 629.247641][T13400] _copy_from_iter+0x383/0x16f0 [ 629.247675][T13400] ? __pfx__copy_from_iter+0x10/0x10 [ 629.247701][T13400] ? do_raw_spin_lock+0x12c/0x2b0 [ 629.247750][T13400] ? __local_bh_enable_ip+0xa4/0x120 [ 629.247781][T13400] j1939_sk_sendmsg+0x7f2/0x13d0 [ 629.247816][T13400] ? __might_fault+0xe3/0x190 [ 629.247843][T13400] ? __pfx_j1939_sk_sendmsg+0x10/0x10 [ 629.247880][T13400] __sys_sendto+0x4a3/0x520 [ 629.247902][T13400] ? __pfx___sys_sendto+0x10/0x10 [ 629.247949][T13400] ? ksys_write+0x1ac/0x250 [ 629.247972][T13400] ? __pfx_ksys_write+0x10/0x10 [ 629.247998][T13400] __x64_sys_sendto+0xe0/0x1c0 [ 629.248019][T13400] ? do_syscall_64+0x91/0x490 [ 629.248042][T13400] ? lockdep_hardirqs_on+0x7c/0x110 [ 629.248063][T13400] do_syscall_64+0xcd/0x490 [ 629.248090][T13400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 629.248113][T13400] RIP: 0033:0x7fa50f58e9a9 [ 629.248132][T13400] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 629.248156][T13400] RSP: 002b:00007fa51035e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 629.248178][T13400] RAX: ffffffffffffffda RBX: 00007fa50f7b5fa0 RCX: 00007fa50f58e9a9 [ 629.248194][T13400] RDX: 000000000000770c RSI: 0000000000000000 RDI: 0000000000000003 [ 629.248209][T13400] RBP: 00007fa51035e090 R08: 0000200000000440 R09: 0000000000000036 [ 629.248225][T13400] R10: 00000000fffffff8 R11: 0000000000000246 R12: 0000000000000001 [ 629.248240][T13400] R13: 0000000000000000 R14: 00007fa50f7b5fa0 R15: 00007fff9bbd7a08 [ 629.248270][T13400] [ 629.717245][ C0] vkms_vblank_simulate: vblank timer overrun [ 629.773871][T13403] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1840'. [ 629.895883][T13406] FAULT_INJECTION: forcing a failure. [ 629.895883][T13406] name failslab, interval 1, probability 0, space 0, times 0 [ 629.909646][T13406] CPU: 0 UID: 0 PID: 13406 Comm: syz.1.1838 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 629.909686][T13406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 629.909702][T13406] Call Trace: [ 629.909710][T13406] [ 629.909719][T13406] dump_stack_lvl+0x16c/0x1f0 [ 629.909748][T13406] should_fail_ex+0x512/0x640 [ 629.909785][T13406] ? __kmalloc_noprof+0xbf/0x510 [ 629.909811][T13406] ? drm_ioctl+0x4cc/0xc30 [ 629.909835][T13406] should_failslab+0xc2/0x120 [ 629.909862][T13406] __kmalloc_noprof+0xd2/0x510 [ 629.909884][T13406] ? drm_dev_exit+0x41/0x60 [ 629.909916][T13406] drm_ioctl+0x4cc/0xc30 [ 629.909946][T13406] ? __pfx_drm_mode_dirtyfb_ioctl+0x10/0x10 [ 629.909984][T13406] ? __pfx_drm_ioctl+0x10/0x10 [ 629.910014][T13406] ? find_held_lock+0x2b/0x80 [ 629.910052][T13406] ? __pfx_drm_ioctl+0x10/0x10 [ 629.910079][T13406] __x64_sys_ioctl+0x18e/0x210 [ 629.910115][T13406] do_syscall_64+0xcd/0x490 [ 629.910141][T13406] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 629.910165][T13406] RIP: 0033:0x7f265738e9a9 [ 629.910184][T13406] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 629.910208][T13406] RSP: 002b:00007f265812b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 629.910229][T13406] RAX: ffffffffffffffda RBX: 00007f26575b6160 RCX: 00007f265738e9a9 [ 629.910245][T13406] RDX: 0000000000000008 RSI: 00000000921064b1 RDI: 000000000000000e [ 629.910259][T13406] RBP: 00007f2657410d69 R08: 0000000000000000 R09: 0000000000000000 [ 629.910273][T13406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 629.910286][T13406] R13: 0000000000000000 R14: 00007f26575b6160 R15: 00007fff98957368 [ 629.910315][T13406] [ 630.090785][ C0] vkms_vblank_simulate: vblank timer overrun [ 630.229241][T13403] veth1_macvtap: left promiscuous mode [ 630.470801][T13404] zswap: compressor 000 not available [ 631.163192][T13433] futex_wake_op: syz.2.1848 tries to shift op by 64; fix this program [ 631.660573][T13449] FAULT_INJECTION: forcing a failure. [ 631.660573][T13449] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 631.683601][T13449] CPU: 0 UID: 0 PID: 13449 Comm: syz.0.1852 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 631.683635][T13449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 631.683650][T13449] Call Trace: [ 631.683657][T13449] [ 631.683666][T13449] dump_stack_lvl+0x16c/0x1f0 [ 631.683695][T13449] should_fail_ex+0x512/0x640 [ 631.683724][T13449] should_fail_alloc_page+0xe7/0x130 [ 631.683756][T13449] prepare_alloc_pages+0x3c2/0x610 [ 631.683791][T13449] ? rcu_is_watching+0x12/0xc0 [ 631.683819][T13449] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 631.683851][T13449] ? __lock_acquire+0x622/0x1c90 [ 631.683887][T13449] ? xas_create+0x1d7/0x1460 [ 631.683916][T13449] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 631.683944][T13449] ? lock_acquire+0x179/0x350 [ 631.683977][T13449] ? rcu_is_watching+0x12/0xc0 [ 631.684016][T13449] ? __lock_acquire+0x622/0x1c90 [ 631.684048][T13449] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 631.684087][T13449] ? policy_nodemask+0xea/0x4e0 [ 631.684117][T13449] alloc_pages_mpol+0x1fb/0x550 [ 631.684147][T13449] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 631.684177][T13449] ? filemap_get_entry+0x1a7/0x3b0 [ 631.684209][T13449] folio_alloc_noprof+0x20/0x2d0 [ 631.684242][T13449] filemap_alloc_folio_noprof+0x3a1/0x470 [ 631.684282][T13449] ? __pfx_filemap_alloc_folio_noprof+0x10/0x10 [ 631.684328][T13449] __filemap_get_folio+0x5e1/0xc30 [ 631.684363][T13449] ioctx_alloc+0x761/0x2120 [ 631.684416][T13449] ? __pfx_ioctx_alloc+0x10/0x10 [ 631.684451][T13449] ? __might_fault+0x13b/0x190 [ 631.684482][T13449] __x64_sys_io_setup+0xc9/0x210 [ 631.684528][T13449] do_syscall_64+0xcd/0x490 [ 631.684555][T13449] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 631.684584][T13449] RIP: 0033:0x7ffbbf18e9a9 [ 631.684603][T13449] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 631.684627][T13449] RSP: 002b:00007ffbc00a3038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 631.684649][T13449] RAX: ffffffffffffffda RBX: 00007ffbbf3b5fa0 RCX: 00007ffbbf18e9a9 [ 631.684665][T13449] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000007ffe [ 631.684680][T13449] RBP: 00007ffbbf210d69 R08: 0000000000000000 R09: 0000000000000000 [ 631.684694][T13449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 631.684708][T13449] R13: 0000000000000000 R14: 00007ffbbf3b5fa0 R15: 00007fff56215e48 [ 631.684737][T13449] [ 631.927317][ C0] vkms_vblank_simulate: vblank timer overrun [ 632.445040][T13453] netlink: 'syz.1.1854': attribute type 25 has an invalid length. [ 632.631861][T13457] FAULT_INJECTION: forcing a failure. [ 632.631861][T13457] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 632.714427][T13457] CPU: 0 UID: 0 PID: 13457 Comm: syz.4.1855 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 632.714464][T13457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 632.714480][T13457] Call Trace: [ 632.714487][T13457] [ 632.714498][T13457] dump_stack_lvl+0x16c/0x1f0 [ 632.714530][T13457] should_fail_ex+0x512/0x640 [ 632.714562][T13457] _copy_from_user+0x2e/0xd0 [ 632.714592][T13457] ____sys_sendmsg+0x607/0xc70 [ 632.714632][T13457] ? __pfx_____sys_sendmsg+0x10/0x10 [ 632.714674][T13457] ? __pfx__kstrtoull+0x10/0x10 [ 632.714718][T13457] ___sys_sendmsg+0x134/0x1d0 [ 632.714747][T13457] ? __pfx____sys_sendmsg+0x10/0x10 [ 632.714790][T13457] ? find_held_lock+0x2b/0x80 [ 632.714837][T13457] __sys_sendmmsg+0x200/0x420 [ 632.714869][T13457] ? __pfx___sys_sendmmsg+0x10/0x10 [ 632.714908][T13457] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 632.714950][T13457] ? fput+0x70/0xf0 [ 632.714981][T13457] ? ksys_write+0x1ac/0x250 [ 632.715009][T13457] ? __pfx_ksys_write+0x10/0x10 [ 632.715039][T13457] __x64_sys_sendmmsg+0x9c/0x100 [ 632.715067][T13457] ? lockdep_hardirqs_on+0x7c/0x110 [ 632.715091][T13457] do_syscall_64+0xcd/0x490 [ 632.715120][T13457] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.715146][T13457] RIP: 0033:0x7fbaec58e9a9 [ 632.715166][T13457] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 632.715192][T13457] RSP: 002b:00007fbaed337038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 632.715216][T13457] RAX: ffffffffffffffda RBX: 00007fbaec7b5fa0 RCX: 00007fbaec58e9a9 [ 632.715233][T13457] RDX: 0000000000000007 RSI: 0000200000000200 RDI: 0000000000000003 [ 632.715249][T13457] RBP: 00007fbaed337090 R08: 0000000000000000 R09: 0000000000000000 [ 632.715265][T13457] R10: 0000000000004008 R11: 0000000000000246 R12: 0000000000000001 [ 632.715281][T13457] R13: 0000000000000000 R14: 00007fbaec7b5fa0 R15: 00007ffc5b75cce8 [ 632.715313][T13457] [ 632.911273][ C0] vkms_vblank_simulate: vblank timer overrun [ 633.347567][T13472] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1861'. [ 633.783743][T13480] FAULT_INJECTION: forcing a failure. [ 633.783743][T13480] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 633.811994][T13480] CPU: 0 UID: 0 PID: 13480 Comm: syz.0.1862 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 633.812028][T13480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 633.812044][T13480] Call Trace: [ 633.812051][T13480] [ 633.812060][T13480] dump_stack_lvl+0x16c/0x1f0 [ 633.812090][T13480] should_fail_ex+0x512/0x640 [ 633.812120][T13480] should_fail_alloc_page+0xe7/0x130 [ 633.812151][T13480] prepare_alloc_pages+0x3c2/0x610 [ 633.812186][T13480] ? rcu_is_watching+0x12/0xc0 [ 633.812215][T13480] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 633.812247][T13480] ? __lock_acquire+0x622/0x1c90 [ 633.812289][T13480] ? xas_create+0x1d7/0x1460 [ 633.812317][T13480] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 633.812346][T13480] ? lock_acquire+0x179/0x350 [ 633.812391][T13480] ? rcu_is_watching+0x12/0xc0 [ 633.812430][T13480] ? __lock_acquire+0x622/0x1c90 [ 633.812461][T13480] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 633.812500][T13480] ? policy_nodemask+0xea/0x4e0 [ 633.812529][T13480] alloc_pages_mpol+0x1fb/0x550 [ 633.812557][T13480] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 633.812586][T13480] ? filemap_get_entry+0x1a7/0x3b0 [ 633.812617][T13480] folio_alloc_noprof+0x20/0x2d0 [ 633.812649][T13480] filemap_alloc_folio_noprof+0x3a1/0x470 [ 633.812687][T13480] ? __pfx_filemap_alloc_folio_noprof+0x10/0x10 [ 633.812725][T13480] ? __filemap_get_folio+0x51c/0xc30 [ 633.812756][T13480] __filemap_get_folio+0x5e1/0xc30 [ 633.812790][T13480] ioctx_alloc+0x761/0x2120 [ 633.812839][T13480] ? __pfx_ioctx_alloc+0x10/0x10 [ 633.812872][T13480] ? __might_fault+0x13b/0x190 [ 633.812902][T13480] __x64_sys_io_setup+0xc9/0x210 [ 633.812940][T13480] do_syscall_64+0xcd/0x490 [ 633.812966][T13480] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.812989][T13480] RIP: 0033:0x7ffbbf18e9a9 [ 633.813007][T13480] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 633.813030][T13480] RSP: 002b:00007ffbc00a3038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 633.813051][T13480] RAX: ffffffffffffffda RBX: 00007ffbbf3b5fa0 RCX: 00007ffbbf18e9a9 [ 633.813066][T13480] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000007ffe [ 633.813080][T13480] RBP: 00007ffbbf210d69 R08: 0000000000000000 R09: 0000000000000000 [ 633.813094][T13480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 633.813108][T13480] R13: 0000000000000000 R14: 00007ffbbf3b5fa0 R15: 00007fff56215e48 [ 633.813136][T13480] [ 634.061988][ C0] vkms_vblank_simulate: vblank timer overrun [ 634.169796][ C0] vkms_vblank_simulate: vblank timer overrun [ 634.792696][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 634.819474][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 637.269282][T13540] [U] [ 637.272137][T13540] [U] [ 637.274855][T13540] [U] [ 637.277575][T13540] [U] [ 637.285091][T13540] [U] [ 637.287844][T13540] [U] [ 637.290563][T13540] [U] [ 637.293287][T13540] [U] [ 637.305755][T13540] [U] [ 637.308520][T13540] [U] [ 637.311286][T13540] [U] [ 637.314013][T13540] [U] [ 637.331769][T13540] [U] [ 637.334537][T13540] [U] [ 637.337254][T13540] [U] [ 637.339973][T13540] [U] [ 637.358527][T13540] [U] [ 637.361288][T13540] [U] [ 637.364018][T13540] [U] [ 637.366734][T13540] [U] [ 637.397128][T13540] [U] [ 637.399906][T13540] [U] [ 637.402624][T13540] [U] [ 637.405342][T13540] [U] [ 637.438282][T13540] [U] [ 637.441049][T13540] [U] [ 637.443777][T13540] [U] [ 637.446499][T13540] [U] [ 637.464065][T13540] [U] [ 637.466861][T13540] [U] [ 637.469587][T13540] [U] [ 637.472362][T13540] [U] [ 637.498620][T13540] [U] [ 637.904521][T13550] FAULT_INJECTION: forcing a failure. [ 637.904521][T13550] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 638.061257][T13550] CPU: 0 UID: 0 PID: 13550 Comm: syz.2.1876 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 638.061291][T13550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 638.061307][T13550] Call Trace: [ 638.061314][T13550] [ 638.061323][T13550] dump_stack_lvl+0x16c/0x1f0 [ 638.061352][T13550] should_fail_ex+0x512/0x640 [ 638.061381][T13550] should_fail_alloc_page+0xe7/0x130 [ 638.061413][T13550] prepare_alloc_pages+0x3c2/0x610 [ 638.061448][T13550] ? rcu_is_watching+0x12/0xc0 [ 638.061477][T13550] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 638.061505][T13550] ? rcu_is_watching+0x12/0xc0 [ 638.061530][T13550] ? mod_memcg_lruvec_state+0x394/0x610 [ 638.061569][T13550] ? __mod_zone_page_state+0xcc/0x1a0 [ 638.061609][T13550] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 638.061638][T13550] ? folios_put_refs+0x5ce/0x740 [ 638.061669][T13550] ? __pfx_folios_put_refs+0x10/0x10 [ 638.061700][T13550] ? __lock_acquire+0x622/0x1c90 [ 638.061732][T13550] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 638.061772][T13550] ? policy_nodemask+0xea/0x4e0 [ 638.061802][T13550] alloc_pages_mpol+0x1fb/0x550 [ 638.061831][T13550] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 638.061861][T13550] ? filemap_get_entry+0x1a7/0x3b0 [ 638.061895][T13550] folio_alloc_noprof+0x20/0x2d0 [ 638.061928][T13550] filemap_alloc_folio_noprof+0x3a1/0x470 [ 638.061975][T13550] ? __pfx_filemap_alloc_folio_noprof+0x10/0x10 [ 638.062025][T13550] __filemap_get_folio+0x5e1/0xc30 [ 638.062060][T13550] ioctx_alloc+0x761/0x2120 [ 638.062111][T13550] ? __pfx_ioctx_alloc+0x10/0x10 [ 638.062146][T13550] ? __might_fault+0x13b/0x190 [ 638.062178][T13550] __x64_sys_io_setup+0xc9/0x210 [ 638.062217][T13550] do_syscall_64+0xcd/0x490 [ 638.062244][T13550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 638.062268][T13550] RIP: 0033:0x7fa50f58e9a9 [ 638.062287][T13550] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 638.062310][T13550] RSP: 002b:00007fa51035e038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 638.062333][T13550] RAX: ffffffffffffffda RBX: 00007fa50f7b5fa0 RCX: 00007fa50f58e9a9 [ 638.062349][T13550] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000007ffe [ 638.062363][T13550] RBP: 00007fa50f610d69 R08: 0000000000000000 R09: 0000000000000000 [ 638.062378][T13550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 638.062392][T13550] R13: 0000000000000000 R14: 00007fa50f7b5fa0 R15: 00007fff9bbd7a08 [ 638.062421][T13550] [ 641.731117][T13595] FAULT_INJECTION: forcing a failure. [ 641.731117][T13595] name failslab, interval 1, probability 0, space 0, times 0 [ 641.874010][T13595] CPU: 0 UID: 0 PID: 13595 Comm: syz.1.1888 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 641.874043][T13595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 641.874058][T13595] Call Trace: [ 641.874065][T13595] [ 641.874073][T13595] dump_stack_lvl+0x16c/0x1f0 [ 641.874102][T13595] should_fail_ex+0x512/0x640 [ 641.874126][T13595] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 641.874166][T13595] should_failslab+0xc2/0x120 [ 641.874194][T13595] __kmalloc_cache_noprof+0x6a/0x3e0 [ 641.874232][T13595] ? device_add+0xccc/0x1a70 [ 641.874268][T13595] device_add+0xccc/0x1a70 [ 641.874297][T13595] ? dev_set_name+0xc7/0x100 [ 641.874331][T13595] ? __pfx_dev_set_name+0x10/0x10 [ 641.874365][T13595] ? __pfx_device_add+0x10/0x10 [ 641.874396][T13595] ? lockdep_init_map_type+0x5c/0x280 [ 641.874432][T13595] ? __init_waitqueue_head+0xca/0x150 [ 641.874460][T13595] ? __pfx_wakeup_store+0x10/0x10 [ 641.874488][T13595] wakeup_source_device_create+0x214/0x2a0 [ 641.874522][T13595] wakeup_source_sysfs_add+0x1c/0x90 [ 641.874559][T13595] wakeup_source_register+0x154/0x3e0 [ 641.874586][T13595] ? __pfx_wakeup_store+0x10/0x10 [ 641.874612][T13595] device_wakeup_enable+0xce/0x2d0 [ 641.874640][T13595] ? __pfx_wakeup_store+0x10/0x10 [ 641.874666][T13595] device_set_wakeup_enable+0xfd/0x120 [ 641.874694][T13595] wakeup_store+0xeb/0x100 [ 641.874723][T13595] dev_attr_store+0x58/0x80 [ 641.874751][T13595] ? __pfx_dev_attr_store+0x10/0x10 [ 641.874780][T13595] sysfs_kf_write+0xf2/0x150 [ 641.874816][T13595] kernfs_fop_write_iter+0x354/0x510 [ 641.874845][T13595] ? __pfx_sysfs_kf_write+0x10/0x10 [ 641.874881][T13595] vfs_write+0x6c4/0x1150 [ 641.874904][T13595] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 641.874936][T13595] ? __pfx___mutex_lock+0x10/0x10 [ 641.874961][T13595] ? __pfx_vfs_write+0x10/0x10 [ 641.875006][T13595] ksys_write+0x12a/0x250 [ 641.875028][T13595] ? __pfx_ksys_write+0x10/0x10 [ 641.875059][T13595] do_syscall_64+0xcd/0x490 [ 641.875085][T13595] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.875122][T13595] RIP: 0033:0x7f265738e9a9 [ 641.875139][T13595] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 641.875180][T13595] RSP: 002b:00007f265816d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 641.875201][T13595] RAX: ffffffffffffffda RBX: 00007f26575b5fa0 RCX: 00007f265738e9a9 [ 641.875216][T13595] RDX: 0000000000003f00 RSI: 0000000000000000 RDI: 0000000000000003 [ 641.875230][T13595] RBP: 00007f265816d090 R08: 0000000000000000 R09: 0000000000000000 [ 641.875243][T13595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 641.875256][T13595] R13: 0000000000000000 R14: 00007f26575b5fa0 R15: 00007fff98957368 [ 641.875286][T13595] [ 643.276738][T13610] netlink: 252 bytes leftover after parsing attributes in process `syz.0.1890'. [ 643.414335][T13613] netlink: 252 bytes leftover after parsing attributes in process `syz.0.1890'. [ 644.361660][T13622] netlink: 'syz.2.1895': attribute type 25 has an invalid length. [ 644.828165][T13632] FAULT_INJECTION: forcing a failure. [ 644.828165][T13632] name failslab, interval 1, probability 0, space 0, times 0 [ 644.882930][T13632] CPU: 0 UID: 0 PID: 13632 Comm: syz.2.1900 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 644.882963][T13632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 644.882977][T13632] Call Trace: [ 644.882989][T13632] [ 644.882998][T13632] dump_stack_lvl+0x16c/0x1f0 [ 644.883026][T13632] should_fail_ex+0x512/0x640 [ 644.883050][T13632] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 644.883078][T13632] should_failslab+0xc2/0x120 [ 644.883105][T13632] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 644.883129][T13632] ? security_file_alloc+0x34/0x2b0 [ 644.883171][T13632] security_file_alloc+0x34/0x2b0 [ 644.883207][T13632] init_file+0x93/0x4c0 [ 644.883236][T13632] alloc_empty_file+0x73/0x1e0 [ 644.883274][T13632] path_openat+0xda/0x2cb0 [ 644.883295][T13632] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 644.883329][T13632] ? __pfx_path_openat+0x10/0x10 [ 644.883353][T13632] ? __lock_acquire+0xb8a/0x1c90 [ 644.883390][T13632] do_filp_open+0x20b/0x470 [ 644.883413][T13632] ? __pfx_do_filp_open+0x10/0x10 [ 644.883455][T13632] ? alloc_fd+0x471/0x7d0 [ 644.883499][T13632] do_sys_openat2+0x11b/0x1d0 [ 644.883530][T13632] ? __pfx_do_sys_openat2+0x10/0x10 [ 644.883560][T13632] ? __pfx_do_sys_openat2+0x10/0x10 [ 644.883602][T13632] __x64_sys_openat+0x174/0x210 [ 644.883633][T13632] ? __pfx___x64_sys_openat+0x10/0x10 [ 644.883677][T13632] do_syscall_64+0xcd/0x490 [ 644.883703][T13632] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 644.883726][T13632] RIP: 0033:0x7fa50f58e9a9 [ 644.883744][T13632] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 644.883767][T13632] RSP: 002b:00007fa51035e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 644.883789][T13632] RAX: ffffffffffffffda RBX: 00007fa50f7b5fa0 RCX: 00007fa50f58e9a9 [ 644.883804][T13632] RDX: 0000000000080100 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 644.883820][T13632] RBP: 00007fa50f610d69 R08: 0000000000000000 R09: 0000000000000000 [ 644.883834][T13632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 644.883848][T13632] R13: 0000000000000000 R14: 00007fa50f7b5fa0 R15: 00007fff9bbd7a08 [ 644.883877][T13632] [ 645.135089][T13633] FAULT_INJECTION: forcing a failure. [ 645.135089][T13633] name failslab, interval 1, probability 0, space 0, times 0 [ 645.148446][T13633] CPU: 0 UID: 0 PID: 13633 Comm: syz.2.1900 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 645.148476][T13633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 645.148492][T13633] Call Trace: [ 645.148499][T13633] [ 645.148507][T13633] dump_stack_lvl+0x16c/0x1f0 [ 645.148535][T13633] should_fail_ex+0x512/0x640 [ 645.148564][T13633] ? fs_reclaim_acquire+0xae/0x150 [ 645.148602][T13633] ? tomoyo_encode2+0x100/0x3e0 [ 645.148624][T13633] should_failslab+0xc2/0x120 [ 645.148651][T13633] __kmalloc_noprof+0xd2/0x510 [ 645.148673][T13633] ? d_absolute_path+0x136/0x1a0 [ 645.148709][T13633] tomoyo_encode2+0x100/0x3e0 [ 645.148734][T13633] tomoyo_encode+0x29/0x50 [ 645.148754][T13633] tomoyo_realpath_from_path+0x18f/0x6e0 [ 645.148786][T13633] tomoyo_path_number_perm+0x245/0x580 [ 645.148819][T13633] ? tomoyo_path_number_perm+0x237/0x580 [ 645.148855][T13633] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 645.148888][T13633] ? stack_trace_save+0x8e/0xc0 [ 645.148915][T13633] ? __pfx_stack_trace_save+0x10/0x10 [ 645.148950][T13633] ? __lock_acquire+0xb8a/0x1c90 [ 645.149005][T13633] ? __pfx___might_resched+0x10/0x10 [ 645.149037][T13633] ? down_write_killable+0x154/0x250 [ 645.149065][T13633] ? __pfx_down_write_killable+0x10/0x10 [ 645.149092][T13633] ? mnt_get_write_access+0x20c/0x300 [ 645.149124][T13633] security_path_chmod+0x121/0x2c0 [ 645.149158][T13633] chmod_common+0x179/0x480 [ 645.149190][T13633] ? rcu_is_watching+0x12/0xc0 [ 645.149229][T13633] ? __pfx_chmod_common+0x10/0x10 [ 645.149269][T13633] ? putname+0x154/0x1a0 [ 645.149301][T13633] __x64_sys_chmod+0x107/0x1c0 [ 645.149330][T13633] ? __pfx___x64_sys_chmod+0x10/0x10 [ 645.149368][T13633] do_syscall_64+0xcd/0x490 [ 645.149395][T13633] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 645.149419][T13633] RIP: 0033:0x7fa50f58e9a9 [ 645.149438][T13633] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 645.149462][T13633] RSP: 002b:00007fa51033d038 EFLAGS: 00000246 ORIG_RAX: 000000000000005a [ 645.149484][T13633] RAX: ffffffffffffffda RBX: 00007fa50f7b6080 RCX: 00007fa50f58e9a9 [ 645.149499][T13633] RDX: 0000000000000000 RSI: 00000000000003ff RDI: 0000200000000140 [ 645.149513][T13633] RBP: 00007fa51033d090 R08: 0000000000000000 R09: 0000000000000000 [ 645.149527][T13633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 645.149541][T13633] R13: 0000000000000000 R14: 00007fa50f7b6080 R15: 00007fff9bbd7a08 [ 645.149570][T13633] [ 645.149608][T13633] ERROR: Out of memory at tomoyo_realpath_from_path. [ 646.327051][T13644] random: crng reseeded on system resumption [ 646.509360][T13639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 646.540139][T13639] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 646.750322][T13646] FAULT_INJECTION: forcing a failure. [ 646.750322][T13646] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 647.534030][T13646] CPU: 0 UID: 0 PID: 13646 Comm: syz.2.1904 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 647.534062][T13646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 647.534077][T13646] Call Trace: [ 647.534084][T13646] [ 647.534093][T13646] dump_stack_lvl+0x16c/0x1f0 [ 647.534121][T13646] should_fail_ex+0x512/0x640 [ 647.534150][T13646] _copy_to_user+0x32/0xd0 [ 647.534178][T13646] video_usercopy+0xcbe/0x1440 [ 647.534206][T13646] ? __pfx___video_do_ioctl+0x10/0x10 [ 647.534231][T13646] ? __pfx_video_usercopy+0x10/0x10 [ 647.534269][T13646] ? __fget_files+0x20e/0x3c0 [ 647.534309][T13646] v4l2_ioctl+0x1bd/0x250 [ 647.534330][T13646] ? __pfx_v4l2_ioctl+0x10/0x10 [ 647.534353][T13646] __x64_sys_ioctl+0x18e/0x210 [ 647.534388][T13646] do_syscall_64+0xcd/0x490 [ 647.534415][T13646] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 647.534439][T13646] RIP: 0033:0x7fa50f58e9a9 [ 647.534456][T13646] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 647.534480][T13646] RSP: 002b:00007fa51035e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 647.534502][T13646] RAX: ffffffffffffffda RBX: 00007fa50f7b5fa0 RCX: 00007fa50f58e9a9 [ 647.534517][T13646] RDX: 0000000000000004 RSI: 00000000c0445624 RDI: 0000000000000004 [ 647.534532][T13646] RBP: 00007fa51035e090 R08: 0000000000000000 R09: 0000000000000000 [ 647.534546][T13646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 647.534560][T13646] R13: 0000000000000000 R14: 00007fa50f7b5fa0 R15: 00007fff9bbd7a08 [ 647.534588][T13646] [ 647.833295][T11362] ================================================================== [ 647.841421][T11362] BUG: KASAN: vmalloc-out-of-bounds in hci_devcd_dump+0x142/0x240 [ 647.849261][T11362] Read of size 140 at addr ffffc90006493000 by task kworker/u9:1/11362 [ 647.857510][T11362] [ 647.859860][T11362] CPU: 0 UID: 0 PID: 11362 Comm: kworker/u9:1 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 647.859888][T11362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 647.859904][T11362] Workqueue: hci0 hci_devcd_timeout [ 647.859940][T11362] Call Trace: [ 647.859948][T11362] [ 647.859968][T11362] dump_stack_lvl+0x116/0x1f0 [ 647.859992][T11362] print_report+0xcd/0x630 [ 647.860017][T11362] ? __virt_addr_valid+0x81/0x610 [ 647.860044][T11362] ? hci_devcd_dump+0x142/0x240 [ 647.860075][T11362] kasan_report+0xe0/0x110 [ 647.860100][T11362] ? hci_devcd_dump+0x142/0x240 [ 647.860137][T11362] kasan_check_range+0x100/0x1b0 [ 647.860166][T11362] __asan_memcpy+0x23/0x60 [ 647.860201][T11362] hci_devcd_dump+0x142/0x240 [ 647.860235][T11362] hci_devcd_timeout+0xb5/0x2e0 [ 647.860268][T11362] ? rcu_is_watching+0x12/0xc0 [ 647.860293][T11362] process_one_work+0x9cc/0x1b70 [ 647.860335][T11362] ? __pfx_process_one_work+0x10/0x10 [ 647.860375][T11362] ? assign_work+0x1a0/0x250 [ 647.860408][T11362] worker_thread+0x6c8/0xf10 [ 647.860447][T11362] ? __kthread_parkme+0x19e/0x250 [ 647.860475][T11362] ? __pfx_worker_thread+0x10/0x10 [ 647.860529][T11362] kthread+0x3c5/0x780 [ 647.860562][T11362] ? __pfx_kthread+0x10/0x10 [ 647.860596][T11362] ? rcu_is_watching+0x12/0xc0 [ 647.860620][T11362] ? __pfx_kthread+0x10/0x10 [ 647.860654][T11362] ret_from_fork+0x5d4/0x6f0 [ 647.860687][T11362] ? __pfx_kthread+0x10/0x10 [ 647.860720][T11362] ret_from_fork_asm+0x1a/0x30 [ 647.860754][T11362] [ 647.860761][T11362] [ 648.011082][T11362] The buggy address belongs to a vmalloc virtual mapping [ 648.018134][T11362] Memory state around the buggy address: [ 648.023796][T11362] ffffc90006492f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 648.031880][T11362] ffffc90006492f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 648.039969][T11362] >ffffc90006493000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 648.048063][T11362] ^ [ 648.052145][T11362] ffffc90006493080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 648.060224][T11362] ffffc90006493100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 648.068309][T11362] ================================================================== [ 648.143939][T11362] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 648.151281][T11362] CPU: 0 UID: 0 PID: 11362 Comm: kworker/u9:1 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 648.161722][T11362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 648.171811][T11362] Workqueue: hci0 hci_devcd_timeout [ 648.177064][T11362] Call Trace: [ 648.180360][T11362] [ 648.183305][T11362] dump_stack_lvl+0x3d/0x1f0 [ 648.187921][T11362] panic+0x71c/0x800 [ 648.191862][T11362] ? __pfx_panic+0x10/0x10 [ 648.196305][T11362] ? mark_held_locks+0x49/0x80 [ 648.201098][T11362] ? preempt_schedule_thunk+0x16/0x30 [ 648.206497][T11362] ? hci_devcd_dump+0x142/0x240 [ 648.211375][T11362] ? preempt_schedule_common+0x44/0xc0 [ 648.216864][T11362] ? check_panic_on_warn+0x1f/0xb0 [ 648.222014][T11362] ? hci_devcd_dump+0x142/0x240 [ 648.226893][T11362] check_panic_on_warn+0xab/0xb0 [ 648.231863][T11362] end_report+0x107/0x170 [ 648.236221][T11362] kasan_report+0xee/0x110 [ 648.240674][T11362] ? hci_devcd_dump+0x142/0x240 [ 648.245570][T11362] kasan_check_range+0x100/0x1b0 [ 648.250533][T11362] __asan_memcpy+0x23/0x60 [ 648.254977][T11362] hci_devcd_dump+0x142/0x240 [ 648.259685][T11362] hci_devcd_timeout+0xb5/0x2e0 [ 648.264572][T11362] ? rcu_is_watching+0x12/0xc0 [ 648.269360][T11362] process_one_work+0x9cc/0x1b70 [ 648.274332][T11362] ? __pfx_process_one_work+0x10/0x10 [ 648.279735][T11362] ? assign_work+0x1a0/0x250 [ 648.284353][T11362] worker_thread+0x6c8/0xf10 [ 648.288971][T11362] ? __kthread_parkme+0x19e/0x250 [ 648.294017][T11362] ? __pfx_worker_thread+0x10/0x10 [ 648.299157][T11362] kthread+0x3c5/0x780 [ 648.303251][T11362] ? __pfx_kthread+0x10/0x10 [ 648.307863][T11362] ? rcu_is_watching+0x12/0xc0 [ 648.312681][T11362] ? __pfx_kthread+0x10/0x10 [ 648.317301][T11362] ret_from_fork+0x5d4/0x6f0 [ 648.321916][T11362] ? __pfx_kthread+0x10/0x10 [ 648.326566][T11362] ret_from_fork_asm+0x1a/0x30 [ 648.331353][T11362] [ 648.334444][T11362] Kernel Offset: disabled [ 648.338786][T11362] Rebooting in 86400 seconds..