last executing test programs: 12.241231461s ago: executing program 3 (id=1138): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8fg\x1b\x04\xad>\x96\xe9IG\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\t\xf8p\xc6\x00\x00\x00\x00\xb9\xac\xde\x0e\x90\x18\xf1\x13I\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd\x14\x81\xbe\xab\xed\xd5MI\x830_\xc2\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xees\xf0\xc2\xad\xae\x99\xeb\xc5\xf0\"\x92\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14\x94o\x1b[\xa8]\x9b\x03\x95\xc3\xad\xad\x1d#oi|\x04\x93N\xfa\x17\xf3b\xf6', 0x4, 0x0) getcwd$auto(0x0, 0xffffffffffffffff) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x4040, 0x0) preadv2$auto(0x3, 0x0, 0x0, 0x6, 0x5, 0x5) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x5c, r2, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NETDEV_A_PAGE_POOL_ID={0xc, 0x1, 0x2}, @NETDEV_A_PAGE_POOL_ID={0xc, 0x1, 0x4}, @NETDEV_A_PAGE_POOL_ID={0xc, 0x1, 0x3}, @NETDEV_A_PAGE_POOL_ID={0x8, 0x1, 0x4}, @NETDEV_A_PAGE_POOL_ID={0xc, 0x1, 0x9}, @NETDEV_A_PAGE_POOL_ID={0xc, 0x1, 0x9}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0xd0) mmap$auto(0x0, 0x6, 0x2, 0x40eb4, r0, 0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_ADD_TX_TS(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB=' @\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bd7000fbdbdf25690000000a004e014039979607aa0000"], 0x20}, 0x1, 0x0, 0x0, 0x40001}, 0x20040004) ioctl$auto(0xffffffffffffffff, 0x8912, 0x38) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xfffffffffffffffe, 0x8000) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r6 = getpid() process_vm_readv$auto(r6, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) waitid$auto_P_PGID(0x2, r6, &(0x7f0000000340)={@siginfo_0_0={0x6, 0x7, 0x6, @_sigsys={&(0x7f0000000580)="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", 0x8, 0x6}}}, 0x7, &(0x7f00000003c0)={{0xa, 0x8000000000000000}, {0x5}, 0x7, 0xfce3, 0xfffffffffffffffc, 0x8, 0x80, 0x80000000, 0x7ff, 0x0, 0x5, 0x101, 0x50b, 0x5, 0x9, 0x2}) writev$auto(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x40}, 0x8) write$auto(r5, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) madvise$auto(0x0, 0x2003f0, 0x15) getpid() r7 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) sendmsg$auto_NL80211_CMD_GET_SCAN(0xffffffffffffffff, 0x0, 0x4000) sendmsg$auto_NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="3824f5b6", @ANYRES16=0x0, @ANYBLOB="00082cbd7000fcdbdf251500000005001a00fc0000000c0006002f92000000000000080001000010000005001a005a000000"], 0x38}, 0x1, 0x0, 0x0, 0xd0}, 0x20000400) read$auto(r7, 0x0, 0xb4d3) write$auto(0x3, 0x0, 0xffd8) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x1, 0x0) 12.085074309s ago: executing program 2 (id=1139): mmap$auto(0x0, 0x240009, 0xdf, 0x9b72, 0x7, 0x28000) madvise$auto(0x0, 0x8001, 0x19) lseek$auto(0x3, 0x7ffffffffffffffd, 0x2) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) mmap$auto(0x8, 0x8, 0xdf, 0x49b72, 0xffffffffffffffff, 0x28004) readv$auto(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x7}, 0x8) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/afs/rootcell\x00', 0x1cb842, 0x0) r1 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, 0x0, 0x4821c0, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2deb43, 0x0) faccessat2$auto(0xffffffffffffffff, 0x0, 0x2, 0xfffffffd) read$auto(r2, 0x0, 0x20) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_MPP(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYRES32=r1, @ANYRES16=r4, @ANYBLOB="01e162498e3b3cc16472390537ac0028bd700098cdf2fedbdf256b00000021000d01fd5736a95c80db53e7c4aadb2715ac2f8807a03d1727244eba33fc42fe000000"], 0x38}, 0x1, 0x0, 0x0, 0x804}, 0x4000890) r5 = openat$dir(0xffffffffffffff9c, 0x0, 0x2d2802, 0x48) faccessat$auto(r5, 0x0, 0x2) r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0xf1cf, 0xf, 0x8, 0x800000000004001d, r0, 0x5) socket(0x29, 0x2, 0x0) ioctl$auto(0x3, 0x89e2, 0x91) ioctl$auto(0x3, 0x89e1, 0x91) syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000280), 0xffffffffffffffff) r7 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$auto_USBDEVFS_CONTROL(r7, 0xc0185500, &(0x7f0000000240)={0x23, 0x1, 0x1, 0x10, 0x1, 0x7ff, &(0x7f00000001c0)}) 11.125267065s ago: executing program 2 (id=1142): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000e3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket(0x11, 0x3, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) sendmmsg$auto(r1, &(0x7f0000000080)={{&(0x7f00000002c0), 0x1, &(0x7f0000000300)={&(0x7f0000000780)="4c0365f7080000002894877337f9ecba", 0xe}, 0xc, 0x0, 0x5, 0x6}, 0x8}, 0x7, 0xc) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x401a00, 0x0) pivot_root$auto(0x0, 0x0) nanosleep$auto(0x0, 0x0) open(0x0, 0x7ffd, 0x12) kexec_load$auto(0x9, 0x0, 0x0, 0x1003e0000) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x7f, 0x82020009, 0x3, 0x19, 0xffffffffffffffff, 0x1002) setsockopt$auto_SO_CNX_ADVICE(r0, 0xc, 0x35, &(0x7f00000002c0)='+-\'\x00', 0xfff) madvise$auto(0x8001, 0x9, 0x138) write$auto(0xffffffffffffffff, &(0x7f0000000040)='7\x00\\\x80\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\x00\x0e\v9\xb5j\x00\x04\xc8\x1fa\x1c\x1a\x05 \xfdr/D\xbf\x98\x06\xe5\xf6\x8d\x1fX\xe5\xbc\xbc\"}$', 0x7fffffff) connect$auto(0x3, 0x0, 0x10) unshare$auto(0x40000080) r2 = socket(0x2b, 0x2, 0x1) getsockopt$auto(r2, 0xd33, 0x4, &(0x7f0000000040)='/dev/cec27\x00', 0x0) madvise$auto(0x0, 0x5, 0x7) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x180b01, 0x0) r3 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000002640), 0x20000, 0x0) ioctl$auto_USB_RAW_IOCTL_INIT(r3, 0x41015500, &(0x7f0000000140)={"a7a018b09bb196a05739a38a73473b93f5452886bc599ef976c54a71a5ce72a9af15390e93a8760df83859e16320e8d0b1161f13d12afae66b1d900a49586aa98d3504ca431aabab1964249251e57fa70517cc19b0e3974dc2a89e90c932b8859c767780d65e849700", "e600d778e82f8b8db7e27a036e39a8ac08de7e036d650e2184857e6b64f6a2c7fb08c6f5ce3828fb4e9498c076bef49c99c9cd91332e12b53664dc20fa879020fbd184c0d300c13be6047a70685ce029fb2385ae6e132c1c6adbcfbd873a3b925d397a08e8733e19ef5ec4f40b0b473c72efd18b8a9e9f3d12c5e44468922beb", 0x3}) ioctl$auto_USB_RAW_IOCTL_RUN(r3, 0x5501, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/keys\x00', 0x8af00, 0x0) 11.02537921s ago: executing program 0 (id=1143): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$auto_TCP_METRICS_CMD_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x4004055}, 0x0) 10.503761927s ago: executing program 0 (id=1145): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/afs/sysname\x00', 0xaa102, 0x0) read$auto(0x3, 0x0, 0x80) write$auto(0x3, 0x0, 0x5c8) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8fg\x1b\x04\xad>\x96\xe9IG\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\t\xf8p\xc6\x00\x00\x00\x00\xb9\xac\xde\x0e\x90\x18\xf1\x13I\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd\x14\x81\xbe\xab\xed\xd5MI\x830_\xc2\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xees\xf0\xc2\xad\xae\x99\xeb\xc5\xf0\"\x92\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14\x94o\x1b[\xa8]\x9b\x03\x95\xc3\xad\xad\x1d#oi|\x04\x93N\xfa\x17\xf3b\xf6', 0x4, 0x0) getcwd$auto(0x0, 0xffffffffffffffff) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x4040, 0x0) preadv2$auto(0x3, 0x0, 0x5, 0xffffffffffffffff, 0x7, 0x2e) mmap$auto(0x0, 0x6, 0x2, 0x40eb4, r1, 0x6) ioctl$auto(0xffffffffffffffff, 0x8912, 0x38) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xfffffffffffffffe, 0x8000) ustat$auto(0x801, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = getpid() process_vm_readv$auto(r3, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) waitid$auto_P_PGID(0x2, r3, &(0x7f0000000340)={@siginfo_0_0={0x6, 0x7, 0x6, @_sigpoll={0x200, r0}}}, 0x7, &(0x7f00000003c0)={{0x9, 0x8000000000000000}, {0x5}, 0x7, 0x2, 0xfffffffffffffffc, 0x8, 0x224, 0x80000000, 0x7ff, 0x0, 0x5, 0x101, 0x50b, 0x5, 0x9, 0x2}) writev$auto(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x40}, 0x8) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) madvise$auto(0x0, 0x2003f0, 0x15) getpid() r4 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) sendmsg$auto_NL80211_CMD_GET_SCAN(0xffffffffffffffff, 0x0, 0x4000) sendmsg$auto_NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x30, 0x0, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_MIN_BE={0x5, 0x11, 0xec}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x922e}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1000}]}, 0x30}, 0x1, 0x0, 0x0, 0xd0}, 0x20000400) read$auto(r4, 0x0, 0xb4d3) write$auto(0x3, 0x0, 0xffd8) 8.907523602s ago: executing program 3 (id=1147): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) io_uring_setup$auto(0x85, 0x0) r1 = openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000140), 0x382, 0x0) write$auto_rfkill_fops_core(r1, 0x0, 0x700) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, 0x0, 0x6, 0xffffffffffffffff, 0x4, 0x2e) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0xc0000, 0x0) socket(0x1e, 0x6, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000340)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccW\x1c\x94t\x98\xc6\xd7\x9dh\xdf\x91\xd9\x1ew\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5,\xcc\xfa`\xfa\x90\xf0C\xdc\xbebBW\x8a\x95\xf4\x14\xc7\x90V\xe7a\xfb*\xcc6\xba\x9ef\x19R\xff\xd2\xd8\x98\xa8\x17\xcb\x84\xe8\xfb\x00`\xc2\xce~U\xca\\\xc1\xb7\xf1\n\xb9\xbfk\x1e\xdb\xed\x81{\x1f\x18j\x16\rk\x0eO\xe3\xa78&Z\x9e\xbf\x84\xd6\x1f\xe8\x88\x1f\xbc\x1eT\xa6{9hb\xbc\x1a\\\xb3\x846&\x1a\xbb\x9c:e\x9c\x18\x11\xf0\x8eQ\xd8\x8a3^?\x13\x00\xcbx\xb2\x18e\x95$\x9d\x804', 0x100000a3d9) setsockopt$auto(0xffffffffffffffff, 0x9, 0x69ce, &(0x7f0000000040)='(%}[\x00', 0x3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400108, 0xdf, 0x9b72, 0x2, 0x8000) r3 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/security/tomoyo/profile\x00', 0x48802, 0x0) read$auto(r3, 0x0, 0xb4d3) write$auto(0x3, 0x0, 0x70) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfffff000) adjtimex$auto(0x0) 8.225019863s ago: executing program 0 (id=1149): r0 = socket(0x1b, 0x3, 0x76) madvise$auto(0x0, 0x2000040080000004, 0xe) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r1, &(0x7f0000000040)='//\xf2\x00', 0x80000000) getsockopt$auto_SO_RCVPRIORITY(r0, 0x2, 0x52, 0x0, &(0x7f0000000240)=0x7) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r3, &(0x7f0000005380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x20000000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, r0, 0x10008000) io_uring_setup$auto(0x85, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2, 0x1, 0x100) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @empty}, 0x51) mmap$auto(0x0, 0x40000a, 0xdf, 0x11, 0xffffffffffffffff, 0xfb) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(0x3, 0x0, 0x7fffffff) write$auto(0x1, 0x0, 0x80000000) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x680, 0x0) mmap$auto(0xb6d, 0x1, 0xfffffffffffffffe, 0x13, 0xfffffffffffffffa, 0x41) sysfs$auto(0x2, 0xe, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) getcwd$auto(0x0, 0x8000000000000000) r4 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f00000001c0), 0x80100, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r4, 0x40146f2c, 0x0) 8.17617994s ago: executing program 2 (id=1150): r0 = set_tid_address$auto(0x0) ioprio_get$auto_IOPRIO_WHO_PROCESS(0x1, r0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'virt_wifi0\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="310000000000000000000000000000000000cbee2f70a9d8521056a8a17f88640c7c3bc2f69762e72453f0c164242ad36c442c129cb3d99b94e92dca2b3a0fe1ef28d6297c9aaf23c06d9ca650ca2315a3719f8019443e48a2d6b5cfa242ac267cc013db8753989d7b795529df8f03f1fb0df69d8df8d04be007993c662c0d5b", @ANYRES32=r5, @ANYBLOB="08000c010c8d0000"], 0x24}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) sendmsg$auto_NL80211_CMD_PROBE_MESH_LINK(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000eb", @ANYRES16=r3, @ANYBLOB="10002cbd7000fcdbdf258800000006009800010000000800690008000000"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x40800) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) open(0x0, 0x7ffd, 0x12) kexec_load$auto(0x9, 0x0, 0x0, 0x1003e0000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2710}, 0x10) unshare$auto(0x40000080) io_uring_setup$auto(0x4c2, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x180b01, 0x0) mmap$auto(0x0, 0x2020009, 0x1, 0xeb1, 0x8, 0x4) io_setup$auto(0xffff7fff, &(0x7f0000000240)=0x7) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(r1, 0x8, 0x0) 5.233033575s ago: executing program 0 (id=1156): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_TUNNEL_INFO_GET(r0, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="050725bd61001cfebbc92109"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x880) ioctl$auto_XFS_IOC_ERROR_CLEARALL(0xffffffffffffffff, 0x40085875, &(0x7f0000000000)={r0, 0x4}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x0, 0x8002, 0x2) mmap$auto(0x0, 0x9, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000000), 0x8080, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x66ab80, 0x0) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0xc6fc1, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) fremovexattr$auto(0xffffffffffffffff, &(0x7f0000000000)='&\x00') write$auto(r2, 0x0, 0x80000000) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, 0x0, 0x200, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cec23\x00', 0x0, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r4, &(0x7f0000000180)='=\xc6\b\x1f\xf3\xd6*\xd1Vc\xff\x8be\xba\x1dVh=;\xc7\xa0\x16,8Jo\x84\x81r\v\xd4\x06\x009\aG\xe7\'\x12\x03\xb0cu\xb0\xa0\xacbL\xc9\xce\xf3\t', 0x100000a3d9) close_range$auto(r0, r3, 0xa) close_range$auto(0x2, 0x8000, 0x0) socket(0xa, 0x2, 0x88) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000003fc0)='/sys/kernel/debug/tracing/trace_pipe\x00', 0x20a02, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0xfff) r5 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000400), 0x101000, 0x0) ioctl$auto_UI_SET_EVBIT(r5, 0x40045564, &(0x7f0000000440)=0x1) unshare$auto(0x40000080) 5.074534683s ago: executing program 3 (id=1158): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8fg\x1b\x04\xad>\x96\xe9IG\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\t\xf8p\xc6\x00\x00\x00\x00\xb9\xac\xde\x0e\x90\x18\xf1\x13I\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd\x14\x81\xbe\xab\xed\xd5MI\x830_\xc2\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xees\xf0\xc2\xad\xae\x99\xeb\xc5\xf0\"\x92\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14\x94o\x1b[\xa8]\x9b\x03\x95\xc3\xad\xad\x1d#oi|\x04\x93N\xfa\x17\xf3b\xf6', 0x4, 0x0) getcwd$auto(0x0, 0xffffffffffffffff) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x4040, 0x0) preadv2$auto(0x3, 0x0, 0x5, 0xffffffffffffffff, 0x7, 0x2e) mmap$auto(0x0, 0x6, 0x2, 0x40eb4, r0, 0x6) ioctl$auto(0xffffffffffffffff, 0x8912, 0x38) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000000)) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x8}, 0x8) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x6) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x7, 0x8) ioctl$auto_TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$auto(0x4, 0x0, 0x81, 0x0, 0x10000) sendmsg$auto_TASKSTATS_CMD_GET(0xffffffffffffffff, 0x0, 0x9010) mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) read$auto(0xffffffffffffffff, 0x0, 0x1f40) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) futex_waitv$auto(0x0, 0x5, 0x0, 0x0, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000500)='/dev/ptyue\x00', 0x1800, 0x0) 4.638730213s ago: executing program 2 (id=1159): set_mempolicy$auto(0x5, &(0x7f0000000000)=0x9, 0x21) set_mempolicy$auto(0x9, &(0x7f0000000040)=0x3, 0x3) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000000), 0x109440, 0x0) mmap$auto(0x0, 0xa020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x15, 0x5, 0x0) sendmsg$auto(r0, 0x0, 0x10) madvise$auto(0x0, 0x200007, 0x19) remap_file_pages$auto(0x3, 0x1000, 0x0, 0x3, 0x4) futex$auto(0x0, 0x6, 0x47, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r1, 0xffffffffffdffe00, &(0x7f0000000140)=';') openat$auto_rfkill_fops_core(0xffffffffffffff9c, 0x0, 0x40, 0x0) setsockopt$auto(0x3, 0x114, 0xa, 0x0, 0x4) listmount$auto(&(0x7f0000000100)={0x1f, @raw, 0x80000002, 0xfffffffffffffff4, 0x4}, 0x0, 0xf4240, 0x1) 4.3953913s ago: executing program 1 (id=1160): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) fallocate$auto(0xffffffffffffffff, 0xdd, 0x7fff, 0x81) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x41, 0x0, 0x1, 0x0) select$auto(0xd, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x6, 0x62, 0x80000000, 0x9, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) getpid() mlockall$auto(0x5) rt_sigprocmask$auto(0x6, &(0x7f0000000080)={0x6}, 0xffffffffffffffff, 0x8) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) unshare$auto(0x4) socketpair$auto(0x1e, 0x5, 0x1e9, 0x0) socket(0x11, 0xa, 0x300) sendmmsg$auto(0x4, 0x0, 0x400, 0x7) close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x0, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/all/addr_gen_mode\x00', 0xa0202, 0x0) r3 = epoll_create$auto(0x8800001) epoll_ctl$auto(r3, 0x1, r1, 0x0) ioctl$auto_PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) ioctl$auto_PPPIOCSPASS(r0, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000000)={0x28, 0xf3, 0xb0, @raw=0xfffff038}}) write$auto(0x3, 0x0, 0xfdef) 3.585000645s ago: executing program 3 (id=1161): close_range$auto(0x2, 0x8, 0x0) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f00000001c0)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x5, 0x0) umount2$auto(&(0x7f0000000040)='.\x00', 0x5) socket(0xa, 0x3, 0x100) socket(0x2a, 0x2, 0x0) r0 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/block/loop2/hctx0/cpu0/default_rq_list\x00', 0x29000, 0x0) pread64$auto(r0, 0x0, 0x1000f42d, 0x100) pipe$auto(&(0x7f0000000040)) r1 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0x10, 0x2, 0x4) statmount$auto(&(0x7f0000000000)={0x8, @raw, 0x8000001c, 0x8, 0xad}, 0x0, 0x7ffffffff000, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = socket(0x10, 0x2, 0xc) sendmsg$auto_TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000003740)={&(0x7f0000000000)=ANY=[@ANYBLOB="b1000000", @ANYRES16, @ANYBLOB="01002dbd7000fddbdf25030000000c0001"], 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x40080) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r3, @ANYRES8=r1], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x4000050) write$auto(r2, &(0x7f0000000000)='<\xcd', 0x8) close_range$auto(0x2, 0x8, 0x0) (async) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f00000001c0)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x5, 0x0) (async) umount2$auto(&(0x7f0000000040)='.\x00', 0x5) (async) socket(0xa, 0x3, 0x100) (async) socket(0x2a, 0x2, 0x0) (async) openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/block/loop2/hctx0/cpu0/default_rq_list\x00', 0x29000, 0x0) (async) pread64$auto(r0, 0x0, 0x1000f42d, 0x100) (async) pipe$auto(&(0x7f0000000040)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket(0x10, 0x2, 0x4) (async) statmount$auto(&(0x7f0000000000)={0x8, @raw, 0x8000001c, 0x8, 0xad}, 0x0, 0x7ffffffff000, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket(0x10, 0x2, 0xc) (async) sendmsg$auto_TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000003740)={&(0x7f0000000000)=ANY=[@ANYBLOB="b1000000", @ANYRES16, @ANYBLOB="01002dbd7000fddbdf25030000000c0001"], 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x40080) (async) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r3, @ANYRES8=r1], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x4000050) (async) write$auto(r2, &(0x7f0000000000)='<\xcd', 0x8) (async) 3.329256432s ago: executing program 1 (id=1162): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$auto_TCP_METRICS_CMD_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x4004055}, 0x0) 3.253557634s ago: executing program 3 (id=1163): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_TUNNEL_INFO_GET(r0, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="050725bd61001cfebbc92109"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x880) ioctl$auto_XFS_IOC_ERROR_CLEARALL(0xffffffffffffffff, 0x40085875, &(0x7f0000000000)={r0, 0x4}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x0, 0x8002, 0x2) mmap$auto(0x0, 0x9, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, 0x0, 0x8080, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x66ab80, 0x0) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ram6\x00', 0xc6fc1, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) fremovexattr$auto(0xffffffffffffffff, &(0x7f0000000000)='&\x00') write$auto(r2, 0x0, 0x80000000) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, 0x0, 0x200, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cec23\x00', 0x0, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r4, &(0x7f0000000180)='=\xc6\b\x1f\xf3\xd6*\xd1Vc\xff\x8be\xba\x1dVh=;\xc7\xa0\x16,8Jo\x84\x81r\v\xd4\x06\x009\aG\xe7\'\x12\x03\xb0cu\xb0\xa0\xacbL\xc9\xce\xf3\t', 0x100000a3d9) close_range$auto(r0, r3, 0xa) close_range$auto(0x2, 0x8000, 0x0) socket(0xa, 0x2, 0x88) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000003fc0)='/sys/kernel/debug/tracing/trace_pipe\x00', 0x20a02, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0xfff) r5 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000400), 0x101000, 0x0) ioctl$auto_UI_SET_EVBIT(r5, 0x40045564, &(0x7f0000000440)=0x1) unshare$auto(0x40000080) 3.116684647s ago: executing program 2 (id=1164): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) unshare$auto(0x40000080) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x44c180, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x163340, 0x16e) socket(0x2, 0x80802, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x4, @multicast2}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) io_uring_setup$auto(0x9e6, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) r1 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000180), 0xffffffffffffffff) r2 = signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) read$auto_l2cap_debugfs_fops_(r2, 0x0, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty63\x00', 0xa0102, 0x0) mmap$auto_fb_fops_fb_chrdev(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x8, 0x40010, r2, 0x3) fcntl$auto_F_OFD_GETLK(r0, 0x24, 0x5) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_TIPC_NL_MON_PEER_GET(r3, &(0x7f0000006140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="11071cb57000fe9bdf25130000000c00098008000200", @ANYRES32=0x0, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x4405}, 0x4c848) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) r4 = socket(0x18, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x40047452, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x5, 0x15) madvise$auto(0x0, 0x200007, 0x19) timer_create$auto(0x9, 0x0, &(0x7f0000000040)=0x6) 3.11544717s ago: executing program 1 (id=1172): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$auto_TCP_METRICS_CMD_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)={0x28, r1, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@TCP_METRICS_ATTR_SADDR_IPV6={0x14, 0xc, @private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004055}, 0x0) 2.990002939s ago: executing program 1 (id=1165): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8fg\x1b\x04\xad>\x96\xe9IG\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\t\xf8p\xc6\x00\x00\x00\x00\xb9\xac\xde\x0e\x90\x18\xf1\x13I\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd\x14\x81\xbe\xab\xed\xd5MI\x830_\xc2\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xees\xf0\xc2\xad\xae\x99\xeb\xc5\xf0\"\x92\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14\x94o\x1b[\xa8]\x9b\x03\x95\xc3\xad\xad\x1d#oi|\x04\x93N\xfa\x17\xf3b\xf6', 0x4, 0x0) getcwd$auto(0x0, 0xffffffffffffffff) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x4040, 0x0) preadv2$auto(0x3, 0x0, 0x0, 0x6, 0x5, 0x5) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x5c, r2, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NETDEV_A_PAGE_POOL_ID={0xc, 0x1, 0x2}, @NETDEV_A_PAGE_POOL_ID={0xc, 0x1, 0x4}, @NETDEV_A_PAGE_POOL_ID={0xc, 0x1, 0x3}, @NETDEV_A_PAGE_POOL_ID={0x8, 0x1, 0x4}, @NETDEV_A_PAGE_POOL_ID={0xc, 0x1, 0x9}, @NETDEV_A_PAGE_POOL_ID={0xc, 0x1, 0x9}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0xd0) mmap$auto(0x0, 0x6, 0x2, 0x40eb4, r0, 0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_ADD_TX_TS(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB=' @\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bd7000fbdbdf25690000000a004e014039979607aa0000"], 0x20}, 0x1, 0x0, 0x0, 0x40001}, 0x20040004) ioctl$auto(0xffffffffffffffff, 0x8912, 0x38) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xfffffffffffffffe, 0x8000) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r6 = getpid() process_vm_readv$auto(r6, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) waitid$auto_P_PGID(0x2, r6, &(0x7f0000000340)={@siginfo_0_0={0x6, 0x7, 0x6, @_sigsys={&(0x7f0000000580)="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", 0x8, 0x6}}}, 0x7, &(0x7f00000003c0)={{0xa, 0x8000000000000000}, {0x5}, 0x7, 0xfce3, 0xfffffffffffffffc, 0x8, 0x80, 0x80000000, 0x7ff, 0x0, 0x5, 0x101, 0x50b, 0x5, 0x9, 0x2}) writev$auto(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x40}, 0x8) write$auto(r5, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) madvise$auto(0x0, 0x2003f0, 0x15) getpid() r7 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) sendmsg$auto_NL80211_CMD_GET_SCAN(0xffffffffffffffff, 0x0, 0x4000) sendmsg$auto_NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="3824f5b6", @ANYRES16=0x0, @ANYBLOB="00082cbd7000fcdbdf251500000005001a00fc0000000c0006002f92000000000000080001000010000005001a005a000000"], 0x38}, 0x1, 0x0, 0x0, 0xd0}, 0x20000400) read$auto(r7, 0x0, 0xb4d3) write$auto(0x3, 0x0, 0xffd8) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x1, 0x0) 2.388008036s ago: executing program 0 (id=1166): mmap$auto(0x0, 0x2020006, 0x1000000000000007, 0xeb1, 0x0, 0x1008000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x2, 0x4, 0x8201, 0x8, 0x0, 0xc, 0xe3, 0x9, 0x3}, 0x6f4) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x802, 0x0) ioctl$auto_USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000240)={0x23, 0x3, 0x18, 0x10, 0x808, 0x7fb, &(0x7f0000000340)="2e87ae255faea9bca16821e73660a43c98f81f056a20818dde63d3c3436ada5521c127417b70c848d2f0b41c9954b52c56fd29b722f89cb8e96cfabaead96bc484c33f7fb2b8e8aeaeeb962fd2017e70de4a4892c560daf3d83461a5c527c6ca6471a2d3bb"}) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/net/rpc/nfs4.nametoid/channel\x00', 0x8f3b7a51b8162d21, 0x0) write$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000040), 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x20540, 0x0) ioctl$auto(0xffffffffffffffff, 0x3, r1) setsockopt$auto(r2, 0x80, 0xfffffffe, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x3ff) shmdt$auto(&(0x7f00000000c0)='/dev/snd/midiC2D0\x00') socket(0xa, 0x3, 0x2f) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x407, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0x10001, 0x3, 0x62, 0x80000001, 0x7, 0x6d3b, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r3, 0x0, 0x100000a3d9) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_setup$auto(0x25a8c, 0x0) mmap$auto(0x0, 0x4, 0x4000000000db, 0x40eb1, 0x401, 0x300000000000) close_range$auto(0x0, 0xfffffffffffff000, 0x0) bpf$auto(0x4, 0x0, 0xe) 1.967998636s ago: executing program 1 (id=1167): r0 = set_tid_address$auto(0x0) ioprio_get$auto_IOPRIO_WHO_PROCESS(0x1, r0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'virt_wifi0\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="310000000000000000000000000000000000cbee2f70a9d8521056a8a17f88640c7c3bc2f69762e72453f0c164242ad36c442c129cb3d99b94e92dca2b3a0fe1ef28d6297c9aaf23c06d9ca650ca2315a3719f8019443e48a2d6b5cfa242ac267cc013db8753989d7b795529df8f03f1fb0df69d8df8d04be007993c662c0d5b", @ANYRES32=r5, @ANYBLOB="08000c010c8d0000"], 0x24}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) sendmsg$auto_NL80211_CMD_PROBE_MESH_LINK(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000eb", @ANYRES16=r3, @ANYBLOB="10002cbd7000fcdbdf258800000006009800010000000800690008000000"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x40800) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) open(0x0, 0x7ffd, 0x12) kexec_load$auto(0x9, 0x0, 0x0, 0x1003e0000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2710}, 0x10) unshare$auto(0x40000080) io_uring_setup$auto(0x4c2, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x180b01, 0x0) mmap$auto(0x0, 0x2020009, 0x1, 0xeb1, 0x8, 0x4) io_setup$auto(0xffff7fff, &(0x7f0000000240)=0x7) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(r1, 0x8, 0x0) 901.303705ms ago: executing program 0 (id=1168): openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003f0, 0x15) mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/renderD128\x00', 0x20300, 0x0) r2 = socket(0xa, 0x5, 0x0) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x00\rs\x1cJ\x99\x00:c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x1) close_range$auto(0x0, 0xfffffffffffff000, 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'ip6_vti0\x00'}) bpf$auto(0x40000000, &(0x7f0000000100)=@iter_create={r1, 0x81}, 0x96) bpf$auto(0x18, &(0x7f0000000040)=@raw_tracepoint={0x0, 0xffffffffffffffff, 0x0, 0x800}, 0x92) madvise$auto(0xcb, 0x3, 0xfffffff7) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) getsockopt$auto(r2, 0x84, 0x1d, 0x0, 0x0) r3 = openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/dri/vgem/clients\x00', 0x60000, 0x0) read$auto_drm_debugfs_entry_fops_drm_debugfs(r3, &(0x7f0000000100)=""/153, 0x99) getpid() r4 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) read$auto(r4, 0x0, 0xb4d3) write$auto(0x3, 0x0, 0xffd8) semget$auto(0x0, 0x13c, 0x1ff) 756.011043ms ago: executing program 2 (id=1169): unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x4400000000df, 0xc157, 0x101000000000000, 0x7) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x80000000000001, 0x20000000000) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r1 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) write$auto(0xca, &(0x7f0000000040)='\x04>\x00\f\x00'/14, 0x7a) close_range$auto(r1, r1, 0x4) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) ioctl$auto_SNDCTL_DSP_POST(r0, 0x5008, &(0x7f00000000c0)="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") sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) socket(0x2, 0x1, 0x0) socket(0x2, 0x5, 0x0) ioctl$auto(0xffffffffffffffff, 0xc0045401, 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, 0x0, 0x400, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) sethostname$auto(0x0, 0x7) ioctl$auto(0x3, 0x541b, 0x38) close_range$auto(0x2, 0x8, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/security/tomoyo/audit\x00', 0x200, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D3\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/rose11/tx_queue_len\x00', 0x0, 0x0) read$auto(r3, 0x0, 0x20) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/fs/cifs/LookupCacheEnabled\x00', 0x48041, 0x0) mmap$auto(0x0, 0x1000000004, 0x4000000000df, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) 59.836224ms ago: executing program 3 (id=1170): unshare$auto(0x40000080) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x3, 0x1000df, 0x9b72, 0x7, 0x28000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$auto(r0, 0x10e, 0xb, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xa001, 0x0) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0x2, 0x8000) mlockall$auto(0x7) mmap$auto(0x0, 0x20009, 0xb, 0xeb1, 0x7, 0x8000) r1 = gettid() rt_sigsuspend$auto(&(0x7f0000000000)={0x2}, 0x8) tkill$auto(r1, 0x7) 0s ago: executing program 1 (id=1171): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NET_SHAPER_CMD_GROUP(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2004c804}, 0x14) r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r1 = prctl$auto(0x115, 0x1, 0x4, 0x5, 0x7) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/hugepages/hugepages-2048kB/nr_overcommit_hugepages\x00', 0x1c9282, 0x0) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) write$auto(0x3, 0x0, 0xfffffdef) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r2 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/maps\x00', 0x40302, 0x0) ioctl$auto_PROCMAP_QUERY(r2, 0xc0686611, &(0x7f0000000080)={0x101, 0x5, 0x7fff, 0x6, 0x80020000009, 0x1, 0x800, 0x101, 0x5, 0x7f93, 0x6, 0x7ffffffd, 0x3, 0x7, 0x9}) madvise$auto(0x0, 0x2003f0, 0x15) madvise$auto(0x0, 0x200007, 0x19) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000280), r0) sendmsg$auto_NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000580)={0x118, r3, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC_HINT={0xfa, 0xc8, "3d2a05ad66608f0df7e094317602cb6ec4ca80c9b250566939e9c27e52776472427ceb20a0bb428f13230b62a1f8e29e33f207e495551476854400d67f6312b679d2098422790c39625207f43cc05049d03278e419eeb11c976dc53a89482b7b83a3c7f020f5825bff7155d4a3fddefeac8c0fa70a0e6e60807c9ad1e39d4d92c639f26302dc002eedf034b2ff405a3073aa7806ad5f5976ca88c7c817ed27e58eae586f5f5dbcfb9cf48651d638994a747fb40202bb6260bddf4c5755a83a8be97b999dce503348279c073449095949cdc70f702e2077e33d3b6e8e549a2789876fd4007752d964d8722c3786ce5cd7b4f153d74df0"}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x800}]}, 0x118}, 0x1, 0x0, 0x0, 0x24048015}, 0x80) timerfd_create$auto(0x9, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000040)=""/49, 0x31) write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) adjtimex$auto(&(0x7f0000000180)={0x9, 0x0, 0xffffffffffffffff, 0x40, 0x4, 0x0, 0x6, 0x0, 0xe, 0x2, 0x9, {0x7, 0x1}, 0xfffffffffffffff7, 0x8e08, 0x100000001, 0xb, 0x0, 0x2, 0x9, 0x0, 0x3a, 0x0, 0x3}) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, 0x0, 0x28300, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) close_range$auto(0x0, 0x5, 0x0) pipe$auto(0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) writev$auto(r5, &(0x7f0000000080)={&(0x7f0000000040), 0x1000}, 0x3) kernel console output (not intermixed with test programs): x14e/0x670 [ 277.634846][ T8257] hub_activate+0x6e5/0x1d60 [ 277.634902][ T8257] ? __pfx_hub_activate+0x10/0x10 [ 277.634944][ T8257] ? usb_generic_driver_resume+0x70/0xa0 [ 277.635001][ T8257] hub_resume+0xa8/0x3f0 [ 277.635040][ T8257] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 277.635077][ T8257] ? __pfx_hub_resume+0x10/0x10 [ 277.635122][ T8257] ? __pfx_hcd_bus_resume+0x10/0x10 [ 277.635169][ T8257] usb_resume_interface.constprop.0.isra.0+0x2c5/0x3e0 [ 277.635243][ T8257] usb_resume_both+0x273/0x800 [ 277.635301][ T8257] ? __pfx_usb_resume_both+0x10/0x10 [ 277.635357][ T8257] ? __pfx_usb_runtime_resume+0x10/0x10 [ 277.635396][ T8257] ? __pfx_usb_runtime_resume+0x10/0x10 [ 277.635431][ T8257] __rpm_callback+0xc5/0x610 [ 277.635479][ T8257] ? __pfx_usb_runtime_resume+0x10/0x10 [ 277.635515][ T8257] rpm_callback+0x1b7/0x200 [ 277.635557][ T8257] ? __pfx_usb_runtime_resume+0x10/0x10 [ 277.635592][ T8257] rpm_resume+0xd0a/0x1310 [ 277.635646][ T8257] ? __pfx_rpm_resume+0x10/0x10 [ 277.635688][ T8257] ? do_raw_spin_lock+0x12c/0x2b0 [ 277.635740][ T8257] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 277.635807][ T8257] __pm_runtime_resume+0xb6/0x170 [ 277.635857][ T8257] usb_autoresume_device+0x23/0xe0 [ 277.635892][ T8257] usbdev_open+0x228/0x8b0 [ 277.635927][ T8257] ? kobject_get_unless_zero+0x156/0x1e0 [ 277.636058][ T8257] ? __pfx_usbdev_open+0x10/0x10 [ 277.636100][ T8257] ? chrdev_open+0x10b/0x6a0 [ 277.636150][ T8257] ? __pfx_usbdev_open+0x10/0x10 [ 277.636184][ T8257] chrdev_open+0x234/0x6a0 [ 277.636272][ T8257] ? __pfx_apparmor_file_open+0x10/0x10 [ 277.636308][ T8257] ? __pfx_chrdev_open+0x10/0x10 [ 277.636356][ T8257] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 277.636406][ T8257] do_dentry_open+0x744/0x1c10 [ 277.636448][ T8257] ? __pfx_chrdev_open+0x10/0x10 [ 277.636503][ T8257] vfs_open+0x82/0x3f0 [ 277.636560][ T8257] path_openat+0x1de4/0x2cb0 [ 277.636631][ T8257] ? __pfx_path_openat+0x10/0x10 [ 277.636673][ T8257] ? __lock_acquire+0xb8a/0x1c90 [ 277.636725][ T8257] do_filp_open+0x20b/0x470 [ 277.636766][ T8257] ? __pfx_do_filp_open+0x10/0x10 [ 277.636837][ T8257] ? alloc_fd+0x471/0x7d0 [ 277.636885][ T8257] do_sys_openat2+0x11b/0x1d0 [ 277.636935][ T8257] ? __pfx_do_sys_openat2+0x10/0x10 [ 277.636998][ T8257] ? __pfx___might_resched+0x10/0x10 [ 277.637042][ T8257] __x64_sys_openat+0x174/0x210 [ 277.637096][ T8257] ? __pfx___x64_sys_openat+0x10/0x10 [ 277.637177][ T8257] do_syscall_64+0xcd/0x490 [ 277.637223][ T8257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.637261][ T8257] RIP: 0033:0x7f0eb978eb69 [ 277.637292][ T8257] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 277.637327][ T8257] RSP: 002b:00007f0eb75d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 277.637362][ T8257] RAX: ffffffffffffffda RBX: 00007f0eb99b6080 RCX: 00007f0eb978eb69 [ 277.637386][ T8257] RDX: 0000000000000802 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 277.637408][ T8257] RBP: 00007f0eb9811df1 R08: 0000000000000000 R09: 0000000000000000 [ 277.637430][ T8257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 277.637451][ T8257] R13: 0000000000000000 R14: 00007f0eb99b6080 R15: 00007ffe5319dee8 [ 277.637497][ T8257] [ 277.638568][ T8257] hub 37-0:1.0: hub_ext_port_status failed (err = -12) [ 278.087874][ T8265] vhci_hcd: invalid port number 16 [ 278.122090][ T8265] vhci_hcd: invalid port number 16 [ 278.336921][ T8270] warning: `syz.0.515' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 280.223379][ T8294] netlink: 8 bytes leftover after parsing attributes in process `syz.3.519'. [ 280.334150][ T8294] netlink: 8 bytes leftover after parsing attributes in process `syz.3.519'. [ 280.497731][ T8294] kAFS: No cell specified [ 282.661922][ T8317] vhci_hcd: invalid port number 16 [ 282.667435][ T8317] vhci_hcd: invalid port number 16 [ 282.808526][ T8320] FAULT_INJECTION: forcing a failure. [ 282.808526][ T8320] name failslab, interval 1, probability 0, space 0, times 0 [ 282.808607][ T8320] CPU: 1 UID: 0 PID: 8320 Comm: syz.3.525 Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(full) [ 282.808638][ T8320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 282.808652][ T8320] Call Trace: [ 282.808660][ T8320] [ 282.808669][ T8320] dump_stack_lvl+0x16c/0x1f0 [ 282.808695][ T8320] should_fail_ex+0x512/0x640 [ 282.808731][ T8320] ? fs_reclaim_acquire+0xae/0x150 [ 282.808773][ T8320] should_failslab+0xc2/0x120 [ 282.808806][ T8320] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 282.808843][ T8320] ? security_inode_alloc+0x3b/0x2b0 [ 282.808884][ T8320] security_inode_alloc+0x3b/0x2b0 [ 282.808920][ T8320] inode_init_always_gfp+0xce4/0x1030 [ 282.808950][ T8320] alloc_inode+0x86/0x240 [ 282.808982][ T8320] new_inode+0x22/0x1c0 [ 282.809018][ T8320] __debugfs_create_file+0x11c/0x6b0 [ 282.809058][ T8320] debugfs_create_file_full+0x41/0x60 [ 282.809098][ T8320] ref_tracker_dir_debugfs+0x19d/0x290 [ 282.809136][ T8320] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 282.809201][ T8320] ? lockdep_init_map_type+0x5c/0x280 [ 282.809239][ T8320] preinit_net+0x47f/0x8f0 [ 282.809263][ T8320] copy_net_ns+0x1da/0x5f0 [ 282.809293][ T8320] create_new_namespaces+0x3ea/0xa90 [ 282.809327][ T8320] copy_namespaces+0x468/0x560 [ 282.809353][ T8320] copy_process+0x2822/0x7690 [ 282.809388][ T8320] ? preempt_schedule_thunk+0x16/0x30 [ 282.809433][ T8320] ? __pfx_copy_process+0x10/0x10 [ 282.809484][ T8320] ? futex_private_hash_put+0x176/0x300 [ 282.809521][ T8320] ? futex_private_hash_put+0x18a/0x300 [ 282.809563][ T8320] kernel_clone+0xfc/0x930 [ 282.809602][ T8320] ? __pfx_futex_wake+0x10/0x10 [ 282.809645][ T8320] ? __pfx_kernel_clone+0x10/0x10 [ 282.809682][ T8320] ? __pfx_vfs_writev+0x10/0x10 [ 282.809723][ T8320] __do_sys_clone+0xce/0x120 [ 282.809753][ T8320] ? __pfx___do_sys_clone+0x10/0x10 [ 282.809797][ T8320] ? xfd_validate_state+0x61/0x180 [ 282.809838][ T8320] ? __pfx_do_writev+0x10/0x10 [ 282.809870][ T8320] do_syscall_64+0xcd/0x490 [ 282.809896][ T8320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.809921][ T8320] RIP: 0033:0x7f82cab8eb69 [ 282.809940][ T8320] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 282.809964][ T8320] RSP: 002b:00007f82cb965fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 282.809985][ T8320] RAX: ffffffffffffffda RBX: 00007f82cadb5fa0 RCX: 00007f82cab8eb69 [ 282.810001][ T8320] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000042ae1411 [ 282.810015][ T8320] RBP: 00007f82cac11df1 R08: 0000000000000000 R09: 0000000000000000 [ 282.810029][ T8320] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 282.810043][ T8320] R13: 0000000000000000 R14: 00007f82cadb5fa0 R15: 00007fffe7675518 [ 282.810073][ T8320] [ 282.810449][ T8320] debugfs: out of free dentries, can not create file 'net_notrefcnt@ffff8880750581e8' [ 283.351949][ T8327] FAULT_INJECTION: forcing a failure. [ 283.351949][ T8327] name failslab, interval 1, probability 0, space 0, times 0 [ 283.352004][ T8327] CPU: 1 UID: 0 PID: 8327 Comm: syz.2.526 Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(full) [ 283.352049][ T8327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 283.352070][ T8327] Call Trace: [ 283.352080][ T8327] [ 283.352092][ T8327] dump_stack_lvl+0x16c/0x1f0 [ 283.352133][ T8327] should_fail_ex+0x512/0x640 [ 283.352186][ T8327] ? fs_reclaim_acquire+0xae/0x150 [ 283.352247][ T8327] ? usb_alloc_urb+0x66/0xa0 [ 283.352281][ T8327] should_failslab+0xc2/0x120 [ 283.352366][ T8327] __kmalloc_noprof+0xd2/0x510 [ 283.352421][ T8327] usb_alloc_urb+0x66/0xa0 [ 283.352460][ T8327] usb_control_msg+0x1d3/0x4a0 [ 283.352506][ T8327] ? __pfx_usb_control_msg+0x10/0x10 [ 283.352561][ T8327] hub_ext_port_status+0x14e/0x670 [ 283.352613][ T8327] hub_activate+0x6e5/0x1d60 [ 283.352815][ T8327] ? __pfx_hub_activate+0x10/0x10 [ 283.352849][ T8327] ? usb_generic_driver_resume+0x70/0xa0 [ 283.352893][ T8327] hub_resume+0xa8/0x3f0 [ 283.352925][ T8327] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 283.352951][ T8327] ? __pfx_hub_resume+0x10/0x10 [ 283.352982][ T8327] ? __pfx_hcd_bus_resume+0x10/0x10 [ 283.353015][ T8327] usb_resume_interface.constprop.0.isra.0+0x2c5/0x3e0 [ 283.353062][ T8327] usb_resume_both+0x273/0x800 [ 283.353103][ T8327] ? __pfx_usb_resume_both+0x10/0x10 [ 283.353144][ T8327] ? __pfx_usb_runtime_resume+0x10/0x10 [ 283.353171][ T8327] ? __pfx_usb_runtime_resume+0x10/0x10 [ 283.353198][ T8327] __rpm_callback+0xc5/0x610 [ 283.353233][ T8327] ? __pfx_usb_runtime_resume+0x10/0x10 [ 283.353259][ T8327] rpm_callback+0x1b7/0x200 [ 283.353291][ T8327] ? __pfx_usb_runtime_resume+0x10/0x10 [ 283.353331][ T8327] rpm_resume+0xd0a/0x1310 [ 283.353373][ T8327] ? __pfx_rpm_resume+0x10/0x10 [ 283.353404][ T8327] ? do_raw_spin_lock+0x12c/0x2b0 [ 283.353446][ T8327] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 283.353497][ T8327] __pm_runtime_resume+0xb6/0x170 [ 283.353533][ T8327] usb_autoresume_device+0x23/0xe0 [ 283.353561][ T8327] usbdev_open+0x228/0x8b0 [ 283.353587][ T8327] ? kobject_get_unless_zero+0x156/0x1e0 [ 283.353615][ T8327] ? __pfx_usbdev_open+0x10/0x10 [ 283.353706][ T8327] ? chrdev_open+0x10b/0x6a0 [ 283.353742][ T8327] ? __pfx_usbdev_open+0x10/0x10 [ 283.353766][ T8327] chrdev_open+0x234/0x6a0 [ 283.353795][ T8327] ? __pfx_apparmor_file_open+0x10/0x10 [ 283.353819][ T8327] ? __pfx_chrdev_open+0x10/0x10 [ 283.353852][ T8327] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 283.353909][ T8327] do_dentry_open+0x744/0x1c10 [ 283.353952][ T8327] ? __pfx_chrdev_open+0x10/0x10 [ 283.353988][ T8327] vfs_open+0x82/0x3f0 [ 283.354026][ T8327] path_openat+0x1de4/0x2cb0 [ 283.354063][ T8327] ? __pfx_path_openat+0x10/0x10 [ 283.354091][ T8327] ? __lock_acquire+0xb8a/0x1c90 [ 283.354127][ T8327] do_filp_open+0x20b/0x470 [ 283.354154][ T8327] ? __pfx_do_filp_open+0x10/0x10 [ 283.354202][ T8327] ? alloc_fd+0x471/0x7d0 [ 283.354234][ T8327] do_sys_openat2+0x11b/0x1d0 [ 283.354269][ T8327] ? __pfx_do_sys_openat2+0x10/0x10 [ 283.354316][ T8327] __x64_sys_openat+0x174/0x210 [ 283.354353][ T8327] ? __pfx___x64_sys_openat+0x10/0x10 [ 283.354401][ T8327] do_syscall_64+0xcd/0x490 [ 283.354427][ T8327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.354453][ T8327] RIP: 0033:0x7fba0db8eb69 [ 283.354474][ T8327] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 283.354499][ T8327] RSP: 002b:00007fba0e97e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 283.354522][ T8327] RAX: ffffffffffffffda RBX: 00007fba0ddb6080 RCX: 00007fba0db8eb69 [ 283.354539][ T8327] RDX: 0000000000000802 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 283.354555][ T8327] RBP: 00007fba0dc11df1 R08: 0000000000000000 R09: 0000000000000000 [ 283.354570][ T8327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 283.354585][ T8327] R13: 0000000000000000 R14: 00007fba0ddb6080 R15: 00007fffaa0cc488 [ 283.354615][ T8327] [ 283.455501][ T8327] hub 37-0:1.0: hub_ext_port_status failed (err = -12) [ 285.267443][ T8349] FAULT_INJECTION: forcing a failure. [ 285.267443][ T8349] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 285.267496][ T8349] CPU: 0 UID: 0 PID: 8349 Comm: syz.2.532 Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(full) [ 285.267540][ T8349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 285.267560][ T8349] Call Trace: [ 285.267571][ T8349] [ 285.267583][ T8349] dump_stack_lvl+0x16c/0x1f0 [ 285.267622][ T8349] should_fail_ex+0x512/0x640 [ 285.267682][ T8349] strncpy_from_user+0x3b/0x2e0 [ 285.267736][ T8349] getname_flags.part.0+0x8f/0x550 [ 285.267794][ T8349] getname_flags+0x93/0xf0 [ 285.267829][ T8349] do_sys_openat2+0xb8/0x1d0 [ 285.267881][ T8349] ? __pfx_do_sys_openat2+0x10/0x10 [ 285.267937][ T8349] ? __fget_files+0x20e/0x3c0 [ 285.267980][ T8349] __x64_sys_openat+0x174/0x210 [ 285.268036][ T8349] ? __pfx___x64_sys_openat+0x10/0x10 [ 285.268088][ T8349] ? ksys_write+0x1ac/0x250 [ 285.268143][ T8349] do_syscall_64+0xcd/0x490 [ 285.268183][ T8349] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.268219][ T8349] RIP: 0033:0x7fba0db8eb69 [ 285.268245][ T8349] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 285.268277][ T8349] RSP: 002b:00007fba0e97e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 285.268309][ T8349] RAX: ffffffffffffffda RBX: 00007fba0ddb6080 RCX: 00007fba0db8eb69 [ 285.268334][ T8349] RDX: 0000000000000802 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 285.268356][ T8349] RBP: 00007fba0e97e090 R08: 0000000000000000 R09: 0000000000000000 [ 285.268377][ T8349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 285.268398][ T8349] R13: 0000000000000000 R14: 00007fba0ddb6080 R15: 00007fffaa0cc488 [ 285.268461][ T8349] [ 285.581938][ C0] vkms_vblank_simulate: vblank timer overrun [ 286.173995][ T8358] could not allocate digest TFM handle [ 286.532045][ T8361] Console: switching to colour frame buffer device 128x48 [ 286.593678][ T8355] Console: switching to colour VGA+ 80x25 [ 287.497204][ T8378] vhci_hcd: invalid port number 16 [ 287.497223][ T8378] vhci_hcd: invalid port number 16 [ 288.337705][ T8391] FAULT_INJECTION: forcing a failure. [ 288.337705][ T8391] name failslab, interval 1, probability 0, space 0, times 0 [ 288.374041][ T8391] CPU: 0 UID: 0 PID: 8391 Comm: syz.3.539 Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(full) [ 288.374091][ T8391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 288.374112][ T8391] Call Trace: [ 288.374122][ T8391] [ 288.374135][ T8391] dump_stack_lvl+0x16c/0x1f0 [ 288.374173][ T8391] should_fail_ex+0x512/0x640 [ 288.374225][ T8391] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 288.374274][ T8391] should_failslab+0xc2/0x120 [ 288.374320][ T8391] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 288.374364][ T8391] ? __d_alloc+0x32/0xae0 [ 288.374408][ T8391] __d_alloc+0x32/0xae0 [ 288.374451][ T8391] d_alloc_parallel+0x111/0x1480 [ 288.374521][ T8391] ? __pfx_d_alloc_parallel+0x10/0x10 [ 288.374585][ T8391] ? lockdep_init_map_type+0x5c/0x280 [ 288.374634][ T8391] ? lockdep_init_map_type+0x5c/0x280 [ 288.374688][ T8391] __lookup_slow+0x193/0x460 [ 288.374739][ T8391] ? __pfx___lookup_slow+0x10/0x10 [ 288.374794][ T8391] ? __pfx___bpf_trace_kcompactd_wake_template+0x10/0x10 [ 288.374857][ T8391] ? __pfx___bpf_trace_kcompactd_wake_template+0x10/0x10 [ 288.374915][ T8391] ? d_lookup+0xe7/0x190 [ 288.374971][ T8391] lookup_noperm+0xe1/0x110 [ 288.375021][ T8391] simple_start_creating+0xd1/0x1b0 [ 288.375080][ T8391] start_creating.part.0+0x82/0x190 [ 288.375132][ T8391] __debugfs_create_file+0xa7/0x6b0 [ 288.375189][ T8391] debugfs_create_file_full+0x41/0x60 [ 288.375245][ T8391] ref_tracker_dir_debugfs+0x19d/0x290 [ 288.375300][ T8391] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 288.375381][ T8391] ? lockdep_init_map_type+0x5c/0x280 [ 288.375428][ T8391] preinit_net+0x47f/0x8f0 [ 288.375462][ T8391] copy_net_ns+0x1da/0x5f0 [ 288.375507][ T8391] create_new_namespaces+0x3ea/0xa90 [ 288.375556][ T8391] copy_namespaces+0x468/0x560 [ 288.375607][ T8391] copy_process+0x2822/0x7690 [ 288.375669][ T8391] ? __pfx_copy_process+0x10/0x10 [ 288.375712][ T8391] ? futex_private_hash_put+0x176/0x300 [ 288.375757][ T8391] ? futex_private_hash_put+0x18a/0x300 [ 288.375804][ T8391] kernel_clone+0xfc/0x930 [ 288.375848][ T8391] ? __pfx_kernel_clone+0x10/0x10 [ 288.375911][ T8391] __do_sys_clone+0xce/0x120 [ 288.375963][ T8391] ? __pfx___do_sys_clone+0x10/0x10 [ 288.376027][ T8391] ? xfd_validate_state+0x61/0x180 [ 288.376075][ T8391] ? __pfx_do_writev+0x10/0x10 [ 288.376121][ T8391] do_syscall_64+0xcd/0x490 [ 288.376158][ T8391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.376192][ T8391] RIP: 0033:0x7f82cab8eb69 [ 288.376221][ T8391] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 288.376255][ T8391] RSP: 002b:00007f82cb965fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 288.376288][ T8391] RAX: ffffffffffffffda RBX: 00007f82cadb5fa0 RCX: 00007f82cab8eb69 [ 288.376310][ T8391] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000042ae1411 [ 288.376330][ T8391] RBP: 00007f82cac11df1 R08: 0000000000000000 R09: 0000000000000000 [ 288.376350][ T8391] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 288.376370][ T8391] R13: 0000000000000000 R14: 00007f82cadb5fa0 R15: 00007fffe7675518 [ 288.376413][ T8391] [ 288.704626][ C0] vkms_vblank_simulate: vblank timer overrun [ 289.214566][ T8399] FAULT_INJECTION: forcing a failure. [ 289.214566][ T8399] name failslab, interval 1, probability 0, space 0, times 0 [ 289.227636][ T8399] CPU: 0 UID: 0 PID: 8399 Comm: syz.2.542 Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(full) [ 289.227679][ T8399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 289.227698][ T8399] Call Trace: [ 289.227708][ T8399] [ 289.227720][ T8399] dump_stack_lvl+0x16c/0x1f0 [ 289.227757][ T8399] should_fail_ex+0x512/0x640 [ 289.227805][ T8399] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 289.227850][ T8399] should_failslab+0xc2/0x120 [ 289.227895][ T8399] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 289.227937][ T8399] ? alloc_empty_file+0x55/0x1e0 [ 289.227989][ T8399] alloc_empty_file+0x55/0x1e0 [ 289.228036][ T8399] path_openat+0xda/0x2cb0 [ 289.228068][ T8399] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.228117][ T8399] ? __pfx_path_openat+0x10/0x10 [ 289.228155][ T8399] ? __lock_acquire+0xb8a/0x1c90 [ 289.228202][ T8399] do_filp_open+0x20b/0x470 [ 289.228240][ T8399] ? __pfx_do_filp_open+0x10/0x10 [ 289.228305][ T8399] ? alloc_fd+0x471/0x7d0 [ 289.228348][ T8399] do_sys_openat2+0x11b/0x1d0 [ 289.228396][ T8399] ? __pfx_do_sys_openat2+0x10/0x10 [ 289.228456][ T8399] ? __fget_files+0x20e/0x3c0 [ 289.228495][ T8399] __x64_sys_openat+0x174/0x210 [ 289.228545][ T8399] ? __pfx___x64_sys_openat+0x10/0x10 [ 289.228591][ T8399] ? ksys_write+0x1ac/0x250 [ 289.228641][ T8399] do_syscall_64+0xcd/0x490 [ 289.228677][ T8399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.228710][ T8399] RIP: 0033:0x7fba0db8eb69 [ 289.228735][ T8399] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 289.228767][ T8399] RSP: 002b:00007fba0e97e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 289.228801][ T8399] RAX: ffffffffffffffda RBX: 00007fba0ddb6080 RCX: 00007fba0db8eb69 [ 289.228822][ T8399] RDX: 0000000000000802 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 289.228843][ T8399] RBP: 00007fba0e97e090 R08: 0000000000000000 R09: 0000000000000000 [ 289.228862][ T8399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 289.228881][ T8399] R13: 0000000000000000 R14: 00007fba0ddb6080 R15: 00007fffaa0cc488 [ 289.228922][ T8399] [ 289.450463][ C0] vkms_vblank_simulate: vblank timer overrun [ 290.083275][ T8398] Format for deleting device is "id" (uint). [ 290.117912][ T8408] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 292.435157][ T8450] FAULT_INJECTION: forcing a failure. [ 292.435157][ T8450] name failslab, interval 1, probability 0, space 0, times 0 [ 292.459735][ T8450] CPU: 0 UID: 0 PID: 8450 Comm: syz.0.552 Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(full) [ 292.459781][ T8450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 292.459802][ T8450] Call Trace: [ 292.459812][ T8450] [ 292.459825][ T8450] dump_stack_lvl+0x16c/0x1f0 [ 292.459863][ T8450] should_fail_ex+0x512/0x640 [ 292.459913][ T8450] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 292.459965][ T8450] should_failslab+0xc2/0x120 [ 292.460201][ T8450] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 292.460258][ T8450] ? __pfx__proc_mkdir+0x10/0x10 [ 292.460304][ T8450] ? nf_lwtunnel_net_init+0x38/0xf0 [ 292.460342][ T8450] ? __pfx_nf_lwtunnel_net_init+0x10/0x10 [ 292.460377][ T8450] kmemdup_noprof+0x29/0x60 [ 292.460421][ T8450] nf_lwtunnel_net_init+0x38/0xf0 [ 292.460457][ T8450] ops_init+0x1e2/0x5f0 [ 292.460498][ T8450] setup_net+0x10f/0x380 [ 292.460531][ T8450] ? lockdep_init_map_type+0x5c/0x280 [ 292.460578][ T8450] ? __pfx_setup_net+0x10/0x10 [ 292.460617][ T8450] ? debug_mutex_init+0x37/0x70 [ 292.460678][ T8450] copy_net_ns+0x2a6/0x5f0 [ 292.460723][ T8450] create_new_namespaces+0x3ea/0xa90 [ 292.460772][ T8450] copy_namespaces+0x468/0x560 [ 292.460814][ T8450] copy_process+0x2822/0x7690 [ 292.460857][ T8450] ? preempt_schedule_thunk+0x16/0x30 [ 292.460924][ T8450] ? __pfx_copy_process+0x10/0x10 [ 292.460967][ T8450] ? futex_private_hash_put+0x176/0x300 [ 292.461015][ T8450] ? futex_private_hash_put+0x18a/0x300 [ 292.461064][ T8450] kernel_clone+0xfc/0x930 [ 292.461122][ T8450] ? __pfx_futex_wake+0x10/0x10 [ 292.461171][ T8450] ? __pfx_kernel_clone+0x10/0x10 [ 292.461212][ T8450] ? __pfx_vfs_writev+0x10/0x10 [ 292.461270][ T8450] __do_sys_clone+0xce/0x120 [ 292.461317][ T8450] ? __pfx___do_sys_clone+0x10/0x10 [ 292.461537][ T8450] ? xfd_validate_state+0x61/0x180 [ 292.461604][ T8450] ? __pfx_do_writev+0x10/0x10 [ 292.461652][ T8450] do_syscall_64+0xcd/0x490 [ 292.461693][ T8450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.461728][ T8450] RIP: 0033:0x7f0eb978eb69 [ 292.461756][ T8450] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 292.461790][ T8450] RSP: 002b:00007f0eb75f5fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 292.461823][ T8450] RAX: ffffffffffffffda RBX: 00007f0eb99b5fa0 RCX: 00007f0eb978eb69 [ 292.461845][ T8450] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000042ae1411 [ 292.461865][ T8450] RBP: 00007f0eb9811df1 R08: 0000000000000000 R09: 0000000000000000 [ 292.461887][ T8450] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 292.461914][ T8450] R13: 0000000000000000 R14: 00007f0eb99b5fa0 R15: 00007ffe5319dee8 [ 292.461958][ T8450] [ 292.752840][ C0] vkms_vblank_simulate: vblank timer overrun [ 293.221405][ T8463] FAULT_INJECTION: forcing a failure. [ 293.221405][ T8463] name failslab, interval 1, probability 0, space 0, times 0 [ 293.286372][ T8463] CPU: 0 UID: 0 PID: 8463 Comm: syz.1.555 Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(full) [ 293.286422][ T8463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 293.286446][ T8463] Call Trace: [ 293.286457][ T8463] [ 293.286470][ T8463] dump_stack_lvl+0x16c/0x1f0 [ 293.286509][ T8463] should_fail_ex+0x512/0x640 [ 293.286559][ T8463] ? fs_reclaim_acquire+0xae/0x150 [ 293.286618][ T8463] ? usb_alloc_urb+0x66/0xa0 [ 293.286653][ T8463] should_failslab+0xc2/0x120 [ 293.286700][ T8463] __kmalloc_noprof+0xd2/0x510 [ 293.286759][ T8463] usb_alloc_urb+0x66/0xa0 [ 293.286797][ T8463] usb_control_msg+0x1d3/0x4a0 [ 293.286842][ T8463] ? __pfx_usb_control_msg+0x10/0x10 [ 293.286898][ T8463] hub_ext_port_status+0x14e/0x670 [ 293.286953][ T8463] hub_activate+0x6e5/0x1d60 [ 293.287009][ T8463] ? __pfx_hub_activate+0x10/0x10 [ 293.287053][ T8463] ? usb_generic_driver_resume+0x70/0xa0 [ 293.287110][ T8463] hub_resume+0xa8/0x3f0 [ 293.287154][ T8463] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 293.287191][ T8463] ? __pfx_hub_resume+0x10/0x10 [ 293.287242][ T8463] ? __pfx_hcd_bus_resume+0x10/0x10 [ 293.287288][ T8463] usb_resume_interface.constprop.0.isra.0+0x2c5/0x3e0 [ 293.287352][ T8463] usb_resume_both+0x273/0x800 [ 293.287411][ T8463] ? __pfx_usb_resume_both+0x10/0x10 [ 293.287468][ T8463] ? __pfx_usb_runtime_resume+0x10/0x10 [ 293.287505][ T8463] ? __pfx_usb_runtime_resume+0x10/0x10 [ 293.287542][ T8463] __rpm_callback+0xc5/0x610 [ 293.287590][ T8463] ? __pfx_usb_runtime_resume+0x10/0x10 [ 293.287625][ T8463] rpm_callback+0x1b7/0x200 [ 293.287669][ T8463] ? __pfx_usb_runtime_resume+0x10/0x10 [ 293.287704][ T8463] rpm_resume+0xd0a/0x1310 [ 293.287760][ T8463] ? __pfx_rpm_resume+0x10/0x10 [ 293.287802][ T8463] ? do_raw_spin_lock+0x12c/0x2b0 [ 293.287855][ T8463] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 293.287924][ T8463] __pm_runtime_resume+0xb6/0x170 [ 293.287975][ T8463] usb_autoresume_device+0x23/0xe0 [ 293.288012][ T8463] usbdev_open+0x228/0x8b0 [ 293.288049][ T8463] ? kobject_get_unless_zero+0x156/0x1e0 [ 293.288087][ T8463] ? __pfx_usbdev_open+0x10/0x10 [ 293.288122][ T8463] ? chrdev_open+0x10b/0x6a0 [ 293.288169][ T8463] ? __pfx_usbdev_open+0x10/0x10 [ 293.288202][ T8463] chrdev_open+0x234/0x6a0 [ 293.288250][ T8463] ? __pfx_apparmor_file_open+0x10/0x10 [ 293.288284][ T8463] ? __pfx_chrdev_open+0x10/0x10 [ 293.288330][ T8463] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 293.288375][ T8463] do_dentry_open+0x744/0x1c10 [ 293.288416][ T8463] ? __pfx_chrdev_open+0x10/0x10 [ 293.288467][ T8463] vfs_open+0x82/0x3f0 [ 293.288521][ T8463] path_openat+0x1de4/0x2cb0 [ 293.288574][ T8463] ? __pfx_path_openat+0x10/0x10 [ 293.288614][ T8463] ? __lock_acquire+0xb8a/0x1c90 [ 293.288663][ T8463] do_filp_open+0x20b/0x470 [ 293.288702][ T8463] ? __pfx_do_filp_open+0x10/0x10 [ 293.288772][ T8463] ? alloc_fd+0x471/0x7d0 [ 293.288838][ T8463] do_sys_openat2+0x11b/0x1d0 [ 293.288888][ T8463] ? __pfx_do_sys_openat2+0x10/0x10 [ 293.288956][ T8463] __x64_sys_openat+0x174/0x210 [ 293.289016][ T8463] ? __pfx___x64_sys_openat+0x10/0x10 [ 293.289086][ T8463] do_syscall_64+0xcd/0x490 [ 293.289124][ T8463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.289159][ T8463] RIP: 0033:0x7fe634b8eb69 [ 293.289186][ T8463] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 293.289226][ T8463] RSP: 002b:00007fe6359c9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 293.289259][ T8463] RAX: ffffffffffffffda RBX: 00007fe634db6080 RCX: 00007fe634b8eb69 [ 293.289283][ T8463] RDX: 0000000000000802 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 293.289304][ T8463] RBP: 00007fe634c11df1 R08: 0000000000000000 R09: 0000000000000000 [ 293.289325][ T8463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 293.289345][ T8463] R13: 0000000000000000 R14: 00007fe634db6080 R15: 00007ffe7cf39b68 [ 293.289388][ T8463] [ 293.695828][ C0] vkms_vblank_simulate: vblank timer overrun [ 294.160748][ T8463] hub 37-0:1.0: hub_ext_port_status failed (err = -12) [ 294.241233][ T8467] FAULT_INJECTION: forcing a failure. [ 294.241233][ T8467] name failslab, interval 1, probability 0, space 0, times 0 [ 294.279725][ T8467] CPU: 0 UID: 0 PID: 8467 Comm: syz.3.557 Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(full) [ 294.279775][ T8467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 294.279795][ T8467] Call Trace: [ 294.279807][ T8467] [ 294.279820][ T8467] dump_stack_lvl+0x16c/0x1f0 [ 294.279860][ T8467] should_fail_ex+0x512/0x640 [ 294.279922][ T8467] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 294.279968][ T8467] should_failslab+0xc2/0x120 [ 294.280015][ T8467] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 294.280058][ T8467] ? security_file_alloc+0x34/0x2b0 [ 294.280099][ T8467] security_file_alloc+0x34/0x2b0 [ 294.280133][ T8467] init_file+0x93/0x4c0 [ 294.280178][ T8467] alloc_empty_file+0x73/0x1e0 [ 294.280226][ T8467] alloc_file_pseudo+0x13a/0x230 [ 294.280277][ T8467] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 294.280330][ T8467] ? do_raw_spin_unlock+0x172/0x230 [ 294.280388][ T8467] __anon_inode_getfile+0xe8/0x280 [ 294.280432][ T8467] anon_inode_getfile_fmode+0x37/0xa0 [ 294.280473][ T8467] do_eventfd+0x19b/0x2c0 [ 294.280516][ T8467] ? rcu_is_watching+0x12/0xc0 [ 294.280549][ T8467] __x64_sys_eventfd+0x32/0x50 [ 294.280592][ T8467] do_syscall_64+0xcd/0x490 [ 294.280629][ T8467] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.280663][ T8467] RIP: 0033:0x7f82cab8eb69 [ 294.280690][ T8467] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 294.280724][ T8467] RSP: 002b:00007f82cb966038 EFLAGS: 00000246 ORIG_RAX: 000000000000011c [ 294.280757][ T8467] RAX: ffffffffffffffda RBX: 00007f82cadb5fa0 RCX: 00007f82cab8eb69 [ 294.280780][ T8467] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 294.280801][ T8467] RBP: 00007f82cac11df1 R08: 0000000000000000 R09: 0000000000000000 [ 294.280821][ T8467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 294.280841][ T8467] R13: 0000000000000000 R14: 00007f82cadb5fa0 R15: 00007fffe7675518 [ 294.280892][ T8467] [ 294.494951][ C0] vkms_vblank_simulate: vblank timer overrun [ 295.085723][ T8480] FAULT_INJECTION: forcing a failure. [ 295.085723][ T8480] name failslab, interval 1, probability 0, space 0, times 0 [ 295.104022][ T8480] CPU: 1 UID: 0 PID: 8480 Comm: syz.0.560 Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(full) [ 295.104069][ T8480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 295.104184][ T8480] Call Trace: [ 295.104208][ T8480] [ 295.104223][ T8480] dump_stack_lvl+0x16c/0x1f0 [ 295.104263][ T8480] should_fail_ex+0x512/0x640 [ 295.104311][ T8480] ? fs_reclaim_acquire+0xae/0x150 [ 295.104376][ T8480] should_failslab+0xc2/0x120 [ 295.104428][ T8480] __kmalloc_cache_noprof+0x6a/0x3e0 [ 295.104466][ T8480] ? usb_control_msg+0xbc/0x4a0 [ 295.104513][ T8480] usb_control_msg+0xbc/0x4a0 [ 295.104559][ T8480] ? __pfx_usb_control_msg+0x10/0x10 [ 295.104614][ T8480] hub_ext_port_status+0x14e/0x670 [ 295.104672][ T8480] hub_activate+0x6e5/0x1d60 [ 295.104743][ T8480] ? __pfx_hub_activate+0x10/0x10 [ 295.104790][ T8480] ? usb_generic_driver_resume+0x70/0xa0 [ 295.104847][ T8480] hub_resume+0xa8/0x3f0 [ 295.105087][ T8480] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 295.105133][ T8480] ? __pfx_hub_resume+0x10/0x10 [ 295.105176][ T8480] ? __pfx_hcd_bus_resume+0x10/0x10 [ 295.105219][ T8480] usb_resume_interface.constprop.0.isra.0+0x2c5/0x3e0 [ 295.105278][ T8480] usb_resume_both+0x273/0x800 [ 295.105338][ T8480] ? __pfx_usb_resume_both+0x10/0x10 [ 295.105393][ T8480] ? __pfx_usb_runtime_resume+0x10/0x10 [ 295.105429][ T8480] ? __pfx_usb_runtime_resume+0x10/0x10 [ 295.105461][ T8480] __rpm_callback+0xc5/0x610 [ 295.105506][ T8480] ? __pfx_usb_runtime_resume+0x10/0x10 [ 295.105539][ T8480] rpm_callback+0x1b7/0x200 [ 295.105582][ T8480] ? __pfx_usb_runtime_resume+0x10/0x10 [ 295.105616][ T8480] rpm_resume+0xd0a/0x1310 [ 295.105667][ T8480] ? __pfx_rpm_resume+0x10/0x10 [ 295.105708][ T8480] ? do_raw_spin_lock+0x12c/0x2b0 [ 295.105760][ T8480] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 295.105828][ T8480] __pm_runtime_resume+0xb6/0x170 [ 295.105877][ T8480] usb_autoresume_device+0x23/0xe0 [ 295.105929][ T8480] usbdev_open+0x228/0x8b0 [ 295.105966][ T8480] ? kobject_get_unless_zero+0x156/0x1e0 [ 295.106006][ T8480] ? __pfx_usbdev_open+0x10/0x10 [ 295.106051][ T8480] ? chrdev_open+0x10b/0x6a0 [ 295.106098][ T8480] ? __pfx_usbdev_open+0x10/0x10 [ 295.106133][ T8480] chrdev_open+0x234/0x6a0 [ 295.106171][ T8480] ? __pfx_apparmor_file_open+0x10/0x10 [ 295.106214][ T8480] ? __pfx_chrdev_open+0x10/0x10 [ 295.106262][ T8480] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 295.106303][ T8480] do_dentry_open+0x744/0x1c10 [ 295.106457][ T8480] ? __pfx_chrdev_open+0x10/0x10 [ 295.106519][ T8480] vfs_open+0x82/0x3f0 [ 295.106574][ T8480] path_openat+0x1de4/0x2cb0 [ 295.106627][ T8480] ? __pfx_path_openat+0x10/0x10 [ 295.106667][ T8480] ? __lock_acquire+0xb8a/0x1c90 [ 295.106715][ T8480] do_filp_open+0x20b/0x470 [ 295.106752][ T8480] ? __pfx_do_filp_open+0x10/0x10 [ 295.106822][ T8480] ? alloc_fd+0x471/0x7d0 [ 295.106867][ T8480] do_sys_openat2+0x11b/0x1d0 [ 295.106916][ T8480] ? __pfx_do_sys_openat2+0x10/0x10 [ 295.106995][ T8480] __x64_sys_openat+0x174/0x210 [ 295.107052][ T8480] ? __pfx___x64_sys_openat+0x10/0x10 [ 295.107124][ T8480] do_syscall_64+0xcd/0x490 [ 295.107163][ T8480] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.107197][ T8480] RIP: 0033:0x7f0eb978eb69 [ 295.107226][ T8480] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 295.107260][ T8480] RSP: 002b:00007f0eb75f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 295.107293][ T8480] RAX: ffffffffffffffda RBX: 00007f0eb99b5fa0 RCX: 00007f0eb978eb69 [ 295.107316][ T8480] RDX: 0000000000000802 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 295.107339][ T8480] RBP: 00007f0eb9811df1 R08: 0000000000000000 R09: 0000000000000000 [ 295.107359][ T8480] R10: 00000000000000ec R11: 0000000000000246 R12: 0000000000000000 [ 295.107380][ T8480] R13: 0000000000000000 R14: 00007f0eb99b5fa0 R15: 00007ffe5319dee8 [ 295.107424][ T8480] [ 295.107444][ T8480] hub 37-0:1.0: hub_ext_port_status failed (err = -12) [ 296.273588][ T8498] FAULT_INJECTION: forcing a failure. [ 296.273588][ T8498] name failslab, interval 1, probability 0, space 0, times 0 [ 296.292026][ T8498] CPU: 1 UID: 0 PID: 8498 Comm: syz.3.564 Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(full) [ 296.292063][ T8498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 296.292078][ T8498] Call Trace: [ 296.292085][ T8498] [ 296.292094][ T8498] dump_stack_lvl+0x16c/0x1f0 [ 296.292127][ T8498] should_fail_ex+0x512/0x640 [ 296.292162][ T8498] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 296.292197][ T8498] should_failslab+0xc2/0x120 [ 296.292230][ T8498] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 296.292265][ T8498] ? __do_sys_clone+0xce/0x120 [ 296.292293][ T8498] ? do_syscall_64+0xcd/0x490 [ 296.292316][ T8498] ? sock_alloc_inode+0x25/0x1c0 [ 296.292347][ T8498] ? __pfx_sock_alloc_inode+0x10/0x10 [ 296.292373][ T8498] sock_alloc_inode+0x25/0x1c0 [ 296.292400][ T8498] alloc_inode+0x61/0x240 [ 296.292432][ T8498] sock_alloc+0x40/0x280 [ 296.292458][ T8498] sock_create_lite+0x82/0x120 [ 296.292486][ T8498] __netlink_kernel_create+0xbd/0x750 [ 296.292511][ T8498] ? __lock_acquire+0x622/0x1c90 [ 296.292541][ T8498] ? __pfx___netlink_kernel_create+0x10/0x10 [ 296.292573][ T8498] rtnetlink_net_init+0xb9/0x140 [ 296.292610][ T8498] ? __pfx_rtnetlink_net_init+0x10/0x10 [ 296.292647][ T8498] ? lockdep_init_map_type+0x5c/0x280 [ 296.292677][ T8498] ? __pfx_rtnetlink_rcv+0x10/0x10 [ 296.292711][ T8498] ? __pfx_rtnetlink_bind+0x10/0x10 [ 296.292747][ T8498] ? lockdep_init_map_type+0x5c/0x280 [ 296.292779][ T8498] ? debug_mutex_init+0x37/0x70 [ 296.292819][ T8498] ? __pfx_rtnetlink_net_init+0x10/0x10 [ 296.292856][ T8498] ops_init+0x1e2/0x5f0 [ 296.292883][ T8498] setup_net+0x10f/0x380 [ 296.292904][ T8498] ? lockdep_init_map_type+0x5c/0x280 [ 296.292936][ T8498] ? __pfx_setup_net+0x10/0x10 [ 296.292962][ T8498] ? debug_mutex_init+0x37/0x70 [ 296.293013][ T8498] copy_net_ns+0x2a6/0x5f0 [ 296.293043][ T8498] create_new_namespaces+0x3ea/0xa90 [ 296.293081][ T8498] copy_namespaces+0x468/0x560 [ 296.293142][ T8498] copy_process+0x2822/0x7690 [ 296.293186][ T8498] ? __pfx_copy_process+0x10/0x10 [ 296.293216][ T8498] ? futex_private_hash_put+0x176/0x300 [ 296.293247][ T8498] ? futex_private_hash_put+0x18a/0x300 [ 296.293280][ T8498] kernel_clone+0xfc/0x930 [ 296.293312][ T8498] ? __pfx_kernel_clone+0x10/0x10 [ 296.293358][ T8498] __do_sys_clone+0xce/0x120 [ 296.293387][ T8498] ? __pfx___do_sys_clone+0x10/0x10 [ 296.293431][ T8498] ? xfd_validate_state+0x61/0x180 [ 296.293464][ T8498] ? __pfx_do_writev+0x10/0x10 [ 296.293496][ T8498] do_syscall_64+0xcd/0x490 [ 296.293521][ T8498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.293545][ T8498] RIP: 0033:0x7f82cab8eb69 [ 296.293564][ T8498] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 296.293587][ T8498] RSP: 002b:00007f82cb965fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 296.293609][ T8498] RAX: ffffffffffffffda RBX: 00007f82cadb5fa0 RCX: 00007f82cab8eb69 [ 296.293625][ T8498] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000042ae1411 [ 296.293640][ T8498] RBP: 00007f82cac11df1 R08: 0000000000000000 R09: 0000000000000000 [ 296.293654][ T8498] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 296.293668][ T8498] R13: 0000000000000000 R14: 00007f82cadb5fa0 R15: 00007fffe7675518 [ 296.293698][ T8498] [ 299.153886][ T8535] FAULT_INJECTION: forcing a failure. [ 299.153886][ T8535] name failslab, interval 1, probability 0, space 0, times 0 [ 299.174864][ T8535] CPU: 0 UID: 0 PID: 8535 Comm: syz.0.572 Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(full) [ 299.174912][ T8535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 299.174932][ T8535] Call Trace: [ 299.174942][ T8535] [ 299.174955][ T8535] dump_stack_lvl+0x16c/0x1f0 [ 299.174993][ T8535] should_fail_ex+0x512/0x640 [ 299.175060][ T8535] ? fs_reclaim_acquire+0xae/0x150 [ 299.175117][ T8535] ? usb_alloc_urb+0x66/0xa0 [ 299.175151][ T8535] should_failslab+0xc2/0x120 [ 299.175191][ T8535] __kmalloc_noprof+0xd2/0x510 [ 299.175260][ T8535] usb_alloc_urb+0x66/0xa0 [ 299.175296][ T8535] usb_control_msg+0x1d3/0x4a0 [ 299.175340][ T8535] ? __pfx_usb_control_msg+0x10/0x10 [ 299.175393][ T8535] hub_ext_port_status+0x14e/0x670 [ 299.175447][ T8535] hub_activate+0x6e5/0x1d60 [ 299.175502][ T8535] ? __pfx_hub_activate+0x10/0x10 [ 299.175546][ T8535] ? usb_generic_driver_resume+0x70/0xa0 [ 299.175600][ T8535] hub_resume+0xa8/0x3f0 [ 299.175640][ T8535] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 299.175676][ T8535] ? __pfx_hub_resume+0x10/0x10 [ 299.175716][ T8535] ? __pfx_hcd_bus_resume+0x10/0x10 [ 299.175768][ T8535] usb_resume_interface.constprop.0.isra.0+0x2c5/0x3e0 [ 299.175834][ T8535] usb_resume_both+0x273/0x800 [ 299.175896][ T8535] ? __pfx_usb_resume_both+0x10/0x10 [ 299.175951][ T8535] ? __pfx_usb_runtime_resume+0x10/0x10 [ 299.175989][ T8535] ? __pfx_usb_runtime_resume+0x10/0x10 [ 299.176023][ T8535] __rpm_callback+0xc5/0x610 [ 299.176069][ T8535] ? __pfx_usb_runtime_resume+0x10/0x10 [ 299.176105][ T8535] rpm_callback+0x1b7/0x200 [ 299.176146][ T8535] ? __pfx_usb_runtime_resume+0x10/0x10 [ 299.176180][ T8535] rpm_resume+0xd0a/0x1310 [ 299.176233][ T8535] ? __pfx_rpm_resume+0x10/0x10 [ 299.176274][ T8535] ? do_raw_spin_lock+0x12c/0x2b0 [ 299.176323][ T8535] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 299.176389][ T8535] __pm_runtime_resume+0xb6/0x170 [ 299.176436][ T8535] usb_autoresume_device+0x23/0xe0 [ 299.176473][ T8535] usbdev_open+0x228/0x8b0 [ 299.176508][ T8535] ? kobject_get_unless_zero+0x156/0x1e0 [ 299.176545][ T8535] ? __pfx_usbdev_open+0x10/0x10 [ 299.176579][ T8535] ? chrdev_open+0x10b/0x6a0 [ 299.176622][ T8535] ? __pfx_usbdev_open+0x10/0x10 [ 299.176652][ T8535] chrdev_open+0x234/0x6a0 [ 299.176686][ T8535] ? __pfx_apparmor_file_open+0x10/0x10 [ 299.176716][ T8535] ? __pfx_chrdev_open+0x10/0x10 [ 299.176760][ T8535] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 299.176804][ T8535] do_dentry_open+0x744/0x1c10 [ 299.176854][ T8535] ? __pfx_chrdev_open+0x10/0x10 [ 299.176904][ T8535] vfs_open+0x82/0x3f0 [ 299.176963][ T8535] path_openat+0x1de4/0x2cb0 [ 299.177016][ T8535] ? __pfx_path_openat+0x10/0x10 [ 299.177064][ T8535] ? __lock_acquire+0xb8a/0x1c90 [ 299.177112][ T8535] do_filp_open+0x20b/0x470 [ 299.177150][ T8535] ? __pfx_do_filp_open+0x10/0x10 [ 299.177215][ T8535] ? alloc_fd+0x471/0x7d0 [ 299.177261][ T8535] do_sys_openat2+0x11b/0x1d0 [ 299.177309][ T8535] ? __pfx_do_sys_openat2+0x10/0x10 [ 299.177376][ T8535] __x64_sys_openat+0x174/0x210 [ 299.177427][ T8535] ? __pfx___x64_sys_openat+0x10/0x10 [ 299.177501][ T8535] do_syscall_64+0xcd/0x490 [ 299.177538][ T8535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.177572][ T8535] RIP: 0033:0x7f0eb978eb69 [ 299.177607][ T8535] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 299.177642][ T8535] RSP: 002b:00007f0eb75d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 299.177675][ T8535] RAX: ffffffffffffffda RBX: 00007f0eb99b6080 RCX: 00007f0eb978eb69 [ 299.177697][ T8535] RDX: 0000000000000802 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 299.177718][ T8535] RBP: 00007f0eb9811df1 R08: 0000000000000000 R09: 0000000000000000 [ 299.177739][ T8535] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000 [ 299.177760][ T8535] R13: 0000000000000000 R14: 00007f0eb99b6080 R15: 00007ffe5319dee8 [ 299.177803][ T8535] [ 299.595446][ C0] vkms_vblank_simulate: vblank timer overrun [ 299.607949][ T8535] hub 37-0:1.0: hub_ext_port_status failed (err = -12) [ 299.844235][ T8545] FAULT_INJECTION: forcing a failure. [ 299.844235][ T8545] name failslab, interval 1, probability 0, space 0, times 0 [ 299.858667][ T8545] CPU: 0 UID: 0 PID: 8545 Comm: syz.3.574 Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(full) [ 299.858716][ T8545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 299.858736][ T8545] Call Trace: [ 299.858747][ T8545] [ 299.858759][ T8545] dump_stack_lvl+0x16c/0x1f0 [ 299.858808][ T8545] should_fail_ex+0x512/0x640 [ 299.858859][ T8545] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 299.858909][ T8545] should_failslab+0xc2/0x120 [ 299.858955][ T8545] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 299.858998][ T8545] ? proc_net_ns_init+0x42/0x420 [ 299.859048][ T8545] ? __pfx_proc_net_ns_init+0x10/0x10 [ 299.859098][ T8545] proc_net_ns_init+0x42/0x420 [ 299.859148][ T8545] ? __pfx_proc_net_ns_init+0x10/0x10 [ 299.859195][ T8545] ops_init+0x1e2/0x5f0 [ 299.859235][ T8545] setup_net+0x10f/0x380 [ 299.859267][ T8545] ? lockdep_init_map_type+0x5c/0x280 [ 299.859315][ T8545] ? __pfx_setup_net+0x10/0x10 [ 299.859353][ T8545] ? debug_mutex_init+0x37/0x70 [ 299.859413][ T8545] copy_net_ns+0x2a6/0x5f0 [ 299.859457][ T8545] create_new_namespaces+0x3ea/0xa90 [ 299.859506][ T8545] copy_namespaces+0x468/0x560 [ 299.859547][ T8545] copy_process+0x2822/0x7690 [ 299.859606][ T8545] ? __pfx_copy_process+0x10/0x10 [ 299.859649][ T8545] ? futex_private_hash_put+0x176/0x300 [ 299.859693][ T8545] ? futex_private_hash_put+0x18a/0x300 [ 299.859739][ T8545] kernel_clone+0xfc/0x930 [ 299.859786][ T8545] ? __pfx_kernel_clone+0x10/0x10 [ 299.859861][ T8545] __do_sys_clone+0xce/0x120 [ 299.859905][ T8545] ? __pfx___do_sys_clone+0x10/0x10 [ 299.859965][ T8545] ? xfd_validate_state+0x61/0x180 [ 299.860012][ T8545] ? __pfx_do_writev+0x10/0x10 [ 299.860057][ T8545] do_syscall_64+0xcd/0x490 [ 299.860094][ T8545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.860129][ T8545] RIP: 0033:0x7f82cab8eb69 [ 299.860157][ T8545] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 299.860191][ T8545] RSP: 002b:00007f82cb965fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 299.860223][ T8545] RAX: ffffffffffffffda RBX: 00007f82cadb5fa0 RCX: 00007f82cab8eb69 [ 299.860246][ T8545] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000042ae1411 [ 299.860265][ T8545] RBP: 00007f82cac11df1 R08: 0000000000000000 R09: 0000000000000000 [ 299.860286][ T8545] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 299.860306][ T8545] R13: 0000000000000000 R14: 00007f82cadb5fa0 R15: 00007fffe7675518 [ 299.860350][ T8545] [ 300.117370][ C0] vkms_vblank_simulate: vblank timer overrun [ 300.575271][ T8552] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 302.719750][ T8587] FAULT_INJECTION: forcing a failure. [ 302.719750][ T8587] name failslab, interval 1, probability 0, space 0, times 0 [ 302.719803][ T8587] CPU: 1 UID: 0 PID: 8587 Comm: syz.2.584 Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(full) [ 302.719848][ T8587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 302.719884][ T8587] Call Trace: [ 302.719896][ T8587] [ 302.719909][ T8587] dump_stack_lvl+0x16c/0x1f0 [ 302.719949][ T8587] should_fail_ex+0x512/0x640 [ 302.720000][ T8587] ? fs_reclaim_acquire+0xae/0x150 [ 302.720059][ T8587] ? usb_alloc_urb+0x66/0xa0 [ 302.720093][ T8587] should_failslab+0xc2/0x120 [ 302.720142][ T8587] __kmalloc_noprof+0xd2/0x510 [ 302.720206][ T8587] usb_alloc_urb+0x66/0xa0 [ 302.720242][ T8587] usb_control_msg+0x1d3/0x4a0 [ 302.720286][ T8587] ? __pfx_usb_control_msg+0x10/0x10 [ 302.720331][ T8587] ? irqentry_exit+0x3b/0x90 [ 302.720368][ T8587] hub_ext_port_status+0x14e/0x670 [ 302.720421][ T8587] hub_activate+0x6e5/0x1d60 [ 302.720475][ T8587] ? __pfx_hub_activate+0x10/0x10 [ 302.720519][ T8587] ? usb_generic_driver_resume+0x70/0xa0 [ 302.720587][ T8587] hub_resume+0xa8/0x3f0 [ 302.720630][ T8587] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 302.720741][ T8587] ? __pfx_hub_resume+0x10/0x10 [ 302.720784][ T8587] ? __pfx_hcd_bus_resume+0x10/0x10 [ 302.720829][ T8587] usb_resume_interface.constprop.0.isra.0+0x2c5/0x3e0 [ 302.720894][ T8587] usb_resume_both+0x273/0x800 [ 302.720951][ T8587] ? __pfx_usb_resume_both+0x10/0x10 [ 302.721006][ T8587] ? __pfx_usb_runtime_resume+0x10/0x10 [ 302.721044][ T8587] ? __pfx_usb_runtime_resume+0x10/0x10 [ 302.721080][ T8587] __rpm_callback+0xc5/0x610 [ 302.721128][ T8587] ? __pfx_usb_runtime_resume+0x10/0x10 [ 302.721163][ T8587] rpm_callback+0x1b7/0x200 [ 302.721205][ T8587] ? __pfx_usb_runtime_resume+0x10/0x10 [ 302.721240][ T8587] rpm_resume+0xd0a/0x1310 [ 302.721304][ T8587] ? __pfx_rpm_resume+0x10/0x10 [ 302.721345][ T8587] ? do_raw_spin_lock+0x12c/0x2b0 [ 302.721396][ T8587] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 302.721465][ T8587] __pm_runtime_resume+0xb6/0x170 [ 302.721514][ T8587] usb_autoresume_device+0x23/0xe0 [ 302.721550][ T8587] usbdev_open+0x228/0x8b0 [ 302.721585][ T8587] ? kobject_get_unless_zero+0x156/0x1e0 [ 302.721622][ T8587] ? __pfx_usbdev_open+0x10/0x10 [ 302.721663][ T8587] ? chrdev_open+0x10b/0x6a0 [ 302.721709][ T8587] ? __pfx_usbdev_open+0x10/0x10 [ 302.721742][ T8587] chrdev_open+0x234/0x6a0 [ 302.721782][ T8587] ? __pfx_apparmor_file_open+0x10/0x10 [ 302.721815][ T8587] ? __pfx_chrdev_open+0x10/0x10 [ 302.721860][ T8587] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 302.721905][ T8587] do_dentry_open+0x744/0x1c10 [ 302.721944][ T8587] ? __pfx_chrdev_open+0x10/0x10 [ 302.721995][ T8587] vfs_open+0x82/0x3f0 [ 302.722048][ T8587] path_openat+0x1de4/0x2cb0 [ 302.722100][ T8587] ? __pfx_path_openat+0x10/0x10 [ 302.722135][ T8587] ? __lock_acquire+0xb8a/0x1c90 [ 302.722184][ T8587] do_filp_open+0x20b/0x470 [ 302.722221][ T8587] ? __pfx_do_filp_open+0x10/0x10 [ 302.722283][ T8587] ? alloc_fd+0x471/0x7d0 [ 302.722329][ T8587] do_sys_openat2+0x11b/0x1d0 [ 302.722385][ T8587] ? __pfx_do_sys_openat2+0x10/0x10 [ 302.722457][ T8587] __x64_sys_openat+0x174/0x210 [ 302.722513][ T8587] ? __pfx___x64_sys_openat+0x10/0x10 [ 302.722589][ T8587] do_syscall_64+0xcd/0x490 [ 302.722629][ T8587] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.722693][ T8587] RIP: 0033:0x7fba0db8eb69 [ 302.722725][ T8587] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 302.722761][ T8587] RSP: 002b:00007fba0e97e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 302.722798][ T8587] RAX: ffffffffffffffda RBX: 00007fba0ddb6080 RCX: 00007fba0db8eb69 [ 302.722821][ T8587] RDX: 0000000000000802 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 302.722847][ T8587] RBP: 00007fba0dc11df1 R08: 0000000000000000 R09: 0000000000000000 [ 302.722869][ T8587] R10: 0000000000000700 R11: 0000000000000246 R12: 0000000000000000 [ 302.722922][ T8587] R13: 0000000000000000 R14: 00007fba0ddb6080 R15: 00007fffaa0cc488 [ 302.722987][ T8587] [ 302.745690][ T8587] hub 37-0:1.0: hub_ext_port_status failed (err = -12) [ 302.778473][ T8587] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 302.793152][ T8589] netlink: 4 bytes leftover after parsing attributes in process `syz.3.585'. [ 302.794171][ T8589] netlink: 25 bytes leftover after parsing attributes in process `syz.3.585'. [ 303.024025][ T8592] FAULT_INJECTION: forcing a failure. [ 303.024025][ T8592] name failslab, interval 1, probability 0, space 0, times 0 [ 303.024061][ T8592] CPU: 0 UID: 0 PID: 8592 Comm: syz.3.586 Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(full) [ 303.024091][ T8592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 303.024106][ T8592] Call Trace: [ 303.024113][ T8592] [ 303.024122][ T8592] dump_stack_lvl+0x16c/0x1f0 [ 303.024149][ T8592] should_fail_ex+0x512/0x640 [ 303.024185][ T8592] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 303.024222][ T8592] should_failslab+0xc2/0x120 [ 303.024255][ T8592] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 303.024289][ T8592] ? __pfx__proc_mkdir+0x10/0x10 [ 303.024321][ T8592] ? nf_lwtunnel_net_init+0x38/0xf0 [ 303.024348][ T8592] ? __pfx_nf_lwtunnel_net_init+0x10/0x10 [ 303.024374][ T8592] kmemdup_noprof+0x29/0x60 [ 303.024412][ T8592] nf_lwtunnel_net_init+0x38/0xf0 [ 303.024438][ T8592] ops_init+0x1e2/0x5f0 [ 303.024466][ T8592] setup_net+0x10f/0x380 [ 303.024487][ T8592] ? lockdep_init_map_type+0x5c/0x280 [ 303.024521][ T8592] ? __pfx_setup_net+0x10/0x10 [ 303.024546][ T8592] ? debug_mutex_init+0x37/0x70 [ 303.024588][ T8592] copy_net_ns+0x2a6/0x5f0 [ 303.024618][ T8592] create_new_namespaces+0x3ea/0xa90 [ 303.024651][ T8592] copy_namespaces+0x468/0x560 [ 303.024678][ T8592] copy_process+0x2822/0x7690 [ 303.024707][ T8592] ? preempt_schedule_thunk+0x16/0x30 [ 303.024751][ T8592] ? __pfx_copy_process+0x10/0x10 [ 303.024781][ T8592] ? futex_private_hash_put+0x176/0x300 [ 303.024812][ T8592] ? futex_private_hash_put+0x18a/0x300 [ 303.024844][ T8592] kernel_clone+0xfc/0x930 [ 303.024874][ T8592] ? __pfx_futex_wake+0x10/0x10 [ 303.024907][ T8592] ? __pfx_kernel_clone+0x10/0x10 [ 303.024935][ T8592] ? __pfx_vfs_writev+0x10/0x10 [ 303.024978][ T8592] __do_sys_clone+0xce/0x120 [ 303.025008][ T8592] ? __pfx___do_sys_clone+0x10/0x10 [ 303.025052][ T8592] ? xfd_validate_state+0x61/0x180 [ 303.025086][ T8592] ? __pfx_do_writev+0x10/0x10 [ 303.025118][ T8592] do_syscall_64+0xcd/0x490 [ 303.025147][ T8592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.025171][ T8592] RIP: 0033:0x7f82cab8eb69 [ 303.025190][ T8592] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 303.025213][ T8592] RSP: 002b:00007f82cb965fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 303.025255][ T8592] RAX: ffffffffffffffda RBX: 00007f82cadb5fa0 RCX: 00007f82cab8eb69 [ 303.025277][ T8592] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000042ae1411 [ 303.025294][ T8592] RBP: 00007f82cac11df1 R08: 0000000000000000 R09: 0000000000000000 [ 303.025312][ T8592] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 303.025331][ T8592] R13: 0000000000000000 R14: 00007f82cadb5fa0 R15: 00007fffe7675518 [ 303.025369][ T8592] [ 303.495067][ C0] vkms_vblank_simulate: vblank timer overrun [ 308.504447][ T8660] FAULT_INJECTION: forcing a failure. [ 308.504447][ T8660] name failslab, interval 1, probability 0, space 0, times 0 [ 308.632126][ T8660] CPU: 1 UID: 0 PID: 8660 Comm: syz.2.595 Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(full) [ 308.632161][ T8660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 308.632177][ T8660] Call Trace: [ 308.632184][ T8660] [ 308.632193][ T8660] dump_stack_lvl+0x16c/0x1f0 [ 308.632221][ T8660] should_fail_ex+0x512/0x640 [ 308.632256][ T8660] ? __kmalloc_noprof+0xbf/0x510 [ 308.632288][ T8660] ? usb_hcd_submit_urb+0x5cf/0x1c60 [ 308.632310][ T8660] should_failslab+0xc2/0x120 [ 308.632344][ T8660] __kmalloc_noprof+0xd2/0x510 [ 308.632382][ T8660] ? mark_held_locks+0x49/0x80 [ 308.632421][ T8660] usb_hcd_submit_urb+0x5cf/0x1c60 [ 308.632453][ T8660] usb_submit_urb+0x890/0x1770 [ 308.632480][ T8660] ? lockdep_init_map_type+0x40/0x280 [ 308.632514][ T8660] ? lockdep_init_map_type+0xe3/0x280 [ 308.632546][ T8660] ? __init_swait_queue_head+0xca/0x150 [ 308.632586][ T8660] usb_start_wait_urb+0x104/0x4b0 [ 308.632618][ T8660] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 308.632657][ T8660] ? __asan_memset+0x23/0x50 [ 308.632685][ T8660] usb_control_msg+0x326/0x4a0 [ 308.632716][ T8660] ? __pfx_usb_control_msg+0x10/0x10 [ 308.632753][ T8660] hub_ext_port_status+0x14e/0x670 [ 308.632790][ T8660] hub_activate+0x6e5/0x1d60 [ 308.632827][ T8660] ? __pfx_hub_activate+0x10/0x10 [ 308.632857][ T8660] ? usb_generic_driver_resume+0x70/0xa0 [ 308.632896][ T8660] hub_resume+0xa8/0x3f0 [ 308.632924][ T8660] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 308.632950][ T8660] ? __pfx_hub_resume+0x10/0x10 [ 308.632980][ T8660] ? __pfx_hcd_bus_resume+0x10/0x10 [ 308.633010][ T8660] usb_resume_interface.constprop.0.isra.0+0x2c5/0x3e0 [ 308.633054][ T8660] usb_resume_both+0x273/0x800 [ 308.633093][ T8660] ? __pfx_usb_resume_both+0x10/0x10 [ 308.633131][ T8660] ? __pfx_usb_runtime_resume+0x10/0x10 [ 308.633157][ T8660] ? __pfx_usb_runtime_resume+0x10/0x10 [ 308.633182][ T8660] __rpm_callback+0xc5/0x610 [ 308.633235][ T8660] ? __pfx_usb_runtime_resume+0x10/0x10 [ 308.633260][ T8660] rpm_callback+0x1b7/0x200 [ 308.633289][ T8660] ? __pfx_usb_runtime_resume+0x10/0x10 [ 308.633313][ T8660] rpm_resume+0xd0a/0x1310 [ 308.633357][ T8660] ? __pfx_rpm_resume+0x10/0x10 [ 308.633386][ T8660] ? do_raw_spin_lock+0x12c/0x2b0 [ 308.633422][ T8660] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 308.633469][ T8660] __pm_runtime_resume+0xb6/0x170 [ 308.633504][ T8660] usb_autoresume_device+0x23/0xe0 [ 308.633529][ T8660] usbdev_open+0x228/0x8b0 [ 308.633553][ T8660] ? kobject_get_unless_zero+0x156/0x1e0 [ 308.633579][ T8660] ? __pfx_usbdev_open+0x10/0x10 [ 308.633603][ T8660] ? chrdev_open+0x10b/0x6a0 [ 308.633636][ T8660] ? __pfx_usbdev_open+0x10/0x10 [ 308.633659][ T8660] chrdev_open+0x234/0x6a0 [ 308.633685][ T8660] ? __pfx_apparmor_file_open+0x10/0x10 [ 308.633708][ T8660] ? __pfx_chrdev_open+0x10/0x10 [ 308.633738][ T8660] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 308.633769][ T8660] do_dentry_open+0x744/0x1c10 [ 308.633797][ T8660] ? __pfx_chrdev_open+0x10/0x10 [ 308.633831][ T8660] vfs_open+0x82/0x3f0 [ 308.633867][ T8660] path_openat+0x1de4/0x2cb0 [ 308.633903][ T8660] ? __pfx_path_openat+0x10/0x10 [ 308.633931][ T8660] ? __lock_acquire+0xb8a/0x1c90 [ 308.633965][ T8660] do_filp_open+0x20b/0x470 [ 308.633992][ T8660] ? __pfx_do_filp_open+0x10/0x10 [ 308.634041][ T8660] ? alloc_fd+0x471/0x7d0 [ 308.634073][ T8660] do_sys_openat2+0x11b/0x1d0 [ 308.634108][ T8660] ? __pfx_do_sys_openat2+0x10/0x10 [ 308.634154][ T8660] __x64_sys_openat+0x174/0x210 [ 308.634190][ T8660] ? __pfx___x64_sys_openat+0x10/0x10 [ 308.634238][ T8660] do_syscall_64+0xcd/0x490 [ 308.634264][ T8660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.634289][ T8660] RIP: 0033:0x7fba0db8eb69 [ 308.634308][ T8660] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 308.634332][ T8660] RSP: 002b:00007fba0e97e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 308.634361][ T8660] RAX: ffffffffffffffda RBX: 00007fba0ddb6080 RCX: 00007fba0db8eb69 [ 308.634377][ T8660] RDX: 0000000000000802 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 308.634392][ T8660] RBP: 00007fba0dc11df1 R08: 0000000000000000 R09: 0000000000000000 [ 308.634406][ T8660] R10: 000000000000ecff R11: 0000000000000246 R12: 0000000000000000 [ 308.634420][ T8660] R13: 0000000000000000 R14: 00007fba0ddb6080 R15: 00007fffaa0cc488 [ 308.634450][ T8660] [ 309.102373][ C1] vkms_vblank_simulate: vblank timer overrun [ 309.163298][ T8660] hub 37-0:1.0: hub_ext_port_status failed (err = -12) [ 310.604166][ T8696] vhci_hcd: invalid port number 16 [ 310.609469][ T8696] vhci_hcd: invalid port number 16 [ 315.312602][ T8767] vhci_hcd: invalid port number 16 [ 315.318639][ T8767] vhci_hcd: invalid port number 16 [ 315.714532][ T8773] netlink: 28 bytes leftover after parsing attributes in process `syz.0.621'. [ 315.884644][ T8773] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.145883][ T8773] bridge_slave_1 (unregistering): left allmulticast mode [ 316.251307][ T8773] bridge_slave_1 (unregistering): left promiscuous mode [ 316.270443][ T8773] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.717313][ T8785] FAULT_INJECTION: forcing a failure. [ 316.717313][ T8785] name failslab, interval 1, probability 0, space 0, times 0 [ 316.730861][ T8785] CPU: 0 UID: 0 PID: 8785 Comm: syz.3.623 Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(full) [ 316.730896][ T8785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 316.730910][ T8785] Call Trace: [ 316.730918][ T8785] [ 316.730926][ T8785] dump_stack_lvl+0x16c/0x1f0 [ 316.730953][ T8785] should_fail_ex+0x512/0x640 [ 316.730988][ T8785] ? fs_reclaim_acquire+0xae/0x150 [ 316.731029][ T8785] ? usb_alloc_urb+0x66/0xa0 [ 316.731052][ T8785] should_failslab+0xc2/0x120 [ 316.731084][ T8785] __kmalloc_noprof+0xd2/0x510 [ 316.731120][ T8785] usb_alloc_urb+0x66/0xa0 [ 316.731144][ T8785] usb_control_msg+0x1d3/0x4a0 [ 316.731175][ T8785] ? __pfx_usb_control_msg+0x10/0x10 [ 316.731213][ T8785] hub_ext_port_status+0x14e/0x670 [ 316.731250][ T8785] hub_activate+0x6e5/0x1d60 [ 316.731287][ T8785] ? __pfx_hub_activate+0x10/0x10 [ 316.731317][ T8785] ? usb_generic_driver_resume+0x70/0xa0 [ 316.731356][ T8785] hub_resume+0xa8/0x3f0 [ 316.731385][ T8785] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 316.731410][ T8785] ? __pfx_hub_resume+0x10/0x10 [ 316.731440][ T8785] ? __pfx_hcd_bus_resume+0x10/0x10 [ 316.731470][ T8785] usb_resume_interface.constprop.0.isra.0+0x2c5/0x3e0 [ 316.731513][ T8785] usb_resume_both+0x273/0x800 [ 316.731555][ T8785] ? __pfx_usb_resume_both+0x10/0x10 [ 316.731594][ T8785] ? __pfx_usb_runtime_resume+0x10/0x10 [ 316.731619][ T8785] ? __pfx_usb_runtime_resume+0x10/0x10 [ 316.731644][ T8785] __rpm_callback+0xc5/0x610 [ 316.731676][ T8785] ? __pfx_usb_runtime_resume+0x10/0x10 [ 316.731702][ T8785] rpm_callback+0x1b7/0x200 [ 316.731731][ T8785] ? __pfx_usb_runtime_resume+0x10/0x10 [ 316.731756][ T8785] rpm_resume+0xd0a/0x1310 [ 316.731794][ T8785] ? __pfx_rpm_resume+0x10/0x10 [ 316.731830][ T8785] ? do_raw_spin_lock+0x12c/0x2b0 [ 316.731866][ T8785] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 316.731911][ T8785] __pm_runtime_resume+0xb6/0x170 [ 316.731944][ T8785] usb_autoresume_device+0x23/0xe0 [ 316.731968][ T8785] usbdev_open+0x228/0x8b0 [ 316.731992][ T8785] ? kobject_get_unless_zero+0x156/0x1e0 [ 316.732017][ T8785] ? __pfx_usbdev_open+0x10/0x10 [ 316.732040][ T8785] ? chrdev_open+0x10b/0x6a0 [ 316.732071][ T8785] ? __pfx_usbdev_open+0x10/0x10 [ 316.732093][ T8785] chrdev_open+0x234/0x6a0 [ 316.732119][ T8785] ? __pfx_apparmor_file_open+0x10/0x10 [ 316.732141][ T8785] ? __pfx_chrdev_open+0x10/0x10 [ 316.732171][ T8785] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 316.732200][ T8785] do_dentry_open+0x744/0x1c10 [ 316.732226][ T8785] ? __pfx_chrdev_open+0x10/0x10 [ 316.732259][ T8785] vfs_open+0x82/0x3f0 [ 316.732295][ T8785] path_openat+0x1de4/0x2cb0 [ 316.732329][ T8785] ? __pfx_path_openat+0x10/0x10 [ 316.732356][ T8785] ? __lock_acquire+0xb8a/0x1c90 [ 316.732387][ T8785] do_filp_open+0x20b/0x470 [ 316.732412][ T8785] ? __pfx_do_filp_open+0x10/0x10 [ 316.732459][ T8785] ? alloc_fd+0x471/0x7d0 [ 316.732489][ T8785] do_sys_openat2+0x11b/0x1d0 [ 316.732521][ T8785] ? __pfx_do_sys_openat2+0x10/0x10 [ 316.732567][ T8785] __x64_sys_openat+0x174/0x210 [ 316.732604][ T8785] ? __pfx___x64_sys_openat+0x10/0x10 [ 316.732653][ T8785] do_syscall_64+0xcd/0x490 [ 316.732679][ T8785] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.732704][ T8785] RIP: 0033:0x7f82cab8eb69 [ 316.732724][ T8785] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 316.732748][ T8785] RSP: 002b:00007f82cb945038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 316.732770][ T8785] RAX: ffffffffffffffda RBX: 00007f82cadb6080 RCX: 00007f82cab8eb69 [ 316.732787][ T8785] RDX: 0000000000000802 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 316.732808][ T8785] RBP: 00007f82cac11df1 R08: 0000000000000000 R09: 0000000000000000 [ 316.732823][ T8785] R10: 0000000000000700 R11: 0000000000000246 R12: 0000000000000000 [ 316.732837][ T8785] R13: 0000000000000000 R14: 00007f82cadb6080 R15: 00007fffe7675518 [ 316.732867][ T8785] [ 316.732904][ T8785] hub 37-0:1.0: hub_ext_port_status failed (err = -12) [ 317.734293][ T8799] netlink: 342 bytes leftover after parsing attributes in process `syz.0.625'. [ 317.734637][ T8799] netlink: 342 bytes leftover after parsing attributes in process `syz.0.625'. [ 317.734974][ T8799] netlink: 342 bytes leftover after parsing attributes in process `syz.0.625'. [ 317.735297][ T8799] netlink: 342 bytes leftover after parsing attributes in process `syz.0.625'. [ 317.735613][ T8799] netlink: 342 bytes leftover after parsing attributes in process `syz.0.625'. [ 317.735994][ T8799] netlink: 342 bytes leftover after parsing attributes in process `syz.0.625'. [ 317.736312][ T8799] netlink: 342 bytes leftover after parsing attributes in process `syz.0.625'. [ 317.736687][ T8799] netlink: 342 bytes leftover after parsing attributes in process `syz.0.625'. [ 317.737009][ T8799] netlink: 342 bytes leftover after parsing attributes in process `syz.0.625'. [ 318.757041][ T8811] zswap: compressor 000 not available [ 320.498862][ T8837] FAULT_INJECTION: forcing a failure. [ 320.498862][ T8837] name failslab, interval 1, probability 0, space 0, times 0 [ 320.498967][ T8837] CPU: 0 UID: 0 PID: 8837 Comm: syz.1.635 Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(full) [ 320.498997][ T8837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 320.499013][ T8837] Call Trace: [ 320.499020][ T8837] [ 320.499028][ T8837] dump_stack_lvl+0x16c/0x1f0 [ 320.499056][ T8837] should_fail_ex+0x512/0x640 [ 320.499091][ T8837] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 320.499124][ T8837] should_failslab+0xc2/0x120 [ 320.499156][ T8837] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 320.499186][ T8837] ? __kernfs_new_node+0xd2/0x8e0 [ 320.499217][ T8837] __kernfs_new_node+0xd2/0x8e0 [ 320.499248][ T8837] ? __pfx___kernfs_new_node+0x10/0x10 [ 320.499283][ T8837] ? find_held_lock+0x2b/0x80 [ 320.499306][ T8837] ? kernfs_root+0xee/0x2a0 [ 320.499339][ T8837] kernfs_new_node+0x13c/0x1e0 [ 320.499376][ T8837] __kernfs_create_file+0x53/0x350 [ 320.499430][ T8837] sysfs_add_file_mode_ns+0x207/0x3c0 [ 320.499463][ T8837] internal_create_group+0x578/0xf30 [ 320.499504][ T8837] ? __pfx_internal_create_group+0x10/0x10 [ 320.499557][ T8837] sysfs_slab_add+0x1a3/0x1e0 [ 320.499603][ T8837] do_kmem_cache_create+0x529/0x720 [ 320.499644][ T8837] ? __kmem_cache_create_args+0x205/0x390 [ 320.499675][ T8837] __kmem_cache_create_args+0x225/0x390 [ 320.499704][ T8837] mon_text_open+0x313/0x4f0 [ 320.499729][ T8837] ? __pfx_mon_text_open+0x10/0x10 [ 320.499751][ T8837] ? __debugfs_file_get+0x1fe/0x840 [ 320.499780][ T8837] ? __pfx_mon_text_ctor+0x10/0x10 [ 320.499803][ T8837] ? __pfx_apparmor_file_open+0x10/0x10 [ 320.499825][ T8837] ? lockdown_is_locked_down+0x3f/0x130 [ 320.499851][ T8837] ? bpf_lsm_locked_down+0x9/0x10 [ 320.499878][ T8837] ? __pfx_mon_text_open+0x10/0x10 [ 320.499900][ T8837] full_proxy_open_regular+0x1b6/0x360 [ 320.499937][ T8837] do_dentry_open+0x744/0x1c10 [ 320.499975][ T8837] ? __pfx_full_proxy_open_regular+0x10/0x10 [ 320.500025][ T8837] vfs_open+0x82/0x3f0 [ 320.500073][ T8837] path_openat+0x1de4/0x2cb0 [ 320.500122][ T8837] ? __pfx_path_openat+0x10/0x10 [ 320.500161][ T8837] ? __lock_acquire+0xb8a/0x1c90 [ 320.500208][ T8837] do_filp_open+0x20b/0x470 [ 320.500245][ T8837] ? __pfx_do_filp_open+0x10/0x10 [ 320.500312][ T8837] ? alloc_fd+0x471/0x7d0 [ 320.500357][ T8837] do_sys_openat2+0x11b/0x1d0 [ 320.500415][ T8837] ? __pfx_do_sys_openat2+0x10/0x10 [ 320.500483][ T8837] __x64_sys_openat+0x174/0x210 [ 320.500529][ T8837] ? __pfx___x64_sys_openat+0x10/0x10 [ 320.500593][ T8837] do_syscall_64+0xcd/0x490 [ 320.500630][ T8837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.500666][ T8837] RIP: 0033:0x7fe634b8eb69 [ 320.500692][ T8837] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 320.500725][ T8837] RSP: 002b:00007fe6359ea038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 320.500756][ T8837] RAX: ffffffffffffffda RBX: 00007fe634db5fa0 RCX: 00007fe634b8eb69 [ 320.500778][ T8837] RDX: 0000000000000200 RSI: 0000200000000380 RDI: ffffffffffffff9c [ 320.500800][ T8837] RBP: 00007fe634c11df1 R08: 0000000000000000 R09: 0000000000000000 [ 320.500821][ T8837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 320.500841][ T8837] R13: 0000000000000000 R14: 00007fe634db5fa0 R15: 00007ffe7cf39b68 [ 320.500884][ T8837] [ 320.534383][ T8837] SLUB: Unable to add cache mon_text_ffff88805c36a800 to sysfs [ 322.818651][ T8864] __nla_validate_parse: 24 callbacks suppressed [ 322.818678][ T8864] netlink: 8 bytes leftover after parsing attributes in process `syz.1.640'. [ 323.008203][ T8870] __vm_enough_memory: pid: 8870, comm: syz.3.642, bytes: 4398046511104 not enough memory for the allocation [ 323.541033][ T8881] netlink: 'syz.1.643': attribute type 1 has an invalid length. [ 327.425630][ T8921] db_root: cannot open: Y [ 327.772832][ T8924] netlink: 28 bytes leftover after parsing attributes in process `syz.3.653'. [ 327.787424][ T8924] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.854290][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 327.861893][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 328.016631][ T8924] bridge_slave_1 (unregistering): left allmulticast mode [ 328.049778][ T8924] bridge_slave_1 (unregistering): left promiscuous mode [ 328.118669][ T8924] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.733873][ T8939] netlink: 28 bytes leftover after parsing attributes in process `syz.3.657'. [ 328.767899][ T8939] veth0_macvtap: left promiscuous mode [ 328.786358][ T8939] macvtap0: entered promiscuous mode [ 328.794465][ T8939] macvtap0: entered allmulticast mode [ 329.452188][ T8943] netlink: 342 bytes leftover after parsing attributes in process `syz.1.658'. [ 330.933508][ T8976] netlink: 330 bytes leftover after parsing attributes in process `syz.3.664'. [ 332.762519][ T8989] netlink: 8 bytes leftover after parsing attributes in process `syz.2.667'. [ 334.187417][ T8979] ima: policy update failed [ 334.201143][ T30] audit: type=1802 audit(6048976962.913:5): pid=8979 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.665" res=0 errno=0 [ 334.392633][ T9012] __vm_enough_memory: pid: 9012, comm: syz.1.670, bytes: 4398046511104 not enough memory for the allocation [ 335.045440][ T9016] vhci_hcd: invalid port number 16 [ 335.058003][ T9016] vhci_hcd: invalid port number 16 [ 338.205424][ T9052] usb usb8: usbfs: interface 0 claimed by hub while 'syz.3.682' sets config #0 [ 338.738600][ T9061] vhci_hcd: invalid port number 16 [ 338.798589][ T9061] vhci_hcd: invalid port number 16 [ 339.108146][ T9069] FAULT_INJECTION: forcing a failure. [ 339.108146][ T9069] name failslab, interval 1, probability 0, space 0, times 0 [ 339.226462][ T9069] CPU: 1 UID: 0 PID: 9069 Comm: syz.3.685 Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(full) [ 339.226514][ T9069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 339.226535][ T9069] Call Trace: [ 339.226547][ T9069] [ 339.226559][ T9069] dump_stack_lvl+0x16c/0x1f0 [ 339.226599][ T9069] should_fail_ex+0x512/0x640 [ 339.226648][ T9069] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 339.226695][ T9069] should_failslab+0xc2/0x120 [ 339.226740][ T9069] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 339.226781][ T9069] ? sk_prot_alloc+0x60/0x2a0 [ 339.226823][ T9069] sk_prot_alloc+0x60/0x2a0 [ 339.226884][ T9069] sk_alloc+0x36/0xc20 [ 339.226934][ T9069] inet6_create+0x381/0x12b0 [ 339.226975][ T9069] ? inet6_create+0x7f/0x12b0 [ 339.227019][ T9069] __sock_create+0x335/0x8d0 [ 339.227067][ T9069] inet_ctl_sock_create+0x94/0x230 [ 339.227113][ T9069] ? __pfx_inet_ctl_sock_create+0x10/0x10 [ 339.227156][ T9069] ? lockdep_init_map_type+0x5c/0x280 [ 339.227200][ T9069] ? do_init_timer+0xc9/0x110 [ 339.227238][ T9069] ? __pfx_sctp_ctrlsock_init+0x10/0x10 [ 339.227285][ T9069] sctp_ctrlsock_init+0x40/0xf0 [ 339.227333][ T9069] ops_init+0x1e2/0x5f0 [ 339.227370][ T9069] setup_net+0x10f/0x380 [ 339.227399][ T9069] ? lockdep_init_map_type+0x5c/0x280 [ 339.227443][ T9069] ? __pfx_setup_net+0x10/0x10 [ 339.227491][ T9069] ? debug_mutex_init+0x37/0x70 [ 339.227553][ T9069] copy_net_ns+0x2a6/0x5f0 [ 339.227609][ T9069] create_new_namespaces+0x3ea/0xa90 [ 339.227664][ T9069] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 339.227708][ T9069] ksys_unshare+0x45b/0xa40 [ 339.227755][ T9069] ? __pfx_ksys_unshare+0x10/0x10 [ 339.227803][ T9069] ? xfd_validate_state+0x61/0x180 [ 339.227863][ T9069] __x64_sys_unshare+0x31/0x40 [ 339.227898][ T9069] do_syscall_64+0xcd/0x490 [ 339.227929][ T9069] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.227957][ T9069] RIP: 0033:0x7f82cab8eb69 [ 339.227979][ T9069] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 339.228008][ T9069] RSP: 002b:00007f82cb945038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 339.228055][ T9069] RAX: ffffffffffffffda RBX: 00007f82cadb6080 RCX: 00007f82cab8eb69 [ 339.228074][ T9069] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 339.228091][ T9069] RBP: 00007f82cac11df1 R08: 0000000000000000 R09: 0000000000000000 [ 339.228110][ T9069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 339.228126][ T9069] R13: 0000000000000000 R14: 00007f82cadb6080 R15: 00007fffe7675518 [ 339.228162][ T9069] [ 342.577792][ T9118] vhci_hcd: invalid port number 16 [ 342.609913][ T9118] vhci_hcd: invalid port number 16 [ 346.944431][ T9176] __vm_enough_memory: pid: 9176, comm: syz.2.708, bytes: 4398046511104 not enough memory for the allocation [ 347.599372][ T9191] FAULT_INJECTION: forcing a failure. [ 347.599372][ T9191] name failslab, interval 1, probability 0, space 0, times 0 [ 347.699241][ T9191] CPU: 0 UID: 0 PID: 9191 Comm: syz.0.711 Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(full) [ 347.699293][ T9191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 347.699315][ T9191] Call Trace: [ 347.699325][ T9191] [ 347.699338][ T9191] dump_stack_lvl+0x16c/0x1f0 [ 347.699380][ T9191] should_fail_ex+0x512/0x640 [ 347.699440][ T9191] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 347.699491][ T9191] should_failslab+0xc2/0x120 [ 347.699561][ T9191] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 347.699605][ T9191] ? __proc_create+0xc3/0x8e0 [ 347.699653][ T9191] ? __proc_create+0x2ce/0x8e0 [ 347.699705][ T9191] __proc_create+0x2ce/0x8e0 [ 347.699754][ T9191] ? __pfx___proc_create+0x10/0x10 [ 347.699799][ T9191] ? proc_register+0x30f/0x5f0 [ 347.699853][ T9191] ? _raw_write_unlock+0x28/0x50 [ 347.700143][ T9191] proc_create_reg+0x7d/0x180 [ 347.700201][ T9191] proc_create_net_data+0x8e/0x1c0 [ 347.700250][ T9191] ? __pfx_proc_create_net_data+0x10/0x10 [ 347.700311][ T9191] sctp_proc_init+0xfb/0x270 [ 347.700362][ T9191] ? __pfx_sctp_defaults_init+0x10/0x10 [ 347.700414][ T9191] sctp_defaults_init+0x74a/0xd80 [ 347.700469][ T9191] ? __pfx_sctp_defaults_init+0x10/0x10 [ 347.700522][ T9191] ops_init+0x1e2/0x5f0 [ 347.700562][ T9191] setup_net+0x10f/0x380 [ 347.700593][ T9191] ? lockdep_init_map_type+0x5c/0x280 [ 347.700640][ T9191] ? __pfx_setup_net+0x10/0x10 [ 347.700678][ T9191] ? debug_mutex_init+0x37/0x70 [ 347.700732][ T9191] copy_net_ns+0x2a6/0x5f0 [ 347.700775][ T9191] create_new_namespaces+0x3ea/0xa90 [ 347.700823][ T9191] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 347.700884][ T9191] ksys_unshare+0x45b/0xa40 [ 347.701011][ T9191] ? __pfx_ksys_unshare+0x10/0x10 [ 347.701061][ T9191] ? xfd_validate_state+0x61/0x180 [ 347.701125][ T9191] __x64_sys_unshare+0x31/0x40 [ 347.701170][ T9191] do_syscall_64+0xcd/0x490 [ 347.701210][ T9191] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.701244][ T9191] RIP: 0033:0x7f0eb978eb69 [ 347.701272][ T9191] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 347.701306][ T9191] RSP: 002b:00007f0eb75d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 347.701338][ T9191] RAX: ffffffffffffffda RBX: 00007f0eb99b6080 RCX: 00007f0eb978eb69 [ 347.701360][ T9191] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 347.701380][ T9191] RBP: 00007f0eb9811df1 R08: 0000000000000000 R09: 0000000000000000 [ 347.701400][ T9191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 347.701421][ T9191] R13: 0000000000000000 R14: 00007f0eb99b6080 R15: 00007ffe5319dee8 [ 347.701464][ T9191] [ 349.585900][ T9203] vhci_hcd: invalid port number 16 [ 349.592833][ T9203] vhci_hcd: invalid port number 16 [ 351.566531][ T9252] Device name cannot be null; rc = [-22] [ 352.210283][ T9262] overlayfs: "check_copy_up" module option is obsolete [ 352.606830][ T9261] vhci_hcd: invalid port number 16 [ 352.612392][ T9261] vhci_hcd: invalid port number 16 [ 355.225718][ T9303] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 355.949616][ T9315] vhci_hcd: invalid port number 16 [ 355.955291][ T9315] vhci_hcd: invalid port number 16 [ 361.475866][ T9383] ptrace attach of "./syz-executor exec"[5842] was attempted by "./syz-executor exec"[9383] [ 363.465599][ T9409] vhci_hcd: invalid port number 16 [ 363.481570][ T9409] vhci_hcd: invalid port number 16 [ 363.832476][ T9417] netlink: 8 bytes leftover after parsing attributes in process `syz.3.761'. [ 365.486699][ T9446] vhci_hcd: invalid port number 16 [ 365.493326][ T9446] vhci_hcd: invalid port number 16 [ 367.180587][ T9472] FAULT_INJECTION: forcing a failure. [ 367.180587][ T9472] name failslab, interval 1, probability 0, space 0, times 0 [ 367.197353][ T9472] CPU: 1 UID: 0 PID: 9472 Comm: syz.1.774 Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(full) [ 367.197401][ T9472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 367.197423][ T9472] Call Trace: [ 367.197434][ T9472] [ 367.197447][ T9472] dump_stack_lvl+0x16c/0x1f0 [ 367.197487][ T9472] should_fail_ex+0x512/0x640 [ 367.197540][ T9472] ? __kmalloc_noprof+0xbf/0x510 [ 367.197598][ T9472] ? usb_hcd_submit_urb+0x5cf/0x1c60 [ 367.197632][ T9472] should_failslab+0xc2/0x120 [ 367.197680][ T9472] __kmalloc_noprof+0xd2/0x510 [ 367.197720][ T9472] ? mark_held_locks+0x49/0x80 [ 367.197771][ T9472] usb_hcd_submit_urb+0x5cf/0x1c60 [ 367.197816][ T9472] usb_submit_urb+0x890/0x1770 [ 367.197854][ T9472] ? lockdep_init_map_type+0x40/0x280 [ 367.197901][ T9472] ? lockdep_init_map_type+0xe3/0x280 [ 367.197947][ T9472] ? __init_swait_queue_head+0xca/0x150 [ 367.198006][ T9472] usb_start_wait_urb+0x104/0x4b0 [ 367.198051][ T9472] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 367.198108][ T9472] ? __asan_memset+0x23/0x50 [ 367.198150][ T9472] usb_control_msg+0x326/0x4a0 [ 367.198193][ T9472] ? __pfx_usb_control_msg+0x10/0x10 [ 367.198248][ T9472] hub_ext_port_status+0x14e/0x670 [ 367.198301][ T9472] hub_activate+0x6e5/0x1d60 [ 367.198355][ T9472] ? __pfx_hub_activate+0x10/0x10 [ 367.198398][ T9472] ? usb_generic_driver_resume+0x70/0xa0 [ 367.198453][ T9472] hub_resume+0xa8/0x3f0 [ 367.198495][ T9472] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 367.198532][ T9472] ? __pfx_hub_resume+0x10/0x10 [ 367.198581][ T9472] ? __pfx_hcd_bus_resume+0x10/0x10 [ 367.198625][ T9472] usb_resume_interface.constprop.0.isra.0+0x2c5/0x3e0 [ 367.198689][ T9472] usb_resume_both+0x273/0x800 [ 367.198745][ T9472] ? __pfx_usb_resume_both+0x10/0x10 [ 367.198800][ T9472] ? __pfx_usb_runtime_resume+0x10/0x10 [ 367.198839][ T9472] ? __pfx_usb_runtime_resume+0x10/0x10 [ 367.198875][ T9472] __rpm_callback+0xc5/0x610 [ 367.198922][ T9472] ? __pfx_usb_runtime_resume+0x10/0x10 [ 367.198957][ T9472] rpm_callback+0x1b7/0x200 [ 367.198999][ T9472] ? __pfx_usb_runtime_resume+0x10/0x10 [ 367.199038][ T9472] rpm_resume+0xd0a/0x1310 [ 367.199091][ T9472] ? __pfx_rpm_resume+0x10/0x10 [ 367.199131][ T9472] ? do_raw_spin_lock+0x12c/0x2b0 [ 367.199182][ T9472] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 367.199250][ T9472] __pm_runtime_resume+0xb6/0x170 [ 367.199297][ T9472] usb_autoresume_device+0x23/0xe0 [ 367.199333][ T9472] usbdev_open+0x228/0x8b0 [ 367.199368][ T9472] ? kobject_get_unless_zero+0x156/0x1e0 [ 367.199406][ T9472] ? __pfx_usbdev_open+0x10/0x10 [ 367.199441][ T9472] ? chrdev_open+0x10b/0x6a0 [ 367.199487][ T9472] ? __pfx_usbdev_open+0x10/0x10 [ 367.199521][ T9472] chrdev_open+0x234/0x6a0 [ 367.199559][ T9472] ? __pfx_apparmor_file_open+0x10/0x10 [ 367.199603][ T9472] ? __pfx_chrdev_open+0x10/0x10 [ 367.199648][ T9472] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 367.199692][ T9472] do_dentry_open+0x744/0x1c10 [ 367.199736][ T9472] ? __pfx_chrdev_open+0x10/0x10 [ 367.199785][ T9472] vfs_open+0x82/0x3f0 [ 367.199837][ T9472] path_openat+0x1de4/0x2cb0 [ 367.199891][ T9472] ? __pfx_path_openat+0x10/0x10 [ 367.199930][ T9472] ? __lock_acquire+0xb8a/0x1c90 [ 367.199979][ T9472] do_filp_open+0x20b/0x470 [ 367.200016][ T9472] ? __pfx_do_filp_open+0x10/0x10 [ 367.200085][ T9472] ? alloc_fd+0x471/0x7d0 [ 367.200131][ T9472] do_sys_openat2+0x11b/0x1d0 [ 367.200179][ T9472] ? __pfx_do_sys_openat2+0x10/0x10 [ 367.200237][ T9472] __x64_sys_openat+0x174/0x210 [ 367.200284][ T9472] ? __pfx___x64_sys_openat+0x10/0x10 [ 367.200348][ T9472] do_syscall_64+0xcd/0x490 [ 367.200387][ T9472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.200422][ T9472] RIP: 0033:0x7fe634b8eb69 [ 367.200449][ T9472] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 367.200482][ T9472] RSP: 002b:00007fe6359c9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 367.200511][ T9472] RAX: ffffffffffffffda RBX: 00007fe634db6080 RCX: 00007fe634b8eb69 [ 367.200532][ T9472] RDX: 0000000000000802 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 367.200550][ T9472] RBP: 00007fe634c11df1 R08: 0000000000000000 R09: 0000000000000000 [ 367.200577][ T9472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 367.200598][ T9472] R13: 0000000000000000 R14: 00007fe634db6080 R15: 00007ffe7cf39b68 [ 367.200637][ T9472] [ 367.201739][ T9472] hub 37-0:1.0: hub_ext_port_status failed (err = -12) [ 374.836694][ T9594] FAULT_INJECTION: forcing a failure. [ 374.836694][ T9594] name failslab, interval 1, probability 0, space 0, times 0 [ 374.863453][ T9594] CPU: 1 UID: 0 PID: 9594 Comm: syz.1.793 Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(full) [ 374.863501][ T9594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 374.863521][ T9594] Call Trace: [ 374.863530][ T9594] [ 374.863543][ T9594] dump_stack_lvl+0x16c/0x1f0 [ 374.863582][ T9594] should_fail_ex+0x512/0x640 [ 374.863634][ T9594] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 374.863679][ T9594] should_failslab+0xc2/0x120 [ 374.863723][ T9594] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 374.863764][ T9594] ? __d_alloc+0x32/0xae0 [ 374.863807][ T9594] __d_alloc+0x32/0xae0 [ 374.863849][ T9594] d_alloc_parallel+0x111/0x1480 [ 374.863945][ T9594] ? __pfx_d_alloc_parallel+0x10/0x10 [ 374.864000][ T9594] ? lockdep_init_map_type+0x5c/0x280 [ 374.864049][ T9594] ? lockdep_init_map_type+0x5c/0x280 [ 374.864096][ T9594] __lookup_slow+0x193/0x460 [ 374.864143][ T9594] ? __pfx___lookup_slow+0x10/0x10 [ 374.864196][ T9594] ? __pfx___bpf_trace_kcompactd_wake_template+0x10/0x10 [ 374.864262][ T9594] ? __pfx___bpf_trace_kcompactd_wake_template+0x10/0x10 [ 374.864330][ T9594] ? d_lookup+0xe7/0x190 [ 374.864385][ T9594] lookup_noperm+0xe1/0x110 [ 374.864436][ T9594] simple_start_creating+0xd1/0x1b0 [ 374.864506][ T9594] start_creating.part.0+0x82/0x190 [ 374.864557][ T9594] __debugfs_create_file+0xa7/0x6b0 [ 374.864613][ T9594] debugfs_create_file_full+0x41/0x60 [ 374.864669][ T9594] ref_tracker_dir_debugfs+0x19d/0x290 [ 374.864724][ T9594] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 374.864817][ T9594] ? lockdep_init_map_type+0x5c/0x280 [ 374.864871][ T9594] preinit_net+0x47f/0x8f0 [ 374.864907][ T9594] copy_net_ns+0x1da/0x5f0 [ 374.864952][ T9594] create_new_namespaces+0x3ea/0xa90 [ 374.864999][ T9594] copy_namespaces+0x468/0x560 [ 374.865038][ T9594] copy_process+0x2822/0x7690 [ 374.865076][ T9594] ? preempt_schedule_thunk+0x16/0x30 [ 374.865136][ T9594] ? __pfx_copy_process+0x10/0x10 [ 374.865177][ T9594] ? futex_private_hash_put+0x176/0x300 [ 374.865219][ T9594] ? futex_private_hash_put+0x18a/0x300 [ 374.865263][ T9594] kernel_clone+0xfc/0x930 [ 374.865302][ T9594] ? __pfx_futex_wake+0x10/0x10 [ 374.865355][ T9594] ? __pfx_kernel_clone+0x10/0x10 [ 374.865393][ T9594] ? __pfx_vfs_writev+0x10/0x10 [ 374.865448][ T9594] __do_sys_clone+0xce/0x120 [ 374.865491][ T9594] ? __pfx___do_sys_clone+0x10/0x10 [ 374.865555][ T9594] ? xfd_validate_state+0x61/0x180 [ 374.865603][ T9594] ? __pfx_do_writev+0x10/0x10 [ 374.865646][ T9594] do_syscall_64+0xcd/0x490 [ 374.865685][ T9594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.865719][ T9594] RIP: 0033:0x7fe634b8eb69 [ 374.865746][ T9594] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 374.865779][ T9594] RSP: 002b:00007fe6359e9fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 374.865810][ T9594] RAX: ffffffffffffffda RBX: 00007fe634db5fa0 RCX: 00007fe634b8eb69 [ 374.865833][ T9594] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000042ae1411 [ 374.865853][ T9594] RBP: 00007fe634c11df1 R08: 0000000000000000 R09: 0000000000000000 [ 374.865874][ T9594] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 374.865894][ T9594] R13: 0000000000000000 R14: 00007fe634db5fa0 R15: 00007ffe7cf39b68 [ 374.865938][ T9594] [ 376.235652][ T9619] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input45 [ 377.138852][ T9620] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input46 [ 381.125188][ T9683] vhci_hcd: invalid port number 16 [ 381.138153][ T9683] vhci_hcd: invalid port number 16 [ 381.228774][ T9685] nbd: couldn't find a device at index 1023 [ 383.011145][ T30] audit: type=1807 audit(6048978034.701:6): UNKNOWN=0"û]$|Ë1jë0B|d™¹ýÓ‰OŸ¬+ö×/ÉéxÔóÈõWÓ¦–Ó^¸´gq%ḦrêOŽ res=0 [ 383.026413][ T9707] ima: policy update failed [ 383.091301][ T30] audit: type=1802 audit(6048978034.721:7): pid=9708 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.3.813" res=0 errno=0 [ 383.246367][ T30] audit: type=1802 audit(6048978034.771:8): pid=9707 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.813" res=0 errno=0 [ 385.030298][ T9740] vhci_hcd: invalid port number 16 [ 385.036129][ T9740] vhci_hcd: invalid port number 16 [ 385.272052][ T9744] netlink: 4 bytes leftover after parsing attributes in process `syz.1.821'. [ 386.111775][ T9758] vhci_hcd: invalid port number 16 [ 386.117494][ T9758] vhci_hcd: invalid port number 16 [ 387.524105][ T9782] vhci_hcd: invalid port number 16 [ 387.531971][ T9782] vhci_hcd: invalid port number 16 [ 388.859707][ T9804] nbd: couldn't find a device at index 1023 [ 389.334951][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 389.342071][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 389.663772][ T9818] busy [ 395.493508][ T9908] delete_channel: no stack [ 396.914700][ T9918] GUP no longer grows the stack in syz.2.853 (9918): 14000-401000 (4000) [ 396.977086][ T9918] CPU: 1 UID: 0 PID: 9918 Comm: syz.2.853 Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(full) [ 396.977135][ T9918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 396.977156][ T9918] Call Trace: [ 396.977168][ T9918] [ 396.977180][ T9918] dump_stack_lvl+0x16c/0x1f0 [ 396.977220][ T9918] gup_vma_lookup+0x1d2/0x220 [ 396.977273][ T9918] __get_user_pages+0x271/0x3b80 [ 396.977341][ T9918] ? process_vm_rw_core.constprop.0+0x1d8/0x970 [ 396.977390][ T9918] ? kasan_save_stack+0x42/0x60 [ 396.977431][ T9918] ? __pfx___get_user_pages+0x10/0x10 [ 396.977483][ T9918] ? register_lock_class+0x41/0x4c0 [ 396.977527][ T9918] ? __x64_sys_process_vm_readv+0xe2/0x1c0 [ 396.977572][ T9918] ? do_syscall_64+0xcd/0x490 [ 396.977618][ T9918] __gup_longterm_locked+0x20d/0x1840 [ 396.977676][ T9918] ? __lock_acquire+0xb8a/0x1c90 [ 396.977723][ T9918] ? __pfx___gup_longterm_locked+0x10/0x10 [ 396.977812][ T9918] pin_user_pages_remote+0xed/0x140 [ 396.977874][ T9918] ? __pfx_pin_user_pages_remote+0x10/0x10 [ 396.977925][ T9918] ? mm_access+0x22d/0x2e0 [ 396.977980][ T9918] process_vm_rw_core.constprop.0+0x41b/0x970 [ 396.978048][ T9918] ? __pfx_process_vm_rw_core.constprop.0+0x10/0x10 [ 396.978098][ T9918] ? iovec_from_user+0xbb/0x140 [ 396.978150][ T9918] ? iovec_from_user+0xbb/0x140 [ 396.978191][ T9918] process_vm_rw+0x216/0x2c0 [ 396.978241][ T9918] ? __pfx_process_vm_rw+0x10/0x10 [ 396.978343][ T9918] ? xfd_validate_state+0x61/0x180 [ 396.978401][ T9918] __x64_sys_process_vm_readv+0xe2/0x1c0 [ 396.978451][ T9918] ? do_syscall_64+0x91/0x490 [ 396.978484][ T9918] ? lockdep_hardirqs_on+0x7c/0x110 [ 396.978537][ T9918] do_syscall_64+0xcd/0x490 [ 396.978574][ T9918] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.978609][ T9918] RIP: 0033:0x7fba0db8eb69 [ 396.978636][ T9918] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 396.978669][ T9918] RSP: 002b:00007fba0e99f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000136 [ 396.978700][ T9918] RAX: ffffffffffffffda RBX: 00007fba0ddb5fa0 RCX: 00007fba0db8eb69 [ 396.978723][ T9918] RDX: 0000000000000004 RSI: 0000200000000040 RDI: 0000000000000337 [ 396.978744][ T9918] RBP: 00007fba0dc11df1 R08: 0000000000000003 R09: 0000000000000000 [ 396.978774][ T9918] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000000 [ 396.978796][ T9918] R13: 0000000000000000 R14: 00007fba0ddb5fa0 R15: 00007fffaa0cc488 [ 396.978840][ T9918] [ 397.749953][ T9937] syz.1.858 (9937): /proc/9935/oom_adj is deprecated, please use /proc/9935/oom_score_adj instead. [ 399.258199][ T30] audit: type=1800 audit(6048978050.943:9): pid=9957 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.863" name="SYSV00000400" dev="tmpfs" ino=0 res=0 errno=0 [ 400.057779][ T9983] syz.1.869 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 400.835507][ T9986] FAULT_INJECTION: forcing a failure. [ 400.835507][ T9986] name fail_futex, interval 1, probability 0, space 0, times 0 [ 400.852698][ T9986] CPU: 1 UID: 0 PID: 9986 Comm: syz.1.869 Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(full) [ 400.852733][ T9986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 400.852747][ T9986] Call Trace: [ 400.852754][ T9986] [ 400.852762][ T9986] dump_stack_lvl+0x16c/0x1f0 [ 400.852789][ T9986] should_fail_ex+0x512/0x640 [ 400.852838][ T9986] get_futex_key+0x1d0/0x1540 [ 400.852874][ T9986] ? find_held_lock+0x2b/0x80 [ 400.852896][ T9986] ? __pfx_get_futex_key+0x10/0x10 [ 400.852923][ T9986] ? __mutex_trylock_common+0xe9/0x250 [ 400.852960][ T9986] futex_wake+0xea/0x530 [ 400.852995][ T9986] ? __pfx_futex_wake+0x10/0x10 [ 400.853025][ T9986] ? __lock_acquire+0xb8a/0x1c90 [ 400.853067][ T9986] do_futex+0x1e3/0x350 [ 400.853095][ T9986] ? __pfx_do_futex+0x10/0x10 [ 400.853121][ T9986] ? __might_fault+0xe3/0x190 [ 400.853156][ T9986] mm_release+0x24e/0x300 [ 400.853183][ T9986] do_exit+0x68e/0x2bf0 [ 400.853220][ T9986] ? __pfx_do_exit+0x10/0x10 [ 400.853250][ T9986] ? do_raw_spin_lock+0x12c/0x2b0 [ 400.853283][ T9986] ? find_held_lock+0x2b/0x80 [ 400.853308][ T9986] do_group_exit+0xd3/0x2a0 [ 400.853341][ T9986] get_signal+0x2673/0x26d0 [ 400.853377][ T9986] ? __pfx_get_signal+0x10/0x10 [ 400.853402][ T9986] ? do_futex+0x122/0x350 [ 400.853439][ T9986] ? __pfx_do_futex+0x10/0x10 [ 400.853470][ T9986] arch_do_signal_or_restart+0x8f/0x790 [ 400.853502][ T9986] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 400.853539][ T9986] ? xfd_validate_state+0x61/0x180 [ 400.853571][ T9986] ? __pfx___do_sys_close_range+0x10/0x10 [ 400.853603][ T9986] exit_to_user_mode_loop+0x84/0x110 [ 400.853638][ T9986] do_syscall_64+0x3f6/0x490 [ 400.853663][ T9986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.853687][ T9986] RIP: 0033:0x7fe634b8eb69 [ 400.853705][ T9986] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 400.853727][ T9986] RSP: 002b:00007fe6359a80e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 400.853748][ T9986] RAX: fffffffffffffe00 RBX: 00007fe634db6168 RCX: 00007fe634b8eb69 [ 400.853762][ T9986] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fe634db6168 [ 400.853776][ T9986] RBP: 00007fe634db6160 R08: 0000000000000000 R09: 0000000000000000 [ 400.853790][ T9986] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe634db616c [ 400.853803][ T9986] R13: 0000000000000000 R14: 00007ffe7cf39a80 R15: 00007ffe7cf39b68 [ 400.853831][ T9986] [ 402.755614][T10013] netlink: 28 bytes leftover after parsing attributes in process `syz.1.873'. [ 406.049219][T10074] zswap: compressor not available [ 406.084667][T10066] vhci_hcd: invalid port number 16 [ 406.134858][T10066] vhci_hcd: invalid port number 16 [ 406.223516][T10081] FAULT_INJECTION: forcing a failure. [ 406.223516][T10081] name failslab, interval 1, probability 0, space 0, times 0 [ 406.265103][T10081] CPU: 1 UID: 0 PID: 10081 Comm: syz.1.888 Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(full) [ 406.265150][T10081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 406.265170][T10081] Call Trace: [ 406.265181][T10081] [ 406.265193][T10081] dump_stack_lvl+0x16c/0x1f0 [ 406.265232][T10081] should_fail_ex+0x512/0x640 [ 406.265282][T10081] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 406.265327][T10081] should_failslab+0xc2/0x120 [ 406.265373][T10081] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 406.265471][T10081] ? __kernfs_new_node+0xd2/0x8e0 [ 406.265517][T10081] __kernfs_new_node+0xd2/0x8e0 [ 406.265561][T10081] ? __pfx___kernfs_new_node+0x10/0x10 [ 406.265611][T10081] ? find_held_lock+0x2b/0x80 [ 406.265644][T10081] ? kernfs_root+0xee/0x2a0 [ 406.265691][T10081] kernfs_new_node+0x13c/0x1e0 [ 406.265743][T10081] __kernfs_create_file+0x53/0x350 [ 406.265802][T10081] sysfs_add_file_mode_ns+0x207/0x3c0 [ 406.265849][T10081] sysfs_merge_group+0x1aa/0x340 [ 406.265892][T10081] ? __pfx_sysfs_merge_group+0x10/0x10 [ 406.265939][T10081] ? __pfx_dev_add_physical_location+0x10/0x10 [ 406.265991][T10081] ? bus_to_subsys+0x131/0x160 [ 406.266034][T10081] dpm_sysfs_add+0x237/0x280 [ 406.266086][T10081] device_add+0x9a6/0x1a70 [ 406.266137][T10081] ? __pfx_device_add+0x10/0x10 [ 406.266187][T10081] ? lockdep_init_map_type+0x5c/0x280 [ 406.266232][T10081] ? __init_waitqueue_head+0xca/0x150 [ 406.266293][T10081] rfkill_register+0x1ad/0xb40 [ 406.266342][T10081] nfc_register_device+0x11f/0x3c0 [ 406.266381][T10081] nci_register_device+0x7f1/0xb80 [ 406.266445][T10081] ? __pfx_nci_register_device+0x10/0x10 [ 406.266503][T10081] ? lockdep_init_map_type+0x5c/0x280 [ 406.266556][T10081] virtual_ncidev_open+0x141/0x220 [ 406.266591][T10081] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 406.266625][T10081] misc_open+0x35d/0x420 [ 406.266663][T10081] ? __pfx_misc_open+0x10/0x10 [ 406.266699][T10081] chrdev_open+0x234/0x6a0 [ 406.266735][T10081] ? __pfx_apparmor_file_open+0x10/0x10 [ 406.266768][T10081] ? __pfx_chrdev_open+0x10/0x10 [ 406.266810][T10081] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 406.266853][T10081] do_dentry_open+0x744/0x1c10 [ 406.266888][T10081] ? __pfx_chrdev_open+0x10/0x10 [ 406.266937][T10081] vfs_open+0x82/0x3f0 [ 406.266989][T10081] path_openat+0x1de4/0x2cb0 [ 406.267040][T10081] ? __pfx_path_openat+0x10/0x10 [ 406.267079][T10081] ? __lock_acquire+0xb8a/0x1c90 [ 406.267128][T10081] do_filp_open+0x20b/0x470 [ 406.267167][T10081] ? __pfx_do_filp_open+0x10/0x10 [ 406.267235][T10081] ? alloc_fd+0x471/0x7d0 [ 406.267280][T10081] do_sys_openat2+0x11b/0x1d0 [ 406.267327][T10081] ? __pfx_do_sys_openat2+0x10/0x10 [ 406.267376][T10081] ? ktime_get+0x1a7/0x310 [ 406.267426][T10081] ? kvm_sched_clock_read+0x11/0x20 [ 406.267476][T10081] ? sched_clock+0x38/0x60 [ 406.267526][T10081] __x64_sys_openat+0x174/0x210 [ 406.267577][T10081] ? __pfx___x64_sys_openat+0x10/0x10 [ 406.267646][T10081] do_syscall_64+0xcd/0x490 [ 406.267683][T10081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.267718][T10081] RIP: 0033:0x7fe634b8eb69 [ 406.267746][T10081] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 406.267779][T10081] RSP: 002b:00007fe6359ea038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 406.267811][T10081] RAX: ffffffffffffffda RBX: 00007fe634db5fa0 RCX: 00007fe634b8eb69 [ 406.267833][T10081] RDX: 0000000000000002 RSI: 0000200000000500 RDI: ffffffffffffff9c [ 406.267856][T10081] RBP: 00007fe634c11df1 R08: 0000000000000000 R09: 0000000000000000 [ 406.267877][T10081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 406.267897][T10081] R13: 0000000000000000 R14: 00007fe634db5fa0 R15: 00007ffe7cf39b68 [ 406.267940][T10081] [ 406.657164][ C1] vkms_vblank_simulate: vblank timer overrun [ 407.266277][T10093] netlink: 24 bytes leftover after parsing attributes in process `syz.1.892'. [ 407.362331][T10100] ACPI: Can not change Invalid GPE/Fixed Event status [ 409.152518][T10117] i2c i2c-0: delete_device: Can't find device in list [ 409.979876][T10126] ubi0: attaching mtd0 [ 410.093668][T10126] ubi0: scanning is finished [ 410.099006][T10126] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 410.346831][T10126] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 413.431162][T10190] FAULT_INJECTION: forcing a failure. [ 413.431162][T10190] name failslab, interval 1, probability 0, space 0, times 0 [ 413.568613][T10190] CPU: 1 UID: 0 PID: 10190 Comm: syz.3.910 Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(full) [ 413.568664][T10190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 413.568684][T10190] Call Trace: [ 413.568695][T10190] [ 413.568707][T10190] dump_stack_lvl+0x16c/0x1f0 [ 413.568745][T10190] should_fail_ex+0x512/0x640 [ 413.568797][T10190] ? fs_reclaim_acquire+0xae/0x150 [ 413.568857][T10190] should_failslab+0xc2/0x120 [ 413.568906][T10190] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 413.568949][T10190] ? security_inode_alloc+0x3b/0x2b0 [ 413.569016][T10190] security_inode_alloc+0x3b/0x2b0 [ 413.569071][T10190] inode_init_always_gfp+0xce4/0x1030 [ 413.569116][T10190] alloc_inode+0x86/0x240 [ 413.569163][T10190] new_inode+0x22/0x1c0 [ 413.569214][T10190] debugfs_create_symlink+0xd3/0x320 [ 413.569272][T10190] ref_tracker_dir_symlink+0x255/0x360 [ 413.569331][T10190] ? __pfx_ref_tracker_dir_symlink+0x10/0x10 [ 413.569451][T10190] net_ns_net_init+0x140/0x220 [ 413.569489][T10190] ? __pfx_net_ns_net_init+0x10/0x10 [ 413.569521][T10190] ops_init+0x1e2/0x5f0 [ 413.569560][T10190] setup_net+0x10f/0x380 [ 413.569594][T10190] ? lockdep_init_map_type+0x5c/0x280 [ 413.569643][T10190] ? __pfx_setup_net+0x10/0x10 [ 413.569680][T10190] ? debug_mutex_init+0x37/0x70 [ 413.569751][T10190] copy_net_ns+0x2a6/0x5f0 [ 413.569796][T10190] create_new_namespaces+0x3ea/0xa90 [ 413.569846][T10190] copy_namespaces+0x468/0x560 [ 413.569886][T10190] copy_process+0x2822/0x7690 [ 413.569928][T10190] ? preempt_schedule_thunk+0x16/0x30 [ 413.569994][T10190] ? __pfx_copy_process+0x10/0x10 [ 413.570045][T10190] ? futex_private_hash_put+0x176/0x300 [ 413.570092][T10190] ? futex_private_hash_put+0x18a/0x300 [ 413.570140][T10190] kernel_clone+0xfc/0x930 [ 413.570184][T10190] ? __pfx_futex_wake+0x10/0x10 [ 413.570233][T10190] ? __pfx_kernel_clone+0x10/0x10 [ 413.570273][T10190] ? __pfx_vfs_writev+0x10/0x10 [ 413.570331][T10190] __do_sys_clone+0xce/0x120 [ 413.570383][T10190] ? __pfx___do_sys_clone+0x10/0x10 [ 413.570449][T10190] ? xfd_validate_state+0x61/0x180 [ 413.570497][T10190] ? __pfx_do_writev+0x10/0x10 [ 413.570544][T10190] do_syscall_64+0xcd/0x490 [ 413.570583][T10190] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.570618][T10190] RIP: 0033:0x7f82cab8eb69 [ 413.570646][T10190] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 413.570680][T10190] RSP: 002b:00007f82cb965fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 413.570712][T10190] RAX: ffffffffffffffda RBX: 00007f82cadb5fa0 RCX: 00007f82cab8eb69 [ 413.570744][T10190] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000042ae1411 [ 413.570766][T10190] RBP: 00007f82cac11df1 R08: 0000000000000000 R09: 0000000000000000 [ 413.570788][T10190] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 413.570808][T10190] R13: 0000000000000000 R14: 00007f82cadb5fa0 R15: 00007fffe7675518 [ 413.570852][T10190] [ 413.571863][T10190] debugfs: out of free dentries, can not create symlink 'netns-d1-4026533651-refcnt' [ 414.919300][T10216] ptrace attach of "./syz-executor exec"[5849] was attempted by ""[10216] [ 416.265367][T10230] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.205378][T10241] zswap: compressor not available [ 418.610020][T10258] vhci_hcd: invalid port number 16 [ 418.632502][T10258] vhci_hcd: invalid port number 16 [ 419.020281][T10273] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 421.202932][T10302] ACPI: Can not change Invalid GPE/Fixed Event status [ 423.131758][T10328] vhci_hcd: invalid port number 16 [ 423.137458][T10328] vhci_hcd: invalid port number 16 [ 424.295045][T10342] vhci_hcd: invalid port number 16 [ 424.310955][T10342] vhci_hcd: invalid port number 16 [ 425.574311][ T5164] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 427.226083][T10393] vhci_hcd: invalid port number 16 [ 427.235039][T10393] vhci_hcd: invalid port number 16 [ 429.295707][ T36] [drm:drm_crtc_add_crc_entry] *ERROR* Overflow of CRC buffer, userspace reads too slow. [ 429.811228][T10433] FAULT_INJECTION: forcing a failure. [ 429.811228][T10433] name failslab, interval 1, probability 0, space 0, times 0 [ 429.848954][T10433] CPU: 1 UID: 0 PID: 10433 Comm: syz.0.961 Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(full) [ 429.849014][T10433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 429.849034][T10433] Call Trace: [ 429.849045][T10433] [ 429.849057][T10433] dump_stack_lvl+0x16c/0x1f0 [ 429.849096][T10433] should_fail_ex+0x512/0x640 [ 429.849163][T10433] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 429.849211][T10433] should_failslab+0xc2/0x120 [ 429.849257][T10433] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 429.849300][T10433] ? ptlock_alloc+0x1f/0x70 [ 429.849339][T10433] ptlock_alloc+0x1f/0x70 [ 429.849372][T10433] pte_alloc_one+0x82/0x3a0 [ 429.849408][T10433] __pte_alloc+0x6d/0x3c0 [ 429.849455][T10433] ? __pfx___pte_alloc+0x10/0x10 [ 429.849501][T10433] ? __pfx___might_resched+0x10/0x10 [ 429.849535][T10433] ? copy_page_range+0x2143/0x5da0 [ 429.849576][T10433] copy_page_range+0x3c59/0x5da0 [ 429.849661][T10433] ? __pfx_copy_page_range+0x10/0x10 [ 429.849708][T10433] ? __pfx___might_resched+0x10/0x10 [ 429.849738][T10433] ? __pfx_mas_store+0x10/0x10 [ 429.849772][T10433] ? __vma_enter_locked+0x163/0x3f0 [ 429.849813][T10433] ? dup_mmap+0xe38/0x21d0 [ 429.849842][T10433] ? down_write+0x14d/0x200 [ 429.849881][T10433] ? up_write+0x1b2/0x520 [ 429.849932][T10433] dup_mmap+0xe88/0x21d0 [ 429.849988][T10433] ? __pfx_dup_mmap+0x10/0x10 [ 429.850050][T10433] copy_process+0x4081/0x7690 [ 429.850094][T10433] ? __pfx___futex_wait+0x10/0x10 [ 429.850159][T10433] ? __pfx_copy_process+0x10/0x10 [ 429.850201][T10433] ? futex_private_hash_put+0x176/0x300 [ 429.850244][T10433] ? futex_private_hash_put+0x18a/0x300 [ 429.850287][T10433] kernel_clone+0xfc/0x930 [ 429.850330][T10433] ? __pfx_kernel_clone+0x10/0x10 [ 429.850398][T10433] __do_sys_clone+0xce/0x120 [ 429.850440][T10433] ? __pfx___do_sys_clone+0x10/0x10 [ 429.850504][T10433] ? xfd_validate_state+0x61/0x180 [ 429.850553][T10433] ? __pfx_do_writev+0x10/0x10 [ 429.850598][T10433] do_syscall_64+0xcd/0x490 [ 429.850634][T10433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.850668][T10433] RIP: 0033:0x7f0eb978eb69 [ 429.850695][T10433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 429.850728][T10433] RSP: 002b:00007f0eb75f5fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 429.850760][T10433] RAX: ffffffffffffffda RBX: 00007f0eb99b5fa0 RCX: 00007f0eb978eb69 [ 429.850783][T10433] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000042ae1411 [ 429.850805][T10433] RBP: 00007f0eb9811df1 R08: 0000000000000000 R09: 0000000000000000 [ 429.850826][T10433] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 429.850846][T10433] R13: 0000000000000000 R14: 00007f0eb99b5fa0 R15: 00007ffe5319dee8 [ 429.850891][T10433] [ 431.046009][T10454] openvswitch: netlink: IP tunnel dst address not specified [ 431.329008][T10466] ptrace attach of "./syz-executor exec"[5842] was attempted by ""[10466] [ 432.939730][T10497] ICMPv6: process `syz.0.978' is using deprecated sysctl (syscall) net.ipv6.neigh.ipvlan1.retrans_time - use net.ipv6.neigh.ipvlan1.retrans_time_ms instead [ 439.554125][T10564] ptrace attach of "./syz-executor exec"[10592] was attempted by "./syz-executor exec"[10564] [ 440.819591][T10603] netlink: 64 bytes leftover after parsing attributes in process `syz.1.999'. [ 442.606617][T10630] vivid-007: ================= START STATUS ================= [ 442.632695][T10630] vivid-007: Generate PTS: true [ 442.640269][T10630] vivid-007: Generate SCR: true [ 442.652918][T10630] tpg source WxH: 320x240 (Y'CbCr) [ 442.662680][T10630] tpg field: 1 [ 442.668922][T10630] tpg crop: (0,0)/320x240 [ 442.673973][T10630] tpg compose: (0,0)/320x240 [ 442.679240][T10630] tpg colorspace: 8 [ 442.683180][T10630] tpg transfer function: 0/0 [ 442.688237][T10630] tpg Y'CbCr encoding: 0/0 [ 442.693243][T10630] tpg quantization: 0/0 [ 442.697576][T10630] tpg RGB range: 0/2 [ 442.701647][T10630] vivid-007: ================== END STATUS ================== [ 447.000364][T10683] FAULT_INJECTION: forcing a failure. [ 447.000364][T10683] name failslab, interval 1, probability 0, space 0, times 0 [ 447.122615][T10683] CPU: 0 UID: 0 PID: 10683 Comm: syz.0.1015 Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(full) [ 447.122666][T10683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 447.122688][T10683] Call Trace: [ 447.122707][T10683] [ 447.122720][T10683] dump_stack_lvl+0x16c/0x1f0 [ 447.122759][T10683] should_fail_ex+0x512/0x640 [ 447.122807][T10683] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 447.122853][T10683] should_failslab+0xc2/0x120 [ 447.122899][T10683] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 447.122942][T10683] ? alloc_inode+0x61/0x240 [ 447.122989][T10683] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 447.123036][T10683] alloc_inode+0x61/0x240 [ 447.123080][T10683] new_inode+0x22/0x1c0 [ 447.123125][T10683] debugfs_create_symlink+0xd3/0x320 [ 447.123179][T10683] ref_tracker_dir_symlink+0x255/0x360 [ 447.123234][T10683] ? __pfx_ref_tracker_dir_symlink+0x10/0x10 [ 447.123350][T10683] net_ns_net_init+0x140/0x220 [ 447.123386][T10683] ? __pfx_net_ns_net_init+0x10/0x10 [ 447.123417][T10683] ops_init+0x1e2/0x5f0 [ 447.123454][T10683] setup_net+0x10f/0x380 [ 447.123484][T10683] ? lockdep_init_map_type+0x5c/0x280 [ 447.123530][T10683] ? __pfx_setup_net+0x10/0x10 [ 447.123567][T10683] ? debug_mutex_init+0x37/0x70 [ 447.123626][T10683] copy_net_ns+0x2a6/0x5f0 [ 447.123669][T10683] create_new_namespaces+0x3ea/0xa90 [ 447.123724][T10683] copy_namespaces+0x468/0x560 [ 447.123764][T10683] copy_process+0x2822/0x7690 [ 447.123827][T10683] ? __pfx_copy_process+0x10/0x10 [ 447.123867][T10683] ? futex_private_hash_put+0x176/0x300 [ 447.123912][T10683] ? futex_private_hash_put+0x18a/0x300 [ 447.123956][T10683] kernel_clone+0xfc/0x930 [ 447.124000][T10683] ? __pfx_kernel_clone+0x10/0x10 [ 447.124066][T10683] __do_sys_clone+0xce/0x120 [ 447.124107][T10683] ? __pfx___do_sys_clone+0x10/0x10 [ 447.124168][T10683] ? xfd_validate_state+0x61/0x180 [ 447.124215][T10683] ? __pfx_do_writev+0x10/0x10 [ 447.124261][T10683] do_syscall_64+0xcd/0x490 [ 447.124297][T10683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.124332][T10683] RIP: 0033:0x7f0eb978eb69 [ 447.124359][T10683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 447.124393][T10683] RSP: 002b:00007f0eb75d4fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 447.124425][T10683] RAX: ffffffffffffffda RBX: 00007f0eb99b6080 RCX: 00007f0eb978eb69 [ 447.124447][T10683] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000042ae1411 [ 447.124467][T10683] RBP: 00007f0eb9811df1 R08: 0000000000000000 R09: 0000000000000000 [ 447.124487][T10683] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 447.124507][T10683] R13: 0000000000000000 R14: 00007f0eb99b6080 R15: 00007ffe5319dee8 [ 447.124550][T10683] [ 447.438385][T10683] debugfs: out of free dentries, can not create symlink 'netns-ec-4026533652-refcnt' [ 447.811815][T10695] vivid-007: ================= START STATUS ================= [ 447.937545][T10695] vivid-007: Generate PTS: true [ 447.942534][T10695] vivid-007: Generate SCR: true [ 447.954304][T10695] tpg source WxH: 320x240 (Y'CbCr) [ 447.976269][T10695] tpg field: 1 [ 447.979953][T10695] tpg crop: (0,0)/320x240 [ 447.985041][T10695] tpg compose: (0,0)/320x240 [ 447.992606][T10695] tpg colorspace: 8 [ 447.998395][T10695] tpg transfer function: 0/0 [ 448.003316][T10695] tpg Y'CbCr encoding: 0/0 [ 448.057182][T10695] tpg quantization: 0/0 [ 448.193901][T10695] tpg RGB range: 0/2 [ 448.227101][T10699] netlink: 326 bytes leftover after parsing attributes in process `syz.2.1020'. [ 448.262715][T10695] vivid-007: ================== END STATUS ================== [ 449.434935][T10717] vhci_hcd: invalid port number 16 [ 449.485322][T10717] vhci_hcd: invalid port number 16 [ 450.734921][T10753] netlink: 326 bytes leftover after parsing attributes in process `syz.0.1031'. [ 450.803189][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 450.835684][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 451.868798][T10763] vhci_hcd: invalid port number 16 [ 451.874101][T10763] vhci_hcd: invalid port number 16 [ 451.943292][T10767] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1037'. [ 457.341686][T10862] vhci_hcd: invalid port number 16 [ 457.347396][T10862] vhci_hcd: invalid port number 16 [ 459.794418][T10907] vhci_hcd: invalid port number 16 [ 459.801088][T10907] vhci_hcd: invalid port number 16 [ 459.858479][T10921] FAULT_INJECTION: forcing a failure. [ 459.858479][T10921] name failslab, interval 1, probability 0, space 0, times 0 [ 459.901493][T10921] CPU: 0 UID: 0 PID: 10921 Comm: syz.0.1071 Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(full) [ 459.901541][T10921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 459.901562][T10921] Call Trace: [ 459.901573][T10921] [ 459.901586][T10921] dump_stack_lvl+0x16c/0x1f0 [ 459.901624][T10921] should_fail_ex+0x512/0x640 [ 459.901670][T10921] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 459.901708][T10921] should_failslab+0xc2/0x120 [ 459.901752][T10921] __kmalloc_cache_noprof+0x6a/0x3e0 [ 459.901787][T10921] ? acct_on+0x57/0x870 [ 459.901837][T10921] acct_on+0x57/0x870 [ 459.901883][T10921] __x64_sys_acct+0xaf/0x230 [ 459.902059][T10921] ? lockdep_hardirqs_on+0x7c/0x110 [ 459.902111][T10921] do_syscall_64+0xcd/0x490 [ 459.902146][T10921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.902179][T10921] RIP: 0033:0x7f0eb978eb69 [ 459.902205][T10921] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 459.902237][T10921] RSP: 002b:00007f0eb75f6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a3 [ 459.902265][T10921] RAX: ffffffffffffffda RBX: 00007f0eb99b5fa0 RCX: 00007f0eb978eb69 [ 459.902287][T10921] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000080 [ 459.902306][T10921] RBP: 00007f0eb9811df1 R08: 0000000000000000 R09: 0000000000000000 [ 459.902325][T10921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 459.902343][T10921] R13: 0000000000000000 R14: 00007f0eb99b5fa0 R15: 00007ffe5319dee8 [ 459.902384][T10921] [ 460.073020][ C0] vkms_vblank_simulate: vblank timer overrun [ 460.135598][T10921] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1071'. [ 460.146433][T10921] netlink: 25 bytes leftover after parsing attributes in process `syz.0.1071'. [ 460.658818][T10931] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 461.918828][T10954] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1076'. [ 462.475867][T10966] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 463.449875][T10976] FAULT_INJECTION: forcing a failure. [ 463.449875][T10976] name failslab, interval 1, probability 0, space 0, times 0 [ 463.468836][T10976] CPU: 0 UID: 0 PID: 10976 Comm: syz.1.1085 Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(full) [ 463.468881][T10976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 463.468901][T10976] Call Trace: [ 463.468911][T10976] [ 463.468922][T10976] dump_stack_lvl+0x16c/0x1f0 [ 463.468960][T10976] should_fail_ex+0x512/0x640 [ 463.469007][T10976] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 463.469052][T10976] should_failslab+0xc2/0x120 [ 463.469096][T10976] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 463.469136][T10976] ? d_instantiate+0x77/0x90 [ 463.469173][T10976] ? alloc_empty_file+0x55/0x1e0 [ 463.469225][T10976] alloc_empty_file+0x55/0x1e0 [ 463.469272][T10976] alloc_file_pseudo+0x13a/0x230 [ 463.469318][T10976] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 463.469386][T10976] __shmem_file_setup+0x1a3/0x330 [ 463.469424][T10976] shmem_zero_setup+0x93/0x1a0 [ 463.469467][T10976] __mmap_region+0x1ece/0x25e0 [ 463.469513][T10976] ? __pfx___mmap_region+0x10/0x10 [ 463.469566][T10976] ? find_held_lock+0x2b/0x80 [ 463.469605][T10976] ? finish_task_switch.isra.0+0x221/0xc10 [ 463.469636][T10976] ? lockdep_hardirqs_on+0x7c/0x110 [ 463.469693][T10976] ? finish_task_switch.isra.0+0x221/0xc10 [ 463.469727][T10976] ? rcu_is_watching+0x12/0xc0 [ 463.469759][T10976] ? trace_sched_exit_tp+0xd1/0x120 [ 463.469792][T10976] ? __schedule+0x11a3/0x5df0 [ 463.469980][T10976] ? trace_cap_capable+0x18d/0x200 [ 463.470046][T10976] mmap_region+0x1ab/0x3f0 [ 463.470087][T10976] ? __get_unmapped_area+0x267/0x440 [ 463.470143][T10976] do_mmap+0xa3e/0x1210 [ 463.470202][T10976] ? __pfx_do_mmap+0x10/0x10 [ 463.470255][T10976] ? __pfx_down_write_killable+0x10/0x10 [ 463.470304][T10976] vm_mmap_pgoff+0x281/0x450 [ 463.470362][T10976] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 463.470422][T10976] ? __x64_sys_futex+0x1e0/0x4c0 [ 463.470465][T10976] ? __x64_sys_futex+0x1e9/0x4c0 [ 463.470510][T10976] ksys_mmap_pgoff+0x7d/0x5c0 [ 463.470560][T10976] ? xfd_validate_state+0x61/0x180 [ 463.470609][T10976] ? __pfx_ksys_write+0x10/0x10 [ 463.470650][T10976] __x64_sys_mmap+0x125/0x190 [ 463.470707][T10976] do_syscall_64+0xcd/0x490 [ 463.470843][T10976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.470881][T10976] RIP: 0033:0x7fe634b8eb69 [ 463.470906][T10976] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 463.470937][T10976] RSP: 002b:00007fe6359ea038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 463.470969][T10976] RAX: ffffffffffffffda RBX: 00007fe634db5fa0 RCX: 00007fe634b8eb69 [ 463.470991][T10976] RDX: 00004000000000df RSI: 0000000000020009 RDI: 0000000000000000 [ 463.471009][T10976] RBP: 00007fe634c11df1 R08: 0000000000000401 R09: 0000000000008000 [ 463.471025][T10976] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 463.471046][T10976] R13: 0000000000000000 R14: 00007fe634db5fa0 R15: 00007ffe7cf39b68 [ 463.471085][T10976] [ 464.580068][T10996] FAULT_INJECTION: forcing a failure. [ 464.580068][T10996] name failslab, interval 1, probability 0, space 0, times 0 [ 464.593911][T10996] CPU: 1 UID: 0 PID: 10996 Comm: syz.1.1089 Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(full) [ 464.593954][T10996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 464.593973][T10996] Call Trace: [ 464.593984][T10996] [ 464.593995][T10996] dump_stack_lvl+0x16c/0x1f0 [ 464.594031][T10996] should_fail_ex+0x512/0x640 [ 464.594079][T10996] ? __kvmalloc_node_noprof+0x124/0x620 [ 464.594121][T10996] should_failslab+0xc2/0x120 [ 464.594167][T10996] __kvmalloc_node_noprof+0x137/0x620 [ 464.594203][T10996] ? get_pid_task+0xfc/0x250 [ 464.594248][T10996] ? file_tty_write.constprop.0+0x6ef/0x9b0 [ 464.594306][T10996] ? file_tty_write.constprop.0+0x6ef/0x9b0 [ 464.594352][T10996] file_tty_write.constprop.0+0x6ef/0x9b0 [ 464.594405][T10996] ? rw_verify_area+0xcf/0x680 [ 464.594463][T10996] vfs_write+0x6c7/0x1150 [ 464.594499][T10996] ? __pfx_tty_write+0x10/0x10 [ 464.594547][T10996] ? __pfx_vfs_write+0x10/0x10 [ 464.594579][T10996] ? find_held_lock+0x2b/0x80 [ 464.594645][T10996] ksys_write+0x12a/0x250 [ 464.594681][T10996] ? __pfx_ksys_write+0x10/0x10 [ 464.594728][T10996] do_syscall_64+0xcd/0x490 [ 464.594765][T10996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.594799][T10996] RIP: 0033:0x7fe634b8eb69 [ 464.594822][T10996] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 464.594854][T10996] RSP: 002b:00007fe6359c9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 464.594889][T10996] RAX: ffffffffffffffda RBX: 00007fe634db6080 RCX: 00007fe634b8eb69 [ 464.594912][T10996] RDX: 000000000000ffd8 RSI: 0000000000000000 RDI: 0000000000000003 [ 464.594931][T10996] RBP: 00007fe6359c9090 R08: 0000000000000000 R09: 0000000000000000 [ 464.594952][T10996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 464.594971][T10996] R13: 0000000000000000 R14: 00007fe634db6080 R15: 00007ffe7cf39b68 [ 464.595014][T10996] [ 465.607739][T11006] bond0: no command found in slaves file - use +ifname or -ifname [ 465.636033][T11006] bond0: no command found in slaves file - use +ifname or -ifname [ 465.673370][T11006] bond0: no command found in slaves file - use +ifname or -ifname [ 465.684619][T11006] bond0: no command found in slaves file - use +ifname or -ifname [ 465.695211][T11006] bond0: no command found in slaves file - use +ifname or -ifname [ 465.705111][T11006] bond0: no command found in slaves file - use +ifname or -ifname [ 465.715029][T11006] bond0: no command found in slaves file - use +ifname or -ifname [ 465.724791][T11006] bond0: no command found in slaves file - use +ifname or -ifname [ 465.733144][T11006] bond0: no command found in slaves file - use +ifname or -ifname [ 465.742239][T11006] bond0: no command found in slaves file - use +ifname or -ifname [ 465.750984][T11006] bond0: no command found in slaves file - use +ifname or -ifname [ 465.759929][T11006] bond0: no command found in slaves file - use +ifname or -ifname [ 465.769223][T11006] bond0: no command found in slaves file - use +ifname or -ifname [ 465.777985][T11006] bond0: no command found in slaves file - use +ifname or -ifname [ 465.786681][T11006] bond0: no command found in slaves file - use +ifname or -ifname [ 465.796134][T11006] bond0: no command found in slaves file - use +ifname or -ifname [ 465.805612][T11006] bond0: no command found in slaves file - use +ifname or -ifname [ 465.815605][T11006] bond0: no command found in slaves file - use +ifname or -ifname [ 465.825147][T11006] bond0: no command found in slaves file - use +ifname or -ifname [ 465.833824][T11006] bond0: no command found in slaves file - use +ifname or -ifname [ 465.844828][T11006] bond0: no command found in slaves file - use +ifname or -ifname [ 465.853431][T11006] bond0: no command found in slaves file - use +ifname or -ifname [ 465.864776][T11006] bond0: no command found in slaves file - use +ifname or -ifname [ 465.873607][T11006] bond0: no command found in slaves file - use +ifname or -ifname [ 465.882142][T11006] bond0: no command found in slaves file - use +ifname or -ifname [ 465.891608][T11006] bond0: no command found in slaves file - use +ifname or -ifname [ 465.900839][T11006] bond0: no command found in slaves file - use +ifname or -ifname [ 465.909894][T11006] bond0: no command found in slaves file - use +ifname or -ifname [ 465.918180][T11006] bond0: no command found in slaves file - use +ifname or -ifname [ 465.926292][T11006] bond0: no command found in slaves file - use +ifname or -ifname [ 465.934837][T11006] bond0: no command found in slaves file - use +ifname or -ifname [ 465.943357][T11006] bond0: no command found in slaves file - use +ifname or -ifname [ 465.951754][T11006] bond0: no command found in slaves file - use +ifname or -ifname [ 465.960685][T11006] bond0: no command found in slaves file - use +ifname or -ifname [ 465.969362][T11006] bond0: no command found in slaves file - use +ifname or -ifname [ 465.977756][T11006] bond0: no command found in slaves file - use +ifname or -ifname [ 465.986470][T11006] bond0: no command found in slaves file - use +ifname or -ifname [ 465.995286][T11006] bond0: no command found in slaves file - use +ifname or -ifname [ 466.003761][T11006] bond0: no command found in slaves file - use +ifname or -ifname [ 466.013165][T11006] bond0: no command found in slaves file - use +ifname or -ifname [ 466.021896][T11006] bond0: no command found in slaves file - use +ifname or -ifname [ 466.030098][T11006] bond0: no command found in slaves file - use +ifname or -ifname [ 466.038780][T11006] bond0: no command found in slaves file - use +ifname or -ifname [ 466.047121][T11006] bond0: no command found in slaves file - use +ifname or -ifname [ 466.057232][T11006] bond0: no command found in slaves file - use +ifname or -ifname [ 466.065949][T11006] bond0: no command found in slaves file - use +ifname or -ifname [ 466.074397][T11006] bond0: no command found in slaves file - use +ifname or -ifname [ 466.083333][T11006] bond0: no command found in slaves file - use +ifname or -ifname [ 466.091365][T11006] bond0: no command found in slaves file - use +ifname or -ifname [ 466.100291][T11006] bond0: no command found in slaves file - use +ifname or -ifname [ 466.109250][T11006] bond0: no command found in slaves file - use +ifname or -ifname [ 466.117733][T11006] bond0: no command found in slaves file - use +ifname or -ifname [ 466.126285][T11006] bond0: no command found in slaves file - use +ifname or -ifname [ 466.135899][T11006] bond0: no command found in slaves file - use +ifname or -ifname [ 466.144446][T11006] bond0: no command found in slaves file - use +ifname or -ifname [ 466.153437][T11006] bond0: no command found in slaves file - use +ifname or -ifname [ 466.161944][T11006] bond0: no command found in slaves file - use +ifname or -ifname [ 466.170136][T11006] bond0: no command found in slaves file - use +ifname or -ifname [ 466.178872][T11006] bond0: no command found in slaves file - use +ifname or -ifname [ 466.187166][T11006] bond0: no command found in slaves file - use +ifname or -ifname [ 466.195649][T11006] bond0: no command found in slaves file - use +ifname or -ifname [ 466.205118][T11006] bond0: no command found in slaves file - use +ifname or -ifname [ 466.213460][T11006] bond0: no command found in slaves file - use +ifname or -ifname [ 466.221956][T11006] bond0: no command found in slaves file - use +ifname or -ifname [ 466.230664][T11006] bond0: no command found in slaves file - use +ifname or -ifname [ 466.314696][ T5164] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 467.849347][T11023] : renamed from gre0 (while UP) [ 468.172317][T11032] netlink: 'syz.2.1096': attribute type 64 has an invalid length. [ 468.180877][T11032] netlink: 74 bytes leftover after parsing attributes in process `syz.2.1096'. [ 468.244492][T11035] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1096'. [ 471.068572][T11074] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1104'. [ 472.975211][T11109] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 473.561043][T11114] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1111'. [ 473.822114][T11116] random: crng reseeded on system resumption [ 473.862962][T11122] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1114'. [ 477.405026][T11162] netlink: 'syz.1.1123': attribute type 11 has an invalid length. [ 477.405053][T11162] netlink: 'syz.1.1123': attribute type 11 has an invalid length. [ 477.405070][T11162] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1123'. [ 477.405086][T11162] netlink: 67 bytes leftover after parsing attributes in process `syz.1.1123'. [ 477.405101][T11162] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1123'. [ 477.405116][T11162] netlink: 200 bytes leftover after parsing attributes in process `syz.1.1123'. [ 479.832329][T11193] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1128'. [ 481.869413][T11233] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1138'. [ 484.086196][T11257] vivid-009: ================= START STATUS ================= [ 484.086241][T11257] vivid-009: Enable Output Cropping: true [ 484.086281][T11257] vivid-009: Enable Output Composing: true [ 484.086315][T11257] vivid-009: Enable Output Scaler: true [ 484.086351][T11257] vivid-009: Tx RGB Quantization Range: Automatic [ 484.086387][T11257] vivid-009: Transmit Mode: HDMI [ 484.086430][T11257] vivid-009: Hotplug Present: 0x00000000 [ 484.086466][T11257] vivid-009: RxSense Present: 0x00000000 [ 484.086502][T11257] vivid-009: EDID Present: 0x00000000 [ 484.086537][T11257] vivid-009: ================== END STATUS ================== [ 486.820677][T11291] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 488.706477][T11309] vivid-003: ================= START STATUS ================= [ 488.732417][T11309] vivid-003: Radio HW Seek Mode: Bounded [ 488.742369][T11309] vivid-003: Radio Programmable HW Seek: false [ 488.758372][T11309] vivid-003: RDS Rx I/O Mode: Block I/O [ 488.764313][T11309] vivid-003: Generate RBDS Instead of RDS: false [ 488.777023][T11309] vivid-003: RDS Reception: true [ 488.782324][T11309] vivid-003: RDS Program Type: 0 inactive [ 488.794145][T11309] vivid-003: RDS PS Name: inactive [ 488.799630][T11309] vivid-003: RDS Radio Text: inactive [ 488.812426][T11309] vivid-003: RDS Traffic Announcement: false inactive [ 488.820034][T11309] vivid-003: RDS Traffic Program: false inactive [ 488.829014][T11309] vivid-003: RDS Music: false inactive [ 488.840852][T11309] vivid-003: ================== END STATUS ================== [ 489.449060][T11325] usb usb36: usbfs: process 11325 (syz.1.1157) did not claim interface 0 before use [ 490.547385][T11340] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1161'. [ 491.109827][T11354] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1165'. [ 492.107339][T11362] vhci_hcd: invalid port number 16 [ 492.247557][T11362] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 492.752230][T11372] random: crng reseeded on system resumption [ 493.578505][ T5164] Bluetooth: hci1: unexpected subevent 0x0c length: 118 > 5 [ 494.102402][T11388] BUG: kernel NULL pointer dereference, address: 0000000000000000 [ 494.110755][T11388] #PF: supervisor instruction fetch in kernel mode [ 494.117562][T11388] #PF: error_code(0x0010) - not-present page [ 494.124033][T11388] PGD 800000002611e067 P4D 800000002611e067 PUD 421bd067 PMD 42136067 PTE 0 [ 494.132934][T11388] Oops: Oops: 0010 [#1] SMP KASAN PTI [ 494.139034][T11388] CPU: 0 UID: 0 PID: 11388 Comm: syz.1.1171 Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(full) [ 494.151535][T11388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 494.161707][T11388] RIP: 0010:0x0 [ 494.165209][T11388] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 494.172716][T11388] RSP: 0018:ffffc9000b1679c8 EFLAGS: 00010283 [ 494.179013][T11388] RAX: 000000000000099d RBX: 0000000000000000 RCX: ffffc9000c45b000 [ 494.187129][T11388] RDX: 0000000000080000 RSI: ffffea0001325800 RDI: ffff88801d29f500 [ 494.195425][T11388] RBP: ffffea0001325800 R08: 0000000000000007 R09: 0000000000000000 [ 494.203871][T11388] R10: 0000000000000000 R11: 0000000000000001 R12: 1ffff9200162cf3a [ 494.212067][T11388] R13: ffff88801d29f500 R14: 0000000000000000 R15: dffffc0000000000 [ 494.220196][T11388] FS: 00007fe6359ea6c0(0000) GS:ffff888124727000(0000) knlGS:0000000000000000 [ 494.229254][T11388] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 494.235973][T11388] CR2: ffffffffffffffd6 CR3: 00000000327f0000 CR4: 00000000003526f0 [ 494.244181][T11388] Call Trace: [ 494.247486][T11388] [ 494.250717][T11388] filemap_read_folio+0xc8/0x2a0 [ 494.255963][T11388] ? __pfx_filemap_read_folio+0x10/0x10 [ 494.261641][T11388] ? __filemap_get_folio+0x32b/0xc30 [ 494.267324][T11388] ? down_read+0x13d/0x480 [ 494.271960][T11388] do_read_cache_folio+0x263/0x5c0 [ 494.277232][T11388] freader_get_folio+0x337/0x930 [ 494.282214][T11388] freader_fetch+0xc2/0x5e0 [ 494.287019][T11388] ? mt_find+0x3ef/0xa30 [ 494.291308][T11388] __build_id_parse.isra.0+0xec/0x7a0 [ 494.296856][T11388] ? __pfx___build_id_parse.isra.0+0x10/0x10 [ 494.303418][T11388] ? __pfx_find_vma+0x10/0x10 [ 494.308146][T11388] do_procmap_query+0xd96/0x1090 [ 494.313157][T11388] ? __pfx_do_procmap_query+0x10/0x10 [ 494.318977][T11388] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 494.325313][T11388] ? do_vfs_ioctl+0x128/0x14f0 [ 494.330156][T11388] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 494.335584][T11388] ? __fget_files+0x20e/0x3c0 [ 494.340504][T11388] procfs_procmap_ioctl+0x7d/0xb0 [ 494.345763][T11388] ? __pfx_procfs_procmap_ioctl+0x10/0x10 [ 494.351953][T11388] __x64_sys_ioctl+0x18e/0x210 [ 494.356973][T11388] do_syscall_64+0xcd/0x490 [ 494.362102][T11388] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.368155][T11388] RIP: 0033:0x7fe634b8eb69 [ 494.373077][T11388] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 494.393262][T11388] RSP: 002b:00007fe6359ea038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 494.401984][T11388] RAX: ffffffffffffffda RBX: 00007fe634db5fa0 RCX: 00007fe634b8eb69 [ 494.410522][T11388] RDX: 0000200000000080 RSI: 00000000c0686611 RDI: 0000000000000007 [ 494.418730][T11388] RBP: 00007fe634c11df1 R08: 0000000000000000 R09: 0000000000000000 [ 494.427205][T11388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 494.435313][T11388] R13: 0000000000000000 R14: 00007fe634db5fa0 R15: 00007ffe7cf39b68 [ 494.443696][T11388] [ 494.446748][T11388] Modules linked in: [ 494.450816][T11388] CR2: 0000000000000000 [ 494.455360][T11388] ---[ end trace 0000000000000000 ]--- [ 494.461288][T11388] RIP: 0010:0x0 [ 494.464898][T11388] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 494.472301][T11388] RSP: 0018:ffffc9000b1679c8 EFLAGS: 00010283 [ 494.478432][T11388] RAX: 000000000000099d RBX: 0000000000000000 RCX: ffffc9000c45b000 [ 494.486542][T11388] RDX: 0000000000080000 RSI: ffffea0001325800 RDI: ffff88801d29f500 [ 494.494651][T11388] RBP: ffffea0001325800 R08: 0000000000000007 R09: 0000000000000000 [ 494.502754][T11388] R10: 0000000000000000 R11: 0000000000000001 R12: 1ffff9200162cf3a [ 494.510967][T11388] R13: ffff88801d29f500 R14: 0000000000000000 R15: dffffc0000000000 [ 494.519069][T11388] FS: 00007fe6359ea6c0(0000) GS:ffff888124727000(0000) knlGS:0000000000000000 [ 494.528318][T11388] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 494.534965][T11388] CR2: ffffffffffffffd6 CR3: 00000000327f0000 CR4: 00000000003526f0 [ 494.543124][T11388] Kernel panic - not syncing: Fatal exception [ 494.550174][T11388] Kernel Offset: disabled [ 494.554526][T11388] Rebooting in 86400 seconds..